@ornexus/neocortex 4.60.22 → 4.60.24

package/packages/client/dist/cli.js

@@ -9,6 +9,7 @@ Commands:
   invoke         Send orchestration request to server
   activate       Activate license key
   refresh-memory Create/repair canonical NEOCORTEX.md links and wrappers
+  story-checkpoint Root-owned direct-*yolo commit/checkpoint boundary
   config         Inspect or change managed subagent approval mode
   cache-status   Show cache and circuit breaker status
   update         Update to latest version (use 'neocortex update' instead)
@@ -32,6 +33,21 @@ Refresh Memory Options:
   --targets <csv>        Target ids (default: all project-memory targets)
   --dry-run, --preview   Print files that would change without writing
 
+Story Checkpoint Actions:
+  handoff   Bind the live setup owner to staged content using a private one-time token
+  begin     Validate staged story evidence, acquire the writer lease, emit trailers
+  finalize  Validate HEAD and local gates, optionally push, persist the checkpoint
+  recover   Migrate one published legacy direct-*yolo commit using immutable evidence
+
+Story Checkpoint Options:
+  --story <id>          Canonical story id (required)
+  --project-root <path> Project root directory (default: cwd)
+  --commit <sha>        Legacy commit for recover
+  --push                Non-force push during finalize
+  --require-remote      Require published ancestry during recover
+  --remote <name>       Git remote (default: origin)
+  --format json|plain   Public result format (default: plain)
+
 Config Actions:
   status                Show requested/effective/source/scope (default)
   max                   Request managed maximum approvals
@@ -63,6 +79,9 @@ Examples:
   neocortex-client cache-status
   neocortex-client config status
   neocortex-client config standard --platform-target claude-code
+  neocortex-client story-checkpoint handoff --story P174.03.913359 --format json
+  neocortex-client story-checkpoint begin --story P174.03.913359 --format json
+  neocortex-client story-checkpoint finalize --story P174.03.913359 --push --format json
 
 Command-level watch inside --args:
   Supported: exactly one final unquoted --watch for *goal create/start/resume
@@ -92,5 +111,5 @@ Invocation payload boundary:
 
 License:
   Licensed under BSL-1.1 (Business Source License 1.1)
-`.trim(),p=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function u(){const a=process.argv.slice(2),t=a[0];t&&p.has(t.toLowerCase())&&process.exit(0),(!t||t==="--help"||t==="-h")&&(console.log(l),process.exit(0)),(t==="--version"||t==="-v")&&(console.log(d()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
-`),process.exit(0));const n=a.slice(1);switch(t){case"invoke":{const{invokeCliHandler:s}=await import("./commands/invoke.js"),o=await s(n);process.exit(o);break}case"activate":{const{activate:s}=await import("./commands/activate.js");let o,i,c=!1;for(let e=0;e<n.length;e++){const r=n[e];r==="--server-url"?i=n[++e]:r==="--non-interactive"?c=!0:r==="--help"||r==="-h"?(console.log(l),process.exit(0)):r.startsWith("-")||(o=r)}o||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const e=await s({licenseKey:o,serverUrl:i,nonInteractive:c});e.success?(console.log(e.message),process.exit(0)):(console.error(e.message),process.exit(1))}catch(e){const r=e instanceof Error?e.message:String(e);console.error(`Activation failed: ${r}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:s}=await import("./commands/config.js"),o=await s(n);process.exit(o);break}case"refresh-memory":{const{refreshMemoryCliHandler:s}=await import("./commands/refresh-memory.js"),o=await s(n);process.exit(o);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${t}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}u().catch(a=>{console.error(`Fatal error: ${a instanceof Error?a.message:String(a)}`),process.exit(1)});
+`.trim(),p=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function u(){const a=process.argv.slice(2),o=a[0];o&&p.has(o.toLowerCase())&&process.exit(0),(!o||o==="--help"||o==="-h")&&(console.log(l),process.exit(0)),(o==="--version"||o==="-v")&&(console.log(d()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
+`),process.exit(0));const n=a.slice(1);switch(o){case"invoke":{const{invokeCliHandler:r}=await import("./commands/invoke.js"),t=await r(n);process.exit(t);break}case"activate":{const{activate:r}=await import("./commands/activate.js");let t,i,c=!1;for(let e=0;e<n.length;e++){const s=n[e];s==="--server-url"?i=n[++e]:s==="--non-interactive"?c=!0:s==="--help"||s==="-h"?(console.log(l),process.exit(0)):s.startsWith("-")||(t=s)}t||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const e=await r({licenseKey:t,serverUrl:i,nonInteractive:c});e.success?(console.log(e.message),process.exit(0)):(console.error(e.message),process.exit(1))}catch(e){const s=e instanceof Error?e.message:String(e);console.error(`Activation failed: ${s}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:r}=await import("./commands/config.js"),t=await r(n);process.exit(t);break}case"refresh-memory":{const{refreshMemoryCliHandler:r}=await import("./commands/refresh-memory.js"),t=await r(n);process.exit(t);break}case"story-checkpoint":{const{storyCheckpointCliHandler:r}=await import("./commands/story-checkpoint.js"),t=await r(n);process.exit(t);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${o}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}u().catch(a=>{console.error(`Fatal error: ${a instanceof Error?a.message:String(a)}`),process.exit(1)});

package/packages/client/dist/commands/invoke.d.ts

@@ -16,7 +16,8 @@ import { type RunnerSchedulerBootstrapOptions, type RunnerSchedulerBootstrapResu
 import { type ContinuityProcessingSummaryCursorTarget } from '../continuity/continuity-client-state-store.js';
 import type { ProjectEvidenceEnvelope } from '../evidence/types.js';
 import { type InvokeEffectContext, type StrictReadOnlyInvokeEnvelope } from '../../../shared/dist/strict-readonly.js';
-import { type InvocationAdmissionResultV1 } from '../../../shared/dist/invocation/index.js';
+import { type InvokeInputEvidenceV1, type InvokeInputEnvelopeV2, type InvokeInputSourceV2, type InvocationMalformedInputReasonV1, type InvocationAdmissionResultV1, type ProjectIdentityMigrationRequestV1 } from '../../../shared/dist/invocation/index.js';
+import { type P205TransientExecutionAuthority } from '../git/git-lifecycle-store.js';
 export declare const INVOKE_PAYLOAD_LIMIT_BYTES: number;
 export declare const INVOKE_PAYLOAD_WARNING_THRESHOLD_BYTES: number;
 export declare function getOrCreatePendingEpicIdempotencyKey(projectRoot: string, args: string): {
@@ -25,26 +26,6 @@ export declare function getOrCreatePendingEpicIdempotencyKey(projectRoot: string
 };
 export declare function clearPendingEpicIdempotencyKey(projectRoot: string, fingerprint: string): void;
 export declare function recordPendingEpicReservation(projectRoot: string, fingerprint: string, claimId: string, epicId: string): void;
-interface InitProjectMemoryBootstrapSnapshot {
-    readonly canonical: {
-        readonly path: 'NEOCORTEX.md';
-        readonly exists: boolean;
-        readonly incompleteReasons: readonly string[];
-        readonly confidence: 'high' | 'medium' | 'low';
-    };
-    readonly permittedSources: {
-        readonly packageBuildFiles: number;
-        readonly architectureReadmeDocs: number;
-        readonly runtimeConfigTemplates: number;
-        readonly platformWrappers: number;
-    };
-    readonly wrapperFiles: readonly string[];
-    readonly recommendedPreviewCommand: string;
-    readonly recommendedRefreshCommand: string;
-    readonly guardrails: readonly string[];
-}
-export declare function isInitTrigger(args: string): boolean;
-export declare function collectInitProjectMemoryBootstrapSnapshot(projectRoot: string): InitProjectMemoryBootstrapSnapshot;
 export interface InvokeOptions {
     /** Raw args from the user (e.g., "*yolo @docs/stories/1.1.story.md") */
     readonly args: string;
@@ -58,6 +39,8 @@ export interface InvokeOptions {
     readonly platformTarget?: string;
     /** CLI input source, used to decide when stdin/args-file need chunk transport. */
     readonly inputSource?: InvokeCliInputSource;
+    /** Exact, explicit input metadata captured before admission. */
+    readonly inputEnvelope?: InvokeInputEnvelopeV2;
     /** Foreground local continuity watcher requested by CLI `--watch`. */
     readonly watch?: boolean;
     /** Test/integration seam for runner auto-bootstrap; CLI callers leave unset. */
@@ -235,10 +218,11 @@ export declare function sanitizeInvokeCliOutput(instructions: string | undefined
     instructions: string;
     metadata: Record<string, unknown> | undefined;
 };
-type InvokeCliInputSource = 'args' | 'stdin' | 'args-file';
+type InvokeCliInputSource = InvokeInputSourceV2;
 export interface InvokeCliParsedOptions {
     readonly args: string;
     readonly inputSource: InvokeCliInputSource;
+    readonly inputEnvelope: InvokeInputEnvelopeV2;
     readonly projectRoot?: string;
     readonly format: 'json' | 'plain';
     readonly watch: boolean;
@@ -278,12 +262,15 @@ export interface InvokeCommandLevelWatchResolution {
     readonly publicSafe: true;
 }
 export interface InvokeCliInputReaders {
-    readonly readStdin?: () => string;
-    readonly readArgsFile?: (filePath: string) => string;
+    readonly readStdin?: () => string | Uint8Array;
+    readonly readArgsFile?: (filePath: string) => string | Uint8Array;
 }
 export declare class InvokeCliInputError extends Error {
+    readonly reason?: InvocationMalformedInputReasonV1 | undefined;
+    readonly source?: InvokeCliInputSource | undefined;
+    readonly byteLength?: number | undefined;
     readonly code: string;
-    constructor(code: string, message: string);
+    constructor(code: string, message: string, reason?: InvocationMalformedInputReasonV1 | undefined, source?: InvokeCliInputSource | undefined, byteLength?: number | undefined);
 }
 export type StateSnapshotScopeKind = 'full' | 'projected';
 export type StateSnapshotCommandPolicy = 'full' | 'story-targeted' | 'epic-targeted' | 'yoloop-targeted' | 'epic-summary' | 'continuity-scoped' | 'adaptive-targeted' | (string & {});
@@ -466,6 +453,9 @@ interface InvokeRequestBodyBase {
     readonly stateSnapshot: StateSnapshot;
     readonly platformTarget?: string;
     readonly projectId?: string;
+    readonly projectIdentityMigration?: ProjectIdentityMigrationRequestV1;
+    /** Public-safe proof that the transmitted/materialized args are byte-faithful. */
+    readonly inputEvidence: InvokeInputEvidenceV1;
     readonly idempotencyKey?: string;
     readonly registryVersion: string;
     readonly registryChecksum: string;
@@ -510,6 +500,11 @@ export declare class InvokePayloadTooLargeError extends Error {
     readonly telemetry: InvokePayloadTelemetry;
     constructor(telemetry: InvokePayloadTelemetry);
 }
+export declare class InvokeStructuralContextTooLargeError extends Error {
+    readonly code = "STRUCTURAL_CONTEXT_TOO_LARGE";
+    readonly telemetry: InvokePayloadTelemetry;
+    constructor(telemetry: InvokePayloadTelemetry);
+}
 /**
  * P103.02: Describe a schema-drift issue detected in a user's state.json.
  * Codes map to concrete misalignments against the canonical v1 schema
@@ -535,7 +530,25 @@ export declare function __resetSchemaDriftWarnedForTests(): void;
  * Read state.json and construct a sanitized snapshot for the server.
  * Relative paths only - no absolute paths sent to server.
  */
-export declare function collectStateSnapshot(projectRoot: string): StateSnapshot;
+export interface StateSnapshotCollectionOptions {
+    readonly epicAware?: boolean;
+    readonly projectless?: boolean;
+    /** Process-local proof keyed by story; never read from or written to JSON. */
+    readonly p205Authorities?: Readonly<Record<string, P205TransientExecutionAuthority>>;
+}
+export declare class StateSnapshotIntegrityError extends Error {
+    readonly reasonCode: string;
+    constructor(reasonCode: string);
+}
+export declare function isEpicAwareCommandId(commandId: string | null | undefined): boolean;
+/**
+ * Epic-aware commands cannot let generic repair turn a missing/truncated state
+ * into authoritative empty collections. This read-only gate runs before repair;
+ * structurally valid legacy objects continue through the normal migration path.
+ */
+export declare function assertEpicAwareStateShapeBeforeRepair(projectRoot: string): void;
+export declare function collectStateSnapshot(projectRoot: string, options?: StateSnapshotCollectionOptions): StateSnapshot;
+export declare function collectInvokeP205Authorities(projectRoot: string, args: string, commandId: string | null | undefined): Promise<Readonly<Record<string, P205TransientExecutionAuthority>>>;
 export declare function createFullStateSnapshotScope(trigger: string, snapshot: Pick<StateSnapshot, 'stories' | 'epics'>): FullStateSnapshotScope;
 interface SendResult {
     readonly ok: boolean;