substrate-ai 0.21.14 → 0.21.16

package/dist/cli/index.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-B1Rk7RXw.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-CI8pIygU.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
 import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-BZGqn-XQ.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, clearGateDemotion, computePrecision, computeRecall, demoteGate, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordOverride, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary } from "../manifest-read-BX_tMdib.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-DcUXpWwu.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, checkRegistryStaleness, clearGateDemotion, computePrecision, computeRecall, demoteGate, diffJourneySets, isProjectContainedPath, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, readTrustedFileContent, recordCanary, recordOverride, renderRegistryDiff, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary } from "../manifest-read-3cF8yP3_.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-BeYZ5L6d.js";
 import "../errors-xSeGw6pf.js";
 import { AcceptanceDeriveResultSchema, assemblePrompt, getTokenCeiling, runAcceptanceJudge } from "../acceptance-judge-lAv5EvYA.js";
 import "../routing-DZT5PN3N.js";
 import { WorkGraphRepository } from "../work-graph-repository-4cKsf8Lf.js";
 import "../decisions-BAaxpVD0.js";
 import "../decision-router-Dyby0fUf.js";
-import "../interactive-prompt-GixkO5-6.js";
+import "../interactive-prompt-BWdH9Lb9.js";
 import "../recovery-engine-dtLHyV4M.js";
 import "../version-manager-impl-DMTw551Q.js";
 import { registerUpgradeCommand } from "../upgrade-CNGc12AV.js";
@@ -30,7 +30,7 @@ import { basename as basename$1, dirname as dirname$1, join as join$1, posix, re
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
 import * as fs from "node:fs/promises";
-import { lstat, mkdir as mkdir$1, readFile as readFile$1, readdir as readdir$1, readlink, realpath, writeFile as writeFile$1 } from "node:fs/promises";
+import { lstat, mkdir as mkdir$1, readFile as readFile$1, readdir as readdir$1, readlink, realpath, unlink as unlink$1, writeFile as writeFile$1 } from "node:fs/promises";
 import { chmodSync, cpSync, existsSync as existsSync$1, lstatSync, mkdirSync as mkdirSync$1, readFileSync as readFileSync$1, readdir as readdir$2, readdirSync as readdirSync$1, readlinkSync, realpathSync as realpathSync$1, rmSync as rmSync$1, statSync as statSync$1, unlinkSync as unlinkSync$1, writeFileSync as writeFileSync$1 } from "fs";
 import { homedir } from "os";
 import { createRequire } from "node:module";
@@ -39,6 +39,7 @@ import * as readline from "node:readline";
 import { createInterface } from "node:readline";
 import { randomUUID as randomUUID$1 } from "crypto";
 import { createInterface as createInterface$1 } from "readline";
+import { createInterface as createInterface$2 } from "node:readline/promises";
 
 //#region packages/core/dist/monitor/recommendation-engine.js
 var RecommendationEngine = class {
@@ -7136,7 +7137,7 @@ async function runStatusAction(options) {
 			logger$16.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-BxH_n5cd.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-C1m6-7WH.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8665,7 +8666,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-BnUAxdws.js"
+									"../run-NlTM7HwK.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -13660,17 +13661,49 @@ function registerAcceptanceCommand(program, version, registry) {
 		} catch {
 			contract = { status: "absent" };
 		}
+		let staleness;
+		if (result.status === "ok" && result.registry.provenance !== void 0) {
+			const derivedFrom = result.registry.provenance.derived_from;
+			let sourceContent;
+			if (isProjectContainedPath(derivedFrom)) if (opts.ref !== void 0) {
+				const read = await readTrustedFileContent(projectRoot, opts.ref, derivedFrom);
+				sourceContent = read.status === "ok" ? read.content : void 0;
+			} else try {
+				sourceContent = await readFile$1(join$1(projectRoot, derivedFrom), "utf-8");
+			} catch {
+				sourceContent = void 0;
+			}
+			staleness = checkRegistryStaleness(result.registry, sourceContent);
+		}
 		if (opts.outputFormat === "json") {
 			const output = buildJsonOutput("substrate acceptance validate", {
 				source,
 				...result,
 				contract: { status: contract.status },
-				provenance: { status: result.status === "ok" && result.registry.provenance !== void 0 ? "present" : "absent" }
+				provenance: {
+					status: result.status === "ok" && result.registry.provenance !== void 0 ? "present" : "absent",
+					...staleness !== void 0 ? { staleness: staleness.status } : {}
+				}
 			}, version);
 			process.stdout.write(JSON.stringify(output, null, 2) + "\n");
 			process.exit(result.status === "ok" ? ACCEPTANCE_EXIT_SUCCESS : ACCEPTANCE_EXIT_ERROR);
 		}
 		const exitCode = renderHuman(result, source);
+		if (staleness !== void 0) switch (staleness.status) {
+			case "fresh":
+				process.stdout.write(`staleness: FRESH — ${staleness.derivedFrom} unchanged since ratification\n`);
+				break;
+			case "stale":
+				process.stdout.write(`registry-stale (advisory): ${staleness.derivedFrom} changed since ratification (recorded sha256 ${staleness.recordedSha.slice(0, 12)}…, current ${staleness.currentSha.slice(0, 12)}…) — re-run \`substrate acceptance derive --prd ${staleness.derivedFrom} --force\` and review the diff\n`);
+				break;
+			case "source-missing":
+				process.stdout.write(`registry-source-missing (advisory): ${staleness.derivedFrom} (recorded in provenance) not found — the staleness baseline cannot be verified\n`);
+				break;
+			case "source-escapes-project":
+				process.stdout.write(`registry-source-escapes-project (advisory): provenance derived_from "${staleness.derivedFrom}" resolves outside the project — refusing to read it\n`);
+				break;
+			case "no-provenance": break;
+		}
 		if (contract.status === "ok") {
 			const surfaces = Object.keys(contract.contract.surfaces).join(", ");
 			process.stdout.write(`contract: OK — surfaces declared: ${surfaces}\n`);
@@ -13909,7 +13942,121 @@ function registerAcceptanceCommand(program, version, registry) {
 		}
 		const needsElaboration = result.journeys.filter((j) => j.end_states.length === 0);
 		process.stdout.write(`candidate written: ${relative(projectRoot, outPath)}\n  ${String(result.journeys.length)} journeys (${String(result.journeys.filter((j) => j.criticality === "critical").length)} critical), ${String(result.journeys.reduce((n, j) => n + j.end_states.length, 0))} end-states` + (needsElaboration.length > 0 ? `, ${String(needsElaboration.length)} journey(s) need end-state elaboration: ${needsElaboration.map((j) => j.id).join(", ")}` : "") + `
-  derived from ${prdRel} (sha256 ${sourceSha.slice(0, 12)}…)\nThis candidate is NOT authoritative and the gate ignores it. Review every journey against the PRD — a journey missing here is invisible to the whole acceptance machinery.
+  derived from ${prdRel} (sha256 ${sourceSha.slice(0, 12)}…)\n`);
+		if (existingRegistryYaml !== void 0) {
+			const parsedExisting = parseJourneyRegistry(existingRegistryYaml);
+			if (parsedExisting.ok) process.stdout.write(`delta vs ratified registry v${String(parsedExisting.registry.version)}:\n${renderRegistryDiff(diffJourneySets(parsedExisting.registry.journeys, result.journeys))}\n`);
+		}
+		process.stdout.write("This candidate is NOT authoritative and the gate ignores it. Review every journey against the PRD — a journey missing here is invisible to the whole acceptance machinery.\n");
+		process.exit(ACCEPTANCE_EXIT_SUCCESS);
+	});
+	acceptanceCmd.command("ratify").description(`Promote ${JOURNEY_CANDIDATE_PATH} to ${JOURNEY_REGISTRY_PATH} with a recorded provenance block. Interactive confirm unless --yes. The candidate file is deleted on success.`).option("--exclude <spec>", "exclude a candidate journey: \"UJ-2: reason text\" (repeatable; reason mandatory)", (v, acc) => [...acc, v], []).option("--epic <spec>", "assign an epic at ratify time: \"UJ-1=2\" (repeatable; critical journeys require one)", (v, acc) => [...acc, v], []).option("--ratified-by <name>", "who is ratifying (recorded in provenance)", "operator").option("--yes", "skip the interactive confirmation", false).action(async (opts) => {
+		const projectRoot = process.cwd();
+		const candidatePath = join$1(projectRoot, JOURNEY_CANDIDATE_PATH);
+		let candidateContent;
+		try {
+			candidateContent = await readFile$1(candidatePath, "utf-8");
+		} catch {
+			process.stdout.write(`acceptance ratify: no candidate at ${JOURNEY_CANDIDATE_PATH} — run \`substrate acceptance derive --prd <path>\` first\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const parsedCandidate = parseJourneyCandidate(candidateContent);
+		if (!parsedCandidate.ok) {
+			process.stdout.write(`acceptance ratify: candidate invalid:\n${parsedCandidate.issues.map((i) => `  ${i.path}: ${i.message}`).join("\n")}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const candidate = parsedCandidate.candidate;
+		const excludes = [];
+		for (const spec of opts.exclude) {
+			const sep = spec.indexOf(":");
+			const id = sep >= 0 ? spec.slice(0, sep).trim() : spec.trim();
+			const reason = sep >= 0 ? spec.slice(sep + 1).trim() : "";
+			if (reason === "") {
+				process.stdout.write(`acceptance ratify: --exclude "${spec}" has no reason — use "ID: reason" (reasonless exclusions are unauditable)\n`);
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+			excludes.push({
+				candidate: id,
+				reason
+			});
+		}
+		const epicAssignments = {};
+		for (const spec of opts.epic) {
+			const sep = spec.indexOf("=");
+			const id = sep >= 0 ? spec.slice(0, sep).trim() : "";
+			const n = sep >= 0 ? Number(spec.slice(sep + 1).trim()) : NaN;
+			if (id === "" || !Number.isInteger(n) || n <= 0) {
+				process.stdout.write(`acceptance ratify: --epic "${spec}" must be "JOURNEY-ID=<positive integer>"\n`);
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+			epicAssignments[id] = n;
+		}
+		let existingRegistry;
+		try {
+			const existingContent = await readFile$1(join$1(projectRoot, JOURNEY_REGISTRY_PATH), "utf-8");
+			const parsedExisting = parseJourneyRegistry(existingContent);
+			if (!parsedExisting.ok) {
+				process.stdout.write(`acceptance ratify: existing ${JOURNEY_REGISTRY_PATH} is INVALID — fix or remove it before re-ratifying:\n${parsedExisting.issues.map((i) => `  ${i.path}: ${i.message}`).join("\n")}\n`);
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+			existingRegistry = parsedExisting.registry;
+		} catch {
+			existingRegistry = void 0;
+		}
+		let sourceContent;
+		try {
+			sourceContent = await readFile$1(join$1(projectRoot, candidate.derived_from), "utf-8");
+		} catch (err) {
+			process.stdout.write(`acceptance ratify: cannot read source ${candidate.derived_from} (recorded in the candidate): ${String(err)}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const result = ratifyCandidate(candidate, {
+			excludes,
+			ratifiedBy: opts.ratifiedBy,
+			sourceContent,
+			now: new Date().toISOString(),
+			...existingRegistry !== void 0 ? { existingRegistry } : {},
+			epicAssignments
+		});
+		if (!result.ok) {
+			process.stdout.write(`acceptance ratify: the candidate would not ratify into a VALID registry — edit ${JOURNEY_CANDIDATE_PATH} (it is editable by design), assign epics via --epic, or exclude journeys via --exclude:\n` + result.issues.map((i) => `  ${i.path}: ${i.message}`).join("\n") + "\n");
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		const reg = result.registry;
+		process.stdout.write(`ratifying → ${JOURNEY_REGISTRY_PATH} v${String(reg.version)}${existingRegistry !== void 0 ? ` (replacing v${String(existingRegistry.version)})` : ""}\n` + reg.journeys.map((j) => `  ${j.id} [${j.criticality}${j.epic !== void 0 ? ` epic ${String(j.epic)}` : ""}] ${j.title} — ${String(j.end_states.length)} end-state(s)\n`).join("") + (reg.provenance?.excluded !== void 0 ? reg.provenance.excluded.map((e) => `  excluded: ${e.candidate} — ${e.reason}\n`).join("") : ""));
+		if (existingRegistry !== void 0) process.stdout.write(`delta vs v${String(existingRegistry.version)}:\n${renderRegistryDiff(diffJourneySets(existingRegistry.journeys, candidate.journeys))}\n`);
+		for (const w of result.warnings) process.stdout.write(`WARNING: ${w}\n`);
+		if (!opts.yes) {
+			const rl = createInterface$2({
+				input: process.stdin,
+				output: process.stderr
+			});
+			const answer = await rl.question("ratify? [y/N] ");
+			rl.close();
+			if (answer.trim().toLowerCase() !== "y") {
+				process.stdout.write("aborted — candidate left in place\n");
+				process.exit(ACCEPTANCE_EXIT_ERROR);
+				return;
+			}
+		}
+		const registryHeader = "# Journey registry — ratified via `substrate acceptance ratify`.\n# The acceptance gate reads THIS file from the trusted tree. COMMIT it.\n";
+		try {
+			await mkdir$1(dirname$1(join$1(projectRoot, JOURNEY_REGISTRY_PATH)), { recursive: true });
+			await writeFile$1(join$1(projectRoot, JOURNEY_REGISTRY_PATH), registryHeader + dump(reg, { lineWidth: 120 }), "utf-8");
+			await unlink$1(candidatePath);
+		} catch (err) {
+			process.stdout.write(`acceptance ratify: write failed: ${String(err)}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+			return;
+		}
+		process.stdout.write(`ratified: ${JOURNEY_REGISTRY_PATH} v${String(reg.version)} (provenance recorded, ratified_by: ${opts.ratifiedBy}; candidate deleted)\nCOMMIT the registry — the gate reads the trusted (committed) tree.
 `);
 		process.exit(ACCEPTANCE_EXIT_SUCCESS);
 	});

package/dist/{health-BxH_n5cd.js → health-C1m6-7WH.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-B1Rk7RXw.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-CI8pIygU.js";
 import "./logger-KeHncl-f.js";
 import "./dist-BZGqn-XQ.js";
-import "./manifest-read-BX_tMdib.js";
+import "./manifest-read-3cF8yP3_.js";
 import "./work-graph-repository-4cKsf8Lf.js";
 import "./decisions-BAaxpVD0.js";
 

package/dist/{health-B1Rk7RXw.js → health-CI8pIygU.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
 import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-BZGqn-XQ.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-BX_tMdib.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-3cF8yP3_.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-B1Rk7RXw.js.map
+//# sourceMappingURL=health-CI8pIygU.js.map

package/dist/index.d.ts

@@ -260,6 +260,25 @@ interface AcceptanceVerdictEvent {
     excerpt: string;
   }[];
 }
+/**
+ * RP2.1 (registry-provenance): the registry's provenance `derived_from`
+ * source no longer hashes to the recorded ratification baseline (`stale`),
+ * cannot be found (`source-missing`), or records an escaping path
+ * (`source-escapes-project`). ADVISORY — the run continues; the signal means
+ * the PRD moved after ratification and the registry may no longer cover the
+ * vision. Resolution: `substrate acceptance derive` + review the diff +
+ * re-ratify.
+ */
+interface AcceptanceRegistryStaleEvent {
+  type: 'acceptance:registry-stale';
+  ts: string;
+  /** Audit boundary that detected it: `epic-<n>` or `final` */
+  scope: string;
+  status: 'stale' | 'source-missing' | 'source-escapes-project';
+  derived_from: string;
+  recorded_sha?: string;
+  current_sha?: string;
+}
 /** A6.1: canary self-test — did the gate catch a planted (reverted-wiring) regression? */
 interface AcceptanceCanaryEvent {
   type: 'acceptance:canary';
@@ -904,7 +923,7 @@ interface PipelineMergeConflictDetectedEvent {
  * }
  * ```
  */
-type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryCommittedEvent | StoryMergedEvent | StoryFinalizedEvent | AcceptanceCoverageEvent | AcceptanceStartedEvent | AcceptanceRenderedEvent | AcceptanceVerdictEvent | AcceptanceCanaryEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent | PipelineMergeConflictDetectedEvent; //#endregion
+type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryCommittedEvent | StoryMergedEvent | StoryFinalizedEvent | AcceptanceCoverageEvent | AcceptanceStartedEvent | AcceptanceRenderedEvent | AcceptanceVerdictEvent | AcceptanceCanaryEvent | AcceptanceRegistryStaleEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent | PipelineMergeConflictDetectedEvent; //#endregion
 //#region src/core/errors.d.ts
 
 /**
@@ -1607,6 +1626,18 @@ interface OrchestratorEvents {
     }[];
     summary: Record<string, number>;
   };
+  /**
+   * RP2.1 (registry-provenance): the registry's `derived_from` source no
+   * longer hashes to the recorded ratification baseline (or cannot be read).
+   * ADVISORY — mapped to the NDJSON `acceptance:registry-stale` event.
+   */
+  'orchestrator:acceptance-registry-stale': {
+    scope: string;
+    status: 'stale' | 'source-missing' | 'source-escapes-project';
+    derivedFrom: string;
+    recordedSha?: string;
+    currentSha?: string;
+  };
   /** A story has been escalated after exceeding max review cycles */
   'orchestrator:story-escalated': {
     storyKey: string;

package/dist/{interactive-prompt-GixkO5-6.js → interactive-prompt-BWdH9Lb9.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-BX_tMdib.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-3cF8yP3_.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-GixkO5-6.js.map
+//# sourceMappingURL=interactive-prompt-BWdH9Lb9.js.map

package/dist/{manifest-read-BX_tMdib.js → manifest-read-3cF8yP3_.js}

@@ -5444,6 +5444,212 @@ const JourneyCandidateSchema = z.object({
 		else seen.set(journey.id, i);
 	});
 });
+/** Parse + validate candidate YAML. Never throws (mirrors parseJourneyRegistry). */
+function parseJourneyCandidate(yamlContent) {
+	let doc;
+	try {
+		doc = load(yamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			ok: false,
+			issues: [{
+				path: "(root)",
+				message: `malformed YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0) return {
+		ok: false,
+		issues: [{
+			path: "(root)",
+			message: "candidate file is empty"
+		}]
+	};
+	const result = JourneyCandidateSchema.safeParse(doc);
+	if (!result.success) return {
+		ok: false,
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+			message: issue.message
+		}))
+	};
+	return {
+		ok: true,
+		candidate: result.data
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/acceptance/provenance.js
+function candidateToJourney(c, epicAssignments) {
+	const epic = epicAssignments?.[c.id] ?? c.epic;
+	return {
+		id: c.id,
+		title: c.title,
+		criticality: c.criticality,
+		surfaces: c.surfaces,
+		...epic !== void 0 ? { epic } : {},
+		end_states: c.end_states
+	};
+}
+/**
+* Build the ratified registry from a candidate. Pure — no fs, no prompts.
+*
+* Validation is the REGISTRY schema's (critical-needs-epic, non-empty
+* end_states, duplicate ids …): a candidate that would ratify into an
+* invalid registry comes back as issues for the operator to resolve by
+* editing the candidate (it is editable by design) or excluding journeys.
+*/
+function ratifyCandidate(candidate, options) {
+	const issues = [];
+	const warnings = [];
+	const candidateIds = new Set(candidate.journeys.map((j) => j.id));
+	for (const ex of options.excludes) if (!candidateIds.has(ex.candidate)) issues.push({
+		path: "excluded",
+		message: `--exclude "${ex.candidate}" does not match any candidate journey id (known: ${[...candidateIds].join(", ")})`
+	});
+	if (issues.length > 0) return {
+		ok: false,
+		issues
+	};
+	const excludedIds = new Set(options.excludes.map((e) => e.candidate));
+	const kept = candidate.journeys.filter((j) => !excludedIds.has(j.id));
+	if (kept.length === 0) return {
+		ok: false,
+		issues: [{
+			path: "journeys",
+			message: "every candidate journey was excluded — nothing to ratify"
+		}]
+	};
+	const carried = (options.existingRegistry?.provenance?.excluded ?? []).filter((prior) => !kept.some((j) => j.id === prior.candidate || j.title === prior.candidate) && !excludedIds.has(prior.candidate));
+	const sourceShaNow = createHash("sha256").update(options.sourceContent, "utf-8").digest("hex");
+	if (sourceShaNow !== candidate.source_sha256) warnings.push(`source ${candidate.derived_from} changed between derive (sha256 ${candidate.source_sha256.slice(0, 12)}…) and ratify (sha256 ${sourceShaNow.slice(0, 12)}…) — the provenance records the CURRENT content; consider re-deriving so the candidate reflects what you are ratifying against`);
+	const registry = {
+		version: options.existingRegistry !== void 0 ? options.existingRegistry.version + 1 : 1,
+		journeys: kept.map((j) => candidateToJourney(j, options.epicAssignments)),
+		provenance: {
+			derived_from: candidate.derived_from,
+			source_sha256: sourceShaNow,
+			derived_at: options.now,
+			ratified_by: options.ratifiedBy,
+			...options.excludes.length + carried.length > 0 ? { excluded: [...options.excludes, ...carried] } : {}
+		}
+	};
+	const validated = JourneyRegistrySchema.safeParse(registry);
+	if (!validated.success) return {
+		ok: false,
+		issues: validated.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+			message: issue.message
+		}))
+	};
+	return {
+		ok: true,
+		registry: validated.data,
+		warnings
+	};
+}
+function endStatesEqual(a, b) {
+	if (a.length !== b.length) return false;
+	const key = (es) => JSON.stringify([
+		es.id,
+		es.given,
+		es.walk,
+		es.then
+	]);
+	const aKeys = new Set(a.map(key));
+	return b.every((es) => aKeys.has(key(es)));
+}
+/**
+* Diff the current registry's journeys against a candidate's. Field-level on
+* the shared ids so a semantic change (criticality flip, end-state rewrite,
+* surface add) can never render as a no-op; ordering and the candidate-only
+* criticality_rationale are deliberately ignored (not semantic).
+*/
+function diffJourneySets(current, candidate) {
+	const currentById = new Map(current.map((j) => [j.id, j]));
+	const candidateById = new Map(candidate.map((j) => [j.id, j]));
+	const added = candidate.filter((j) => !currentById.has(j.id)).map((j) => j.id);
+	const removed = current.filter((j) => !candidateById.has(j.id)).map((j) => j.id);
+	const changed = [];
+	const unchanged = [];
+	for (const [id, cur] of currentById) {
+		const cand = candidateById.get(id);
+		if (cand === void 0) continue;
+		const fields = [];
+		if (cur.title !== cand.title) fields.push("title");
+		if (cur.criticality !== cand.criticality) fields.push("criticality");
+		if ([...cur.surfaces].sort().join(",") !== [...cand.surfaces].sort().join(",")) fields.push("surfaces");
+		if (!endStatesEqual(cur.end_states, cand.end_states)) fields.push("end_states");
+		if (fields.length > 0) changed.push({
+			id,
+			fields
+		});
+		else unchanged.push(id);
+	}
+	return {
+		added,
+		removed,
+		changed,
+		unchanged
+	};
+}
+/**
+* A provenance `derived_from` must resolve INSIDE the project: relative, no
+* traversal, no absolute/drive/scheme forms. The staleness check re-reads
+* this recorded path — an escaping path would let a hostile provenance block
+* point the re-hash at content outside the repo (RP5 catalog item 5).
+*/
+function isProjectContainedPath(relPath) {
+	if (relPath === "" || relPath.startsWith("/") || relPath.startsWith("\\")) return false;
+	if (/^[a-zA-Z]:[\\/]/.test(relPath)) return false;
+	if (/^[a-z][a-z0-9+.-]*:/i.test(relPath)) return false;
+	const segments = relPath.split(/[\\/]/);
+	return !segments.includes("..");
+}
+/**
+* Compare the recorded `source_sha256` against the CURRENT content of
+* `derived_from`. Pure: the caller supplies the content (fs for operator
+* lint, trusted-tree `git show` for the orchestrator) — pass `undefined`
+* when the source could not be read.
+*
+* ADVISORY by construction: every status is information for the operator;
+* nothing here blocks. Registry rot must be LOUD, not fatal.
+*/
+function checkRegistryStaleness(registry, sourceContent) {
+	const prov = registry.provenance;
+	if (prov === void 0) return { status: "no-provenance" };
+	if (!isProjectContainedPath(prov.derived_from)) return {
+		status: "source-escapes-project",
+		derivedFrom: prov.derived_from
+	};
+	if (sourceContent === void 0) return {
+		status: "source-missing",
+		derivedFrom: prov.derived_from
+	};
+	const currentSha = createHash("sha256").update(sourceContent, "utf-8").digest("hex");
+	if (currentSha === prov.source_sha256) return {
+		status: "fresh",
+		sha: currentSha,
+		derivedFrom: prov.derived_from
+	};
+	return {
+		status: "stale",
+		recordedSha: prov.source_sha256,
+		currentSha,
+		derivedFrom: prov.derived_from
+	};
+}
+/** Render a diff for humans (derive/ratify CLI output). */
+function renderRegistryDiff(diff) {
+	const lines = [];
+	for (const id of diff.added) lines.push(`  + ${id} (new journey)`);
+	for (const id of diff.removed) lines.push(`  - ${id} (REMOVED — was in the ratified registry; removal needs a hard look)`);
+	for (const c of diff.changed) lines.push(`  ~ ${c.id} (changed: ${c.fields.join(", ")})`);
+	for (const id of diff.unchanged) lines.push(`  = ${id} (unchanged)`);
+	return lines.join("\n");
+}
 
 //#endregion
 //#region packages/sdlc/dist/acceptance/loader.js
@@ -5570,6 +5776,31 @@ async function loadAcceptanceContractFromTrustedTree(repoRoot, ref = "HEAD") {
 	return parseAcceptanceContract(result.stdout);
 }
 /**
+* Read an arbitrary project-relative file from the trusted tree at `ref`
+* (RP2.1: the staleness check re-hashes `provenance.derived_from` against
+* the same snapshot the registry was loaded from). Callers must containment-
+* check the path first (`isProjectContainedPath`) — git itself rejects
+* escaping specs, but the check belongs before the spawn.
+*/
+async function readTrustedFileContent(repoRoot, ref, relPath) {
+	const result = await runGitShow(repoRoot, ref, relPath);
+	if (result.spawnError !== void 0) return {
+		status: "error",
+		message: `git show could not be spawned: ${result.spawnError}`
+	};
+	if (result.code !== 0) {
+		if (GIT_SHOW_ABSENT_PATTERNS.some((p) => p.test(result.stderr))) return { status: "absent" };
+		return {
+			status: "error",
+			message: `git show ${ref}:${relPath} failed (exit ${String(result.code)}): ${result.stderr.trim()}`
+		};
+	}
+	return {
+		status: "ok",
+		content: result.stdout
+	};
+}
+/**
 * Filesystem read for OPERATOR LINT ONLY (`substrate acceptance validate`).
 * Gate/judge code paths must use `loadJourneyRegistryFromTrustedTree`.
 */
@@ -7520,5 +7751,5 @@ async function resolveRunManifest(dbRoot, runId) {
 }
 
 //#endregion
-export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, clearGateDemotion, computeJourneyCoverage, computePrecision, computeRecall, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, demoteGate, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, parseStoryFrontmatter, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordCriticalFail, recordOverride, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary, runStaleVerificationRecovery, summarizeCoverage };
-//# sourceMappingURL=manifest-read-BX_tMdib.js.map
+export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, checkRegistryStaleness, clearGateDemotion, computeJourneyCoverage, computePrecision, computeRecall, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, demoteGate, detectsEventDrivenAC, detectsStateIntegratingAC, diffJourneySets, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, isProjectContainedPath, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, parseStoryFrontmatter, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, readTrustedFileContent, recordCanary, recordCriticalFail, recordOverride, renderFindings, renderRegistryDiff, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary, runStaleVerificationRecovery, summarizeCoverage };
+//# sourceMappingURL=manifest-read-3cF8yP3_.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
 import "../../dist-BZGqn-XQ.js";
-import "../../manifest-read-BX_tMdib.js";
-import { runInteractivePrompt } from "../../interactive-prompt-GixkO5-6.js";
+import "../../manifest-read-3cF8yP3_.js";
+import { runInteractivePrompt } from "../../interactive-prompt-BWdH9Lb9.js";
 
 export { runInteractivePrompt };

package/dist/{run-DcUXpWwu.js → run-BeYZ5L6d.js}

@@ -1,12 +1,12 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-B1Rk7RXw.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-CI8pIygU.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
 import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-BZGqn-XQ.js";
-import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, recordCriticalFail, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-BX_tMdib.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, checkRegistryStaleness, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, isProjectContainedPath, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, readTrustedFileContent, recordCriticalFail, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-3cF8yP3_.js";
 import { CodeReviewResultSchema, CreateStoryResultSchema, DevStoryResultSchema, ProbeAuthorResultSchema, TestExpansionResultSchema, TestPlanResultSchema, assemblePrompt, countTokens, getTokenCeiling, runAcceptanceJudge, truncateToTokens } from "./acceptance-judge-lAv5EvYA.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-4cKsf8Lf.js";
 import { deriveExitCode, routeDecision } from "./decision-router-Dyby0fUf.js";
-import { runInteractivePrompt } from "./interactive-prompt-GixkO5-6.js";
+import { runInteractivePrompt } from "./interactive-prompt-BWdH9Lb9.js";
 import { runRecoveryEngine } from "./recovery-engine-dtLHyV4M.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -1091,6 +1091,45 @@ const PIPELINE_EVENT_METADATA = [
 			}
 		]
 	},
+	{
+		type: "acceptance:registry-stale",
+		description: "Registry staleness advisory (RP2.1): the registry's provenance source no longer hashes to its ratification baseline (stale), is unreadable (source-missing), or escapes the project (source-escapes-project). Run continues; re-derive + re-ratify to resolve.",
+		when: "At coverage-audit boundaries when a provenance-bearing registry's source diverged.",
+		fields: [
+			{
+				name: "ts",
+				type: "string",
+				description: "Timestamp."
+			},
+			{
+				name: "scope",
+				type: "string",
+				description: "epic-<n> or final."
+			},
+			{
+				name: "status",
+				type: "string",
+				description: "stale | source-missing | source-escapes-project."
+			},
+			{
+				name: "derived_from",
+				type: "string",
+				description: "Recorded source path."
+			},
+			{
+				name: "recorded_sha",
+				type: "string",
+				description: "Baseline sha256 (stale only).",
+				optional: true
+			},
+			{
+				name: "current_sha",
+				type: "string",
+				description: "Current sha256 (stale only).",
+				optional: true
+			}
+		]
+	},
 	{
 		type: "story:escalation",
 		description: "Story escalated — either max review cycles exceeded or a precondition for SHIP_IT was not met.",
@@ -13836,6 +13875,33 @@ function createImplementationOrchestrator(deps) {
 			logger$26.warn({ detail: registryLoad.message }, "A0.3: journey registry read failed — coverage audit skipped (environmental)");
 			return void 0;
 		}
+		{
+			const prov = registryLoad.registry.provenance;
+			if (prov !== void 0) {
+				let sourceContent;
+				if (isProjectContainedPath(prov.derived_from)) {
+					const read = await readTrustedFileContent(projectRoot, _runStartSha ?? "HEAD", prov.derived_from);
+					sourceContent = read.status === "ok" ? read.content : void 0;
+				}
+				const staleness = checkRegistryStaleness(registryLoad.registry, sourceContent);
+				if (staleness.status === "stale" || staleness.status === "source-missing" || staleness.status === "source-escapes-project") {
+					const scopeLabelStale = "final" in scope ? "final" : `epic-${String(scope.epic)}`;
+					logger$26.warn({
+						staleness,
+						scope: scopeLabelStale
+					}, `RP2.1: registry-stale advisory (${staleness.status}) — the registry's source document diverged from its ratification baseline; re-run \`substrate acceptance derive\` and review the diff`);
+					eventBus.emit("orchestrator:acceptance-registry-stale", {
+						scope: scopeLabelStale,
+						status: staleness.status,
+						derivedFrom: staleness.derivedFrom,
+						...staleness.status === "stale" ? {
+							recordedSha: staleness.recordedSha,
+							currentSha: staleness.currentSha
+						} : {}
+					});
+				}
+			}
+		}
 		let unrunnable;
 		const contractLoad = await loadAcceptanceContractFromTrustedTree(projectRoot, _runStartSha ?? "HEAD");
 		if (contractLoad.status === "absent") unrunnable = `journey registry exists but the committed project profile has no acceptance: contract block (${ACCEPTANCE_CONTRACT_PROFILE_PATH}) — claimed journeys can never be walked. Declare render commands per surface.`;
@@ -46499,6 +46565,17 @@ function wireNdjsonEmitter(eventBus, ndjsonEmitter) {
 			summary: payload.summary
 		});
 	});
+	eventBus.on("orchestrator:acceptance-registry-stale", (payload) => {
+		ndjsonEmitter.emit({
+			type: "acceptance:registry-stale",
+			ts: new Date().toISOString(),
+			scope: payload.scope,
+			status: payload.status,
+			derived_from: payload.derivedFrom,
+			...payload.recordedSha !== void 0 ? { recorded_sha: payload.recordedSha } : {},
+			...payload.currentSha !== void 0 ? { current_sha: payload.currentSha } : {}
+		});
+	});
 	eventBus.on("orchestrator:story-escalated", (payload) => {
 		const rawIssues = Array.isArray(payload.issues) ? payload.issues : [];
 		const issues = rawIssues.map((issue) => {
@@ -48358,4 +48435,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-DcUXpWwu.js.map
+//# sourceMappingURL=run-BeYZ5L6d.js.map

package/dist/{run-BnUAxdws.js → run-NlTM7HwK.js}

@@ -1,15 +1,15 @@
-import "./health-B1Rk7RXw.js";
+import "./health-CI8pIygU.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
 import "./dist-BZGqn-XQ.js";
-import "./manifest-read-BX_tMdib.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-DcUXpWwu.js";
+import "./manifest-read-3cF8yP3_.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-BeYZ5L6d.js";
 import "./acceptance-judge-lAv5EvYA.js";
 import "./routing-DZT5PN3N.js";
 import "./work-graph-repository-4cKsf8Lf.js";
 import "./decisions-BAaxpVD0.js";
 import "./decision-router-Dyby0fUf.js";
-import "./interactive-prompt-GixkO5-6.js";
+import "./interactive-prompt-BWdH9Lb9.js";
 import "./recovery-engine-dtLHyV4M.js";
 
 export { runRunAction };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.21.14",
+  "version": "0.21.16",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",