@ornexus/neocortex 4.60.16

package/packages/client/dist/commands/invoke.js

@@ -0,0 +1,140 @@
+import{createHash as Ce}from"node:crypto";import{existsSync as z,readFileSync as Q,unlinkSync as dt,writeFileSync as ut,mkdirSync as lt,statSync as pt}from"node:fs";import{join as M}from"node:path";import{homedir as se}from"node:os";import{LicenseClient as ft}from"../license/license-client.js";import{EncryptedCache as ye}from"../cache/encrypted-cache.js";import{NoOpCache as mt}from"../types/index.js";import{resolveClientPreFlightTrigger as gt,TierAwareClient as ht}from"../tier/tier-aware-client.js";import{loadSecureConfig as Et}from"../config/secure-config.js";import{DEFAULT_SERVER_URL as _t}from"../constants.js";import{detectFirstRunLocale as It,renderFirstRunMessage as St}from"../i18n/first-run.js";import{humanizeError as Ae,formatHumanizedError as Te,detectErrorLocale as ve}from"../errors/error-messages.js";import{degradeStateSnapshotForPayloadLimit as Ct,projectStateSnapshotForInvoke as yt}from"../state/project-state-snapshot.js";import{maybeRepairStateJsonBeforeInvoke as At,StateRepairHardStopError as Tt}from"../state/state-json-repair.js";import{bootstrapArchitectureMemory as vt}from"../memory/project-memory-writer.js";import{RUNNER_BOOTSTRAP_POLICY_REASON_CODES as wt,classifyRunnerBootstrapPolicyFromArgs as Rt}from"../continuity/runner-bootstrap-policy.js";import{RUNNER_SCHEDULER_BOOTSTRAP_REASON_CODES as bt,ensureRunnerSchedulerBootstrap as Nt}from"../runner/scheduler.js";import{CONTINUITY_INVOKE_WATCH_DEFAULT_LIMIT as we,CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_IDLE_POLLS as Re,CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_POLLS as be,CONTINUITY_INVOKE_WATCH_DEFAULT_POLL_INTERVAL_MS as Ne,openContinuityClientStateStore as Ot}from"../continuity/continuity-client-state-store.js";import{isLocalJobsConsoleArgs as Lt,runLocalJobsConsoleCommand as kt}from"../runner/local-console.js";const Z=M(se(),".neocortex"),Oe=M(Z,"cache"),Le=M(Oe,"menu-cache.json"),ke=1440*60*1e3,xe=3e4,H="3.9.62",Pe=256*1024,je=Pe,De=.8,W="[REDACTED]",xt=1e5,ee=2e3,Pt=200,jt=200,Dt=12,Ut=/(?:promptBody|workflow|workflowGraph|stepBody|privateUrl|rawLog|secret|credential|licenseKey|apiKey|internalRouting|serverOnly|proprietary|protected)/i,Mt=/(?:PRIVATE|PROTECTED|SERVER_ONLY)[-_\s]*(?:PROMPT|PROMPT_BODY|WORKFLOW|WORKFLOW_GRAPH|STEP_BODY|STEP|ROUTING)\s*[:=][^\n\r]*/gi,Wt=/(?:https?:\/\/(?:localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1\]|private|internal)[^\s"'<>]*|raw[_-]?log|transcript|stack\s*trace|stderr:|stdout:|system prompt|prompt body|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH)|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=)/gi,ie=Math.floor(Pe*De),Ue=M(Z,".first-run-shown"),$t="<!-- NEOCORTEX-MEMORY-START -->";function Bt(e){return/^\s*\*?init(?:\s|$)/i.test(e)}function Ht(e){const t=M(e,"NEOCORTEX.md"),n=z(t)?Q(t,"utf8"):void 0,r=n===void 0?["missing_canonical_memory"]:[n.includes($t)?void 0:"missing_managed_memory_block",n.length>18e3?"canonical_memory_over_budget":void 0,/api[-_ ]?key|license[-_ ]?key|password\s*[:=]|secret\s*[:=]/i.test(n)?"possible_secret_shape_detected":void 0].filter(p=>!!p),a=["AGENTS.md","CLAUDE.md","GEMINI.md",".opencode/AGENTS.md",".cursor/rules/neocortex.mdc",".github/copilot-instructions.md"].filter(p=>z(M(e,p))),s=r.includes("possible_secret_shape_detected")?"low":r.length===0?"high":a.length>0?"medium":"low",c=vt(e);return{canonical:{path:"NEOCORTEX.md",exists:n!==void 0,incompleteReasons:r,confidence:s},permittedSources:{packageBuildFiles:c.repositoryMap?.find(p=>p.startsWith("Package/build files:"))?.split(",").length??0,architectureReadmeDocs:c.architectureReferences?.length??0,runtimeConfigTemplates:c.environmentPractices?.[0]?.startsWith("Runtime/config templates:")?c.environmentPractices[0].split(",").length:0,platformWrappers:a.length},wrapperFiles:a,recommendedPreviewCommand:'neocortex-client refresh-memory --dry-run --project-root "$PROJECT_ROOT"',recommendedRefreshCommand:'neocortex-client refresh-memory --project-root "$PROJECT_ROOT"',guardrails:["Use only permitted bootstrap sources; never read real .env files or credentials into memory.","Preserve human-authored wrapper content outside Neocortex managed blocks.","Do not reset .neocortex/state.json or depend on legacy planning.current during init bootstrap."]}}function Vt(){try{if(z(Ue))return;const e=It(),t=St(e);process.stderr.write(t);try{lt(Z,{recursive:!0}),ut(Ue,new Date().toISOString(),"utf-8")}catch{}}catch{}}function ce(e,t=process.cwd()){return e&&e.trim().length>0?e:t}const Ft=new Set(["completed","aborted","cancelled"]),Jt=new Set(["watch-target-missing","watch-target-malformed","watch-target-ambiguous","watch-target-multiple"]),T=Object.freeze({COMPLETED:"invoke-watch-completed",CANCELLED:"invoke-watch-cancelled",IDLE_TIMEOUT:"invoke-watch-idle-timeout",MAX_POLLS:"invoke-watch-max-polls",STORE_UNAVAILABLE:"invoke-watch-store-unavailable",TARGET_UNRESOLVED:"invoke-watch-target-unresolved"}),w=Object.freeze({MISSING:"watch-target-missing",MALFORMED:"watch-target-malformed",AMBIGUOUS:"watch-target-ambiguous",CONFLICT:"watch-target-conflicting-evidence",SERVER_HELD_STREAM:"watch-target-server-held-stream-unsupported"}),h=Object.freeze({OK:"continuity-ok",WATCH_NO_SUMMARIES_YET:"watch-no-summaries-yet",WATCH_CURSOR_ADVANCED:"watch-cursor-advanced",WATCH_CURSOR_UNCHANGED:"watch-cursor-unchanged",WATCH_RENDER_PENDING:"watch-render-pending",WATCH_STOP_IDLE_LIMIT_REACHED:"watch-stop-idle-limit-reached",WATCH_STOP_MAX_POLLS_REACHED:"watch-stop-max-polls-reached",WATCH_TARGET_UNRESOLVED:"watch-target-unresolved",WATCH_SNAPSHOT_UNAVAILABLE:"watch-snapshot-unavailable",WATCH_EVIDENCE_UNAVAILABLE:"watch-evidence-unavailable"}),Me=240,Gt=/(https?:\/\/\S+|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?log|transcript|stack\s*trace|stderr:|stdout:|system prompt|prompt body|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH))/i;function Kt(e){return e.replace(/[\w.+-]+@[\w-]+\.[\w.-]+/g,W).replace(/(?:sk|pk|whsec|nxk)[-_](?:test|live|ant|proj|pro|free|enterprise)?[-_]?[A-Za-z0-9_-]{16,}/g,W).replace(/NX-[FPE]-[a-f0-9]{24}-[a-f0-9]{4}/g,W).replace(/eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,W).replace(Mt,W).replace(Wt,W)}function V(e,t){const n=Kt(e);return n.length<=t?n:`${n.slice(0,t)}\u2026[TRUNCATED:${n.length-t}]`}function de(e,t=0,n=new WeakSet){if(t>Dt)return"[MAX_DEPTH]";if(e==null)return e;if(typeof e=="string")return V(e,ee);if(typeof e=="number")return Number.isFinite(e)?e:null;if(typeof e=="boolean")return e;if(typeof e=="bigint")return String(e);if(typeof e=="function"||typeof e=="symbol"||typeof e!="object")return;if(n.has(e))return"[CIRCULAR]";if(n.add(e),Array.isArray(e))return e.slice(0,Pt).map(o=>de(o,t+1,n));const r={};for(const[o,a]of Object.entries(e).slice(0,jt)){if(Ut.test(o)){r[o]=W;continue}const s=de(a,t+1,n);s!==void 0&&(r[o]=s)}return r}function ue(e,t){return{instructions:V(e??"",xt),metadata:t?de(t):void 0}}class k extends Error{code;constructor(t,n){super(n),this.name="InvokeCliInputError",this.code=t}}class We extends Error{code="PAYLOAD_TOO_LARGE";telemetry;constructor(t){super(`PAYLOAD_TOO_LARGE: invoke request is ${t.payloadBytes} bytes after deterministic degradation; limit is ${t.limitBytes}. Reduce command input or local state context and retry.`),this.name="InvokePayloadTooLargeError",this.telemetry=t}}let le=!1;function zt(e){const t=[];if(!e||typeof e!="object")return t;const n=e,r=n.planning;if(r&&(r.current!==void 0||Array.isArray(r.history))&&t.push({code:"PLANNING_LEGACY",message:"legacy `planning.current`/`planning.history` detected (not read by v1 orchestrator)"}),Array.isArray(n.stories)&&t.push({code:"STORIES_AS_ARRAY",message:"`stories` is an Array (expected Object keyed by story ID)"}),n.epics&&typeof n.epics=="object"&&!Array.isArray(n.epics))for(const[a,s]of Object.entries(n.epics)){const c=s;if(c&&c.stories!==void 0&&!Array.isArray(c.stories)){t.push({code:"EPIC_STORIES_NOT_ARRAY",message:`epic "${a}" has non-array \`stories\` field (expected string[] of story IDs)`});break}}const o=n.epics&&typeof n.epics=="object"&&Object.keys(n.epics).length>0||n.stories&&typeof n.stories=="object"&&!Array.isArray(n.stories)&&Object.keys(n.stories).length>0||Array.isArray(n.stories)||r&&r.current!==void 0;return n.schema_version===void 0?o&&t.push({code:"SCHEMA_VERSION_MISSING",message:"`schema_version` field missing (expected: `schema_version: 1`)"}):n.schema_version!==1&&t.push({code:"SCHEMA_VERSION_OUTDATED",message:`schema_version=${String(n.schema_version)} (expected: 1)`}),t}function Yt(e){if(!(le||e.length===0)){le=!0;try{const t=e.map(n=>`  - ${n.message}`).join(`
+`);process.stderr.write(`[Neocortex] state.json schema drift detected:
+${t}
+  Run \`neocortex *migrate-state --preview\` to inspect or \`neocortex *migrate-state --apply\` to migrate.
+  See docs/arquitetura-software/STATE-JSON-SCHEMA.md for the schema contract.
+`)}catch{}}}function vr(){le=!1}function $e(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"&&t.length>0):[]}function qt(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"&&t.length>0):[]}function g(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function te(e){return typeof e=="number"&&Number.isFinite(e)&&e>0?e:void 0}function y(e){if(typeof e!="string")return;const t=e.trim();if(t)return t.replace(/[^a-z0-9_.:-]+/gi,"_").slice(0,120)}function pe(e,t){if(!g(e))return;const n={};for(const r of t){const o=e[r];if(typeof o=="boolean")n[r]=o;else if(typeof o=="number"&&Number.isFinite(o))n[r]=o;else if(typeof o=="string"){const a=y(o);a&&(n[r]=a)}}return Object.keys(n).length>0?n:void 0}function Xt(e){if(!g(e))return;const t={...y(e.active_epic_id??e.activeEpicId)?{active_epic_id:y(e.active_epic_id??e.activeEpicId)}:{},...y(e.active_story_id??e.activeStoryId)?{active_story_id:y(e.active_story_id??e.activeStoryId)}:{},...y(e.active_step_id??e.activeStepId)?{active_step_id:y(e.active_step_id??e.activeStepId)}:{},...y(e.session_id??e.sessionId)?{session_id:y(e.session_id??e.sessionId)}:{},...y(e.started_at??e.startedAt)?{started_at:y(e.started_at??e.startedAt)}:{}};return Object.keys(t).length>0?t:void 0}function Qt(e){const t=pe(e.completionEvidence??e.completion_evidence,["prNumber","pr_number","prState","pr_state","pullRequestState","merged","mergedAt","issueNumber","issue_number","issueState","issue_state","closedAt"]),n=pe(e.issueCloseAudit??e.issue_close_audit,["schema_version","event","storyId","epicId","issueNumber","closedAt","publicSafe","rawLogStorage"]),r=pe(e.scopedCiEvidence??e.scoped_ci_evidence,["schema_version","storyId","epicId","prNumber","finalState","publicSafe","rawLogStorage"]);return{...typeof e.merged=="boolean"?{merged:e.merged}:{},...typeof e.safeToContinueYoloop=="boolean"?{safeToContinueYoloop:e.safeToContinueYoloop}:{},...typeof e.mergeBlockedRemotely=="boolean"?{mergeBlockedRemotely:e.mergeBlockedRemotely}:{},...y(e.physicalMergeStatus)?{physicalMergeStatus:y(e.physicalMergeStatus)}:{},...y(e.pr_state??e.prState??e.pull_request_state??e.pullRequestState)?{pr_state:y(e.pr_state??e.prState??e.pull_request_state??e.pullRequestState)}:{},...y(e.issue_state??e.issueState??e.workflow_issue_state)?{issue_state:y(e.issue_state??e.issueState??e.workflow_issue_state)}:{},...te(e.issue_number??e.issueNumber)?{issue_number:te(e.issue_number??e.issueNumber)}:{},...t?{completionEvidence:t}:{},...n?{issueCloseAudit:n}:{},...r?{scopedCiEvidence:r}:{}}}function Zt(e){const t=M(e,".neocortex","state.json");if(!z(t))return{config:{project_name:"unknown",default_branch:"main",language:"pt-BR"},stories:{},epics:{}};let n;try{const l=Q(t,"utf-8");n=JSON.parse(l)}catch{return{config:{project_name:"unknown",default_branch:"main",language:"pt-BR"},stories:{},epics:{}}}try{const l=zt(n);l.length>0&&Yt(l)}catch{}const r=n.config??n.project??{},o=n.stories??{},a={};for(const[l,d]of Object.entries(o))a[l]={id:d.id??l,title:d.title,epic_id:d.epic_id,status:d.status??"backlog",steps_completed:d.steps_completed??[],last_step:d.last_step??null,branch_name:d.branch_name??null,pr_number:d.pr_number,...te(d.workflow_issue)?{workflow_issue:te(d.workflow_issue)}:{},...Qt(d),depends_on:$e(d.depends_on),files_to_modify:qt(d.files_to_modify),risk:typeof d.risk=="string"?d.risk:void 0,blast_radius:typeof d.blast_radius=="number"?d.blast_radius:void 0};const s=n.epics??{},c={};for(const[l,d]of Object.entries(s))c[l]={id:d.id??l,title:d.title,status:d.status,stories:d.stories,total_stories:d.total_stories,completed_stories:d.completed_stories,depends_on:$e(d.depends_on)};const p=Xt(n.current_session??n.currentSession);return{schema_version:typeof n.schema_version=="number"?n.schema_version:void 0,config:{project_name:r.project_name??r.name??"unknown",default_branch:r.default_branch??"main",language:r.language??"pt-BR",yolo_mode:r.yolo_mode,user_name:r.user_name,worktree_base:r.worktree_base,max_parallel_stories:r.max_parallel_stories},stories:a,epics:c,...p?{current_session:p}:{}}}function wr(e,t){return{kind:"full",trigger:e,targetEpicId:null,targetStoryId:null,includedStoryCount:Object.keys(t.stories).length,includedEpicCount:Object.keys(t.epics).length,omittedStoryCount:0,omittedEpicCount:0,reason:"full-state",projectionMode:"full-compatible"}}const Be="neocortex:menu:cache";async function en(e){try{const t=await e.get(Be);if(!t)return null;const n=JSON.parse(t);return n.version!==H||Date.now()-n.cachedAt>ke?null:n}catch{return null}}async function tn(e,t,n){try{const r={instructions:t,metadata:n,cachedAt:Date.now(),version:H};await e.set(Be,JSON.stringify(r),ke),nn()}catch{}}function nn(){try{z(Le)&&dt(Le)}catch{}}function rn(){return Et()}async function on(e,t){try{let n;if(t){const s=M(Z,"cache");n=new ye({cacheDir:s,passphrase:t})}else process.stderr.write(`[neocortex] Warning: No license key in config. Run "neocortex activate" to re-authenticate.
+`),n=new mt;const r=new ft({serverUrl:e,licenseKey:t??"",cacheProvider:n}),o=await r.getToken();if(!o)return null;const a=new ht({cacheProvider:n,licenseClient:r});return{token:o,client:r,tierClient:a}}catch{return null}}let He=!1;function Ve(e){return Ce("sha256").update(e).digest("hex")}function an(){const e=Number(process.env.NEOCORTEX_INVOKE_CHUNK_BYTES??"49152");return Number.isFinite(e)&&e>=1024&&e<=98304?Math.floor(e):49152}function sn(e,t,n){return`args-${Ce("sha256").update("invoke-materialization:v1").update(e).update(String(t)).update(JSON.stringify(n)).digest("hex")}`}async function Fe(e,t,n,r){const o=await fetch(`${e}${t}`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`,"X-Client-Version":H},body:JSON.stringify(n)}),a=await o.text().catch(()=>""),s=(()=>{try{return a?JSON.parse(a):{}}catch{return{}}})();if(!o.ok){const c=typeof s.error_code=="string"?s.error_code:`HTTP_${o.status}`,p=typeof s.message=="string"?s.message:"materialization upload failed";throw new Error(`${c}: ${p}`)}return s}async function cn(e,t,n){const r=Buffer.from(t,"utf8"),o=an(),a=[];for(let S=0,m=0;S<r.byteLength;S+=o,m++){const I=r.subarray(S,Math.min(S+o,r.byteLength));a.push({index:m,sha256:Ve(I),byteLength:I.byteLength})}const s=Ve(r),c=sn(s,r.byteLength,a),p=Number(process.env.NEOCORTEX_INVOKE_CHUNK_TTL_SECONDS??"900");for(const S of a){const m=S.index*o,I=r.subarray(m,m+S.byteLength);await Fe(e,"/api/v1/invoke/materialization/chunks",{manifestId:c,index:S.index,sha256:S.sha256,byteLength:S.byteLength,contentBase64:I.toString("base64"),ttlSeconds:p,idempotencyKey:`${c}:${S.index}:${S.sha256}`},n)}const d=(await Fe(e,"/api/v1/invoke/materialization/manifests",{manifestId:c,sha256:s,byteLength:r.byteLength,chunkCount:a.length,chunks:a,ttlSeconds:p,retry:{attempt:1,budget:3,idempotencyKey:c}},n)).argsRef;if(!d?.manifestId)throw new Error("MATERIALIZATION_RESPONSE_INVALID: missing argsRef");return{argsRef:d,chunks:a}}function F(e){return Buffer.byteLength(JSON.stringify(e),"utf8")}function dn(...e){const t=new Set,n=[];for(const r of e)for(const o of r??[]){const a=y(o);if(!(!a||t.has(a))&&(t.add(a),n.push(a),n.length>=16))return n}return n}function un(e){const t=e.graphRetrieval;if(!g(t))return{accepted:!1,itemCount:0};const n=Array.isArray(t.items)?t.items.length:0;return{accepted:n>0||typeof t.retrievalId=="string"||t.accepted===!0,itemCount:n}}function fe(e,t=F(e),n=[],r={}){const o=e.stateSnapshot.scope,a=Object.keys(e.stateSnapshot.stories).length,s=Object.keys(e.stateSnapshot.epics).length,c=o?.kind??"full";return{schemaVersion:1,payloadBytes:t,limitBytes:r.limitBytes??je,warningThresholdBytes:r.warningThresholdBytes??ie,scope:{kind:c,...o?.projectionMode?{projectionMode:o.projectionMode}:{},commandId:o?.commandId??null,stateProjectionPolicy:o?.stateProjectionPolicy??null},includedStories:o?.includedStoryCount??a,omittedStories:o?.omittedStoryCount??0,includedEpics:o?.includedEpicCount??s,omittedEpics:o?.omittedEpicCount??0,graphRetrieval:un(e.stateSnapshot),reasonCodes:dn(n,o?.reasonCodes),publicSafe:!0}}function ln(e){const t=g(e.budget)?e.budget:void 0,n=typeof t?.maxPayloadBytes=="number"&&Number.isFinite(t.maxPayloadBytes)?t.maxPayloadBytes:12*1024;return Math.max(1024,Math.min(n,12*1024))}function pn(e){return g(e)?{stableId:y(e.stableId)??"unknown",...g(e.source)?{source:e.source}:{},reasonCode:"budget_exceeded"}:{stableId:"unknown",reasonCode:"budget_exceeded"}}function Je(e){const t=Array.isArray(e)?e.filter(n=>typeof n=="string"):[];return t.includes("budget_exceeded")?t:[...t,"budget_exceeded"]}function fn(e){const t=e.graphRetrieval;if(!g(t)||!Array.isArray(t.items))return e;const n=ln(t);let r=[...t.items],o=Array.isArray(t.skipped)?[...t.skipped]:[],a=t;for(;Buffer.byteLength(JSON.stringify(a),"utf8")>n&&r.length>0;){const s=r.pop();o=[...o,pn(s)].slice(-32),a={...t,items:r,skipped:o,warnings:Je(t.warnings)}}return Buffer.byteLength(JSON.stringify(a),"utf8")>n&&(a={...t,query:typeof t.query=="string"?t.query.slice(0,240):t.query,items:[],skipped:[],warnings:Je(t.warnings)}),a===t?e:{...e,graphRetrieval:a}}function mn(e,t={}){const n=t.limitBytes??je,r=t.warningThresholdBytes??Math.floor(n*De),o=F(e);if(o<=n)return{body:e,degraded:!1,telemetry:fe(e,o,["payload-within-limit"],{limitBytes:n,warningThresholdBytes:r})};let a={...e,stateSnapshot:Ct(e.stateSnapshot)},s=["payload-size-guardrail","state-degraded"],c=F(a);c>n&&(a={...a,stateSnapshot:fn(a.stateSnapshot)},s=[...s,"graph-retrieval-budget-enforced"],c=F(a));const p=fe(a,c,s,{limitBytes:n,warningThresholdBytes:r});if(c>n)throw new We(p);return{body:a,degraded:!0,telemetry:p}}function gn(e){return rt(e)??e.trim().split(/\s+/,1)[0]?.slice(0,80)??"(empty)"}function Ge(e){return e.args!==void 0?gn(e.args):`argsRef:${e.argsRef.manifestId.slice(0,80)}`}function hn(e){const t=F(e);if(t<ie)return t;const n=fe(e,t,["payload-warning-threshold"]);return process.stderr.write(`[Neocortex] invoke payload near server limit: trigger=${Ge(e)} scope=${n.scope.kind} mode=${n.scope.projectionMode??n.scope.kind} payloadBytes=${n.payloadBytes} limit=${n.limitBytes} includedStories=${n.includedStories} omittedStories=${n.omittedStories} includedEpics=${n.includedEpics} omittedEpics=${n.omittedEpics} graphRetrieval.accepted=${n.graphRetrieval.accepted} graphRetrieval.itemCount=${n.graphRetrieval.itemCount} reasonCodes=${n.reasonCodes.join(",")||"none"}
+`),t}function Ke(e,t){process.stderr.write(`[Neocortex] invoke payload guardrail: trigger=${Ge(e)} scope.kind=${t.scope.kind} payloadBytes=${t.payloadBytes} limit=${t.limitBytes} includedStories=${t.includedStories} omittedStories=${t.omittedStories} includedEpics=${t.includedEpics} omittedEpics=${t.omittedEpics} graphRetrieval.accepted=${t.graphRetrieval.accepted} graphRetrieval.itemCount=${t.graphRetrieval.itemCount} reasonCodes=${t.reasonCodes.join(",")||"none"}
+`)}async function En(e){const t=Rt(e.args,{platformTarget:e.platformTarget,environment:e.environment??process.env});if(t.action==="skipped")return{shouldContinue:!0,attachToRequest:_n(t),metadata:ze(t)};const n=e.bootstrapper??Nt;let r;try{r=await n({projectRoot:e.projectRoot,env:e.environment??process.env})}catch{r={ok:!1,attempted:!0,installed:!1,started:!1,cached:!1,projectKey:"unknown",reasonCodes:[bt.UNEXPECTED_ERROR],publicSummary:"runner scheduler bootstrap stopped unexpectedly.",publicSafe:!0}}const o=ze(t,r);if(r.ok)return{shouldContinue:!0,attachToRequest:!0,metadata:o};const a=o.reasonCodes.slice(0,5).join(",");return t.failurePolicy==="fail-open"?{shouldContinue:!0,attachToRequest:!0,metadata:{...o,failOpenWarning:!0},warning:`Runner auto-bootstrap warning (${a}); continuing fail-open for operator command.`}:{shouldContinue:!1,attachToRequest:!1,metadata:o,errorCode:"RUNNER_BOOTSTRAP_REQUIRED_FAILED",error:`Runner auto-bootstrap required but failed (${a}). Run neocortex-runner doctor or retry after resolving scheduler setup.`,exitCode:1}}function _n(e){return!e.reasonCodes.includes(wt.SKIPPED_NON_CONTINUITY_COMMAND)}function ze(e,t){return{schemaVersion:1,action:e.action,failurePolicy:e.failurePolicy,command:e.command,operation:e.operation,attempted:t?.attempted??!1,ok:t?.ok??!0,cached:t?.cached??!1,installed:t?.installed??!1,started:t?.started??!1,...t?.projectKey?{projectKey:t.projectKey}:{},reasonCodes:N([...e.reasonCodes,...t?.reasonCodes??[]]),publicSummary:t?.publicSummary??e.publicSummary,publicSafe:!0}}function N(e){return Array.from(new Set(e.map(t=>t.slice(0,120))))}function ne(e,t,n){const r=Math.floor(e??t);return Number.isFinite(r)?Math.max(1,Math.min(n,r)):t}function re(e,t){const n=process.env[e];if(!n)return t;const r=Number(n);return Number.isFinite(r)?r:t}function E(e,t=Me){const n=typeof e=="string"&&e.trim().length>0?e.trim():"unknown",r=V(n,t),o=Gt.test(r)?W:r;return o.length<=t?o:`${o.slice(0,t)}\u2026[TRUNCATED:${o.length-t}]`}function me(e,t=Me){if(!(typeof e!="string"||e.trim().length===0))return E(e,t)}function ge(e,t,n,r){const o=me(e?.targetId??t,120),a=e?.selectorKind??(o?Ee(o):void 0),s=(e?.relatedJobIds??[]).map(c=>me(c,120)).filter(c=>!!c);return{schemaVersion:1,contractVersion:"continuity-v1",targetResolutionState:n,...a?{targetKind:a}:{},...o?{targetId:o}:{},...t?{targetJobId:E(t,120)}:{},...e?.jobId?{jobId:E(e.jobId,120)}:{},...e?.goalId?{goalId:E(e.goalId,120)}:{},...e?.loopId?{loopId:E(e.loopId,120)}:{},...s.length>0?{relatedJobIds:s}:{},relatedJobCount:s.length,reasonCodes:N(r.length>0?r:[h.OK]),publicSafe:!0}}function D(e,t,n,r,o=[]){const a=(e?.redactions?.length??0)>0,s=e?a?"unsafe":n&&r===0?"empty":"available":"unavailable",c=me(t[t.length-1]?.eventId,120),p=o.length>0?o:s==="unavailable"?[h.WATCH_SNAPSHOT_UNAVAILABLE]:s==="empty"?[h.WATCH_NO_SUMMARIES_YET]:[h.OK];return{schemaVersion:1,contractVersion:"continuity-v1",snapshotStatus:s,...e?.generatedAt?{generatedAt:E(e.generatedAt,80)}:{},renderedSummaryCount:r,...c?{latestEventId:c}:{},reasonCodes:N(p),publicSafe:!0}}function x(e,t,n,r,o=[],a){const s=r[r.length-1],c=n??s?.cursor,p=!!(c&&c!==t&&r.length>0),l=a??(p?"advanced":t||c?"unchanged":"not_started"),d=o.length>0?o:l==="advanced"?[h.WATCH_CURSOR_ADVANCED]:l==="unavailable"?[h.WATCH_EVIDENCE_UNAVAILABLE]:[h.WATCH_CURSOR_UNCHANGED];return{schemaVersion:1,contractVersion:"continuity-v1",cursorState:l,...e?{initialCursor:E(e,200)}:{},...t?{currentCursor:E(t,200)}:{},...c?{nextCursor:E(c,200)}:{},cursorAdvanced:p,...s?.eventId?{eventId:E(s.eventId,120)}:{},reasonCodes:N(d),publicSafe:!0}}function P(e){const t=e.targetEvidence;return{type:"watch_status",schemaVersion:1,contractVersion:"continuity-v1",recordType:"watch_status",command:"invoke",operation:"watch",watchStatus:e.watchStatus,active:e.active,...t?.targetResolutionState?{targetResolutionState:t.targetResolutionState}:{},...t?.targetKind?{targetKind:t.targetKind}:{},...t?.targetId?{targetId:t.targetId}:{},...t?{targetEvidence:t}:{},...e.snapshotEvidence?{snapshotEvidence:e.snapshotEvidence}:{},...e.cursorEvidence?{cursorEvidence:e.cursorEvidence}:{},...e.stopReason?{stopReason:e.stopReason}:{},reasonCodes:N([...e.reasonCodes??[],...t?.reasonCodes??[],...e.snapshotEvidence?.reasonCodes??[],...e.cursorEvidence?.reasonCodes??[]]),generatedAt:E(e.generatedAt??new Date().toISOString(),80),publicSafe:!0}}function In(e){const t=e.targetKind&&e.targetId?`${e.targetKind}/${e.targetId}`:e.targetId??"[unresolved]",n=e.snapshotEvidence?.renderedSummaryCount??0,r=e.targetEvidence?.relatedJobCount??0,o=e.cursorEvidence?.cursorState??"unavailable",a=e.cursorEvidence?.currentCursor??"[none]",s=e.cursorEvidence?.nextCursor??"[none]",c=e.snapshotEvidence?.snapshotStatus??"not_requested",p=e.snapshotEvidence?.generatedAt??e.generatedAt;return[`[watch-status] ${e.targetResolutionState==="unresolved"||e.stopReason==="target_unresolved"?"unresolved-target":n===0&&(e.watchStatus==="waiting"||e.watchStatus==="active")?"no-new-summary":e.watchStatus==="stopped"?"stopped":"lifecycle"}`,`status=${e.watchStatus}`,`active=${e.active}`,`target=${t}`,`resolution=${e.targetResolutionState??"unavailable"}`,`relatedJobs=${r}`,`summaries=${n}`,`snapshot=${c}`,`generatedAt=${p}`,`cursor=${o}`,`current=${E(a,200)}`,`next=${E(s,200)}`,`advanced=${e.cursorEvidence?.cursorAdvanced??!1}`,`stop=${e.stopReason??"not_stopped"}`,`reasons=${e.reasonCodes.join(",")}`].join(" ")}function j(e,t,n){if(t==="json"){n.write(JSON.stringify(e)+`
+`);return}n.write(In(e)+`
+`)}function Sn(e,t,n){return{continuityInvokeWatch:{schemaVersion:1,contractVersion:"continuity-v1",command:"invoke",operation:"watch",watchStatus:e.watchStatus,stopReason:e.stopReason??"not_stopped",targetResolutionState:e.targetResolutionState,targetKind:e.targetKind,targetId:e.targetId,snapshotStatus:e.snapshotEvidence?.snapshotStatus,snapshotGeneratedAt:e.snapshotEvidence?.generatedAt,renderedSummaryCount:e.snapshotEvidence?.renderedSummaryCount??t,cursorState:e.cursorEvidence?.cursorState,cursorAdvanced:e.cursorEvidence?.cursorAdvanced,summariesEmitted:t,polls:n,statusRecord:e,publicSafe:!0}}}function U(e,t,n,r){return{status:e,summariesEmitted:t,polls:n,reasonCodes:r.reasonCodes,watchStatus:r.watchStatus,stopReason:r.stopReason,targetEvidence:r.targetEvidence,snapshotEvidence:r.snapshotEvidence,cursorEvidence:r.cursorEvidence,statusRecord:r,metadata:Sn(r,t,n),publicSafe:!0}}function Cn(e){const t=e.reasonCode?` reason=${E(e.reasonCode,80)}`:"",n=e.goalId?` goal=${E(e.goalId,100)}`:"",r=e.loopId?` loop=${E(e.loopId,100)}`:"";return`[watch] ${E(e.createdAt,80)} event=${E(e.eventId,120)} job=${E(e.jobId,100)}${n}${r} execution=${E(e.executionId,120)}${t} -- ${E(e.publicSummary)}`}function yn(e){return{type:"processing_summary",source:"local_continuity_sqlite",eventId:E(e.eventId,120),jobId:E(e.jobId,100),...e.goalId?{goalId:E(e.goalId,100)}:{},...e.loopId?{loopId:E(e.loopId,100)}:{},executionId:E(e.executionId,120),...e.reasonCode?{reasonCode:E(e.reasonCode,80)}:{},createdAt:E(e.createdAt,80),publicSummary:E(e.publicSummary),publicSafe:!0}}function An(e,t,n){if(t==="json"){n.write(JSON.stringify(yn(e))+`
+`);return}n.write(Cn(e)+`
+`)}function he(e){return Ft.has(e.status)}function Tn(e,t,n){if(t){const o=e.find(a=>a.jobId===t);return!!(o&&he(o))}return n<=0?!1:e.filter(o=>!he(o)).length===0}function vn(e,t,n,r){return n<r?!1:t?!e.some(o=>o.jobId===t&&!he(o)):e.length===0}function wn(e,t){return t?.aborted?Promise.resolve():new Promise(n=>{const r=setTimeout(o,e);function o(){clearTimeout(r),t?.removeEventListener("abort",o),n()}t?.addEventListener("abort",o,{once:!0})})}function Rn(e){return e.includes(w.MALFORMED)?"malformed":e.includes(w.AMBIGUOUS)?"ambiguous":e.includes("watch-target-multiple")?"multiple":e.includes("watch-evidence-unsafe")?"unsafe":e.includes(w.MISSING)||e.includes(T.TARGET_UNRESOLVED)?"unresolved":"unavailable"}function Ye(e,t){const n=t?Y(t):void 0,r=N([...e,T.TARGET_UNRESOLVED,h.WATCH_TARGET_UNRESOLVED]),o=ge(n,n?.targetId,Rn(r),r),a=D({generatedAt:new Date().toISOString()},[],!1,0,[h.WATCH_TARGET_UNRESOLVED]),s=x(void 0,void 0,void 0,[],[h.WATCH_TARGET_UNRESOLVED],"unavailable");return P({watchStatus:"blocked",active:!1,targetEvidence:o,snapshotEvidence:a,cursorEvidence:s,stopReason:"target_unresolved",reasonCodes:r,generatedAt:a.generatedAt})}function bn(e,t,n,r){const o=Ye(e,Xe(t));return j(o,n,r),U("target-unresolved",0,0,o)}async function Nn(e){if(e.signal?.aborted){const b=ge(e.target??Y(e.targetJobId),e.targetJobId,e.target??e.targetJobId?"resolved":"unresolved",[T.CANCELLED]),_=D(void 0,[],!1,0),A=x(e.initialCursor,e.initialCursor,e.initialCursor,[],[T.CANCELLED],"unavailable"),X=P({watchStatus:"stopped",active:!1,targetEvidence:b,snapshotEvidence:_,cursorEvidence:A,stopReason:"cancelled",reasonCodes:[T.CANCELLED]});return U("cancelled",0,0,X)}const t=e.target??Y(e.targetJobId),n=e.targetJobId??t?.targetId,r=e.stdout??process.stdout;if(!t){const b=Ye([w.MISSING,T.TARGET_UNRESOLVED]);return j(b,e.format,r),U("target-unresolved",0,0,b)}const o=ne(e.limit??re("NEOCORTEX_INVOKE_WATCH_LIMIT",we),we,50),a=Math.max(50,ne(e.pollIntervalMs??re("NEOCORTEX_INVOKE_WATCH_POLL_INTERVAL_MS",Ne),Ne,6e4)),s=ne(e.maxIdlePolls??re("NEOCORTEX_INVOKE_WATCH_MAX_IDLE_POLLS",Re),Re,120),c=ne(e.maxPolls??re("NEOCORTEX_INVOKE_WATCH_MAX_POLLS",be),be,86400),p=e.sleep??wn;let l=e.initialCursor,d=0,S=0,m=0;const I=ge(t,n,"resolved",[h.OK]),f={schemaVersion:1,contractVersion:"continuity-v1",snapshotStatus:"pending",renderedSummaryCount:0,reasonCodes:[h.WATCH_RENDER_PENDING],publicSafe:!0},L=x(e.initialCursor,l,l,[],e.initialCursor?[h.WATCH_CURSOR_UNCHANGED]:[h.WATCH_NO_SUMMARIES_YET],e.initialCursor?"unchanged":"not_started");j(P({watchStatus:"active",active:!0,targetEvidence:I,snapshotEvidence:f,cursorEvidence:L,stopReason:"not_stopped",reasonCodes:[h.OK]}),e.format,r);let i;try{i=await Ot({projectRoot:e.projectRoot})}catch{const b=D(void 0,[],!1,d,[h.WATCH_SNAPSHOT_UNAVAILABLE]),_=x(e.initialCursor,l,l,[],[h.WATCH_EVIDENCE_UNAVAILABLE],"unavailable"),A=P({watchStatus:"blocked",active:!1,targetEvidence:I,snapshotEvidence:b,cursorEvidence:_,stopReason:"unavailable_evidence",reasonCodes:[T.STORE_UNAVAILABLE]});return j(A,e.format,r),U("store-unavailable",d,m,A)}try{for(;!e.signal?.aborted&&m<c;){m+=1;const b=l,_=i.collectProcessingOutputSummaryCursor({...l?{cursor:l}:{},...t?{target:t}:{},...n?{jobId:n}:{},limit:o}),A=i.collectSnapshot({jobLimit:50,processingSummaryLimit:1}),X=A.jobs;if(_.summaries.length>0){for(const G of _.summaries)An(G,e.format,r),d+=1;l=_.nextCursor??_.summaries[_.summaries.length-1]?.cursor??l,S=0}else l=_.nextCursor??l,S+=1;const it=D(A,_.summaries,!0,_.summaries.length),ct=x(e.initialCursor,b,l,_.summaries,_.summaries.length>0?[h.WATCH_CURSOR_ADVANCED]:[h.WATCH_NO_SUMMARIES_YET]);if(j(P({watchStatus:_.summaries.length>0?"polling":"waiting",active:!0,targetEvidence:I,snapshotEvidence:it,cursorEvidence:ct,stopReason:"not_stopped",reasonCodes:_.summaries.length>0?[h.WATCH_CURSOR_ADVANCED]:[h.WATCH_NO_SUMMARIES_YET],generatedAt:A.generatedAt}),e.format,r),!_.hasMore&&Tn(X,n,d)){const G=D(A,_.summaries,!1,d,[T.COMPLETED]),ae=x(e.initialCursor,b,l,_.summaries,[T.COMPLETED],"exhausted"),K=P({watchStatus:"stopped",active:!1,targetEvidence:I,snapshotEvidence:G,cursorEvidence:ae,stopReason:"not_stopped",reasonCodes:[T.COMPLETED],generatedAt:A.generatedAt});return j(K,e.format,r),U("completed",d,m,K)}if(!_.hasMore&&vn(X,n,S,s)){const G=D(A,_.summaries,!1,d,[h.WATCH_STOP_IDLE_LIMIT_REACHED]),ae=x(e.initialCursor,b,l,_.summaries,[h.WATCH_STOP_IDLE_LIMIT_REACHED],"exhausted"),K=P({watchStatus:"stopped",active:!1,targetEvidence:I,snapshotEvidence:G,cursorEvidence:ae,stopReason:"idle_limit_reached",reasonCodes:[T.IDLE_TIMEOUT,h.WATCH_STOP_IDLE_LIMIT_REACHED],generatedAt:A.generatedAt});return j(K,e.format,r),U("idle-timeout",d,m,K)}_.hasMore||await p(a,e.signal)}}catch{const b=D(void 0,[],!1,d,[h.WATCH_SNAPSHOT_UNAVAILABLE]),_=x(e.initialCursor,l,l,[],[h.WATCH_EVIDENCE_UNAVAILABLE],"unavailable"),A=P({watchStatus:"blocked",active:!1,targetEvidence:I,snapshotEvidence:b,cursorEvidence:_,stopReason:"unavailable_evidence",reasonCodes:[T.STORE_UNAVAILABLE]});return j(A,e.format,r),U("store-unavailable",d,m,A)}finally{i.close()}if(e.signal?.aborted){const b=D(void 0,[],!1,d,[T.CANCELLED]),_=x(e.initialCursor,l,l,[],[T.CANCELLED],"unavailable"),A=P({watchStatus:"stopped",active:!1,targetEvidence:I,snapshotEvidence:b,cursorEvidence:_,stopReason:"cancelled",reasonCodes:[T.CANCELLED]});return j(A,e.format,r),U("cancelled",d,m,A)}const u=D(void 0,[],!1,d,[h.WATCH_STOP_MAX_POLLS_REACHED]),C=x(e.initialCursor,l,l,[],[h.WATCH_STOP_MAX_POLLS_REACHED],"exhausted"),B=P({watchStatus:"stopped",active:!1,targetEvidence:I,snapshotEvidence:u,cursorEvidence:C,stopReason:"max_polls_reached",reasonCodes:[T.MAX_POLLS,h.WATCH_STOP_MAX_POLLS_REACHED]});return j(B,e.format,r),U("max-polls",d,m,B)}function O(e){const t=e.trim().replace(/^@/,"").match(/^(job|goal|loop)-([JGL])(\d{3,})$/i);if(!t)return;const n=t[1].toLowerCase(),r=t[2].toUpperCase();if(!(n==="job"&&r!=="J"||n==="goal"&&r!=="G"||n==="loop"&&r!=="L"))return`${n}-${r}${t[3]}`}function Ee(e){if(e.startsWith("job-J"))return"job";if(e.startsWith("goal-G"))return"goal";if(e.startsWith("loop-L"))return"loop"}function qe(e){const t=[],n=/(?:^|[\s"'([,{])@?(job-[Jj]\d{3,}|goal-[Gg]\d{3,}|loop-[Ll]\d{3,})(?=$|[\s"')\]},.;:!?])/g;let r;for(;(r=n.exec(e))!==null;){const o=O(r[1]);o&&t.push(o)}return N(t)}function Xe(e){return qe(e)[0]}function Y(e){const t=e?O(e):void 0;if(t){if(t.startsWith("job-J"))return{selectorKind:"job",targetId:t,jobId:t,publicSafe:!0};if(t.startsWith("goal-G"))return{selectorKind:"goal",targetId:t,goalId:t,publicSafe:!0};if(t.startsWith("loop-L"))return{selectorKind:"loop",targetId:t,loopId:t,publicSafe:!0}}}function _e(e){return N(e.filter(t=>typeof t=="string").map(t=>O(t)).filter(t=>!!t?.startsWith("job-J")))}function On(e,t){const n=_e(t).filter(r=>r!==e.targetId&&r!==e.jobId);return n.length>0?{...e,relatedJobIds:n}:e}function Ln(e){if(!e)return;const t=g(e.target)?e.target:void 0,n=typeof e.selectorKind=="string"?e.selectorKind:typeof t?.selectorKind=="string"?t.selectorKind:void 0,r=typeof e.targetId=="string"?O(e.targetId):typeof t?.targetId=="string"?O(t.targetId):typeof e.targetJobId=="string"?O(e.targetJobId):void 0,o=Y(r);if(!o||n&&n!==o.selectorKind)return;const a=Array.isArray(e.relatedJobIds)?e.relatedJobIds:Array.isArray(t?.relatedJobIds)?t.relatedJobIds:void 0,s=_e([...a??[],e.jobId,t?.jobId,e.targetJobId,t?.targetJobId]).filter(c=>c!==o.targetId&&c!==o.jobId);return{...o,...typeof(e.jobId??t?.jobId)=="string"?{jobId:O(e.jobId??t?.jobId)??o.jobId}:{},...typeof(e.goalId??t?.goalId)=="string"?{goalId:O(e.goalId??t?.goalId)??o.goalId}:{},...typeof(e.loopId??t?.loopId)=="string"?{loopId:O(e.loopId??t?.loopId)??o.loopId}:{},...s.length>0?{relatedJobIds:s}:{}}}function Qe(e){const t=e.trim().split(/\s+/).filter(Boolean),n=t[0]?.replace(/^\*/,"").toLowerCase(),r=t[1]?.replace(/^--/,"").toLowerCase();return(n==="jobs"||n==="job"||n==="continuity-jobs"||n==="61")&&r==="watch"}const v=Object.freeze({ACTIVE:"command-level-watch-active",INACTIVE:"command-level-watch-inactive",DUPLICATE:"command-level-watch-duplicate",AMBIGUOUS:"command-level-watch-ambiguous",QUOTED:"command-level-watch-quoted",MALFORMED:"command-level-watch-malformed",NON_FINAL:"command-level-watch-non-final",UNRESOLVED:"command-level-watch-unresolved",UNSUPPORTED:"command-level-watch-unsupported",TARGET_INVALID:"command-level-watch-target-invalid"}),kn=new Set(["create","start","resume"]),xn=new Set(["create","resume","run-once"]);function Ie(e,t,n,r,o){return{schemaVersion:1,contractVersion:"continuity-v1",...n?{command:n}:{},...r?{operation:r}:{},active:e,...o?{watchToken:o}:{},reasonCodes:N(t),serverHeldStream:!1,allJobsPolling:!1,targetResolution:e?"required-after-dispatch":"inactive",publicSafe:!0}}function R(e,t=[],n,r){const o=t.length>0?t:[v.INACTIVE];return{args:e,watch:!1,reasonCodes:o,metadata:Ie(!1,o,n,r),publicSafe:!0}}function Pn(e){const t=e.trim().split(/\s+/).filter(Boolean),n=t.slice(2).filter(a=>a==="--watch").length;if(n===0)return R(e,[],"jobs","watch");if(n!==1)return R(e,[v.AMBIGUOUS],"jobs","watch");const r=t.filter((a,s)=>s<2||a!=="--watch").join(" ");return Qe(r)?r.trim().split(/\s+/).filter(Boolean).slice(2).length!==1?R(e,[v.AMBIGUOUS],"jobs","watch"):Xe(r)?{args:r,watch:!0,reasonCodes:[v.ACTIVE],metadata:Ie(!0,[v.ACTIVE],"jobs","watch"),publicSafe:!0}:R(e,[v.TARGET_INVALID],"jobs","watch"):R(e,[v.UNSUPPORTED],"jobs","watch")}function jn(e){const t=[];let n=!1,r=0;for(;r<e.length;){for(;r<e.length&&/\s/.test(e[r]);)r+=1;if(r>=e.length)break;const o=r;let a="",s=!1,c=null;for(;r<e.length;){const p=e[r];if(c){if(p===c){s=!0,c=null,r+=1;continue}if(p==="\\"&&r+1<e.length){a+=e[r+1],r+=2;continue}a+=p,r+=1;continue}if(/\s/.test(p))break;if(p==='"'||p==="'"){s=!0,c=p,r+=1;continue}a+=p,r+=1}c&&(n=!0),t.push({value:a,start:o,end:r,quoted:s})}return{tokens:t,malformed:n}}function Dn(e){if(!e||e.quoted)return;const t=e.value.replace(/^\*/,"").toLowerCase();return t==="goal"||t==="loop"?t:void 0}function Un(e,t){if(!e||e==="jobs"||!t||t.quoted)return;const n=t.value.toLowerCase();return(e==="goal"?kn:xn).has(n)?n:void 0}function Mn(e){return!e.quoted&&e.value!=="--watch"&&e.value.toLowerCase().startsWith("--watch")}function Wn(e){const{tokens:t,malformed:n}=jn(e),r=Dn(t[0]),o=Un(r,t[1]);if(n)return R(e,[v.MALFORMED],r,o);const a=t.filter(m=>m.value==="--watch"&&!m.quoted),s=t.filter(m=>m.value==="--watch"&&m.quoted),c=t.filter(Mn);if(!(a.length>0||s.length>0||c.length>0))return R(e,[],r,o);if(a.length>1)return R(e,[v.DUPLICATE],r,o);if(a.length===1&&(s.length>0||c.length>0))return R(e,[v.AMBIGUOUS],r,o);if(s.length>0)return R(e,[v.QUOTED],r,o);if(c.length>0)return R(e,[v.MALFORMED],r,o);const l=a[0];if(!l)return R(e,[],r,o);if(t[t.length-1]!==l)return R(e,[v.NON_FINAL],r,o);if(!r||!o)return R(e,[v.UNRESOLVED],r,o);const d=`${e.slice(0,l.start)}${e.slice(l.end)}`.trim(),S={literal:"--watch",position:"final",start:l.start,end:l.end,quoted:!1,publicSafe:!0};return{args:d,watch:!0,reasonCodes:[v.ACTIVE],metadata:Ie(!0,[v.ACTIVE],r,o,S),publicSafe:!0}}function $n(e){return Qe(e)?Pn(e):Wn(e)}function Bn(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"&&Jt.has(t)):[]}function J(e){return{disabled:!0,reasonCodes:N(e.length>0?e:[w.MISSING])}}function Se(e,t,n=[],r){const o=Y(t);if(o)return{source:e,target:On(o,n),targetJobId:o.targetId,...r?{initialCursor:r}:{},serverHeldStream:!1}}function Hn(e){const t=new Map;for(const n of e){const r=`${n.target.selectorKind}:${n.target.targetId}`,o=t.get(r);if(!o){t.set(r,n);continue}const a=N([...o.target.relatedJobIds??[],...n.target.relatedJobIds??[]]);t.set(r,{...o,target:a.length>0?{...o.target,relatedJobIds:a}:o.target,initialCursor:o.initialCursor??n.initialCursor})}return Array.from(t.values())}function $(e,t,n,r){return{source:e,hasEvidence:t,candidates:Hn(n.filter(o=>!!o)),...r&&r.length>0?{disabledReasonCodes:N(r)}:{}}}function Vn(e,t){return e.target.selectorKind===t.target.selectorKind&&e.target.targetId===t.target.targetId}function q(e,t){const n=N(e.filter(r=>typeof r=="string").map(r=>O(r)).filter(r=>!!r));if(t){const r=n.find(o=>Ee(o)===t);if(r)return r}return n[0]}function oe(e,t){return N(e.filter(n=>typeof n=="string").map(n=>O(n)).filter(n=>!!n)).find(n=>Ee(n)===t)}function Fn(e){const t=g(e?.continuity)?e.continuity:void 0,n=g(t?.jobs)?t.jobs:void 0,r=g(n?.watcher)?n.watcher:void 0,o=Bn(r?.reasonCodes??n?.reasonCodes);if(!r)return $("watcher-metadata",o.length>0,[],o);if(r.active===!1||o.length>0)return $("watcher-metadata",!0,[],o.length>0?o:[w.MALFORMED]);if(r.serverHeldStream!==!1)return $("watcher-metadata",!0,[],[w.SERVER_HELD_STREAM]);const a=Ln(r);if(!a)return $("watcher-metadata",!0,[],[w.MISSING]);const s=typeof r.initialCursor=="string"?r.initialCursor:void 0;return $("watcher-metadata",!0,[{source:"watcher-metadata",target:a,targetJobId:a.targetId,...s?{initialCursor:s}:{},serverHeldStream:!1}])}function Ze(e,t){const n=g(e.loopJobPlan)?e.loopJobPlan:void 0,r=g(n?.metadata)?n.metadata:void 0,o=g(e.metadata)?e.metadata:void 0,s=(t==="goal"?q([e.goalId,e.targetGoalId,e.campaignId,e.jobId,e.targetJobId,o?.goalId,o?.campaignId,o?.jobId],"goal"):q([e.loopId,e.targetLoopId,e.jobId,e.targetJobId,o?.loopId,o?.jobId,r?.loopId,r?.jobId],"loop"))??q([e.jobId,e.targetJobId,o?.jobId,r?.jobId]);return Se("goal-loop-continuity-metadata",s,[e.jobId,e.targetJobId,o?.jobId,r?.jobId])}function Jn(e){const t=g(e?.continuity)?e.continuity:void 0,n=g(t?.goal)?t.goal:void 0,r=g(t?.loop)?t.loop:void 0,o=[n?Ze(n,"goal"):void 0,r?Ze(r,"loop"):void 0],a=!!(n||r);return $("goal-loop-continuity-metadata",a,o,a&&o.every(s=>!s)?[w.MISSING]:void 0)}function Gn(e){return Array.isArray(e)?e.filter(g):g(e)?Array.isArray(e.operationLogs)?e.operationLogs.filter(g):g(e.operationLog)?[e.operationLog]:Array.isArray(e.operations)?[e]:[]:[]}function et(e,t){const n=g(t.metadata)?t.metadata:void 0,r=oe([t.goalId,t.targetGoalId,t.campaignId,n?.goalId,n?.campaignId,t.jobId,n?.jobId],"goal"),o=oe([t.loopId,t.targetLoopId,n?.loopId,t.jobId,n?.jobId],"loop"),a=q([t.jobId,t.targetJobId,n?.jobId],"job"),s=r??o??a;if(!s)return;const c=e.get(s)??{targetId:s,relatedJobIds:[]};c.relatedJobIds.push(..._e([a,t.jobId,t.targetJobId,n?.jobId])),e.set(s,c)}function Kn(e){const t=g(e.metadata)?e.metadata:void 0;return!!(oe([e.goalId,e.targetGoalId,e.campaignId,t?.goalId,t?.campaignId,e.jobId,t?.jobId],"goal")??oe([e.loopId,e.targetLoopId,t?.loopId,e.jobId,t?.jobId],"loop"))}function zn(e){const t=g(e.metadata)?e.metadata:void 0;return!!q([e.goalId,e.targetGoalId,e.campaignId,e.loopId,e.targetLoopId,e.jobId,e.targetJobId,t?.goalId,t?.campaignId,t?.loopId,t?.jobId])}function tt(e,t){const n=[];for(const s of["metadata","job","event","receipt","processingOutputSummary"]){const c=t[s];g(c)&&n.push(c)}const r=g(t.event)?t.event:void 0;g(r?.metadata)&&n.push(r.metadata),g(r?.processingOutputSummary)&&n.push(r.processingOutputSummary);const o=g(t.receipt)?t.receipt:void 0;g(o?.metadata)&&n.push(o.metadata);const a=n.some(zn);for(const s of n)et(e,s);(!a||Kn(t))&&et(e,t)}function Yn(e){const t=Gn(e?.continuityStateUpdate),n=new Map;for(const o of t){tt(n,o);const a=Array.isArray(o.operations)?o.operations.filter(g):[];for(const s of a)tt(n,s)}const r=Array.from(n.values()).map(o=>Se("continuity-state-update-operation-log",o.targetId,o.relatedJobIds));return $("continuity-state-update-operation-log",t.length>0,r,t.length>0&&r.every(o=>!o)?[w.MISSING]:void 0)}function qn(e){const t=qe(e);return $("explicit-args",t.length>0,t.map(n=>Se("explicit-args",n)))}function Xn(e,t){const n=[Fn(e),Jn(e),Yn(e),qn(t)];for(let r=0;r<n.length;r+=1){const o=n[r];if(!o.hasEvidence)continue;if(o.disabledReasonCodes&&o.disabledReasonCodes.length>0)return J(o.disabledReasonCodes);if(o.candidates.length!==1)return J([o.candidates.length>1?w.AMBIGUOUS:w.MISSING]);const a=o.candidates[0];for(const s of n.slice(r+1)){if(!s.hasEvidence)continue;if(s.disabledReasonCodes&&s.disabledReasonCodes.length>0)return J(s.disabledReasonCodes);if(s.candidates.length>1)return J([w.AMBIGUOUS]);const c=s.candidates[0];if(c&&!Vn(a,c))return J([w.CONFLICT])}return{target:a.target,targetJobId:a.targetJobId,...a.initialCursor?{initialCursor:a.initialCursor}:{},source:a.source,serverHeldStream:!1}}return J([w.MISSING])}async function nt(e,t,n){const r=`${e}/api/v1/invoke`,o=new AbortController,a=setTimeout(()=>o.abort(),xe);try{const s=await fetch(r,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n}`,"X-Client-Version":H},body:JSON.stringify(t),signal:o.signal});if(clearTimeout(a),!s.ok){const l=await s.text().catch(()=>"Unknown error");let d;try{d=JSON.parse(l)}catch{}return{ok:!1,status:s.status,error:d?`${d.error_code??"ERROR"}: ${d.message??l}`:`HTTP ${s.status}: ${l}`,errorBody:d}}const c=await s.json(),p=s.headers.get("X-Client-Version-Warning");return p&&!He&&(He=!0,process.stderr.write(`
+[Neocortex] ${p}
+
+`)),{ok:!0,status:s.status,data:c}}catch(s){clearTimeout(a);const c=s instanceof Error?s.message:String(s);return{ok:!1,status:0,error:c.includes("abort")?`Request timeout after ${xe/1e3}s`:`Network error: ${c}`}}}async function Qn(e){const t=ce(e.projectRoot),n=e.platformTarget??"claude-code";Vt();const r=rn(),o=(e.serverUrl??r?.serverUrl??_t).replace(/\/+$/,"");try{At(t,{args:e.args})}catch(i){if(i instanceof Tt)return process.stderr.write(`${i.message}
+`),{success:!1,error:i.message,exitCode:1};const u=i instanceof Error?i.message:String(i);return process.stderr.write(`[Neocortex] state.json repair stopped unexpectedly: ${u}. No request was sent; inspect .neocortex/state.json and rerun.
+`),{success:!1,error:u,exitCode:1}}const a=Zt(t);try{const{maybeAutoResolveYoloopArgs:i}=await import("../yoloop/invoke-hooks.js"),u={args:e.args,projectRoot:t,logger:{info:C=>process.stderr.write(`${C}
+`),warn:C=>process.stderr.write(`${C}
+`)}};i(u),u.args!==e.args&&(e={...e,args:u.args})}catch(i){const u=i instanceof Error?i.message:String(i);process.stderr.write(`[Neocortex] Auto-resolve hook (P121.05) failed: ${u}. Proceeding with raw args.
+`)}try{const{readYoloopForRequest:i}=await import("../yoloop/invoke-hooks.js"),u=await i(e.args,t);u&&(a.yoloop=u)}catch{}try{const{readContinuityForRequest:i}=await import("../continuity/invoke-hooks.js"),u=await i(e.args,t);u&&(a.continuity=u)}catch(i){const u=i instanceof Error?i.message:String(i);process.stderr.write(`[Neocortex] continuity snapshot hook failed: ${u}. Proceeding without continuity state.
+`)}try{const{maybeRunDiscoveryHook:i}=await import("../yoloop/invoke-hooks.js");await i({args:e.args,projectRoot:t,stateSnapshot:a,featureFlag:process.env.YOLOOP_AUTO_DISCOVERY!=="off",logger:{warn:u=>{console.warn(u)},info:u=>{console.error(u)}}})}catch(i){const u=i instanceof Error?i.message:String(i);process.stderr.write(`[Neocortex] discovery hook failed: ${u}. Proceeding without enrichment.
+`)}try{const{readArchitecturePolicy:i}=await import("../policy/architecture-policy.js"),u=await i(t);u&&(a.architecture_policy=u)}catch(i){const u=i instanceof Error?i.message:String(i);console.warn(`[Neocortex] architecture-policy hook failed: ${u}. Proceeding without policy.`)}try{const i=/^(1|true|on|yes)$/i.test(process.env.NEOCORTEX_GRAPH_RETRIEVAL??""),{maybeRunGraphRetrievalHook:u}=await import("../yoloop/invoke-hooks.js"),C=await u({args:e.args,projectRoot:t,featureFlag:i,logger:{warn:B=>process.stderr.write(`${B}
+`)}});C.applied&&C.metadata&&(a.graphRetrieval=C.metadata)}catch(i){const u=i instanceof Error?i.message:String(i);process.stderr.write(`[Neocortex] graph retrieval hook failed: ${u}. Proceeding without enrichment.
+`)}try{const{readAndConsumeCheckpoint:i}=await import("../checkpoint/index.js"),u=await i(t);u&&(a.implementCheckpoint=u)}catch(i){const u=i instanceof Error?i.message:String(i);process.stderr.write(`[Neocortex] checkpoint hook failed: ${u}. Proceeding without checkpoint.
+`)}const s=r?.licenseKey?new ye({cacheDir:Oe,passphrase:r.licenseKey}):null,c=e.args.trim();if(Bt(c))try{a.projectMemoryBootstrap=Ht(t)}catch(i){const u=i instanceof Error?i.message:String(i);process.stderr.write(`[Neocortex] project-memory bootstrap diagnosis failed: ${u}. Proceeding without local memory snapshot.
+`)}if(!c&&s){const i=await en(s);if(i)return{success:!0,instructions:i.instructions,metadata:i.metadata,exitCode:0}}const p=await on(o,r?.licenseKey);if(!p){const i=r&&!r.licenseKey?" This may be caused by a machine fingerprint change (e.g., hardware or hostname change).":"";try{const u=ve(),C=Ae("NOT_CONFIGURED",u);C&&process.stderr.write(Te(C,u))}catch{}return{success:!1,error:`Not authenticated.${i} Visit https://neocortex.sh/portal/login to get your license key, then run: neocortex activate YOUR-LICENSE-KEY`,exitCode:2}}const l=rt(c);if(l)try{const i=await p.tierClient.preFlightCheck(l);if(!i.allowed)return process.stderr.write(`[neocortex] ${i.message}
+`),{success:!1,error:i.message??"Trigger not available on your plan",exitCode:1}}catch{}const d=await En({args:c,projectRoot:t,platformTarget:n,environment:e.environment??process.env,bootstrapper:e.runnerBootstrapper});if(d.attachToRequest&&(a.runnerBootstrap=d.metadata),d.warning&&process.stderr.write(`[Neocortex] ${d.warning}
+`),!d.shouldContinue)return d.error&&process.stderr.write(`[Neocortex] ${d.error}
+`),{success:!1,error:d.error??"Runner auto-bootstrap required but failed.",errorCode:d.errorCode,exitCode:d.exitCode??1};const S=yt(c,a);let m={args:c,projectRoot:t.replace(se(),"~"),stateSnapshot:S,platformTarget:n};const I=F(m);if(e.inputSource&&e.inputSource!=="args"&&I>=ie)try{m={argsRef:(await cn(o,c,p.token)).argsRef,projectRoot:t.replace(se(),"~"),stateSnapshot:S,platformTarget:n}}catch(i){return{success:!1,error:`INVOKE_MATERIALIZATION_FAILED: ${i instanceof Error?i.message:String(i)}`,errorCode:"INVOKE_MATERIALIZATION_FAILED",exitCode:1}}try{const i=mn(m);m=i.body,i.degraded?Ke(m,i.telemetry):hn(m)}catch(i){if(i instanceof We)return Ke(m,i.telemetry),process.stderr.write(`[Neocortex] ${i.message}
+`),{success:!1,error:i.message,errorCode:i.code,metadata:{invokePayload:i.telemetry},exitCode:1};throw i}let f=await nt(o,m,p.token);if(!f.ok&&f.status===401){const i=f.errorBody?.fallback_action;if(i==="refresh_token"||i==="re_authenticate"){const u=await p.client.forceRefresh();u&&(f=await nt(o,m,u))}}if(!f.ok&&f.status===426){const i=f.errorBody,u=i?.upgrade_command??"npm install -g @ornexus/neocortex@latest",C=i?.min_version??"unknown";return process.stderr.write(`
+`),process.stderr.write(`==================================================
+`),process.stderr.write(`  UPGRADE REQUIRED
+`),process.stderr.write(`==================================================
+`),process.stderr.write(`
+  Your Neocortex version (${H}) is no longer supported.
+`),process.stderr.write(`  Minimum required: ${C}
+
+`),process.stderr.write(`  Run this command to update:
+
+`),process.stderr.write(`    ${u}
+
+`),process.stderr.write(`  After updating, re-run your command.
+`),process.stderr.write(`==================================================
+
+`),{success:!1,error:`UPGRADE_REQUIRED: Client version ${H} is below minimum ${C}. Run: ${u}`,exitCode:3}}if(!f.ok||!f.data){const i=f.status===401?2:(f.status===429||f.status>=500,1);try{const u=f.errorBody?.error_code??(f.status===429?"RATE_LIMITED":f.status>=500?"SERVER_ERROR":void 0);if(u){const C=ve(),B=Ae(u,C);B&&process.stderr.write(Te(B,C))}}catch{}return{success:!1,error:V(f.error??"Unknown error from server",ee),exitCode:i}}if(!c&&f.data.metadata?.mode==="menu"&&s&&tn(s,f.data.instructions,f.data.metadata).catch(()=>{}),f.data.metadata&&p.tierClient.updateQuotaFromResponse(f.data.metadata).catch(()=>{}),f.data.metadata?.mode==="error"&&f.data.metadata?.errorCode==="CLIENT_UPGRADE_REQUIRED")return process.stderr.write(`
+`),process.stderr.write(`==================================================
+`),process.stderr.write(`  YOLOOP CLIENT UPGRADE REQUIRED
+`),process.stderr.write(`==================================================
+`),process.stderr.write(`
+  Your Neocortex client version (${H}) does not
+`),process.stderr.write(`  support client-side yoloop state persistence.
+
+`),process.stderr.write(`  Run this command to upgrade:
+
+`),process.stderr.write(`    npm install -g @ornexus/neocortex@latest
+
+`),process.stderr.write(`  After upgrading, re-run your yoloop command.
+`),process.stderr.write(`==================================================
+
+`),{success:!1,error:"CLIENT_UPGRADE_REQUIRED: This client does not support yoloop client-side persistence. Run: npm install -g @ornexus/neocortex@latest",exitCode:3};if(f.data.metadata?.yoloopStateUpdate)try{const{persistYoloopFromResponse:i}=await import("../yoloop/invoke-hooks.js");await i(f.data.metadata,t)}catch{}if(f.data.metadata?.continuityStateUpdate)try{const{persistContinuityFromResponse:i}=await import("../continuity/invoke-hooks.js"),u=await i(f.data.metadata,t);if(!u.ok){const C=u.reasonCodes.join(",");return process.stderr.write(`[Neocortex] continuity persistence failed: ${C}. No continuity mutation was committed.
+`),{success:!1,error:`CONTINUITY_PERSISTENCE_FAILED: ${C}`,errorCode:"CONTINUITY_PERSISTENCE_FAILED",exitCode:1}}}catch(i){const u=i instanceof Error?i.message:String(i);return process.stderr.write(`[Neocortex] continuity persistence hook failed: ${u}. No continuity mutation was committed.
+`),{success:!1,error:`CONTINUITY_PERSISTENCE_FAILED: ${V(u,ee)}`,errorCode:"CONTINUITY_PERSISTENCE_FAILED",exitCode:1}}if(f.data.metadata?.stateMutated===!0)try{const{persistMigratedStateFromResponse:i}=await import("../yoloop/invoke-hooks.js");await i(f.data.metadata,t)}catch{}if(f.data.metadata?.tier_changed){const i=f.data.metadata.current_tier;try{await p.client.forceRefresh()?(await p.tierClient.invalidateTierCache(),process.stderr.write(`[Neocortex] Token atualizado automaticamente para tier ${i}
+`)):process.stderr.write(`[Neocortex] Seu tier foi atualizado para ${i}! Execute "neocortex activate" para obter um token atualizado.
+`)}catch{process.stderr.write(`[Neocortex] Seu tier foi atualizado para ${i}! Execute "neocortex activate" para obter um token atualizado.
+`)}}const L=ue(f.data.instructions,f.data.metadata);return{success:!0,instructions:L.instructions,metadata:L.metadata,exitCode:0}}function rt(e){const[t]=e.trim().split(/\s+/,1);return t?/^@?epic-[a-z0-9][a-z0-9._-]*$/i.test(t)?"epic":gt(t):null}const ot="Provide exactly one invoke input source: --args <string>, --stdin, or --args-file <path>.",Zn=`
+neocortex-client invoke - Send orchestration request to server
+
+Usage:
+  neocortex-client invoke --args "*status" [--format plain|json]
+  neocortex-client invoke --args "*jobs console @job-J001"
+  neocortex-client invoke --args "*jobs watch @job-J001" [--watch]
+  neocortex-client invoke --args "*jobs watch @goal-G001 --watch" [--format json]
+  neocortex-client invoke --args "*goal create synthetic objective --watch"
+  neocortex-client invoke --args "*loop run-once loop-L001 --watch" [--format json]
+  neocortex-client invoke --stdin < synthetic.story.md
+  neocortex-client invoke --args-file ./synthetic.story.md
+
+Options:
+  --args <string>        Selected Neocortex command payload (for example, "*jobs watch @loop-L001")
+  --stdin                Read an oversized explicit payload as UTF-8 text from stdin
+  --args-file <path>     Read an oversized explicit payload as UTF-8 text from a local file
+  --project-root <path>  Project root directory (default: cwd; Git repo not required)
+  --format <type>        Output format: json | plain (default: plain)
+  --watch                Keep the foreground client polling local continuity summaries
+  --server-url <url>     Server URL override
+
+Invocation payload boundary:
+  Select only the explicit user-intended Neocortex command and arguments after
+  the trigger, then preserve that selected payload verbatim for --args.
+  Do not forward ambient platform/tool metadata, assistant notes, histories,
+  raw logs/stdout/stderr, protected prompts/workflows, private URLs, secrets,
+  credentials, PII or injection-like reminder text. --stdin and --args-file are
+  only for oversized explicit user payloads, never logs, histories, prompts or
+  orchestration context.
+
+Jobs watch forms:
+  *jobs console @job-J001       # local-only raw stdout/stderr + confirmed stdin; no hosted stream
+  *jobs watch @job-J001
+  *jobs watch @goal-G001
+  *jobs watch @loop-L001
+  *jobs watch @goal-G001 --watch
+
+Goal/loop command-level watch forms:
+  *goal create synthetic objective --watch
+  *goal start @goal-G001 --watch
+  *goal resume goal-G001 --watch
+  *loop create every-5m synthetic objective --watch
+  *loop resume @loop-L001 --watch
+  *loop run-once loop-L001 --watch
+
+Invalid or inactive command-level watch examples:
+  *goal create synthetic --watch --watch        # duplicate
+  *goal create "--watch"                       # quoted objective text
+  *goal create --watch synthetic objective      # non-final / mid-command
+  *goal status @goal-G001 --watch               # unsupported operation
+  *loop once @loop-L001 --watch                 # unsupported alias
+
+JSON compatibility:
+  --format json without active watch writes one JSON document.
+  --format json with active --watch writes typed NDJSON: an invoke_result line,
+  watch_status lifecycle records and local processing_summary lines.
+
+Watch factual evidence:
+  Active watch reports target resolution state, target kind/id, related job
+  counts, snapshot status/generatedAt, rendered summary counts, cursor state,
+  cursor advancement, event ids, lifecycle status and stop reasons.
+
+Safety:
+  Jobs console is Plane B/local-only: no hosted server call for raw output, no server-held stream, no raw persistence, and stdin requires explicit local confirmation.
+  Jobs, goal and loop watch use serverHeldStream=false and foreground local SQLite polling of public processing summaries only.
+  Unresolved targets disable polling with public reason codes; there is no all-jobs fallback.
+`.trim();function er(e){return e.includes("--help")||e.includes("-h")||e.includes("help")}function at(e){return new k("INVOKE_INPUT_VALUE_MISSING",`${e} requires a value. ${ot}`)}function tr(e){try{if(!pt(e).isFile())throw new k("INVOKE_ARGS_FILE_NOT_FILE","--args-file must point to a readable UTF-8 text file.");return Q(e,"utf8")}catch(t){throw t instanceof k?t:new k("INVOKE_ARGS_FILE_READ_FAILED","--args-file could not be read as UTF-8 text. Check the path and permissions.")}}function nr(){try{if(process.stdin.isTTY)throw new k("INVOKE_STDIN_EMPTY","--stdin requires piped UTF-8 text, for example: neocortex-client invoke --stdin < synthetic.story.md");return Q(0,"utf8")}catch(e){throw e instanceof k?e:new k("INVOKE_STDIN_READ_FAILED","--stdin could not be read as UTF-8 text. Pipe command text into stdin and retry.")}}function rr(e,t={}){let n,r=!1,o,a,s="plain",c=!1,p;for(let I=0;I<e.length;I++)switch(e[I]){case"--args":{const L=e[++I];if(L===void 0)throw at("--args");n=L;break}case"--stdin":r=!0;break;case"--args-file":{const L=e[++I];if(L===void 0)throw at("--args-file");o=L;break}case"--project-root":a=e[++I];break;case"--format":s=e[++I]??"plain";break;case"--watch":c=!0;break;case"--server-url":p=e[++I];break}const l=[n!==void 0?"args":void 0,r?"stdin":void 0,o!==void 0?"args-file":void 0].filter(I=>I!==void 0);if(l.length===0)throw new k("INVOKE_INPUT_SOURCE_MISSING",ot);if(l.length>1)throw new k("INVOKE_INPUT_SOURCE_CONFLICT",`Choose only one invoke input source; received ${l.join(", ")}.`);const d=l[0],S=d==="args"?n:d==="stdin"?(t.readStdin??nr)():(t.readArgsFile??tr)(o),m=d==="args"?$n(S):R(S);return{args:m.args,inputSource:d,projectRoot:a,format:s,watch:c||m.watch,commandLevelWatch:m.metadata,serverUrl:p}}function st(e,t){return t?.active?{...e??{},commandLevelWatch:t,serverHeldStream:!1}:e}function or(e,t,n=process.stdout,r=process.stderr){if(t.format==="json"){const s=ue(e.instructions,e.metadata),c=st(s.metadata,t.commandLevelWatch);if(t.watch){n.write(JSON.stringify({type:"invoke_result",instructions:s.instructions,metadata:c,publicSafe:!0})+`
+`);return}n.write(JSON.stringify({instructions:s.instructions,metadata:c})+`
+`);return}const o=ue(e.instructions,e.metadata),a=st(o.metadata,t.commandLevelWatch);n.write(o.instructions+`
+`),a&&r.write(JSON.stringify(a)+`
+`)}function ar(e){const t=()=>e.abort();return process.once("SIGINT",t),process.once("SIGTERM",t),()=>{process.removeListener("SIGINT",t),process.removeListener("SIGTERM",t)}}async function Rr(e){if(er(e))return process.stdout.write(`${Zn}
+`),0;let t;try{t=rr(e)}catch(r){if(r instanceof k)return process.stderr.write(JSON.stringify({error_code:r.code,message:r.message})+`
+`),1;throw r}if(Lt(t.args))return(await kt({args:t.args,projectRoot:ce(t.projectRoot),format:t.format,stdin:process.stdin,stdout:process.stdout,stderr:process.stderr})).exitCode;const n=await Qn({args:t.args,inputSource:t.inputSource,watch:t.watch,projectRoot:t.projectRoot,format:t.format,serverUrl:t.serverUrl});if(!n.success)return process.stderr.write(JSON.stringify({error_code:n.errorCode??(n.exitCode===2?"NOT_CONFIGURED":"INVOKE_ERROR"),message:V(n.error??"",ee)})+`
+`),n.exitCode;if(or(n,t),t.watch){const r=new AbortController,o=ar(r);try{const a=Xn(n.metadata,t.args);a.disabled?bn(a.reasonCodes??[T.TARGET_UNRESOLVED],t.args,t.format,process.stdout):await Nn({projectRoot:ce(t.projectRoot),format:t.format,...a,signal:r.signal})}finally{o()}}return 0}export{Zn as INVOKE_HELP_TEXT,je as INVOKE_PAYLOAD_LIMIT_BYTES,ie as INVOKE_PAYLOAD_WARNING_THRESHOLD_BYTES,k as InvokeCliInputError,We as InvokePayloadTooLargeError,vr as __resetSchemaDriftWarnedForTests,Ht as collectInitProjectMemoryBootstrapSnapshot,Zt as collectStateSnapshot,F as computeInvokeRequestBodySizeBytes,wr as createFullStateSnapshotScope,fe as createInvokePayloadTelemetry,zt as detectStateSchemaDrift,rt as extractPreFlightTrigger,mn as guardInvokeRequestBodySize,Qn as invoke,Rr as invokeCliHandler,Bt as isInitTrigger,hn as maybeEmitInvokePayloadSizeWarning,En as maybeRunInvokeRunnerAutoBootstrap,rr as parseInvokeCliOptions,$n as resolveInvokeCommandLevelWatch,ce as resolveInvokeProjectRoot,Xn as resolveInvokeWatchTarget,ue as sanitizeInvokeCliOutput,Nn as watchContinuityProcessingSummaries,or as writeInvokeCliSuccessOutput};

package/packages/client/dist/commands/refresh-memory.d.ts

@@ -0,0 +1,11 @@
+import { type ProjectMemoryTargetId } from '../memory/shared-project-memory-types.js';
+import { type WriteProjectMemoryTargetFilesResult } from '../memory/project-memory-writer.js';
+export interface RefreshMemoryCliOptions {
+    readonly projectRoot: string;
+    readonly targetIds: readonly ProjectMemoryTargetId[];
+    readonly dryRun: boolean;
+    readonly memoryNotes?: readonly string[];
+}
+export declare function parseRefreshMemoryArgs(args: readonly string[]): RefreshMemoryCliOptions;
+export declare function refreshProjectMemoryTargets(options: RefreshMemoryCliOptions): readonly WriteProjectMemoryTargetFilesResult[];
+export declare function refreshMemoryCliHandler(args: readonly string[]): Promise<number>;

package/packages/client/dist/commands/refresh-memory.js

@@ -0,0 +1 @@
+import{resolve as m}from"node:path";import{isProjectMemoryTargetId as h,listProjectMemoryTargets as d}from"../memory/shared-project-memory-types.js";import{writeProjectMemoryTargetFiles as g}from"../memory/project-memory-writer.js";function i(r){return(r??"").split(",").map(t=>t.trim()).filter(Boolean)}function p(r){let t=process.cwd(),c=!1;const a=[],n=[];for(let s=0;s<r.length;s++){const e=r[s];if(e==="--dry-run"||e==="--preview")c=!0;else if(e==="--project-root")t=r[++s]??t;else if(e.startsWith("--project-root="))t=e.slice(15);else if(e==="--target"||e==="--targets")a.push(...i(r[++s]));else if(e.startsWith("--target="))a.push(...i(e.slice(9)));else if(e.startsWith("--targets="))a.push(...i(e.slice(10)));else if(e==="--note"||e==="--memory-note"||e==="--change"){const l=r[++s];l&&n.push(l)}else e.startsWith("--note=")?n.push(e.slice(7)):e.startsWith("--memory-note=")?n.push(e.slice(14)):e.startsWith("--change=")&&n.push(e.slice(9))}const o=a.length>0?a.map(s=>{if(!h(s))throw new Error(`Unknown project-memory target: ${s}`);return s}):["canonical",...d().map(s=>s.targetId)];return{projectRoot:m(t),targetIds:Array.from(new Set(o)),dryRun:c,memoryNotes:n}}function u(r){return r.targetIds.map(t=>g({projectRoot:r.projectRoot,targetId:t,dryRun:r.dryRun,memoryNotes:r.memoryNotes??[]}))}async function R(r){try{const t=p(r),a=u(t).flatMap(n=>n.files.map(o=>[o.changed?t.dryRun?"would-change":"changed":"unchanged",o.mode,o.relativeFile,o.fallbackReason?`warning=${o.fallbackReason}`:void 0,o.remediationDebt?`debt=${o.remediationDebt}`:void 0,o.reasonCodes&&o.reasonCodes.length>0?`reasons=${o.reasonCodes.join(",")}`:void 0].filter(Boolean).join("  ")));console.log(`${t.dryRun?"Project memory preview":"Project memory refreshed"}: ${t.projectRoot}`);for(const n of a)console.log(n);return 0}catch(t){return console.error(t instanceof Error?t.message:String(t)),1}}export{p as parseRefreshMemoryArgs,R as refreshMemoryCliHandler,u as refreshProjectMemoryTargets};

package/packages/client/dist/config/resolver-selection.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+import type { AssetResolver } from '../resolvers/asset-resolver.js';
+import type { CreateResolverOptions } from '../types/index.js';
+/** Result of resolver selection including the reason for the choice */
+export interface ResolverSelectionResult {
+    readonly resolver: AssetResolver;
+    readonly reason: string;
+    readonly mode: 'local' | 'remote';
+}
+/**
+ * Create the appropriate AssetResolver based on configuration.
+ *
+ * Selection follows a strict priority chain:
+ * 1. forceLocal option -> LocalResolver
+ * 2. NEOCORTEX_MODE=local -> LocalResolver
+ * 3. NEOCORTEX_MODE=remote -> RemoteResolver
+ * 4. core/ exists locally -> LocalResolver
+ * 5. License key + no core/ -> RemoteResolver
+ * 6. Default -> LocalResolver
+ *
+ * @param options - Optional configuration overrides
+ * @returns Configured AssetResolver ready for use
+ */
+export declare function createResolver(options?: CreateResolverOptions): Promise<AssetResolver>;
+/**
+ * Select resolver with full result including reason.
+ * Useful for logging/debugging why a specific resolver was chosen.
+ */
+export declare function selectResolver(options?: CreateResolverOptions): Promise<ResolverSelectionResult>;

package/packages/client/dist/config/resolver-selection.js

@@ -0,0 +1 @@
+import{access as E,readFile as h,writeFile as R,mkdir as C}from"node:fs/promises";import{join as i,resolve as w}from"node:path";import{homedir as d}from"node:os";import{createHash as g}from"node:crypto";import{LocalResolver as l}from"../resolvers/local-resolver.js";import{RemoteResolver as u}from"../resolvers/remote-resolver.js";import{DEFAULT_SERVER_URL as O}from"../constants.js";const v=i(d(),".neocortex","feature-flags.json"),y=36e5;async function _(e){try{const r=process.env.NEOCORTEX_REMOTE_PERCENTAGE;if(r!==void 0){const n=parseInt(r,10);return isNaN(n)||n<=0?"skip":f(n)?"remote":"local"}const t=await F();if(t)return t.forceLocal?"local":t.forceRemote?"remote":t.remotePercentage<=0?"skip":f(t.remotePercentage)?"remote":"local";const c=s(e),o=await L(c);return o?(await p(o),o.forceLocal?"local":o.forceRemote?"remote":o.remotePercentage<=0?"skip":f(o.remotePercentage)?"remote":"local"):"skip"}catch{return"skip"}}function f(e){const r=process.env.NEOCORTEX_MACHINE_ID??"default";return g("sha256").update(r).digest().readUInt16BE(0)%100<e}async function F(){try{const e=await h(v,"utf-8"),r=JSON.parse(e);return Date.now()-r.fetchedAt<y?r:null}catch{return null}}async function p(e){try{await C(i(d(),".neocortex"),{recursive:!0}),await R(v,JSON.stringify(e),"utf-8")}catch{}}async function L(e){try{const r=new AbortController,t=setTimeout(()=>r.abort(),5e3),c=await fetch(`${e}/api/v1/config`,{signal:r.signal});if(clearTimeout(t),!c.ok)return null;const o=await c.json();return{remotePercentage:o.remotePercentage??0,forceRemote:o.forceRemote??!1,forceLocal:o.forceLocal??!1,fetchedAt:Date.now()}}catch{return null}}async function N(e){try{return await E(i(e,"core")),!0}catch{return!1}}function m(e){return e?.licenseKey||process.env.NEOCORTEX_LICENSE_KEY||void 0}function s(e){return e?.serverUrl||process.env.NEOCORTEX_SERVER_URL||O}async function M(e){return(await k(e)).resolver}async function k(e){const r=w(e?.projectRoot||process.cwd()),t=process.env.NEOCORTEX_MODE?.toLowerCase();if(e?.forceLocal)return{resolver:new l({projectRoot:r}),reason:"Forced local mode via --local flag",mode:"local"};if(t==="local")return{resolver:new l({projectRoot:r}),reason:"NEOCORTEX_MODE=local environment variable",mode:"local"};if(t==="remote"){const a=m(e);return a?{resolver:new u({serverUrl:s(e),licenseKey:a,cacheProvider:e?.cacheProvider,licenseClient:e?.licenseClient}),reason:"NEOCORTEX_MODE=remote environment variable",mode:"remote"}:{resolver:new l({projectRoot:r}),reason:"NEOCORTEX_MODE=remote but no license key found, falling back to local",mode:"local"}}if(await N(r))return{resolver:new l({projectRoot:r}),reason:"Auto-detected development mode (core/ directory exists)",mode:"local"};if(await _(e)==="remote"){const a=m(e);if(a)return{resolver:new u({serverUrl:s(e),licenseKey:a,cacheProvider:e?.cacheProvider,licenseClient:e?.licenseClient}),reason:"Feature flag cutover: machine in remote bucket",mode:"remote"}}const n=m(e);return n?{resolver:new u({serverUrl:s(e),licenseKey:n,cacheProvider:e?.cacheProvider,licenseClient:e?.licenseClient}),reason:"Auto-detected production mode (license key present, no core/ directory)",mode:"remote"}:{resolver:new l({projectRoot:r}),reason:"Default fallback to local mode",mode:"local"}}export{M as createResolver,k as selectResolver};

package/packages/client/dist/config/secure-config.d.ts

@@ -0,0 +1,78 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/** Key type discriminator (Story 29.04) */
+export type KeyType = 'license' | 'api_key';
+/** Resolved config with decrypted license key */
+export interface SecureConfig {
+    readonly serverUrl?: string;
+    readonly mode?: string;
+    readonly machineId?: string;
+    readonly activatedAt?: string;
+    readonly tier?: string;
+    readonly licenseKey?: string;
+    /** Key type: 'license' (NX-...) or 'api_key' (nxk_...). undefined = legacy (treat as license). Story 29.04 */
+    readonly keyType?: KeyType;
+}
+/**
+ * Encrypt a license key using the machine fingerprint as passphrase.
+ * Returns the encrypted envelope string.
+ */
+export declare function encryptLicenseKey(licenseKey: string): string;
+/**
+ * Decrypt a license key using the machine fingerprint as passphrase.
+ * Returns the plaintext key or null if decryption fails (hardware changed).
+ */
+export declare function decryptLicenseKey(encryptedKey: string): string | null;
+/**
+ * Set restrictive file permissions on config files.
+ * Unix: chmod 600 (owner read/write only).
+ * Windows: icacls to remove inheritance and grant Full Control only to current user.
+ * Story 61.4 - F4 remediation.
+ * Story 66.1 - Windows ACL via icacls.
+ */
+export declare function setSecureFilePermissions(filePath: string): void;
+/**
+ * Set restrictive directory permissions on config directories.
+ * Unix: chmod 700 (owner read/write/execute only).
+ * Windows: icacls with (OI)(CI) for propagation to child objects.
+ * Story 61.4 - F4 remediation.
+ * Story 66.1 - Windows ACL via icacls.
+ */
+export declare function setSecureDirPermissions(dirPath: string): void;
+/**
+ * Load config from ~/.neocortex/config.json with automatic migration.
+ *
+ * If the config contains a plaintext `licenseKey` (old format), it is:
+ * 1. Encrypted using machine fingerprint
+ * 2. Stored as `encryptedLicenseKey`
+ * 3. Old `licenseKey` field removed
+ * 4. Config rewritten to disk
+ *
+ * If decryption of `encryptedLicenseKey` fails (hardware change),
+ * returns config with licenseKey = undefined.
+ */
+export declare function loadSecureConfig(): SecureConfig | null;
+/**
+ * Save config after activation with encrypted license key.
+ * This is the primary write path called from activate.ts.
+ */
+export declare function saveSecureConfig(config: {
+    serverUrl: string;
+    mode: string;
+    machineId: string;
+    activatedAt: string;
+    tier?: string;
+    licenseKey: string;
+    /** Key type: 'license' (NX-...) or 'api_key' (nxk_...). Auto-detected from key prefix if omitted. Story 29.04 */
+    keyType?: KeyType;
+}): void;

package/packages/client/dist/config/secure-config.js

@@ -0,0 +1,12 @@
+import{existsSync as p,readFileSync as U,writeFileSync as R,mkdirSync as S,chmodSync as u}from"node:fs";import{execSync as y}from"node:child_process";import{join as a}from"node:path";import{homedir as L}from"node:os";import{encrypt as I,decrypt as g}from"../cache/crypto-utils.js";import{getMachineFingerprint as l}from"../machine/fingerprint.js";import{DEFAULT_SERVER_URL as x}from"../constants.js";const o=a(L(),".neocortex"),s=a(o,"config.json"),K=["api","neocortex","ornexus","com"].join("."),d=1;function f(r){const e=l();return I(r,e)}function C(r){try{const e=l();return g(r,e).plaintext}catch{return null}}function O(r){try{if(process.platform==="win32"){const e=process.env.USERNAME||process.env.USER||"";if(!e)return;y(`icacls "${r}" /inheritance:r /grant:r "${e}:(F)"`,{stdio:"pipe",timeout:5e3})}else u(r,384)}catch{}}function m(r){try{if(process.platform==="win32"){const e=process.env.USERNAME||process.env.USER||"";if(!e)return;y(`icacls "${r}" /inheritance:r /grant:r "${e}:(OI)(CI)(F)"`,{stdio:"pipe",timeout:5e3})}else u(r,448)}catch{}}let h=!1;function _(r){if(h)return;const e=r.serverUrl;if(!e)return;/^https?:\/\/(localhost|127\.0\.0\.1|0\.0\.0\.0)(:\d+)?/i.test(e)&&(h=!0,console.warn(`
+[!] Warning: connected to local server (`+e+`).
+    To use production, run: neocortex activate YOUR-LICENSE-KEY
+    Get yours at https://neocortex.sh/portal/login
+`))}function F(r){const e=r.match(/^(https?:\/\/)([^/]+)(.*)$/i);if(!e)return null;const[,c,t,n=""]=e;return t.toLowerCase()!==K?null:`${c}api.neocortex.sh${n}`}function Y(){try{if(!p(s))return null;const r=U(s,"utf-8"),e=JSON.parse(r.replace(/^\uFEFF/,""));if(e.licenseKey&&!e.encryptedLicenseKey){const n=f(e.licenseKey),i={...e},E=i.licenseKey;return delete i.licenseKey,i.encryptedLicenseKey=n,i.configVersion||(i.configVersion=d),v(i),{serverUrl:e.serverUrl,mode:e.mode,machineId:e.machineId,activatedAt:e.activatedAt,tier:e.tier,licenseKey:E,keyType:e.keyType}}let c;if(e.encryptedLicenseKey){const n=C(e.encryptedLicenseKey);n&&(c=n)}const t={serverUrl:e.serverUrl,mode:e.mode,machineId:e.machineId,activatedAt:e.activatedAt,tier:e.tier,licenseKey:c,keyType:e.keyType};if(e.machineId&&!c&&e.encryptedLicenseKey){const n=l();e.machineId!==n&&console.warn(`
+[!] Machine fingerprint changed (was: ${e.machineId.slice(0,12)}..., now: ${n.slice(0,12)}...).
+    Your encrypted credentials are no longer valid.
+    Re-activate with: neocortex activate YOUR-LICENSE-KEY
+`)}if(_(t),t.serverUrl&&!process.env.NEOCORTEX_SERVER_URL&&/^https?:\/\/(localhost|127\.0\.0\.1|0\.0\.0\.0)(:\d+)?/i.test(t.serverUrl)){const i=x;return console.warn(`[neocortex] Auto-repairing serverUrl: ${t.serverUrl} -> ${i}
+[neocortex] To keep localhost, set NEOCORTEX_SERVER_URL=${t.serverUrl}
+`),{...t,serverUrl:i}}if(t.serverUrl&&!process.env.NEOCORTEX_SERVER_URL){const n=F(t.serverUrl);if(n)return{...t,serverUrl:n}}return t}catch{return null}}function v(r){S(o,{recursive:!0}),m(o);const e=a(o,"cache");p(e)&&m(e),R(s,JSON.stringify(r,null,2)+`
+`,"utf-8"),O(s)}function G(r){const e=f(r.licenseKey),c=r.keyType??(r.licenseKey.startsWith("nxk_")?"api_key":"license"),t={configVersion:d,serverUrl:r.serverUrl,mode:r.mode,machineId:r.machineId,activatedAt:r.activatedAt,tier:r.tier,encryptedLicenseKey:e,keyType:c};v(t)}export{C as decryptLicenseKey,f as encryptLicenseKey,Y as loadSecureConfig,G as saveSecureConfig,m as setSecureDirPermissions,O as setSecureFilePermissions};

package/packages/client/dist/constants.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * Production server URL.
+ *
+ * Single Source of Truth for the default Neocortex IP Protection Server URL.
+ * All client-side code MUST import this constant instead of hardcoding the URL.
+ *
+ * Shell scripts (install.sh, install.ps1) cannot import from TypeScript,
+ * so they maintain a hardcoded copy with a comment referencing this file.
+ *
+ * Epic 70 - Story 70.03
+ * Epic P46 - Story P46.01: migrated legacy API host to api.neocortex.sh
+ */
+export declare const DEFAULT_SERVER_URL = "https://api.neocortex.sh";

package/packages/client/dist/constants.js

@@ -0,0 +1 @@
+const t="https://api.neocortex.sh";export{t as DEFAULT_SERVER_URL};

package/packages/client/dist/context/context-collector.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+import type { PipelineContext } from '../types/index.js';
+/** Options for context collection */
+export interface CollectContextOptions {
+    readonly projectRoot: string;
+    readonly storyFilePath: string;
+    readonly storyId: string;
+    readonly stepId: string;
+    readonly platformTarget?: string;
+}
+/**
+ * Collect complete pipeline context.
+ *
+ * Reads state.json, package.json, and story file to build
+ * a sanitized PipelineContext for the remote server.
+ */
+export declare function collectContext(options: CollectContextOptions): Promise<PipelineContext>;

package/packages/client/dist/context/context-collector.js

@@ -0,0 +1,2 @@
+import{readFile as i}from"node:fs/promises";import{join as p}from"node:path";import{sanitizeObject as l}from"./context-sanitizer.js";const f=/^---\n([\s\S]*?)\n---/;function m(s){const e=s.match(f);if(!e)return{};const t={};for(const n of e[1].split(`
+`)){const c=n.indexOf(":");if(c===-1)continue;const a=n.slice(0,c).trim().replace(/^['"]|['"]$/g,""),r=n.slice(c+1).trim().replace(/^['"]|['"]$/g,"");t[a]=r}return t}function g(s){const e=[],t=/\*\*AC\d+:?\s*([^*]+)\*\*/g;let n;for(;(n=t.exec(s))!==null;)e.push(n[1].trim());return e}const S={react:"React",next:"Next.js",vue:"Vue",nuxt:"Nuxt",angular:"Angular",svelte:"Svelte",express:"Express",fastify:"Fastify",nest:"NestJS",koa:"Koa",hapi:"Hapi"};function w(s){const e=[];for(const[t,n]of Object.entries(S))t in s&&e.push(n);return e}function y(s){const e=new Set;return e.add("JavaScript"),("typescript"in s||Object.keys(s).some(t=>t.includes("ts-")))&&e.add("TypeScript"),[...e]}async function O(s){const{projectRoot:e,storyFilePath:t,storyId:n,stepId:c,platformTarget:a}=s,r=await h(e,n),u=await C(e),o=await I(t),d={storyId:n,stepId:c,epicId:o.epicId||r.epicId||"",storyTitle:o.title,currentStatus:r.status,stepsCompleted:r.stepsCompleted,branchName:r.branchName,platformTarget:a||x(),codebaseMetadata:u,storyMetadata:o};return l(d,e)}async function h(s,e){try{const t=p(s,".neocortex","state.json"),n=await i(t,"utf-8"),a=JSON.parse(n).stories?.[e];return{status:a?.status||"unknown",stepsCompleted:a?.steps_completed||[],branchName:a?.branch_name||"",epicId:a?.epic_id||""}}catch{return{status:"unknown",stepsCompleted:[],branchName:"",epicId:""}}}async function C(s){try{const e=p(s,"package.json"),t=await i(e,"utf-8"),n=JSON.parse(t),c={...n.dependencies||{},...n.devDependencies||{}};return{projectName:n.name||"unknown",languages:y(c),frameworks:w(c),dependencies:n.dependencies||{},nodeVersion:process.version}}catch{return{projectName:"unknown",languages:["JavaScript"],frameworks:[],dependencies:{},nodeVersion:process.version}}}async function I(s){try{const e=await i(s,"utf-8"),t=m(e),n=g(e);let c=[];const a=t.dependencies;if(a)try{c=JSON.parse(a.replace(/'/g,'"'))}catch{c=a.split(",").map(r=>r.trim().replace(/[[\]"']/g,""))}return{id:t.id||"",epicId:t.epic_id||"",title:t.title||"",status:t.status||t.currentStatus||"",dependencies:c,acceptanceCriteria:n}}catch{return{id:"",epicId:"",title:"",status:"",dependencies:[],acceptanceCriteria:[]}}}function x(){return process.env.CLAUDE_CODE||process.env.CLAUDE_AGENT?"claude-code":process.env.CURSOR_SESSION_ID?"cursor":process.env.VSCODE_PID?"vscode":process.env.GEMINI_CLI?"gemini":"unknown"}export{O as collectContext};

package/packages/client/dist/context/context-sanitizer.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * Sanitize a single string value.
+ *
+ * Applies path sanitization, token removal, and truncation.
+ */
+export declare function sanitizeValue(value: string, projectRoot: string): string;
+/**
+ * Sanitize a record of key-value pairs.
+ *
+ * Removes entries with sensitive keys and sanitizes remaining values.
+ */
+export declare function sanitizeRecord(record: Record<string, string>, projectRoot: string): Record<string, string>;
+/**
+ * Deep sanitize an object, processing all string values recursively.
+ */
+export declare function sanitizeObject<T>(obj: T, projectRoot: string): T;

package/packages/client/dist/context/context-sanitizer.js

@@ -0,0 +1 @@
+import{homedir as o}from"node:os";const f=[/token/i,/key/i,/secret/i,/password/i,/credential/i,/auth/i,/github_pat_/i,/npm_token/i,/api_key/i],l=[/github_pat_[A-Za-z0-9_]{36,}/g,/ghp_[A-Za-z0-9]{36,}/g,/gho_[A-Za-z0-9]{36,}/g,/sk-[A-Za-z0-9]{32,}/g,/Bearer\s+[A-Za-z0-9._\-]+/g,/-----BEGIN\s+(RSA\s+)?PRIVATE\s+KEY-----[\s\S]*?-----END/g],s=1e3;function p(e,n){let t=e;if(n){const i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");t=t.replace(new RegExp(i,"g"),".")}const r=o();if(r){const i=r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");t=t.replace(new RegExp(i,"g"),"~")}return t}function g(e){let n=e;for(const t of l)n=n.replace(t,"[REDACTED]");return n}function E(e){return e.length<=s?e:`${e.slice(0,s)}...[truncated, ${e.length} chars total]`}function a(e){return f.some(n=>n.test(e))}function c(e,n){let t=p(e,n);return t=g(t),t=E(t),t}function _(e,n){const t={};for(const[r,i]of Object.entries(e))a(r)||(t[r]=c(i,n));return t}function u(e,n){if(e==null)return e;if(typeof e=="string")return c(e,n);if(Array.isArray(e))return e.map(t=>u(t,n));if(typeof e=="object"){const t={};for(const[r,i]of Object.entries(e))a(r)&&typeof i=="string"?t[r]="[REDACTED]":t[r]=u(i,n);return t}return e}export{u as sanitizeObject,_ as sanitizeRecord,c as sanitizeValue};

package/packages/client/dist/continuity/autonomous-governance.d.ts

@@ -0,0 +1,84 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P199.03 -- public-safe autonomous execution governance envelope.
+ */
+import type { ContinuitySqliteStore } from './sqlite-store.js';
+export declare const AUTONOMOUS_GOVERNANCE_VERSION: 1;
+export declare const AUTONOMOUS_GOVERNANCE_EVENT_TYPE: "autonomous_governance_audit";
+export declare const AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG: "[P199-EV-GOVERNANCE]";
+export declare const AUTONOMOUS_GOVERNANCE_REASON_CODES: Readonly<{
+    readonly OK: "continuity-ok";
+    readonly BYPASS_BLOCKED: "headless-directive-rejected";
+}>;
+export type AutonomousGovernanceKind = 'yolo' | 'yoloop' | 'run_yolo' | 'run_yoloop';
+export type AutonomousGovernanceSource = 'direct-yolo' | 'direct-yoloop' | 'headless-run-yolo' | 'headless-run-yoloop' | 'delegated-subagent';
+export type AutonomousGovernanceTargetKind = 'story' | 'epic' | 'epic_directory';
+export interface AutonomousGovernanceIntent {
+    readonly autonomousKind: AutonomousGovernanceKind;
+    readonly source: AutonomousGovernanceSource;
+    readonly targetKind: AutonomousGovernanceTargetKind;
+    readonly targetRef: string;
+    readonly storyId?: string;
+    readonly epicId?: string;
+    readonly commandHash?: string;
+}
+export interface AutonomousGovernanceEnvelope extends AutonomousGovernanceIntent {
+    readonly schemaVersion: 1;
+    readonly contractVersion: 'continuity-v1';
+    readonly governanceVersion: typeof AUTONOMOUS_GOVERNANCE_VERSION;
+    readonly envelopeId: string;
+    readonly jobId: string;
+    readonly executionId: string;
+    readonly auditId: string;
+    readonly receiptId: string;
+    readonly status: 'accepted' | 'rejected';
+    readonly reasonCode: string;
+    readonly publicSummary: string;
+    readonly counts: Readonly<Record<string, number>>;
+    readonly hashes: Readonly<Record<string, string>>;
+    readonly relativePaths: readonly string[];
+    readonly publicSafe: true;
+}
+export type AutonomousGovernanceValidationResult = {
+    readonly ok: true;
+    readonly envelope: AutonomousGovernanceEnvelope;
+} | {
+    readonly ok: false;
+    readonly reasonCode: string;
+    readonly publicSummary: string;
+    readonly redactionSummary: readonly PublicRedactionEvidence[];
+};
+export interface PublicRedactionEvidence {
+    readonly field: string;
+    readonly reason: string;
+    readonly evidence: string;
+    readonly publicSafe: true;
+}
+export interface AutonomousGovernanceRecordResult {
+    readonly ok: boolean;
+    readonly envelope: AutonomousGovernanceEnvelope;
+    readonly reasonCode: string;
+    readonly publicSummary: string;
+    readonly publicSafe: true;
+}
+export declare function parseAutonomousInvokeIntent(args: string): AutonomousGovernanceIntent | null;
+export declare function isAutonomousInvoke(args: string): boolean;
+export declare function buildAutonomousGovernanceEnvelope(input: AutonomousGovernanceIntent & {
+    readonly jobId?: string;
+    readonly operationSeed?: string;
+    readonly status?: 'accepted' | 'rejected';
+    readonly reasonCode?: string;
+}): AutonomousGovernanceEnvelope;
+export declare function validateAutonomousGovernanceEnvelope(input: unknown, expected?: {
+    readonly autonomousKind?: AutonomousGovernanceKind;
+    readonly jobId?: string;
+    readonly targetKind?: AutonomousGovernanceTargetKind;
+    readonly targetRef?: string;
+}): AutonomousGovernanceValidationResult;
+export declare function readAutonomousGovernanceEnvelopeFromMetadata(metadataJson: string | null | undefined, expected?: Parameters<typeof validateAutonomousGovernanceEnvelope>[1]): AutonomousGovernanceValidationResult;
+export declare function recordAutonomousGovernance(store: ContinuitySqliteStore, envelope: AutonomousGovernanceEnvelope, nowIso: string, options?: {
+    readonly requireExistingJob?: boolean;
+}): AutonomousGovernanceRecordResult;
+export declare function autonomousGovernanceMetadata(envelope: AutonomousGovernanceEnvelope, base?: Readonly<Record<string, unknown>>): Record<string, unknown>;