substrate-ai 0.20.63 → 0.20.64

package/dist/cli/index.js

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
-import { FileStateStore, RunManifest, SUBSTRATE_OWNED_SETTINGS_KEYS, SupervisorLock, VALID_PHASES, WorkGraphRepository, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, buildPipelineStatusOutput, createDatabaseAdapter, createStateStore, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, parseRuntimeProbes, readCurrentRunId, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics } from "../health-C-KOZrFJ.js";
+import { FileStateStore, RunManifest, SUBSTRATE_OWNED_SETTINGS_KEYS, SupervisorLock, VALID_PHASES, WorkGraphRepository, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, buildPipelineStatusOutput, createDatabaseAdapter, createStateStore, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, parseRuntimeProbes, readCurrentRunId, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics } from "../health-DudlnqXd.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
 import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createDoltClient, createPipelineRun, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, tagRunAsBaseline, updatePipelineRun } from "../dist-W2emvN3F.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-CHUFlRbH.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-CCxsv-9M.js";
 import "../errors-CKFu8YI9.js";
 import "../routing-CcBOCuC9.js";
 import "../decisions-C0pz9Clx.js";
-import "../version-manager-impl-BmOWu8ml.js";
-import { registerUpgradeCommand } from "../upgrade-CAqLkNUP.js";
+import "../decision-router-BA__VYIp.js";
+import "../version-manager-impl-FH4TTnXm.js";
+import { registerUpgradeCommand } from "../upgrade-aW7GYL2F.js";
 import { Command } from "commander";
 import { fileURLToPath } from "url";
 import { dirname, join, resolve } from "path";
@@ -7486,7 +7487,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-CJqd1FzY.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-CLNmnZiw.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -9018,7 +9019,7 @@ async function runSupervisorAction(options, deps = {}) {
 						try {
 							const { createExperimenter } = await import(
 								/* @vite-ignore */
-								"../experimenter-DxxwicpK.js"
+								"../experimenter-BgpUcUaW.js"
 );
 							const { getLatestRun: getLatest } = await import(
 								/* @vite-ignore */
@@ -9032,7 +9033,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-Z_-caE_i.js"
+									"../run-ChxsPICN.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -14035,8 +14036,8 @@ async function createProgram() {
 /** Fire-and-forget startup version check (story 8.3, AC3/AC5) */
 function checkForUpdatesInBackground(currentVersion) {
 	if (process.env.SUBSTRATE_NO_UPDATE_CHECK === "1") return;
-	import("../upgrade-C8LAnB6W.js").then(async () => {
-		const { createVersionManager } = await import("../version-manager-impl-DaA_ALYK.js");
+	import("../upgrade-OFeC_NIx.js").then(async () => {
+		const { createVersionManager } = await import("../version-manager-impl-BCSf5E3j.js");
 		const vm = createVersionManager();
 		const result = await vm.checkForUpdates();
 		if (result.updateAvailable) {

package/dist/decision-router-BA__VYIp.js

@@ -0,0 +1,97 @@
+//#region src/modules/decision-router/index.ts
+/**
+* Maps each known decision type to its severity level.
+*
+* Epic 70: cross-story-race-recovered (info — log only, no halt) and
+* cross-story-race-still-failed (critical — recovery exhausted, halt for operator)
+* motivate the registry pattern. Epic 73 (Recovery Engine) will register
+* additional decision types here.
+*/
+const DECISION_SEVERITY_MAP = {
+	"cost-ceiling-exhausted": "critical",
+	"build-verification-failure": "critical",
+	"recovery-retry-attempt": "info",
+	"re-scope-proposal": "warning",
+	"scope-violation": "fatal",
+	"cross-story-race-recovered": "info",
+	"cross-story-race-still-failed": "critical",
+	"pipeline-escalation": "warning"
+};
+/**
+* Default action to apply when a decision does NOT trigger a halt.
+* Caller invokes the returned defaultAction string autonomously.
+*/
+const DEFAULT_ACTION_MAP = {
+	"cost-ceiling-exhausted": "skip-remaining",
+	"build-verification-failure": "escalate-without-halt",
+	"recovery-retry-attempt": "continue-autonomous",
+	"re-scope-proposal": "escalate-without-halt",
+	"scope-violation": "abort-pipeline",
+	"cross-story-race-recovered": "continue-autonomous",
+	"cross-story-race-still-failed": "escalate-without-halt",
+	"pipeline-escalation": "escalate-without-halt"
+};
+/** Fallback default action for unknown decision types. */
+const DEFAULT_DEFAULT_ACTION = "escalate-without-halt";
+/**
+* Route a halt-able decision through the autonomy policy.
+*
+* Pure function — no I/O, no side effects. All orchestrator state interactions
+* remain in orchestrator-impl.ts.
+*
+* Halt policy logic (AC4):
+* - 'all':      halts on info | warning | critical | fatal
+* - 'critical': halts on critical | fatal  (default)
+* - 'none':     halts ONLY on fatal (scope violations bypass the autonomy-gradient
+*               policy — they are always halts regardless of the chosen policy)
+*
+* Fatal always halts regardless of policy — hard safety invariant, not configurable.
+*
+* Unknown decision types default to severity 'critical' (safe default, AC9e).
+*
+* @param decision - The decision type string to route
+* @param policy   - The autonomy policy from the --halt-on CLI flag
+* @returns { halt: boolean, defaultAction: string, severity: Severity }
+*/
+function routeDecision(decision, policy) {
+	const severity = DECISION_SEVERITY_MAP[decision] ?? "critical";
+	let halt;
+	switch (policy) {
+		case "all":
+			halt = true;
+			break;
+		case "critical":
+			halt = severity === "critical" || severity === "fatal";
+			break;
+		case "none":
+			halt = severity === "fatal";
+			break;
+		default: halt = severity === "critical" || severity === "fatal";
+	}
+	if (severity === "fatal") halt = true;
+	const defaultAction = DEFAULT_ACTION_MAP[decision] ?? DEFAULT_DEFAULT_ACTION;
+	return {
+		halt,
+		defaultAction,
+		severity
+	};
+}
+/**
+* Derive the machine-readable exit code from pipeline completion results.
+*
+* - Exit `0` when all stories succeeded (or recovered cleanly)
+* - Exit `1` when some stories escalated; run completed
+* - Exit `2` when run-level failure (cost ceiling, fatal halt, orchestrator died, stories failed)
+*
+* @param outcome - Pipeline completion outcome data
+* @returns 0 (success), 1 (escalated), or 2 (failure)
+*/
+function deriveExitCode(outcome) {
+	if (outcome.failed.length > 0 || outcome.costCeilingExhausted === true || outcome.fatalHaltReached === true || outcome.orchestratorDied === true) return 2;
+	if (outcome.escalated.length > 0 && outcome.failed.length === 0) return 1;
+	return 0;
+}
+
+//#endregion
+export { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision };
+//# sourceMappingURL=decision-router-BA__VYIp.js.map

package/dist/{health-CJqd1FzY.js → health-CLNmnZiw.js}

@@ -1,4 +1,4 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-C-KOZrFJ.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-DudlnqXd.js";
 import "./logger-KeHncl-f.js";
 import "./dist-W2emvN3F.js";
 import "./decisions-C0pz9Clx.js";

package/dist/{health-C-KOZrFJ.js → health-DudlnqXd.js}

@@ -5787,7 +5787,16 @@ const CliFlagsSchema = z.object({
 	cost_ceiling: z.number().positive().optional(),
 	agent: z.string().optional(),
 	skip_verification: z.boolean().optional(),
-	events: z.boolean().optional()
+	events: z.boolean().optional(),
+	non_interactive: z.boolean().optional(),
+	halt_skipped: z.boolean().optional(),
+	halt_skipped_decisions: z.array(z.object({
+		decisionType: z.string(),
+		severity: z.string(),
+		defaultAction: z.string(),
+		reason: z.string(),
+		skippedAt: z.string()
+	})).optional()
 });
 
 //#endregion
@@ -7564,4 +7573,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, DoltMergeConflict, FileStateStore, FindingsInjector, RunManifest, RuntimeProbeListSchema, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN$1 as STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, SupervisorLock, VALID_PHASES, WorkGraphRepository, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, __commonJS, __require, __toESM, aggregateProbeAuthorMetrics, applyConfigToGraph, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, createStateStore, detectCycles, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, parseRuntimeProbes, readCurrentRunId, registerHealthCommand, renderFindings, resolveBmadMethodSrcPath, resolveBmadMethodVersion, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runHealthAction, runStaleVerificationRecovery, validateStoryKey };
-//# sourceMappingURL=health-C-KOZrFJ.js.map
+//# sourceMappingURL=health-DudlnqXd.js.map

package/dist/index.d.ts

@@ -732,6 +732,28 @@ interface CostCeilingReachedEvent {
   /** 'critical' when halt_on is 'all' or 'critical'; absent when 'none' */
   severity?: string;
 }
+/**
+ * Emitted when --non-interactive mode suppresses a halt decision and applies
+ * the default action autonomously instead of prompting the operator.
+ *
+ * Story 72-2: closes the NDJSON protocol gap — operators can see which halts
+ * were auto-skipped and what actions were applied via `substrate report`.
+ */
+interface DecisionHaltSkippedNonInteractiveEvent {
+  type: 'decision:halt-skipped-non-interactive';
+  /** ISO-8601 timestamp generated at emit time */
+  ts: string;
+  /** Pipeline run ID */
+  run_id: string;
+  /** Halt decision type that was skipped (e.g., 'halt:escalation', 'cost-ceiling-exhausted') */
+  decision_type: string;
+  /** Severity of the skipped halt (e.g., 'critical') */
+  severity: string;
+  /** Action that was applied in place of the operator prompt (e.g., 'continue-autonomous') */
+  default_action: string;
+  /** Human-readable reason for skipping */
+  reason: string;
+}
 /**
  * Discriminated union of all pipeline event types.
  *
@@ -744,7 +766,7 @@ interface CostCeilingReachedEvent {
  * }
  * ```
  */
-type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent; //#endregion
+type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent; //#endregion
 //#region packages/core/dist/types.d.ts
 
 /**
@@ -2507,6 +2529,59 @@ interface OrchestratorEvents {
     freshFindings: unknown[];
     recoveryDurationMs: number;
   };
+  /**
+   * Story 72-2: A critical halt decision was skipped under --non-interactive mode.
+   *
+   * Emitted when the pipeline would have prompted the operator (interactive stdin
+   * read) but --non-interactive suppressed stdin and auto-applied the default
+   * action instead. Operators reviewing the run via `substrate report` can see
+   * which halts were auto-skipped and what actions were applied.
+   *
+   * Mirror of CoreEvents['decision:halt-skipped-non-interactive']; both must stay
+   * in sync.
+   */
+  'decision:halt-skipped-non-interactive': {
+    runId: string;
+    /** Halt decision type that was skipped (e.g., 'halt:escalation', 'halt:critical'). */
+    decisionType: string;
+    /** Severity of the skipped halt (e.g., 'critical'). */
+    severity: string;
+    /** Action that was applied in place of the operator prompt (e.g., 'continue'). */
+    defaultAction: string;
+    /** Human-readable reason for skipping (e.g., 'non-interactive: stdin prompt suppressed'). */
+    reason: string;
+  };
+  /**
+   * Story 72-1: A halt-able decision was routed and the policy requires halting.
+   * Emitted when routeDecision() returns halt=true for a given policy.
+   * Mirror of CoreEvents['decision:halt']; both must stay in sync.
+   */
+  'decision:halt': {
+    runId: string;
+    /** The decision type that triggered the halt (e.g., 'cost-ceiling-exhausted'). */
+    decisionType: string;
+    /** Severity of the decision (e.g., 'critical', 'fatal'). */
+    severity: string;
+    /** Human-readable reason for the halt. */
+    reason: string;
+  };
+  /**
+   * Story 72-1: A halt-able decision was routed and the policy allows autonomous action.
+   * Emitted when routeDecision() returns halt=false for a given policy.
+   * Caller applies defaultAction without operator intervention.
+   * Mirror of CoreEvents['decision:autonomous']; both must stay in sync.
+   */
+  'decision:autonomous': {
+    runId: string;
+    /** The decision type that was routed autonomously (e.g., 'build-verification-failure'). */
+    decisionType: string;
+    /** Severity of the decision (e.g., 'info', 'warning', 'critical'). */
+    severity: string;
+    /** The action applied autonomously (e.g., 'escalate-without-halt', 'continue-autonomous'). */
+    defaultAction: string;
+    /** Human-readable reason for autonomous action. */
+    reason: string;
+  };
 }
 
 //#endregion

package/dist/{run-CHUFlRbH.js → run-CCxsv-9M.js}

@@ -1,7 +1,8 @@
-import { BMAD_BASELINE_TOKENS_FULL, DoltMergeConflict, FileStateStore, FindingsInjector, RunManifest, RuntimeProbeListSchema, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, WorkGraphRepository, __commonJS, __require, __toESM, applyConfigToGraph, buildPipelineStatusOutput, createDatabaseAdapter, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectCycles, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, renderFindings, resolveGraphPath, resolveMainRepoRoot, runStaleVerificationRecovery, validateStoryKey } from "./health-C-KOZrFJ.js";
+import { BMAD_BASELINE_TOKENS_FULL, DoltMergeConflict, FileStateStore, FindingsInjector, RunManifest, RuntimeProbeListSchema, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, WorkGraphRepository, __commonJS, __require, __toESM, applyConfigToGraph, buildPipelineStatusOutput, createDatabaseAdapter, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectCycles, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, renderFindings, resolveGraphPath, resolveMainRepoRoot, runStaleVerificationRecovery, validateStoryKey } from "./health-DudlnqXd.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
 import { ADVISORY_NOTES, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, createConfigSystem, createDatabaseAdapter$1, createDecision, createPipelineRun, createRequirement, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-W2emvN3F.js";
+import { deriveExitCode, routeDecision } from "./decision-router-BA__VYIp.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
 import { EventEmitter } from "node:events";
@@ -1764,7 +1765,7 @@ const PIPELINE_EVENT_METADATA = [
 			{
 				name: "action",
 				type: "string",
-				description: "Action taken (always stopped in this story; interactive prompt is Epic 54 scope)."
+				description: "Action taken — stopped when policy requires halt, or the defaultAction when proceeding autonomously."
 			},
 			{
 				name: "skipped_stories",
@@ -1774,10 +1775,47 @@ const PIPELINE_EVENT_METADATA = [
 			{
 				name: "severity",
 				type: "string",
-				description: "critical when halt_on is all or critical; absent when none.",
+				description: "Severity from routeDecision (critical for cost-ceiling-exhausted).",
 				optional: true
 			}
 		]
+	},
+	{
+		type: "decision:halt-skipped-non-interactive",
+		description: "A critical halt decision was skipped under --non-interactive mode; default action was applied autonomously.",
+		when: "Emitted when --non-interactive suppresses an operator prompt and applies the default action. Story 72-2.",
+		fields: [
+			{
+				name: "ts",
+				type: "string",
+				description: "Timestamp."
+			},
+			{
+				name: "run_id",
+				type: "string",
+				description: "Pipeline run ID."
+			},
+			{
+				name: "decision_type",
+				type: "string",
+				description: "Halt decision type that was skipped (e.g., halt:escalation)."
+			},
+			{
+				name: "severity",
+				type: "string",
+				description: "Severity of the skipped halt (e.g., critical)."
+			},
+			{
+				name: "default_action",
+				type: "string",
+				description: "Action applied in place of the operator prompt."
+			},
+			{
+				name: "reason",
+				type: "string",
+				description: "Human-readable reason for skipping."
+			}
+		]
 	}
 ];
 /**
@@ -14284,6 +14322,27 @@ function createImplementationOrchestrator(deps) {
 						}, "Build-fix dispatch failed — escalating");
 					}
 					if (!buildFixPassed) {
+						let buildHaltPolicy = "critical";
+						if (runManifest !== null && runManifest !== void 0) try {
+							const manifestData = await runManifest.read();
+							buildHaltPolicy = manifestData.cli_flags.halt_on ?? "critical";
+						} catch {}
+						const buildRouteResult = routeDecision("build-verification-failure", buildHaltPolicy);
+						const buildRunId = config.pipelineRunId ?? "unknown";
+						const buildReason = `build verification failed for story ${storyKey}`;
+						if (buildRouteResult.halt) eventBus.emit("decision:halt", {
+							runId: buildRunId,
+							decisionType: "build-verification-failure",
+							severity: buildRouteResult.severity,
+							reason: buildReason
+						});
+						else eventBus.emit("decision:autonomous", {
+							runId: buildRunId,
+							decisionType: "build-verification-failure",
+							severity: buildRouteResult.severity,
+							defaultAction: buildRouteResult.defaultAction,
+							reason: buildReason
+						});
 						eventBus.emit("story:build-verification-failed", {
 							storyKey,
 							exitCode: buildVerifyResult.exitCode ?? 1,
@@ -14292,7 +14351,9 @@ function createImplementationOrchestrator(deps) {
 						logger$26.warn({
 							storyKey,
 							reason,
-							exitCode: buildVerifyResult.exitCode
+							exitCode: buildVerifyResult.exitCode,
+							routedHalt: buildRouteResult.halt,
+							defaultAction: buildRouteResult.defaultAction
 						}, "Build verification failed — escalating story");
 						updateStory(storyKey, {
 							phase: "ESCALATED",
@@ -15234,7 +15295,23 @@ function createImplementationOrchestrator(deps) {
 	* @param manifest - The current run manifest data
 	*/
 	async function handleCeilingExceeded(triggeredStoryKey, remainingInGroup, result, manifest) {
-		const haltOn = manifest.cli_flags.halt_on ?? "none";
+		const haltPolicy = manifest.cli_flags.halt_on ?? "critical";
+		const routeResult = routeDecision("cost-ceiling-exhausted", haltPolicy);
+		const runId = config.pipelineRunId ?? "unknown";
+		const reason = `cost ceiling exceeded: ${result.cumulative.toFixed(4)} USD >= ${result.ceiling} USD`;
+		if (routeResult.halt) eventBus.emit("decision:halt", {
+			runId,
+			decisionType: "cost-ceiling-exhausted",
+			severity: routeResult.severity,
+			reason
+		});
+		else eventBus.emit("decision:autonomous", {
+			runId,
+			decisionType: "cost-ceiling-exhausted",
+			severity: routeResult.severity,
+			defaultAction: routeResult.defaultAction,
+			reason
+		});
 		const allSkipped = [triggeredStoryKey, ...remainingInGroup];
 		for (const [key, state] of _stories) if (state.phase === "PENDING" && !allSkipped.includes(key)) allSkipped.push(key);
 		for (const key of allSkipped) {
@@ -15248,16 +15325,18 @@ function createImplementationOrchestrator(deps) {
 		eventBus.emit("cost:ceiling-reached", {
 			cumulative_cost: result.cumulative,
 			ceiling: result.ceiling,
-			halt_on: haltOn,
-			action: "stopped",
+			halt_on: haltPolicy,
+			action: routeResult.halt ? "stopped" : routeResult.defaultAction,
 			skipped_stories: allSkipped,
-			...haltOn !== "none" ? { severity: "critical" } : {}
+			severity: routeResult.severity
 		});
 		_budgetExhausted = true;
 		logger$26.warn({
 			skipped: allSkipped.length,
 			cumulative: result.cumulative,
-			ceiling: result.ceiling
+			ceiling: result.ceiling,
+			routedHalt: routeResult.halt,
+			defaultAction: routeResult.defaultAction
 		}, "Cost ceiling reached — stopping dispatch");
 	}
 	/**
@@ -44204,6 +44283,17 @@ function wireNdjsonEmitter(eventBus, ndjsonEmitter) {
 			...payload.severity !== void 0 ? { severity: payload.severity } : {}
 		});
 	});
+	eventBus.on("decision:halt-skipped-non-interactive", (payload) => {
+		ndjsonEmitter.emit({
+			type: "decision:halt-skipped-non-interactive",
+			ts: new Date().toISOString(),
+			run_id: payload.runId,
+			decision_type: payload.decisionType,
+			severity: payload.severity,
+			default_action: payload.defaultAction,
+			reason: payload.reason
+		});
+	});
 }
 /**
 * Resolve the `probeAuthorStateIntegrating` boolean from CLI flag and env var.
@@ -44220,8 +44310,20 @@ function resolveProbeAuthorStateIntegrating(cliFlag) {
 	if (envVal !== void 0) return envVal === "on";
 	return true;
 }
+/**
+* Story 72-2: --non-interactive + Machine-Readable Exit Codes.
+*
+* Phase D Story 54-6 (2026-04-05): original headless CI/CD spec.
+* Story 72-1: Decision Router providing routeDecision defaultAction authority.
+* Story 72-2 (this code): --non-interactive flag that suppresses stdin reads,
+*   auto-applies default actions via routeDecision, and returns exit codes 0/1/2.
+*
+* Enables strata + agent-mesh cross-project CI/CD invocation:
+*   substrate run --non-interactive --halt-on none --events --output-format json
+*/
 async function runRunAction(options) {
-	const { pack: packName, from: startPhase, stopAfter, concept: conceptArg, conceptFile, stories: storiesArg, concurrency, outputFormat, projectRoot, events: eventsFlag, verbose: verboseFlag, tui: tuiFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, epic: epicNumber, dryRun, maxReviewCycles = 2, engine, agent: agentId, registry: injectedRegistry, haltOn, costCeiling, probeAuthor, probeAuthorStateIntegrating: probeAuthorStateIntegratingFlag } = options;
+	const { pack: packName, from: startPhase, stopAfter, concept: conceptArg, conceptFile, stories: storiesArg, concurrency, outputFormat, projectRoot, events: eventsFlag, verbose: verboseFlag, tui: tuiFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, epic: epicNumber, dryRun, maxReviewCycles = 2, engine, agent: agentId, registry: injectedRegistry, haltOn: haltOnOpt, costCeiling, probeAuthor, probeAuthorStateIntegrating: probeAuthorStateIntegratingFlag, nonInteractive } = options;
+	const haltOn = haltOnOpt;
 	const VALID_PROBE_AUTHOR_MODES = [
 		"enabled",
 		"disabled",
@@ -44534,11 +44636,12 @@ async function runRunAction(options) {
 			const runsDir = join(dbDir, "runs");
 			const cliFlags = {
 				...parsedStoryKeys.length > 0 ? { stories: parsedStoryKeys } : {},
-				halt_on: haltOn ?? "none",
+				halt_on: haltOn ?? "critical",
 				...costCeiling !== void 0 ? { cost_ceiling: costCeiling } : {},
 				...agentId !== void 0 ? { agent: agentId } : {},
 				...skipVerification === true ? { skip_verification: true } : {},
-				...eventsFlag === true ? { events: true } : {}
+				...eventsFlag === true ? { events: true } : {},
+				...nonInteractive === true ? { non_interactive: true } : {}
 			};
 			const manifest = RunManifest.open(pipelineRun.id, runsDir);
 			await manifest.patchCLIFlags(cliFlags);
@@ -44565,6 +44668,14 @@ async function runRunAction(options) {
 			});
 		} catch {}
 		const eventBus = createEventBus();
+		let _costCeilingExhausted = false;
+		let _fatalHaltReached = false;
+		eventBus.on("cost:ceiling-reached", () => {
+			_costCeilingExhausted = true;
+		});
+		eventBus.on("decision:halt", (payload) => {
+			if (payload.severity === "fatal") _fatalHaltReached = true;
+		});
 		const contextCompiler = createContextCompiler({ db: adapter });
 		if (!injectedRegistry) throw new Error("AdapterRegistry is required — must be initialized at CLI startup");
 		const routingConfigPath = join(projectRoot, "substrate.routing.yml");
@@ -44705,7 +44816,7 @@ async function runRunAction(options) {
 		if (tuiFlag === true && !isTuiCapable()) printNonTtyWarning();
 		if (verboseFlag !== true && eventsFlag !== true) process.env.LOG_LEVEL = "silent";
 		let tuiApp;
-		if (tuiFlag === true && isTuiCapable() && eventsFlag !== true && outputFormat === "human") {
+		if (tuiFlag === true && nonInteractive !== true && isTuiCapable() && eventsFlag !== true && outputFormat === "human") {
 			tuiApp = createTuiApp(process.stdout, process.stdin);
 			tuiApp.handleEvent({
 				type: "pipeline:start",
@@ -45098,13 +45209,52 @@ async function runRunAction(options) {
 			engineType: resolvedEngine,
 			concurrency
 		});
+		if (nonInteractive === true) {
+			if (escalatedKeys.length > 0 || _costCeilingExhausted || _fatalHaltReached) {
+				const haltPolicy = haltOn ?? "critical";
+				const routeResult = routeDecision("pipeline-escalation", haltPolicy);
+				eventBus.emit("decision:halt-skipped-non-interactive", {
+					runId: pipelineRun.id,
+					decisionType: "pipeline-escalation",
+					severity: routeResult.severity,
+					defaultAction: routeResult.defaultAction,
+					reason: "non-interactive: stdin prompt suppressed"
+				});
+				try {
+					const runsDir = join(dbDir, "runs");
+					const runManifestForHalt = RunManifest.open(pipelineRun.id, runsDir);
+					await runManifestForHalt.update({ cli_flags: {
+						halt_on: haltPolicy,
+						halt_skipped: true,
+						halt_skipped_decisions: [{
+							decisionType: "pipeline-escalation",
+							severity: routeResult.severity,
+							defaultAction: routeResult.defaultAction,
+							reason: "non-interactive: stdin prompt suppressed",
+							skippedAt: new Date().toISOString()
+						}]
+					} });
+				} catch (haltManifestErr) {
+					logger.warn({ err: haltManifestErr }, "Failed to write halt-skipped to manifest (best-effort)");
+				}
+			}
+			const derivedCode = deriveExitCode({
+				succeeded: succeededKeys,
+				escalated: escalatedKeys,
+				failed: failedKeys,
+				total: storyKeys.length,
+				costCeilingExhausted: _costCeilingExhausted,
+				fatalHaltReached: _fatalHaltReached
+			});
+			return derivedCode;
+		}
 		return 0;
 	} catch (err) {
 		const msg = err instanceof Error ? err.message : String(err);
 		if (outputFormat === "json") process.stdout.write(formatOutput(null, "json", false, msg) + "\n");
 		else process.stderr.write(`Error: ${msg}\n`);
 		logger.error({ err }, "run failed");
-		return 1;
+		return nonInteractive === true ? 2 : 1;
 	} finally {
 		try {
 			await adapter.close();
@@ -45578,7 +45728,22 @@ async function runFullPipeline(options) {
 	}
 }
 function registerRunCommand(program, _version = "0.0.0", projectRoot = process.cwd(), registry) {
-	program.command("run").description("Run the autonomous pipeline (use --from to start from a specific phase)").option("--pack <name>", "Methodology pack name", "bmad").option("--from <phase>", "Start from this phase: analysis, planning, solutioning, implementation").option("--stop-after <phase>", "Stop pipeline after this phase completes").option("--concept <text>", "Inline concept text (required when --from analysis)").option("--concept-file <path>", "Path to a file containing the concept text").option("--stories <keys>", "Comma-separated story keys (e.g., 10-1,10-2)").option("--epic <n>", "Scope story discovery to a single epic number (e.g., 27)", (v) => parseInt(v, 10)).option("--concurrency <n>", "Maximum parallel conflict groups", (v) => parseInt(v, 10), 3).option("--project-root <path>", "Project root directory", projectRoot).option("--output-format <format>", "Output format: human (default) or json", "human").option("--events", "Emit structured NDJSON events on stdout for programmatic consumption").option("--verbose", "Show detailed pino log output").option("--help-agent", "Print a machine-optimized prompt fragment for AI agents and exit").option("--tui", "Show TUI dashboard").option("--skip-ux", "Skip the UX design phase even if enabled in the pack manifest").option("--research", "Enable the research phase even if not set in the pack manifest").option("--skip-research", "Skip the research phase even if enabled in the pack manifest").option("--skip-preflight", "Skip the pre-flight build check (escape hatch for known-broken projects)").option("--skip-verification", "Skip the post-dispatch verification pipeline (Story 51-5)").option("--max-review-cycles <n>", "Maximum review cycles per story (default: 2)", (v) => parseInt(v, 10), 2).option("--dry-run", "Preview routing and repo-map injection without dispatching (Story 28-9)").option("--engine <type>", "Execution engine: linear (default) or graph").option("--agent <id>", "Agent backend: claude-code (default), codex, or gemini").option("--halt-on <severity>", "Halt pipeline on escalation severity: all | critical | none (default: none)", "none").option("--cost-ceiling <amount>", "Maximum cost ceiling in USD (positive number); halts pipeline when exceeded", parseFloat).option("--probe-author <mode>", "probe-author phase mode: enabled | disabled | auto (default: auto = SUBSTRATE_PROBE_AUTHOR_ENABLED env, default true) (Story 60-14)", "auto").option("--probe-author-state-integrating <value>", "Disable probe-author dispatch for state-integrating ACs (Phase 3). Use to ramp DOWN if catch rate drops below the GREEN threshold. Values: on | off (default: on)").action(async (opts) => {
+	program.command("run").description("Run the autonomous pipeline (use --from to start from a specific phase)").option("--pack <name>", "Methodology pack name", "bmad").option("--from <phase>", "Start from this phase: analysis, planning, solutioning, implementation").option("--stop-after <phase>", "Stop pipeline after this phase completes").option("--concept <text>", "Inline concept text (required when --from analysis)").option("--concept-file <path>", "Path to a file containing the concept text").option("--stories <keys>", "Comma-separated story keys (e.g., 10-1,10-2)").option("--epic <n>", "Scope story discovery to a single epic number (e.g., 27)", (v) => parseInt(v, 10)).option("--concurrency <n>", "Maximum parallel conflict groups", (v) => parseInt(v, 10), 3).option("--project-root <path>", "Project root directory", projectRoot).option("--output-format <format>", "Output format: human (default) or json", "human").option("--events", "Emit structured NDJSON events on stdout for programmatic consumption").option("--verbose", "Show detailed pino log output").option("--help-agent", "Print a machine-optimized prompt fragment for AI agents and exit").option("--tui", "Show TUI dashboard").option("--skip-ux", "Skip the UX design phase even if enabled in the pack manifest").option("--research", "Enable the research phase even if not set in the pack manifest").option("--skip-research", "Skip the research phase even if enabled in the pack manifest").option("--skip-preflight", "Skip the pre-flight build check (escape hatch for known-broken projects)").option("--skip-verification", "Skip the post-dispatch verification pipeline (Story 51-5)").option("--max-review-cycles <n>", "Maximum review cycles per story (default: 2)", (v) => parseInt(v, 10), 2).option("--dry-run", "Preview routing and repo-map injection without dispatching (Story 28-9)").option("--engine <type>", "Execution engine: linear (default) or graph").option("--agent <id>", "Agent backend: claude-code (default), codex, or gemini").option("--halt-on <severity>", "Halt pipeline on escalation severity: all | critical | none (default: critical)", "critical").option("--cost-ceiling <amount>", "Maximum cost ceiling in USD (positive number); halts pipeline when exceeded", parseFloat).option("--probe-author <mode>", "probe-author phase mode: enabled | disabled | auto (default: auto = SUBSTRATE_PROBE_AUTHOR_ENABLED env, default true) (Story 60-14)", "auto").option("--probe-author-state-integrating <value>", "Disable probe-author dispatch for state-integrating ACs (Phase 3). Use to ramp DOWN if catch rate drops below the GREEN threshold. Values: on | off (default: on)").option("--non-interactive", [
+		"Run without operator prompts (CI/CD mode). Suppresses all stdin reads,",
+		"auto-applies default actions for halt decisions, and returns machine-readable",
+		"exit codes: 0=all stories succeeded, 1=some escalated, 2=run-level failure.",
+		"",
+		"Canonical CI/CD invocation:",
+		"  substrate run --non-interactive --halt-on none --events --output-format json",
+		"",
+		"Exit code semantics:",
+		"  0  All stories succeeded (or recovered cleanly)",
+		"  1  Some stories escalated; run completed",
+		"  2  Run-level failure (cost ceiling exhausted, fatal halt, orchestrator died)",
+		"",
+		"--halt-on defaults to critical. Skipped halt decisions are recorded as",
+		"decision:halt-skipped-non-interactive events in --non-interactive mode."
+	].join("\n      ")).action(async (opts) => {
 		if (opts.helpAgent) {
 			process.exitCode = await runHelpAgent();
 			return;
@@ -45622,12 +45787,14 @@ function registerRunCommand(program, _version = "0.0.0", projectRoot = process.c
 			haltOn: opts.haltOn,
 			costCeiling: opts.costCeiling,
 			probeAuthor: opts.probeAuthor,
-			probeAuthorStateIntegrating: opts.probeAuthorStateIntegrating
+			probeAuthorStateIntegrating: opts.probeAuthorStateIntegrating,
+			nonInteractive: opts.nonInteractive
 		});
+		if (opts.nonInteractive === true) process.exit(exitCode);
 		process.exitCode = exitCode;
 	});
 }
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-CHUFlRbH.js.map
+//# sourceMappingURL=run-CCxsv-9M.js.map

package/dist/{run-Z_-caE_i.js → run-ChxsPICN.js}

@@ -1,9 +1,10 @@
-import "./health-C-KOZrFJ.js";
+import "./health-DudlnqXd.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
 import "./dist-W2emvN3F.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-CHUFlRbH.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-CCxsv-9M.js";
 import "./routing-CcBOCuC9.js";
 import "./decisions-C0pz9Clx.js";
+import "./decision-router-BA__VYIp.js";
 
 export { runRunAction };

package/dist/src/modules/decision-router/index.d.ts

@@ -0,0 +1,88 @@
+//#region src/modules/decision-router/index.d.ts
+/**
+ * Decision Router — Phase D Story 54-2 (2026-04-05): original autonomy-gradient spec.
+ * Story 72-1: --halt-on flag + Decision Router (this file).
+ *   Classifies every halt-able decision by severity and enforces the chosen autonomy policy.
+ *   Exports routeDecision(decision, policy) pure function for orchestrator consumption.
+ * Epic 70: cross-story-race decision types (cross-story-race-recovered,
+ *   cross-story-race-still-failed) motivate the registry pattern — different halt semantics
+ *   based on severity (info vs critical).
+ * Epic 73 (Recovery Engine) will register additional decision types via DECISION_SEVERITY_MAP.
+ *
+ * Story 72-2: --non-interactive flag consuming routeDecision for stdin suppression.
+ * Enables strata + agent-mesh cross-project CI/CD invocation.
+ */
+/**
+ * Severity of a halt-able decision.
+ * Controls which autonomy policies trigger a halt.
+ */
+type Severity = 'info' | 'warning' | 'critical' | 'fatal';
+/**
+ * All known halt-able decision types (AC1).
+ * Epic 73 (Recovery Engine) will extend this union with additional types.
+ */
+type DecisionType = 'cost-ceiling-exhausted' | 'build-verification-failure' | 'recovery-retry-attempt' | 're-scope-proposal' | 'scope-violation' | 'cross-story-race-recovered' | 'cross-story-race-still-failed' | 'pipeline-escalation';
+/**
+ * Maps each known decision type to its severity level.
+ *
+ * Epic 70: cross-story-race-recovered (info — log only, no halt) and
+ * cross-story-race-still-failed (critical — recovery exhausted, halt for operator)
+ * motivate the registry pattern. Epic 73 (Recovery Engine) will register
+ * additional decision types here.
+ */
+declare const DECISION_SEVERITY_MAP: Record<DecisionType, Severity>;
+/**
+ * Route a halt-able decision through the autonomy policy.
+ *
+ * Pure function — no I/O, no side effects. All orchestrator state interactions
+ * remain in orchestrator-impl.ts.
+ *
+ * Halt policy logic (AC4):
+ * - 'all':      halts on info | warning | critical | fatal
+ * - 'critical': halts on critical | fatal  (default)
+ * - 'none':     halts ONLY on fatal (scope violations bypass the autonomy-gradient
+ *               policy — they are always halts regardless of the chosen policy)
+ *
+ * Fatal always halts regardless of policy — hard safety invariant, not configurable.
+ *
+ * Unknown decision types default to severity 'critical' (safe default, AC9e).
+ *
+ * @param decision - The decision type string to route
+ * @param policy   - The autonomy policy from the --halt-on CLI flag
+ * @returns { halt: boolean, defaultAction: string, severity: Severity }
+ */
+declare function routeDecision(decision: string, policy: 'all' | 'critical' | 'none'): {
+  halt: boolean;
+  defaultAction: string;
+  severity: Severity;
+};
+/**
+ * Inputs for exit code derivation from pipeline completion results.
+ * Used by the CLI layer to derive the machine-readable exit code (0/1/2)
+ * for non-interactive CI/CD invocations.
+ */
+interface PipelineOutcome {
+  succeeded: string[];
+  recovered?: string[];
+  escalated: string[];
+  failed: string[];
+  total: number;
+  costCeilingExhausted?: boolean;
+  fatalHaltReached?: boolean;
+  orchestratorDied?: boolean;
+}
+/**
+ * Derive the machine-readable exit code from pipeline completion results.
+ *
+ * - Exit `0` when all stories succeeded (or recovered cleanly)
+ * - Exit `1` when some stories escalated; run completed
+ * - Exit `2` when run-level failure (cost ceiling, fatal halt, orchestrator died, stories failed)
+ *
+ * @param outcome - Pipeline completion outcome data
+ * @returns 0 (success), 1 (escalated), or 2 (failure)
+ */
+declare function deriveExitCode(outcome: PipelineOutcome): 0 | 1 | 2; //#endregion
+
+//# sourceMappingURL=index.d.ts.map
+export { DECISION_SEVERITY_MAP, DecisionType, PipelineOutcome, Severity, deriveExitCode, routeDecision };
+//# sourceMappingURL=index.d.ts.map

package/dist/src/modules/decision-router/index.js

@@ -0,0 +1,3 @@
+import { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision } from "../../../decision-router-BA__VYIp.js";
+
+export { DECISION_SEVERITY_MAP, deriveExitCode, routeDecision };

package/dist/{upgrade-C8LAnB6W.js → upgrade-OFeC_NIx.js}

@@ -1,5 +1,5 @@
 import "./dist-W2emvN3F.js";
-import "./version-manager-impl-BmOWu8ml.js";
-import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-CAqLkNUP.js";
+import "./version-manager-impl-FH4TTnXm.js";
+import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-aW7GYL2F.js";
 
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };

package/dist/{upgrade-CAqLkNUP.js → upgrade-aW7GYL2F.js}

@@ -123,4 +123,4 @@ function registerUpgradeCommand(program) {
 
 //#endregion
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };
-//# sourceMappingURL=upgrade-CAqLkNUP.js.map
+//# sourceMappingURL=upgrade-aW7GYL2F.js.map

package/dist/{version-manager-impl-DaA_ALYK.js → version-manager-impl-BCSf5E3j.js}

@@ -1,4 +1,4 @@
 import { VersionManagerImpl, createVersionManager } from "./dist-W2emvN3F.js";
-import "./version-manager-impl-BmOWu8ml.js";
+import "./version-manager-impl-FH4TTnXm.js";
 
 export { createVersionManager };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.20.63",
+  "version": "0.20.64",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",