substrate-ai 0.21.2 → 0.21.4

package/dist/adapter-registry-BSig1zpx.js

@@ -0,0 +1,4 @@
+import { AdapterRegistry } from "./dist-CpnLJuVw.js";
+import "./adapter-registry-DXLMTmfD.js";
+
+export { AdapterRegistry };

package/dist/cli/index.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-DvgJ7jj_.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-BUl3y64N.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
-import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-BkhYgJWo.js";
+import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-CpnLJuVw.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-DyyFPrJH.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-CAmBrDky.js";
-import "../errors-C7pY6_yQ.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-DZDlSq_s.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-nSb1TD3o.js";
+import "../errors-8tVEwG6v.js";
 import "../routing-DFxoKHDt.js";
 import { WorkGraphRepository } from "../work-graph-repository-DZyJv5pV.js";
 import "../decisions-CzSIEeGP.js";
 import "../decision-router-BAPpON_C.js";
-import "../interactive-prompt-CPF2GTvV.js";
+import "../interactive-prompt-C4Is1QDB.js";
 import "../recovery-engine-BKGBeBnW.js";
 import "../version-manager-impl-qFBiO4Eh.js";
-import { registerUpgradeCommand } from "../upgrade-S1oUMH5P.js";
+import { registerUpgradeCommand } from "../upgrade-BUSzXgnd.js";
 import { Command } from "commander";
 import { fileURLToPath } from "url";
 import { dirname, join, resolve } from "path";
@@ -25,11 +25,11 @@ import * as actualFS from "node:fs";
 import { existsSync, promises, readFileSync, writeFileSync } from "node:fs";
 import { execFile, spawnSync } from "node:child_process";
 import * as path$1 from "node:path";
-import { basename as basename$1, join as join$1, posix, relative, resolve as resolve$1, win32 } from "node:path";
+import { basename as basename$1, dirname as dirname$1, join as join$1, posix, relative, resolve as resolve$1, win32 } from "node:path";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import * as fs from "node:fs/promises";
-import { lstat, readFile as readFile$1, readdir as readdir$1, readlink, realpath } from "node:fs/promises";
+import { lstat, mkdir as mkdir$1, readFile as readFile$1, readdir as readdir$1, readlink, realpath, writeFile as writeFile$1 } from "node:fs/promises";
 import { chmodSync, cpSync, existsSync as existsSync$1, lstatSync, mkdirSync as mkdirSync$1, readFileSync as readFileSync$1, readdir as readdir$2, readdirSync as readdirSync$1, readlinkSync, realpathSync as realpathSync$1, rmSync as rmSync$1, statSync as statSync$1, unlinkSync as unlinkSync$1, writeFileSync as writeFileSync$1 } from "fs";
 import { homedir } from "os";
 import { createRequire } from "node:module";
@@ -7130,7 +7130,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-DDsjslMy.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-DklP4Se9.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8078,7 +8078,7 @@ function defaultSupervisorDeps() {
 				if (cached === null) {
 					const { AdapterRegistry: AR } = await import(
 						/* @vite-ignore */
-						"../adapter-registry-CZn__637.js"
+						"../adapter-registry-BSig1zpx.js"
 );
 					cached = new AR();
 					await cached.discoverAndRegister();
@@ -8645,11 +8645,11 @@ async function runSupervisorAction(options, deps = {}) {
 						try {
 							const { createExperimenter } = await import(
 								/* @vite-ignore */
-								"../experimenter-BYqALeaE.js"
+								"../experimenter-C7swe92R.js"
 );
 							const { getLatestRun: getLatest } = await import(
 								/* @vite-ignore */
-								"../decisions-BPwrDCTx.js"
+								"../decisions-lxU14pNh.js"
 );
 							const expAdapter = createDatabaseAdapter({
 								backend: "auto",
@@ -8659,7 +8659,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-CF0qLJAV.js"
+									"../run-CMXmzqoy.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -9184,7 +9184,7 @@ async function runMetricsAction(options) {
 			const routingConfigPath = join(dbDir, "routing.yml");
 			let routingConfig = null;
 			if (existsSync$1(routingConfigPath)) try {
-				const { loadModelRoutingConfig } = await import("../routing-BS-Q8_2L.js");
+				const { loadModelRoutingConfig } = await import("../routing-CGO2UZyA.js");
 				routingConfig = loadModelRoutingConfig(routingConfigPath);
 			} catch {}
 			if (routingConfig === null) routingConfig = {
@@ -13474,15 +13474,76 @@ function registerAcceptanceCommand(program, version) {
 		const projectRoot = process.cwd();
 		const source = opts.ref !== void 0 ? `committed @ ${opts.ref}` : "working tree";
 		const result = opts.ref !== void 0 ? await loadJourneyRegistryFromTrustedTree(projectRoot, opts.ref) : await loadJourneyRegistryFromFile(projectRoot);
+		let contract;
+		if (opts.ref !== void 0) contract = await loadAcceptanceContractFromTrustedTree(projectRoot, opts.ref);
+		else try {
+			const profileContent = await readFile$1(join$1(projectRoot, ACCEPTANCE_CONTRACT_PROFILE_PATH), "utf-8");
+			contract = parseAcceptanceContract(profileContent);
+		} catch {
+			contract = { status: "absent" };
+		}
 		if (opts.outputFormat === "json") {
 			const output = buildJsonOutput("substrate acceptance validate", {
 				source,
-				...result
+				...result,
+				contract: { status: contract.status }
 			}, version);
 			process.stdout.write(JSON.stringify(output, null, 2) + "\n");
 			process.exit(result.status === "ok" ? ACCEPTANCE_EXIT_SUCCESS : ACCEPTANCE_EXIT_ERROR);
 		}
-		process.exit(renderHuman(result, source));
+		const exitCode = renderHuman(result, source);
+		if (contract.status === "ok") {
+			const surfaces = Object.keys(contract.contract.surfaces).join(", ");
+			process.stdout.write(`contract: OK — surfaces declared: ${surfaces}\n`);
+		} else if (contract.status === "invalid") {
+			process.stdout.write(`contract: INVALID (${ACCEPTANCE_CONTRACT_PROFILE_PATH} acceptance: block):\n`);
+			for (const issue of contract.issues) process.stdout.write(`  ${issue.path}: ${issue.message}\n`);
+		} else if (contract.status === "absent") process.stdout.write(`contract: ABSENT — no acceptance: block in ${ACCEPTANCE_CONTRACT_PROFILE_PATH}. Claimed journeys can never be walked (acceptance-unrunnable in blocking mode).
+`);
+		process.exit(exitCode);
+	});
+	acceptanceCmd.command("defer <journeyId>").description("Record an operator deferral for a journey — the coverage audit reports it `deferred` instead of unclaimed/unwalked. Writes to the working tree; COMMIT the file for the audit (trusted tree) to honor it.").requiredOption("--reason <text>", "why this journey is deferred (the operator ack is the point)").action(async (journeyId, opts) => {
+		const projectRoot = process.cwd();
+		const registry = await loadJourneyRegistryFromFile(projectRoot);
+		if (registry.status !== "ok") {
+			process.stdout.write(`cannot defer: journey registry is ${registry.status} at ${JOURNEY_REGISTRY_PATH} — fix it first (substrate acceptance validate)\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+		}
+		if (!registry.registry.journeys.some((j) => j.id === journeyId)) {
+			process.stdout.write(`cannot defer: journey "${journeyId}" is not in the registry. Known ids: ${registry.registry.journeys.map((j) => j.id).join(", ")}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+		}
+		const deferralsPath = join$1(projectRoot, JOURNEY_DEFERRALS_PATH);
+		let existingContent = "";
+		try {
+			existingContent = await readFile$1(deferralsPath, "utf-8");
+		} catch {}
+		const existing = parseJourneyDeferrals(existingContent);
+		if (!existing.ok) {
+			process.stdout.write(`cannot defer: ${JOURNEY_DEFERRALS_PATH} is invalid:\n`);
+			for (const issue of existing.issues) process.stdout.write(`  ${issue.path}: ${issue.message}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+		}
+		if (existing.deferrals.some((d) => d.journey === journeyId)) {
+			process.stdout.write(`journey ${journeyId} is already deferred — no change\n`);
+			process.exit(ACCEPTANCE_EXIT_SUCCESS);
+		}
+		const deferrals = [...existing.deferrals, {
+			journey: journeyId,
+			reason: opts.reason,
+			deferred_at: new Date().toISOString()
+		}];
+		const rendered = "deferrals:\n" + deferrals.map((d) => `  - journey: ${d.journey}\n    reason: ${JSON.stringify(d.reason)}\n` + (d.deferred_at !== void 0 ? `    deferred_at: ${JSON.stringify(d.deferred_at)}\n` : "")).join("");
+		try {
+			await mkdir$1(dirname$1(deferralsPath), { recursive: true });
+			await writeFile$1(deferralsPath, rendered, "utf-8");
+		} catch (err) {
+			process.stdout.write(`failed to write ${JOURNEY_DEFERRALS_PATH}: ${String(err)}\n`);
+			process.exit(ACCEPTANCE_EXIT_ERROR);
+		}
+		process.stdout.write(`deferred ${journeyId} ("${opts.reason}") → ${JOURNEY_DEFERRALS_PATH}\nCOMMIT this file — the coverage audit reads the trusted (committed) tree.
+`);
+		process.exit(ACCEPTANCE_EXIT_SUCCESS);
 	});
 }
 
@@ -13560,8 +13621,8 @@ async function createProgram() {
 /** Fire-and-forget startup version check (story 8.3, AC3/AC5) */
 function checkForUpdatesInBackground(currentVersion) {
 	if (process.env.SUBSTRATE_NO_UPDATE_CHECK === "1") return;
-	import("../upgrade-BOWLlLbD.js").then(async () => {
-		const { createVersionManager } = await import("../version-manager-impl-BVcsgUtN.js");
+	import("../upgrade-M0UkDCeg.js").then(async () => {
+		const { createVersionManager } = await import("../version-manager-impl-DeEPhQlA.js");
 		const vm = createVersionManager();
 		const result = await vm.checkForUpdates();
 		if (result.updateAvailable) {

package/dist/cli/templates/claude-md-substrate-section.md

@@ -93,6 +93,12 @@ Each dispatched story runs in an isolated git worktree on its own branch (`subst
 
 Lifecycle events on the NDJSON stream: `story:committed` → (`story:merged`) → `story:finalized {mode, branch, sha, pr_url?}`. `substrate report` lists unmerged deliverable branches under "Finalization". Optional `finalization.epic_gate_command` runs before the LAST story of an epic integrates (non-zero exit → `epic-gate-failed`, branch preserved).
 
+### Acceptance Gate — journey coverage (optional)
+
+If the project declares a journey registry at `.substrate/acceptance/journeys.yaml` (PRD user journeys with concrete end-states — COMMIT the file; substrate reads the committed copy, never an agent-writable worktree copy), the pipeline audits journey coverage at each epic close and at run end: every registered journey lands in exactly one state — `walked-pass`, `walked-fail`, `deferred`, `unclaimed` (NO story claims it — the never-wired-journey class), or `unwalked`. Results stream as `acceptance:coverage` events and land on the run manifest.
+
+`acceptance.mode` in `.substrate/config.yaml`: `advisory` (default — warns, never blocks), `blocking` (an unclaimed/unwalked journey escalates `journey-unclaimed`/`journey-unwalked` on the LAST story of the epic before it integrates), or `off`. Create-story tags stories with the journeys they deliver (`journeys:` frontmatter). To explicitly skip a journey: `substrate acceptance defer <id> --reason "<why>"` and commit the deferral file. Lint the registry with `substrate acceptance validate`.
+
 ### Key Commands Reference
 
 | Command | Purpose |

package/dist/{decisions-BPwrDCTx.js → decisions-lxU14pNh.js}

@@ -1,4 +1,4 @@
-import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-BkhYgJWo.js";
+import { addTokenUsage, createDecision, createPipelineRun, createRequirement, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunningPipelineRuns, getTokenUsageSummary, listRequirements, registerArtifact, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision } from "./dist-CpnLJuVw.js";
 import "./decisions-CzSIEeGP.js";
 
 export { getLatestRun };

package/dist/{dist-BkhYgJWo.js → dist-CpnLJuVw.js}

@@ -6341,7 +6341,12 @@ const SubstrateConfigSchema = z.object({
 		]).optional(),
 		merge_strategy: z.enum(["ff-only", "three-way"]).optional(),
 		epic_gate_command: z.string().optional()
-	}).strict().optional()
+	}).strict().optional(),
+	acceptance: z.object({ mode: z.enum([
+		"off",
+		"advisory",
+		"blocking"
+	]).optional() }).strict().optional()
 }).passthrough();
 const PartialProviderConfigSchema = ProviderConfigSchema.partial();
 const PartialGlobalSettingsSchema = GlobalSettingsSchema.partial();
@@ -6368,7 +6373,12 @@ const PartialSubstrateConfigSchema = z.object({
 		]).optional(),
 		merge_strategy: z.enum(["ff-only", "three-way"]).optional(),
 		epic_gate_command: z.string().optional()
-	}).strict().optional()
+	}).strict().optional(),
+	acceptance: z.object({ mode: z.enum([
+		"off",
+		"advisory",
+		"blocking"
+	]).optional() }).strict().optional()
 }).passthrough();
 
 //#endregion
@@ -12628,4 +12638,4 @@ async function callLLM(params) {
 
 //#endregion
 export { ADVISORY_NOTES, AdapterRegistry, AdtError, BRANCH_PREFIX, BudgetConfigSchema, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, Categorizer, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, ConsumerAnalyzer, CostTrackerConfigSchema, DEFAULT_CONFIG, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, DoltNotInstalled, DoltQueryError, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, GeminiCLIAdapter, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, LEARNING_FINDING, LogTurnAnalyzer, ModelRoutingConfigSchema, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProviderPolicySchema, ProvidersSchema, Recommender, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TASK_TYPE_PHASE_MAP, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryConfigSchema, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, VersionManagerImpl, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, callLLM, checkDoltInstalled, classifyVersionGap, compareRunMetrics, createAmendmentRun, createConfigSystem, createDatabaseAdapter as createDatabaseAdapter$1, createDecision, createExperimenter, createGitWorktreeManager, createPipelineRun, createRequirement, createStderrLogger, createVersionManager, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, determineVerdict, getActiveDecisions, getAllCostEntriesFiltered, getArtifactByTypeForRun, getArtifactsByRun, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getModelTier, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRequirements, listRunMetrics, loadModelRoutingConfig, loadParentRunDecisions, registerArtifact, resolvePromptFile, supersedeDecision, swallowDebug, tagRunAsBaseline, updateDecision, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics };
-//# sourceMappingURL=dist-BkhYgJWo.js.map
+//# sourceMappingURL=dist-CpnLJuVw.js.map

package/dist/{errors-C7pY6_yQ.js → errors-8tVEwG6v.js}

@@ -1,4 +1,4 @@
-import { AdtError } from "./dist-BkhYgJWo.js";
+import { AdtError } from "./dist-CpnLJuVw.js";
 
 //#region src/core/errors.ts
 /** Error thrown when task configuration is invalid */
@@ -71,4 +71,4 @@ var TaskGraphIncompatibleFormatError = class extends AdtError {
 
 //#endregion
 export { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError };
-//# sourceMappingURL=errors-C7pY6_yQ.js.map
+//# sourceMappingURL=errors-8tVEwG6v.js.map

package/dist/{experimenter-BYqALeaE.js → experimenter-C7swe92R.js}

@@ -1,3 +1,3 @@
-import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-BkhYgJWo.js";
+import { buildAuditLogEntry, buildBranchName, buildModificationDirective, buildPRBody, buildWorktreePath, createExperimenter, determineVerdict, resolvePromptFile } from "./dist-CpnLJuVw.js";
 
 export { createExperimenter };

package/dist/{health-DvgJ7jj_.js → health-BUl3y64N.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-BkhYgJWo.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-DyyFPrJH.js";
+import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-CpnLJuVw.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-DZDlSq_s.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-DvgJ7jj_.js.map
+//# sourceMappingURL=health-BUl3y64N.js.map

package/dist/{health-DDsjslMy.js → health-DklP4Se9.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-DvgJ7jj_.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-BUl3y64N.js";
 import "./logger-KeHncl-f.js";
-import "./dist-BkhYgJWo.js";
-import "./manifest-read-DyyFPrJH.js";
+import "./dist-CpnLJuVw.js";
+import "./manifest-read-DZDlSq_s.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 

package/dist/{index-CnV5PcSR.d.ts → index-C31XtSMn.d.ts}

@@ -314,6 +314,13 @@ declare const SubstrateConfigSchema: z.ZodObject<{
     }>>;
     epic_gate_command: z.ZodOptional<z.ZodString>;
   }, z.core.$strict>>;
+  acceptance: z.ZodOptional<z.ZodObject<{
+    mode: z.ZodOptional<z.ZodEnum<{
+      off: "off";
+      advisory: "advisory";
+      blocking: "blocking";
+    }>>;
+  }, z.core.$strict>>;
 }, z.core.$loose>;
 type SubstrateConfig = z.infer<typeof SubstrateConfigSchema>; //#endregion
 //#region packages/core/dist/events/core-events.d.ts
@@ -1622,4 +1629,4 @@ interface Recommendation {
 
 //#endregion
 export { AdapterDiscoveryResult, AdapterRegistry as AdapterRegistry$1, AdtError as AdtError$1, ClaudeCodeAdapter as ClaudeCodeAdapter$1, CodexCLIAdapter as CodexCLIAdapter$1, ConfigError as ConfigError$1, ConfigIncompatibleFormatError as ConfigIncompatibleFormatError$1, CoreEvents, DatabaseAdapter, DiscoveryReport, GeminiCLIAdapter as GeminiCLIAdapter$1, Recommendation, TypedEventBus };
-//# sourceMappingURL=index-CnV5PcSR.d.ts.map
+//# sourceMappingURL=index-C31XtSMn.d.ts.map

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { AdapterDiscoveryResult, AdapterRegistry$1 as AdapterRegistry, AdtError$1 as AdtError, ClaudeCodeAdapter$1 as ClaudeCodeAdapter, CodexCLIAdapter$1 as CodexCLIAdapter, ConfigError$1 as ConfigError, ConfigIncompatibleFormatError$1 as ConfigIncompatibleFormatError, DiscoveryReport, GeminiCLIAdapter$1 as GeminiCLIAdapter, Recommendation, TypedEventBus } from "./index-CnV5PcSR.js";
+import { AdapterDiscoveryResult, AdapterRegistry$1 as AdapterRegistry, AdtError$1 as AdtError, ClaudeCodeAdapter$1 as ClaudeCodeAdapter, CodexCLIAdapter$1 as CodexCLIAdapter, ConfigError$1 as ConfigError, ConfigIncompatibleFormatError$1 as ConfigIncompatibleFormatError, DiscoveryReport, GeminiCLIAdapter$1 as GeminiCLIAdapter, Recommendation, TypedEventBus } from "./index-C31XtSMn.js";
 import pino from "pino";
 import { z } from "zod";
 import { Readable, Writable } from "node:stream";
@@ -203,6 +203,32 @@ interface StoryFinalizedEvent {
   /** PR URL (pr mode, only when gh pr create succeeded) */
   pr_url?: string;
 }
+/**
+ * A0.3 (acceptance-gate): journey coverage audit result, emitted at each
+ * epic close and at run end (`scope: "final"`). Every registered journey in
+ * scope lands in exactly one state; `unclaimed` is the never-wired-journey
+ * class (UJ-2) caught structurally. In `blocking` mode an unclaimed/unwalked
+ * journey escalates the LAST story of the epic before it integrates; in
+ * `advisory` mode (the default) this event and a warning are the signal.
+ */
+interface AcceptanceCoverageEvent {
+  type: 'acceptance:coverage';
+  /** ISO-8601 timestamp generated at emit time */
+  ts: string;
+  /** Audited boundary: `epic-<n>` or `final` */
+  scope: string;
+  /** Audit posture the run is under */
+  mode: 'advisory' | 'blocking';
+  /** Per-journey coverage states */
+  entries: {
+    journeyId: string;
+    criticality: 'critical' | 'standard';
+    state: 'walked-pass' | 'walked-fail' | 'deferred' | 'unclaimed' | 'unwalked';
+    ownerStories: string[];
+  }[];
+  /** State counts across `entries` */
+  summary: Record<string, number>;
+}
 /**
  * Emitted when the orchestrator auto-approves a story after exhausting
  * review cycles with only minor issues remaining. Provides transparency
@@ -836,7 +862,7 @@ interface PipelineMergeConflictDetectedEvent {
  * }
  * ```
  */
-type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryCommittedEvent | StoryMergedEvent | StoryFinalizedEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent | PipelineMergeConflictDetectedEvent; //#endregion
+type PipelineEvent = PipelineStartEvent | PipelineCompleteEvent | PipelinePreFlightFailureEvent | PipelineProfileStaleEvent | PipelineContractMismatchEvent | PipelineContractVerificationSummaryEvent | StoryPhaseEvent | StoryDoneEvent | StoryCommittedEvent | StoryMergedEvent | StoryFinalizedEvent | AcceptanceCoverageEvent | StoryEscalationEvent | StoryWarnEvent | StoryLogEvent | PipelineHeartbeatEvent | StoryStallEvent | StoryZeroDiffEscalationEvent | StoryBuildVerificationFailedEvent | StoryBuildVerificationPassedEvent | StoryInterfaceChangeWarningEvent | StoryMetricsEvent | SupervisorPollEvent | SupervisorKillEvent | SupervisorRestartEvent | SupervisorAbortEvent | SupervisorSummaryEvent | SupervisorAnalysisCompleteEvent | SupervisorAnalysisErrorEvent | SupervisorExperimentStartEvent | SupervisorExperimentSkipEvent | SupervisorExperimentRecommendationsEvent | SupervisorExperimentCompleteEvent | SupervisorExperimentErrorEvent | RoutingModelSelectedEvent | PipelinePhaseStartEvent | PipelinePhaseCompleteEvent | StoryAutoApprovedEvent | VerificationCheckCompleteEvent | VerificationStoryCompleteEvent | CostWarningEvent | CostCeilingReachedEvent | DecisionHaltSkippedNonInteractiveEvent | PipelineMergeConflictDetectedEvent; //#endregion
 //#region src/core/errors.d.ts
 
 /**
@@ -1497,6 +1523,23 @@ interface OrchestratorEvents {
     sha: string;
     prUrl?: string;
   };
+  /**
+   * A0.3 (acceptance-gate): journey coverage audit result — emitted at epic
+   * close and at run end. Mapped to the NDJSON `acceptance:coverage` event.
+   */
+  'orchestrator:acceptance-coverage': {
+    scope: string;
+    mode: 'advisory' | 'blocking';
+    entries: {
+      journeyId: string;
+      title: string;
+      criticality: 'critical' | 'standard';
+      epic?: number;
+      state: 'walked-pass' | 'walked-fail' | 'deferred' | 'unclaimed' | 'unwalked';
+      ownerStories: string[];
+    }[];
+    summary: Record<string, number>;
+  };
   /** A story has been escalated after exceeding max review cycles */
   'orchestrator:story-escalated': {
     storyKey: string;

package/dist/index.js

@@ -1,8 +1,8 @@
 import { childLogger, createLogger, logger } from "./logger-KeHncl-f.js";
 import { assertDefined, createEventBus, createTuiApp, deepClone, formatDuration, generateId, isPlainObject, isTuiCapable, printNonTtyWarning, sleep, withRetry } from "./helpers-CElYrONe.js";
-import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-BkhYgJWo.js";
+import { AdapterRegistry, AdtError, ClaudeCodeAdapter, CodexCLIAdapter, ConfigError, ConfigIncompatibleFormatError, GeminiCLIAdapter } from "./dist-CpnLJuVw.js";
 import "./adapter-registry-DXLMTmfD.js";
-import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-C7pY6_yQ.js";
+import { BudgetExceededError, GitError, RecoveryError, TaskConfigError, TaskGraphCycleError, TaskGraphError, TaskGraphIncompatibleFormatError, WorkerError, WorkerNotFoundError } from "./errors-8tVEwG6v.js";
 
 //#region src/core/di.ts
 /**

package/dist/{interactive-prompt-CPF2GTvV.js → interactive-prompt-C4Is1QDB.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-DyyFPrJH.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-DZDlSq_s.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-CPF2GTvV.js.map
+//# sourceMappingURL=interactive-prompt-C4Is1QDB.js.map

package/dist/{manifest-read-DyyFPrJH.js → manifest-read-DZDlSq_s.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-BkhYgJWo.js";
+import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-CpnLJuVw.js";
 import * as path$1 from "path";
 import { join } from "path";
 import { readFile } from "fs/promises";
@@ -8,9 +8,10 @@ import { YAMLException, load } from "js-yaml";
 import { existsSync, promises, readFileSync, readdirSync, statSync } from "node:fs";
 import { execSync, spawn } from "node:child_process";
 import * as path$2 from "node:path";
-import { basename as basename$1, delimiter, dirname as dirname$1, join as join$1, resolve as resolve$1 } from "node:path";
+import { basename as basename$1, delimiter, dirname as dirname$1, join as join$1, relative, resolve as resolve$1 } from "node:path";
+import { createHash } from "node:crypto";
 import { z } from "zod";
-import { mkdir as mkdir$1, open, readFile as readFile$1, unlink as unlink$1, writeFile as writeFile$1 } from "node:fs/promises";
+import { mkdir as mkdir$1, open, readFile as readFile$1, readdir as readdir$1, unlink as unlink$1, writeFile as writeFile$1 } from "node:fs/promises";
 import * as fs from "fs";
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
@@ -5080,6 +5081,162 @@ function parseJourneyRegistry(yamlContent) {
 	};
 }
 
+//#endregion
+//#region packages/sdlc/dist/acceptance/coverage.js
+/**
+* Compute the coverage state of every journey audited at this scope.
+*
+* - `{epic: n}` audits journeys declaring `epic: n`.
+* - `{final: true}` audits the FULL registry (epicless journeys have no
+*   earlier audit point; epic-scoped ones are re-audited — idempotent).
+*
+* State precedence: deferred > walked-fail > walked-pass > unwalked/unclaimed.
+* An operator deferral wins over everything (explicit scope decision); a fail
+* verdict wins over a pass (any failing end-state fails the journey).
+*/
+function computeJourneyCoverage(input) {
+	const { registry, claims, verdicts, deferredJourneyIds, scope } = input;
+	const audited = registry.journeys.filter((j) => "final" in scope ? true : j.epic === scope.epic);
+	const claimsByJourney = new Map();
+	for (const claim of claims) {
+		const owners = claimsByJourney.get(claim.journeyId) ?? [];
+		if (!owners.includes(claim.storyKey)) owners.push(claim.storyKey);
+		claimsByJourney.set(claim.journeyId, owners);
+	}
+	const deferred = new Set(deferredJourneyIds);
+	const verdictByJourney = new Map();
+	for (const v of verdicts) {
+		const existing = verdictByJourney.get(v.journeyId);
+		verdictByJourney.set(v.journeyId, existing === "fail" ? "fail" : v.verdict);
+	}
+	return audited.map((journey) => {
+		const ownerStories = claimsByJourney.get(journey.id) ?? [];
+		let state;
+		if (deferred.has(journey.id)) state = "deferred";
+		else {
+			const verdict = verdictByJourney.get(journey.id);
+			if (verdict === "fail") state = "walked-fail";
+			else if (verdict === "pass") state = "walked-pass";
+			else state = ownerStories.length > 0 ? "unwalked" : "unclaimed";
+		}
+		return {
+			journeyId: journey.id,
+			title: journey.title,
+			criticality: journey.criticality,
+			...journey.epic !== void 0 ? { epic: journey.epic } : {},
+			state,
+			ownerStories
+		};
+	});
+}
+/** Aggregate counts for the `acceptance:coverage` event payload. */
+function summarizeCoverage(entries) {
+	const summary = {
+		"walked-pass": 0,
+		"walked-fail": 0,
+		deferred: 0,
+		unclaimed: 0,
+		unwalked: 0
+	};
+	for (const entry of entries) summary[entry.state] += 1;
+	return summary;
+}
+/** Repo-relative path of the operator deferral file. */
+const JOURNEY_DEFERRALS_PATH = ".substrate/acceptance/deferrals.yaml";
+const JourneyDeferralSchema = z.object({
+	journey: z.string().min(1),
+	reason: z.string().min(1, "a deferral must carry an operator reason"),
+	deferred_at: z.string().optional()
+});
+const JourneyDeferralsFileSchema = z.object({ deferrals: z.array(JourneyDeferralSchema) });
+/** Parse deferrals YAML. Never throws; malformed content comes back as issues. */
+function parseJourneyDeferrals(yamlContent) {
+	let doc;
+	try {
+		doc = load(yamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			ok: false,
+			issues: [{
+				path: "(root)",
+				message: `malformed YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0) return {
+		ok: true,
+		deferrals: []
+	};
+	const result = JourneyDeferralsFileSchema.safeParse(doc);
+	if (!result.success) return {
+		ok: false,
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+			message: issue.message
+		}))
+	};
+	return {
+		ok: true,
+		deferrals: result.data.deferrals
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/acceptance/contract.js
+/** The acceptance contract lives inside the project profile. */
+const ACCEPTANCE_CONTRACT_PROFILE_PATH = ".substrate/project-profile.yaml";
+const RenderSurfaceSchema = z.object({ render: z.string().min(1) }).strict();
+const WebSurfaceSchema = z.object({
+	serve: z.string().min(1),
+	ready: z.string().optional()
+}).strict();
+const AcceptanceContractSchema = z.object({
+	fixtures: z.string().optional(),
+	surfaces: z.object({
+		email: RenderSurfaceSchema.optional(),
+		cli: RenderSurfaceSchema.optional(),
+		file: RenderSurfaceSchema.optional(),
+		web: WebSurfaceSchema.optional()
+	}).strict()
+}).strict();
+/**
+* Extract + validate the `acceptance:` block from project-profile YAML
+* content. `absent` when the profile has no block (legal — the coverage
+* audit escalates registry-present+contract-absent as acceptance-unrunnable
+* in blocking mode; pure accounting still works without one).
+*/
+function parseAcceptanceContract(profileYamlContent) {
+	let doc;
+	try {
+		doc = load(profileYamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			status: "invalid",
+			issues: [{
+				path: "(root)",
+				message: `malformed profile YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0 || typeof doc !== "object") return { status: "absent" };
+	const block = doc["acceptance"];
+	if (block === void 0 || block === null) return { status: "absent" };
+	const result = AcceptanceContractSchema.safeParse(block);
+	if (!result.success) return {
+		status: "invalid",
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? `acceptance.${issue.path.map(String).join(".")}` : "acceptance",
+			message: issue.message
+		}))
+	};
+	return {
+		status: "ok",
+		contract: result.data
+	};
+}
+
 //#endregion
 //#region packages/sdlc/dist/acceptance/loader.js
 /** stderr shapes that mean "the path is not in the tree at this ref" (absent, not an error). */
@@ -5154,6 +5311,57 @@ async function loadJourneyRegistryFromTrustedTree(repoRoot, ref = "HEAD") {
 	};
 }
 /**
+* Load operator journey deferrals from the trusted tree at `ref`.
+* A0.3 note: `HEAD` at run end can include story-merged edits — full
+* tamper-hardening of this input is A1.3 scope (spec-tamper tripwire).
+*/
+async function loadJourneyDeferralsFromTrustedTree(repoRoot, ref = "HEAD") {
+	const result = await runGitShow(repoRoot, ref, JOURNEY_DEFERRALS_PATH);
+	if (result.spawnError !== void 0) return {
+		status: "error",
+		message: `git show could not be spawned: ${result.spawnError}`
+	};
+	if (result.code !== 0) {
+		if (GIT_SHOW_ABSENT_PATTERNS.some((p) => p.test(result.stderr))) return {
+			status: "ok",
+			deferrals: []
+		};
+		return {
+			status: "error",
+			message: `git show ${ref}:${JOURNEY_DEFERRALS_PATH} failed (exit ${String(result.code)}): ${result.stderr.trim()}`
+		};
+	}
+	const parsed = parseJourneyDeferrals(result.stdout);
+	if (!parsed.ok) return {
+		status: "invalid",
+		issues: parsed.issues
+	};
+	return {
+		status: "ok",
+		deferrals: parsed.deferrals
+	};
+}
+/**
+* Load the acceptance contract (the `acceptance:` block of the project
+* profile) from the trusted tree at `ref` (A1.1). Same H7 posture as the
+* registry: the agent-writable worktree copy of the profile is never read.
+*/
+async function loadAcceptanceContractFromTrustedTree(repoRoot, ref = "HEAD") {
+	const result = await runGitShow(repoRoot, ref, ACCEPTANCE_CONTRACT_PROFILE_PATH);
+	if (result.spawnError !== void 0) return {
+		status: "error",
+		message: `git show could not be spawned: ${result.spawnError}`
+	};
+	if (result.code !== 0) {
+		if (GIT_SHOW_ABSENT_PATTERNS.some((p) => p.test(result.stderr))) return { status: "absent" };
+		return {
+			status: "error",
+			message: `git show ${ref}:${ACCEPTANCE_CONTRACT_PROFILE_PATH} failed (exit ${String(result.code)}): ${result.stderr.trim()}`
+		};
+	}
+	return parseAcceptanceContract(result.stdout);
+}
+/**
 * Filesystem read for OPERATOR LINT ONLY (`substrate acceptance validate`).
 * Gate/judge code paths must use `loadJourneyRegistryFromTrustedTree`.
 */
@@ -5385,6 +5593,7 @@ const PerStoryStateSchema = z.object({
 	escalation_detail: z.string().optional(),
 	commit_sha: z.string().optional(),
 	baseline_sha: z.string().optional(),
+	journeys: z.array(z.string()).optional(),
 	checkpoint_sha: z.string().optional(),
 	finalization: z.object({
 		mode: z.union([
@@ -5519,6 +5728,20 @@ const RunManifestSchema = z.object({
 	orchestrator_start_branch: z.string().optional(),
 	stopped_reason: z.string().optional(),
 	stopped_at: z.string().optional(),
+	journeys: z.array(z.object({
+		journeyId: z.string(),
+		title: z.string(),
+		criticality: z.enum(["critical", "standard"]),
+		epic: z.number().optional(),
+		state: z.enum([
+			"walked-pass",
+			"walked-fail",
+			"deferred",
+			"unclaimed",
+			"unwalked"
+		]),
+		ownerStories: z.array(z.string())
+	})).optional(),
 	generation: z.number().int().nonnegative(),
 	created_at: z.string(),
 	updated_at: z.string()
@@ -6599,5 +6822,5 @@ async function resolveRunManifest(dbRoot, runId) {
 }
 
 //#endregion
-export { FindingsInjector, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery };
-//# sourceMappingURL=manifest-read-DyyFPrJH.js.map
+export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseRuntimeProbes, parseStoryFrontmatter, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage };
+//# sourceMappingURL=manifest-read-DZDlSq_s.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
-import "../../dist-BkhYgJWo.js";
-import "../../manifest-read-DyyFPrJH.js";
-import { runInteractivePrompt } from "../../interactive-prompt-CPF2GTvV.js";
+import "../../dist-CpnLJuVw.js";
+import "../../manifest-read-DZDlSq_s.js";
+import { runInteractivePrompt } from "../../interactive-prompt-C4Is1QDB.js";
 
 export { runInteractivePrompt };

package/dist/{routing-BS-Q8_2L.js → routing-CGO2UZyA.js}

@@ -1,4 +1,4 @@
-import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-BkhYgJWo.js";
+import { ModelRoutingConfigSchema, ProviderPolicySchema, RoutingConfigError, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, TASK_TYPE_PHASE_MAP, getModelTier, loadModelRoutingConfig } from "./dist-CpnLJuVw.js";
 import "./routing-DFxoKHDt.js";
 
 export { loadModelRoutingConfig };

package/dist/{run-CF0qLJAV.js → run-CMXmzqoy.js}

@@ -1,14 +1,14 @@
-import "./health-DvgJ7jj_.js";
+import "./health-BUl3y64N.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
-import "./dist-BkhYgJWo.js";
-import "./manifest-read-DyyFPrJH.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-CAmBrDky.js";
+import "./dist-CpnLJuVw.js";
+import "./manifest-read-DZDlSq_s.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-nSb1TD3o.js";
 import "./routing-DFxoKHDt.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 import "./decision-router-BAPpON_C.js";
-import "./interactive-prompt-CPF2GTvV.js";
+import "./interactive-prompt-C4Is1QDB.js";
 import "./recovery-engine-BKGBeBnW.js";
 
 export { runRunAction };

package/dist/{run-CAmBrDky.js → run-nSb1TD3o.js}

@@ -1,11 +1,11 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-DvgJ7jj_.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-BUl3y64N.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
-import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-BkhYgJWo.js";
-import { FindingsInjector, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery } from "./manifest-read-DyyFPrJH.js";
+import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-CpnLJuVw.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-DZDlSq_s.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-DZyJv5pV.js";
 import { deriveExitCode, routeDecision } from "./decision-router-BAPpON_C.js";
-import { runInteractivePrompt } from "./interactive-prompt-CPF2GTvV.js";
+import { runInteractivePrompt } from "./interactive-prompt-C4Is1QDB.js";
 import { runRecoveryEngine } from "./recovery-engine-BKGBeBnW.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -933,6 +933,38 @@ const PIPELINE_EVENT_METADATA = [
 			}
 		]
 	},
+	{
+		type: "acceptance:coverage",
+		description: "Journey coverage audit result (acceptance gate, A0.3). Every registered journey in scope lands in exactly one state: walked-pass, walked-fail, deferred, unclaimed (NO story claims it — the never-wired-journey class), or unwalked (claimed but never walked). Advisory mode warns; blocking mode escalates the last story of the epic.",
+		when: "At each epic close and once at run end (scope: \"final\").",
+		fields: [
+			{
+				name: "ts",
+				type: "string",
+				description: "Timestamp."
+			},
+			{
+				name: "scope",
+				type: "string",
+				description: "Audited boundary: epic-<n> or final."
+			},
+			{
+				name: "mode",
+				type: "advisory|blocking",
+				description: "Audit posture (acceptance.mode config)."
+			},
+			{
+				name: "entries",
+				type: "array",
+				description: "Per-journey {journeyId, criticality, state, ownerStories}."
+			},
+			{
+				name: "summary",
+				type: "object",
+				description: "State counts across entries."
+			}
+		]
+	},
 	{
 		type: "story:escalation",
 		description: "Story escalated — either max review cycles exceeded or a precondition for SHIP_IT was not met.",
@@ -951,7 +983,7 @@ const PIPELINE_EVENT_METADATA = [
 			{
 				name: "reason",
 				type: "string",
-				description: "Escalation reason. Common values: review-cycles-exhausted (default review-loop max hit); create-story-no-file (create-story phase did not write a story artifact); dev-story-no-commit (substrate auto-commit found no committable changes — agent produced nothing or all changes were outside the worktree); dev-story-commit-failed (substrate auto-commit failed — typically a pre-commit hook rejected the commit; stderr captured in issues); merge-to-main-error (unexpected error in the merge-to-main phase); merge-conflict-detected (story branch could not be merged due to conflicts); parent-tree-dirtied-by-run (uncommitted parent changes intersect the story diff — merge refused, H3.3); ff-only-merge-not-possible (base moved and merge_strategy is ff-only — set finalization.merge_strategy: three-way or integrate manually, H3.3); epic-gate-failed (finalization.epic_gate_command exited non-zero before the last story of an epic integrated, H3.4); story-file-missing (story artifact gone from working tree AND branch HEAD — check wip/feat commits on the story branch, H5.5); undisclosed-files-in-merge (a committed implementation file was never in the dev agent's files_modified, so no review cycle inspected it — inspect the branch, then re-dispatch with accurate files_modified or merge manually, H7). v0.20.87+."
+				description: "Escalation reason. Common values: review-cycles-exhausted (default review-loop max hit); create-story-no-file (create-story phase did not write a story artifact); dev-story-no-commit (substrate auto-commit found no committable changes — agent produced nothing or all changes were outside the worktree); dev-story-commit-failed (substrate auto-commit failed — typically a pre-commit hook rejected the commit; stderr captured in issues); merge-to-main-error (unexpected error in the merge-to-main phase); merge-conflict-detected (story branch could not be merged due to conflicts); parent-tree-dirtied-by-run (uncommitted parent changes intersect the story diff — merge refused, H3.3); ff-only-merge-not-possible (base moved and merge_strategy is ff-only — set finalization.merge_strategy: three-way or integrate manually, H3.3); epic-gate-failed (finalization.epic_gate_command exited non-zero before the last story of an epic integrated, H3.4); story-file-missing (story artifact gone from working tree AND branch HEAD — check wip/feat commits on the story branch, H5.5); undisclosed-files-in-merge (a committed implementation file was never in the dev agent's files_modified, so no review cycle inspected it — inspect the branch, then re-dispatch with accurate files_modified or merge manually, H7); journey-unclaimed (acceptance.mode: blocking — a registered journey has NO story claiming it at epic close; wire it or defer via `substrate acceptance defer`, A0.3); journey-unwalked (acceptance.mode: blocking — a claimed journey was never walked by the acceptance gate at epic close, A0.3); acceptance-unrunnable (acceptance.mode: blocking — a journey registry exists but the committed acceptance contract/registry is absent or invalid, so claimed journeys can never be walked; declare an acceptance: block in the project profile, A1.1). v0.20.87+."
 			},
 			{
 				name: "cycles",
@@ -6319,6 +6351,7 @@ async function runCreateStory(deps, params) {
 		};
 	}
 	const parsed = parseResult.data;
+	let validatedJourneys;
 	if (journeyRegistry !== void 0 && parsed.story_file !== void 0) {
 		let artifactContent;
 		try {
@@ -6344,11 +6377,14 @@ async function runCreateStory(deps, params) {
 					tokenUsage
 				};
 			}
-			if (taggedJourneys.length > 0) logger$21.info({
-				epicId,
-				storyKey,
-				journeys: taggedJourneys
-			}, "A0.2: story tagged with journeys");
+			if (taggedJourneys.length > 0) {
+				logger$21.info({
+					epicId,
+					storyKey,
+					journeys: taggedJourneys
+				}, "A0.2: story tagged with journeys");
+				validatedJourneys = taggedJourneys;
+			}
 		}
 	}
 	logger$21.info({
@@ -6363,6 +6399,7 @@ async function runCreateStory(deps, params) {
 		story_key: parsed.story_key,
 		story_title: parsed.story_title,
 		tokenUsage,
+		...validatedJourneys !== void 0 ? { journeys: validatedJourneys } : {},
 		...dispatchResult.model !== void 0 ? { model: dispatchResult.model } : {}
 	};
 }
@@ -13915,6 +13952,53 @@ function createImplementationOrchestrator(deps) {
 		_lastProgressTs = Date.now();
 		_stalledStories.clear();
 	}
+	async function auditJourneyCoverage(scope, opts) {
+		const mode = config.acceptanceMode ?? "advisory";
+		if (mode === "off" || projectRoot === void 0) return void 0;
+		const registryLoad = await loadJourneyRegistryFromTrustedTree(projectRoot);
+		if (registryLoad.status === "absent") return void 0;
+		if (registryLoad.status === "invalid") return {
+			entries: [],
+			unrunnable: "journey registry is INVALID: " + registryLoad.issues.map((i) => `${i.path}: ${i.message}`).join("; ") + " — fix it (substrate acceptance validate) or the audit cannot run"
+		};
+		if (registryLoad.status !== "ok") {
+			logger$27.warn({ detail: registryLoad.message }, "A0.3: journey registry read failed — coverage audit skipped (environmental)");
+			return void 0;
+		}
+		let unrunnable;
+		const contractLoad = await loadAcceptanceContractFromTrustedTree(projectRoot);
+		if (contractLoad.status === "absent") unrunnable = `journey registry exists but the committed project profile has no acceptance: contract block (${ACCEPTANCE_CONTRACT_PROFILE_PATH}) — claimed journeys can never be walked. Declare render commands per surface.`;
+		else if (contractLoad.status === "invalid") unrunnable = "acceptance: contract block is INVALID: " + contractLoad.issues.map((i) => `${i.path}: ${i.message}`).join("; ");
+		else if (contractLoad.status === "error") logger$27.warn({ detail: contractLoad.message }, "A1.1: acceptance contract read failed (environmental) — treating as absent for this audit");
+		const deferralsLoad = await loadJourneyDeferralsFromTrustedTree(projectRoot);
+		if (deferralsLoad.status !== "ok") logger$27.warn({ detail: deferralsLoad.status === "invalid" ? deferralsLoad.issues : deferralsLoad.message }, `A0.3: ${JOURNEY_DEFERRALS_PATH} unreadable/invalid — treating as no deferrals`);
+		const deferredJourneyIds = deferralsLoad.status === "ok" ? deferralsLoad.deferrals.map((d) => d.journey) : [];
+		const claims = [];
+		for (const [key, st] of _stories.entries()) for (const journeyId of st.journeys ?? []) claims.push({
+			journeyId,
+			storyKey: key
+		});
+		const entries = computeJourneyCoverage({
+			registry: registryLoad.registry,
+			claims,
+			verdicts: [],
+			deferredJourneyIds,
+			scope
+		});
+		const scopeLabel = "final" in scope ? "final" : `epic-${String(scope.epic)}`;
+		eventBus.emit("orchestrator:acceptance-coverage", {
+			scope: scopeLabel,
+			mode,
+			entries,
+			summary: summarizeCoverage(entries)
+		});
+		if (unrunnable !== void 0) logger$27.warn({ scope: scopeLabel }, `A1.1: acceptance gate unrunnable — ${unrunnable}`);
+		if (opts?.persist === true && runManifest !== null) await runManifest.update({ journeys: entries }).catch((err) => logger$27.warn({ err }, "A0.3: manifest journeys ledger write failed — pipeline continues"));
+		return unrunnable !== void 0 ? {
+			entries,
+			unrunnable
+		} : { entries };
+	}
 	function getStallThresholdMs(phase) {
 		return phase === "IN_DEV" ? DEV_STORY_STALL_THRESHOLD_MS : DEFAULT_STALL_THRESHOLD_MS;
 	}
@@ -14141,6 +14225,11 @@ function createImplementationOrchestrator(deps) {
 							storyKey,
 							storyFilePath
 						}, "Found existing story file — skipping create-story");
+						try {
+							const reusedContent = await readFile$1(candidatePath, "utf-8");
+							const reusedJourneys = parseStoryFrontmatter(reusedContent).journeys;
+							if (reusedJourneys.length > 0) updateStory(storyKey, { journeys: reusedJourneys });
+						} catch {}
 						endPhase(storyKey, "create-story");
 						eventBus.emit("orchestrator:story-phase-complete", {
 							storyKey,
@@ -14435,6 +14524,13 @@ function createImplementationOrchestrator(deps) {
 					}
 				}
 				storyFilePath = createResult.story_file;
+				if (createResult.journeys !== void 0 && createResult.journeys.length > 0) {
+					updateStory(storyKey, { journeys: createResult.journeys });
+					if (runManifest !== null) runManifest.patchStoryState(storyKey, { journeys: createResult.journeys }).catch((err) => logger$27.warn({
+						err,
+						storyKey
+					}, "A0.3: patchStoryState(journeys) failed — pipeline continues"));
+				}
 				_capturedStoryTitle = sanitizeStoryTitle(createResult.story_title);
 				if (createResult.story_title) try {
 					const epicId = storyKey.split("-")[0] ?? storyKey;
@@ -16287,6 +16383,55 @@ function createImplementationOrchestrator(deps) {
 					}
 				}
 				const finalizationMode = config.finalizationMode ?? "merge";
+				{
+					const acceptanceModeCfg = config.acceptanceMode ?? "advisory";
+					if (acceptanceModeCfg !== "off") {
+						const epicOfA = (key) => key.includes("-") ? key.slice(0, key.lastIndexOf("-")) : key;
+						const epicIdA = epicOfA(storyKey);
+						const TERMINAL_A = ["COMPLETE", "ESCALATED"];
+						const isLastOfEpicA = [..._stories.entries()].filter(([key]) => key !== storyKey && epicOfA(key) === epicIdA).every(([, st]) => TERMINAL_A.includes(st.phase));
+						const epicNum = Number(epicIdA);
+						if (isLastOfEpicA && Number.isInteger(epicNum)) {
+							const audit = await auditJourneyCoverage({ epic: epicNum });
+							const violations = (audit?.entries ?? []).filter((e) => e.state === "unclaimed" || e.state === "unwalked");
+							if (violations.length > 0 || audit?.unrunnable !== void 0) {
+								const issueLines = violations.map((v) => `journey ${v.journeyId} [${v.criticality}] "${v.title}" is ${v.state}` + (v.ownerStories.length > 0 ? ` (claimed by ${v.ownerStories.join(", ")} but never walked)` : " — NO story claims it"));
+								if (audit?.unrunnable !== void 0) issueLines.push(audit.unrunnable);
+								if (acceptanceModeCfg === "blocking") {
+									const verdict = violations.some((v) => v.state === "unclaimed") ? "journey-unclaimed" : audit?.unrunnable !== void 0 ? "acceptance-unrunnable" : "journey-unwalked";
+									logger$27.error({
+										storyKey,
+										epicId: epicIdA,
+										verdict,
+										journeys: violations.map((v) => v.journeyId)
+									}, "A0.3/A1.1: journey coverage violation at epic close — blocking finalization; branch preserved");
+									updateStory(storyKey, {
+										phase: "ESCALATED",
+										error: verdict,
+										completedAt: new Date().toISOString()
+									});
+									await emitEscalation({
+										storyKey,
+										lastVerdict: verdict,
+										reviewCycles: completedReviewCycles,
+										issues: [
+											`epic ${epicIdA} closes with ${String(violations.length)} journey coverage violation(s) — the never-wired-journey class:`,
+											...issueLines,
+											"Wire the journey in a story tagged with its id, or defer it explicitly: `substrate acceptance defer <id> --reason \"<why>\"` (commit the deferral file)."
+										]
+									});
+									await persistState();
+									return "terminal";
+								}
+								logger$27.warn({
+									storyKey,
+									epicId: epicIdA,
+									violations: issueLines
+								}, "A0.3 (advisory): journey coverage violations at epic close — not blocking (acceptance.mode: advisory)");
+							}
+						}
+					}
+				}
 				const epicGateCommand = config.epicGateCommand;
 				if (epicGateCommand !== void 0 && epicGateCommand.trim() !== "" && finalizationMode !== "branch") {
 					const epicOf = (key) => key.includes("-") ? key.slice(0, key.lastIndexOf("-")) : key;
@@ -18064,6 +18209,11 @@ function createImplementationOrchestrator(deps) {
 			} catch (err) {
 				logger$27.debug({ err }, "Profile staleness check failed (best-effort)");
 			}
+			try {
+				await auditJourneyCoverage({ final: true }, { persist: true });
+			} catch (err) {
+				logger$27.warn({ err }, "A0.3: run-end coverage sweep failed (best-effort)");
+			}
 			let completed = 0;
 			let escalated = 0;
 			let failed = 0;
@@ -46299,6 +46449,21 @@ function wireNdjsonEmitter(eventBus, ndjsonEmitter) {
 			...payload.prUrl !== void 0 ? { pr_url: payload.prUrl } : {}
 		});
 	});
+	eventBus.on("orchestrator:acceptance-coverage", (payload) => {
+		ndjsonEmitter.emit({
+			type: "acceptance:coverage",
+			ts: new Date().toISOString(),
+			scope: payload.scope,
+			mode: payload.mode,
+			entries: payload.entries.map((e) => ({
+				journeyId: e.journeyId,
+				criticality: e.criticality,
+				state: e.state,
+				ownerStories: e.ownerStories
+			})),
+			summary: payload.summary
+		});
+	});
 	eventBus.on("orchestrator:story-escalated", (payload) => {
 		const rawIssues = Array.isArray(payload.issues) ? payload.issues : [];
 		const issues = rawIssues.map((issue) => {
@@ -46631,6 +46796,7 @@ async function runRunAction(options) {
 	let configFinalizationMode;
 	let configMergeStrategy;
 	let configEpicGateCommand;
+	let configAcceptanceMode;
 	let configPermissionProfile;
 	let configWorktreeCopyFiles;
 	try {
@@ -46661,6 +46827,7 @@ async function runRunAction(options) {
 		if (cfg.finalization?.mode !== void 0) configFinalizationMode = cfg.finalization.mode;
 		if (cfg.finalization?.merge_strategy !== void 0) configMergeStrategy = cfg.finalization.merge_strategy;
 		if (cfg.finalization?.epic_gate_command !== void 0) configEpicGateCommand = cfg.finalization.epic_gate_command;
+		if (cfg.acceptance?.mode !== void 0) configAcceptanceMode = cfg.acceptance.mode;
 		if (cfg.dispatch?.permission_profile !== void 0) configPermissionProfile = cfg.dispatch.permission_profile;
 		if (Array.isArray(cfg.worktree?.copy_files) && cfg.worktree.copy_files.length > 0) {
 			configWorktreeCopyFiles = [...cfg.worktree.copy_files];
@@ -46764,6 +46931,7 @@ async function runRunAction(options) {
 		...finalization !== void 0 ? { finalizationMode: finalization } : configFinalizationMode !== void 0 ? { finalizationMode: configFinalizationMode } : {},
 		...configMergeStrategy !== void 0 ? { mergeStrategy: configMergeStrategy } : {},
 		...configEpicGateCommand !== void 0 ? { epicGateCommand: configEpicGateCommand } : {},
+		...configAcceptanceMode !== void 0 ? { acceptanceMode: configAcceptanceMode } : {},
 		...configPermissionProfile !== void 0 ? { permissionProfile: configPermissionProfile } : {},
 		...configWorktreeCopyFiles !== void 0 ? { worktreeCopyFiles: configWorktreeCopyFiles } : {}
 	});
@@ -47332,6 +47500,7 @@ async function runRunAction(options) {
 					...finalization !== void 0 ? { finalizationMode: finalization } : configFinalizationMode !== void 0 ? { finalizationMode: configFinalizationMode } : {},
 					...configMergeStrategy !== void 0 ? { mergeStrategy: configMergeStrategy } : {},
 					...configEpicGateCommand !== void 0 ? { epicGateCommand: configEpicGateCommand } : {},
+					...configAcceptanceMode !== void 0 ? { acceptanceMode: configAcceptanceMode } : {},
 					...configWorktreeCopyFiles !== void 0 ? { worktreeCopyFiles: configWorktreeCopyFiles } : {}
 				},
 				projectRoot,
@@ -47555,7 +47724,7 @@ async function runRunAction(options) {
 	}
 }
 async function runFullPipeline(options) {
-	const { packName, packPath, dbDir, dbPath, startPhase, stopAfter, concept, concurrency, outputFormat, projectRoot, events: eventsFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, maxReviewCycles = 2, retryBudget, registry: injectedRegistry, tokenCeilings, stories: explicitStories, telemetryEnabled: fullTelemetryEnabled, telemetryPort: fullTelemetryPort, agentId, meshUrl: fpMeshUrl, meshProjectId: fpMeshProjectId, engineType: fpEngineType, probeAuthor, probeAuthorStateIntegrating: fpProbeAuthorStateIntegrating, noWorktree, worktreeCopyFiles: fpWorktreeCopyFiles, finalizationMode: fpFinalizationMode, mergeStrategy: fpMergeStrategy, epicGateCommand: fpEpicGateCommand, permissionProfile: fpPermissionProfile } = options;
+	const { packName, packPath, dbDir, dbPath, startPhase, stopAfter, concept, concurrency, outputFormat, projectRoot, events: eventsFlag, skipUx, research: researchFlag, skipResearch: skipResearchFlag, skipPreflight, skipVerification, maxReviewCycles = 2, retryBudget, registry: injectedRegistry, tokenCeilings, stories: explicitStories, telemetryEnabled: fullTelemetryEnabled, telemetryPort: fullTelemetryPort, agentId, meshUrl: fpMeshUrl, meshProjectId: fpMeshProjectId, engineType: fpEngineType, probeAuthor, probeAuthorStateIntegrating: fpProbeAuthorStateIntegrating, noWorktree, worktreeCopyFiles: fpWorktreeCopyFiles, finalizationMode: fpFinalizationMode, mergeStrategy: fpMergeStrategy, epicGateCommand: fpEpicGateCommand, acceptanceMode: fpAcceptanceMode, permissionProfile: fpPermissionProfile } = options;
 	if (!existsSync$1(dbDir)) mkdirSync$1(dbDir, { recursive: true });
 	let doltServerFull = null;
 	try {
@@ -47871,6 +48040,7 @@ async function runFullPipeline(options) {
 						...fpFinalizationMode !== void 0 ? { finalizationMode: fpFinalizationMode } : {},
 						...fpMergeStrategy !== void 0 ? { mergeStrategy: fpMergeStrategy } : {},
 						...fpEpicGateCommand !== void 0 ? { epicGateCommand: fpEpicGateCommand } : {},
+						...fpAcceptanceMode !== void 0 ? { acceptanceMode: fpAcceptanceMode } : {},
 						...fpWorktreeCopyFiles !== void 0 ? { worktreeCopyFiles: fpWorktreeCopyFiles } : {}
 					},
 					projectRoot,
@@ -48041,7 +48211,7 @@ async function runFullPipeline(options) {
 */
 async function emitPreDispatchVersionAdvisory(currentVersion) {
 	if (process.env["SUBSTRATE_NO_UPDATE_CHECK"] === "1") return;
-	const { createVersionManager } = await import("./version-manager-impl-BVcsgUtN.js");
+	const { createVersionManager } = await import("./version-manager-impl-DeEPhQlA.js");
 	const vm = createVersionManager();
 	const result = await vm.checkForUpdates(true);
 	const gap = classifyVersionGap(currentVersion, result.latestVersion);
@@ -48148,4 +48318,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-CAmBrDky.js.map
+//# sourceMappingURL=run-nSb1TD3o.js.map

package/dist/src/modules/recovery-engine/index.d.ts

@@ -1,4 +1,4 @@
-import { CoreEvents, DatabaseAdapter, TypedEventBus } from "../../../index-CnV5PcSR.js";
+import { CoreEvents, DatabaseAdapter, TypedEventBus } from "../../../index-C31XtSMn.js";
 import { z } from "zod";
 
 //#region packages/sdlc/dist/verification/findings.d.ts
@@ -582,6 +582,7 @@ declare const PerStoryStateSchema: z.ZodObject<{
   escalation_detail: z.ZodOptional<z.ZodString>;
   commit_sha: z.ZodOptional<z.ZodString>;
   baseline_sha: z.ZodOptional<z.ZodString>;
+  journeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
   checkpoint_sha: z.ZodOptional<z.ZodString>;
   finalization: z.ZodOptional<z.ZodObject<{
     mode: z.ZodUnion<readonly [z.ZodLiteral<"merge">, z.ZodLiteral<"branch">, z.ZodLiteral<"pr">]>;
@@ -717,6 +718,19 @@ interface RunManifestData {
    * Optional for backward-compatibility with pre-75-2 manifests.
    */
   orchestrator_start_branch?: string;
+  /**
+   * A0.3 (acceptance-gate): journey coverage ledger from the most recent
+   * audit (epic-close or run-end). Absent on registry-less projects and
+   * pre-A0.3 manifests.
+   */
+  journeys?: {
+    journeyId: string;
+    title: string;
+    criticality: 'critical' | 'standard';
+    epic?: number;
+    state: 'walked-pass' | 'walked-fail' | 'deferred' | 'unclaimed' | 'unwalked';
+    ownerStories: string[];
+  }[];
   /**
    * Human-readable reason the run was stopped (e.g. 'killed_by_user').
    * Set by the SIGTERM/SIGINT handler (Story 58-7). Absent on pre-58-7 manifests.
@@ -751,8 +765,8 @@ declare const CliFlagsSchema: z.ZodObject<{
   stories: z.ZodOptional<z.ZodArray<z.ZodString>>;
   halt_on: z.ZodOptional<z.ZodEnum<{
     none: "none";
-    all: "all";
     critical: "critical";
+    all: "all";
   }>>;
   cost_ceiling: z.ZodOptional<z.ZodNumber>;
   agent: z.ZodOptional<z.ZodString>;

package/dist/{upgrade-S1oUMH5P.js → upgrade-BUSzXgnd.js}

@@ -1,4 +1,4 @@
-import { createVersionManager } from "./dist-BkhYgJWo.js";
+import { createVersionManager } from "./dist-CpnLJuVw.js";
 import { execSync, spawn } from "child_process";
 import * as readline from "readline";
 
@@ -123,4 +123,4 @@ function registerUpgradeCommand(program) {
 
 //#endregion
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };
-//# sourceMappingURL=upgrade-S1oUMH5P.js.map
+//# sourceMappingURL=upgrade-BUSzXgnd.js.map

package/dist/{upgrade-BOWLlLbD.js → upgrade-M0UkDCeg.js}

@@ -1,5 +1,5 @@
-import "./dist-BkhYgJWo.js";
+import "./dist-CpnLJuVw.js";
 import "./version-manager-impl-qFBiO4Eh.js";
-import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-S1oUMH5P.js";
+import { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand } from "./upgrade-BUSzXgnd.js";
 
 export { isGlobalInstall, registerUpgradeCommand, runUpgradeCommand };

package/dist/{version-manager-impl-BVcsgUtN.js → version-manager-impl-DeEPhQlA.js}

@@ -1,4 +1,4 @@
-import { VersionManagerImpl, createVersionManager } from "./dist-BkhYgJWo.js";
+import { VersionManagerImpl, createVersionManager } from "./dist-CpnLJuVw.js";
 import "./version-manager-impl-qFBiO4Eh.js";
 
 export { createVersionManager };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.21.2",
+  "version": "0.21.4",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",

package/dist/adapter-registry-CZn__637.js

@@ -1,4 +0,0 @@
-import { AdapterRegistry } from "./dist-BkhYgJWo.js";
-import "./adapter-registry-DXLMTmfD.js";
-
-export { AdapterRegistry };