substrate-ai 0.21.3 → 0.21.5

package/dist/cli/index.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-Dnzblihr.js";
+import { FileKvStore, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, buildPipelineStatusOutput, createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion } from "../health-hYMxKqAH.js";
 import { createLogger } from "../logger-KeHncl-f.js";
 import { createEventBus } from "../helpers-CElYrONe.js";
 import { AdapterRegistry, BudgetConfigSchema, CURRENT_CONFIG_FORMAT_VERSION, CURRENT_TASK_GRAPH_VERSION, ConfigError, CostTrackerConfigSchema, DEFAULT_CONFIG, DoltClient, DoltNotInstalled, GlobalSettingsSchema, InMemoryDatabaseAdapter, IngestionServer, MonitorDatabaseImpl, OPERATIONAL_FINDING, PartialGlobalSettingsSchema, PartialProviderConfigSchema, ProvidersSchema, RoutingRecommender, STORY_METRICS, TelemetryConfigSchema, addTokenUsage, aggregateTokenUsageForRun, checkDoltInstalled, compareRunMetrics, createAmendmentRun, createConfigSystem, createDecision, createGitWorktreeManager, createPipelineRun, createStderrLogger, getActiveDecisions, getAllCostEntriesFiltered, getBaselineRunMetrics, getDecisionsByCategory, getDecisionsByPhaseForRun, getLatestCompletedRun, getLatestRun, getPipelineRunById, getPlanningCostTotal, getRetryableEscalations, getRunMetrics, getRunningPipelineRuns, getSessionCostSummary, getSessionCostSummaryFiltered, getStoryMetricsForRun, getTokenUsageSummary, incrementRunRestarts, initSchema, initWorkGraphSchema, initializeDolt, listRunMetrics, loadParentRunDecisions, supersedeDecision, swallowDebug, tagRunAsBaseline, updatePipelineRun } from "../dist-CpnLJuVw.js";
 import "../adapter-registry-DXLMTmfD.js";
-import { JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseJourneyDeferrals, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-B3gE46DX.js";
-import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-ZxFHQyE_.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, loadAcceptanceContractFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseRuntimeProbes, readCurrentRunId, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck } from "../manifest-read-C0N7b9nH.js";
+import { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR, GitClient, GrammarLoader, Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runSolutioningPhase, unescape, validateStopAfterFromConflict } from "../run-C7PLGWT0.js";
 import "../errors-8tVEwG6v.js";
 import "../routing-DFxoKHDt.js";
 import { WorkGraphRepository } from "../work-graph-repository-DZyJv5pV.js";
 import "../decisions-CzSIEeGP.js";
 import "../decision-router-BAPpON_C.js";
-import "../interactive-prompt-BM5RaXYG.js";
+import "../interactive-prompt-BvY2FKsl.js";
 import "../recovery-engine-BKGBeBnW.js";
 import "../version-manager-impl-qFBiO4Eh.js";
 import { registerUpgradeCommand } from "../upgrade-BUSzXgnd.js";
@@ -7130,7 +7130,7 @@ async function runStatusAction(options) {
 			logger$15.debug({ err }, "Work graph query failed, continuing without work graph data");
 		}
 		if (run === void 0) {
-			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-bhMCTYDO.js");
+			const { inspectProcessTree: inspectProcessTree$1 } = await import("../health-BdYZpCP1.js");
 			const substrateDirPath = join(projectRoot, ".substrate");
 			const processInfo = inspectProcessTree$1({
 				projectRoot,
@@ -8659,7 +8659,7 @@ async function runSupervisorAction(options, deps = {}) {
 								await initSchema(expAdapter);
 								const { runRunAction: runPipeline } = await import(
 									/* @vite-ignore */
-									"../run-ChZFveqv.js"
+									"../run-CHMwDPRx.js"
 );
 								const runStoryFn = async (opts) => {
 									const exitCode = await runPipeline({
@@ -13474,15 +13474,33 @@ function registerAcceptanceCommand(program, version) {
 		const projectRoot = process.cwd();
 		const source = opts.ref !== void 0 ? `committed @ ${opts.ref}` : "working tree";
 		const result = opts.ref !== void 0 ? await loadJourneyRegistryFromTrustedTree(projectRoot, opts.ref) : await loadJourneyRegistryFromFile(projectRoot);
+		let contract;
+		if (opts.ref !== void 0) contract = await loadAcceptanceContractFromTrustedTree(projectRoot, opts.ref);
+		else try {
+			const profileContent = await readFile$1(join$1(projectRoot, ACCEPTANCE_CONTRACT_PROFILE_PATH), "utf-8");
+			contract = parseAcceptanceContract(profileContent);
+		} catch {
+			contract = { status: "absent" };
+		}
 		if (opts.outputFormat === "json") {
 			const output = buildJsonOutput("substrate acceptance validate", {
 				source,
-				...result
+				...result,
+				contract: { status: contract.status }
 			}, version);
 			process.stdout.write(JSON.stringify(output, null, 2) + "\n");
 			process.exit(result.status === "ok" ? ACCEPTANCE_EXIT_SUCCESS : ACCEPTANCE_EXIT_ERROR);
 		}
-		process.exit(renderHuman(result, source));
+		const exitCode = renderHuman(result, source);
+		if (contract.status === "ok") {
+			const surfaces = Object.keys(contract.contract.surfaces).join(", ");
+			process.stdout.write(`contract: OK — surfaces declared: ${surfaces}\n`);
+		} else if (contract.status === "invalid") {
+			process.stdout.write(`contract: INVALID (${ACCEPTANCE_CONTRACT_PROFILE_PATH} acceptance: block):\n`);
+			for (const issue of contract.issues) process.stdout.write(`  ${issue.path}: ${issue.message}\n`);
+		} else if (contract.status === "absent") process.stdout.write(`contract: ABSENT — no acceptance: block in ${ACCEPTANCE_CONTRACT_PROFILE_PATH}. Claimed journeys can never be walked (acceptance-unrunnable in blocking mode).
+`);
+		process.exit(exitCode);
 	});
 	acceptanceCmd.command("defer <journeyId>").description("Record an operator deferral for a journey — the coverage audit reports it `deferred` instead of unclaimed/unwalked. Writes to the working tree; COMMIT the file for the audit (trusted tree) to honor it.").requiredOption("--reason <text>", "why this journey is deferred (the operator ack is the point)").action(async (journeyId, opts) => {
 		const projectRoot = process.cwd();

package/dist/{health-bhMCTYDO.js → health-BdYZpCP1.js}

@@ -1,7 +1,7 @@
-import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-Dnzblihr.js";
+import { DEFAULT_STALL_THRESHOLD_SECONDS, getAllDescendantPids, getAutoHealthData, inspectProcessTree, isOrchestratorProcessLine, registerHealthCommand, runHealthAction } from "./health-hYMxKqAH.js";
 import "./logger-KeHncl-f.js";
 import "./dist-CpnLJuVw.js";
-import "./manifest-read-B3gE46DX.js";
+import "./manifest-read-C0N7b9nH.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 

package/dist/{health-Dnzblihr.js → health-hYMxKqAH.js}

@@ -1,6 +1,6 @@
 import { createLogger } from "./logger-KeHncl-f.js";
 import { DoltClient, DoltQueryError, createDatabaseAdapter$1 as createDatabaseAdapter, getLatestRun, getPipelineRunById, initSchema } from "./dist-CpnLJuVw.js";
-import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-B3gE46DX.js";
+import { resolveMainRepoRoot, resolveRunManifest } from "./manifest-read-C0N7b9nH.js";
 import { createRequire } from "module";
 import { dirname, join } from "path";
 import { existsSync, readFileSync } from "node:fs";
@@ -1000,4 +1000,4 @@ function registerHealthCommand(program, _version = "0.0.0", projectRoot = proces
 
 //#endregion
 export { BMAD_BASELINE_TOKENS_FULL, DEFAULT_STALL_THRESHOLD_SECONDS, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, SUBSTRATE_OWNED_SETTINGS_KEYS, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter$1 as createDatabaseAdapter, createDoltOperatorReader, findPackageRoot, formatOutput, formatPipelineStatusHuman, formatPipelineSummary, formatTokenTelemetry, getAllDescendantPids, getAutoHealthData, getSubstrateDefaultSettings, inspectProcessTree, isOrchestratorProcessLine, parseDbTimestampAsUtc, registerHealthCommand, resolveBmadMethodSrcPath, resolveBmadMethodVersion, runHealthAction, validateStoryKey };
-//# sourceMappingURL=health-Dnzblihr.js.map
+//# sourceMappingURL=health-hYMxKqAH.js.map

package/dist/{interactive-prompt-BM5RaXYG.js → interactive-prompt-BvY2FKsl.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-B3gE46DX.js";
+import { readCurrentRunId, resolveMainRepoRoot } from "./manifest-read-C0N7b9nH.js";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import * as readline from "node:readline";
@@ -180,4 +180,4 @@ async function runInteractivePrompt(decisionContext) {
 
 //#endregion
 export { runInteractivePrompt };
-//# sourceMappingURL=interactive-prompt-BM5RaXYG.js.map
+//# sourceMappingURL=interactive-prompt-BvY2FKsl.js.map

package/dist/{manifest-read-B3gE46DX.js → manifest-read-C0N7b9nH.js}

@@ -8,9 +8,10 @@ import { YAMLException, load } from "js-yaml";
 import { existsSync, promises, readFileSync, readdirSync, statSync } from "node:fs";
 import { execSync, spawn } from "node:child_process";
 import * as path$2 from "node:path";
-import { basename as basename$1, delimiter, dirname as dirname$1, join as join$1, resolve as resolve$1 } from "node:path";
+import { basename as basename$1, delimiter, dirname as dirname$1, join as join$1, relative, resolve as resolve$1 } from "node:path";
+import { createHash } from "node:crypto";
 import { z } from "zod";
-import { mkdir as mkdir$1, open, readFile as readFile$1, unlink as unlink$1, writeFile as writeFile$1 } from "node:fs/promises";
+import { mkdir as mkdir$1, open, readFile as readFile$1, readdir as readdir$1, unlink as unlink$1, writeFile as writeFile$1 } from "node:fs/promises";
 import * as fs from "fs";
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
@@ -2612,13 +2613,13 @@ var ContaminationCheck = class {
 //#region packages/sdlc/dist/verification/checks/test-mutation-check.js
 /** Heuristic: is this path a test file? Covers the JS/TS/Python/Go idioms. */
 function isTestPath(file) {
-	const norm = file.replace(/\\/g, "/").toLowerCase();
-	const base = norm.split("/").pop() ?? "";
-	if (/(^|\/)(__tests__|tests?)\//.test(norm)) return true;
+	const norm$1 = file.replace(/\\/g, "/").toLowerCase();
+	const base = norm$1.split("/").pop() ?? "";
+	if (/(^|\/)(__tests__|tests?)\//.test(norm$1)) return true;
 	if (/\.(test|spec)\.[a-z]+$/.test(base)) return true;
 	if (/^test_.*\.py$/.test(base) || /_test\.(py|go)$/.test(base)) return true;
 	if (base === "conftest.py") return true;
-	if (/(^|\/)(fixtures|factories|testsupport|test-support|test_support|__mocks__|__fixtures__)\//.test(norm)) return true;
+	if (/(^|\/)(fixtures|factories|testsupport|test-support|test_support|__mocks__|__fixtures__)\//.test(norm$1)) return true;
 	return false;
 }
 var TestMutationCheck = class {
@@ -2648,6 +2649,351 @@ var TestMutationCheck = class {
 	}
 };
 
+//#endregion
+//#region packages/sdlc/dist/acceptance/registry.js
+/** Repo-relative path of the registry — the single canonical location. */
+const JOURNEY_REGISTRY_PATH = ".substrate/acceptance/journeys.yaml";
+const JourneySurfaceSchema = z.enum([
+	"email",
+	"cli",
+	"file",
+	"web"
+]);
+const JourneyEndStateSchema = z.object({
+	id: z.string().min(1, "end-state id must be a non-empty string"),
+	given: z.string().min(1, "given must be a non-empty string"),
+	walk: z.string().min(1, "walk must be a non-empty string"),
+	then: z.string().min(1, "then must be a non-empty string")
+});
+const JourneySchema = z.object({
+	id: z.string().min(1, "journey id must be a non-empty string"),
+	title: z.string().min(1, "title must be a non-empty string"),
+	criticality: z.enum(["critical", "standard"]),
+	surfaces: z.array(JourneySurfaceSchema).min(1, "a journey must declare at least one surface"),
+	epic: z.number().int().positive().optional(),
+	end_states: z.array(JourneyEndStateSchema).min(1, "a journey must declare at least one end_state — a journey with none is unjudgeable")
+});
+const JourneyRegistrySchema = z.object({
+	version: z.number().int().positive("version must be a positive integer"),
+	journeys: z.array(JourneySchema)
+}).superRefine((registry, ctx) => {
+	const seenJourneyIds = new Map();
+	registry.journeys.forEach((journey, i) => {
+		const firstIndex = seenJourneyIds.get(journey.id);
+		if (firstIndex !== void 0) ctx.addIssue({
+			code: "custom",
+			path: [
+				"journeys",
+				i,
+				"id"
+			],
+			message: `duplicate journey id "${journey.id}" (first declared at journeys[${firstIndex}])`
+		});
+		else seenJourneyIds.set(journey.id, i);
+		const seenEndStateIds = new Map();
+		journey.end_states.forEach((endState, j) => {
+			const firstEs = seenEndStateIds.get(endState.id);
+			if (firstEs !== void 0) ctx.addIssue({
+				code: "custom",
+				path: [
+					"journeys",
+					i,
+					"end_states",
+					j,
+					"id"
+				],
+				message: `duplicate end-state id "${endState.id}" in journey "${journey.id}" (first declared at end_states[${firstEs}])`
+			});
+			else seenEndStateIds.set(endState.id, j);
+		});
+	});
+});
+function zodErrorToValidationIssues(error) {
+	return error.issues.map((issue) => ({
+		path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+		message: issue.message
+	}));
+}
+/**
+* Parse and validate registry YAML content.
+*
+* Never throws: malformed YAML, non-object documents, and schema violations
+* all come back as named, pathed issues.
+*/
+function parseJourneyRegistry(yamlContent) {
+	let doc;
+	try {
+		doc = load(yamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			ok: false,
+			issues: [{
+				path: "(root)",
+				message: `malformed YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0) return {
+		ok: false,
+		issues: [{
+			path: "(root)",
+			message: "registry file is empty"
+		}]
+	};
+	const result = JourneyRegistrySchema.safeParse(doc);
+	if (!result.success) return {
+		ok: false,
+		issues: zodErrorToValidationIssues(result.error)
+	};
+	return {
+		ok: true,
+		registry: result.data
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/acceptance/coverage.js
+/**
+* Compute the coverage state of every journey audited at this scope.
+*
+* - `{epic: n}` audits journeys declaring `epic: n`.
+* - `{final: true}` audits the FULL registry (epicless journeys have no
+*   earlier audit point; epic-scoped ones are re-audited — idempotent).
+*
+* State precedence: deferred > walked-fail > walked-pass > unwalked/unclaimed.
+* An operator deferral wins over everything (explicit scope decision); a fail
+* verdict wins over a pass (any failing end-state fails the journey).
+*/
+function computeJourneyCoverage(input) {
+	const { registry, claims, verdicts, deferredJourneyIds, scope } = input;
+	const audited = registry.journeys.filter((j) => "final" in scope ? true : j.epic === scope.epic);
+	const claimsByJourney = new Map();
+	for (const claim of claims) {
+		const owners = claimsByJourney.get(claim.journeyId) ?? [];
+		if (!owners.includes(claim.storyKey)) owners.push(claim.storyKey);
+		claimsByJourney.set(claim.journeyId, owners);
+	}
+	const deferred = new Set(deferredJourneyIds);
+	const verdictByJourney = new Map();
+	for (const v of verdicts) {
+		const existing = verdictByJourney.get(v.journeyId);
+		verdictByJourney.set(v.journeyId, existing === "fail" ? "fail" : v.verdict);
+	}
+	return audited.map((journey) => {
+		const ownerStories = claimsByJourney.get(journey.id) ?? [];
+		let state;
+		if (deferred.has(journey.id)) state = "deferred";
+		else {
+			const verdict = verdictByJourney.get(journey.id);
+			if (verdict === "fail") state = "walked-fail";
+			else if (verdict === "pass") state = "walked-pass";
+			else state = ownerStories.length > 0 ? "unwalked" : "unclaimed";
+		}
+		return {
+			journeyId: journey.id,
+			title: journey.title,
+			criticality: journey.criticality,
+			...journey.epic !== void 0 ? { epic: journey.epic } : {},
+			state,
+			ownerStories
+		};
+	});
+}
+/** Aggregate counts for the `acceptance:coverage` event payload. */
+function summarizeCoverage(entries) {
+	const summary = {
+		"walked-pass": 0,
+		"walked-fail": 0,
+		deferred: 0,
+		unclaimed: 0,
+		unwalked: 0
+	};
+	for (const entry of entries) summary[entry.state] += 1;
+	return summary;
+}
+/** Repo-relative path of the operator deferral file. */
+const JOURNEY_DEFERRALS_PATH = ".substrate/acceptance/deferrals.yaml";
+const JourneyDeferralSchema = z.object({
+	journey: z.string().min(1),
+	reason: z.string().min(1, "a deferral must carry an operator reason"),
+	deferred_at: z.string().optional()
+});
+const JourneyDeferralsFileSchema = z.object({ deferrals: z.array(JourneyDeferralSchema) });
+/** Parse deferrals YAML. Never throws; malformed content comes back as issues. */
+function parseJourneyDeferrals(yamlContent) {
+	let doc;
+	try {
+		doc = load(yamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			ok: false,
+			issues: [{
+				path: "(root)",
+				message: `malformed YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0) return {
+		ok: true,
+		deferrals: []
+	};
+	const result = JourneyDeferralsFileSchema.safeParse(doc);
+	if (!result.success) return {
+		ok: false,
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+			message: issue.message
+		}))
+	};
+	return {
+		ok: true,
+		deferrals: result.data.deferrals
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/acceptance/contract.js
+/** The acceptance contract lives inside the project profile. */
+const ACCEPTANCE_CONTRACT_PROFILE_PATH = ".substrate/project-profile.yaml";
+const RenderSurfaceSchema = z.object({ render: z.string().min(1) }).strict();
+const WebSurfaceSchema = z.object({
+	serve: z.string().min(1),
+	ready: z.string().optional()
+}).strict();
+const AcceptanceContractSchema = z.object({
+	fixtures: z.string().optional(),
+	surfaces: z.object({
+		email: RenderSurfaceSchema.optional(),
+		cli: RenderSurfaceSchema.optional(),
+		file: RenderSurfaceSchema.optional(),
+		web: WebSurfaceSchema.optional()
+	}).strict()
+}).strict();
+/**
+* Extract + validate the `acceptance:` block from project-profile YAML
+* content. `absent` when the profile has no block (legal — the coverage
+* audit escalates registry-present+contract-absent as acceptance-unrunnable
+* in blocking mode; pure accounting still works without one).
+*/
+function parseAcceptanceContract(profileYamlContent) {
+	let doc;
+	try {
+		doc = load(profileYamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			status: "invalid",
+			issues: [{
+				path: "(root)",
+				message: `malformed profile YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0 || typeof doc !== "object") return { status: "absent" };
+	const block = doc["acceptance"];
+	if (block === void 0 || block === null) return { status: "absent" };
+	const result = AcceptanceContractSchema.safeParse(block);
+	if (!result.success) return {
+		status: "invalid",
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? `acceptance.${issue.path.map(String).join(".")}` : "acceptance",
+			message: issue.message
+		}))
+	};
+	return {
+		status: "ok",
+		contract: result.data
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/verification/checks/acceptance-spec-check.js
+async function readWorktreeCopy(workingDir, relPath) {
+	try {
+		return await readFile$1(join$1(workingDir, relPath), "utf-8");
+	} catch {
+		return null;
+	}
+}
+const norm = (s) => s === null ? null : s.replace(/\r\n/g, "\n").trim();
+/** Compare only the acceptance BLOCK of the profile (other profile keys are ContaminationCheck/H7 territory). */
+function acceptanceBlockFingerprint(profileContent) {
+	if (profileContent === null) return "absent";
+	const parsed = parseAcceptanceContract(profileContent);
+	if (parsed.status === "absent") return "absent";
+	if (parsed.status === "invalid") return "invalid:" + JSON.stringify(parsed.issues);
+	return JSON.stringify(parsed.contract);
+}
+var AcceptanceSpecCheck = class {
+	name = "acceptance-spec";
+	tier = "A";
+	async run(context) {
+		const start = Date.now();
+		const guard = context.acceptanceSpecGuard;
+		if (guard === void 0) return {
+			status: "pass",
+			details: "no acceptance spec guard in context (acceptance not configured or non-worktree dispatch)",
+			duration_ms: Date.now() - start,
+			findings: []
+		};
+		const findings = [];
+		const rawSpecs = [{
+			path: JOURNEY_REGISTRY_PATH,
+			trusted: guard.journeysTrusted
+		}, {
+			path: JOURNEY_DEFERRALS_PATH,
+			trusted: guard.deferralsTrusted
+		}];
+		for (const spec of rawSpecs) {
+			const worktree = await readWorktreeCopy(context.workingDir, spec.path);
+			const trustedNorm = norm(spec.trusted);
+			const worktreeNorm = norm(worktree);
+			if (trustedNorm === worktreeNorm) continue;
+			const shape = trustedNorm === null ? "INTRODUCED in the story worktree (acceptance specs are planning/operator-authored, never story output)" : worktreeNorm === null ? "DELETED in the story worktree" : "DIVERGES from the trusted copy";
+			findings.push({
+				category: "acceptance-spec-tampered",
+				severity: "error",
+				message: `${spec.path} ${shape}. The acceptance gate reads the trusted tree, so this edit cannot fool the current audit — but merging it would change every FUTURE audit. Revert it or make the change through planning (operator commit outside a story).`
+			});
+		}
+		const worktreeProfile = await readWorktreeCopy(context.workingDir, ACCEPTANCE_CONTRACT_PROFILE_PATH);
+		const trustedFp = acceptanceBlockFingerprint(guard.profileTrusted);
+		const worktreeFp = acceptanceBlockFingerprint(worktreeProfile);
+		if (trustedFp !== worktreeFp) findings.push({
+			category: "acceptance-spec-tampered",
+			severity: "error",
+			message: `the acceptance: contract block in ${ACCEPTANCE_CONTRACT_PROFILE_PATH} differs between the story worktree and the trusted tree (render-command laundering shape). Revert the worktree edit.`
+		});
+		if (guard.fixturesPath !== void 0) {
+			const prefix = guard.fixturesPath.replace(/\\/g, "/").replace(/\/+$/, "") + "/";
+			const touched = (context.changedFiles ?? []).filter((f) => {
+				const n = f.replace(/\\/g, "/");
+				return n.startsWith(prefix) || n === prefix.slice(0, -1);
+			});
+			if (touched.length > 0) findings.push({
+				category: "acceptance-fixture-mutation",
+				severity: "warn",
+				message: `story modified ${String(touched.length)} file(s) under the declared acceptance fixtures path (${guard.fixturesPath}): ${touched.slice(0, 10).join(", ")}` + (touched.length > 10 ? ` (+${String(touched.length - 10)} more)` : "") + `. The judge grounds verdicts in these fixtures — review whether the change tilts the walk.`
+			});
+		}
+		if (findings.length === 0) return {
+			status: "pass",
+			details: "acceptance specs match the trusted tree; no fixture mutations",
+			duration_ms: Date.now() - start,
+			findings: []
+		};
+		const hasError = findings.some((f) => f.severity === "error");
+		return {
+			status: hasError ? "fail" : "warn",
+			details: renderFindings(findings),
+			duration_ms: Date.now() - start,
+			findings
+		};
+	}
+};
+
 //#endregion
 //#region packages/sdlc/dist/verification/probes/types.js
 /**
@@ -4603,6 +4949,7 @@ function createDefaultVerificationPipeline(bus, config) {
 		new TestSuiteCheck(),
 		new ContaminationCheck(),
 		new TestMutationCheck(),
+		new AcceptanceSpecCheck(),
 		new RuntimeProbeCheck(),
 		new SourceAcFidelityCheck(),
 		new SourceAcShelloutCheck(),
@@ -4977,210 +5324,6 @@ async function runAcTraceabilityCheck(input) {
 	};
 }
 
-//#endregion
-//#region packages/sdlc/dist/acceptance/registry.js
-/** Repo-relative path of the registry — the single canonical location. */
-const JOURNEY_REGISTRY_PATH = ".substrate/acceptance/journeys.yaml";
-const JourneySurfaceSchema = z.enum([
-	"email",
-	"cli",
-	"file",
-	"web"
-]);
-const JourneyEndStateSchema = z.object({
-	id: z.string().min(1, "end-state id must be a non-empty string"),
-	given: z.string().min(1, "given must be a non-empty string"),
-	walk: z.string().min(1, "walk must be a non-empty string"),
-	then: z.string().min(1, "then must be a non-empty string")
-});
-const JourneySchema = z.object({
-	id: z.string().min(1, "journey id must be a non-empty string"),
-	title: z.string().min(1, "title must be a non-empty string"),
-	criticality: z.enum(["critical", "standard"]),
-	surfaces: z.array(JourneySurfaceSchema).min(1, "a journey must declare at least one surface"),
-	epic: z.number().int().positive().optional(),
-	end_states: z.array(JourneyEndStateSchema).min(1, "a journey must declare at least one end_state — a journey with none is unjudgeable")
-});
-const JourneyRegistrySchema = z.object({
-	version: z.number().int().positive("version must be a positive integer"),
-	journeys: z.array(JourneySchema)
-}).superRefine((registry, ctx) => {
-	const seenJourneyIds = new Map();
-	registry.journeys.forEach((journey, i) => {
-		const firstIndex = seenJourneyIds.get(journey.id);
-		if (firstIndex !== void 0) ctx.addIssue({
-			code: "custom",
-			path: [
-				"journeys",
-				i,
-				"id"
-			],
-			message: `duplicate journey id "${journey.id}" (first declared at journeys[${firstIndex}])`
-		});
-		else seenJourneyIds.set(journey.id, i);
-		const seenEndStateIds = new Map();
-		journey.end_states.forEach((endState, j) => {
-			const firstEs = seenEndStateIds.get(endState.id);
-			if (firstEs !== void 0) ctx.addIssue({
-				code: "custom",
-				path: [
-					"journeys",
-					i,
-					"end_states",
-					j,
-					"id"
-				],
-				message: `duplicate end-state id "${endState.id}" in journey "${journey.id}" (first declared at end_states[${firstEs}])`
-			});
-			else seenEndStateIds.set(endState.id, j);
-		});
-	});
-});
-function zodErrorToValidationIssues(error) {
-	return error.issues.map((issue) => ({
-		path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
-		message: issue.message
-	}));
-}
-/**
-* Parse and validate registry YAML content.
-*
-* Never throws: malformed YAML, non-object documents, and schema violations
-* all come back as named, pathed issues.
-*/
-function parseJourneyRegistry(yamlContent) {
-	let doc;
-	try {
-		doc = load(yamlContent);
-	} catch (err) {
-		const message = err instanceof YAMLException ? err.message : String(err);
-		return {
-			ok: false,
-			issues: [{
-				path: "(root)",
-				message: `malformed YAML: ${message}`
-			}]
-		};
-	}
-	if (doc === null || doc === void 0) return {
-		ok: false,
-		issues: [{
-			path: "(root)",
-			message: "registry file is empty"
-		}]
-	};
-	const result = JourneyRegistrySchema.safeParse(doc);
-	if (!result.success) return {
-		ok: false,
-		issues: zodErrorToValidationIssues(result.error)
-	};
-	return {
-		ok: true,
-		registry: result.data
-	};
-}
-
-//#endregion
-//#region packages/sdlc/dist/acceptance/coverage.js
-/**
-* Compute the coverage state of every journey audited at this scope.
-*
-* - `{epic: n}` audits journeys declaring `epic: n`.
-* - `{final: true}` audits the FULL registry (epicless journeys have no
-*   earlier audit point; epic-scoped ones are re-audited — idempotent).
-*
-* State precedence: deferred > walked-fail > walked-pass > unwalked/unclaimed.
-* An operator deferral wins over everything (explicit scope decision); a fail
-* verdict wins over a pass (any failing end-state fails the journey).
-*/
-function computeJourneyCoverage(input) {
-	const { registry, claims, verdicts, deferredJourneyIds, scope } = input;
-	const audited = registry.journeys.filter((j) => "final" in scope ? true : j.epic === scope.epic);
-	const claimsByJourney = new Map();
-	for (const claim of claims) {
-		const owners = claimsByJourney.get(claim.journeyId) ?? [];
-		if (!owners.includes(claim.storyKey)) owners.push(claim.storyKey);
-		claimsByJourney.set(claim.journeyId, owners);
-	}
-	const deferred = new Set(deferredJourneyIds);
-	const verdictByJourney = new Map();
-	for (const v of verdicts) {
-		const existing = verdictByJourney.get(v.journeyId);
-		verdictByJourney.set(v.journeyId, existing === "fail" ? "fail" : v.verdict);
-	}
-	return audited.map((journey) => {
-		const ownerStories = claimsByJourney.get(journey.id) ?? [];
-		let state;
-		if (deferred.has(journey.id)) state = "deferred";
-		else {
-			const verdict = verdictByJourney.get(journey.id);
-			if (verdict === "fail") state = "walked-fail";
-			else if (verdict === "pass") state = "walked-pass";
-			else state = ownerStories.length > 0 ? "unwalked" : "unclaimed";
-		}
-		return {
-			journeyId: journey.id,
-			title: journey.title,
-			criticality: journey.criticality,
-			...journey.epic !== void 0 ? { epic: journey.epic } : {},
-			state,
-			ownerStories
-		};
-	});
-}
-/** Aggregate counts for the `acceptance:coverage` event payload. */
-function summarizeCoverage(entries) {
-	const summary = {
-		"walked-pass": 0,
-		"walked-fail": 0,
-		deferred: 0,
-		unclaimed: 0,
-		unwalked: 0
-	};
-	for (const entry of entries) summary[entry.state] += 1;
-	return summary;
-}
-/** Repo-relative path of the operator deferral file. */
-const JOURNEY_DEFERRALS_PATH = ".substrate/acceptance/deferrals.yaml";
-const JourneyDeferralSchema = z.object({
-	journey: z.string().min(1),
-	reason: z.string().min(1, "a deferral must carry an operator reason"),
-	deferred_at: z.string().optional()
-});
-const JourneyDeferralsFileSchema = z.object({ deferrals: z.array(JourneyDeferralSchema) });
-/** Parse deferrals YAML. Never throws; malformed content comes back as issues. */
-function parseJourneyDeferrals(yamlContent) {
-	let doc;
-	try {
-		doc = load(yamlContent);
-	} catch (err) {
-		const message = err instanceof YAMLException ? err.message : String(err);
-		return {
-			ok: false,
-			issues: [{
-				path: "(root)",
-				message: `malformed YAML: ${message}`
-			}]
-		};
-	}
-	if (doc === null || doc === void 0) return {
-		ok: true,
-		deferrals: []
-	};
-	const result = JourneyDeferralsFileSchema.safeParse(doc);
-	if (!result.success) return {
-		ok: false,
-		issues: result.error.issues.map((issue) => ({
-			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
-			message: issue.message
-		}))
-	};
-	return {
-		ok: true,
-		deferrals: result.data.deferrals
-	};
-}
-
 //#endregion
 //#region packages/sdlc/dist/acceptance/loader.js
 /** stderr shapes that mean "the path is not in the tree at this ref" (absent, not an error). */
@@ -5286,6 +5429,26 @@ async function loadJourneyDeferralsFromTrustedTree(repoRoot, ref = "HEAD") {
 	};
 }
 /**
+* Load the acceptance contract (the `acceptance:` block of the project
+* profile) from the trusted tree at `ref` (A1.1). Same H7 posture as the
+* registry: the agent-writable worktree copy of the profile is never read.
+*/
+async function loadAcceptanceContractFromTrustedTree(repoRoot, ref = "HEAD") {
+	const result = await runGitShow(repoRoot, ref, ACCEPTANCE_CONTRACT_PROFILE_PATH);
+	if (result.spawnError !== void 0) return {
+		status: "error",
+		message: `git show could not be spawned: ${result.spawnError}`
+	};
+	if (result.code !== 0) {
+		if (GIT_SHOW_ABSENT_PATTERNS.some((p) => p.test(result.stderr))) return { status: "absent" };
+		return {
+			status: "error",
+			message: `git show ${ref}:${ACCEPTANCE_CONTRACT_PROFILE_PATH} failed (exit ${String(result.code)}): ${result.stderr.trim()}`
+		};
+	}
+	return parseAcceptanceContract(result.stdout);
+}
+/**
 * Filesystem read for OPERATOR LINT ONLY (`substrate acceptance validate`).
 * Gate/judge code paths must use `loadJourneyRegistryFromTrustedTree`.
 */
@@ -6746,5 +6909,5 @@ async function resolveRunManifest(dbRoot, runId) {
 }
 
 //#endregion
-export { FindingsInjector, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseJourneyDeferrals, parseRuntimeProbes, parseStoryFrontmatter, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage };
-//# sourceMappingURL=manifest-read-B3gE46DX.js.map
+export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseRuntimeProbes, parseStoryFrontmatter, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage };
+//# sourceMappingURL=manifest-read-C0N7b9nH.js.map

package/dist/modules/interactive-prompt/index.js

@@ -1,6 +1,6 @@
 import "../../logger-KeHncl-f.js";
 import "../../dist-CpnLJuVw.js";
-import "../../manifest-read-B3gE46DX.js";
-import { runInteractivePrompt } from "../../interactive-prompt-BM5RaXYG.js";
+import "../../manifest-read-C0N7b9nH.js";
+import { runInteractivePrompt } from "../../interactive-prompt-BvY2FKsl.js";
 
 export { runInteractivePrompt };

package/dist/{run-ZxFHQyE_.js → run-C7PLGWT0.js}

@@ -1,11 +1,11 @@
-import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-Dnzblihr.js";
+import { BMAD_BASELINE_TOKENS_FULL, FileKvStore, STOP_AFTER_VALID_PHASES, STORY_KEY_PATTERN, VALID_PHASES, __commonJS, __require, __toESM, buildPipelineStatusOutput, createDatabaseAdapter, formatOutput, formatPipelineSummary, formatTokenTelemetry, inspectProcessTree, parseDbTimestampAsUtc, validateStoryKey } from "./health-hYMxKqAH.js";
 import { createLogger } from "./logger-KeHncl-f.js";
 import { TypedEventBusImpl, createEventBus, createTuiApp, isTuiCapable, printNonTtyWarning, sleep } from "./helpers-CElYrONe.js";
 import { ADVISORY_NOTES, BRANCH_PREFIX, CLAUDE_AUTH_FAILURE_HINT, CODEX_SANDBOX_BLOCK_HINT, Categorizer, ConsumerAnalyzer, DEFAULT_GLOBAL_SETTINGS, DispatcherImpl, DoltClient, ESCALATION_DIAGNOSIS, EXPERIMENT_RESULT, EfficiencyScorer, IngestionServer, LogTurnAnalyzer, OPERATIONAL_FINDING, Recommender, RoutingRecommender, RoutingResolver, RoutingTelemetry, RoutingTokenAccumulator, RoutingTuner, STORY_METRICS, STORY_OUTCOME, SubstrateConfigSchema, TEST_EXPANSION_FINDING, TEST_PLAN, TelemetryNormalizer, TelemetryPipeline, TurnAnalyzer, addTokenUsage, aggregateTokenUsageForRun, aggregateTokenUsageForStory, callLLM, classifyVersionGap, createConfigSystem, createDatabaseAdapter$1, createDecision, createGitWorktreeManager, createPipelineRun, createRequirement, detectClaudeAuthFailure, detectCodexSandboxBlock, detectInterfaceChanges, getArtifactByTypeForRun, getArtifactsByRun, getDecisionsByCategory, getDecisionsByPhase, getDecisionsByPhaseForRun, getLatestRun, getPipelineRunById, getRunMetrics, getRunningPipelineRuns, getStoryMetricsForRun, getTokenUsageSummary, initSchema, listRequirements, loadModelRoutingConfig, registerArtifact, swallowDebug, updatePipelineRun, updatePipelineRunConfig, upsertDecision, writeRunMetrics, writeStoryMetrics } from "./dist-CpnLJuVw.js";
-import { FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-B3gE46DX.js";
+import { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, RunManifest, RuntimeProbeListSchema, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromTrustedTree, parseRuntimeProbes, parseStoryFrontmatter, renderFindings, resolveGraphPath, resolveMainRepoRoot, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage } from "./manifest-read-C0N7b9nH.js";
 import { WorkGraphRepository, detectCycles } from "./work-graph-repository-DZyJv5pV.js";
 import { deriveExitCode, routeDecision } from "./decision-router-BAPpON_C.js";
-import { runInteractivePrompt } from "./interactive-prompt-BM5RaXYG.js";
+import { runInteractivePrompt } from "./interactive-prompt-BvY2FKsl.js";
 import { runRecoveryEngine } from "./recovery-engine-BKGBeBnW.js";
 import { basename, dirname, extname, join } from "path";
 import { access, readFile, readdir, stat } from "fs/promises";
@@ -983,7 +983,7 @@ const PIPELINE_EVENT_METADATA = [
 			{
 				name: "reason",
 				type: "string",
-				description: "Escalation reason. Common values: review-cycles-exhausted (default review-loop max hit); create-story-no-file (create-story phase did not write a story artifact); dev-story-no-commit (substrate auto-commit found no committable changes — agent produced nothing or all changes were outside the worktree); dev-story-commit-failed (substrate auto-commit failed — typically a pre-commit hook rejected the commit; stderr captured in issues); merge-to-main-error (unexpected error in the merge-to-main phase); merge-conflict-detected (story branch could not be merged due to conflicts); parent-tree-dirtied-by-run (uncommitted parent changes intersect the story diff — merge refused, H3.3); ff-only-merge-not-possible (base moved and merge_strategy is ff-only — set finalization.merge_strategy: three-way or integrate manually, H3.3); epic-gate-failed (finalization.epic_gate_command exited non-zero before the last story of an epic integrated, H3.4); story-file-missing (story artifact gone from working tree AND branch HEAD — check wip/feat commits on the story branch, H5.5); undisclosed-files-in-merge (a committed implementation file was never in the dev agent's files_modified, so no review cycle inspected it — inspect the branch, then re-dispatch with accurate files_modified or merge manually, H7); journey-unclaimed (acceptance.mode: blocking — a registered journey has NO story claiming it at epic close; wire it or defer via `substrate acceptance defer`, A0.3); journey-unwalked (acceptance.mode: blocking — a claimed journey was never walked by the acceptance gate at epic close, A0.3). v0.20.87+."
+				description: "Escalation reason. Common values: review-cycles-exhausted (default review-loop max hit); create-story-no-file (create-story phase did not write a story artifact); dev-story-no-commit (substrate auto-commit found no committable changes — agent produced nothing or all changes were outside the worktree); dev-story-commit-failed (substrate auto-commit failed — typically a pre-commit hook rejected the commit; stderr captured in issues); merge-to-main-error (unexpected error in the merge-to-main phase); merge-conflict-detected (story branch could not be merged due to conflicts); parent-tree-dirtied-by-run (uncommitted parent changes intersect the story diff — merge refused, H3.3); ff-only-merge-not-possible (base moved and merge_strategy is ff-only — set finalization.merge_strategy: three-way or integrate manually, H3.3); epic-gate-failed (finalization.epic_gate_command exited non-zero before the last story of an epic integrated, H3.4); story-file-missing (story artifact gone from working tree AND branch HEAD — check wip/feat commits on the story branch, H5.5); undisclosed-files-in-merge (a committed implementation file was never in the dev agent's files_modified, so no review cycle inspected it — inspect the branch, then re-dispatch with accurate files_modified or merge manually, H7); journey-unclaimed (acceptance.mode: blocking — a registered journey has NO story claiming it at epic close; wire it or defer via `substrate acceptance defer`, A0.3); journey-unwalked (acceptance.mode: blocking — a claimed journey was never walked by the acceptance gate at epic close, A0.3); acceptance-unrunnable (acceptance.mode: blocking — a journey registry exists but the committed acceptance contract/registry is absent or invalid, so claimed journeys can never be walked; declare an acceptance: block in the project profile, A1.1). v0.20.87+."
 			},
 			{
 				name: "cycles",
@@ -12202,6 +12202,28 @@ function assembleVerificationContext(opts) {
 	const profileBuildCommand = readProfileKey(trustedDir, "buildCommand");
 	const profileTestCommand = readProfileKey(trustedDir, "testCommand");
 	const trustedLanguages = readProfileLanguagesLocal(trustedDir);
+	let acceptanceSpecGuard;
+	if (opts.trustedProfileDir !== void 0) {
+		const readOrNull = (rel) => {
+			try {
+				const content = readFileSync(join$1(trustedDir, rel), "utf-8");
+				return content.trim().length > 0 ? content : null;
+			} catch {
+				return null;
+			}
+		};
+		const journeysTrusted = readOrNull(".substrate/acceptance/journeys.yaml");
+		if (journeysTrusted !== null) {
+			const profileTrusted = readOrNull(".substrate/project-profile.yaml");
+			const fixturesPath = readAcceptanceFixturesPathLocal(profileTrusted);
+			acceptanceSpecGuard = {
+				journeysTrusted,
+				deferralsTrusted: readOrNull(".substrate/acceptance/deferrals.yaml"),
+				profileTrusted,
+				...fixturesPath !== void 0 ? { fixturesPath } : {}
+			};
+		}
+	}
 	return {
 		storyKey: opts.storyKey,
 		workingDir: opts.workingDir,
@@ -12217,10 +12239,32 @@ function assembleVerificationContext(opts) {
 		...opts.modifiedTrackedFiles !== void 0 ? { modifiedTrackedFiles: opts.modifiedTrackedFiles } : {},
 		...profileBuildCommand !== void 0 ? { buildCommand: profileBuildCommand } : {},
 		...profileTestCommand !== void 0 ? { testCommand: profileTestCommand } : {},
-		...trustedLanguages.length > 0 ? { trustedLanguages } : {}
+		...trustedLanguages.length > 0 ? { trustedLanguages } : {},
+		...acceptanceSpecGuard !== void 0 ? { acceptanceSpecGuard } : {}
 	};
 }
 /**
+* A1.3: extract `fixtures:` from the `acceptance:` block of profile content.
+* Line-based (no yaml dependency, no sdlc value import) — tracks entry/exit
+* of the top-level acceptance block by indentation.
+*/
+function readAcceptanceFixturesPathLocal(profileContent) {
+	if (profileContent === null) return void 0;
+	let inAcceptance = false;
+	for (const line of profileContent.split("\n")) {
+		if (/^acceptance:\s*$/.test(line)) {
+			inAcceptance = true;
+			continue;
+		}
+		if (inAcceptance && /^\S/.test(line)) inAcceptance = false;
+		if (inAcceptance) {
+			const m = /^\s+fixtures:\s*['"]?([^'"\n#]+?)['"]?\s*$/.exec(line);
+			if (m?.[1] !== void 0) return m[1].trim();
+		}
+	}
+	return void 0;
+}
+/**
 * Read a single `<key>: value` line from `.substrate/project-profile.yaml`
 * under `workingDir` (H1.2). Line-based parse — no yaml dependency.
 */
@@ -13957,10 +14001,19 @@ function createImplementationOrchestrator(deps) {
 		if (mode === "off" || projectRoot === void 0) return void 0;
 		const registryLoad = await loadJourneyRegistryFromTrustedTree(projectRoot);
 		if (registryLoad.status === "absent") return void 0;
+		if (registryLoad.status === "invalid") return {
+			entries: [],
+			unrunnable: "journey registry is INVALID: " + registryLoad.issues.map((i) => `${i.path}: ${i.message}`).join("; ") + " — fix it (substrate acceptance validate) or the audit cannot run"
+		};
 		if (registryLoad.status !== "ok") {
-			logger$27.warn({ detail: registryLoad.status === "invalid" ? registryLoad.issues : registryLoad.message }, "A0.3: journey registry unreadable/invalid — coverage audit skipped (loud escalation for this is A1 acceptance-unrunnable scope)");
+			logger$27.warn({ detail: registryLoad.message }, "A0.3: journey registry read failed — coverage audit skipped (environmental)");
 			return void 0;
 		}
+		let unrunnable;
+		const contractLoad = await loadAcceptanceContractFromTrustedTree(projectRoot);
+		if (contractLoad.status === "absent") unrunnable = `journey registry exists but the committed project profile has no acceptance: contract block (${ACCEPTANCE_CONTRACT_PROFILE_PATH}) — claimed journeys can never be walked. Declare render commands per surface.`;
+		else if (contractLoad.status === "invalid") unrunnable = "acceptance: contract block is INVALID: " + contractLoad.issues.map((i) => `${i.path}: ${i.message}`).join("; ");
+		else if (contractLoad.status === "error") logger$27.warn({ detail: contractLoad.message }, "A1.1: acceptance contract read failed (environmental) — treating as absent for this audit");
 		const deferralsLoad = await loadJourneyDeferralsFromTrustedTree(projectRoot);
 		if (deferralsLoad.status !== "ok") logger$27.warn({ detail: deferralsLoad.status === "invalid" ? deferralsLoad.issues : deferralsLoad.message }, `A0.3: ${JOURNEY_DEFERRALS_PATH} unreadable/invalid — treating as no deferrals`);
 		const deferredJourneyIds = deferralsLoad.status === "ok" ? deferralsLoad.deferrals.map((d) => d.journey) : [];
@@ -13983,8 +14036,12 @@ function createImplementationOrchestrator(deps) {
 			entries,
 			summary: summarizeCoverage(entries)
 		});
+		if (unrunnable !== void 0) logger$27.warn({ scope: scopeLabel }, `A1.1: acceptance gate unrunnable — ${unrunnable}`);
 		if (opts?.persist === true && runManifest !== null) await runManifest.update({ journeys: entries }).catch((err) => logger$27.warn({ err }, "A0.3: manifest journeys ledger write failed — pipeline continues"));
-		return entries;
+		return unrunnable !== void 0 ? {
+			entries,
+			unrunnable
+		} : { entries };
 	}
 	function getStallThresholdMs(phase) {
 		return phase === "IN_DEV" ? DEV_STORY_STALL_THRESHOLD_MS : DEFAULT_STALL_THRESHOLD_MS;
@@ -16379,17 +16436,19 @@ function createImplementationOrchestrator(deps) {
 						const isLastOfEpicA = [..._stories.entries()].filter(([key]) => key !== storyKey && epicOfA(key) === epicIdA).every(([, st]) => TERMINAL_A.includes(st.phase));
 						const epicNum = Number(epicIdA);
 						if (isLastOfEpicA && Number.isInteger(epicNum)) {
-							const entries = await auditJourneyCoverage({ epic: epicNum });
-							const violations = (entries ?? []).filter((e) => e.state === "unclaimed" || e.state === "unwalked");
-							if (violations.length > 0) {
+							const audit = await auditJourneyCoverage({ epic: epicNum });
+							const violations = (audit?.entries ?? []).filter((e) => e.state === "unclaimed" || e.state === "unwalked");
+							if (violations.length > 0 || audit?.unrunnable !== void 0) {
 								const issueLines = violations.map((v) => `journey ${v.journeyId} [${v.criticality}] "${v.title}" is ${v.state}` + (v.ownerStories.length > 0 ? ` (claimed by ${v.ownerStories.join(", ")} but never walked)` : " — NO story claims it"));
+								if (audit?.unrunnable !== void 0) issueLines.push(audit.unrunnable);
 								if (acceptanceModeCfg === "blocking") {
-									const verdict = violations.some((v) => v.state === "unclaimed") ? "journey-unclaimed" : "journey-unwalked";
+									const verdict = violations.some((v) => v.state === "unclaimed") ? "journey-unclaimed" : audit?.unrunnable !== void 0 ? "acceptance-unrunnable" : "journey-unwalked";
 									logger$27.error({
 										storyKey,
 										epicId: epicIdA,
+										verdict,
 										journeys: violations.map((v) => v.journeyId)
-									}, "A0.3: journey coverage violation at epic close — blocking finalization; branch preserved");
+									}, "A0.3/A1.1: journey coverage violation at epic close — blocking finalization; branch preserved");
 									updateStory(storyKey, {
 										phase: "ESCALATED",
 										error: verdict,
@@ -48303,4 +48362,4 @@ function registerRunCommand(program, version = "0.0.0", projectRoot = process.cw
 
 //#endregion
 export { AdapterTelemetryPersistence, AppError, DoltRepoMapMetaRepository, DoltSymbolRepository, ERR_REPO_MAP_STORAGE_WRITE, EpicIngester, GLOBSTAR$1 as GLOBSTAR, GitClient, GrammarLoader, Minimatch$1 as Minimatch, Minipass, RepoMapInjector, RepoMapModule, RepoMapQueryEngine, RepoMapStorage, SymbolParser, createContextCompiler, createDispatcher, createEventEmitter, createImplementationOrchestrator, createPackLoader, createPhaseOrchestrator, createStopAfterGate, createTelemetryAdvisor, escape$1 as escape, formatPhaseCompletionSummary, getFactoryRunSummaries, getScenarioResultsForRun, getTwinRunsForRun, listGraphRuns, normalizeGraphSummaryToStatus, registerExportCommand, registerFactoryCommand, registerRunCommand, registerScenariosCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, resolveStoryKeys, runAnalysisPhase, runPlanningPhase, runProbeAuthor, runRunAction, runSolutioningPhase, unescape$1 as unescape, validateStopAfterFromConflict, wireNdjsonEmitter };
-//# sourceMappingURL=run-ZxFHQyE_.js.map
+//# sourceMappingURL=run-C7PLGWT0.js.map

package/dist/{run-ChZFveqv.js → run-CHMwDPRx.js}

@@ -1,14 +1,14 @@
-import "./health-Dnzblihr.js";
+import "./health-hYMxKqAH.js";
 import "./logger-KeHncl-f.js";
 import "./helpers-CElYrONe.js";
 import "./dist-CpnLJuVw.js";
-import "./manifest-read-B3gE46DX.js";
-import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-ZxFHQyE_.js";
+import "./manifest-read-C0N7b9nH.js";
+import { normalizeGraphSummaryToStatus, registerRunCommand, resolveMaxReviewCycles, resolveProbeAuthorStateIntegrating, runRunAction, wireNdjsonEmitter } from "./run-C7PLGWT0.js";
 import "./routing-DFxoKHDt.js";
 import "./work-graph-repository-DZyJv5pV.js";
 import "./decisions-CzSIEeGP.js";
 import "./decision-router-BAPpON_C.js";
-import "./interactive-prompt-BM5RaXYG.js";
+import "./interactive-prompt-BvY2FKsl.js";
 import "./recovery-engine-BKGBeBnW.js";
 
 export { runRunAction };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "substrate-ai",
-  "version": "0.21.3",
+  "version": "0.21.5",
   "description": "Substrate — multi-agent orchestration daemon for AI coding agents",
   "type": "module",
   "license": "MIT",