substrate-ai 0.20.151 → 0.20.153

package/dist/adapter-registry-DJI97Kz-.js

@@ -0,0 +1,4 @@
+import { AdapterRegistry } from "./dist-Dl3vBZil.js";
+import "./adapter-registry-DXLMTmfD.js";
+
+export { AdapterRegistry };

package/dist/cli/index.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-BERxzeG-.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-BmBd4zyE.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
-import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-90byyGPp.js";
+import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-Dl3vBZil.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-BOvY53EG.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-Dgqfz9HY.js";
-import "../errors-ST3E8qWc.js";
+import { RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-Dan3I0ea.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-DEBYRpko.js";
+import "../errors-Dyyei2ah.js";
 import "../routing-DFxoKHDt.js";
 import { WorkGraphRepository } from "../work-graph-repository-DZyJv5pV.js";
 import "../decisions-CzSIEeGP.js";
 import "../decision-router-BAPpON_C.js";
-import "../interactive-prompt-UWLccCqL.js";
+import "../interactive-prompt-Cj0Od5XZ.js";
 import "../recovery-engine-BKGBeBnW.js";
 import "../version-manager-impl-qFBiO4Eh.js";
-import { registerUpgradeCommand } from "../upgrade-Dw6jKkH3.js";
+import { registerUpgradeCommand } from "../upgrade-DGqUA_5f.js";
 import { Command } from "commander";
 import { fileURLToPath } from "url";
 import { dirname, join, resolve } from "path";
@@ -7126,7 +7126,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-CoJ3nBWL.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-BwXD8UBv.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8074,7 +8074,7 @@ function defaultSupervisorDeps() {
 				if (cached === null) {
 					const { AdapterRegistry: AR } = await import(
 						/* @vite-ignore */
-						"../adapter-registry-BsBP3j5i.js"
+						"../adapter-registry-DJI97Kz-.js"
 );
 					cached = new AR();
 					await cached.discoverAndRegister();
@@ -8641,11 +8641,11 @@ async function runSupervisorAction(options, deps = {}) {
 						try {
 							const { createExperimenter } = await import(
 								/* @vite-ignore */
-								"../experimenter-CyA9K5u6.js"
+								"../experimenter-BtX2GBSg.js"
 );
 							const { getLatestRun: getLatest } = await import(
 								/* @vite-ignore */
-								"../decisions-DH12X_94.js"
+								"../decisions-Dd8Nc_Vs.js"
 );
 							const expAdapter = createDatabaseAdapter({
 								backend: "auto",
@@ -8655,7 +8655,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-Csg27VHs.js"
+									"../run-DIu8THqp.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -9180,7 +9180,7 @@ async function runMetricsAction(options) {
 			const routingConfigPath = join(dbDir, "routing.yml");
 			let routingConfig = null;
 			if (existsSync$1(routingConfigPath)) try {
-				const { loadModelRoutingConfig } = await import("../routing-pCkRxj09.js");
+				const { loadModelRoutingConfig } = await import("../routing-CKcQZJZo.js");
 				routingConfig = loadModelRoutingConfig(routingConfigPath);
 			} catch {}
 			if (routingConfig === null) routingConfig = {
@@ -13508,8 +13508,8 @@ async function createProgram() {
 /** Fire-and-forget startup version check (story 8.3, AC3/AC5) */
 function checkForUpdatesInBackground(currentVersion) {
 	if (process.env.SUBSTRATE_NO_UPDATE_CHECK === "1") return;
-	import("../upgrade-unZndH-S.js").then(async () => {
-		const { createVersionManager } = await import("../version-manager-impl--XXnwjMd.js");
+	import("../upgrade-CNtCNhsT.js").then(async () => {
+		const { createVersionManager } = await import("../version-manager-impl-f4r2s_Nv.js");
 		const vm = createVersionManager();
 		const result = await vm.checkForUpdates();
 		if (result.updateAvailable) {

package/dist/{decisions-DH12X_94.js → decisions-Dd8Nc_Vs.js}

@@ -1,4 +1,4 @@
-import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-90byyGPp.js";
+import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-Dl3vBZil.js";
 import "./decisions-CzSIEeGP.js";
 
 export { getLatestRun };

package/dist/{dist-90byyGPp.js → dist-Dl3vBZil.js}

@@ -9566,10 +9566,20 @@ const execAsync$2 = promisify(exec);
 * directory — the worktree base, outside any repo after H4.2) so it can
 * never be committed by commit-first.
 *
-* Rules: reads/search/bash allowed everywhere (verification needs the
-* suite + git); file MUTATION allowed only under the worktree — anything
-* else falls to "ask", which headless -p mode denies visibly (there is no
-* interactive prompt to stall on).
+* Scopes the Edit/Write/NotebookEdit TOOLS to the worktree (out-of-worktree
+* mutation via those tools falls to "ask", which headless -p mode denies).
+*
+* NOT A SECURITY BOUNDARY (red-team, 2026-07-06). `Bash` is allowed with no
+* path restriction — Claude Code's Bash permissioning is command-string
+* based, and Bash can invoke any binary that writes (echo/tee/python/…), so a
+* determined agent can mutate ANY path the host user can write. `git -C
+* <path>` likewise reaches repos outside the worktree (the H4.1
+* GIT_CEILING_DIRECTORIES scrub only blocks AMBIENT discovery, not explicit
+* targets). This profile is accident-mitigation — it stops a well-behaved
+* agent from *tool*-writing outside its worktree — not containment of a
+* hostile one. Real confinement (worktree as the only writable mount)
+* requires the container execution backend (H4.4 seam; see
+* docs/2026-07-06-container-execution-seam.md and the red-team review).
 */
 function writeScopedPermissionSettings(worktreePath) {
 	const wt = path$3.resolve(worktreePath);
@@ -12600,4 +12610,4 @@ async function callLLM(params) {
 
 //#endregion
 export { ADVISORY_NOTES, AdapterRegistry, AdtError, BRANCH_PREFIX, BudgetConfigSchema, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, Categorizer, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, ConsumerAnalyzer, CostTrackerConfigSchema, DEFAULT_CONFIG, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, DoltNotInstalled, DoltQueryError, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, GeminiCLIAdapter, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, LEARNING_FINDING, LogTurnAnalyzer, ModelRoutingConfigSchema, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProviderPolicySchema, ProvidersSchema, Recommender, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TASK_TYPE_PHASE_MAP, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryConfigSchema, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, VersionManagerImpl, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, callLLM, checkDoltInstalled, classifyVersionGap, compareRunMetrics, createAmendmentRun, createConfigSystem, createDatabaseAdapter as createDatabaseAdapter$1, createDecision, createExperimenter, createGitWorktreeManager, createPipelineRun, createRequirement, createStderrLogger, createVersionManager, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, determineVerdict, getActiveDecisions, getAllCostEntriesFiltered, getArtifactByTypeForRun, getArtifactsByRun, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getModelTier, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRequirements, listRunMetrics, loadModelRoutingConfig, loadParentRunDecisions, registerArtifact, resolvePromptFile, supersedeDecision, swallowDebug, tagRunAsBaseline, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics };
-//# sourceMappingURL=dist-90byyGPp.js.map
+//# sourceMappingURL=dist-Dl3vBZil.js.map

package/dist/{errors-ST3E8qWc.js → errors-Dyyei2ah.js}

@@ -1,4 +1,4 @@
-import { AdtError } from "./dist-90byyGPp.js";
+import { AdtError } from "./dist-Dl3vBZil.js";
 
 //#region src/core/errors.ts
 /** Error thrown when task configuration is invalid */
@@ -71,4 +71,4 @@ var TaskGraphIncompatibleFormatError = class extends AdtError {
 
 //#endregion
 export { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError };
-//# sourceMappingURL=errors-ST3E8qWc.js.map
+//# sourceMappingURL=errors-Dyyei2ah.js.map

package/dist/{experimenter-CyA9K5u6.js → experimenter-BtX2GBSg.js}

@@ -1,3 +1,3 @@
-import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-90byyGPp.js";
+import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-Dl3vBZil.js";
 
 export { createExperimenter };

package/dist/{health-BERxzeG-.js → health-BmBd4zyE.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-90byyGPp.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-BOvY53EG.js";
+import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-Dl3vBZil.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-Dan3I0ea.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-BERxzeG-.js.map
+//# sourceMappingURL=health-BmBd4zyE.js.map

package/dist/{health-CoJ3nBWL.js → health-BwXD8UBv.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-BERxzeG-.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-BmBd4zyE.js";
 import "./logger-KeHncl-f.js";
-import "./dist-90byyGPp.js";
-import "./manifest-read-BOvY53EG.js";
+import "./dist-Dl3vBZil.js";
+import "./manifest-read-Dan3I0ea.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 

package/dist/index.js

@@ -1,8 +1,8 @@
 import { childLogger, createLogger, logger } from "./logger-KeHncl-f.js";
 import { assertDefined, createEventBus, createTuiApp, deepClone, formatDuration, generateId, isPlainObject, isTuiCapable, printNonTtyWarning, sleep, withRetry } from "./helpers-CElYrONe.js";
-import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-90byyGPp.js";
+import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-Dl3vBZil.js";
 import "./adapter-registry-DXLMTmfD.js";
-import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-ST3E8qWc.js";
+import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-Dyyei2ah.js";
 
 //#region src/core/di.ts
 /**

package/dist/{interactive-prompt-UWLccCqL.js → interactive-prompt-Cj0Od5XZ.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-BOvY53EG.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-Dan3I0ea.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-UWLccCqL.js.map
+//# sourceMappingURL=interactive-prompt-Cj0Od5XZ.js.map

package/dist/{manifest-read-BOvY53EG.js → manifest-read-Dan3I0ea.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-90byyGPp.js";
+import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-Dl3vBZil.js";
 import * as path$1 from "path";
 import { join } from "path";
 import { readFile } from "fs/promises";
@@ -2235,6 +2235,20 @@ function detectTestCommand(workingDir) {
 	} catch {}
 	return void 0;
 }
+/**
+* H7 (trust-boundary hardening): detect exit-code LAUNDERING in a resolved test
+* command — a wrapper that forces exit 0 regardless of the real suite result
+* (`… || true`, `… || :`, `… || exit 0`, `… ; true`, `… ; exit 0`). A
+* reward-hacking agent used this to make a genuinely-red suite report pass
+* (verified against compiled dist in the red-team review). Legitimate commands
+* do not mask their own exit code, so this is a tampering signal, not a style
+* nit. Note: cannot catch arbitrary in-language masking (e.g. `python -c
+* "...sys.exit(0)"`) — the trusted-profile read is the primary defense; this is
+* belt-and-braces for the shell-wrapper class and the --no-worktree path.
+*/
+function detectsExitCodeLaundering(command) {
+	return /(\|\||;)\s*(true|:|exit\s+0)(\s|;|$)/.test(command);
+}
 var TestSuiteCheck = class {
 	name = "test-suite";
 	tier = "A";
@@ -2255,6 +2269,19 @@ var TestSuiteCheck = class {
 				findings
 			};
 		}
+		if (cmd !== void 0 && cmd !== "" && detectsExitCodeLaundering(cmd)) {
+			const findings = [{
+				category: "test-command-tampered",
+				severity: "error",
+				message: `test command masks its own exit code (\`${cmd}\`) — a wrapper like \`|| true\` / \`; exit 0\` forces a pass regardless of the real suite result. Remove the exit-code mask; the suite must fail the story when tests fail.`
+			}];
+			return {
+				status: "fail",
+				details: renderFindings(findings),
+				duration_ms: Date.now() - start,
+				findings
+			};
+		}
 		if (cmd === void 0 || cmd === "") {
 			const findings = [{
 				category: "test-suite-skip",
@@ -2486,7 +2513,7 @@ var ContaminationCheck = class {
 			duration_ms: Date.now() - start,
 			findings: []
 		};
-		const allowedLanguages = readProfileLanguages(context.workingDir);
+		const allowedLanguages = context.trustedLanguages ?? readProfileLanguages(context.workingDir);
 		if (allowedLanguages.length === 0) {
 			const findings$1 = [{
 				category: "contamination-skip",
@@ -6304,4 +6331,4 @@ async function resolveRunManifest(dbRoot, runId) {
 
 //#endregion
 export { FindingsInjector, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery };
-//# sourceMappingURL=manifest-read-BOvY53EG.js.map
+//# sourceMappingURL=manifest-read-Dan3I0ea.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
-import "../../dist-90byyGPp.js";
-import "../../manifest-read-BOvY53EG.js";
-import { runInteractivePrompt } from "../../interactive-prompt-UWLccCqL.js";
+import "../../dist-Dl3vBZil.js";
+import "../../manifest-read-Dan3I0ea.js";
+import { runInteractivePrompt } from "../../interactive-prompt-Cj0Od5XZ.js";
 
 export { runInteractivePrompt };

package/dist/{routing-pCkRxj09.js → routing-CKcQZJZo.js}

@@ -1,4 +1,4 @@
-import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-90byyGPp.js";
+import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-Dl3vBZil.js";
 import "./routing-DFxoKHDt.js";
 
 export { loadModelRoutingConfig };

package/dist/{run-Dgqfz9HY.js → run-DEBYRpko.js}

@@ -1,11 +1,11 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-BERxzeG-.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-BmBd4zyE.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
-import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-90byyGPp.js";
-import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-BOvY53EG.js";
+import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-Dl3vBZil.js";
+import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, parseRuntimeProbes, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-Dan3I0ea.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-DZyJv5pV.js";
 import { deriveExitCode, routeDecision } from "./decision-router-BAPpON_C.js";
-import { runInteractivePrompt } from "./interactive-prompt-UWLccCqL.js";
+import { runInteractivePrompt } from "./interactive-prompt-Cj0Od5XZ.js";
 import { runRecoveryEngine } from "./recovery-engine-BKGBeBnW.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -5324,7 +5324,7 @@ function runBuildVerification(options) {
 * never appear here. Feeds the reward-hack tripwire (agents editing existing
 * tests to go green — the measured exploit pattern).
 */
-function checkGitModifiedTrackedFiles(workingDir = process.cwd()) {
+function checkGitModifiedTrackedFiles(workingDir = process.cwd(), baselineSha) {
 	const results = new Set();
 	try {
 		execSync("git rev-parse --verify HEAD", {
@@ -5339,7 +5339,9 @@ function checkGitModifiedTrackedFiles(workingDir = process.cwd()) {
 	} catch {
 		return [];
 	}
-	for (const args of ["git diff --name-only HEAD", "git diff --cached --name-only"]) try {
+	const diffs = ["git diff --name-only HEAD", "git diff --cached --name-only"];
+	if (baselineSha !== void 0 && baselineSha.length > 0) diffs.push(`git diff --name-only --diff-filter=MD ${baselineSha}..HEAD`);
+	for (const args of diffs) try {
 		execSync(args, {
 			cwd: workingDir,
 			encoding: "utf-8",
@@ -12090,8 +12092,10 @@ function assembleVerificationContext(opts) {
 	} catch {
 		commitSha = "unknown";
 	}
-	const profileBuildCommand = readProfileKey(opts.workingDir, "buildCommand");
-	const profileTestCommand = readProfileKey(opts.workingDir, "testCommand");
+	const trustedDir = opts.trustedProfileDir ?? opts.workingDir;
+	const profileBuildCommand = readProfileKey(trustedDir, "buildCommand");
+	const profileTestCommand = readProfileKey(trustedDir, "testCommand");
+	const trustedLanguages = readProfileLanguagesLocal(trustedDir);
 	return {
 		storyKey: opts.storyKey,
 		workingDir: opts.workingDir,
@@ -12106,13 +12110,26 @@ function assembleVerificationContext(opts) {
 		...opts.changedFiles !== void 0 ? { changedFiles: opts.changedFiles } : {},
 		...opts.modifiedTrackedFiles !== void 0 ? { modifiedTrackedFiles: opts.modifiedTrackedFiles } : {},
 		...profileBuildCommand !== void 0 ? { buildCommand: profileBuildCommand } : {},
-		...profileTestCommand !== void 0 ? { testCommand: profileTestCommand } : {}
+		...profileTestCommand !== void 0 ? { testCommand: profileTestCommand } : {},
+		...trustedLanguages.length > 0 ? { trustedLanguages } : {}
 	};
 }
 /**
 * Read a single `<key>: value` line from `.substrate/project-profile.yaml`
 * under `workingDir` (H1.2). Line-based parse — no yaml dependency.
 */
+function readProfileLanguagesLocal(dir) {
+	const profilePath = join$1(dir, ".substrate", "project-profile.yaml");
+	if (!existsSync(profilePath)) return [];
+	try {
+		const content = readFileSync(profilePath, "utf-8");
+		const langs = new Set();
+		for (const m of content.matchAll(/^\s*(?:-\s+)?language:\s*['"]?([a-z]+)['"]?\s*$/gm)) if (m[1] !== void 0) langs.add(m[1]);
+		return [...langs];
+	} catch {
+		return [];
+	}
+}
 function readProfileKey(workingDir, key) {
 	const profilePath = join$1(workingDir, ".substrate", "project-profile.yaml");
 	if (!existsSync(profilePath)) return void 0;
@@ -15177,7 +15194,7 @@ function createImplementationOrchestrator(deps) {
 		if (devStoryWasSuccess) {
 			gitDiffFiles = checkGitDiffFiles(effectiveProjectRoot ?? process.cwd());
 			try {
-				modifiedTrackedFiles = checkGitModifiedTrackedFiles(effectiveProjectRoot ?? process.cwd());
+				modifiedTrackedFiles = checkGitModifiedTrackedFiles(effectiveProjectRoot ?? process.cwd(), baselineHeadSha);
 			} catch {
 				modifiedTrackedFiles = void 0;
 			}
@@ -15640,6 +15657,7 @@ function createImplementationOrchestrator(deps) {
 				const verifContext = assembleVerificationContext({
 					storyKey,
 					workingDir: effectiveProjectRoot ?? process.cwd(),
+					...projectRoot !== void 0 ? { trustedProfileDir: projectRoot } : {},
 					reviewResult: latestReviewSignals,
 					storyContent: storyContentForVerification,
 					devStoryResult: devStorySignals,
@@ -15730,6 +15748,7 @@ function createImplementationOrchestrator(deps) {
 								const retryVerifContext = assembleVerificationContext({
 									storyKey,
 									workingDir: effectiveProjectRoot ?? process.cwd(),
+									...projectRoot !== void 0 ? { trustedProfileDir: projectRoot } : {},
 									reviewResult: latestReviewSignals,
 									storyContent: storyContentForVerification,
 									devStoryResult: devStorySignals,
@@ -16085,6 +16104,34 @@ function createImplementationOrchestrator(deps) {
 						err: gateErr instanceof Error ? gateErr.message : String(gateErr)
 					}, "merge-to-main pre-flight verification failed — proceeding with merge phase");
 				}
+				{
+					const norm = (f$1) => f$1.replace(/\\/g, "/").replace(/^\.\//, "");
+					const disclosed = new Set((devFilesModified ?? []).map(norm));
+					const mergedFiles = recaptureChangedFiles(effectiveProjectRoot ?? process.cwd());
+					const { artifactOnly } = classifyImplementationDiff(mergedFiles);
+					const artifactSet = new Set(artifactOnly.map(norm));
+					const undisclosed = mergedFiles.map(norm).filter((f$1) => !artifactSet.has(f$1) && !disclosed.has(f$1));
+					if (undisclosed.length > 0) {
+						logger$27.error({
+							storyKey,
+							undisclosed,
+							disclosed: [...disclosed]
+						}, "H7: refusing to merge — committed implementation files were never disclosed by the dev agent (files_modified) and thus never reviewed");
+						updateStory(storyKey, {
+							phase: "ESCALATED",
+							error: "undisclosed-files-in-merge",
+							completedAt: new Date().toISOString()
+						});
+						await emitEscalation({
+							storyKey,
+							lastVerdict: "undisclosed-files-in-merge",
+							reviewCycles: completedReviewCycles,
+							issues: [`${undisclosed.length} implementation file(s) are committed on the story branch but were NOT in the dev agent's files_modified (so no review cycle inspected them): ${undisclosed.join(", ")}. A merge would land unreviewed code. Inspect the branch; if the changes are legitimate, re-dispatch with accurate files_modified or merge manually.`]
+						});
+						await persistState();
+						return "terminal";
+					}
+				}
 				const finalizationMode = config.finalizationMode ?? "merge";
 				const epicGateCommand = config.epicGateCommand;
 				if (epicGateCommand !== void 0 && epicGateCommand.trim() !== "" && finalizationMode !== "branch") {
@@ -47779,7 +47826,7 @@ async function runFullPipeline(options) {
 */
 async function emitPreDispatchVersionAdvisory(currentVersion) {
 	if (process.env["SUBSTRATE_NO_UPDATE_CHECK"] === "1") return;
-	const { createVersionManager } = await import("./version-manager-impl--XXnwjMd.js");
+	const { createVersionManager } = await import("./version-manager-impl-f4r2s_Nv.js");
 	const vm = createVersionManager();
 	const result = await vm.checkForUpdates(true);
 	const gap = classifyVersionGap(currentVersion, result.latestVersion);
@@ -47886,4 +47933,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-Dgqfz9HY.js.map
+//# sourceMappingURL=run-DEBYRpko.js.map

package/dist/{run-Csg27VHs.js → run-DIu8THqp.js}

@@ -1,14 +1,14 @@
-import "./health-BERxzeG-.js";
+import "./health-BmBd4zyE.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
-import "./dist-90byyGPp.js";
-import "./manifest-read-BOvY53EG.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-Dgqfz9HY.js";
+import "./dist-Dl3vBZil.js";
+import "./manifest-read-Dan3I0ea.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-DEBYRpko.js";
 import "./routing-DFxoKHDt.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 import "./decision-router-BAPpON_C.js";
-import "./interactive-prompt-UWLccCqL.js";
+import "./interactive-prompt-Cj0Od5XZ.js";
 import "./recovery-engine-BKGBeBnW.js";
 
 export { runRunAction };

package/dist/{upgrade-unZndH-S.js → upgrade-CNtCNhsT.js}

@@ -1,5 +1,5 @@
-import "./dist-90byyGPp.js";
+import "./dist-Dl3vBZil.js";
 import "./version-manager-impl-qFBiO4Eh.js";
-import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-Dw6jKkH3.js";
+import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-DGqUA_5f.js";
 
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };

package/dist/{upgrade-Dw6jKkH3.js → upgrade-DGqUA_5f.js}

@@ -1,4 +1,4 @@
-import { createVersionManager } from "./dist-90byyGPp.js";
+import { createVersionManager } from "./dist-Dl3vBZil.js";
 import { execSync, spawn } from "child_process";
 import * as readline from "readline";
 
@@ -123,4 +123,4 @@ function registerUpgradeCommand(program) {
 
 //#endregion
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };
-//# sourceMappingURL=upgrade-Dw6jKkH3.js.map
+//# sourceMappingURL=upgrade-DGqUA_5f.js.map

package/dist/{version-manager-impl--XXnwjMd.js → version-manager-impl-f4r2s_Nv.js}

@@ -1,4 +1,4 @@
-import { VersionManagerImpl, createVersionManager } from "./dist-90byyGPp.js";
+import { VersionManagerImpl, createVersionManager } from "./dist-Dl3vBZil.js";
 import "./version-manager-impl-qFBiO4Eh.js";
 
 export { createVersionManager };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.20.151",
+  "version": "0.20.153",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",

package/dist/adapter-registry-BsBP3j5i.js

@@ -1,4 +0,0 @@
-import { AdapterRegistry } from "./dist-90byyGPp.js";
-import "./adapter-registry-DXLMTmfD.js";
-
-export { AdapterRegistry };