substrate-ai 0.21.4 → 0.21.6

package/dist/{manifest-read-DZDlSq_s.js → manifest-read-D7HcgX21.js}

@@ -1,5 +1,5 @@
 import { createLogger } from "./logger-KeHncl-f.js";
-import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-CpnLJuVw.js";
+import { LEARNING_FINDING, createDecision, getDecisionsByCategory } from "./dist-DeyV_vqU.js";
 import * as path$1 from "path";
 import { join } from "path";
 import { readFile } from "fs/promises";
@@ -2613,13 +2613,13 @@ var ContaminationCheck = class {
 //#region packages/sdlc/dist/verification/checks/test-mutation-check.js
 /** Heuristic: is this path a test file? Covers the JS/TS/Python/Go idioms. */
 function isTestPath(file) {
-	const norm = file.replace(/\\/g, "/").toLowerCase();
-	const base = norm.split("/").pop() ?? "";
-	if (/(^|\/)(__tests__|tests?)\//.test(norm)) return true;
+	const norm$1 = file.replace(/\\/g, "/").toLowerCase();
+	const base = norm$1.split("/").pop() ?? "";
+	if (/(^|\/)(__tests__|tests?)\//.test(norm$1)) return true;
 	if (/\.(test|spec)\.[a-z]+$/.test(base)) return true;
 	if (/^test_.*\.py$/.test(base) || /_test\.(py|go)$/.test(base)) return true;
 	if (base === "conftest.py") return true;
-	if (/(^|\/)(fixtures|factories|testsupport|test-support|test_support|__mocks__|__fixtures__)\//.test(norm)) return true;
+	if (/(^|\/)(fixtures|factories|testsupport|test-support|test_support|__mocks__|__fixtures__)\//.test(norm$1)) return true;
 	return false;
 }
 var TestMutationCheck = class {
@@ -2649,6 +2649,351 @@ var TestMutationCheck = class {
 	}
 };
 
+//#endregion
+//#region packages/sdlc/dist/acceptance/registry.js
+/** Repo-relative path of the registry — the single canonical location. */
+const JOURNEY_REGISTRY_PATH = ".substrate/acceptance/journeys.yaml";
+const JourneySurfaceSchema = z.enum([
+	"email",
+	"cli",
+	"file",
+	"web"
+]);
+const JourneyEndStateSchema = z.object({
+	id: z.string().min(1, "end-state id must be a non-empty string"),
+	given: z.string().min(1, "given must be a non-empty string"),
+	walk: z.string().min(1, "walk must be a non-empty string"),
+	then: z.string().min(1, "then must be a non-empty string")
+});
+const JourneySchema = z.object({
+	id: z.string().min(1, "journey id must be a non-empty string"),
+	title: z.string().min(1, "title must be a non-empty string"),
+	criticality: z.enum(["critical", "standard"]),
+	surfaces: z.array(JourneySurfaceSchema).min(1, "a journey must declare at least one surface"),
+	epic: z.number().int().positive().optional(),
+	end_states: z.array(JourneyEndStateSchema).min(1, "a journey must declare at least one end_state — a journey with none is unjudgeable")
+});
+const JourneyRegistrySchema = z.object({
+	version: z.number().int().positive("version must be a positive integer"),
+	journeys: z.array(JourneySchema)
+}).superRefine((registry, ctx) => {
+	const seenJourneyIds = new Map();
+	registry.journeys.forEach((journey, i) => {
+		const firstIndex = seenJourneyIds.get(journey.id);
+		if (firstIndex !== void 0) ctx.addIssue({
+			code: "custom",
+			path: [
+				"journeys",
+				i,
+				"id"
+			],
+			message: `duplicate journey id "${journey.id}" (first declared at journeys[${firstIndex}])`
+		});
+		else seenJourneyIds.set(journey.id, i);
+		const seenEndStateIds = new Map();
+		journey.end_states.forEach((endState, j) => {
+			const firstEs = seenEndStateIds.get(endState.id);
+			if (firstEs !== void 0) ctx.addIssue({
+				code: "custom",
+				path: [
+					"journeys",
+					i,
+					"end_states",
+					j,
+					"id"
+				],
+				message: `duplicate end-state id "${endState.id}" in journey "${journey.id}" (first declared at end_states[${firstEs}])`
+			});
+			else seenEndStateIds.set(endState.id, j);
+		});
+	});
+});
+function zodErrorToValidationIssues(error) {
+	return error.issues.map((issue) => ({
+		path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+		message: issue.message
+	}));
+}
+/**
+* Parse and validate registry YAML content.
+*
+* Never throws: malformed YAML, non-object documents, and schema violations
+* all come back as named, pathed issues.
+*/
+function parseJourneyRegistry(yamlContent) {
+	let doc;
+	try {
+		doc = load(yamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			ok: false,
+			issues: [{
+				path: "(root)",
+				message: `malformed YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0) return {
+		ok: false,
+		issues: [{
+			path: "(root)",
+			message: "registry file is empty"
+		}]
+	};
+	const result = JourneyRegistrySchema.safeParse(doc);
+	if (!result.success) return {
+		ok: false,
+		issues: zodErrorToValidationIssues(result.error)
+	};
+	return {
+		ok: true,
+		registry: result.data
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/acceptance/coverage.js
+/**
+* Compute the coverage state of every journey audited at this scope.
+*
+* - `{epic: n}` audits journeys declaring `epic: n`.
+* - `{final: true}` audits the FULL registry (epicless journeys have no
+*   earlier audit point; epic-scoped ones are re-audited — idempotent).
+*
+* State precedence: deferred > walked-fail > walked-pass > unwalked/unclaimed.
+* An operator deferral wins over everything (explicit scope decision); a fail
+* verdict wins over a pass (any failing end-state fails the journey).
+*/
+function computeJourneyCoverage(input) {
+	const { registry, claims, verdicts, deferredJourneyIds, scope } = input;
+	const audited = registry.journeys.filter((j) => "final" in scope ? true : j.epic === scope.epic);
+	const claimsByJourney = new Map();
+	for (const claim of claims) {
+		const owners = claimsByJourney.get(claim.journeyId) ?? [];
+		if (!owners.includes(claim.storyKey)) owners.push(claim.storyKey);
+		claimsByJourney.set(claim.journeyId, owners);
+	}
+	const deferred = new Set(deferredJourneyIds);
+	const verdictByJourney = new Map();
+	for (const v of verdicts) {
+		const existing = verdictByJourney.get(v.journeyId);
+		verdictByJourney.set(v.journeyId, existing === "fail" ? "fail" : v.verdict);
+	}
+	return audited.map((journey) => {
+		const ownerStories = claimsByJourney.get(journey.id) ?? [];
+		let state;
+		if (deferred.has(journey.id)) state = "deferred";
+		else {
+			const verdict = verdictByJourney.get(journey.id);
+			if (verdict === "fail") state = "walked-fail";
+			else if (verdict === "pass") state = "walked-pass";
+			else state = ownerStories.length > 0 ? "unwalked" : "unclaimed";
+		}
+		return {
+			journeyId: journey.id,
+			title: journey.title,
+			criticality: journey.criticality,
+			...journey.epic !== void 0 ? { epic: journey.epic } : {},
+			state,
+			ownerStories
+		};
+	});
+}
+/** Aggregate counts for the `acceptance:coverage` event payload. */
+function summarizeCoverage(entries) {
+	const summary = {
+		"walked-pass": 0,
+		"walked-fail": 0,
+		deferred: 0,
+		unclaimed: 0,
+		unwalked: 0
+	};
+	for (const entry of entries) summary[entry.state] += 1;
+	return summary;
+}
+/** Repo-relative path of the operator deferral file. */
+const JOURNEY_DEFERRALS_PATH = ".substrate/acceptance/deferrals.yaml";
+const JourneyDeferralSchema = z.object({
+	journey: z.string().min(1),
+	reason: z.string().min(1, "a deferral must carry an operator reason"),
+	deferred_at: z.string().optional()
+});
+const JourneyDeferralsFileSchema = z.object({ deferrals: z.array(JourneyDeferralSchema) });
+/** Parse deferrals YAML. Never throws; malformed content comes back as issues. */
+function parseJourneyDeferrals(yamlContent) {
+	let doc;
+	try {
+		doc = load(yamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			ok: false,
+			issues: [{
+				path: "(root)",
+				message: `malformed YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0) return {
+		ok: true,
+		deferrals: []
+	};
+	const result = JourneyDeferralsFileSchema.safeParse(doc);
+	if (!result.success) return {
+		ok: false,
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
+			message: issue.message
+		}))
+	};
+	return {
+		ok: true,
+		deferrals: result.data.deferrals
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/acceptance/contract.js
+/** The acceptance contract lives inside the project profile. */
+const ACCEPTANCE_CONTRACT_PROFILE_PATH = ".substrate/project-profile.yaml";
+const RenderSurfaceSchema = z.object({ render: z.string().min(1) }).strict();
+const WebSurfaceSchema = z.object({
+	serve: z.string().min(1),
+	ready: z.string().optional()
+}).strict();
+const AcceptanceContractSchema = z.object({
+	fixtures: z.string().optional(),
+	surfaces: z.object({
+		email: RenderSurfaceSchema.optional(),
+		cli: RenderSurfaceSchema.optional(),
+		file: RenderSurfaceSchema.optional(),
+		web: WebSurfaceSchema.optional()
+	}).strict()
+}).strict();
+/**
+* Extract + validate the `acceptance:` block from project-profile YAML
+* content. `absent` when the profile has no block (legal — the coverage
+* audit escalates registry-present+contract-absent as acceptance-unrunnable
+* in blocking mode; pure accounting still works without one).
+*/
+function parseAcceptanceContract(profileYamlContent) {
+	let doc;
+	try {
+		doc = load(profileYamlContent);
+	} catch (err) {
+		const message = err instanceof YAMLException ? err.message : String(err);
+		return {
+			status: "invalid",
+			issues: [{
+				path: "(root)",
+				message: `malformed profile YAML: ${message}`
+			}]
+		};
+	}
+	if (doc === null || doc === void 0 || typeof doc !== "object") return { status: "absent" };
+	const block = doc["acceptance"];
+	if (block === void 0 || block === null) return { status: "absent" };
+	const result = AcceptanceContractSchema.safeParse(block);
+	if (!result.success) return {
+		status: "invalid",
+		issues: result.error.issues.map((issue) => ({
+			path: issue.path.length > 0 ? `acceptance.${issue.path.map(String).join(".")}` : "acceptance",
+			message: issue.message
+		}))
+	};
+	return {
+		status: "ok",
+		contract: result.data
+	};
+}
+
+//#endregion
+//#region packages/sdlc/dist/verification/checks/acceptance-spec-check.js
+async function readWorktreeCopy(workingDir, relPath) {
+	try {
+		return await readFile$1(join$1(workingDir, relPath), "utf-8");
+	} catch {
+		return null;
+	}
+}
+const norm = (s) => s === null ? null : s.replace(/\r\n/g, "\n").trim();
+/** Compare only the acceptance BLOCK of the profile (other profile keys are ContaminationCheck/H7 territory). */
+function acceptanceBlockFingerprint(profileContent) {
+	if (profileContent === null) return "absent";
+	const parsed = parseAcceptanceContract(profileContent);
+	if (parsed.status === "absent") return "absent";
+	if (parsed.status === "invalid") return "invalid:" + JSON.stringify(parsed.issues);
+	return JSON.stringify(parsed.contract);
+}
+var AcceptanceSpecCheck = class {
+	name = "acceptance-spec";
+	tier = "A";
+	async run(context) {
+		const start = Date.now();
+		const guard = context.acceptanceSpecGuard;
+		if (guard === void 0) return {
+			status: "pass",
+			details: "no acceptance spec guard in context (acceptance not configured or non-worktree dispatch)",
+			duration_ms: Date.now() - start,
+			findings: []
+		};
+		const findings = [];
+		const rawSpecs = [{
+			path: JOURNEY_REGISTRY_PATH,
+			trusted: guard.journeysTrusted
+		}, {
+			path: JOURNEY_DEFERRALS_PATH,
+			trusted: guard.deferralsTrusted
+		}];
+		for (const spec of rawSpecs) {
+			const worktree = await readWorktreeCopy(context.workingDir, spec.path);
+			const trustedNorm = norm(spec.trusted);
+			const worktreeNorm = norm(worktree);
+			if (trustedNorm === worktreeNorm) continue;
+			const shape = trustedNorm === null ? "INTRODUCED in the story worktree (acceptance specs are planning/operator-authored, never story output)" : worktreeNorm === null ? "DELETED in the story worktree" : "DIVERGES from the trusted copy";
+			findings.push({
+				category: "acceptance-spec-tampered",
+				severity: "error",
+				message: `${spec.path} ${shape}. The acceptance gate reads the trusted tree, so this edit cannot fool the current audit — but merging it would change every FUTURE audit. Revert it or make the change through planning (operator commit outside a story).`
+			});
+		}
+		const worktreeProfile = await readWorktreeCopy(context.workingDir, ACCEPTANCE_CONTRACT_PROFILE_PATH);
+		const trustedFp = acceptanceBlockFingerprint(guard.profileTrusted);
+		const worktreeFp = acceptanceBlockFingerprint(worktreeProfile);
+		if (trustedFp !== worktreeFp) findings.push({
+			category: "acceptance-spec-tampered",
+			severity: "error",
+			message: `the acceptance: contract block in ${ACCEPTANCE_CONTRACT_PROFILE_PATH} differs between the story worktree and the trusted tree (render-command laundering shape). Revert the worktree edit.`
+		});
+		if (guard.fixturesPath !== void 0) {
+			const prefix = guard.fixturesPath.replace(/\\/g, "/").replace(/\/+$/, "") + "/";
+			const touched = (context.changedFiles ?? []).filter((f) => {
+				const n = f.replace(/\\/g, "/");
+				return n.startsWith(prefix) || n === prefix.slice(0, -1);
+			});
+			if (touched.length > 0) findings.push({
+				category: "acceptance-fixture-mutation",
+				severity: "warn",
+				message: `story modified ${String(touched.length)} file(s) under the declared acceptance fixtures path (${guard.fixturesPath}): ${touched.slice(0, 10).join(", ")}` + (touched.length > 10 ? ` (+${String(touched.length - 10)} more)` : "") + `. The judge grounds verdicts in these fixtures — review whether the change tilts the walk.`
+			});
+		}
+		if (findings.length === 0) return {
+			status: "pass",
+			details: "acceptance specs match the trusted tree; no fixture mutations",
+			duration_ms: Date.now() - start,
+			findings: []
+		};
+		const hasError = findings.some((f) => f.severity === "error");
+		return {
+			status: hasError ? "fail" : "warn",
+			details: renderFindings(findings),
+			duration_ms: Date.now() - start,
+			findings
+		};
+	}
+};
+
 //#endregion
 //#region packages/sdlc/dist/verification/probes/types.js
 /**
@@ -4604,6 +4949,7 @@ function createDefaultVerificationPipeline(bus, config) {
 		new TestSuiteCheck(),
 		new ContaminationCheck(),
 		new TestMutationCheck(),
+		new AcceptanceSpecCheck(),
 		new RuntimeProbeCheck(),
 		new SourceAcFidelityCheck(),
 		new SourceAcShelloutCheck(),
@@ -4844,396 +5190,137 @@ function tokenize(s) {
 	return new Set(words);
 }
 /**
-* Compute Jaccard-based word overlap between two strings.
-* Returns 0 when either string has no tokens.
-*/
-function wordOverlap(a, b) {
-	const setA = tokenize(a);
-	const setB = tokenize(b);
-	if (setA.size === 0 || setB.size === 0) return 0;
-	let intersection = 0;
-	for (const w of setA) if (setB.has(w)) intersection++;
-	const union = new Set([...setA, ...setB]).size;
-	return intersection / union;
-}
-/**
-* Extract numbered AC items from the `## Acceptance Criteria` section of a
-* story spec. Handles both plain `## Acceptance Criteria` headings and the
-* bold-wrapped variant `**Acceptance Criteria:**`.
-*
-* Stops scanning at the next `##` heading (or end-of-file).
-*
-* Returns an array of trimmed AC text strings (numbering stripped).
-*/
-function parseAcList(storyContent) {
-	const lines = storyContent.split("\n");
-	const items = [];
-	let inAcSection = false;
-	for (const line of lines) {
-		if (/^##\s+Acceptance Criteria/i.test(line) || /\*\*Acceptance Criteria:\*\*/i.test(line)) {
-			inAcSection = true;
-			continue;
-		}
-		if (inAcSection && /^##\s/.test(line)) break;
-		if (!inAcSection) continue;
-		const numbered = line.match(/^\s*(?:\d+[.):]|AC\d+[.):])\s*(.+)/);
-		if (numbered) {
-			const text = (numbered[1] ?? "").trim();
-			if (text.length > 0) items.push(text);
-		}
-	}
-	return items;
-}
-const TEST_FILE_PATTERNS = [
-	/\.test\.ts$/,
-	/\.test\.js$/,
-	/test/i
-];
-/** Returns true when the path matches a known test file pattern. */
-function isTestFile(path$3) {
-	return TEST_FILE_PATTERNS.some((p) => p.test(path$3));
-}
-const TEST_DESC_RE = /(?:describe|it|test)\s*\(\s*['"`]([^'"`]+)['"`]/g;
-/**
-* Extract all string literals passed to `describe(`, `it(`, or `test(` in the
-* provided source text.
-*/
-function extractTestDescriptions(source) {
-	const results = [];
-	let m;
-	TEST_DESC_RE.lastIndex = 0;
-	while ((m = TEST_DESC_RE.exec(source)) !== null) {
-		const desc = m[1];
-		if (desc !== void 0 && desc.trim().length > 0) results.push(desc.trim());
-	}
-	return results;
-}
-/**
-* Run the AC-to-test traceability heuristic.
-*
-* Steps:
-*   1. Parse AC list from `input.storyContent`.
-*   2. Filter `input.filesModified` to test files.
-*   3. Read each test file and extract describe/it/test descriptions.
-*   4. For each AC × each test description, compute word-overlap score.
-*   5. A score ≥ 0.4 marks the AC as "matched".
-*   6. Return the matrix with `confidence: 'approximate'`.
-*
-* File I/O errors are silently ignored per file (the file is simply skipped).
-* When no test files are found, all ACs are "not matched" and a warning is emitted.
-*/
-async function runAcTraceabilityCheck(input) {
-	const { storyKey, storyContent, filesModified } = input;
-	const fileReader = input._readFile ?? ((p) => readFile(p, "utf-8"));
-	const warnings = [];
-	const acList = parseAcList(storyContent);
-	const testFiles = filesModified.filter(isTestFile);
-	if (testFiles.length === 0) {
-		warnings.push(`No test files found in filesModified for story ${storyKey}. All ACs marked as unmatched.`);
-		const matrix$1 = acList.map((acText) => ({
-			acText,
-			matched: false,
-			testName: null,
-			score: 0
-		}));
-		return {
-			storyKey,
-			matrix: matrix$1,
-			confidence: "approximate",
-			warnings
-		};
-	}
-	const allTestDescriptions = [];
-	for (const filePath of testFiles) try {
-		const source = await fileReader(filePath);
-		if (source != null) {
-			const descs = extractTestDescriptions(source);
-			allTestDescriptions.push(...descs);
-		}
-	} catch {}
-	const MATCH_THRESHOLD = .4;
-	const matrix = acList.map((acText) => {
-		let bestScore = 0;
-		let bestTestName = null;
-		for (const desc of allTestDescriptions) {
-			const score = wordOverlap(acText, desc);
-			if (score > bestScore) {
-				bestScore = score;
-				bestTestName = desc;
-			}
-		}
-		const matched = bestScore >= MATCH_THRESHOLD;
-		return {
-			acText,
-			matched,
-			testName: matched ? bestTestName : null,
-			score: bestScore
-		};
-	});
-	return {
-		storyKey,
-		matrix,
-		confidence: "approximate",
-		warnings
-	};
-}
-
-//#endregion
-//#region packages/sdlc/dist/acceptance/registry.js
-/** Repo-relative path of the registry — the single canonical location. */
-const JOURNEY_REGISTRY_PATH = ".substrate/acceptance/journeys.yaml";
-const JourneySurfaceSchema = z.enum([
-	"email",
-	"cli",
-	"file",
-	"web"
-]);
-const JourneyEndStateSchema = z.object({
-	id: z.string().min(1, "end-state id must be a non-empty string"),
-	given: z.string().min(1, "given must be a non-empty string"),
-	walk: z.string().min(1, "walk must be a non-empty string"),
-	then: z.string().min(1, "then must be a non-empty string")
-});
-const JourneySchema = z.object({
-	id: z.string().min(1, "journey id must be a non-empty string"),
-	title: z.string().min(1, "title must be a non-empty string"),
-	criticality: z.enum(["critical", "standard"]),
-	surfaces: z.array(JourneySurfaceSchema).min(1, "a journey must declare at least one surface"),
-	epic: z.number().int().positive().optional(),
-	end_states: z.array(JourneyEndStateSchema).min(1, "a journey must declare at least one end_state — a journey with none is unjudgeable")
-});
-const JourneyRegistrySchema = z.object({
-	version: z.number().int().positive("version must be a positive integer"),
-	journeys: z.array(JourneySchema)
-}).superRefine((registry, ctx) => {
-	const seenJourneyIds = new Map();
-	registry.journeys.forEach((journey, i) => {
-		const firstIndex = seenJourneyIds.get(journey.id);
-		if (firstIndex !== void 0) ctx.addIssue({
-			code: "custom",
-			path: [
-				"journeys",
-				i,
-				"id"
-			],
-			message: `duplicate journey id "${journey.id}" (first declared at journeys[${firstIndex}])`
-		});
-		else seenJourneyIds.set(journey.id, i);
-		const seenEndStateIds = new Map();
-		journey.end_states.forEach((endState, j) => {
-			const firstEs = seenEndStateIds.get(endState.id);
-			if (firstEs !== void 0) ctx.addIssue({
-				code: "custom",
-				path: [
-					"journeys",
-					i,
-					"end_states",
-					j,
-					"id"
-				],
-				message: `duplicate end-state id "${endState.id}" in journey "${journey.id}" (first declared at end_states[${firstEs}])`
-			});
-			else seenEndStateIds.set(endState.id, j);
-		});
-	});
-});
-function zodErrorToValidationIssues(error) {
-	return error.issues.map((issue) => ({
-		path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
-		message: issue.message
-	}));
-}
-/**
-* Parse and validate registry YAML content.
-*
-* Never throws: malformed YAML, non-object documents, and schema violations
-* all come back as named, pathed issues.
-*/
-function parseJourneyRegistry(yamlContent) {
-	let doc;
-	try {
-		doc = load(yamlContent);
-	} catch (err) {
-		const message = err instanceof YAMLException ? err.message : String(err);
-		return {
-			ok: false,
-			issues: [{
-				path: "(root)",
-				message: `malformed YAML: ${message}`
-			}]
-		};
-	}
-	if (doc === null || doc === void 0) return {
-		ok: false,
-		issues: [{
-			path: "(root)",
-			message: "registry file is empty"
-		}]
-	};
-	const result = JourneyRegistrySchema.safeParse(doc);
-	if (!result.success) return {
-		ok: false,
-		issues: zodErrorToValidationIssues(result.error)
-	};
-	return {
-		ok: true,
-		registry: result.data
-	};
-}
-
-//#endregion
-//#region packages/sdlc/dist/acceptance/coverage.js
-/**
-* Compute the coverage state of every journey audited at this scope.
+* Compute Jaccard-based word overlap between two strings.
+* Returns 0 when either string has no tokens.
+*/
+function wordOverlap(a, b) {
+	const setA = tokenize(a);
+	const setB = tokenize(b);
+	if (setA.size === 0 || setB.size === 0) return 0;
+	let intersection = 0;
+	for (const w of setA) if (setB.has(w)) intersection++;
+	const union = new Set([...setA, ...setB]).size;
+	return intersection / union;
+}
+/**
+* Extract numbered AC items from the `## Acceptance Criteria` section of a
+* story spec. Handles both plain `## Acceptance Criteria` headings and the
+* bold-wrapped variant `**Acceptance Criteria:**`.
 *
-* - `{epic: n}` audits journeys declaring `epic: n`.
-* - `{final: true}` audits the FULL registry (epicless journeys have no
-*   earlier audit point; epic-scoped ones are re-audited — idempotent).
+* Stops scanning at the next `##` heading (or end-of-file).
 *
-* State precedence: deferred > walked-fail > walked-pass > unwalked/unclaimed.
-* An operator deferral wins over everything (explicit scope decision); a fail
-* verdict wins over a pass (any failing end-state fails the journey).
+* Returns an array of trimmed AC text strings (numbering stripped).
 */
-function computeJourneyCoverage(input) {
-	const { registry, claims, verdicts, deferredJourneyIds, scope } = input;
-	const audited = registry.journeys.filter((j) => "final" in scope ? true : j.epic === scope.epic);
-	const claimsByJourney = new Map();
-	for (const claim of claims) {
-		const owners = claimsByJourney.get(claim.journeyId) ?? [];
-		if (!owners.includes(claim.storyKey)) owners.push(claim.storyKey);
-		claimsByJourney.set(claim.journeyId, owners);
-	}
-	const deferred = new Set(deferredJourneyIds);
-	const verdictByJourney = new Map();
-	for (const v of verdicts) {
-		const existing = verdictByJourney.get(v.journeyId);
-		verdictByJourney.set(v.journeyId, existing === "fail" ? "fail" : v.verdict);
-	}
-	return audited.map((journey) => {
-		const ownerStories = claimsByJourney.get(journey.id) ?? [];
-		let state;
-		if (deferred.has(journey.id)) state = "deferred";
-		else {
-			const verdict = verdictByJourney.get(journey.id);
-			if (verdict === "fail") state = "walked-fail";
-			else if (verdict === "pass") state = "walked-pass";
-			else state = ownerStories.length > 0 ? "unwalked" : "unclaimed";
+function parseAcList(storyContent) {
+	const lines = storyContent.split("\n");
+	const items = [];
+	let inAcSection = false;
+	for (const line of lines) {
+		if (/^##\s+Acceptance Criteria/i.test(line) || /\*\*Acceptance Criteria:\*\*/i.test(line)) {
+			inAcSection = true;
+			continue;
 		}
-		return {
-			journeyId: journey.id,
-			title: journey.title,
-			criticality: journey.criticality,
-			...journey.epic !== void 0 ? { epic: journey.epic } : {},
-			state,
-			ownerStories
-		};
-	});
+		if (inAcSection && /^##\s/.test(line)) break;
+		if (!inAcSection) continue;
+		const numbered = line.match(/^\s*(?:\d+[.):]|AC\d+[.):])\s*(.+)/);
+		if (numbered) {
+			const text = (numbered[1] ?? "").trim();
+			if (text.length > 0) items.push(text);
+		}
+	}
+	return items;
 }
-/** Aggregate counts for the `acceptance:coverage` event payload. */
-function summarizeCoverage(entries) {
-	const summary = {
-		"walked-pass": 0,
-		"walked-fail": 0,
-		deferred: 0,
-		unclaimed: 0,
-		unwalked: 0
-	};
-	for (const entry of entries) summary[entry.state] += 1;
-	return summary;
+const TEST_FILE_PATTERNS = [
+	/\.test\.ts$/,
+	/\.test\.js$/,
+	/test/i
+];
+/** Returns true when the path matches a known test file pattern. */
+function isTestFile(path$3) {
+	return TEST_FILE_PATTERNS.some((p) => p.test(path$3));
 }
-/** Repo-relative path of the operator deferral file. */
-const JOURNEY_DEFERRALS_PATH = ".substrate/acceptance/deferrals.yaml";
-const JourneyDeferralSchema = z.object({
-	journey: z.string().min(1),
-	reason: z.string().min(1, "a deferral must carry an operator reason"),
-	deferred_at: z.string().optional()
-});
-const JourneyDeferralsFileSchema = z.object({ deferrals: z.array(JourneyDeferralSchema) });
-/** Parse deferrals YAML. Never throws; malformed content comes back as issues. */
-function parseJourneyDeferrals(yamlContent) {
-	let doc;
-	try {
-		doc = load(yamlContent);
-	} catch (err) {
-		const message = err instanceof YAMLException ? err.message : String(err);
-		return {
-			ok: false,
-			issues: [{
-				path: "(root)",
-				message: `malformed YAML: ${message}`
-			}]
-		};
+const TEST_DESC_RE = /(?:describe|it|test)\s*\(\s*['"`]([^'"`]+)['"`]/g;
+/**
+* Extract all string literals passed to `describe(`, `it(`, or `test(` in the
+* provided source text.
+*/
+function extractTestDescriptions(source) {
+	const results = [];
+	let m;
+	TEST_DESC_RE.lastIndex = 0;
+	while ((m = TEST_DESC_RE.exec(source)) !== null) {
+		const desc = m[1];
+		if (desc !== void 0 && desc.trim().length > 0) results.push(desc.trim());
 	}
-	if (doc === null || doc === void 0) return {
-		ok: true,
-		deferrals: []
-	};
-	const result = JourneyDeferralsFileSchema.safeParse(doc);
-	if (!result.success) return {
-		ok: false,
-		issues: result.error.issues.map((issue) => ({
-			path: issue.path.length > 0 ? issue.path.map(String).join(".") : "(root)",
-			message: issue.message
-		}))
-	};
-	return {
-		ok: true,
-		deferrals: result.data.deferrals
-	};
+	return results;
 }
-
-//#endregion
-//#region packages/sdlc/dist/acceptance/contract.js
-/** The acceptance contract lives inside the project profile. */
-const ACCEPTANCE_CONTRACT_PROFILE_PATH = ".substrate/project-profile.yaml";
-const RenderSurfaceSchema = z.object({ render: z.string().min(1) }).strict();
-const WebSurfaceSchema = z.object({
-	serve: z.string().min(1),
-	ready: z.string().optional()
-}).strict();
-const AcceptanceContractSchema = z.object({
-	fixtures: z.string().optional(),
-	surfaces: z.object({
-		email: RenderSurfaceSchema.optional(),
-		cli: RenderSurfaceSchema.optional(),
-		file: RenderSurfaceSchema.optional(),
-		web: WebSurfaceSchema.optional()
-	}).strict()
-}).strict();
 /**
-* Extract + validate the `acceptance:` block from project-profile YAML
-* content. `absent` when the profile has no block (legal — the coverage
-* audit escalates registry-present+contract-absent as acceptance-unrunnable
-* in blocking mode; pure accounting still works without one).
+* Run the AC-to-test traceability heuristic.
+*
+* Steps:
+*   1. Parse AC list from `input.storyContent`.
+*   2. Filter `input.filesModified` to test files.
+*   3. Read each test file and extract describe/it/test descriptions.
+*   4. For each AC × each test description, compute word-overlap score.
+*   5. A score ≥ 0.4 marks the AC as "matched".
+*   6. Return the matrix with `confidence: 'approximate'`.
+*
+* File I/O errors are silently ignored per file (the file is simply skipped).
+* When no test files are found, all ACs are "not matched" and a warning is emitted.
 */
-function parseAcceptanceContract(profileYamlContent) {
-	let doc;
-	try {
-		doc = load(profileYamlContent);
-	} catch (err) {
-		const message = err instanceof YAMLException ? err.message : String(err);
+async function runAcTraceabilityCheck(input) {
+	const { storyKey, storyContent, filesModified } = input;
+	const fileReader = input._readFile ?? ((p) => readFile(p, "utf-8"));
+	const warnings = [];
+	const acList = parseAcList(storyContent);
+	const testFiles = filesModified.filter(isTestFile);
+	if (testFiles.length === 0) {
+		warnings.push(`No test files found in filesModified for story ${storyKey}. All ACs marked as unmatched.`);
+		const matrix$1 = acList.map((acText) => ({
+			acText,
+			matched: false,
+			testName: null,
+			score: 0
+		}));
 		return {
-			status: "invalid",
-			issues: [{
-				path: "(root)",
-				message: `malformed profile YAML: ${message}`
-			}]
+			storyKey,
+			matrix: matrix$1,
+			confidence: "approximate",
+			warnings
 		};
 	}
-	if (doc === null || doc === void 0 || typeof doc !== "object") return { status: "absent" };
-	const block = doc["acceptance"];
-	if (block === void 0 || block === null) return { status: "absent" };
-	const result = AcceptanceContractSchema.safeParse(block);
-	if (!result.success) return {
-		status: "invalid",
-		issues: result.error.issues.map((issue) => ({
-			path: issue.path.length > 0 ? `acceptance.${issue.path.map(String).join(".")}` : "acceptance",
-			message: issue.message
-		}))
-	};
+	const allTestDescriptions = [];
+	for (const filePath of testFiles) try {
+		const source = await fileReader(filePath);
+		if (source != null) {
+			const descs = extractTestDescriptions(source);
+			allTestDescriptions.push(...descs);
+		}
+	} catch {}
+	const MATCH_THRESHOLD = .4;
+	const matrix = acList.map((acText) => {
+		let bestScore = 0;
+		let bestTestName = null;
+		for (const desc of allTestDescriptions) {
+			const score = wordOverlap(acText, desc);
+			if (score > bestScore) {
+				bestScore = score;
+				bestTestName = desc;
+			}
+		}
+		const matched = bestScore >= MATCH_THRESHOLD;
+		return {
+			acText,
+			matched,
+			testName: matched ? bestTestName : null,
+			score: bestScore
+		};
+	});
 	return {
-		status: "ok",
-		contract: result.data
+		storyKey,
+		matrix,
+		confidence: "approximate",
+		warnings
 	};
 }
 
@@ -5740,8 +5827,19 @@ const RunManifestSchema = z.object({
 			"unclaimed",
 			"unwalked"
 		]),
-		ownerStories: z.array(z.string())
+		ownerStories: z.array(z.string()),
+		verdicts: z.array(z.object({
+			end_state_id: z.string(),
+			verdict: z.enum([
+				"PASS",
+				"FAIL",
+				"UNREACHABLE"
+			]),
+			artifact: z.string(),
+			excerpt: z.string()
+		})).optional()
 	})).optional(),
+	acceptance_report_path: z.string().optional(),
 	generation: z.number().int().nonnegative(),
 	created_at: z.string(),
 	updated_at: z.string()
@@ -6823,4 +6921,4 @@ async function resolveRunManifest(dbRoot, runId) {
 
 //#endregion
 export { ACCEPTANCE_CONTRACT_PROFILE_PATH, FindingsInjector, JOURNEY_DEFERRALS_PATH, JOURNEY_REGISTRY_PATH, RunManifest, RuntimeProbeListSchema, SupervisorLock, ZERO_FINDINGS_BY_AUTHOR, ZERO_FINDING_COUNTS, ZERO_PROBE_AUTHOR_METRICS, aggregateProbeAuthorMetrics, applyConfigToGraph, computeJourneyCoverage, createDefaultVerificationPipeline, createGraphOrchestrator, createSdlcCodeReviewHandler, createSdlcCreateStoryHandler, createSdlcDevStoryHandler, createSdlcPhaseHandler, detectsEventDrivenAC, detectsStateIntegratingAC, extractTargetFilesFromStoryContent, loadAcceptanceContractFromTrustedTree, loadJourneyDeferralsFromTrustedTree, loadJourneyRegistryFromFile, loadJourneyRegistryFromTrustedTree, parseAcceptanceContract, parseJourneyDeferrals, parseRuntimeProbes, parseStoryFrontmatter, readCurrentRunId, renderFindings, resolveGraphPath, resolveMainRepoRoot, resolveRunManifest, rollupFindingCounts, rollupFindingsByAuthor, rollupProbeAuthorByClass, rollupProbeAuthorMetrics, runAcTraceabilityCheck, runStaleVerificationRecovery, summarizeCoverage };
-//# sourceMappingURL=manifest-read-DZDlSq_s.js.map
+//# sourceMappingURL=manifest-read-D7HcgX21.js.map