substrate-ai 0.20.62 → 0.20.64

package/dist/cli/index.js

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
-import { FileStateStore, RunManifest, SUBSTRATE_OWNED_SETTINGS_KEYS, SupervisorLock, VALID_PHASES, WorkGraphRepository, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, buildPipelineStatusOutput, createDatabaseAdapter, createStateStore, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, parseRuntimeProbes, readCurrentRunId, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics } from "../health-BoXxsFSF.js";
+import { FileStateStore, RunManifest, SUBSTRATE_OWNED_SETTINGS_KEYS, SupervisorLock, VALID_PHASES, WorkGraphRepository, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, buildPipelineStatusOutput, createDatabaseAdapter, createStateStore, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, parseRuntimeProbes, readCurrentRunId, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics } from "../health-DudlnqXd.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
 import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createDoltClient, createPipelineRun, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, tagRunAsBaseline, updatePipelineRun } from "../dist-W2emvN3F.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-CRz08RrU.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-CCxsv-9M.js";
 import "../errors-CKFu8YI9.js";
 import "../routing-CcBOCuC9.js";
 import "../decisions-C0pz9Clx.js";
-import "../version-manager-impl-BmOWu8ml.js";
-import { registerUpgradeCommand } from "../upgrade-CAqLkNUP.js";
+import "../decision-router-BA__VYIp.js";
+import "../version-manager-impl-FH4TTnXm.js";
+import { registerUpgradeCommand } from "../upgrade-aW7GYL2F.js";
 import { Command } from "commander";
 import { fileURLToPath } from "url";
 import { dirname, join, resolve } from "path";
@@ -7486,7 +7487,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-FZVOBYND.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-CLNmnZiw.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -9018,7 +9019,7 @@ async function runSupervisorAction(options, deps = {}) {
 						try {
 							const { createExperimenter } = await import(
 								/* @vite-ignore */
-								"../experimenter-DxxwicpK.js"
+								"../experimenter-BgpUcUaW.js"
 );
 							const { getLatestRun: getLatest } = await import(
 								/* @vite-ignore */
@@ -9032,7 +9033,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-BxfeSz6G.js"
+									"../run-ChxsPICN.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -14035,8 +14036,8 @@ async function createProgram() {
 /** Fire-and-forget startup version check (story 8.3, AC3/AC5) */
 function checkForUpdatesInBackground(currentVersion) {
 	if (process.env.SUBSTRATE_NO_UPDATE_CHECK === "1") return;
-	import("../upgrade-C8LAnB6W.js").then(async () => {
-		const { createVersionManager } = await import("../version-manager-impl-DaA_ALYK.js");
+	import("../upgrade-OFeC_NIx.js").then(async () => {
+		const { createVersionManager } = await import("../version-manager-impl-BCSf5E3j.js");
 		const vm = createVersionManager();
 		const result = await vm.checkForUpdates();
 		if (result.updateAvailable) {

package/dist/decision-router-BA__VYIp.js

@@ -0,0 +1,97 @@
+//#region src/modules/decision-router/index.ts
+/**
+* Maps each known decision type to its severity level.
+*
+* Epic 70: cross-story-race-recovered (info — log only, no halt) and
+* cross-story-race-still-failed (critical — recovery exhausted, halt for operator)
+* motivate the registry pattern. Epic 73 (Recovery Engine) will register
+* additional decision types here.
+*/
+const DECISION_SEVERITY_MAP = {
+	"cost-ceiling-exhausted": "critical",
+	"build-verification-failure": "critical",
+	"recovery-retry-attempt": "info",
+	"re-scope-proposal": "warning",
+	"scope-violation": "fatal",
+	"cross-story-race-recovered": "info",
+	"cross-story-race-still-failed": "critical",
+	"pipeline-escalation": "warning"
+};
+/**
+* Default action to apply when a decision does NOT trigger a halt.
+* Caller invokes the returned defaultAction string autonomously.
+*/
+const DEFAULT_ACTION_MAP = {
+	"cost-ceiling-exhausted": "skip-remaining",
+	"build-verification-failure": "escalate-without-halt",
+	"recovery-retry-attempt": "continue-autonomous",
+	"re-scope-proposal": "escalate-without-halt",
+	"scope-violation": "abort-pipeline",
+	"cross-story-race-recovered": "continue-autonomous",
+	"cross-story-race-still-failed": "escalate-without-halt",
+	"pipeline-escalation": "escalate-without-halt"
+};
+/** Fallback default action for unknown decision types. */
+const DEFAULT_DEFAULT_ACTION = "escalate-without-halt";
+/**
+* Route a halt-able decision through the autonomy policy.
+*
+* Pure function — no I/O, no side effects. All orchestrator state interactions
+* remain in orchestrator-impl.ts.
+*
+* Halt policy logic (AC4):
+* - 'all':      halts on info | warning | critical | fatal
+* - 'critical': halts on critical | fatal  (default)
+* - 'none':     halts ONLY on fatal (scope violations bypass the autonomy-gradient
+*               policy — they are always halts regardless of the chosen policy)
+*
+* Fatal always halts regardless of policy — hard safety invariant, not configurable.
+*
+* Unknown decision types default to severity 'critical' (safe default, AC9e).
+*
+* @param decision - The decision type string to route
+* @param policy   - The autonomy policy from the --halt-on CLI flag
+* @returns { halt: boolean, defaultAction: string, severity: Severity }
+*/
+function routeDecision(decision, policy) {
+	const severity = DECISION_SEVERITY_MAP[decision] ?? "critical";
+	let halt;
+	switch (policy) {
+		case "all":
+			halt = true;
+			break;
+		case "critical":
+			halt = severity === "critical" || severity === "fatal";
+			break;
+		case "none":
+			halt = severity === "fatal";
+			break;
+		default: halt = severity === "critical" || severity === "fatal";
+	}
+	if (severity === "fatal") halt = true;
+	const defaultAction = DEFAULT_ACTION_MAP[decision] ?? DEFAULT_DEFAULT_ACTION;
+	return {
+		halt,
+		defaultAction,
+		severity
+	};
+}
+/**
+* Derive the machine-readable exit code from pipeline completion results.
+*
+* - Exit `0` when all stories succeeded (or recovered cleanly)
+* - Exit `1` when some stories escalated; run completed
+* - Exit `2` when run-level failure (cost ceiling, fatal halt, orchestrator died, stories failed)
+*
+* @param outcome - Pipeline completion outcome data
+* @returns 0 (success), 1 (escalated), or 2 (failure)
+*/
+function deriveExitCode(outcome) {
+	if (outcome.failed.length > 0 || outcome.costCeilingExhausted === true || outcome.fatalHaltReached === true || outcome.orchestratorDied === true) return 2;
+	if (outcome.escalated.length > 0 && outcome.failed.length === 0) return 1;
+	return 0;
+}
+
+//#endregion
+export { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision };
+//# sourceMappingURL=decision-router-BA__VYIp.js.map

package/dist/{health-FZVOBYND.js → health-CLNmnZiw.js}

@@ -1,4 +1,4 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-BoXxsFSF.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-DudlnqXd.js";
 import "./logger-KeHncl-f.js";
 import "./dist-W2emvN3F.js";
 import "./decisions-C0pz9Clx.js";

package/dist/{health-BoXxsFSF.js → health-DudlnqXd.js}

@@ -7,7 +7,7 @@ import { readFile } from "fs/promises";
 import { EventEmitter } from "node:events";
 import { YAMLException, load } from "js-yaml";
 import { existsSync, promises, readFileSync, readdirSync, statSync } from "node:fs";
-import { spawn, spawnSync } from "node:child_process";
+import { execSync, spawn, spawnSync } from "node:child_process";
 import * as path$2 from "node:path";
 import { basename as basename$1, dirname as dirname$1, join as join$1, resolve as resolve$1 } from "node:path";
 import { z } from "zod";
@@ -5548,6 +5548,227 @@ function createDefaultVerificationPipeline(bus, config) {
 	return new VerificationPipeline(bus, checks);
 }
 
+//#endregion
+//#region packages/sdlc/dist/verification/cross-story-race-recovery.js
+/**
+* Detect stories whose verification results were recorded before concurrent
+* story commits landed.
+*
+* Stale-verification boundary condition:
+*   t.committedAt > s.verifiedAt
+*   AND
+*   t.modifiedFiles ∩ (s.modifiedFiles ∪ s.testFiles) ≠ ∅
+*
+* Where:
+*   s = the story we're checking for staleness
+*   t = another story in the batch that may have committed after s verified
+*
+* Pure function — all data must be pre-resolved in the `batch` entries.
+* Returns empty array when no stale stories are detected (idempotent, no-op).
+*
+* @param batch    Pre-resolved story data for all stories in the concurrent batch.
+* @param _manifest Manifest instance (accepted for API symmetry; not used in pure logic).
+* @returns Array of story keys that have stale verification results.
+*/
+function detectStaleVerifications(batch, _manifest) {
+	if (batch.length < 2) return [];
+	const staleKeys = [];
+	for (const s of batch) {
+		const sVerifiedAt = s.verifiedAt;
+		if (sVerifiedAt === void 0) continue;
+		const sPrimaryFiles = s.modifiedFiles ?? s.verificationResultFiles ?? [];
+		const sTestFiles = s.testFiles ?? [];
+		const sAllFiles = new Set([...sPrimaryFiles, ...sTestFiles]);
+		if (sAllFiles.size === 0) continue;
+		for (const t of batch) {
+			if (t.storyKey === s.storyKey) continue;
+			const tCommittedAt = t.committedAt;
+			if (tCommittedAt === void 0) continue;
+			let tTime, sTime;
+			try {
+				tTime = new Date(tCommittedAt).getTime();
+				sTime = new Date(sVerifiedAt).getTime();
+			} catch {
+				continue;
+			}
+			if (isNaN(tTime) || isNaN(sTime)) continue;
+			if (tTime <= sTime) continue;
+			const tFiles = t.modifiedFiles ?? [];
+			const hasOverlap = tFiles.some((f) => sAllFiles.has(f));
+			if (hasOverlap) {
+				staleKeys.push(s.storyKey);
+				break;
+			}
+		}
+	}
+	return staleKeys;
+}
+/**
+* Resolves the commit timestamp for a story's implementation commit.
+*
+* Uses the canonical `feat(story-<storyKey>):` commit message pattern to
+* locate the story's auto-commit in git history.
+*
+* @param storyKey   Story key (e.g. "70-1")
+* @param workingDir Absolute path to the git repo root
+* @returns ISO-8601 commit timestamp string, or `undefined` if not found
+*/
+function CommittedAtResolver(storyKey, workingDir) {
+	try {
+		const result = execSync(`git log --format=%cI --grep="feat(story-${storyKey}):" -1`, {
+			cwd: workingDir,
+			encoding: "utf-8",
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		}).trim();
+		return result.length > 0 ? result : void 0;
+	} catch {
+		return void 0;
+	}
+}
+/**
+* Cross-story race recovery action handler.
+*
+* Orchestrates the full recovery arc for stories with stale verification
+* results caused by concurrent story commits landing after verification ran:
+*
+*   1. Resolves `committedAt` for each batch story via git log.
+*   2. Enriches BatchEntry[] from manifest per_story_state when fields absent.
+*   3. Calls `detectStaleVerifications` to identify stale story keys.
+*   4. Returns `{ noStale: true }` immediately when none are stale (idempotent).
+*   5. For each stale story:
+*      a. Transitions status to `verification-stale` in manifest.
+*      b. Re-runs `createDefaultVerificationPipeline` against current tree.
+*      c. On pass: transitions to `complete`, emits `pipeline:cross-story-race-recovered`.
+*      d. On fail: transitions to `failed` with `verification_re_run: true`,
+*         emits `pipeline:cross-story-race-still-failed`.
+*
+* Implements AC3 canonical-helper discipline: all state reads use RunManifest,
+* all persistence uses the injected adapter. No direct file reads of manifest.json.
+*
+* @param input Recovery input (see StaleVerificationRecoveryInput)
+* @returns Recovery summary
+*/
+async function runStaleVerificationRecovery(input) {
+	const { runId, batch, workingDir, bus, manifest } = input;
+	const enrichedBatch = [];
+	let manifestData = null;
+	try {
+		manifestData = await manifest.read();
+	} catch {}
+	for (const entry of batch) {
+		const committedAt = CommittedAtResolver(entry.storyKey, workingDir);
+		let verifiedAt = entry.verifiedAt;
+		let modifiedFiles = entry.modifiedFiles;
+		let testFiles = entry.testFiles;
+		let verificationResultFiles = entry.verificationResultFiles;
+		if (manifestData !== null) {
+			const perStory = manifestData.per_story_state[entry.storyKey];
+			if (perStory !== void 0) {
+				if (verifiedAt === void 0) verifiedAt = perStory.completed_at;
+				if (modifiedFiles === void 0 && perStory.dev_story_signals?.files_modified !== void 0) modifiedFiles = perStory.dev_story_signals.files_modified;
+				if (verificationResultFiles === void 0 && perStory.dev_story_signals?.files_modified !== void 0) verificationResultFiles = perStory.dev_story_signals.files_modified;
+			}
+		}
+		const enriched = { storyKey: entry.storyKey };
+		if (committedAt !== void 0) enriched.committedAt = committedAt;
+		if (verifiedAt !== void 0) enriched.verifiedAt = verifiedAt;
+		if (modifiedFiles !== void 0) enriched.modifiedFiles = modifiedFiles;
+		if (testFiles !== void 0) enriched.testFiles = testFiles;
+		if (verificationResultFiles !== void 0) enriched.verificationResultFiles = verificationResultFiles;
+		enrichedBatch.push(enriched);
+	}
+	const staleKeys = detectStaleVerifications(enrichedBatch, manifest);
+	if (staleKeys.length === 0) return {
+		recovered: [],
+		stillFailed: [],
+		noStale: true
+	};
+	const recovered = [];
+	const stillFailed = [];
+	const verificationPipeline = createDefaultVerificationPipeline(bus);
+	for (const storyKey of staleKeys) {
+		const recoveryStart = Date.now();
+		let originalFindings = [];
+		if (manifestData !== null) {
+			const perStory = manifestData.per_story_state[storyKey];
+			if (perStory?.verification_result !== void 0) originalFindings = (perStory.verification_result.checks ?? []).flatMap((c) => c.findings ?? []);
+		}
+		await manifest.patchStoryState(storyKey, { status: "verification-stale" }).catch(() => {});
+		let commitSha;
+		try {
+			commitSha = execSync("git rev-parse HEAD", {
+				cwd: workingDir,
+				encoding: "utf-8",
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				]
+			}).trim();
+		} catch {
+			commitSha = "unknown";
+		}
+		let storyContent;
+		try {
+			const artifactsDir = `${workingDir}/_bmad-output/implementation-artifacts`;
+			if (existsSync(artifactsDir)) {
+				const STALE_SUFFIX = /\.stale-\d+\.md$/;
+				const files = readdirSync(artifactsDir);
+				const match = files.find((f) => f.startsWith(`${storyKey}-`) && f.endsWith(".md") && !STALE_SUFFIX.test(f));
+				if (match !== void 0) storyContent = readFileSync(`${artifactsDir}/${match}`, "utf-8");
+			}
+		} catch {}
+		const verifContext = {
+			storyKey,
+			workingDir,
+			commitSha,
+			timeout: 6e4,
+			...storyContent !== void 0 ? { storyContent } : {}
+		};
+		const freshSummary = await verificationPipeline.run(verifContext, "A");
+		const freshFindings = (freshSummary.checks ?? []).flatMap((c) => c.findings ?? []);
+		const recoveryDurationMs = Date.now() - recoveryStart;
+		if (freshSummary.status === "pass" || freshSummary.status === "warn") {
+			await manifest.patchStoryState(storyKey, {
+				status: "complete",
+				verification_result: freshSummary,
+				completed_at: new Date().toISOString()
+			}).catch(() => {});
+			bus.emit("pipeline:cross-story-race-recovered", {
+				runId,
+				storyKey,
+				originalFindings,
+				freshFindings,
+				recoveryDurationMs
+			});
+			recovered.push(storyKey);
+		} else {
+			await manifest.patchStoryState(storyKey, {
+				status: "failed",
+				verification_result: freshSummary,
+				verification_re_run: true,
+				completed_at: new Date().toISOString()
+			}).catch(() => {});
+			bus.emit("pipeline:cross-story-race-still-failed", {
+				runId,
+				storyKey,
+				freshFindings,
+				recoveryDurationMs
+			});
+			stillFailed.push(storyKey);
+		}
+	}
+	return {
+		recovered,
+		stillFailed,
+		noStale: false
+	};
+}
+
 //#endregion
 //#region packages/sdlc/dist/run-model/cli-flags.js
 /**
@@ -5566,7 +5787,16 @@ const CliFlagsSchema = z.object({
 	cost_ceiling: z.number().positive().optional(),
 	agent: z.string().optional(),
 	skip_verification: z.boolean().optional(),
-	events: z.boolean().optional()
+	events: z.boolean().optional(),
+	non_interactive: z.boolean().optional(),
+	halt_skipped: z.boolean().optional(),
+	halt_skipped_decisions: z.array(z.object({
+		decisionType: z.string(),
+		severity: z.string(),
+		defaultAction: z.string(),
+		reason: z.string(),
+		skippedAt: z.string()
+	})).optional()
 });
 
 //#endregion
@@ -5704,6 +5934,7 @@ const PerStoryStatusSchema = z.union([
 	z.literal("verification-failed"),
 	z.literal("gated"),
 	z.literal("skipped"),
+	z.literal("verification-stale"),
 	z.string()
 ]);
 /**
@@ -5735,7 +5966,8 @@ const PerStoryStateSchema = z.object({
 		z.literal("state-integrating"),
 		z.literal("both"),
 		z.string()
-	]).optional()
+	]).optional(),
+	verification_re_run: z.boolean().optional()
 });
 
 //#endregion
@@ -7340,5 +7572,5 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 }
 
 //#endregion
-export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, DoltMergeConflict, FileStateStore, FindingsInjector, RunManifest, RuntimeProbeListSchema, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN$1 as STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, SupervisorLock, VALID_PHASES, WorkGraphRepository, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, __commonJS, __require, __toESM, aggregateProbeAuthorMetrics, applyConfigToGraph, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, createStateStore, detectCycles, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, parseRuntimeProbes, readCurrentRunId, registerHealthCommand, renderFindings, resolveBmadMethodSrcPath, resolveBmadMethodVersion, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-BoXxsFSF.js.map
+export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, DoltMergeConflict, FileStateStore, FindingsInjector, RunManifest, RuntimeProbeListSchema, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN$1 as STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, SupervisorLock, VALID_PHASES, WorkGraphRepository, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, __commonJS, __require, __toESM, aggregateProbeAuthorMetrics, applyConfigToGraph, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, createStateStore, detectCycles, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, parseRuntimeProbes, readCurrentRunId, registerHealthCommand, renderFindings, resolveBmadMethodSrcPath, resolveBmadMethodVersion, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runHealthAction, runStaleVerificationRecovery, validateStoryKey };
+//# sourceMappingURL=health-DudlnqXd.js.map

package/dist/index.d.ts

@@ -732,6 +732,28 @@ interface CostCeilingReachedEvent {
   /** 'critical' when halt_on is 'all' or 'critical'; absent when 'none' */
   severity?: string;
 }
+/**
+ * Emitted when --non-interactive mode suppresses a halt decision and applies
+ * the default action autonomously instead of prompting the operator.
+ *
+ * Story 72-2: closes the NDJSON protocol gap — operators can see which halts
+ * were auto-skipped and what actions were applied via `substrate report`.
+ */
+interface DecisionHaltSkippedNonInteractiveEvent {
+  type: 'decision:halt-skipped-non-interactive';
+  /** ISO-8601 timestamp generated at emit time */
+  ts: string;
+  /** Pipeline run ID */
+  run_id: string;
+  /** Halt decision type that was skipped (e.g., 'halt:escalation', 'cost-ceiling-exhausted') */
+  decision_type: string;
+  /** Severity of the skipped halt (e.g., 'critical') */
+  severity: string;
+  /** Action that was applied in place of the operator prompt (e.g., 'continue-autonomous') */
+  default_action: string;
+  /** Human-readable reason for skipping */
+  reason: string;
+}
 /**
  * Discriminated union of all pipeline event types.
  *
@@ -744,7 +766,7 @@ interface CostCeilingReachedEvent {
  * }
  * ```
  */
-type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent; //#endregion
+type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent; //#endregion
 //#region packages/core/dist/types.d.ts
 
 /**
@@ -2479,6 +2501,87 @@ interface OrchestratorEvents {
     /** Hash computed from the current source epic's AC section */
     currentHash: string;
   };
+  /**
+   * Cross-story race recovery succeeded: fresh verification passed for a story
+   * whose original result was stale due to a concurrent story committing after
+   * the original verification ran.
+   *
+   * Story 70-1. Motivating incidents: Epic 66 (run a832487a), Epic 67 (run a59e4c96).
+   * Mirror of CoreEvents['pipeline:cross-story-race-recovered']; both must stay in sync.
+   */
+  'pipeline:cross-story-race-recovered': {
+    runId: string;
+    storyKey: string;
+    originalFindings: unknown[];
+    freshFindings: unknown[];
+    recoveryDurationMs: number;
+  };
+  /**
+   * Cross-story race recovery completed but fresh verification still failed:
+   * the story genuinely has issues that are not attributable to the race condition.
+   *
+   * Story 70-1. Motivating incidents: Epic 66 (run a832487a), Epic 67 (run a59e4c96).
+   * Mirror of CoreEvents['pipeline:cross-story-race-still-failed']; both must stay in sync.
+   */
+  'pipeline:cross-story-race-still-failed': {
+    runId: string;
+    storyKey: string;
+    freshFindings: unknown[];
+    recoveryDurationMs: number;
+  };
+  /**
+   * Story 72-2: A critical halt decision was skipped under --non-interactive mode.
+   *
+   * Emitted when the pipeline would have prompted the operator (interactive stdin
+   * read) but --non-interactive suppressed stdin and auto-applied the default
+   * action instead. Operators reviewing the run via `substrate report` can see
+   * which halts were auto-skipped and what actions were applied.
+   *
+   * Mirror of CoreEvents['decision:halt-skipped-non-interactive']; both must stay
+   * in sync.
+   */
+  'decision:halt-skipped-non-interactive': {
+    runId: string;
+    /** Halt decision type that was skipped (e.g., 'halt:escalation', 'halt:critical'). */
+    decisionType: string;
+    /** Severity of the skipped halt (e.g., 'critical'). */
+    severity: string;
+    /** Action that was applied in place of the operator prompt (e.g., 'continue'). */
+    defaultAction: string;
+    /** Human-readable reason for skipping (e.g., 'non-interactive: stdin prompt suppressed'). */
+    reason: string;
+  };
+  /**
+   * Story 72-1: A halt-able decision was routed and the policy requires halting.
+   * Emitted when routeDecision() returns halt=true for a given policy.
+   * Mirror of CoreEvents['decision:halt']; both must stay in sync.
+   */
+  'decision:halt': {
+    runId: string;
+    /** The decision type that triggered the halt (e.g., 'cost-ceiling-exhausted'). */
+    decisionType: string;
+    /** Severity of the decision (e.g., 'critical', 'fatal'). */
+    severity: string;
+    /** Human-readable reason for the halt. */
+    reason: string;
+  };
+  /**
+   * Story 72-1: A halt-able decision was routed and the policy allows autonomous action.
+   * Emitted when routeDecision() returns halt=false for a given policy.
+   * Caller applies defaultAction without operator intervention.
+   * Mirror of CoreEvents['decision:autonomous']; both must stay in sync.
+   */
+  'decision:autonomous': {
+    runId: string;
+    /** The decision type that was routed autonomously (e.g., 'build-verification-failure'). */
+    decisionType: string;
+    /** Severity of the decision (e.g., 'info', 'warning', 'critical'). */
+    severity: string;
+    /** The action applied autonomously (e.g., 'escalate-without-halt', 'continue-autonomous'). */
+    defaultAction: string;
+    /** Human-readable reason for autonomous action. */
+    reason: string;
+  };
 }
 
 //#endregion

package/dist/{run-CRz08RrU.js → run-CCxsv-9M.js}

@@ -1,7 +1,8 @@
-import { BMAD_BASELINE_TOKENS_FULL, DoltMergeConflict, FileStateStore, FindingsInjector, RunManifest, RuntimeProbeListSchema, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, WorkGraphRepository, __commonJS, __require, __toESM, applyConfigToGraph, buildPipelineStatusOutput, createDatabaseAdapter, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectCycles, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, renderFindings, resolveGraphPath, resolveMainRepoRoot, validateStoryKey } from "./health-BoXxsFSF.js";
+import { BMAD_BASELINE_TOKENS_FULL, DoltMergeConflict, FileStateStore, FindingsInjector, RunManifest, RuntimeProbeListSchema, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, WorkGraphRepository, __commonJS, __require, __toESM, applyConfigToGraph, buildPipelineStatusOutput, createDatabaseAdapter, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectCycles, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, renderFindings, resolveGraphPath, resolveMainRepoRoot, runStaleVerificationRecovery, validateStoryKey } from "./health-DudlnqXd.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
 import { ADVISORY_NOTES, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, createConfigSystem, createDatabaseAdapter$1, createDecision, createPipelineRun, createRequirement, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-W2emvN3F.js";
+import { deriveExitCode, routeDecision } from "./decision-router-BA__VYIp.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
 import { EventEmitter } from "node:events";
@@ -1764,7 +1765,7 @@ const PIPELINE_EVENT_METADATA = [
 			{
 				name: "action",
 				type: "string",
-				description: "Action taken (always stopped in this story; interactive prompt is Epic 54 scope)."
+				description: "Action taken — stopped when policy requires halt, or the defaultAction when proceeding autonomously."
 			},
 			{
 				name: "skipped_stories",
@@ -1774,10 +1775,47 @@ const PIPELINE_EVENT_METADATA = [
 			{
 				name: "severity",
 				type: "string",
-				description: "critical when halt_on is all or critical; absent when none.",
+				description: "Severity from routeDecision (critical for cost-ceiling-exhausted).",
 				optional: true
 			}
 		]
+	},
+	{
+		type: "decision:halt-skipped-non-interactive",
+		description: "A critical halt decision was skipped under --non-interactive mode; default action was applied autonomously.",
+		when: "Emitted when --non-interactive suppresses an operator prompt and applies the default action. Story 72-2.",
+		fields: [
+			{
+				name: "ts",
+				type: "string",
+				description: "Timestamp."
+			},
+			{
+				name: "run_id",
+				type: "string",
+				description: "Pipeline run ID."
+			},
+			{
+				name: "decision_type",
+				type: "string",
+				description: "Halt decision type that was skipped (e.g., halt:escalation)."
+			},
+			{
+				name: "severity",
+				type: "string",
+				description: "Severity of the skipped halt (e.g., critical)."
+			},
+			{
+				name: "default_action",
+				type: "string",
+				description: "Action applied in place of the operator prompt."
+			},
+			{
+				name: "reason",
+				type: "string",
+				description: "Human-readable reason for skipping."
+			}
+		]
 	}
 ];
 /**
@@ -14284,6 +14322,27 @@ function createImplementationOrchestrator(deps) {
 						}, "Build-fix dispatch failed — escalating");
 					}
 					if (!buildFixPassed) {
+						let buildHaltPolicy = "critical";
+						if (runManifest !== null && runManifest !== void 0) try {
+							const manifestData = await runManifest.read();
+							buildHaltPolicy = manifestData.cli_flags.halt_on ?? "critical";
+						} catch {}
+						const buildRouteResult = routeDecision("build-verification-failure", buildHaltPolicy);
+						const buildRunId = config.pipelineRunId ?? "unknown";
+						const buildReason = `build verification failed for story ${storyKey}`;
+						if (buildRouteResult.halt) eventBus.emit("decision:halt", {
+							runId: buildRunId,
+							decisionType: "build-verification-failure",
+							severity: buildRouteResult.severity,
+							reason: buildReason
+						});
+						else eventBus.emit("decision:autonomous", {
+							runId: buildRunId,
+							decisionType: "build-verification-failure",
+							severity: buildRouteResult.severity,
+							defaultAction: buildRouteResult.defaultAction,
+							reason: buildReason
+						});
 						eventBus.emit("story:build-verification-failed", {
 							storyKey,
 							exitCode: buildVerifyResult.exitCode ?? 1,
@@ -14292,7 +14351,9 @@ function createImplementationOrchestrator(deps) {
 						logger$26.warn({
 							storyKey,
 							reason,
-							exitCode: buildVerifyResult.exitCode
+							exitCode: buildVerifyResult.exitCode,
+							routedHalt: buildRouteResult.halt,
+							defaultAction: buildRouteResult.defaultAction
 						}, "Build verification failed — escalating story");
 						updateStory(storyKey, {
 							phase: "ESCALATED",
@@ -15234,7 +15295,23 @@ function createImplementationOrchestrator(deps) {
 	* @param manifest - The current run manifest data
 	*/
 	async function handleCeilingExceeded(triggeredStoryKey, remainingInGroup, result, manifest) {
-		const haltOn = manifest.cli_flags.halt_on ?? "none";
+		const haltPolicy = manifest.cli_flags.halt_on ?? "critical";
+		const routeResult = routeDecision("cost-ceiling-exhausted", haltPolicy);
+		const runId = config.pipelineRunId ?? "unknown";
+		const reason = `cost ceiling exceeded: ${result.cumulative.toFixed(4)} USD >= ${result.ceiling} USD`;
+		if (routeResult.halt) eventBus.emit("decision:halt", {
+			runId,
+			decisionType: "cost-ceiling-exhausted",
+			severity: routeResult.severity,
+			reason
+		});
+		else eventBus.emit("decision:autonomous", {
+			runId,
+			decisionType: "cost-ceiling-exhausted",
+			severity: routeResult.severity,
+			defaultAction: routeResult.defaultAction,
+			reason
+		});
 		const allSkipped = [triggeredStoryKey, ...remainingInGroup];
 		for (const [key, state] of _stories) if (state.phase === "PENDING" && !allSkipped.includes(key)) allSkipped.push(key);
 		for (const key of allSkipped) {
@@ -15248,16 +15325,18 @@ function createImplementationOrchestrator(deps) {
 		eventBus.emit("cost:ceiling-reached", {
 			cumulative_cost: result.cumulative,
 			ceiling: result.ceiling,
-			halt_on: haltOn,
-			action: "stopped",
+			halt_on: haltPolicy,
+			action: routeResult.halt ? "stopped" : routeResult.defaultAction,
 			skipped_stories: allSkipped,
-			...haltOn !== "none" ? { severity: "critical" } : {}
+			severity: routeResult.severity
 		});
 		_budgetExhausted = true;
 		logger$26.warn({
 			skipped: allSkipped.length,
 			cumulative: result.cumulative,
-			ceiling: result.ceiling
+			ceiling: result.ceiling,
+			routedHalt: routeResult.halt,
+			defaultAction: routeResult.defaultAction
 		}, "Cost ceiling reached — stopping dispatch");
 	}
 	/**
@@ -15745,7 +15824,36 @@ function createImplementationOrchestrator(deps) {
 			try {
 				for (const rawBatchGroups of batches) {
 					const batchGroups = detectAndSerializeConcurrentFileCollisions(rawBatchGroups);
+					let collisionFired = false;
+					const collisionListener = (_evt) => {
+						collisionFired = true;
+					};
+					eventBus.on("dispatch:cross-story-file-collision", collisionListener);
 					await runWithConcurrency(batchGroups, config.maxConcurrency);
+					eventBus.off("dispatch:cross-story-file-collision", collisionListener);
+					if (collisionFired && runManifest !== null && runManifest !== void 0) {
+						const batchStoryKeys = batchGroups.flat();
+						const batchEntries = batchStoryKeys.map((key) => ({ storyKey: key }));
+						const runId = config.pipelineRunId ?? "unknown";
+						try {
+							const recoveryResult = await runStaleVerificationRecovery({
+								runId,
+								batch: batchEntries,
+								workingDir: projectRoot ?? process.cwd(),
+								bus: toSdlcEventBus(eventBus),
+								manifest: runManifest,
+								adapter: db
+							});
+							if (!recoveryResult.noStale) logger$26.info({
+								recovered: recoveryResult.recovered,
+								stillFailed: recoveryResult.stillFailed,
+								recoveredCount: recoveryResult.recovered.length,
+								stillFailedCount: recoveryResult.stillFailed.length
+							}, "Cross-story race recovery complete");
+						} catch (recoveryErr) {
+							logger$26.warn({ err: recoveryErr }, "Cross-story race recovery failed (non-fatal) — pipeline continues");
+						}
+					}
 				}
 			} catch (err) {
 				stopHeartbeat();
@@ -44175,6 +44283,17 @@ function wireNdjsonEmitter(eventBus, ndjsonEmitter) {
 			...payload.severity !== void 0 ? { severity: payload.severity } : {}
 		});
 	});
+	eventBus.on("decision:halt-skipped-non-interactive", (payload) => {
+		ndjsonEmitter.emit({
+			type: "decision:halt-skipped-non-interactive",
+			ts: new Date().toISOString(),
+			run_id: payload.runId,
+			decision_type: payload.decisionType,
+			severity: payload.severity,
+			default_action: payload.defaultAction,
+			reason: payload.reason
+		});
+	});
 }
 /**
 * Resolve the `probeAuthorStateIntegrating` boolean from CLI flag and env var.
@@ -44191,8 +44310,20 @@ function resolveProbeAuthorStateIntegrating(cliFlag) {
 	if (envVal !== void 0) return envVal === "on";
 	return true;
 }
+/**
+* Story 72-2: --non-interactive + Machine-Readable Exit Codes.
+*
+* Phase D Story 54-6 (2026-04-05): original headless CI/CD spec.
+* Story 72-1: Decision Router providing routeDecision defaultAction authority.
+* Story 72-2 (this code): --non-interactive flag that suppresses stdin reads,
+*   auto-applies default actions via routeDecision, and returns exit codes 0/1/2.
+*
+* Enables strata + agent-mesh cross-project CI/CD invocation:
+*   substrate run --non-interactive --halt-on none --events --output-format json
+*/
 async function runRunAction(options) {
-	const { pack: packName, from: startPhase, stopAfter, concept: conceptArg, conceptFile, stories: storiesArg, concurrency, outputFormat, projectRoot, events: eventsFlag, verbose: verboseFlag, tui: tuiFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, epic: epicNumber, dryRun, maxReviewCycles = 2, engine, agent: agentId, registry: injectedRegistry, haltOn, costCeiling, probeAuthor, probeAuthorStateIntegrating: probeAuthorStateIntegratingFlag } = options;
+	const { pack: packName, from: startPhase, stopAfter, concept: conceptArg, conceptFile, stories: storiesArg, concurrency, outputFormat, projectRoot, events: eventsFlag, verbose: verboseFlag, tui: tuiFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, epic: epicNumber, dryRun, maxReviewCycles = 2, engine, agent: agentId, registry: injectedRegistry, haltOn: haltOnOpt, costCeiling, probeAuthor, probeAuthorStateIntegrating: probeAuthorStateIntegratingFlag, nonInteractive } = options;
+	const haltOn = haltOnOpt;
 	const VALID_PROBE_AUTHOR_MODES = [
 		"enabled",
 		"disabled",
@@ -44505,11 +44636,12 @@ async function runRunAction(options) {
 			const runsDir = join(dbDir, "runs");
 			const cliFlags = {
 				...parsedStoryKeys.length > 0 ? { stories: parsedStoryKeys } : {},
-				halt_on: haltOn ?? "none",
+				halt_on: haltOn ?? "critical",
 				...costCeiling !== void 0 ? { cost_ceiling: costCeiling } : {},
 				...agentId !== void 0 ? { agent: agentId } : {},
 				...skipVerification === true ? { skip_verification: true } : {},
-				...eventsFlag === true ? { events: true } : {}
+				...eventsFlag === true ? { events: true } : {},
+				...nonInteractive === true ? { non_interactive: true } : {}
 			};
 			const manifest = RunManifest.open(pipelineRun.id, runsDir);
 			await manifest.patchCLIFlags(cliFlags);
@@ -44536,6 +44668,14 @@ async function runRunAction(options) {
 			});
 		} catch {}
 		const eventBus = createEventBus();
+		let _costCeilingExhausted = false;
+		let _fatalHaltReached = false;
+		eventBus.on("cost:ceiling-reached", () => {
+			_costCeilingExhausted = true;
+		});
+		eventBus.on("decision:halt", (payload) => {
+			if (payload.severity === "fatal") _fatalHaltReached = true;
+		});
 		const contextCompiler = createContextCompiler({ db: adapter });
 		if (!injectedRegistry) throw new Error("AdapterRegistry is required — must be initialized at CLI startup");
 		const routingConfigPath = join(projectRoot, "substrate.routing.yml");
@@ -44676,7 +44816,7 @@ async function runRunAction(options) {
 		if (tuiFlag === true && !isTuiCapable()) printNonTtyWarning();
 		if (verboseFlag !== true && eventsFlag !== true) process.env.LOG_LEVEL = "silent";
 		let tuiApp;
-		if (tuiFlag === true && isTuiCapable() && eventsFlag !== true && outputFormat === "human") {
+		if (tuiFlag === true && nonInteractive !== true && isTuiCapable() && eventsFlag !== true && outputFormat === "human") {
 			tuiApp = createTuiApp(process.stdout, process.stdin);
 			tuiApp.handleEvent({
 				type: "pipeline:start",
@@ -45069,13 +45209,52 @@ async function runRunAction(options) {
 			engineType: resolvedEngine,
 			concurrency
 		});
+		if (nonInteractive === true) {
+			if (escalatedKeys.length > 0 || _costCeilingExhausted || _fatalHaltReached) {
+				const haltPolicy = haltOn ?? "critical";
+				const routeResult = routeDecision("pipeline-escalation", haltPolicy);
+				eventBus.emit("decision:halt-skipped-non-interactive", {
+					runId: pipelineRun.id,
+					decisionType: "pipeline-escalation",
+					severity: routeResult.severity,
+					defaultAction: routeResult.defaultAction,
+					reason: "non-interactive: stdin prompt suppressed"
+				});
+				try {
+					const runsDir = join(dbDir, "runs");
+					const runManifestForHalt = RunManifest.open(pipelineRun.id, runsDir);
+					await runManifestForHalt.update({ cli_flags: {
+						halt_on: haltPolicy,
+						halt_skipped: true,
+						halt_skipped_decisions: [{
+							decisionType: "pipeline-escalation",
+							severity: routeResult.severity,
+							defaultAction: routeResult.defaultAction,
+							reason: "non-interactive: stdin prompt suppressed",
+							skippedAt: new Date().toISOString()
+						}]
+					} });
+				} catch (haltManifestErr) {
+					logger.warn({ err: haltManifestErr }, "Failed to write halt-skipped to manifest (best-effort)");
+				}
+			}
+			const derivedCode = deriveExitCode({
+				succeeded: succeededKeys,
+				escalated: escalatedKeys,
+				failed: failedKeys,
+				total: storyKeys.length,
+				costCeilingExhausted: _costCeilingExhausted,
+				fatalHaltReached: _fatalHaltReached
+			});
+			return derivedCode;
+		}
 		return 0;
 	} catch (err) {
 		const msg = err instanceof Error ? err.message : String(err);
 		if (outputFormat === "json") process.stdout.write(formatOutput(null, "json", false, msg) + "\n");
 		else process.stderr.write(`Error: ${msg}\n`);
 		logger.error({ err }, "run failed");
-		return 1;
+		return nonInteractive === true ? 2 : 1;
 	} finally {
 		try {
 			await adapter.close();
@@ -45549,7 +45728,22 @@ async function runFullPipeline(options) {
 	}
 }
 function registerRunCommand(program, _version = "0.0.0", projectRoot = process.cwd(), registry) {
-	program.command("run").description("Run the autonomous pipeline (use --from to start from a specific phase)").option("--pack <name>", "Methodology pack name", "bmad").option("--from <phase>", "Start from this phase: analysis, planning, solutioning, implementation").option("--stop-after <phase>", "Stop pipeline after this phase completes").option("--concept <text>", "Inline concept text (required when --from analysis)").option("--concept-file <path>", "Path to a file containing the concept text").option("--stories <keys>", "Comma-separated story keys (e.g., 10-1,10-2)").option("--epic <n>", "Scope story discovery to a single epic number (e.g., 27)", (v) => parseInt(v, 10)).option("--concurrency <n>", "Maximum parallel conflict groups", (v) => parseInt(v, 10), 3).option("--project-root <path>", "Project root directory", projectRoot).option("--output-format <format>", "Output format: human (default) or json", "human").option("--events", "Emit structured NDJSON events on stdout for programmatic consumption").option("--verbose", "Show detailed pino log output").option("--help-agent", "Print a machine-optimized prompt fragment for AI agents and exit").option("--tui", "Show TUI dashboard").option("--skip-ux", "Skip the UX design phase even if enabled in the pack manifest").option("--research", "Enable the research phase even if not set in the pack manifest").option("--skip-research", "Skip the research phase even if enabled in the pack manifest").option("--skip-preflight", "Skip the pre-flight build check (escape hatch for known-broken projects)").option("--skip-verification", "Skip the post-dispatch verification pipeline (Story 51-5)").option("--max-review-cycles <n>", "Maximum review cycles per story (default: 2)", (v) => parseInt(v, 10), 2).option("--dry-run", "Preview routing and repo-map injection without dispatching (Story 28-9)").option("--engine <type>", "Execution engine: linear (default) or graph").option("--agent <id>", "Agent backend: claude-code (default), codex, or gemini").option("--halt-on <severity>", "Halt pipeline on escalation severity: all | critical | none (default: none)", "none").option("--cost-ceiling <amount>", "Maximum cost ceiling in USD (positive number); halts pipeline when exceeded", parseFloat).option("--probe-author <mode>", "probe-author phase mode: enabled | disabled | auto (default: auto = SUBSTRATE_PROBE_AUTHOR_ENABLED env, default true) (Story 60-14)", "auto").option("--probe-author-state-integrating <value>", "Disable probe-author dispatch for state-integrating ACs (Phase 3). Use to ramp DOWN if catch rate drops below the GREEN threshold. Values: on | off (default: on)").action(async (opts) => {
+	program.command("run").description("Run the autonomous pipeline (use --from to start from a specific phase)").option("--pack <name>", "Methodology pack name", "bmad").option("--from <phase>", "Start from this phase: analysis, planning, solutioning, implementation").option("--stop-after <phase>", "Stop pipeline after this phase completes").option("--concept <text>", "Inline concept text (required when --from analysis)").option("--concept-file <path>", "Path to a file containing the concept text").option("--stories <keys>", "Comma-separated story keys (e.g., 10-1,10-2)").option("--epic <n>", "Scope story discovery to a single epic number (e.g., 27)", (v) => parseInt(v, 10)).option("--concurrency <n>", "Maximum parallel conflict groups", (v) => parseInt(v, 10), 3).option("--project-root <path>", "Project root directory", projectRoot).option("--output-format <format>", "Output format: human (default) or json", "human").option("--events", "Emit structured NDJSON events on stdout for programmatic consumption").option("--verbose", "Show detailed pino log output").option("--help-agent", "Print a machine-optimized prompt fragment for AI agents and exit").option("--tui", "Show TUI dashboard").option("--skip-ux", "Skip the UX design phase even if enabled in the pack manifest").option("--research", "Enable the research phase even if not set in the pack manifest").option("--skip-research", "Skip the research phase even if enabled in the pack manifest").option("--skip-preflight", "Skip the pre-flight build check (escape hatch for known-broken projects)").option("--skip-verification", "Skip the post-dispatch verification pipeline (Story 51-5)").option("--max-review-cycles <n>", "Maximum review cycles per story (default: 2)", (v) => parseInt(v, 10), 2).option("--dry-run", "Preview routing and repo-map injection without dispatching (Story 28-9)").option("--engine <type>", "Execution engine: linear (default) or graph").option("--agent <id>", "Agent backend: claude-code (default), codex, or gemini").option("--halt-on <severity>", "Halt pipeline on escalation severity: all | critical | none (default: critical)", "critical").option("--cost-ceiling <amount>", "Maximum cost ceiling in USD (positive number); halts pipeline when exceeded", parseFloat).option("--probe-author <mode>", "probe-author phase mode: enabled | disabled | auto (default: auto = SUBSTRATE_PROBE_AUTHOR_ENABLED env, default true) (Story 60-14)", "auto").option("--probe-author-state-integrating <value>", "Disable probe-author dispatch for state-integrating ACs (Phase 3). Use to ramp DOWN if catch rate drops below the GREEN threshold. Values: on | off (default: on)").option("--non-interactive", [
+		"Run without operator prompts (CI/CD mode). Suppresses all stdin reads,",
+		"auto-applies default actions for halt decisions, and returns machine-readable",
+		"exit codes: 0=all stories succeeded, 1=some escalated, 2=run-level failure.",
+		"",
+		"Canonical CI/CD invocation:",
+		"  substrate run --non-interactive --halt-on none --events --output-format json",
+		"",
+		"Exit code semantics:",
+		"  0  All stories succeeded (or recovered cleanly)",
+		"  1  Some stories escalated; run completed",
+		"  2  Run-level failure (cost ceiling exhausted, fatal halt, orchestrator died)",
+		"",
+		"--halt-on defaults to critical. Skipped halt decisions are recorded as",
+		"decision:halt-skipped-non-interactive events in --non-interactive mode."
+	].join("\n      ")).action(async (opts) => {
 		if (opts.helpAgent) {
 			process.exitCode = await runHelpAgent();
 			return;
@@ -45593,12 +45787,14 @@ function registerRunCommand(program, _version = "0.0.0", projectRoot = process.c
 			haltOn: opts.haltOn,
 			costCeiling: opts.costCeiling,
 			probeAuthor: opts.probeAuthor,
-			probeAuthorStateIntegrating: opts.probeAuthorStateIntegrating
+			probeAuthorStateIntegrating: opts.probeAuthorStateIntegrating,
+			nonInteractive: opts.nonInteractive
 		});
+		if (opts.nonInteractive === true) process.exit(exitCode);
 		process.exitCode = exitCode;
 	});
 }
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-CRz08RrU.js.map
+//# sourceMappingURL=run-CCxsv-9M.js.map

package/dist/{run-BxfeSz6G.js → run-ChxsPICN.js}

@@ -1,9 +1,10 @@
-import "./health-BoXxsFSF.js";
+import "./health-DudlnqXd.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
 import "./dist-W2emvN3F.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-CRz08RrU.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-CCxsv-9M.js";
 import "./routing-CcBOCuC9.js";
 import "./decisions-C0pz9Clx.js";
+import "./decision-router-BA__VYIp.js";
 
 export { runRunAction };

package/dist/src/modules/decision-router/index.d.ts

@@ -0,0 +1,88 @@
+//#region src/modules/decision-router/index.d.ts
+/**
+ * Decision Router — Phase D Story 54-2 (2026-04-05): original autonomy-gradient spec.
+ * Story 72-1: --halt-on flag + Decision Router (this file).
+ *   Classifies every halt-able decision by severity and enforces the chosen autonomy policy.
+ *   Exports routeDecision(decision, policy) pure function for orchestrator consumption.
+ * Epic 70: cross-story-race decision types (cross-story-race-recovered,
+ *   cross-story-race-still-failed) motivate the registry pattern — different halt semantics
+ *   based on severity (info vs critical).
+ * Epic 73 (Recovery Engine) will register additional decision types via DECISION_SEVERITY_MAP.
+ *
+ * Story 72-2: --non-interactive flag consuming routeDecision for stdin suppression.
+ * Enables strata + agent-mesh cross-project CI/CD invocation.
+ */
+/**
+ * Severity of a halt-able decision.
+ * Controls which autonomy policies trigger a halt.
+ */
+type Severity = 'info' | 'warning' | 'critical' | 'fatal';
+/**
+ * All known halt-able decision types (AC1).
+ * Epic 73 (Recovery Engine) will extend this union with additional types.
+ */
+type DecisionType = 'cost-ceiling-exhausted' | 'build-verification-failure' | 'recovery-retry-attempt' | 're-scope-proposal' | 'scope-violation' | 'cross-story-race-recovered' | 'cross-story-race-still-failed' | 'pipeline-escalation';
+/**
+ * Maps each known decision type to its severity level.
+ *
+ * Epic 70: cross-story-race-recovered (info — log only, no halt) and
+ * cross-story-race-still-failed (critical — recovery exhausted, halt for operator)
+ * motivate the registry pattern. Epic 73 (Recovery Engine) will register
+ * additional decision types here.
+ */
+declare const DECISION_SEVERITY_MAP: Record<DecisionType, Severity>;
+/**
+ * Route a halt-able decision through the autonomy policy.
+ *
+ * Pure function — no I/O, no side effects. All orchestrator state interactions
+ * remain in orchestrator-impl.ts.
+ *
+ * Halt policy logic (AC4):
+ * - 'all':      halts on info | warning | critical | fatal
+ * - 'critical': halts on critical | fatal  (default)
+ * - 'none':     halts ONLY on fatal (scope violations bypass the autonomy-gradient
+ *               policy — they are always halts regardless of the chosen policy)
+ *
+ * Fatal always halts regardless of policy — hard safety invariant, not configurable.
+ *
+ * Unknown decision types default to severity 'critical' (safe default, AC9e).
+ *
+ * @param decision - The decision type string to route
+ * @param policy   - The autonomy policy from the --halt-on CLI flag
+ * @returns { halt: boolean, defaultAction: string, severity: Severity }
+ */
+declare function routeDecision(decision: string, policy: 'all' | 'critical' | 'none'): {
+  halt: boolean;
+  defaultAction: string;
+  severity: Severity;
+};
+/**
+ * Inputs for exit code derivation from pipeline completion results.
+ * Used by the CLI layer to derive the machine-readable exit code (0/1/2)
+ * for non-interactive CI/CD invocations.
+ */
+interface PipelineOutcome {
+  succeeded: string[];
+  recovered?: string[];
+  escalated: string[];
+  failed: string[];
+  total: number;
+  costCeilingExhausted?: boolean;
+  fatalHaltReached?: boolean;
+  orchestratorDied?: boolean;
+}
+/**
+ * Derive the machine-readable exit code from pipeline completion results.
+ *
+ * - Exit `0` when all stories succeeded (or recovered cleanly)
+ * - Exit `1` when some stories escalated; run completed
+ * - Exit `2` when run-level failure (cost ceiling, fatal halt, orchestrator died, stories failed)
+ *
+ * @param outcome - Pipeline completion outcome data
+ * @returns 0 (success), 1 (escalated), or 2 (failure)
+ */
+declare function deriveExitCode(outcome: PipelineOutcome): 0 | 1 | 2; //#endregion
+
+//# sourceMappingURL=index.d.ts.map
+export { DECISION_SEVERITY_MAP, DecisionType, PipelineOutcome, Severity, deriveExitCode, routeDecision };
+//# sourceMappingURL=index.d.ts.map

package/dist/src/modules/decision-router/index.js

@@ -0,0 +1,3 @@
+import { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision } from "../../../decision-router-BA__VYIp.js";
+
+export { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision };

package/dist/{upgrade-C8LAnB6W.js → upgrade-OFeC_NIx.js}

@@ -1,5 +1,5 @@
 import "./dist-W2emvN3F.js";
-import "./version-manager-impl-BmOWu8ml.js";
-import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-CAqLkNUP.js";
+import "./version-manager-impl-FH4TTnXm.js";
+import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-aW7GYL2F.js";
 
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };

package/dist/{upgrade-CAqLkNUP.js → upgrade-aW7GYL2F.js}

@@ -123,4 +123,4 @@ function registerUpgradeCommand(program) {
 
 //#endregion
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };
-//# sourceMappingURL=upgrade-CAqLkNUP.js.map
+//# sourceMappingURL=upgrade-aW7GYL2F.js.map

package/dist/{version-manager-impl-DaA_ALYK.js → version-manager-impl-BCSf5E3j.js}

@@ -1,4 +1,4 @@
 import { VersionManagerImpl, createVersionManager } from "./dist-W2emvN3F.js";
-import "./version-manager-impl-BmOWu8ml.js";
+import "./version-manager-impl-FH4TTnXm.js";
 
 export { createVersionManager };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.20.62",
+  "version": "0.20.64",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",