@ornexus/neocortex 4.60.16

package/packages/client/dist/errors/error-messages.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * Central, localized error message helpers for CLI output. Turns
+ * server error codes and low-level exceptions into friendly, actionable
+ * messages with "What happened" + "What to do" + support email.
+ *
+ * Story P76.06.
+ */
+export type ErrorMessageLocale = 'pt-BR' | 'en';
+export interface HumanizedError {
+    /** Short one-line summary. */
+    readonly summary: string;
+    /** What happened (friendly explanation). */
+    readonly whatHappened: string;
+    /** Actionable next step(s). */
+    readonly whatToDo: string;
+    /** Optional CLI command snippet the user should run. */
+    readonly command?: string;
+    /** URL the user can visit for more context. */
+    readonly url?: string;
+}
+/** Detect the best locale from LC_ALL / LANG. Falls back to 'en'. */
+export declare function detectErrorLocale(env?: NodeJS.ProcessEnv): ErrorMessageLocale;
+/**
+ * Look up a humanized message for an error code.
+ * Returns null if the code is unknown -- caller should fall back to the
+ * raw server message.
+ */
+export declare function humanizeError(code: string, locale?: ErrorMessageLocale): HumanizedError | null;
+/**
+ * Format a humanized error for stderr. Always ends with the support email.
+ */
+export declare function formatHumanizedError(humanized: HumanizedError, locale?: ErrorMessageLocale): string;
+/**
+ * Infer an error code from a low-level error object (e.g., Node.js error
+ * thrown by fetch / dns / pg). Returns null if we cannot classify it.
+ */
+export declare function inferErrorCodeFromException(err: unknown): string | null;

package/packages/client/dist/errors/error-messages.js

@@ -0,0 +1,2 @@
+const t="support@neocortex.sh",u={AUTH_EXPIRED:{en:{summary:"Your session has expired.",whatHappened:"The token we use to authenticate your CLI has expired. This is normal and happens every few hours.",whatToDo:"Re-activate with the license key that was emailed to you.",command:"neocortex activate YOUR-LICENSE-KEY",url:"https://neocortex.sh/portal"},"pt-BR":{summary:"Sua sess\xE3o expirou.",whatHappened:"O token de autentica\xE7\xE3o do CLI expirou. Isso \xE9 normal e acontece a cada poucas horas.",whatToDo:"Reative o CLI com a license key que voc\xEA recebeu por email.",command:"neocortex activate SUA-LICENSE-KEY",url:"https://neocortex.sh/portal"}},UPGRADE_REQUIRED:{en:{summary:"Your CLI version is outdated.",whatHappened:"The server requires a newer CLI version. Older versions are not allowed for security and compatibility reasons.",whatToDo:"Install the latest CLI globally with npm.",command:"npm install -g @ornexus/neocortex@latest"},"pt-BR":{summary:"Sua vers\xE3o do CLI est\xE1 desatualizada.",whatHappened:"O servidor exige uma vers\xE3o mais recente do CLI. Vers\xF5es antigas n\xE3o s\xE3o permitidas por motivos de seguran\xE7a e compatibilidade.",whatToDo:"Instale a vers\xE3o mais recente globalmente via npm.",command:"npm install -g @ornexus/neocortex@latest"}},RATE_LIMITED:{en:{summary:"You sent too many requests in a short window.",whatHappened:"You hit the rate limit for your plan. This protects the service from abuse and keeps it fast for everyone.",whatToDo:"Wait a few seconds and try again. If you hit this often, upgrading your plan raises the limit.",url:"https://neocortex.sh/portal/plans"},"pt-BR":{summary:"Voc\xEA fez muitas requisi\xE7\xF5es em pouco tempo.",whatHappened:"O limite de taxa do seu plano foi atingido. Isso protege o servi\xE7o contra abuso e mant\xE9m a velocidade para todos.",whatToDo:"Espere alguns segundos e tente novamente. Se isso acontece com frequ\xEAncia, fazer upgrade do seu plano aumenta o limite.",url:"https://neocortex.sh/portal/plans"}},TRIGGER_NOT_ALLOWED:{en:{summary:"This command is not available on your current plan.",whatHappened:"You tried to use a trigger that requires a paid plan (Pro or Enterprise).",whatToDo:"See the full comparison and upgrade in the portal.",url:"https://neocortex.sh/portal/plans"},"pt-BR":{summary:"Este comando n\xE3o est\xE1 dispon\xEDvel no seu plano atual.",whatHappened:"Voc\xEA tentou usar um trigger que requer um plano pago (Pro ou Enterprise).",whatToDo:"Veja a compara\xE7\xE3o completa e fa\xE7a upgrade no portal.",url:"https://neocortex.sh/portal/plans"}},QUOTA_EXCEEDED:{en:{summary:"Daily quota reached.",whatHappened:"You have used all invocations allowed by your plan today. Quotas reset at midnight UTC.",whatToDo:"Wait for the daily reset, or upgrade your plan for a higher quota.",url:"https://neocortex.sh/portal/plans"},"pt-BR":{summary:"Quota di\xE1ria atingida.",whatHappened:"Voc\xEA usou todas as invoca\xE7\xF5es permitidas pelo seu plano hoje. As quotas s\xE3o resetadas \xE0 meia-noite UTC.",whatToDo:"Aguarde o reset di\xE1rio ou fa\xE7a upgrade do plano para uma quota maior.",url:"https://neocortex.sh/portal/plans"}},SERVER_ERROR:{en:{summary:"Server error.",whatHappened:"Something went wrong on our side. We have logged the error and will investigate.",whatToDo:`Try again in a minute. If the problem persists, please contact ${t} with the details.`},"pt-BR":{summary:"Erro do servidor.",whatHappened:"Algo deu errado no nosso lado. O erro foi registrado e vamos investigar.",whatToDo:`Tente novamente em um minuto. Se o problema persistir, entre em contato: ${t}.`}},ECONNREFUSED:{en:{summary:"Cannot reach the Neocortex server.",whatHappened:"We could not open a connection to the server. This is usually a network problem on your side.",whatToDo:"Check your internet connection, any VPN or corporate proxy, and try again."},"pt-BR":{summary:"N\xE3o foi poss\xEDvel alcan\xE7ar o servidor Neocortex.",whatHappened:"N\xE3o conseguimos abrir uma conex\xE3o com o servidor. Isso geralmente \xE9 um problema de rede do seu lado.",whatToDo:"Verifique sua conex\xE3o, qualquer VPN ou proxy corporativo, e tente novamente."}},MACHINE_LIMIT_EXCEEDED:{en:{summary:"Machine limit reached.",whatHappened:"Your plan allows a limited number of active machines, and this one would exceed it.",whatToDo:"Deactivate a machine you no longer use from the portal, then re-run activate here.",url:"https://neocortex.sh/portal/machines"},"pt-BR":{summary:"Limite de m\xE1quinas atingido.",whatHappened:"Seu plano permite um n\xFAmero limitado de m\xE1quinas ativas, e esta ultrapassaria o limite.",whatToDo:"Desative uma m\xE1quina que voc\xEA n\xE3o usa mais no portal e rode activate aqui de novo.",url:"https://neocortex.sh/portal/machines"}},NOT_CONFIGURED:{en:{summary:"Neocortex is not configured on this machine.",whatHappened:"No license key was found. You need to run `neocortex activate` once before using the CLI.",whatToDo:"Get a license key from the portal and activate.",command:"neocortex activate YOUR-LICENSE-KEY",url:"https://neocortex.sh/portal"},"pt-BR":{summary:"Neocortex n\xE3o est\xE1 configurado nesta m\xE1quina.",whatHappened:"Nenhuma license key encontrada. Voc\xEA precisa rodar `neocortex activate` uma vez antes de usar o CLI.",whatToDo:"Pegue uma license key no portal e ative.",command:"neocortex activate SUA-LICENSE-KEY",url:"https://neocortex.sh/portal"}}};function r(o=process.env){return(o.LC_ALL??o.LANG??"").toLowerCase().startsWith("pt")?"pt-BR":"en"}function p(o,a=r()){const e=u[o];return e?e[a]??e.en??null:null}function c(o,a=r()){const e=[];e.push(""),e.push(`[Neocortex] ${o.summary}`),e.push("");const n=a==="pt-BR"?"O que aconteceu":"What happened",s=a==="pt-BR"?"O que fazer":"What to do",i=a==="pt-BR"?`Precisa de ajuda? ${t}`:`Need help? ${t}`;return e.push(`${n}: ${o.whatHappened}`),e.push(`${s}: ${o.whatToDo}`),o.command&&(e.push(""),e.push(`    ${o.command}`)),o.url&&(e.push(""),e.push(`    ${o.url}`)),e.push(""),e.push(i),e.push(""),e.join(`
+`)}function l(o){if(!o||typeof o!="object")return null;const a=o;return typeof a.code=="string"&&(a.code==="ECONNREFUSED"||a.code==="ENOTFOUND"||a.code==="ETIMEDOUT"||a.code==="ECONNRESET")||typeof a.message=="string"&&(/connect/i.test(a.message)&&/refus/i.test(a.message)||/fetch failed/i.test(a.message))?"ECONNREFUSED":null}export{r as detectErrorLocale,c as formatHumanizedError,p as humanizeError,l as inferErrorCodeFromException};

package/packages/client/dist/graph-retrieval/pre-command-hook.d.ts

@@ -0,0 +1,34 @@
+/**
+ * P158.06 -- optional pre-command deterministic graph retrieval enrichment.
+ *
+ * The client collects a tiny, public, redacted context envelope for commands
+ * resolved by the shared command context policy shadow. It never constructs
+ * workflow prompts or decides orchestration; the server validates and decides
+ * whether to consume this auxiliary metadata.
+ */
+import { type CommandContextRetrievalProfile, type GraphRetrievalMetadata } from './shared-graph-retrieval-contract.js';
+declare const CONTRACT_VERSION = "client-pre-command-v1";
+export interface GraphRetrievalHookContext {
+    readonly args: string;
+    readonly projectRoot: string;
+    readonly featureFlag: boolean;
+    readonly nowIso?: string;
+    readonly logger?: {
+        readonly warn?: (msg: string) => void;
+    };
+}
+export type GraphRetrievalCommand = string;
+export type GraphRetrievalEnrichmentMetadata = GraphRetrievalMetadata & {
+    readonly contractVersion: typeof CONTRACT_VERSION;
+    readonly command: GraphRetrievalCommand;
+};
+export interface GraphRetrievalHookResult {
+    readonly applied: boolean;
+    readonly reason: 'flag_off' | 'command_not_allowlisted' | 'no_items' | 'applied' | 'hook_error';
+    readonly command?: GraphRetrievalCommand;
+    readonly profile?: CommandContextRetrievalProfile;
+    readonly metadata?: GraphRetrievalEnrichmentMetadata;
+    readonly warning?: string;
+}
+export declare function runGraphRetrievalHook(ctx: GraphRetrievalHookContext): Promise<GraphRetrievalHookResult>;
+export {};

package/packages/client/dist/graph-retrieval/pre-command-hook.js

@@ -0,0 +1 @@
+import{createHash as _}from"node:crypto";import{existsSync as T,readFileSync as f,statSync as v}from"node:fs";import{join as h}from"node:path";import{DEFAULT_GRAPH_RETRIEVAL_BUDGETS as y,createGraphRetrievalMetadata as g,normalizeGraphRetrievalPath as i,resolveClientCommandContextPolicy as I}from"./shared-graph-retrieval-contract.js";const u="client-pre-command-v1",P="1970-01-01T00:00:00.000Z";function E(e){return I(e)}function p(e){return _("sha256").update(e).digest("hex")}function m(e){const t=i(e);return t.length===0||t.startsWith("/")||t.startsWith("..")||t.includes("/../")||/(^|\/)\.env(?:$|[./-])/i.test(t)||/(^|\/)(?:credentials?|secrets?|tokens?|private-prompts?|raw-logs?)(?:\.|\/|$)/i.test(t)||/\.(?:sqlite|db|pem|key|p12|pfx|crt|cer|der|bin)$/i.test(t)}function A(e,t){const n=i(t);if(m(n))return null;const o=h(e,n);if(!T(o))return null;const r=v(o);if(!r.isFile()||r.size>96*1024)return null;const a=f(o,"utf8");return{kind:"repo-path",path:n,contentHash:p(a).slice(0,16),mtimeMs:Math.floor(r.mtimeMs)}}function b(e){let t=e;const n=t;return t=t.replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi,"[REDACTED_EMAIL]"),t=t.replace(/\b(api[-_ ]?key|license[-_ ]?key|token|password|secret)\b\s*[:=]\s*[^\s`'"\])}]+/gi,"$1=[REDACTED_SECRET]"),t=t.replace(/\b(?:sk|pk|ghp|github_pat|pat)_[A-Za-z0-9_\-]{16,}\b/g,"[REDACTED_TOKEN]"),t=t.replace(/\b[A-Za-z0-9+/]{32,}={0,2}\b/g,"[REDACTED_TOKEN]"),t=t.replace(/<!--\s*(?:server|private|proprietary)[\s\S]*?-->/gi,"[REDACTED_PRIVATE_PROMPT]"),t=t.replace(/\b(?:private|proprietary|protected)\s+(?:prompt|workflow|step\s*body|orchestration)\b[^.!?\n]*/gi,"[REDACTED_PRIVATE_PROMPT]"),{text:t,redacted:t!==n}}function k(e,t=y.maxSnippetChars){const n=e.split(/\r?\n/).map(r=>r.trim()).filter(r=>r.length>0&&!r.startsWith("---")&&!r.startsWith("<!--")).slice(0,8).join(" "),o=b(n);return{summary:o.text.slice(0,t),redacted:o.redacted}}function R(e,t){const n=A(e,t.path);if(!n)return null;const o=f(h(e,n.path),"utf8"),r=k(o,t.maxSnippetChars);return{nodeType:t.nodeType,stableId:t.stableId,source:n,confidence:r.redacted?Math.min(t.confidence,.72):t.confidence,reasonCode:t.reasonCode,budgetCost:t.budgetCost,summary:r.summary,warnings:r.redacted?["redacted_sensitive_content"]:void 0,score:t.score}}function x(e){const t=`Public command ${e.commandId}; graphRetrieval profile ${e.retrievalProfile}; context is auxiliary, redacted, budgeted and non-authoritative.`;return{nodeType:"Command",stableId:`command:${e.commandId}`,source:{kind:"command",path:e.commandId,contentHash:p(t).slice(0,16)},confidence:.88,reasonCode:"command_surface_match",budgetCost:1,summary:t.slice(0,e.retrievalBudget.maxSnippetChars),score:90}}function C(e){return e.match(/@?(docs\/stories\/[A-Za-z0-9._-]+\.story\.md)\b/)?.[1]??null}function S(e){return e.match(/@?(docs\/epics\/[A-Za-z0-9._-]+\.md)\b/)?.[1]??null}function D(e){const o=C(e)?.split("/").pop()?.replace(/\.story\.md$/,"")?.match(/^(P\d+)\./i)?.[1];if(o)return o.toUpperCase();const r=e.match(/\b(P\d+)(?:\.\d+)?\b/i)?.[1];return r?r.toUpperCase():null}function $(e){return[...e.matchAll(/@?((?:docs|core)\/[A-Za-z0-9_./-]+\.md)\b/g)].map(t=>i(t[1])).filter(t=>!m(t))}function w(e){return e.startsWith("docs/stories/")?{nodeType:"Story",reasonCode:"story_scope_match"}:e.startsWith("docs/epics/")?{nodeType:"Epic",reasonCode:"epic_scope_match"}:e.includes("security")||e.includes("policy")||e.includes("standard")?{nodeType:"Guardrail",reasonCode:"guardrail_match"}:{nodeType:"Doc",reasonCode:"architecture_reference"}}function s(e,t){const n=i(t.path);if(m(n))return;e.some(r=>r.nodeType===t.nodeType&&i(r.path)===n)||e.push({...t,path:n})}function G(e,t,n){const o=C(t);if(o){const c=o.split("/").pop()?.replace(/\.story\.md$/,"")??o;s(e,{path:o,nodeType:"Story",stableId:c,reasonCode:"story_scope_match",confidence:.96,budgetCost:3,score:96,maxSnippetChars:n})}const r=S(t),a=D(t);if(r){const c=r.split("/").pop()?.replace(/\.md$/,"")??r;s(e,{path:r,nodeType:"Epic",stableId:c,reasonCode:"epic_scope_match",confidence:.92,budgetCost:3,score:92,maxSnippetChars:n})}else a&&s(e,{path:`docs/epics/epic-${a}.md`,nodeType:"Epic",stableId:a,reasonCode:"epic_scope_match",confidence:.9,budgetCost:3,score:90,maxSnippetChars:n});for(const c of $(t)){const l=c.split("/").pop()?.replace(/\.md$/,"").replace(/\.story$/,"")??c,d=w(c);s(e,{path:c,stableId:l,...d,confidence:.84,budgetCost:3,score:82,maxSnippetChars:n})}}function M(e,t,n){const o=e.retrievalBudget.maxSnippetChars,r=[];return s(r,{path:"NEOCORTEX.md",nodeType:"CanonicalMemory",stableId:"canonical-memory",reasonCode:"canonical_memory_seed",confidence:.92,budgetCost:4,score:100,maxSnippetChars:o}),s(r,{path:"AGENTS.md",nodeType:"PlatformMemory",stableId:"platform-memory:agents",reasonCode:"platform_memory_reference",confidence:.7,budgetCost:2,score:66,maxSnippetChars:o}),s(r,{path:"package.json",nodeType:"Package",stableId:"root-package",reasonCode:"package_surface_match",confidence:.78,budgetCost:2,score:72,maxSnippetChars:o}),(e.retrievalProfile!=="utility"||e.commandId==="ui-ux-review")&&s(r,{path:"docs/arquitetura-software/deterministic-graph-retrieval.md",nodeType:"Doc",stableId:"deterministic-graph-retrieval",reasonCode:"architecture_reference",confidence:.9,budgetCost:4,score:84,maxSnippetChars:o}),G(r,t,o),(["story-execution","diagnostic","research","review","qa","recovery","planning"].includes(e.retrievalProfile)||e.commandId==="tech-debt")&&s(r,{path:".neocortex/tech-debt-registry.json",nodeType:"Debt",stableId:"tech-debt-registry",reasonCode:"debt_area_match",confidence:.74,budgetCost:3,score:76,maxSnippetChars:o}),["story-execution","diagnostic","research","review","qa","recovery","planning","architecture"].includes(e.retrievalProfile)&&s(r,{path:"core/standards/spec-driven-development.md",nodeType:"Guardrail",stableId:"spec-driven-development",reasonCode:"guardrail_match",confidence:.82,budgetCost:3,score:78,maxSnippetChars:o}),e.retrievalProfile==="security"&&s(r,{path:"docs/architecture/solyd-security-system-contract.md",nodeType:"Guardrail",stableId:"solyd-security-system-contract",reasonCode:"guardrail_match",confidence:.86,budgetCost:3,score:84,maxSnippetChars:o}),e.retrievalProfile==="continuity"&&(s(r,{path:"core/standards/enterprise-continuity-plane.md",nodeType:"Guardrail",stableId:"enterprise-continuity-plane",reasonCode:"guardrail_match",confidence:.86,budgetCost:3,score:84,maxSnippetChars:o}),s(r,{path:"docs/runbooks/enterprise-continuity-runner.md",nodeType:"Doc",stableId:"enterprise-continuity-runner",reasonCode:"architecture_reference",confidence:.78,budgetCost:3,score:72,maxSnippetChars:o})),["utility","continuity","recovery"].includes(e.retrievalProfile)&&s(r,{path:".neocortex/state.json",nodeType:"State",stableId:"project-state",reasonCode:"state_status_match",confidence:.68,budgetCost:3,score:70,maxSnippetChars:o}),[x(e),...r.map(a=>R(n,a)).filter(a=>a!==null)]}function z(e){let t=[...e.items],n=e;const o=Math.min(e.budget.maxPayloadBytes,y.maxPayloadBytes);for(;Buffer.byteLength(JSON.stringify(n),"utf8")>o&&t.length>0;){const r=t.pop(),a=g({retrievalId:e.retrievalId,query:e.query,items:t,generatedAt:e.generatedAt,warnings:e.warnings,budgets:e.budget});n={...a,skipped:r?[...a.skipped,{stableId:r.stableId,source:r.source,reasonCode:"budget_exceeded"}]:a.skipped,contractVersion:u,command:e.command}}return n}async function j(e){const t=E(e.args);if(!t)return{applied:!1,reason:"command_not_allowlisted"};const n=t.commandId;try{const o=M(t,e.args,e.projectRoot);if(o.length===0)return{applied:!1,reason:"no_items",command:n,profile:t.retrievalProfile};const r=b(e.args.trim().slice(0,240)).text,a=p(`${u}:${n}:${r}:${o.map(d=>`${d.source.path}:${d.source.contentHash??""}`).sort().join("|")}`).slice(0,24),c=g({retrievalId:a,query:r,items:o,generatedAt:e.nowIso??P,budgets:t.retrievalBudget}),l=z({...c,contractVersion:u,command:n});return{applied:!0,reason:"applied",command:n,profile:t.retrievalProfile,metadata:l}}catch(o){const r=o instanceof Error?o.message:String(o);return e.logger?.warn?.(`[neocortex] graph retrieval hook failed: ${r}. Proceeding without enrichment.`),{applied:!1,reason:"hook_error",command:n,profile:t.retrievalProfile,warning:r}}}export{j as runGraphRetrievalHook};

package/packages/client/dist/graph-retrieval/shared-graph-retrieval-contract.d.ts

@@ -0,0 +1,99 @@
+/**
+ * P158.06 client-side SSoT shadow for graph retrieval metadata.
+ *
+ * Mirrored from @neocortex/shared/graph-retrieval-contract and the public
+ * P198.01 command context policy for globally installed clients, where importing
+ * shared source/dist subpaths can break before the monorepo build has
+ * materialized dist files.
+ */
+export declare const GRAPH_RETRIEVAL_SCHEMA_VERSION: 1;
+export declare const GRAPH_RETRIEVAL_CLIENT_CONTRACT_VERSION: "client-pre-command-v1";
+export type GraphRetrievalCommand = string;
+export declare const COMMAND_CONTEXT_RETRIEVAL_PROFILES: readonly ["utility", "planning", "architecture", "diagnostic", "research", "story-execution", "review", "qa", "security", "continuity", "recovery"];
+export type CommandContextRetrievalProfile = (typeof COMMAND_CONTEXT_RETRIEVAL_PROFILES)[number];
+export interface ClientCommandContextPolicyEntry {
+    readonly commandId: GraphRetrievalCommand;
+    readonly number?: number;
+    readonly aliases: readonly string[];
+    readonly retrievalProfile: CommandContextRetrievalProfile;
+    readonly retrievalBudget: GraphRetrievalBudgets;
+}
+export type GraphRetrievalNodeType = 'CanonicalMemory' | 'PlatformMemory' | 'Doc' | 'Epic' | 'Story' | 'Command' | 'State' | 'Debt' | 'Package' | 'Api' | 'Route' | 'DbSchema' | 'Flag' | 'BusinessRule' | 'Guardrail' | 'Risk';
+export type GraphRetrievalEdgeType = 'references' | 'derived_from' | 'updates' | 'governs' | 'implements' | 'depends_on' | 'conflicts_with' | 'supersedes' | 'documents' | 'affects' | 'retrieved_for';
+export type GraphRetrievalReasonCode = 'canonical_memory_seed' | 'platform_memory_reference' | 'architecture_reference' | 'story_scope_match' | 'epic_scope_match' | 'command_surface_match' | 'state_status_match' | 'debt_area_match' | 'package_surface_match' | 'api_surface_match' | 'route_surface_match' | 'db_schema_surface_match' | 'flag_surface_match' | 'business_rule_match' | 'guardrail_match' | 'risk_match' | 'dependency_match' | 'conflict_warning' | 'stale_source_warning' | 'budget_exceeded' | 'redacted_sensitive_content' | 'invalid_source_rejected';
+export interface GraphRetrievalBudgets {
+    readonly maxItems: number;
+    readonly maxEdges: number;
+    readonly maxPayloadBytes: number;
+    readonly maxSnippetChars: number;
+    readonly maxLabelChars: number;
+    readonly maxTotalCost: number;
+}
+export declare const DEFAULT_GRAPH_RETRIEVAL_BUDGETS: GraphRetrievalBudgets;
+export declare const CLIENT_GRAPH_RETRIEVAL_PROFILE_BUDGETS: Readonly<Record<CommandContextRetrievalProfile, GraphRetrievalBudgets>>;
+export declare const CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES: readonly ClientCommandContextPolicyEntry[];
+export declare const CLIENT_INTERNAL_COMMAND_CONTEXT_POLICIES: readonly ClientCommandContextPolicyEntry[];
+export declare const CLIENT_COMMAND_CONTEXT_POLICIES: readonly ClientCommandContextPolicyEntry[];
+export declare const CLIENT_COMMAND_CONTEXT_POLICY_BY_ID: Readonly<Record<string, ClientCommandContextPolicyEntry>>;
+export declare const CLIENT_COMMAND_CONTEXT_POLICY_BY_NUMBER: Readonly<Record<number, ClientCommandContextPolicyEntry>>;
+export declare const CLIENT_COMMAND_CONTEXT_POLICY_ALIAS_MAP: Readonly<Record<string, string>>;
+export declare function normalizeCommandToken(input: string): string;
+export declare function listClientPublicCommandContextPolicies(): readonly ClientCommandContextPolicyEntry[];
+export declare function listClientInternalCommandContextPolicies(): readonly ClientCommandContextPolicyEntry[];
+export declare function listClientCommandContextPolicies(): readonly ClientCommandContextPolicyEntry[];
+export declare function resolveClientCommandContextPolicy(input: string): ClientCommandContextPolicyEntry | null;
+export interface GraphRetrievalSource {
+    readonly kind: 'repo-path' | 'state' | 'command' | 'generated-summary';
+    readonly path: string;
+    readonly contentHash?: string;
+    readonly mtimeMs?: number;
+}
+export interface GraphRetrievalEdge {
+    readonly type: GraphRetrievalEdgeType;
+    readonly targetNodeType: GraphRetrievalNodeType;
+    readonly targetStableId: string;
+    readonly source: GraphRetrievalSource;
+    readonly confidence: number;
+    readonly reasonCode: GraphRetrievalReasonCode;
+}
+export interface GraphRetrievalItem {
+    readonly nodeType: GraphRetrievalNodeType;
+    readonly stableId: string;
+    readonly source: GraphRetrievalSource;
+    readonly confidence: number;
+    readonly reasonCode: GraphRetrievalReasonCode;
+    readonly budgetCost: number;
+    readonly summary: string;
+    readonly edges?: readonly GraphRetrievalEdge[];
+    readonly warnings?: readonly GraphRetrievalReasonCode[];
+    readonly score?: number;
+}
+export interface GraphRetrievalSkippedItem {
+    readonly stableId: string;
+    readonly reasonCode: 'budget_exceeded' | 'redacted_sensitive_content' | 'invalid_source_rejected';
+    readonly source?: GraphRetrievalSource;
+}
+export interface GraphRetrievalMetadata {
+    readonly schemaVersion: typeof GRAPH_RETRIEVAL_SCHEMA_VERSION;
+    readonly contractVersion?: typeof GRAPH_RETRIEVAL_CLIENT_CONTRACT_VERSION;
+    readonly command?: GraphRetrievalCommand;
+    readonly retrievalId: string;
+    readonly query: string;
+    readonly budget: GraphRetrievalBudgets & {
+        readonly totalCost: number;
+    };
+    readonly items: readonly GraphRetrievalItem[];
+    readonly skipped: readonly GraphRetrievalSkippedItem[];
+    readonly warnings: readonly GraphRetrievalReasonCode[];
+    readonly generatedAt: string;
+}
+export declare function normalizeGraphRetrievalPath(path: string): string;
+export declare function compareGraphRetrievalItems(a: GraphRetrievalItem, b: GraphRetrievalItem): number;
+export declare function createGraphRetrievalMetadata(params: {
+    readonly retrievalId: string;
+    readonly query: string;
+    readonly items: readonly GraphRetrievalItem[];
+    readonly generatedAt: string;
+    readonly budgets?: Partial<GraphRetrievalBudgets>;
+    readonly warnings?: readonly GraphRetrievalReasonCode[];
+}): GraphRetrievalMetadata;

package/packages/client/dist/graph-retrieval/shared-graph-retrieval-contract.js

@@ -0,0 +1 @@
+const L=1,O="client-pre-command-v1",N=["utility","planning","architecture","diagnostic","research","story-execution","review","qa","security","continuity","recovery"],P={maxItems:24,maxEdges:64,maxPayloadBytes:12288,maxSnippetChars:480,maxLabelChars:160,maxTotalCost:100},i=e=>Object.freeze({...e}),v=Object.freeze({utility:i({maxItems:4,maxEdges:8,maxPayloadBytes:4*1024,maxSnippetChars:280,maxLabelChars:96,maxTotalCost:40}),planning:i({maxItems:12,maxEdges:48,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:70}),architecture:i({maxItems:10,maxEdges:48,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:65}),diagnostic:i({maxItems:10,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:60}),research:i({maxItems:10,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:60}),"story-execution":i({maxItems:6,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:50}),review:i({maxItems:8,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:55}),qa:i({maxItems:6,maxEdges:24,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:50}),security:i({maxItems:8,maxEdges:24,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:55}),continuity:i({maxItems:6,maxEdges:16,maxPayloadBytes:4*1024,maxSnippetChars:280,maxLabelChars:96,maxTotalCost:45}),recovery:i({maxItems:8,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:55})}),u=e=>Object.freeze({commandId:e.commandId,...e.number===void 0?{}:{number:e.number},aliases:Object.freeze([...e.aliases??[]]),retrievalProfile:e.retrievalProfile,retrievalBudget:v[e.retrievalProfile]}),C=[{commandId:"status",number:1,aliases:["st"],retrievalProfile:"utility"},{commandId:"init",number:2,aliases:["inicializar"],retrievalProfile:"utility"},{commandId:"arch-plan",number:3,aliases:["arquitetura","architecture","arch"],retrievalProfile:"architecture"},{commandId:"arch-prd",number:4,aliases:["prd","product-requirements"],retrievalProfile:"architecture"},{commandId:"arch-architecture",number:5,aliases:["arch-doc","tech-architecture"],retrievalProfile:"architecture"},{commandId:"arch-api-contracts",number:6,aliases:["api-contracts","api-contract"],retrievalProfile:"architecture"},{commandId:"arch-api-integrations",number:7,aliases:["api-integrations","api-int"],retrievalProfile:"architecture"},{commandId:"arch-database",number:8,aliases:["database-schema","db-schema","db"],retrievalProfile:"architecture"},{commandId:"arch-security",number:9,aliases:["cyber-security","security","sec"],retrievalProfile:"architecture"},{commandId:"arch-design-system",number:10,aliases:["design-system","ds","atomic-design"],retrievalProfile:"architecture"},{commandId:"arch-ux-design",number:11,aliases:["ux-design","ux","wireframes","wireframe","user-flows"],retrievalProfile:"architecture"},{commandId:"arch-performance",number:12,aliases:["performance","perf","capacity-planning","capacity","arch-perf","performance-strategy"],retrievalProfile:"architecture"},{commandId:"arch-testing",number:13,aliases:["testing-strategy","test-plan","test-strategy","arch-test"],retrievalProfile:"architecture"},{commandId:"arch-infrastructure",number:14,aliases:["infrastructure","infra","deploy-plan","deployment","arch-infra","arch-deploy"],retrievalProfile:"architecture"},{commandId:"arch-review",number:15,aliases:["review-consolidation","consolidation","architecture-review","arch-consolidation"],retrievalProfile:"architecture"},{commandId:"arch-fitness-functions",number:16,aliases:["fitness","fitness-functions","archfit","arch-fit","fit-funcs"],retrievalProfile:"architecture"},{commandId:"create-epic",number:17,aliases:["criar-epic","planejamento"],retrievalProfile:"planning"},{commandId:"idea-diagnose",number:18,aliases:["idea-diag"],retrievalProfile:"planning"},{commandId:"idea-research",number:19,aliases:["idea-pesq"],retrievalProfile:"planning"},{commandId:"generate-epic",number:20,aliases:["gerar-epic"],retrievalProfile:"planning"},{commandId:"exec",number:21,aliases:["executar","pipeline"],retrievalProfile:"story-execution"},{commandId:"yolo",number:22,retrievalProfile:"story-execution"},{commandId:"epic",number:23,aliases:["parallel-epic"],retrievalProfile:"story-execution"},{commandId:"setup-branch",number:24,aliases:["setup","branch"],retrievalProfile:"story-execution"},{commandId:"diagnose",number:25,aliases:["diag","diagnostico","c02"],retrievalProfile:"diagnostic"},{commandId:"research",number:26,aliases:["pesquisar","pesq","research-fix","c03"],retrievalProfile:"research"},{commandId:"write-spec",number:27,aliases:["spec","especificacao","c04"],retrievalProfile:"story-execution"},{commandId:"create-tasks",number:28,aliases:["tasks","tarefas","c05"],retrievalProfile:"story-execution"},{commandId:"implement",number:29,aliases:["impl","implementar","c06"],retrievalProfile:"story-execution"},{commandId:"commit",number:30,aliases:["push","commit-push","commit_push","cp","c07"],retrievalProfile:"story-execution"},{commandId:"sync",number:31,aliases:["sincronizar","c08"],retrievalProfile:"story-execution"},{commandId:"create-pr",number:32,aliases:["pr","c09"],retrievalProfile:"story-execution"},{commandId:"review",number:33,aliases:["revisar","c11"],retrievalProfile:"review"},{commandId:"merge",number:34,aliases:["mesclar","c12"],retrievalProfile:"story-execution"},{commandId:"fix-blocked",number:35,aliases:["fix","corrigir"],retrievalProfile:"recovery"},{commandId:"finalize-epic",number:36,aliases:["finalizar"],retrievalProfile:"recovery"},{commandId:"resolve-conflicts",number:37,aliases:["conflitos"],retrievalProfile:"recovery"},{commandId:"update-memory",number:38,aliases:["memoria"],retrievalProfile:"recovery"},{commandId:"refactor",number:39,aliases:["refactoring","refact","refac","rf","cleanup-code","code-cleanup","code-quality","improve-code","modernize","modernization","legacy","legacy-code","debt-pay","pay-debt","debt-reduction","smell-fix","fix-smells","code-smells","strangler","strangler-fig"],retrievalProfile:"recovery"},{commandId:"cleanup",number:40,aliases:["limpar","limpeza"],retrievalProfile:"utility"},{commandId:"audit",number:41,aliases:["auditar","auditoria"],retrievalProfile:"utility"},{commandId:"tech-debt",number:42,aliases:["debt","debts","debt-list","tech-debts","td"],retrievalProfile:"utility"},{commandId:"menu",number:43,aliases:["help","ajuda","?","commands","cmds"],retrievalProfile:"utility"},{commandId:"plans",number:44,aliases:["planos","pricing"],retrievalProfile:"utility"},{commandId:"billing",number:45,aliases:["bill","subscription","sub"],retrievalProfile:"utility"},{commandId:"subscribe",number:46,aliases:["upgrade","checkout"],retrievalProfile:"utility"},{commandId:"qa-scan",number:47,aliases:["qa","qa-test","visual-qa","e2e-scan","troubleshoot","debug-ui","scan","a11y","accessibility","wcag"],retrievalProfile:"qa"},{commandId:"yoloop",number:48,aliases:["auto-yolo","epic-runner","story-runner","loop-yolo","auto-epic"],retrievalProfile:"utility"},{commandId:"migrate-state",number:49,aliases:["migrate","state-migrate","schema-migrate"],retrievalProfile:"utility"},{commandId:"policy-audit",number:50,aliases:["policy","audit-policy","policy-history","policies"],retrievalProfile:"utility"},{commandId:"mutation-test",number:51,aliases:["mutation","stryker","kill-mutants"],retrievalProfile:"qa"},{commandId:"sync-openapi",number:52,aliases:["openapi-sync","api-sync","spec-sync","regen-openapi"],retrievalProfile:"utility"},{commandId:"generate-pacts",number:53,aliases:["pacts","gen-pacts","regen-pacts","create-pacts"],retrievalProfile:"utility"},{commandId:"verify-pacts",number:54,aliases:["verify-pact","pact-verify","check-pacts","pact-check"],retrievalProfile:"utility"},{commandId:"property-test",number:55,aliases:["property","pbt","proptest","property-tests","invariant-test"],retrievalProfile:"qa"},{commandId:"chaos-plan",number:56,aliases:["chaos","gameday","resilience-test"],retrievalProfile:"utility"},{commandId:"ui-ux-review",number:57,aliases:["ux-review","design-review","visual-review","product-polish"],retrievalProfile:"utility"},{commandId:"solyd-system",number:58,aliases:["security-system","authorized-security","sec-system"],retrievalProfile:"security"},{commandId:"goal",number:59,aliases:["goals","durable-goal","continuity-goal"],retrievalProfile:"continuity"},{commandId:"loop",number:60,aliases:["loops","durable-loop","continuity-loop"],retrievalProfile:"continuity"},{commandId:"jobs",number:61,aliases:["job","continuity-jobs"],retrievalProfile:"continuity"},{commandId:"runner",number:62,aliases:["neocortex-runner","continuity-runner"],retrievalProfile:"continuity"}],g=[{commandId:"diagnose-inline",retrievalProfile:"diagnostic"},{commandId:"research-inline",retrievalProfile:"research"},{commandId:"yolo-inline",retrievalProfile:"story-execution"},{commandId:"goal-tick",retrievalProfile:"continuity"},{commandId:"loop-tick",retrievalProfile:"continuity"}],l=Object.freeze(C.map(u)),p=Object.freeze(g.map(u)),f=Object.freeze([...l,...p]),m=Object.freeze(Object.fromEntries(f.map(e=>[e.commandId,e]))),E=Object.freeze(Object.fromEntries(l.filter(e=>e.number!==void 0).map(e=>[e.number,e]))),_=Object.freeze(Object.fromEntries(l.flatMap(e=>e.aliases.map(a=>[y(a),e.commandId]))));function y(e){return e.trim().toLowerCase().replace(/^\*/,"")}function T(e){return e.trim().split(/\s+/,1)[0]??""}function R(){return l}function S(){return p}function A(){return f}function M(e){const a=T(e);if(!a)return m.menu??null;const t=y(a);return/^\d+$/.test(t)?E[Number.parseInt(t,10)]??null:m[t]??m[_[t]??""]??null}const b={CanonicalMemory:0,Guardrail:1,Debt:2,State:3,Story:4,Epic:5,Command:6,Doc:7,Package:8,Api:9,Route:10,DbSchema:11,Flag:12,BusinessRule:13,Risk:14,PlatformMemory:15};function d(e){return e.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\.\//,"")}function I(e){return[e.nodeType,`${e.source.kind}:${d(e.source.path).toLowerCase()}`,e.stableId.toLowerCase()].join("|")}function x(e){return e.score??0}function h(e,a){const t=x(a)-x(e);if(t!==0)return t;const o=a.confidence-e.confidence;if(o!==0)return o;const s=e.budgetCost-a.budgetCost;if(s!==0)return s;const n=b[e.nodeType]-b[a.nodeType];if(n!==0)return n;const r=d(e.source.path).localeCompare(d(a.source.path),"en-US");return r!==0?r:e.stableId.localeCompare(a.stableId,"en-US")}function D(e){const a={...P,...e.budgets},t=new Map;for(const r of e.items){const c=t.get(I(r));(!c||h(r,c)<0)&&t.set(I(r),r)}const o=[],s=[];let n=0;for(const r of[...t.values()].sort(h)){const c=n+Math.max(1,r.budgetCost);if(o.length>=a.maxItems||c>a.maxTotalCost){s.push({stableId:r.stableId,source:r.source,reasonCode:"budget_exceeded"});continue}o.push(r),n=c}return{schemaVersion:1,retrievalId:e.retrievalId,query:e.query,budget:{...a,totalCost:n},items:o,skipped:s,warnings:e.warnings??[],generatedAt:e.generatedAt}}export{f as CLIENT_COMMAND_CONTEXT_POLICIES,_ as CLIENT_COMMAND_CONTEXT_POLICY_ALIAS_MAP,m as CLIENT_COMMAND_CONTEXT_POLICY_BY_ID,E as CLIENT_COMMAND_CONTEXT_POLICY_BY_NUMBER,v as CLIENT_GRAPH_RETRIEVAL_PROFILE_BUDGETS,p as CLIENT_INTERNAL_COMMAND_CONTEXT_POLICIES,l as CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES,N as COMMAND_CONTEXT_RETRIEVAL_PROFILES,P as DEFAULT_GRAPH_RETRIEVAL_BUDGETS,O as GRAPH_RETRIEVAL_CLIENT_CONTRACT_VERSION,L as GRAPH_RETRIEVAL_SCHEMA_VERSION,h as compareGraphRetrievalItems,D as createGraphRetrievalMetadata,A as listClientCommandContextPolicies,S as listClientInternalCommandContextPolicies,R as listClientPublicCommandContextPolicies,y as normalizeCommandToken,d as normalizeGraphRetrievalPath,M as resolveClientCommandContextPolicy};

package/packages/client/dist/i18n/first-run.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * First-run messages -- localized welcome strings shown on the user's
+ * first `neocortex-client invoke` call. Writes to stderr so it never
+ * contaminates instruction output. See P76.02.
+ */
+export type FirstRunLocale = 'pt-BR' | 'en';
+export interface FirstRunMessage {
+    readonly banner: string;
+    readonly intro: string;
+    readonly commands: readonly {
+        label: string;
+        description: string;
+    }[];
+    readonly tip: string;
+}
+export declare const FIRST_RUN_MESSAGES: Record<FirstRunLocale, FirstRunMessage>;
+/** Detect the best locale from process.env.LANG / LC_ALL. Falls back to en. */
+export declare function detectFirstRunLocale(env?: NodeJS.ProcessEnv): FirstRunLocale;
+/** Render the first-run message as a plain-text block suitable for stderr. */
+export declare function renderFirstRunMessage(locale: FirstRunLocale): string;

package/packages/client/dist/i18n/first-run.js

@@ -0,0 +1,2 @@
+const i={en:{banner:"\u2500\u2500 Welcome to Neocortex \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",intro:"Looks like this is your first time here. Here are a few commands to get started:",commands:[{label:"@neocortex *menu",description:"See all available commands"},{label:"@neocortex *arch-plan",description:"Plan a new project architecture"},{label:"@neocortex *yolo",description:"Quick implementation mode"},{label:"@neocortex *status",description:"Check your project status"}],tip:"Tip: run `@neocortex *menu` for the full, tier-aware command list."},"pt-BR":{banner:"\u2500\u2500 Bem-vindo ao Neocortex \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",intro:"Parece que esta \xE9 a sua primeira vez por aqui. Alguns comandos para come\xE7ar:",commands:[{label:"@neocortex *menu",description:"Ver todos os comandos dispon\xEDveis"},{label:"@neocortex *arch-plan",description:"Planejar a arquitetura de um novo projeto"},{label:"@neocortex *yolo",description:"Modo de implementa\xE7\xE3o r\xE1pida"},{label:"@neocortex *status",description:"Ver o status do seu projeto"}],tip:"Dica: execute `@neocortex *menu` para a lista completa (j\xE1 filtrada pelo seu tier)."}};function c(t=process.env){return(t.LC_ALL??t.LANG??"").toLowerCase().startsWith("pt")?"pt-BR":"en"}function p(t){const o=i[t],n=62,s=o.commands.reduce((r,a)=>Math.max(r,a.label.length),0),e=[];e.push(o.banner),e.push(""),e.push(o.intro),e.push("");for(const r of o.commands){const a=r.label.padEnd(s+2);e.push(`  ${a}${r.description}`)}return e.push(""),e.push(o.tip),e.push("".padEnd(n,"\u2500")),e.push(""),e.join(`
+`)}export{i as FIRST_RUN_MESSAGES,c as detectFirstRunLocale,p as renderFirstRunMessage};

package/packages/client/dist/index.d.ts

@@ -0,0 +1,56 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - Thin Client Abstraction Layer
+ *
+ * Strategy pattern for transparent asset resolution from either
+ * local filesystem (development) or remote server (production).
+ *
+ * @example
+ * ```typescript
+ * import { createResolver, collectContext } from '@neocortex/client';
+ *
+ * // Auto-detect resolver based on environment
+ * const resolver = await createResolver();
+ *
+ * // Collect pipeline context
+ * const context = await collectContext({
+ *   projectRoot: process.cwd(),
+ *   storyFilePath: 'docs/stories/1.1.story.md',
+ *   storyId: '1.1',
+ *   stepId: 'step-c-06-implement-tasks',
+ * });
+ *
+ * // Resolve a step (works the same whether local or remote)
+ * const step = await resolver.resolveStep('step-c-01-setup-branch', context);
+ * ```
+ */
+export type { AssembledPrompt, CacheProvider, CodebaseMetadata, CreateResolverOptions, LocalResolverOptions, PipelineContext, RemoteResolverOptions, SkillContent, StandardContent, StepContent, StepRegistry, StepRegistryEntry, StoryMetadata, } from './types/index.js';
+export { ResolverMode, NoOpCache } from './types/index.js';
+export type { AssetResolver } from './resolvers/asset-resolver.js';
+export { LocalResolver } from './resolvers/local-resolver.js';
+export { RemoteResolver, RemoteResolverError } from './resolvers/remote-resolver.js';
+export { EncryptedCache, type EncryptedCacheOptions } from './cache/index.js';
+export { createResolver, selectResolver, type ResolverSelectionResult, } from './config/resolver-selection.js';
+export { collectContext, type CollectContextOptions, } from './context/context-collector.js';
+export { sanitizeValue, sanitizeRecord, sanitizeObject, } from './context/context-sanitizer.js';
+export { getMachineFingerprint } from './machine/index.js';
+export { LicenseClient, type LicenseClientOptions } from './license/index.js';
+export type { InjectionMethod, PlatformInstructions, TargetAdapter, TargetCapabilities, TargetConfig, DetectionContext, DetectionResult, FileExistsCheck, TargetId, } from './adapters/index.js';
+export { ClaudeCodeAdapter, CursorAdapter, VSCodeAdapter, GeminiAdapter, CodexAdapter, AntigravityAdapter, AdapterRegistry, UnknownTargetError, createDefaultRegistry, detectPlatform, isValidTargetId, } from './adapters/index.js';
+export { ClientCircuitBreaker, type CircuitState, type CircuitBreakerConfig, type CircuitBreakerState, DegradationManager, DegradationLevel, type DegradationContext, type DegradationDecision, FreshnessIndicator, type FreshnessInfo, RecoveryDetector, type RecoveryActions, type RecoveryResult, } from './resilience/index.js';
+export { OfflineTelemetryQueue, type TelemetryEvent, type QueueConfig, type QueueStats, type FlushResult, } from './telemetry/index.js';
+export { getCacheStatus, formatCacheStatus, type CacheStatusInfo, type CacheStatusOptions, } from './commands/cache-status.js';
+export { invoke, invokeCliHandler, collectStateSnapshot, type InvokeOptions, type InvokeResult, } from './commands/invoke.js';
+export { TierAwareClient, type TierAwareClientOptions, type PreFlightResult, type QuotaSnapshot, } from './tier/index.js';
+export { buildProjectMemoryContent, createNodeProjectMemoryFs, writeProjectMemory, writeProjectMemoryTargetFiles, type WriteProjectMemoryFileResult, type ProjectMemoryWriterFs, type WriteProjectMemoryOptions, type WriteProjectMemoryResult, type WriteProjectMemoryTargetFilesResult, } from './memory/project-memory-writer.js';

package/packages/client/dist/index.js

@@ -0,0 +1 @@
+import{ResolverMode as t,NoOpCache as o}from"./types/index.js";import{LocalResolver as i}from"./resolvers/local-resolver.js";import{RemoteResolver as c,RemoteResolverError as l}from"./resolvers/remote-resolver.js";import{EncryptedCache as m}from"./cache/index.js";import{createResolver as s,selectResolver as f}from"./config/resolver-selection.js";import{collectContext as C}from"./context/context-collector.js";import{sanitizeValue as R,sanitizeRecord as v,sanitizeObject as u}from"./context/context-sanitizer.js";import{getMachineFingerprint as A}from"./machine/index.js";import{LicenseClient as M}from"./license/index.js";import{ClaudeCodeAdapter as P,CursorAdapter as S,VSCodeAdapter as T,GeminiAdapter as k,CodexAdapter as w,AntigravityAdapter as D,AdapterRegistry as F,UnknownTargetError as z,createDefaultRegistry as E,detectPlatform as L,isValidTargetId as O}from"./adapters/index.js";import{ClientCircuitBreaker as b,DegradationManager as I,DegradationLevel as N,FreshnessIndicator as B,RecoveryDetector as G}from"./resilience/index.js";import{OfflineTelemetryQueue as Q}from"./telemetry/index.js";import{getCacheStatus as q,formatCacheStatus as J}from"./commands/cache-status.js";import{invoke as W,invokeCliHandler as X,collectStateSnapshot as Y}from"./commands/invoke.js";import{TierAwareClient as _}from"./tier/index.js";import{buildProjectMemoryContent as ee,createNodeProjectMemoryFs as re,writeProjectMemory as te,writeProjectMemoryTargetFiles as oe}from"./memory/project-memory-writer.js";export{F as AdapterRegistry,D as AntigravityAdapter,P as ClaudeCodeAdapter,b as ClientCircuitBreaker,w as CodexAdapter,S as CursorAdapter,N as DegradationLevel,I as DegradationManager,m as EncryptedCache,B as FreshnessIndicator,k as GeminiAdapter,M as LicenseClient,i as LocalResolver,o as NoOpCache,Q as OfflineTelemetryQueue,G as RecoveryDetector,c as RemoteResolver,l as RemoteResolverError,t as ResolverMode,_ as TierAwareClient,z as UnknownTargetError,T as VSCodeAdapter,ee as buildProjectMemoryContent,C as collectContext,Y as collectStateSnapshot,E as createDefaultRegistry,re as createNodeProjectMemoryFs,s as createResolver,L as detectPlatform,J as formatCacheStatus,q as getCacheStatus,A as getMachineFingerprint,W as invoke,X as invokeCliHandler,O as isValidTargetId,u as sanitizeObject,v as sanitizeRecord,R as sanitizeValue,f as selectResolver,te as writeProjectMemory,oe as writeProjectMemoryTargetFiles};

package/packages/client/dist/license/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ */
+export { LicenseClient, type LicenseClientOptions } from './license-client.js';

package/packages/client/dist/license/index.js

@@ -0,0 +1 @@
+import{LicenseClient as n}from"./license-client.js";export{n as LicenseClient};

package/packages/client/dist/license/license-client.d.ts

@@ -0,0 +1,79 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+import type { CacheProvider } from '../types/index.js';
+export interface LicenseClientOptions {
+    readonly serverUrl: string;
+    readonly licenseKey: string;
+    readonly cacheProvider?: CacheProvider;
+    readonly clientVersion?: string;
+}
+interface ActivationResult {
+    readonly token: string;
+    readonly expiresIn: number;
+    readonly refreshToken?: string;
+}
+export declare class LicenseClient {
+    private readonly serverUrl;
+    private readonly licenseKey;
+    private readonly cache;
+    private readonly clientVersion;
+    private readonly machineId;
+    private token;
+    private refreshToken;
+    constructor(options: LicenseClientOptions);
+    /**
+     * Get a valid JWT token. Checks memory, cache, refresh token, then activation.
+     * NEVER throws - returns null on failure.
+     *
+     * Flow:
+     * 1. in-memory JWT valid? -> return
+     * 2. in-memory JWT needs-refresh? -> refresh(refresh_token) -> return
+     * 3. cached JWT valid? -> return
+     * 4. cached JWT needs-refresh? -> refresh(refresh_token) -> return
+     * 5. cached refresh_token exists? -> refresh(refresh_token) -> return  (Story 31.02)
+     * 6. activate() -> return
+     */
+    getToken(): Promise<string | null>;
+    /**
+     * Activate the license by calling POST /api/v1/license/activate.
+     * Stores token and refresh_token in memory and cache on success.
+     * NEVER throws - returns null on failure.
+     */
+    activate(): Promise<ActivationResult | null>;
+    /**
+     * Refresh using refresh_token by calling POST /api/v1/license/refresh.
+     * Sends refresh_token in body (no Authorization header needed).
+     * Handles token rotation: stores the new refresh_token from response.
+     * NEVER throws - returns null on failure.
+     *
+     * Story 31.02: Signature changed from refresh(currentToken) to refresh().
+     * The refresh_token in the body is the credential, not the JWT.
+     *
+     * @param _currentToken - Deprecated. Kept for backward compat but ignored.
+     */
+    refresh(_currentToken?: string): Promise<ActivationResult | null>;
+    /**
+     * Force-refresh the token.
+     * Used when tier_changed is detected or a 401 response indicates the token is expired.
+     * Falls back to re-activation if refresh fails.
+     * NEVER throws - returns new token or null on failure.
+     *
+     * Story 18.8: Updated to prefer refresh over re-activate (preserves updated tier).
+     * Story 31.02: Uses refresh_token flow instead of JWT-based refresh.
+     */
+    forceRefresh(): Promise<string | null>;
+    private checkTokenValidity;
+    private loadFromCache;
+    private loadRefreshTokenFromCache;
+}
+export {};

package/packages/client/dist/license/license-client.js

@@ -0,0 +1 @@
+import{decodeJwt as c}from"jose";import{NoOpCache as o}from"../types/index.js";import{getMachineFingerprint as a}from"../machine/fingerprint.js";const i="neocortex:jwt:token",s="neocortex:jwt:refresh_token",l=300,h=10080*60*1e3,f="0.1.0";class T{serverUrl;licenseKey;cache;clientVersion;machineId;token=null;refreshToken=null;constructor(e){this.serverUrl=e.serverUrl.replace(/\/+$/,""),this.licenseKey=e.licenseKey,this.cache=e.cacheProvider??new o,this.clientVersion=e.clientVersion??f,this.machineId=a()}async getToken(){try{if(this.token){const r=this.checkTokenValidity(this.token);if(r==="valid")return this.token;if(r==="needs-refresh")return(await this.refresh())?.token??this.token;this.token=null}const e=await this.loadFromCache();if(e){this.token=e;const r=this.checkTokenValidity(e);if(r==="valid")return e;if(r==="needs-refresh")return(await this.refresh())?.token??e;this.token=null}if(this.refreshToken||(this.refreshToken=await this.loadRefreshTokenFromCache()),this.refreshToken){const r=await this.refresh();if(r?.token)return r.token}return(await this.activate())?.token??null}catch{return null}}async activate(){try{const e=await fetch(`${this.serverUrl}/api/v1/license/activate`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({license_key:this.licenseKey,machine_id:this.machineId,client_version:this.clientVersion})});if(!e.ok)return null;const t=await e.json();return this.token=t.token,this.refreshToken=t.refresh_token??null,this.cache.set(i,t.token,t.expires_in*1e3).catch(()=>{}),t.refresh_token&&this.cache.set(s,t.refresh_token,h).catch(()=>{}),{token:t.token,expiresIn:t.expires_in,refreshToken:t.refresh_token}}catch{return null}}async refresh(e){try{const t=this.refreshToken??await this.loadRefreshTokenFromCache();if(!t)return null;const r=await fetch(`${this.serverUrl}/api/v1/license/refresh`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({refresh_token:t})});if(!r.ok)return this.refreshToken=null,this.cache.set(s,"",1).catch(()=>{}),null;const n=await r.json();return this.token=n.token,this.refreshToken=n.refresh_token??null,this.cache.set(i,n.token,n.expires_in*1e3).catch(()=>{}),n.refresh_token&&this.cache.set(s,n.refresh_token,h).catch(()=>{}),{token:n.token,expiresIn:n.expires_in,refreshToken:n.refresh_token}}catch{return null}}async forceRefresh(){try{const e=await this.refresh();return e?.token?e.token:(this.token=null,this.refreshToken=null,await this.cache.clear().catch(()=>{}),(await this.activate())?.token??null)}catch{return null}}checkTokenValidity(e){try{const t=c(e);if(!t.exp)return"expired";const r=Math.floor(Date.now()/1e3);return t.exp<=r?"expired":t.exp-r<=l?"needs-refresh":"valid"}catch{return"expired"}}async loadFromCache(){try{return await this.cache.get(i)}catch{return null}}async loadRefreshTokenFromCache(){try{const e=await this.cache.get(s);return e&&e.length>0?e:null}catch{return null}}}export{T as LicenseClient};

package/packages/client/dist/machine/fingerprint.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * Generate a hardware-based fingerprint (not persisted).
+ * This is the original computation used as fallback and for seeding.
+ *
+ * @returns 64-character hex string (SHA-256 digest)
+ */
+export declare function computeHardwareFingerprint(): string;
+/**
+ * Generate a stable machine fingerprint as a SHA-256 hex digest.
+ *
+ * Story P26.01: On first call, generates from hardware and persists to
+ * ~/.neocortex/.machine-id. On subsequent calls, reads from disk.
+ * This ensures the fingerprint remains stable even if hardware attributes
+ * change (e.g., USB NIC added/removed, hostname change).
+ *
+ * Backward compat: if config.json has machineId, uses that to seed .machine-id.
+ *
+ * Fail-open: if disk operations fail, falls back to hardware-generated fingerprint.
+ *
+ * @returns 64-character hex string (SHA-256 digest)
+ */
+export declare function getMachineFingerprint(): string;

package/packages/client/dist/machine/fingerprint.js

@@ -0,0 +1,2 @@
+import{createHash as p}from"node:crypto";import{existsSync as s,readFileSync as a,writeFileSync as h,mkdirSync as d,chmodSync as g}from"node:fs";import{join as o}from"node:path";import{arch as y,cpus as F,homedir as I,hostname as M,networkInterfaces as S,platform as w}from"node:os";const $="00:00:00:00:00:00",i=o(I(),".neocortex"),c=o(i,".machine-id");function E(){const t=S(),n=[];for(const e of Object.values(t))if(e)for(const r of e)!r.internal&&r.mac!==$&&n.push(r.mac);return[...new Set(n)].sort()}function x(){const t=M(),n=w(),e=y(),r=F(),u=r.length>0?r[0].model:"",m=E(),l=`${t}|${n}|${e}|${u}|${m.join(",")}`;return p("sha256").update(l).digest("hex")}function C(t){try{process.platform!=="win32"&&g(t,384)}catch{}}function O(){try{if(!s(c))return null;const t=a(c,"utf-8").trim();return/^[a-f0-9]{64}$/.test(t)?t:null}catch{return null}}function f(t){try{d(i,{recursive:!0}),h(c,t+`
+`,"utf-8"),C(c)}catch{}}function _(){try{const t=o(i,"config.json");if(!s(t))return null;const n=a(t,"utf-8"),r=JSON.parse(n.replace(/^\uFEFF/,"")).machineId;return typeof r=="string"&&/^[a-f0-9]{64}$/.test(r)?r:null}catch{return null}}function N(){const t=O();if(t)return t;const n=_();if(n)return f(n),n;const e=x();return f(e),e}export{x as computeHardwareFingerprint,N as getMachineFingerprint};

package/packages/client/dist/machine/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ */
+export { getMachineFingerprint } from './fingerprint.js';

package/packages/client/dist/machine/index.js

@@ -0,0 +1 @@
+import{getMachineFingerprint as i}from"./fingerprint.js";export{i as getMachineFingerprint};

package/packages/client/dist/memory/project-memory-writer.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Project memory writer for platform-specific always-loaded files.
+ *
+ * The writer owns only the NEOCORTEX-MEMORY block. Everything outside that
+ * block is preserved byte-for-byte so users can keep local instructions.
+ */
+import { type ArchitectureReference, type BootstrapArchitectureMemory, type ProjectMemoryTarget, type ProjectMemoryTargetId } from './shared-project-memory-types.js';
+export interface ProjectMemoryWriterFs {
+    readFile(path: string): string | undefined;
+    writeFileAtomic(path: string, content: string): {
+        backupPath?: string;
+    };
+    join(...parts: string[]): string;
+}
+export interface WriteProjectMemoryOptions {
+    readonly projectRoot: string;
+    readonly targetId: ProjectMemoryTargetId;
+    readonly memoryNotes?: readonly string[];
+    readonly architectureReferences?: readonly ArchitectureReference[];
+    readonly bootstrapArchitecture?: BootstrapArchitectureMemory;
+    readonly fs?: ProjectMemoryWriterFs;
+    readonly symlinkCapability?: ProjectMemorySymlinkCapability;
+    readonly dryRun?: boolean;
+}
+export interface ProjectMemorySymlinkCapability {
+    readonly os: NodeJS.Platform | string;
+    readonly supported: boolean;
+    readonly permission: 'ok' | 'denied' | 'unknown';
+    readonly filesystem: 'supports-symlink' | 'no-symlink-support' | 'unknown';
+    readonly targetPolicy: ProjectMemoryTarget['linkRequirement']['policy'];
+    readonly targetPolicyAllowsSymlink: boolean;
+    readonly requiresWrapperPreservation: boolean;
+    readonly reason?: string;
+}
+export interface WriteProjectMemoryResult {
+    readonly filePath: string;
+    readonly changed: boolean;
+    readonly content: string;
+    readonly safeDiff?: string;
+    readonly backupPath?: string;
+    readonly reasonCodes?: readonly string[];
+}
+export interface WriteProjectMemoryFileResult extends WriteProjectMemoryResult {
+    readonly relativeFile: string;
+    readonly mode: 'canonical' | 'semantic-symlink' | 'managed-wrapper' | 'compatibility-materialized-fallback';
+    readonly canonicalSource: string;
+    readonly symlinkCapability?: ProjectMemorySymlinkCapability;
+    readonly fallbackReason?: string;
+    readonly remediationDebt?: string;
+}
+export interface WriteProjectMemoryTargetFilesResult {
+    readonly targetId: ProjectMemoryTargetId;
+    readonly canonicalFilePath: string;
+    readonly files: readonly WriteProjectMemoryFileResult[];
+    readonly changed: boolean;
+}
+export declare function createNodeProjectMemoryFs(): ProjectMemoryWriterFs;
+export declare const PROJECT_MEMORY_LAYER_CATEGORIES: readonly ["skills-agents", "frontend", "backend", "api", "db", "schemas", "envs", "devops", "cyber-security", "testing-qa", "observability", "product-business", "docs-architecture", "platform-memory", "command-behavior", "generic"];
+export type ProjectMemoryLayerCategory = typeof PROJECT_MEMORY_LAYER_CATEGORIES[number];
+export type ProjectMemoryChangeKind = 'feature' | 'rule' | 'flag' | 'route' | 'api' | 'db-schema' | 'architecture' | 'debt' | 'decision' | 'generic';
+export interface ClassifiedProjectMemoryUpdate {
+    readonly kind: ProjectMemoryChangeKind;
+    readonly layer: ProjectMemoryLayerCategory;
+    readonly sectionTitle: string;
+    readonly summary: string;
+    readonly reasonCode: string;
+}
+export declare function classifyProjectMemoryUpdate(value: string): ClassifiedProjectMemoryUpdate;
+export declare function createSafeProjectMemoryDiff(before: string | undefined, after: string): string;
+export declare function bootstrapArchitectureMemory(projectRoot: string): BootstrapArchitectureMemory;
+export declare function buildProjectMemoryContent(target: ProjectMemoryTarget, existingContent: string | undefined, memoryNotes?: readonly string[], architectureReferences?: readonly ArchitectureReference[], bootstrapArchitecture?: BootstrapArchitectureMemory): string;
+export declare function writeProjectMemory(options: WriteProjectMemoryOptions): WriteProjectMemoryResult;
+export declare function writeCanonicalProjectMemory(options: Omit<WriteProjectMemoryOptions, 'targetId'>): WriteProjectMemoryResult;
+export declare function writeProjectMemoryTargetFiles(options: WriteProjectMemoryOptions): WriteProjectMemoryTargetFilesResult;