substrate-ai 0.20.149 → 0.20.150

package/dist/adapter-registry-DPE1OgrZ.js

@@ -0,0 +1,4 @@
+import { AdapterRegistry } from "./dist-C6pEdj12.js";
+import "./adapter-registry-DXLMTmfD.js";
+
+export { AdapterRegistry };

package/dist/cli/index.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-ByQadq3J.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-CcOYQsgZ.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
-import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-C2CAZDep.js";
+import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-C6pEdj12.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-knD2uWkz.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-BAUlPom3.js";
-import "../errors-Db8EIM9w.js";
+import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-8oNapRvD.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-B9lhuahO.js";
+import "../errors-1xcRMTz_.js";
 import "../routing-DFxoKHDt.js";
 import { WorkGraphRepository } from "../work-graph-repository-DZyJv5pV.js";
 import "../decisions-CzSIEeGP.js";
 import "../decision-router-BAPpON_C.js";
-import "../interactive-prompt-CMBlj6UF.js";
+import "../interactive-prompt-BVTTIU3t.js";
 import "../recovery-engine-BKGBeBnW.js";
 import "../version-manager-impl-qFBiO4Eh.js";
-import { registerUpgradeCommand } from "../upgrade-DOmKCyOY.js";
+import { registerUpgradeCommand } from "../upgrade-DcvPseav.js";
 import { Command } from "commander";
 import { fileURLToPath } from "url";
 import { dirname, join, resolve } from "path";
@@ -624,6 +624,7 @@ const SubstrateConfigSchema = z.object({
 	supervisor_poll_interval_seconds: z.number().int().positive().optional(),
 	retry_budget: z.number().int().positive().optional(),
 	epics_path: z.string().optional(),
+	dispatch: z.object({ permission_profile: z.enum(["skip", "scoped"]).optional() }).strict().optional(),
 	finalization: z.object({
 		mode: z.enum([
 			"merge",
@@ -656,6 +657,7 @@ const PartialSubstrateConfigSchema = z.object({
 	supervisor_poll_interval_seconds: z.number().int().positive().optional(),
 	retry_budget: z.number().int().positive().optional(),
 	epics_path: z.string().optional(),
+	dispatch: z.object({ permission_profile: z.enum(["skip", "scoped"]).optional() }).strict().optional(),
 	finalization: z.object({
 		mode: z.enum([
 			"merge",
@@ -7078,7 +7080,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-WGcvcIYK.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-Bhwd_HX9.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8026,7 +8028,7 @@ function defaultSupervisorDeps() {
 				if (cached === null) {
 					const { AdapterRegistry: AR } = await import(
 						/* @vite-ignore */
-						"../adapter-registry-CauYNA1U.js"
+						"../adapter-registry-DPE1OgrZ.js"
 );
 					cached = new AR();
 					await cached.discoverAndRegister();
@@ -8593,11 +8595,11 @@ async function runSupervisorAction(options, deps = {}) {
 						try {
 							const { createExperimenter } = await import(
 								/* @vite-ignore */
-								"../experimenter-Dm5jUPO6.js"
+								"../experimenter-CRt7RrrW.js"
 );
 							const { getLatestRun: getLatest } = await import(
 								/* @vite-ignore */
-								"../decisions-De43bvYq.js"
+								"../decisions-7ALaVvR9.js"
 );
 							const expAdapter = createDatabaseAdapter({
 								backend: "auto",
@@ -8607,7 +8609,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-CtIc7_rK.js"
+									"../run-B_G9KCd-.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -9132,7 +9134,7 @@ async function runMetricsAction(options) {
 			const routingConfigPath = join(dbDir, "routing.yml");
 			let routingConfig = null;
 			if (existsSync$1(routingConfigPath)) try {
-				const { loadModelRoutingConfig } = await import("../routing-B3sgH5MZ.js");
+				const { loadModelRoutingConfig } = await import("../routing-BCXJlbUS.js");
 				routingConfig = loadModelRoutingConfig(routingConfigPath);
 			} catch {}
 			if (routingConfig === null) routingConfig = {
@@ -13458,8 +13460,8 @@ async function createProgram() {
 /** Fire-and-forget startup version check (story 8.3, AC3/AC5) */
 function checkForUpdatesInBackground(currentVersion) {
 	if (process.env.SUBSTRATE_NO_UPDATE_CHECK === "1") return;
-	import("../upgrade-B3iamwjO.js").then(async () => {
-		const { createVersionManager } = await import("../version-manager-impl-DizCvYy8.js");
+	import("../upgrade-CT6TGMup.js").then(async () => {
+		const { createVersionManager } = await import("../version-manager-impl-zazA11ph.js");
 		const vm = createVersionManager();
 		const result = await vm.checkForUpdates();
 		if (result.updateAvailable) {

package/dist/{decisions-De43bvYq.js → decisions-7ALaVvR9.js}

@@ -1,4 +1,4 @@
-import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-C2CAZDep.js";
+import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-C6pEdj12.js";
 import "./decisions-CzSIEeGP.js";
 
 export { getLatestRun };

package/dist/{dist-C2CAZDep.js → dist-C6pEdj12.js}

@@ -4,6 +4,7 @@ import { EventEmitter } from "node:events";
 import yaml, { dump, load } from "js-yaml";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { exec, execFile, execSync, spawn, spawnSync } from "node:child_process";
+import * as path$3 from "node:path";
 import * as path$2 from "node:path";
 import * as path$1 from "node:path";
 import path, { dirname as dirname$1, join as join$1, resolve as resolve$1 } from "node:path";
@@ -1302,7 +1303,8 @@ var DispatcherImpl = class {
 			...storyKey !== void 0 ? { storyKey } : {},
 			...optimizationDirectives !== void 0 ? { optimizationDirectives } : {},
 			taskType,
-			dispatchId: id
+			dispatchId: id,
+			...this._config.permissionProfile !== void 0 ? { permissionProfile: this._config.permissionProfile } : {}
 		});
 		const baseTimeoutMs = timeout ?? this._config.defaultTimeouts[taskType] ?? DEFAULT_TIMEOUTS[taskType] ?? 3e5;
 		const timeoutMultiplier = capabilities.timeoutMultiplier ?? 1;
@@ -1314,6 +1316,29 @@ var DispatcherImpl = class {
 		env["GIT_CEILING_DIRECTORIES"] = dirname$1(worktreePath);
 		if (cmd.env !== void 0) Object.assign(env, cmd.env);
 		if (cmd.unsetEnvKeys !== void 0) for (const key of cmd.unsetEnvKeys) delete env[key];
+		if (cmd.executionMode !== void 0 && cmd.executionMode !== "spawn") {
+			this._logger.error({
+				id,
+				agent,
+				executionMode: cmd.executionMode
+			}, "dispatch rejected: execution mode not implemented");
+			this._running.delete(id);
+			this._drainQueue();
+			resolve$2({
+				id,
+				status: "failed",
+				exitCode: -1,
+				output: "",
+				parsed: null,
+				parseError: `executionMode "${cmd.executionMode}" is not implemented — only 'spawn' is available (H4.4 seam)`,
+				durationMs: 0,
+				tokenEstimate: {
+					input: Math.ceil(prompt.length / CHARS_PER_TOKEN$3),
+					output: 0
+				}
+			});
+			return;
+		}
 		const proc = spawn(cmd.binary, cmd.args, {
 			cwd: cmd.cwd,
 			env,
@@ -6302,6 +6327,7 @@ const SubstrateConfigSchema = z.object({
 	telemetry: TelemetryConfigSchema.optional(),
 	worktree: WorktreeConfigSchema.optional(),
 	trivialOutputThreshold: z.number().int().nonnegative().optional(),
+	dispatch: z.object({ permission_profile: z.enum(["skip", "scoped"]).optional() }).strict().optional(),
 	finalization: z.object({
 		mode: z.enum([
 			"merge",
@@ -6328,6 +6354,7 @@ const PartialSubstrateConfigSchema = z.object({
 	telemetry: TelemetryConfigSchema.partial().optional(),
 	worktree: WorktreeConfigSchema.partial().optional(),
 	trivialOutputThreshold: z.number().int().nonnegative().optional(),
+	dispatch: z.object({ permission_profile: z.enum(["skip", "scoped"]).optional() }).strict().optional(),
 	finalization: z.object({
 		mode: z.enum([
 			"merge",
@@ -6668,8 +6695,8 @@ function readEnvOverrides(logger) {
 /**
 * Get a value from a nested object using dot-notation key.
 */
-function getByPath(obj, path$3) {
-	const parts = path$3.split(".");
+function getByPath(obj, path$4) {
+	const parts = path$4.split(".");
 	let cursor = obj;
 	for (const part of parts) {
 		if (cursor === null || cursor === void 0 || typeof cursor !== "object") return void 0;
@@ -6681,8 +6708,8 @@ function getByPath(obj, path$3) {
 * Return a deep clone of `obj` with `path` set to `value`.
 * Creates intermediate objects as needed.
 */
-function setByPath(obj, path$3, value) {
-	const parts = path$3.split(".");
+function setByPath(obj, path$4, value) {
+	const parts = path$4.split(".");
 	const result = { ...obj };
 	let cursor = result;
 	for (let i = 0; i < parts.length - 1; i++) {
@@ -9528,6 +9555,40 @@ function checkAdapterVersionCompat(adapterName, actualVersion, tested) {
 //#endregion
 //#region packages/core/dist/adapters/claude-adapter.js
 const execAsync$2 = promisify(exec);
+/**
+* H4.3: generate the per-worktree Claude Code settings file for the
+* 'scoped' permission profile. Written NEXT TO the worktree (its parent
+* directory — the worktree base, outside any repo after H4.2) so it can
+* never be committed by commit-first.
+*
+* Rules: reads/search/bash allowed everywhere (verification needs the
+* suite + git); file MUTATION allowed only under the worktree — anything
+* else falls to "ask", which headless -p mode denies visibly (there is no
+* interactive prompt to stall on).
+*/
+function writeScopedPermissionSettings(worktreePath) {
+	const wt = path$3.resolve(worktreePath);
+	const settings = { permissions: {
+		allow: [
+			"Read",
+			"Glob",
+			"Grep",
+			"Bash",
+			"WebFetch",
+			"WebSearch",
+			"TodoWrite",
+			"Task",
+			`Edit(${wt}/**)`,
+			`Write(${wt}/**)`,
+			`NotebookEdit(${wt}/**)`
+		],
+		deny: []
+	} };
+	const settingsPath = path$3.join(path$3.dirname(wt), `.agent-settings-${path$3.basename(wt)}.json`);
+	mkdirSync(path$3.dirname(settingsPath), { recursive: true });
+	writeFileSync(settingsPath, JSON.stringify(settings, null, 2));
+	return settingsPath;
+}
 /** Default model used when none is specified */
 const DEFAULT_MODEL$1 = "claude-sonnet-4-6";
 /**
@@ -9650,9 +9711,12 @@ var ClaudeCodeAdapter = class ClaudeCodeAdapter {
 		const args = [
 			"-p",
 			"--model",
-			model,
-			"--dangerously-skip-permissions"
+			model
 		];
+		if (options.permissionProfile === "scoped") {
+			const settingsPath = writeScopedPermissionSettings(options.worktreePath);
+			args.push("--permission-mode", "acceptEdits", "--settings", settingsPath);
+		} else args.push("--dangerously-skip-permissions");
 		args.push("--output-format", "stream-json", "--verbose");
 		if (options.additionalFlags && options.additionalFlags.length > 0) args.push(...options.additionalFlags);
 		const systemPromptParts = [BASE_SYSTEM_PROMPT];
@@ -11974,9 +12038,9 @@ var VersionManagerImpl = class {
 		try {
 			const _require = createRequire(import.meta.url);
 			const fs = _require("fs");
-			const path$3 = _require("path");
+			const path$4 = _require("path");
 			const yaml$1 = _require("js-yaml");
-			const configPath = path$3.join(process.cwd(), ".substrate", "config.yaml");
+			const configPath = path$4.join(process.cwd(), ".substrate", "config.yaml");
 			try {
 				const raw = fs.readFileSync(configPath, "utf-8");
 				configObj = yaml$1.load(raw) ?? {};
@@ -12531,4 +12595,4 @@ async function callLLM(params) {
 
 //#endregion
 export { ADVISORY_NOTES, AdapterRegistry, AdtError, BRANCH_PREFIX, BudgetConfigSchema, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, Categorizer, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, ConsumerAnalyzer, CostTrackerConfigSchema, DEFAULT_CONFIG, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, DoltNotInstalled, DoltQueryError, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, GeminiCLIAdapter, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, LEARNING_FINDING, LogTurnAnalyzer, ModelRoutingConfigSchema, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProviderPolicySchema, ProvidersSchema, Recommender, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TASK_TYPE_PHASE_MAP, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryConfigSchema, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, VersionManagerImpl, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, callLLM, checkDoltInstalled, classifyVersionGap, compareRunMetrics, createAmendmentRun, createConfigSystem, createDatabaseAdapter as createDatabaseAdapter$1, createDecision, createExperimenter, createGitWorktreeManager, createPipelineRun, createRequirement, createStderrLogger, createVersionManager, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, determineVerdict, getActiveDecisions, getAllCostEntriesFiltered, getArtifactByTypeForRun, getArtifactsByRun, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getModelTier, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRequirements, listRunMetrics, loadModelRoutingConfig, loadParentRunDecisions, registerArtifact, resolvePromptFile, supersedeDecision, swallowDebug, tagRunAsBaseline, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics };
-//# sourceMappingURL=dist-C2CAZDep.js.map
+//# sourceMappingURL=dist-C6pEdj12.js.map

package/dist/{errors-Db8EIM9w.js → errors-1xcRMTz_.js}

@@ -1,4 +1,4 @@
-import { AdtError } from "./dist-C2CAZDep.js";
+import { AdtError } from "./dist-C6pEdj12.js";
 
 //#region src/core/errors.ts
 /** Error thrown when task configuration is invalid */
@@ -71,4 +71,4 @@ var TaskGraphIncompatibleFormatError = class extends AdtError {
 
 //#endregion
 export { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError };
-//# sourceMappingURL=errors-Db8EIM9w.js.map
+//# sourceMappingURL=errors-1xcRMTz_.js.map

package/dist/{experimenter-Dm5jUPO6.js → experimenter-CRt7RrrW.js}

@@ -1,3 +1,3 @@
-import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-C2CAZDep.js";
+import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-C6pEdj12.js";
 
 export { createExperimenter };

package/dist/{health-WGcvcIYK.js → health-Bhwd_HX9.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-ByQadq3J.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-CcOYQsgZ.js";
 import "./logger-KeHncl-f.js";
-import "./dist-C2CAZDep.js";
-import "./manifest-read-knD2uWkz.js";
+import "./dist-C6pEdj12.js";
+import "./manifest-read-8oNapRvD.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 

package/dist/{health-ByQadq3J.js → health-CcOYQsgZ.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-C2CAZDep.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-knD2uWkz.js";
+import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-C6pEdj12.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-8oNapRvD.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-ByQadq3J.js.map
+//# sourceMappingURL=health-CcOYQsgZ.js.map

package/dist/{index-DxeIRBBf.d.ts → index-CnV5PcSR.d.ts}

@@ -296,6 +296,12 @@ declare const SubstrateConfigSchema: z.ZodObject<{
     }>>;
   }, z.core.$strict>>;
   trivialOutputThreshold: z.ZodOptional<z.ZodNumber>;
+  dispatch: z.ZodOptional<z.ZodObject<{
+    permission_profile: z.ZodOptional<z.ZodEnum<{
+      skip: "skip";
+      scoped: "scoped";
+    }>>;
+  }, z.core.$strict>>;
   finalization: z.ZodOptional<z.ZodObject<{
     mode: z.ZodOptional<z.ZodEnum<{
       merge: "merge";
@@ -860,6 +866,15 @@ interface SpawnCommand {
   stdin?: string;
   /** Optional timeout in milliseconds */
   timeoutMs?: number;
+  /**
+   * H4.4 (container-ready seam): how this command is executed.
+   * 'spawn' (default, and the only implemented mode) = child_process.spawn on
+   * the host. 'container' is RESERVED for a future backend that runs the
+   * agent in a container with the worktree bind-mounted at the same path —
+   * the dispatcher MUST reject it until that backend exists. Mirrors the
+   * direct-API adapter design's `executionMode: 'spawn' | 'direct'` seam.
+   */
+  executionMode?: 'spawn' | 'container';
 }
 /**
  * Options passed to adapter methods for each invocation.
@@ -909,6 +924,13 @@ interface AdapterOptions {
   taskType?: string;
   /** Dispatch context: unique dispatch ID for per-dispatch telemetry correlation */
   dispatchId?: string;
+  /**
+   * H4.3: permission profile for the spawned agent. 'skip' (default) uses
+   * --dangerously-skip-permissions; 'scoped' generates a per-worktree
+   * settings file (mutation allowed only under the worktree) and runs with
+   * --permission-mode acceptEdits. Config: `dispatch.permission_profile`.
+   */
+  permissionProfile?: 'skip' | 'scoped';
 }
 /**
  * Capabilities reported by an adapter for this CLI agent.
@@ -1600,4 +1622,4 @@ interface Recommendation {
 
 //#endregion
 export { AdapterDiscoveryResult, AdapterRegistry as AdapterRegistry$1, AdtError as AdtError$1, ClaudeCodeAdapter as ClaudeCodeAdapter$1, CodexCLIAdapter as CodexCLIAdapter$1, ConfigError as ConfigError$1, ConfigIncompatibleFormatError as ConfigIncompatibleFormatError$1, CoreEvents, DatabaseAdapter, DiscoveryReport, GeminiCLIAdapter as GeminiCLIAdapter$1, Recommendation, TypedEventBus };
-//# sourceMappingURL=index-DxeIRBBf.d.ts.map
+//# sourceMappingURL=index-CnV5PcSR.d.ts.map

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { AdapterDiscoveryResult, AdapterRegistry$1 as AdapterRegistry, AdtError$1 as AdtError, ClaudeCodeAdapter$1 as ClaudeCodeAdapter, CodexCLIAdapter$1 as CodexCLIAdapter, ConfigError$1 as ConfigError, ConfigIncompatibleFormatError$1 as ConfigIncompatibleFormatError, DiscoveryReport, GeminiCLIAdapter$1 as GeminiCLIAdapter, Recommendation, TypedEventBus } from "./index-DxeIRBBf.js";
+import { AdapterDiscoveryResult, AdapterRegistry$1 as AdapterRegistry, AdtError$1 as AdtError, ClaudeCodeAdapter$1 as ClaudeCodeAdapter, CodexCLIAdapter$1 as CodexCLIAdapter, ConfigError$1 as ConfigError, ConfigIncompatibleFormatError$1 as ConfigIncompatibleFormatError, DiscoveryReport, GeminiCLIAdapter$1 as GeminiCLIAdapter, Recommendation, TypedEventBus } from "./index-CnV5PcSR.js";
 import pino from "pino";
 import { z } from "zod";
 import { Readable, Writable } from "node:stream";
@@ -1068,6 +1068,12 @@ declare const SubstrateConfigSchema: z.ZodObject<{
   supervisor_poll_interval_seconds: z.ZodOptional<z.ZodNumber>;
   retry_budget: z.ZodOptional<z.ZodNumber>;
   epics_path: z.ZodOptional<z.ZodString>;
+  dispatch: z.ZodOptional<z.ZodObject<{
+    permission_profile: z.ZodOptional<z.ZodEnum<{
+      skip: "skip";
+      scoped: "scoped";
+    }>>;
+  }, z.core.$strict>>;
   finalization: z.ZodOptional<z.ZodObject<{
     mode: z.ZodOptional<z.ZodEnum<{
       merge: "merge";
@@ -2165,6 +2171,15 @@ interface SpawnCommand {
   stdin?: string;
   /** Optional timeout in milliseconds */
   timeoutMs?: number;
+  /**
+   * H4.4 (container-ready seam): how this command is executed.
+   * 'spawn' (default, and the only implemented mode) = child_process.spawn on
+   * the host. 'container' is RESERVED for a future backend that runs the
+   * agent in a container with the worktree bind-mounted at the same path —
+   * the dispatcher MUST reject it until that backend exists. Mirrors the
+   * direct-API adapter design's `executionMode: 'spawn' | 'direct'` seam.
+   */
+  executionMode?: 'spawn' | 'container';
 }
 /**
  * Options passed to adapter methods for each invocation.
@@ -2214,6 +2229,13 @@ interface AdapterOptions {
   taskType?: string;
   /** Dispatch context: unique dispatch ID for per-dispatch telemetry correlation */
   dispatchId?: string;
+  /**
+   * H4.3: permission profile for the spawned agent. 'skip' (default) uses
+   * --dangerously-skip-permissions; 'scoped' generates a per-worktree
+   * settings file (mutation allowed only under the worktree) and runs with
+   * --permission-mode acceptEdits. Config: `dispatch.permission_profile`.
+   */
+  permissionProfile?: 'skip' | 'scoped';
 }
 /**
  * Capabilities reported by an adapter for this CLI agent.

package/dist/index.js

@@ -1,8 +1,8 @@
 import { childLogger, createLogger, logger } from "./logger-KeHncl-f.js";
 import { assertDefined, createEventBus, createTuiApp, deepClone, formatDuration, generateId, isPlainObject, isTuiCapable, printNonTtyWarning, sleep, withRetry } from "./helpers-CElYrONe.js";
-import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-C2CAZDep.js";
+import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-C6pEdj12.js";
 import "./adapter-registry-DXLMTmfD.js";
-import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-Db8EIM9w.js";
+import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-1xcRMTz_.js";
 
 //#region src/core/di.ts
 /**

package/dist/{interactive-prompt-CMBlj6UF.js → interactive-prompt-BVTTIU3t.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-knD2uWkz.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-8oNapRvD.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-CMBlj6UF.js.map
+//# sourceMappingURL=interactive-prompt-BVTTIU3t.js.map

package/dist/{manifest-read-knD2uWkz.js → manifest-read-8oNapRvD.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-C2CAZDep.js";
+import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-C6pEdj12.js";
 import * as path$1 from "path";
 import { join } from "path";
 import { readFile } from "fs/promises";
@@ -6300,4 +6300,4 @@ async function resolveRunManifest(dbRoot, runId) {
 
 //#endregion
 export { FindingsInjector, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery };
-//# sourceMappingURL=manifest-read-knD2uWkz.js.map
+//# sourceMappingURL=manifest-read-8oNapRvD.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
-import "../../dist-C2CAZDep.js";
-import "../../manifest-read-knD2uWkz.js";
-import { runInteractivePrompt } from "../../interactive-prompt-CMBlj6UF.js";
+import "../../dist-C6pEdj12.js";
+import "../../manifest-read-8oNapRvD.js";
+import { runInteractivePrompt } from "../../interactive-prompt-BVTTIU3t.js";
 
 export { runInteractivePrompt };

package/dist/{routing-B3sgH5MZ.js → routing-BCXJlbUS.js}

@@ -1,4 +1,4 @@
-import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-C2CAZDep.js";
+import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-C6pEdj12.js";
 import "./routing-DFxoKHDt.js";
 
 export { loadModelRoutingConfig };

package/dist/{run-BAUlPom3.js → run-B9lhuahO.js}

@@ -1,11 +1,11 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-ByQadq3J.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-CcOYQsgZ.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
-import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-C2CAZDep.js";
-import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-knD2uWkz.js";
+import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-C6pEdj12.js";
+import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-8oNapRvD.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-DZyJv5pV.js";
 import { deriveExitCode, routeDecision } from "./decision-router-BAPpON_C.js";
-import { runInteractivePrompt } from "./interactive-prompt-CMBlj6UF.js";
+import { runInteractivePrompt } from "./interactive-prompt-BVTTIU3t.js";
 import { runRecoveryEngine } from "./recovery-engine-BKGBeBnW.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -46317,6 +46317,7 @@ async function runRunAction(options) {
 	let configFinalizationMode;
 	let configMergeStrategy;
 	let configEpicGateCommand;
+	let configPermissionProfile;
 	let configWorktreeCopyFiles;
 	try {
 		const configSystem = createConfigSystem({ projectConfigDir: dbDir });
@@ -46346,6 +46347,7 @@ async function runRunAction(options) {
 		if (cfg.finalization?.mode !== void 0) configFinalizationMode = cfg.finalization.mode;
 		if (cfg.finalization?.merge_strategy !== void 0) configMergeStrategy = cfg.finalization.merge_strategy;
 		if (cfg.finalization?.epic_gate_command !== void 0) configEpicGateCommand = cfg.finalization.epic_gate_command;
+		if (cfg.dispatch?.permission_profile !== void 0) configPermissionProfile = cfg.dispatch.permission_profile;
 		if (Array.isArray(cfg.worktree?.copy_files) && cfg.worktree.copy_files.length > 0) {
 			configWorktreeCopyFiles = [...cfg.worktree.copy_files];
 			logger.info({ copyFiles: configWorktreeCopyFiles }, "Loaded worktree.copy_files from config");
@@ -46448,6 +46450,7 @@ async function runRunAction(options) {
 		...finalization !== void 0 ? { finalizationMode: finalization } : configFinalizationMode !== void 0 ? { finalizationMode: configFinalizationMode } : {},
 		...configMergeStrategy !== void 0 ? { mergeStrategy: configMergeStrategy } : {},
 		...configEpicGateCommand !== void 0 ? { epicGateCommand: configEpicGateCommand } : {},
+		...configPermissionProfile !== void 0 ? { permissionProfile: configPermissionProfile } : {},
 		...configWorktreeCopyFiles !== void 0 ? { worktreeCopyFiles: configWorktreeCopyFiles } : {}
 	});
 	let storyKeys = [...parsedStoryKeys];
@@ -46696,7 +46699,8 @@ async function runRunAction(options) {
 			adapterRegistry: injectedRegistry,
 			config: {
 				routingResolver,
-				...dispatchTimeouts ? { defaultTimeouts: dispatchTimeouts } : {}
+				...dispatchTimeouts ? { defaultTimeouts: dispatchTimeouts } : {},
+				...configPermissionProfile !== void 0 ? { permissionProfile: configPermissionProfile } : {}
 			}
 		});
 		eventBus.on("orchestrator:story-phase-complete", (payload) => {
@@ -47237,7 +47241,7 @@ async function runRunAction(options) {
 	}
 }
 async function runFullPipeline(options) {
-	const { packName, packPath, dbDir, dbPath, startPhase, stopAfter, concept, concurrency, outputFormat, projectRoot, events: eventsFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, maxReviewCycles = 2, retryBudget, registry: injectedRegistry, tokenCeilings, stories: explicitStories, telemetryEnabled: fullTelemetryEnabled, telemetryPort: fullTelemetryPort, agentId, meshUrl: fpMeshUrl, meshProjectId: fpMeshProjectId, engineType: fpEngineType, probeAuthor, probeAuthorStateIntegrating: fpProbeAuthorStateIntegrating, noWorktree, worktreeCopyFiles: fpWorktreeCopyFiles, finalizationMode: fpFinalizationMode, mergeStrategy: fpMergeStrategy, epicGateCommand: fpEpicGateCommand } = options;
+	const { packName, packPath, dbDir, dbPath, startPhase, stopAfter, concept, concurrency, outputFormat, projectRoot, events: eventsFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, maxReviewCycles = 2, retryBudget, registry: injectedRegistry, tokenCeilings, stories: explicitStories, telemetryEnabled: fullTelemetryEnabled, telemetryPort: fullTelemetryPort, agentId, meshUrl: fpMeshUrl, meshProjectId: fpMeshProjectId, engineType: fpEngineType, probeAuthor, probeAuthorStateIntegrating: fpProbeAuthorStateIntegrating, noWorktree, worktreeCopyFiles: fpWorktreeCopyFiles, finalizationMode: fpFinalizationMode, mergeStrategy: fpMergeStrategy, epicGateCommand: fpEpicGateCommand, permissionProfile: fpPermissionProfile } = options;
 	if (!existsSync$1(dbDir)) mkdirSync$1(dbDir, { recursive: true });
 	let doltServerFull = null;
 	try {
@@ -47278,7 +47282,10 @@ async function runFullPipeline(options) {
 		const dispatcher = createDispatcher({
 			eventBus,
 			adapterRegistry: injectedRegistry,
-			config: { routingResolver }
+			config: {
+				routingResolver,
+				...fpPermissionProfile !== void 0 ? { permissionProfile: fpPermissionProfile } : {}
+			}
 		});
 		const phaseDeps = {
 			db: adapter,
@@ -47720,7 +47727,7 @@ async function runFullPipeline(options) {
 */
 async function emitPreDispatchVersionAdvisory(currentVersion) {
 	if (process.env["SUBSTRATE_NO_UPDATE_CHECK"] === "1") return;
-	const { createVersionManager } = await import("./version-manager-impl-DizCvYy8.js");
+	const { createVersionManager } = await import("./version-manager-impl-zazA11ph.js");
 	const vm = createVersionManager();
 	const result = await vm.checkForUpdates(true);
 	const gap = classifyVersionGap(currentVersion, result.latestVersion);
@@ -47827,4 +47834,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-BAUlPom3.js.map
+//# sourceMappingURL=run-B9lhuahO.js.map

package/dist/{run-CtIc7_rK.js → run-B_G9KCd-.js}

@@ -1,14 +1,14 @@
-import "./health-ByQadq3J.js";
+import "./health-CcOYQsgZ.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
-import "./dist-C2CAZDep.js";
-import "./manifest-read-knD2uWkz.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-BAUlPom3.js";
+import "./dist-C6pEdj12.js";
+import "./manifest-read-8oNapRvD.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-B9lhuahO.js";
 import "./routing-DFxoKHDt.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 import "./decision-router-BAPpON_C.js";
-import "./interactive-prompt-CMBlj6UF.js";
+import "./interactive-prompt-BVTTIU3t.js";
 import "./recovery-engine-BKGBeBnW.js";
 
 export { runRunAction };

package/dist/src/modules/recovery-engine/index.d.ts

@@ -1,4 +1,4 @@
-import { CoreEvents, DatabaseAdapter, TypedEventBus } from "../../../index-DxeIRBBf.js";
+import { CoreEvents, DatabaseAdapter, TypedEventBus } from "../../../index-CnV5PcSR.js";
 import { z } from "zod";
 
 //#region packages/sdlc/dist/verification/findings.d.ts

package/dist/{upgrade-B3iamwjO.js → upgrade-CT6TGMup.js}

@@ -1,5 +1,5 @@
-import "./dist-C2CAZDep.js";
+import "./dist-C6pEdj12.js";
 import "./version-manager-impl-qFBiO4Eh.js";
-import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-DOmKCyOY.js";
+import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-DcvPseav.js";
 
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };

package/dist/{upgrade-DOmKCyOY.js → upgrade-DcvPseav.js}

@@ -1,4 +1,4 @@
-import { createVersionManager } from "./dist-C2CAZDep.js";
+import { createVersionManager } from "./dist-C6pEdj12.js";
 import { execSync, spawn } from "child_process";
 import * as readline from "readline";
 
@@ -123,4 +123,4 @@ function registerUpgradeCommand(program) {
 
 //#endregion
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };
-//# sourceMappingURL=upgrade-DOmKCyOY.js.map
+//# sourceMappingURL=upgrade-DcvPseav.js.map

package/dist/{version-manager-impl-DizCvYy8.js → version-manager-impl-zazA11ph.js}

@@ -1,4 +1,4 @@
-import { VersionManagerImpl, createVersionManager } from "./dist-C2CAZDep.js";
+import { VersionManagerImpl, createVersionManager } from "./dist-C6pEdj12.js";
 import "./version-manager-impl-qFBiO4Eh.js";
 
 export { createVersionManager };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.20.149",
+  "version": "0.20.150",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",

package/dist/adapter-registry-CauYNA1U.js

@@ -1,4 +0,0 @@
-import { AdapterRegistry } from "./dist-C2CAZDep.js";
-import "./adapter-registry-DXLMTmfD.js";
-
-export { AdapterRegistry };