substrate-ai 0.21.14 → 0.21.15

package/dist/cli/index.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-B1Rk7RXw.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-kr5GC1SN.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
 import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-BZGqn-XQ.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, clearGateDemotion, computePrecision, computeRecall, demoteGate, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordOverride, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary } from "../manifest-read-BX_tMdib.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-DcUXpWwu.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, clearGateDemotion, computePrecision, computeRecall, demoteGate, diffJourneySets, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordOverride, renderRegistryDiff, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary } from "../manifest-read-CcK_LIaI.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-DR_D61vF.js";
 import "../errors-xSeGw6pf.js";
 import { AcceptanceDeriveResultSchema, assemblePrompt, getTokenCeiling, runAcceptanceJudge } from "../acceptance-judge-lAv5EvYA.js";
 import "../routing-DZT5PN3N.js";
 import { WorkGraphRepository } from "../work-graph-repository-4cKsf8Lf.js";
 import "../decisions-BAaxpVD0.js";
 import "../decision-router-Dyby0fUf.js";
-import "../interactive-prompt-GixkO5-6.js";
+import "../interactive-prompt-B5KE69I6.js";
 import "../recovery-engine-dtLHyV4M.js";
 import "../version-manager-impl-DMTw551Q.js";
 import { registerUpgradeCommand } from "../upgrade-CNGc12AV.js";
@@ -30,7 +30,7 @@ import { basename as basename$1, dirname as dirname$1, join as join$1, posix, re
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
 import * as fs from "node:fs/promises";
-import { lstat, mkdir as mkdir$1, readFile as readFile$1, readdir as readdir$1, readlink, realpath, writeFile as writeFile$1 } from "node:fs/promises";
+import { lstat, mkdir as mkdir$1, readFile as readFile$1, readdir as readdir$1, readlink, realpath, unlink as unlink$1, writeFile as writeFile$1 } from "node:fs/promises";
 import { chmodSync, cpSync, existsSync as existsSync$1, lstatSync, mkdirSync as mkdirSync$1, readFileSync as readFileSync$1, readdir as readdir$2, readdirSync as readdirSync$1, readlinkSync, realpathSync as realpathSync$1, rmSync as rmSync$1, statSync as statSync$1, unlinkSync as unlinkSync$1, writeFileSync as writeFileSync$1 } from "fs";
 import { homedir } from "os";
 import { createRequire } from "node:module";
@@ -39,6 +39,7 @@ import * as readline from "node:readline";
 import { createInterface } from "node:readline";
 import { randomUUID as randomUUID$1 } from "crypto";
 import { createInterface as createInterface$1 } from "readline";
+import { createInterface as createInterface$2 } from "node:readline/promises";
 
 //#region packages/core/dist/monitor/recommendation-engine.js
 var RecommendationEngine = class {
@@ -7136,7 +7137,7 @@ async function runStatusAction(options) {
 			logger$16.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-BxH_n5cd.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-CvsH53bv.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8665,7 +8666,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-BnUAxdws.js"
+									"../run-UilZoIOh.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -13909,7 +13910,121 @@ function registerAcceptanceCommand(program, version, registry) {
 		}
 		const needsElaboration = result.journeys.filter((j) => j.end_states.length === 0);
 		process.stdout.write(`candidate written: ${relative(projectRoot, outPath)}\n  ${String(result.journeys.length)} journeys (${String(result.journeys.filter((j) => j.criticality === "critical").length)} critical), ${String(result.journeys.reduce((n, j) => n + j.end_states.length, 0))} end-states` + (needsElaboration.length > 0 ? `, ${String(needsElaboration.length)} journey(s) need end-state elaboration: ${needsElaboration.map((j) => j.id).join(", ")}` : "") + `
-  derived from ${prdRel} (sha256 ${sourceSha.slice(0, 12)}…)\nThis candidate is NOT authoritative and the gate ignores it. Review every journey against the PRD — a journey missing here is invisible to the whole acceptance machinery.
+  derived from ${prdRel} (sha256 ${sourceSha.slice(0, 12)}…)\n`);
+		if (existingRegistryYaml !== void 0) {
+			const parsedExisting = parseJourneyRegistry(existingRegistryYaml);
+			if (parsedExisting.ok) process.stdout.write(`delta vs ratified registry v${String(parsedExisting.registry.version)}:\n${renderRegistryDiff(diffJourneySets(parsedExisting.registry.journeys, result.journeys))}\n`);
+		}
+		process.stdout.write("This candidate is NOT authoritative and the gate ignores it. Review every journey against the PRD — a journey missing here is invisible to the whole acceptance machinery.\n");
+		process.exit(ACCEPTANCE_EXIT_SUCCESS);
+	});
+	acceptanceCmd.command("ratify").description(`Promote ${JOURNEY_CANDIDATE_PATH} to ${JOURNEY_REGISTRY_PATH} with a recorded provenance block. Interactive confirm unless --yes. The candidate file is deleted on success.`).option("--exclude <spec>", "exclude a candidate journey: \"UJ-2: reason text\" (repeatable; reason mandatory)", (v, acc) => [...acc, v], []).option("--epic <spec>", "assign an epic at ratify time: \"UJ-1=2\" (repeatable; critical journeys require one)", (v, acc) => [...acc, v], []).option("--ratified-by <name>", "who is ratifying (recorded in provenance)", "operator").option("--yes", "skip the interactive confirmation", false).action(async (opts) => {
+		const projectRoot = process.cwd();
+		const candidatePath = join$1(projectRoot, JOURNEY_CANDIDATE_PATH);
+		let candidateContent;
+		try {
+			candidateContent = await readFile$1(candidatePath, "utf-8");
+		} catch {
+			process.stdout.write(`acceptance ratify: no candidate at ${JOURNEY_CANDIDATE_PATH} — run \`substrate acceptance derive --prd <path>\` first\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const parsedCandidate = parseJourneyCandidate(candidateContent);
+		if (!parsedCandidate.ok) {
+			process.stdout.write(`acceptance ratify: candidate invalid:\n${parsedCandidate.issues.map((i) => `  ${i.path}: ${i.message}`).join("\n")}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const candidate = parsedCandidate.candidate;
+		const excludes = [];
+		for (const spec of opts.exclude) {
+			const sep = spec.indexOf(":");
+			const id = sep >= 0 ? spec.slice(0, sep).trim() : spec.trim();
+			const reason = sep >= 0 ? spec.slice(sep + 1).trim() : "";
+			if (reason === "") {
+				process.stdout.write(`acceptance ratify: --exclude "${spec}" has no reason — use "ID: reason" (reasonless exclusions are unauditable)\n`);
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+			excludes.push({
+				candidate: id,
+				reason
+			});
+		}
+		const epicAssignments = {};
+		for (const spec of opts.epic) {
+			const sep = spec.indexOf("=");
+			const id = sep >= 0 ? spec.slice(0, sep).trim() : "";
+			const n = sep >= 0 ? Number(spec.slice(sep + 1).trim()) : NaN;
+			if (id === "" || !Number.isInteger(n) || n <= 0) {
+				process.stdout.write(`acceptance ratify: --epic "${spec}" must be "JOURNEY-ID=<positive integer>"\n`);
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+			epicAssignments[id] = n;
+		}
+		let existingRegistry;
+		try {
+			const existingContent = await readFile$1(join$1(projectRoot, JOURNEY_REGISTRY_PATH), "utf-8");
+			const parsedExisting = parseJourneyRegistry(existingContent);
+			if (!parsedExisting.ok) {
+				process.stdout.write(`acceptance ratify: existing ${JOURNEY_REGISTRY_PATH} is INVALID — fix or remove it before re-ratifying:\n${parsedExisting.issues.map((i) => `  ${i.path}: ${i.message}`).join("\n")}\n`);
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+			existingRegistry = parsedExisting.registry;
+		} catch {
+			existingRegistry = void 0;
+		}
+		let sourceContent;
+		try {
+			sourceContent = await readFile$1(join$1(projectRoot, candidate.derived_from), "utf-8");
+		} catch (err) {
+			process.stdout.write(`acceptance ratify: cannot read source ${candidate.derived_from} (recorded in the candidate): ${String(err)}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const result = ratifyCandidate(candidate, {
+			excludes,
+			ratifiedBy: opts.ratifiedBy,
+			sourceContent,
+			now: new Date().toISOString(),
+			...existingRegistry !== void 0 ? { existingRegistry } : {},
+			epicAssignments
+		});
+		if (!result.ok) {
+			process.stdout.write(`acceptance ratify: the candidate would not ratify into a VALID registry — edit ${JOURNEY_CANDIDATE_PATH} (it is editable by design), assign epics via --epic, or exclude journeys via --exclude:\n` + result.issues.map((i) => `  ${i.path}: ${i.message}`).join("\n") + "\n");
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const reg = result.registry;
+		process.stdout.write(`ratifying → ${JOURNEY_REGISTRY_PATH} v${String(reg.version)}${existingRegistry !== void 0 ? ` (replacing v${String(existingRegistry.version)})` : ""}\n` + reg.journeys.map((j) => `  ${j.id} [${j.criticality}${j.epic !== void 0 ? ` epic ${String(j.epic)}` : ""}] ${j.title} — ${String(j.end_states.length)} end-state(s)\n`).join("") + (reg.provenance?.excluded !== void 0 ? reg.provenance.excluded.map((e) => `  excluded: ${e.candidate} — ${e.reason}\n`).join("") : ""));
+		if (existingRegistry !== void 0) process.stdout.write(`delta vs v${String(existingRegistry.version)}:\n${renderRegistryDiff(diffJourneySets(existingRegistry.journeys, candidate.journeys))}\n`);
+		for (const w of result.warnings) process.stdout.write(`WARNING: ${w}\n`);
+		if (!opts.yes) {
+			const rl = createInterface$2({
+				input: process.stdin,
+				output: process.stderr
+			});
+			const answer = await rl.question("ratify? [y/N] ");
+			rl.close();
+			if (answer.trim().toLowerCase() !== "y") {
+				process.stdout.write("aborted — candidate left in place\n");
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+		}
+		const registryHeader = "# Journey registry — ratified via `substrate acceptance ratify`.\n# The acceptance gate reads THIS file from the trusted tree. COMMIT it.\n";
+		try {
+			await mkdir$1(dirname$1(join$1(projectRoot, JOURNEY_REGISTRY_PATH)), { recursive: true });
+			await writeFile$1(join$1(projectRoot, JOURNEY_REGISTRY_PATH), registryHeader + dump(reg, { lineWidth: 120 }), "utf-8");
+			await unlink$1(candidatePath);
+		} catch (err) {
+			process.stdout.write(`acceptance ratify: write failed: ${String(err)}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		process.stdout.write(`ratified: ${JOURNEY_REGISTRY_PATH} v${String(reg.version)} (provenance recorded, ratified_by: ${opts.ratifiedBy}; candidate deleted)\nCOMMIT the registry — the gate reads the trusted (committed) tree.
 `);
 		process.exit(ACCEPTANCE_EXIT_SUCCESS);
 	});

package/dist/{health-BxH_n5cd.js → health-CvsH53bv.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-B1Rk7RXw.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-kr5GC1SN.js";
 import "./logger-KeHncl-f.js";
 import "./dist-BZGqn-XQ.js";
-import "./manifest-read-BX_tMdib.js";
+import "./manifest-read-CcK_LIaI.js";
 import "./work-graph-repository-4cKsf8Lf.js";
 import "./decisions-BAaxpVD0.js";
 

package/dist/{health-B1Rk7RXw.js → health-kr5GC1SN.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
 import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-BZGqn-XQ.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-BX_tMdib.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-CcK_LIaI.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-B1Rk7RXw.js.map
+//# sourceMappingURL=health-kr5GC1SN.js.map

package/dist/{interactive-prompt-GixkO5-6.js → interactive-prompt-B5KE69I6.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-BX_tMdib.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-CcK_LIaI.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-GixkO5-6.js.map
+//# sourceMappingURL=interactive-prompt-B5KE69I6.js.map

package/dist/{manifest-read-BX_tMdib.js → manifest-read-CcK_LIaI.js}

@@ -5444,6 +5444,161 @@ const JourneyCandidateSchema = z.object({
 		else seen.set(journey.id, i);
 	});
 });
+/** Parse + validate candidate YAML. Never throws (mirrors parseJourneyRegistry). */
+function parseJourneyCandidate(yamlContent) {
+	let doc;
+	try {
+		doc = load(yamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			ok: false,
+			issues: [{
+				path: "(root)",
+				message: `malformed YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0) return {
+		ok: false,
+		issues: [{
+			path: "(root)",
+			message: "candidate file is empty"
+		}]
+	};
+	const result = JourneyCandidateSchema.safeParse(doc);
+	if (!result.success) return {
+		ok: false,
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+			message: issue.message
+		}))
+	};
+	return {
+		ok: true,
+		candidate: result.data
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/acceptance/provenance.js
+function candidateToJourney(c, epicAssignments) {
+	const epic = epicAssignments?.[c.id] ?? c.epic;
+	return {
+		id: c.id,
+		title: c.title,
+		criticality: c.criticality,
+		surfaces: c.surfaces,
+		...epic !== void 0 ? { epic } : {},
+		end_states: c.end_states
+	};
+}
+/**
+* Build the ratified registry from a candidate. Pure — no fs, no prompts.
+*
+* Validation is the REGISTRY schema's (critical-needs-epic, non-empty
+* end_states, duplicate ids …): a candidate that would ratify into an
+* invalid registry comes back as issues for the operator to resolve by
+* editing the candidate (it is editable by design) or excluding journeys.
+*/
+function ratifyCandidate(candidate, options) {
+	const issues = [];
+	const warnings = [];
+	const candidateIds = new Set(candidate.journeys.map((j) => j.id));
+	for (const ex of options.excludes) if (!candidateIds.has(ex.candidate)) issues.push({
+		path: "excluded",
+		message: `--exclude "${ex.candidate}" does not match any candidate journey id (known: ${[...candidateIds].join(", ")})`
+	});
+	if (issues.length > 0) return {
+		ok: false,
+		issues
+	};
+	const excludedIds = new Set(options.excludes.map((e) => e.candidate));
+	const kept = candidate.journeys.filter((j) => !excludedIds.has(j.id));
+	if (kept.length === 0) return {
+		ok: false,
+		issues: [{
+			path: "journeys",
+			message: "every candidate journey was excluded — nothing to ratify"
+		}]
+	};
+	const carried = (options.existingRegistry?.provenance?.excluded ?? []).filter((prior) => !kept.some((j) => j.id === prior.candidate || j.title === prior.candidate) && !excludedIds.has(prior.candidate));
+	const sourceShaNow = createHash("sha256").update(options.sourceContent, "utf-8").digest("hex");
+	if (sourceShaNow !== candidate.source_sha256) warnings.push(`source ${candidate.derived_from} changed between derive (sha256 ${candidate.source_sha256.slice(0, 12)}…) and ratify (sha256 ${sourceShaNow.slice(0, 12)}…) — the provenance records the CURRENT content; consider re-deriving so the candidate reflects what you are ratifying against`);
+	const registry = {
+		version: options.existingRegistry !== void 0 ? options.existingRegistry.version + 1 : 1,
+		journeys: kept.map((j) => candidateToJourney(j, options.epicAssignments)),
+		provenance: {
+			derived_from: candidate.derived_from,
+			source_sha256: sourceShaNow,
+			derived_at: options.now,
+			ratified_by: options.ratifiedBy,
+			...options.excludes.length + carried.length > 0 ? { excluded: [...options.excludes, ...carried] } : {}
+		}
+	};
+	const validated = JourneyRegistrySchema.safeParse(registry);
+	if (!validated.success) return {
+		ok: false,
+		issues: validated.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+			message: issue.message
+		}))
+	};
+	return {
+		ok: true,
+		registry: validated.data,
+		warnings
+	};
+}
+function endStatesEqual(a, b) {
+	if (a.length !== b.length) return false;
+	const key = (es) => `${es.id}${es.given}${es.walk}${es.then}`;
+	const aKeys = new Set(a.map(key));
+	return b.every((es) => aKeys.has(key(es)));
+}
+/**
+* Diff the current registry's journeys against a candidate's. Field-level on
+* the shared ids so a semantic change (criticality flip, end-state rewrite,
+* surface add) can never render as a no-op; ordering and the candidate-only
+* criticality_rationale are deliberately ignored (not semantic).
+*/
+function diffJourneySets(current, candidate) {
+	const currentById = new Map(current.map((j) => [j.id, j]));
+	const candidateById = new Map(candidate.map((j) => [j.id, j]));
+	const added = candidate.filter((j) => !currentById.has(j.id)).map((j) => j.id);
+	const removed = current.filter((j) => !candidateById.has(j.id)).map((j) => j.id);
+	const changed = [];
+	const unchanged = [];
+	for (const [id, cur] of currentById) {
+		const cand = candidateById.get(id);
+		if (cand === void 0) continue;
+		const fields = [];
+		if (cur.title !== cand.title) fields.push("title");
+		if (cur.criticality !== cand.criticality) fields.push("criticality");
+		if ([...cur.surfaces].sort().join(",") !== [...cand.surfaces].sort().join(",")) fields.push("surfaces");
+		if (!endStatesEqual(cur.end_states, cand.end_states)) fields.push("end_states");
+		if (fields.length > 0) changed.push({
+			id,
+			fields
+		});
+		else unchanged.push(id);
+	}
+	return {
+		added,
+		removed,
+		changed,
+		unchanged
+	};
+}
+/** Render a diff for humans (derive/ratify CLI output). */
+function renderRegistryDiff(diff) {
+	const lines = [];
+	for (const id of diff.added) lines.push(`  + ${id} (new journey)`);
+	for (const id of diff.removed) lines.push(`  - ${id} (REMOVED — was in the ratified registry; removal needs a hard look)`);
+	for (const c of diff.changed) lines.push(`  ~ ${c.id} (changed: ${c.fields.join(", ")})`);
+	for (const id of diff.unchanged) lines.push(`  = ${id} (unchanged)`);
+	return lines.join("\n");
+}
 
 //#endregion
 //#region packages/sdlc/dist/acceptance/loader.js
@@ -7520,5 +7675,5 @@ async function resolveRunManifest(dbRoot, runId) {
 }
 
 //#endregion
-export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, clearGateDemotion, computeJourneyCoverage, computePrecision, computeRecall, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, demoteGate, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, parseStoryFrontmatter, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordCriticalFail, recordOverride, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary, runStaleVerificationRecovery, summarizeCoverage };
-//# sourceMappingURL=manifest-read-BX_tMdib.js.map
+export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, clearGateDemotion, computeJourneyCoverage, computePrecision, computeRecall, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, demoteGate, detectsEventDrivenAC, detectsStateIntegratingAC, diffJourneySets, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, parseStoryFrontmatter, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordCriticalFail, recordOverride, renderFindings, renderRegistryDiff, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary, runStaleVerificationRecovery, summarizeCoverage };
+//# sourceMappingURL=manifest-read-CcK_LIaI.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
 import "../../dist-BZGqn-XQ.js";
-import "../../manifest-read-BX_tMdib.js";
-import { runInteractivePrompt } from "../../interactive-prompt-GixkO5-6.js";
+import "../../manifest-read-CcK_LIaI.js";
+import { runInteractivePrompt } from "../../interactive-prompt-B5KE69I6.js";
 
 export { runInteractivePrompt };

package/dist/{run-DcUXpWwu.js → run-DR_D61vF.js}

@@ -1,12 +1,12 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-B1Rk7RXw.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-kr5GC1SN.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
 import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-BZGqn-XQ.js";
-import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, recordCriticalFail, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-BX_tMdib.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, recordCriticalFail, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-CcK_LIaI.js";
 import { CodeReviewResultSchema, CreateStoryResultSchema, DevStoryResultSchema, ProbeAuthorResultSchema, TestExpansionResultSchema, TestPlanResultSchema, assemblePrompt, countTokens, getTokenCeiling, runAcceptanceJudge, truncateToTokens } from "./acceptance-judge-lAv5EvYA.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-4cKsf8Lf.js";
 import { deriveExitCode, routeDecision } from "./decision-router-Dyby0fUf.js";
-import { runInteractivePrompt } from "./interactive-prompt-GixkO5-6.js";
+import { runInteractivePrompt } from "./interactive-prompt-B5KE69I6.js";
 import { runRecoveryEngine } from "./recovery-engine-dtLHyV4M.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -48358,4 +48358,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-DcUXpWwu.js.map
+//# sourceMappingURL=run-DR_D61vF.js.map

package/dist/{run-BnUAxdws.js → run-UilZoIOh.js}

@@ -1,15 +1,15 @@
-import "./health-B1Rk7RXw.js";
+import "./health-kr5GC1SN.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
 import "./dist-BZGqn-XQ.js";
-import "./manifest-read-BX_tMdib.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-DcUXpWwu.js";
+import "./manifest-read-CcK_LIaI.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-DR_D61vF.js";
 import "./acceptance-judge-lAv5EvYA.js";
 import "./routing-DZT5PN3N.js";
 import "./work-graph-repository-4cKsf8Lf.js";
 import "./decisions-BAaxpVD0.js";
 import "./decision-router-Dyby0fUf.js";
-import "./interactive-prompt-GixkO5-6.js";
+import "./interactive-prompt-B5KE69I6.js";
 import "./recovery-engine-dtLHyV4M.js";
 
 export { runRunAction };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.21.14",
+  "version": "0.21.15",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",