substrate-ai 0.21.15 → 0.21.16

package/dist/cli/index.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-kr5GC1SN.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-CI8pIygU.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
 import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-BZGqn-XQ.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, clearGateDemotion, computePrecision, computeRecall, demoteGate, diffJourneySets, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordOverride, renderRegistryDiff, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary } from "../manifest-read-CcK_LIaI.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-DR_D61vF.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, checkRegistryStaleness, clearGateDemotion, computePrecision, computeRecall, demoteGate, diffJourneySets, isProjectContainedPath, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, readTrustedFileContent, recordCanary, recordOverride, renderRegistryDiff, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary } from "../manifest-read-3cF8yP3_.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-BeYZ5L6d.js";
 import "../errors-xSeGw6pf.js";
 import { AcceptanceDeriveResultSchema, assemblePrompt, getTokenCeiling, runAcceptanceJudge } from "../acceptance-judge-lAv5EvYA.js";
 import "../routing-DZT5PN3N.js";
 import { WorkGraphRepository } from "../work-graph-repository-4cKsf8Lf.js";
 import "../decisions-BAaxpVD0.js";
 import "../decision-router-Dyby0fUf.js";
-import "../interactive-prompt-B5KE69I6.js";
+import "../interactive-prompt-BWdH9Lb9.js";
 import "../recovery-engine-dtLHyV4M.js";
 import "../version-manager-impl-DMTw551Q.js";
 import { registerUpgradeCommand } from "../upgrade-CNGc12AV.js";
@@ -7137,7 +7137,7 @@ async function runStatusAction(options) {
 			logger$16.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-CvsH53bv.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-C1m6-7WH.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8666,7 +8666,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-UilZoIOh.js"
+									"../run-NlTM7HwK.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -13661,17 +13661,49 @@ function registerAcceptanceCommand(program, version, registry) {
 		} catch {
 			contract = { status: "absent" };
 		}
+		let staleness;
+		if (result.status === "ok" && result.registry.provenance !== void 0) {
+			const derivedFrom = result.registry.provenance.derived_from;
+			let sourceContent;
+			if (isProjectContainedPath(derivedFrom)) if (opts.ref !== void 0) {
+				const read = await readTrustedFileContent(projectRoot, opts.ref, derivedFrom);
+				sourceContent = read.status === "ok" ? read.content : void 0;
+			} else try {
+				sourceContent = await readFile$1(join$1(projectRoot, derivedFrom), "utf-8");
+			} catch {
+				sourceContent = void 0;
+			}
+			staleness = checkRegistryStaleness(result.registry, sourceContent);
+		}
 		if (opts.outputFormat === "json") {
 			const output = buildJsonOutput("substrate acceptance validate", {
 				source,
 				...result,
 				contract: { status: contract.status },
-				provenance: { status: result.status === "ok" && result.registry.provenance !== void 0 ? "present" : "absent" }
+				provenance: {
+					status: result.status === "ok" && result.registry.provenance !== void 0 ? "present" : "absent",
+					...staleness !== void 0 ? { staleness: staleness.status } : {}
+				}
 			}, version);
 			process.stdout.write(JSON.stringify(output, null, 2) + "\n");
 			process.exit(result.status === "ok" ? ACCEPTANCE_EXIT_SUCCESS : ACCEPTANCE_EXIT_ERROR);
 		}
 		const exitCode = renderHuman(result, source);
+		if (staleness !== void 0) switch (staleness.status) {
+			case "fresh":
+				process.stdout.write(`staleness: FRESH — ${staleness.derivedFrom} unchanged since ratification\n`);
+				break;
+			case "stale":
+				process.stdout.write(`registry-stale (advisory): ${staleness.derivedFrom} changed since ratification (recorded sha256 ${staleness.recordedSha.slice(0, 12)}…, current ${staleness.currentSha.slice(0, 12)}…) — re-run \`substrate acceptance derive --prd ${staleness.derivedFrom} --force\` and review the diff\n`);
+				break;
+			case "source-missing":
+				process.stdout.write(`registry-source-missing (advisory): ${staleness.derivedFrom} (recorded in provenance) not found — the staleness baseline cannot be verified\n`);
+				break;
+			case "source-escapes-project":
+				process.stdout.write(`registry-source-escapes-project (advisory): provenance derived_from "${staleness.derivedFrom}" resolves outside the project — refusing to read it\n`);
+				break;
+			case "no-provenance": break;
+		}
 		if (contract.status === "ok") {
 			const surfaces = Object.keys(contract.contract.surfaces).join(", ");
 			process.stdout.write(`contract: OK — surfaces declared: ${surfaces}\n`);

package/dist/{health-CvsH53bv.js → health-C1m6-7WH.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-kr5GC1SN.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-CI8pIygU.js";
 import "./logger-KeHncl-f.js";
 import "./dist-BZGqn-XQ.js";
-import "./manifest-read-CcK_LIaI.js";
+import "./manifest-read-3cF8yP3_.js";
 import "./work-graph-repository-4cKsf8Lf.js";
 import "./decisions-BAaxpVD0.js";
 

package/dist/{health-kr5GC1SN.js → health-CI8pIygU.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
 import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-BZGqn-XQ.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-CcK_LIaI.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-3cF8yP3_.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-kr5GC1SN.js.map
+//# sourceMappingURL=health-CI8pIygU.js.map

package/dist/index.d.ts

@@ -260,6 +260,25 @@ interface AcceptanceVerdictEvent {
     excerpt: string;
   }[];
 }
+/**
+ * RP2.1 (registry-provenance): the registry's provenance `derived_from`
+ * source no longer hashes to the recorded ratification baseline (`stale`),
+ * cannot be found (`source-missing`), or records an escaping path
+ * (`source-escapes-project`). ADVISORY — the run continues; the signal means
+ * the PRD moved after ratification and the registry may no longer cover the
+ * vision. Resolution: `substrate acceptance derive` + review the diff +
+ * re-ratify.
+ */
+interface AcceptanceRegistryStaleEvent {
+  type: 'acceptance:registry-stale';
+  ts: string;
+  /** Audit boundary that detected it: `epic-<n>` or `final` */
+  scope: string;
+  status: 'stale' | 'source-missing' | 'source-escapes-project';
+  derived_from: string;
+  recorded_sha?: string;
+  current_sha?: string;
+}
 /** A6.1: canary self-test — did the gate catch a planted (reverted-wiring) regression? */
 interface AcceptanceCanaryEvent {
   type: 'acceptance:canary';
@@ -904,7 +923,7 @@ interface PipelineMergeConflictDetectedEvent {
  * }
  * ```
  */
-type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryCommittedEvent | StoryMergedEvent | StoryFinalizedEvent | AcceptanceCoverageEvent | AcceptanceStartedEvent | AcceptanceRenderedEvent | AcceptanceVerdictEvent | AcceptanceCanaryEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent | PipelineMergeConflictDetectedEvent; //#endregion
+type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryCommittedEvent | StoryMergedEvent | StoryFinalizedEvent | AcceptanceCoverageEvent | AcceptanceStartedEvent | AcceptanceRenderedEvent | AcceptanceVerdictEvent | AcceptanceCanaryEvent | AcceptanceRegistryStaleEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent | PipelineMergeConflictDetectedEvent; //#endregion
 //#region src/core/errors.d.ts
 
 /**
@@ -1607,6 +1626,18 @@ interface OrchestratorEvents {
     }[];
     summary: Record<string, number>;
   };
+  /**
+   * RP2.1 (registry-provenance): the registry's `derived_from` source no
+   * longer hashes to the recorded ratification baseline (or cannot be read).
+   * ADVISORY — mapped to the NDJSON `acceptance:registry-stale` event.
+   */
+  'orchestrator:acceptance-registry-stale': {
+    scope: string;
+    status: 'stale' | 'source-missing' | 'source-escapes-project';
+    derivedFrom: string;
+    recordedSha?: string;
+    currentSha?: string;
+  };
   /** A story has been escalated after exceeding max review cycles */
   'orchestrator:story-escalated': {
     storyKey: string;

package/dist/{interactive-prompt-B5KE69I6.js → interactive-prompt-BWdH9Lb9.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-CcK_LIaI.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-3cF8yP3_.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-B5KE69I6.js.map
+//# sourceMappingURL=interactive-prompt-BWdH9Lb9.js.map

package/dist/{manifest-read-CcK_LIaI.js → manifest-read-3cF8yP3_.js}

@@ -5552,7 +5552,12 @@ function ratifyCandidate(candidate, options) {
 }
 function endStatesEqual(a, b) {
 	if (a.length !== b.length) return false;
-	const key = (es) => `${es.id}${es.given}${es.walk}${es.then}`;
+	const key = (es) => JSON.stringify([
+		es.id,
+		es.given,
+		es.walk,
+		es.then
+	]);
 	const aKeys = new Set(a.map(key));
 	return b.every((es) => aKeys.has(key(es)));
 }
@@ -5590,6 +5595,52 @@ function diffJourneySets(current, candidate) {
 		unchanged
 	};
 }
+/**
+* A provenance `derived_from` must resolve INSIDE the project: relative, no
+* traversal, no absolute/drive/scheme forms. The staleness check re-reads
+* this recorded path — an escaping path would let a hostile provenance block
+* point the re-hash at content outside the repo (RP5 catalog item 5).
+*/
+function isProjectContainedPath(relPath) {
+	if (relPath === "" || relPath.startsWith("/") || relPath.startsWith("\\")) return false;
+	if (/^[a-zA-Z]:[\\/]/.test(relPath)) return false;
+	if (/^[a-z][a-z0-9+.-]*:/i.test(relPath)) return false;
+	const segments = relPath.split(/[\\/]/);
+	return !segments.includes("..");
+}
+/**
+* Compare the recorded `source_sha256` against the CURRENT content of
+* `derived_from`. Pure: the caller supplies the content (fs for operator
+* lint, trusted-tree `git show` for the orchestrator) — pass `undefined`
+* when the source could not be read.
+*
+* ADVISORY by construction: every status is information for the operator;
+* nothing here blocks. Registry rot must be LOUD, not fatal.
+*/
+function checkRegistryStaleness(registry, sourceContent) {
+	const prov = registry.provenance;
+	if (prov === void 0) return { status: "no-provenance" };
+	if (!isProjectContainedPath(prov.derived_from)) return {
+		status: "source-escapes-project",
+		derivedFrom: prov.derived_from
+	};
+	if (sourceContent === void 0) return {
+		status: "source-missing",
+		derivedFrom: prov.derived_from
+	};
+	const currentSha = createHash("sha256").update(sourceContent, "utf-8").digest("hex");
+	if (currentSha === prov.source_sha256) return {
+		status: "fresh",
+		sha: currentSha,
+		derivedFrom: prov.derived_from
+	};
+	return {
+		status: "stale",
+		recordedSha: prov.source_sha256,
+		currentSha,
+		derivedFrom: prov.derived_from
+	};
+}
 /** Render a diff for humans (derive/ratify CLI output). */
 function renderRegistryDiff(diff) {
 	const lines = [];
@@ -5725,6 +5776,31 @@ async function loadAcceptanceContractFromTrustedTree(repoRoot, ref = "HEAD") {
 	return parseAcceptanceContract(result.stdout);
 }
 /**
+* Read an arbitrary project-relative file from the trusted tree at `ref`
+* (RP2.1: the staleness check re-hashes `provenance.derived_from` against
+* the same snapshot the registry was loaded from). Callers must containment-
+* check the path first (`isProjectContainedPath`) — git itself rejects
+* escaping specs, but the check belongs before the spawn.
+*/
+async function readTrustedFileContent(repoRoot, ref, relPath) {
+	const result = await runGitShow(repoRoot, ref, relPath);
+	if (result.spawnError !== void 0) return {
+		status: "error",
+		message: `git show could not be spawned: ${result.spawnError}`
+	};
+	if (result.code !== 0) {
+		if (GIT_SHOW_ABSENT_PATTERNS.some((p) => p.test(result.stderr))) return { status: "absent" };
+		return {
+			status: "error",
+			message: `git show ${ref}:${relPath} failed (exit ${String(result.code)}): ${result.stderr.trim()}`
+		};
+	}
+	return {
+		status: "ok",
+		content: result.stdout
+	};
+}
+/**
 * Filesystem read for OPERATOR LINT ONLY (`substrate acceptance validate`).
 * Gate/judge code paths must use `loadJourneyRegistryFromTrustedTree`.
 */
@@ -7675,5 +7751,5 @@ async function resolveRunManifest(dbRoot, runId) {
 }
 
 //#endregion
-export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, clearGateDemotion, computeJourneyCoverage, computePrecision, computeRecall, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, demoteGate, detectsEventDrivenAC, detectsStateIntegratingAC, diffJourneySets, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, parseStoryFrontmatter, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, recordCanary, recordCriticalFail, recordOverride, renderFindings, renderRegistryDiff, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary, runStaleVerificationRecovery, summarizeCoverage };
-//# sourceMappingURL=manifest-read-CcK_LIaI.js.map
+export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_CANDIDATE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, checkRegistryStaleness, clearGateDemotion, computeJourneyCoverage, computePrecision, computeRecall, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, demoteGate, detectsEventDrivenAC, detectsStateIntegratingAC, diffJourneySets, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, isProjectContainedPath, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyCandidate, parseJourneyDeferrals, parseJourneyRegistry, parseRuntimeProbes, parseStoryFrontmatter, ratifyCandidate, readAcceptanceMetrics, readCurrentRunId, readGateState, readTrustedFileContent, recordCanary, recordCriticalFail, recordOverride, renderFindings, renderRegistryDiff, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runCanary, runStaleVerificationRecovery, summarizeCoverage };
+//# sourceMappingURL=manifest-read-3cF8yP3_.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
 import "../../dist-BZGqn-XQ.js";
-import "../../manifest-read-CcK_LIaI.js";
-import { runInteractivePrompt } from "../../interactive-prompt-B5KE69I6.js";
+import "../../manifest-read-3cF8yP3_.js";
+import { runInteractivePrompt } from "../../interactive-prompt-BWdH9Lb9.js";
 
 export { runInteractivePrompt };

package/dist/{run-DR_D61vF.js → run-BeYZ5L6d.js}

@@ -1,12 +1,12 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-kr5GC1SN.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-CI8pIygU.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
 import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-BZGqn-XQ.js";
-import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, recordCriticalFail, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-CcK_LIaI.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, checkRegistryStaleness, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, effectiveAcceptanceMode, extractTargetFilesFromStoryContent, isProjectContainedPath, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, readTrustedFileContent, recordCriticalFail, renderFindings, renderSurface, renderVerdictHtml, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-3cF8yP3_.js";
 import { CodeReviewResultSchema, CreateStoryResultSchema, DevStoryResultSchema, ProbeAuthorResultSchema, TestExpansionResultSchema, TestPlanResultSchema, assemblePrompt, countTokens, getTokenCeiling, runAcceptanceJudge, truncateToTokens } from "./acceptance-judge-lAv5EvYA.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-4cKsf8Lf.js";
 import { deriveExitCode, routeDecision } from "./decision-router-Dyby0fUf.js";
-import { runInteractivePrompt } from "./interactive-prompt-B5KE69I6.js";
+import { runInteractivePrompt } from "./interactive-prompt-BWdH9Lb9.js";
 import { runRecoveryEngine } from "./recovery-engine-dtLHyV4M.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -1091,6 +1091,45 @@ const PIPELINE_EVENT_METADATA = [
 			}
 		]
 	},
+	{
+		type: "acceptance:registry-stale",
+		description: "Registry staleness advisory (RP2.1): the registry's provenance source no longer hashes to its ratification baseline (stale), is unreadable (source-missing), or escapes the project (source-escapes-project). Run continues; re-derive + re-ratify to resolve.",
+		when: "At coverage-audit boundaries when a provenance-bearing registry's source diverged.",
+		fields: [
+			{
+				name: "ts",
+				type: "string",
+				description: "Timestamp."
+			},
+			{
+				name: "scope",
+				type: "string",
+				description: "epic-<n> or final."
+			},
+			{
+				name: "status",
+				type: "string",
+				description: "stale | source-missing | source-escapes-project."
+			},
+			{
+				name: "derived_from",
+				type: "string",
+				description: "Recorded source path."
+			},
+			{
+				name: "recorded_sha",
+				type: "string",
+				description: "Baseline sha256 (stale only).",
+				optional: true
+			},
+			{
+				name: "current_sha",
+				type: "string",
+				description: "Current sha256 (stale only).",
+				optional: true
+			}
+		]
+	},
 	{
 		type: "story:escalation",
 		description: "Story escalated — either max review cycles exceeded or a precondition for SHIP_IT was not met.",
@@ -13836,6 +13875,33 @@ function createImplementationOrchestrator(deps) {
 			logger$26.warn({ detail: registryLoad.message }, "A0.3: journey registry read failed — coverage audit skipped (environmental)");
 			return void 0;
 		}
+		{
+			const prov = registryLoad.registry.provenance;
+			if (prov !== void 0) {
+				let sourceContent;
+				if (isProjectContainedPath(prov.derived_from)) {
+					const read = await readTrustedFileContent(projectRoot, _runStartSha ?? "HEAD", prov.derived_from);
+					sourceContent = read.status === "ok" ? read.content : void 0;
+				}
+				const staleness = checkRegistryStaleness(registryLoad.registry, sourceContent);
+				if (staleness.status === "stale" || staleness.status === "source-missing" || staleness.status === "source-escapes-project") {
+					const scopeLabelStale = "final" in scope ? "final" : `epic-${String(scope.epic)}`;
+					logger$26.warn({
+						staleness,
+						scope: scopeLabelStale
+					}, `RP2.1: registry-stale advisory (${staleness.status}) — the registry's source document diverged from its ratification baseline; re-run \`substrate acceptance derive\` and review the diff`);
+					eventBus.emit("orchestrator:acceptance-registry-stale", {
+						scope: scopeLabelStale,
+						status: staleness.status,
+						derivedFrom: staleness.derivedFrom,
+						...staleness.status === "stale" ? {
+							recordedSha: staleness.recordedSha,
+							currentSha: staleness.currentSha
+						} : {}
+					});
+				}
+			}
+		}
 		let unrunnable;
 		const contractLoad = await loadAcceptanceContractFromTrustedTree(projectRoot, _runStartSha ?? "HEAD");
 		if (contractLoad.status === "absent") unrunnable = `journey registry exists but the committed project profile has no acceptance: contract block (${ACCEPTANCE_CONTRACT_PROFILE_PATH}) — claimed journeys can never be walked. Declare render commands per surface.`;
@@ -46499,6 +46565,17 @@ function wireNdjsonEmitter(eventBus, ndjsonEmitter) {
 			summary: payload.summary
 		});
 	});
+	eventBus.on("orchestrator:acceptance-registry-stale", (payload) => {
+		ndjsonEmitter.emit({
+			type: "acceptance:registry-stale",
+			ts: new Date().toISOString(),
+			scope: payload.scope,
+			status: payload.status,
+			derived_from: payload.derivedFrom,
+			...payload.recordedSha !== void 0 ? { recorded_sha: payload.recordedSha } : {},
+			...payload.currentSha !== void 0 ? { current_sha: payload.currentSha } : {}
+		});
+	});
 	eventBus.on("orchestrator:story-escalated", (payload) => {
 		const rawIssues = Array.isArray(payload.issues) ? payload.issues : [];
 		const issues = rawIssues.map((issue) => {
@@ -48358,4 +48435,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-DR_D61vF.js.map
+//# sourceMappingURL=run-BeYZ5L6d.js.map

package/dist/{run-UilZoIOh.js → run-NlTM7HwK.js}

@@ -1,15 +1,15 @@
-import "./health-kr5GC1SN.js";
+import "./health-CI8pIygU.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
 import "./dist-BZGqn-XQ.js";
-import "./manifest-read-CcK_LIaI.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-DR_D61vF.js";
+import "./manifest-read-3cF8yP3_.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-BeYZ5L6d.js";
 import "./acceptance-judge-lAv5EvYA.js";
 import "./routing-DZT5PN3N.js";
 import "./work-graph-repository-4cKsf8Lf.js";
 import "./decisions-BAaxpVD0.js";
 import "./decision-router-Dyby0fUf.js";
-import "./interactive-prompt-B5KE69I6.js";
+import "./interactive-prompt-BWdH9Lb9.js";
 import "./recovery-engine-dtLHyV4M.js";
 
 export { runRunAction };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.21.15",
+  "version": "0.21.16",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",