@ornexus/neocortex 4.60.23 → 4.60.25

package/packages/shared/dist/generated/command-registry.generated.js

@@ -1,41 +1,41 @@
 /** Generated by scripts/generate-command-registry.mjs. Do not edit. */
 export const COMMAND_REGISTRY_SCHEMA_VERSION = 1;
 export const COMMAND_REGISTRY_VERSION = "1.0.0";
-export const COMMAND_REGISTRY_CHECKSUM = "39c74bfd2ec67a12b19bda587ffcf6a987dfca1b6d33142a28988c574f7eb7c0";
+export const COMMAND_REGISTRY_CHECKSUM = "5ed842e2bf9a9e959f23096cec199be4200bb4056b99479b5dc47b2dbe1293e6";
 export const COMMAND_REGISTRY_PROJECTION_MANIFEST = {
     "schemaVersion": 1,
     "registryVersion": "1.0.0",
-    "registryChecksum": "39c74bfd2ec67a12b19bda587ffcf6a987dfca1b6d33142a28988c574f7eb7c0",
+    "registryChecksum": "5ed842e2bf9a9e959f23096cec199be4200bb4056b99479b5dc47b2dbe1293e6",
     "projections": [
         {
             "kind": "admin",
-            "entryCount": 63,
-            "sha256": "ca4b20573423f84de80a5664c0171d01b48d43fb3cb2041597a48ab44374dd5d"
+            "entryCount": 62,
+            "sha256": "d752e65aa65ee7864416b4c68af6d516233e180cd5b0408dcb244751ede7a21a"
         },
         {
             "kind": "client",
-            "entryCount": 63,
-            "sha256": "ca4b20573423f84de80a5664c0171d01b48d43fb3cb2041597a48ab44374dd5d"
+            "entryCount": 62,
+            "sha256": "d752e65aa65ee7864416b4c68af6d516233e180cd5b0408dcb244751ede7a21a"
         },
         {
             "kind": "docs",
-            "entryCount": 63,
-            "sha256": "ca4b20573423f84de80a5664c0171d01b48d43fb3cb2041597a48ab44374dd5d"
+            "entryCount": 62,
+            "sha256": "d752e65aa65ee7864416b4c68af6d516233e180cd5b0408dcb244751ede7a21a"
         },
         {
             "kind": "metrics",
-            "entryCount": 63,
-            "sha256": "ca4b20573423f84de80a5664c0171d01b48d43fb3cb2041597a48ab44374dd5d"
+            "entryCount": 62,
+            "sha256": "d752e65aa65ee7864416b4c68af6d516233e180cd5b0408dcb244751ede7a21a"
         },
         {
             "kind": "server",
-            "entryCount": 68,
-            "sha256": "4c10d04de88c08d694d1eaa6f43b688897dfaafd60dcdf155389a1903121465b"
+            "entryCount": 67,
+            "sha256": "1b3e29b3b462a8fb283a308e311ca681d7b106f986723d4c08b84805c878a00a"
         },
         {
             "kind": "shared",
-            "entryCount": 68,
-            "sha256": "3b9bde2f873434594c1aedebaa608d401f29729f14e962a9639760f0139bc60b"
+            "entryCount": 67,
+            "sha256": "0d181e8f869891e7c3e09b76ad00b122ca7c5a4ca530e86391d64517d14b7bc8"
         }
     ]
 };
@@ -2022,54 +2022,6 @@ export const GENERATED_SHARED_COMMANDS = [
         "visibility": "public",
         "subcommands": []
     },
-    {
-        "aliases": [
-            "inicializar"
-        ],
-        "category": "quick-start",
-        "compatibility": {
-            "deprecatedIn": null,
-            "introducedIn": "1.0.0",
-            "removedIn": null,
-            "replacement": null
-        },
-        "description": {
-            "en": "Initialize project",
-            "es": "Inicializar proyecto",
-            "pt-BR": "Inicializar projeto"
-        },
-        "examples": [
-            "@neocortex *init",
-            "@neocortex init",
-            "@neocortex 2"
-        ],
-        "id": "init",
-        "inputShape": "epics",
-        "mode": "utility",
-        "name": "Inicializar + Enrichment",
-        "number": 2,
-        "policy": {
-            "billingClass": "billable",
-            "idempotencyClass": "logical-supported",
-            "minimumTier": "free",
-            "mutationClass": "stateful",
-            "privilege": "authenticated",
-            "quotaClass": "workflow",
-            "replayClass": "signed-request",
-            "strictReadOnly": "deny"
-        },
-        "projections": [
-            "admin",
-            "client",
-            "docs",
-            "metrics",
-            "server",
-            "shared"
-        ],
-        "stepId": "step-u-init",
-        "visibility": "public",
-        "subcommands": []
-    },
     {
         "aliases": [
             "continuity-jobs",
@@ -3575,9 +3527,9 @@ export const GENERATED_SHARED_COMMANDS = [
             "replacement": null
         },
         "description": {
-            "en": "Setup branch",
-            "es": "Configurar branch",
-            "pt-BR": "Configurar branch"
+            "en": "Set up branch in the current checkout",
+            "es": "Configurar branch en el checkout actual",
+            "pt-BR": "Configurar branch no checkout atual"
         },
         "examples": [
             "@neocortex *setup-branch @docs/stories/P126.01.story.md"
@@ -3585,7 +3537,7 @@ export const GENERATED_SHARED_COMMANDS = [
         "id": "setup-branch",
         "inputShape": "story",
         "mode": "step",
-        "name": "Configurar Branch & Worktree",
+        "name": "Configurar Branch",
         "number": 24,
         "policy": {
             "billingClass": "billable",

package/packages/shared/dist/generated/invocation-schema.generated.js

@@ -2,13 +2,13 @@
 export const GENERATED_INVOCATION_SCHEMA_MANIFEST = {
     "schemaVersion": "p205-invocation-schema-v1",
     "registryVersion": "1.0.0",
-    "registryChecksum": "39c74bfd2ec67a12b19bda587ffcf6a987dfca1b6d33142a28988c574f7eb7c0",
-    "schemaChecksum": "14ea14ebfd79941609426b34690c0fade17034a4b1b166b14d985cb097ee7128",
-    "commandCount": 63,
+    "registryChecksum": "5ed842e2bf9a9e959f23096cec199be4200bb4056b99479b5dc47b2dbe1293e6",
+    "schemaChecksum": "c3252fa75c16cc81bd0ea0e8b33868d121c2e45258f9b425c310af9337cfbd6f",
+    "commandCount": 62,
     "optionCount": 47,
-    "positionalCount": 44,
+    "positionalCount": 43,
     "operationCount": 33,
-    "projectionSha256": "3052d8fa2bdfcfcc8bca17ba1a5ad5ec39270064ca68760f691b36a9eb2b0ed0",
+    "projectionSha256": "9843f3f7155ed3a6244c020a324c2d2818c5d4fd2d7590eeb78b9e055bc18e75",
     "commands": [
         {
             "commandId": "arch-api-contracts",
@@ -830,26 +830,6 @@ export const GENERATED_INVOCATION_SCHEMA_MANIFEST = {
             ],
             "terminator": true
         },
-        {
-            "commandId": "init",
-            "inputShape": "epics",
-            "operation": {
-                "required": false,
-                "unknownAsPositional": false,
-                "operations": []
-            },
-            "options": [],
-            "positionals": [
-                {
-                    "cardinality": "one",
-                    "id": "epics",
-                    "kind": "target-ref",
-                    "order": 0,
-                    "required": false
-                }
-            ],
-            "terminator": true
-        },
         {
             "commandId": "jobs",
             "inputShape": "continuity-jobs",

package/packages/shared/dist/invocation/index.d.ts

@@ -120,7 +120,7 @@ export interface InvocationCommandSchemaV1 {
     readonly positionals: readonly InvocationPositionalSchemaV1[];
     readonly terminator: true;
 }
-export declare const INVOCATION_SCHEMA_CHECKSUM: "14ea14ebfd79941609426b34690c0fade17034a4b1b166b14d985cb097ee7128";
+export declare const INVOCATION_SCHEMA_CHECKSUM: "c3252fa75c16cc81bd0ea0e8b33868d121c2e45258f9b425c310af9337cfbd6f";
 export interface InvocationSchemaManifestV1 {
     readonly schemaVersion: typeof INVOCATION_SCHEMA_VERSION;
     readonly registryVersion: string;

package/packages/shared/dist/yoloop/epic-terminal-git.js

@@ -0,0 +1,227 @@
+/** Public contracts and pure safety decisions for epic-owned terminal Git. */
+export const EPIC_TERMINAL_GIT_REASON_CODES = Object.freeze({
+    READY: 'epic-terminal-git-ready',
+    ALREADY_COMPLETE: 'epic-terminal-git-already-complete',
+    ORIGIN_MISSING: 'epic-origin-branch-missing',
+    EXECUTION_MISSING: 'epic-execution-branch-missing',
+    SAME_BRANCH: 'epic-origin-equals-execution',
+    LOCAL_GATES_REQUIRED: 'epic-local-gates-required',
+    STORY_CHECKPOINTS_REQUIRED: 'epic-story-checkpoints-required',
+    LEASE_ACTIVE: 'epic-writer-lease-active',
+    HEAD_MISMATCH: 'epic-execution-head-mismatch',
+    GRAPH_REVISION_MISMATCH: 'epic-graph-revision-mismatch',
+    MERGE_CONFLICT: 'epic-terminal-merge-conflict',
+    REMOTE_POLICY_DENIED: 'epic-terminal-remote-policy-denied',
+    RETRY_ELIGIBLE: 'epic-terminal-retry-eligible',
+    RECOVERED_PHYSICAL_PUSH: 'epic-terminal-recovered-physical-push',
+    OWNERSHIP_UNPROVEN: 'git-resource-ownership-unproven',
+    RESOURCE_ACTIVE: 'git-resource-active',
+    RESOURCE_ORIGIN: 'git-resource-is-origin',
+    RESOURCE_CURRENT: 'git-resource-is-current',
+    RESOURCE_PROTECTED: 'git-resource-protected',
+    UNIQUE_COMMITS: 'git-resource-has-unique-commits',
+    INTEGRATION_UNPROVEN: 'git-resource-integration-unproven',
+    SAFE_TO_RECONCILE: 'git-resource-safe-to-reconcile',
+    ALREADY_RECONCILED: 'git-resource-already-reconciled',
+    AGGREGATE_QA_REQUIRED: 'epic-aggregate-qa-receipt-required',
+    AGGREGATE_QA_STALE: 'epic-aggregate-qa-receipt-stale',
+    ORIGIN_BINDING_REQUIRED: 'epic-origin-binding-required',
+    PROVIDER_TRUTH_UNKNOWN: 'git-resource-provider-truth-unknown',
+    WORKTREE_ACTIVE: 'git-resource-worktree-active',
+    RESOURCE_RACED: 'git-resource-expected-oid-raced',
+    REMOTE_DELETE_CAS_UNAVAILABLE: 'git-resource-remote-delete-cas-unavailable',
+    ORIGIN_CAPTURE_WINDOW_MISSED: 'epic-origin-binding-capture-window-missed',
+    ORIGIN_PHYSICAL_DRIFT: 'epic-origin-binding-physical-drift',
+    PHYSICAL_REVALIDATION_REQUIRED: 'epic-terminal-physical-revalidation-required',
+    PHYSICAL_ANCESTRY_UNPROVEN: 'epic-terminal-physical-ancestry-unproven',
+    PR_STRICT_BASE_GUARD_REQUIRED: 'epic-terminal-pr-strict-base-guard-required',
+    PR_BASE_GUARD_UNVERIFIABLE: 'epic-terminal-pr-base-guard-unverifiable',
+    PR_MERGE_QUEUE_LOCAL_GATE_REQUIRED: 'epic-terminal-pr-merge-queue-local-gate-required',
+});
+export function validateEpicTerminalGitDirective(directive, actual) {
+    const reasons = [];
+    if (!nonEmpty(directive.originBranch))
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.ORIGIN_MISSING);
+    if (!nonEmpty(directive.executionBranch))
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.EXECUTION_MISSING);
+    if (directive.originBranch === directive.executionBranch)
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.SAME_BRANCH);
+    if (directive.localGates?.passed !== true || directive.localGates.receiptRefs.length === 0) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.LOCAL_GATES_REQUIRED);
+    }
+    const aggregate = actual.aggregateQaReceipt;
+    const directedAggregate = directive.localGates?.aggregateQaReceipt;
+    if (!aggregate
+        || aggregate.schemaVersion !== 1
+        || aggregate.evidenceVersion !== 'p205-execution-v2'
+        || aggregate.producer !== 'local-yolo-tdd'
+        || aggregate.contract !== 'P205-CI-02'
+        || aggregate.command !== 'node scripts/test-root.mjs --gate complete'
+        || aggregate.verdict !== 'passed'
+        || aggregate.executionHeadSha !== actual.executionHeadSha
+        || aggregate.executionHeadSha !== directive.expectedExecutionHeadSha
+        || aggregate.graphRevision !== directive.graphRevision
+        || aggregate.receiptRef.length === 0
+        || aggregate.gateIds.length === 0
+        || !isHash(aggregate.manifestDigest)
+        || !isHash(aggregate.resultDigest)
+        || !directedAggregate
+        || directedAggregate.executionHeadSha !== aggregate.executionHeadSha
+        || directedAggregate.graphRevision !== aggregate.graphRevision
+        || directedAggregate.checkedAt !== aggregate.checkedAt
+        || directedAggregate.receiptRef !== aggregate.receiptRef
+        || directedAggregate.manifestDigest !== aggregate.manifestDigest
+        || directedAggregate.resultDigest !== aggregate.resultDigest
+        || !sameSet(directedAggregate.gateIds, aggregate.gateIds)
+        || !directive.localGates.receiptRefs.includes(aggregate.receiptRef)) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.AGGREGATE_QA_REQUIRED);
+    }
+    else if (!Number.isFinite(Date.parse(aggregate.checkedAt)) || actual.nowIso && (Date.parse(actual.nowIso) - Date.parse(aggregate.checkedAt) > 30 * 60 * 1000
+        || Date.parse(aggregate.checkedAt) - Date.parse(actual.nowIso) > 5 * 60 * 1000)) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.AGGREGATE_QA_STALE);
+    }
+    const originBinding = actual.originBinding;
+    if (!originBinding
+        || originBinding.schemaVersion !== 1
+        || originBinding.capturedFromCurrentCheckout !== true
+        || originBinding.originBranch !== directive.originBranch
+        || originBinding.executionBranch !== directive.executionBranch
+        || !isSha(originBinding.originHeadSha)
+        || !Number.isFinite(Date.parse(originBinding.capturedAt))) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.ORIGIN_BINDING_REQUIRED);
+    }
+    if (actual.writerLeaseActive)
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.LEASE_ACTIVE);
+    if (!sameSet(directive.storyCheckpointIds, actual.acceptedCheckpointIds)) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.STORY_CHECKPOINTS_REQUIRED);
+    }
+    if (!isSha(directive.expectedExecutionHeadSha) || directive.expectedExecutionHeadSha !== actual.executionHeadSha) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.HEAD_MISMATCH);
+    }
+    if (directive.graphRevision && directive.graphRevision !== actual.graphRevision) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.GRAPH_REVISION_MISMATCH);
+    }
+    if (!/^[a-f0-9]{64}$/i.test(directive.graphRevision))
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.GRAPH_REVISION_MISMATCH);
+    if (actual.existingReceipt?.physicalStatus === 'pushed'
+        && actual.existingReceipt.idempotencyKey === directive.idempotencyKey
+        && actual.existingReceipt.executionHeadSha === directive.expectedExecutionHeadSha) {
+        return { ready: true, reasonCodes: [EPIC_TERMINAL_GIT_REASON_CODES.ALREADY_COMPLETE] };
+    }
+    return reasons.length === 0
+        ? { ready: true, reasonCodes: [EPIC_TERMINAL_GIT_REASON_CODES.READY] }
+        : { ready: false, reasonCodes: unique(reasons) };
+}
+/**
+ * Fail-closed ownership and integration classifier. A canonical-looking name is
+ * never sufficient: state/receipt proof plus convention and provider metadata
+ * or PR head/base evidence are required before any destructive action.
+ */
+export function classifyGitReconciliationCandidate(candidate) {
+    const evidence = unique(candidate.ownershipEvidence);
+    const hasDurableProof = evidence.includes('state_reference') || evidence.includes('terminal_receipt');
+    const hasConvention = evidence.includes('canonical_convention');
+    const hasCorroboration = candidate.kind === 'pull_request'
+        ? evidence.includes('pr_head_base_match')
+        : evidence.includes('managed_metadata');
+    const managed = hasDurableProof && hasConvention && hasCorroboration;
+    const preserve = (...reasonCodes) => Object.freeze({
+        schemaVersion: 1,
+        resourceId: candidate.resourceId,
+        action: 'preserve',
+        managed,
+        reasonCodes: Object.freeze(unique(reasonCodes)),
+        evidence: Object.freeze(evidence),
+        publicSafe: true,
+    });
+    if (candidate.lifecycle === 'already_absent' && candidate.providerVerified) {
+        return Object.freeze({ schemaVersion: 1, resourceId: candidate.resourceId, action: 'no_op', managed, reasonCodes: [EPIC_TERMINAL_GIT_REASON_CODES.ALREADY_RECONCILED], evidence, publicSafe: true });
+    }
+    if (!managed)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.OWNERSHIP_UNPROVEN);
+    if (!candidate.providerVerified)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.PROVIDER_TRUTH_UNKNOWN);
+    if (candidate.origin)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.RESOURCE_ORIGIN);
+    if (candidate.current)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.RESOURCE_CURRENT);
+    if (candidate.worktreeActive)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.WORKTREE_ACTIVE);
+    if (candidate.protected)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.RESOURCE_PROTECTED);
+    if (candidate.lifecycle === 'active')
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.RESOURCE_ACTIVE);
+    if (candidate.hasExclusiveCommits)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.UNIQUE_COMMITS);
+    if (candidate.previouslyReconciled)
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.RESOURCE_RACED);
+    if (!candidate.commitsReachable && !candidate.contentEquivalent) {
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.INTEGRATION_UNPROVEN);
+    }
+    // Generic Git deletion has no safe expected-OID guard without force flags.
+    // The GitHub capability guards both target and integration origin atomically.
+    if (candidate.kind === 'remote_branch' && candidate.remoteDeletionCas !== 'github-update-refs-v1') {
+        return preserve(EPIC_TERMINAL_GIT_REASON_CODES.REMOTE_DELETE_CAS_UNAVAILABLE);
+    }
+    const action = candidate.kind === 'local_branch'
+        ? 'delete_local_branch'
+        : candidate.kind === 'remote_branch' ? 'delete_remote_branch' : 'close_pull_request';
+    return Object.freeze({
+        schemaVersion: 1,
+        resourceId: candidate.resourceId,
+        action,
+        managed: true,
+        reasonCodes: [EPIC_TERMINAL_GIT_REASON_CODES.SAFE_TO_RECONCILE],
+        evidence: Object.freeze(evidence),
+        publicSafe: true,
+    });
+}
+export function reconcileTerminalReceipt(current, requested) {
+    if (!current)
+        return { kind: 'accepted', receipt: requested };
+    if (current.idempotencyKey !== requested.idempotencyKey)
+        return { kind: 'accepted', receipt: requested };
+    if (current.epicId === requested.epicId
+        && current.executionBranch === requested.executionBranch
+        && current.originBranch === requested.originBranch
+        && current.baseSha === requested.baseSha
+        && current.executionHeadSha === requested.executionHeadSha
+        && current.mergeSha === requested.mergeSha
+        && current.pushedSha === requested.pushedSha
+        && current.physicalStatus === requested.physicalStatus) {
+        if (requested.candidateQa && JSON.stringify(current.candidateQa) !== JSON.stringify(requested.candidateQa)) {
+            return { kind: 'accepted', receipt: requested };
+        }
+        if (requested.providerGuard && JSON.stringify(current.providerGuard) !== JSON.stringify(requested.providerGuard)) {
+            return { kind: 'accepted', receipt: requested };
+        }
+        return { kind: 'reused', receipt: current };
+    }
+    // A failed/prepared attempt is not integrated physical truth. The root has to
+    // revalidate a new candidate, but its successful retry must replace that debt.
+    // Never rewrite a pushed/merged receipt or move an idempotency key to a new owner.
+    if (current.retryEligible && !current.pushedSha
+        && ['prepared', 'blocked_local_or_repo', 'denied_external_gate'].includes(current.physicalStatus)
+        && current.epicId === requested.epicId
+        && current.executionBranch === requested.executionBranch
+        && current.originBranch === requested.originBranch
+        && current.executionHeadSha === requested.executionHeadSha) {
+        return { kind: 'accepted', receipt: requested };
+    }
+    return { kind: 'blocked', reasonCode: 'epic-terminal-receipt-idempotency-conflict' };
+}
+function nonEmpty(value) {
+    return typeof value === 'string' && value.trim().length > 0;
+}
+function isSha(value) {
+    return /^[a-f0-9]{7,64}$/i.test(value);
+}
+function isHash(value) {
+    return typeof value === 'string' && /^[a-f0-9]{64}$/i.test(value);
+}
+function unique(values) {
+    return [...new Set(values)];
+}
+function sameSet(left, right) {
+    return left.length === right.length && [...left].sort().every((item, index) => item === [...right].sort()[index]);
+}

package/packages/shared/dist/yoloop/planning-graph.js

@@ -0,0 +1,119 @@
+/**
+ * P208.01 -- public-safe planning evidence for intelligent epic waves.
+ *
+ * This module normalizes evidence only. It never authorizes concurrency or
+ * mutates state; the planner must treat `evidence: unknown` conservatively.
+ */
+import { createHash } from 'node:crypto';
+export const YOLOOP_PLANNING_GRAPH_VERSION = 1;
+export const YOLOOP_MAX_WRITE_CONCURRENCY = 1;
+const CLAIM_KINDS = new Set([
+    'file', 'module', 'contract', 'schema', 'api', 'migration', 'manifest',
+    'generated-file', 'lockfile', 'global-state', 'tool', 'service', 'port',
+    'database', 'fixture', 'human-gate', 'side-effect',
+]);
+const ACCESSES = new Set(['read', 'write', 'exclusive']);
+const EVIDENCE = new Set(['verified', 'declared', 'unknown']);
+const MAX_CLAIMS = 128;
+const MAX_ATTEMPTS = 32;
+export function normalizeYoloopStoryPlanningEvidence(value) {
+    const dependencyBasis = EVIDENCE.has(value?.dependencyBasis)
+        ? value?.dependencyBasis
+        : 'unknown';
+    const claims = uniqueSortedClaims((value?.claims ?? []).slice(0, MAX_CLAIMS).map(normalizeClaim));
+    const semanticArtifacts = uniqueSortedSemantic((value?.semanticArtifacts ?? []).slice(0, MAX_CLAIMS).map(normalizeSemantic));
+    const attempts = normalizeAttempts(value?.attempts ?? []);
+    const normalized = {
+        schemaVersion: YOLOOP_PLANNING_GRAPH_VERSION,
+        dependencyBasis,
+        claims,
+        semanticArtifacts,
+        ...(boundedInteger(value?.priority, -1_000, 1_000) !== undefined ? { priority: boundedInteger(value?.priority, -1_000, 1_000) } : {}),
+        ...(boundedInteger(value?.estimatedCost, 0, 1_000_000) !== undefined ? { estimatedCost: boundedInteger(value?.estimatedCost, 0, 1_000_000) } : {}),
+        ...(isRisk(value?.risk) ? { risk: value.risk } : { risk: 'unknown' }),
+        ...(attempts.length > 0 ? { attempts } : {}),
+    };
+    return { ...normalized, graphRevision: revisionFor(normalized) };
+}
+export function normalizeYoloopPlanningCapacity(value) {
+    return {
+        supportsReadOnlyParallel: value?.supportsReadOnlyParallel === true,
+        supportsIsolatedBuildTest: value?.supportsIsolatedBuildTest === true,
+        supportsPreparedBundles: value?.supportsPreparedBundles === true,
+        maxPreparationConcurrency: positiveBounded(value?.maxPreparationConcurrency, 1, 64),
+        maxBuildTestConcurrency: positiveBounded(value?.maxBuildTestConcurrency, 1, 64),
+        maxWriteConcurrency: YOLOOP_MAX_WRITE_CONCURRENCY,
+    };
+}
+export function normalizeYoloopPlanningBudget(value) {
+    const maxEstimatedCost = boundedInteger(value?.maxEstimatedCost, 0, 1_000_000);
+    const remainingEstimatedCost = boundedInteger(value?.remainingEstimatedCost, 0, 1_000_000);
+    return {
+        maxStories: positiveBounded(value?.maxStories, 1, 64),
+        ...(maxEstimatedCost !== undefined ? { maxEstimatedCost } : {}),
+        ...(remainingEstimatedCost !== undefined ? { remainingEstimatedCost } : {}),
+    };
+}
+function normalizeClaim(value) {
+    const kind = CLAIM_KINDS.has(value.kind) ? value.kind : 'global-state';
+    const access = ACCESSES.has(value.access) ? value.access : 'exclusive';
+    const evidence = EVIDENCE.has(value.evidence) ? value.evidence : 'unknown';
+    const ref = safeRef(value.ref) || 'unknown';
+    const globalSensitive = value.globalSensitive === true || isGlobalSensitive(kind, ref);
+    return { kind, ref, access, evidence, ...(globalSensitive ? { globalSensitive: true } : {}) };
+}
+function normalizeSemantic(value) {
+    return {
+        ref: safeRef(value.ref) || 'unknown',
+        direction: value.direction === 'produces' || value.direction === 'consumes' ? value.direction : 'consumes',
+        evidence: EVIDENCE.has(value.evidence) ? value.evidence : 'unknown',
+    };
+}
+function normalizeAttempts(values) {
+    return values.slice(-MAX_ATTEMPTS).map((value, index) => ({
+        attempt: positiveBounded(value.attempt, index + 1, 1_000_000),
+        outcome: ['passed', 'failed', 'blocked', 'cancelled', 'rolled-back'].includes(value.outcome) ? value.outcome : 'blocked',
+        reasonCodes: uniqueStrings(value.reasonCodes).slice(0, 32),
+        ...(value.discoveredClaims ? { discoveredClaims: uniqueSortedClaims(value.discoveredClaims.slice(0, MAX_CLAIMS).map(normalizeClaim)) } : {}),
+    }));
+}
+function safeRef(value) {
+    if (typeof value !== 'string')
+        return '';
+    const trimmed = value.trim().replace(/\\/g, '/');
+    if (!trimmed || trimmed.length > 240 || trimmed.startsWith('/') || trimmed.includes('..') || /[\u0000-\u001f]/.test(trimmed))
+        return '';
+    return /^[A-Za-z0-9._/:@#-]+$/.test(trimmed) ? trimmed : '';
+}
+function isGlobalSensitive(kind, ref) {
+    return ['migration', 'manifest', 'generated-file', 'lockfile', 'global-state'].includes(kind) ||
+        /(^|\/)(package-lock\.json|pnpm-lock\.yaml|yarn\.lock|migrations?|generated)(\/|$)/i.test(ref);
+}
+function uniqueSortedClaims(values) {
+    return uniqueBy(values, (value) => `${value.kind}:${value.ref}:${value.access}:${value.evidence}:${value.globalSensitive === true}`)
+        .sort((a, b) => `${a.kind}:${a.ref}:${a.access}`.localeCompare(`${b.kind}:${b.ref}:${b.access}`));
+}
+function uniqueSortedSemantic(values) {
+    return uniqueBy(values, (value) => `${value.ref}:${value.direction}:${value.evidence}`)
+        .sort((a, b) => `${a.ref}:${a.direction}`.localeCompare(`${b.ref}:${b.direction}`));
+}
+function uniqueStrings(values) {
+    return [...new Set(values.map(safeRef).filter(Boolean))].sort((a, b) => a.localeCompare(b));
+}
+function uniqueBy(values, key) {
+    const seen = new Set();
+    return values.filter((value) => { const next = key(value); if (seen.has(next))
+        return false; seen.add(next); return true; });
+}
+function isRisk(value) {
+    return value === 'low' || value === 'normal' || value === 'high' || value === 'critical' || value === 'unknown';
+}
+function boundedInteger(value, min, max) {
+    return typeof value === 'number' && Number.isInteger(value) && value >= min && value <= max ? value : undefined;
+}
+function positiveBounded(value, fallback, max) {
+    return boundedInteger(value, 1, max) ?? fallback;
+}
+function revisionFor(value) {
+    return createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}

package/packages/shared/dist/yoloop/public-story-write-set.js

@@ -0,0 +1,27 @@
+import { normalizeContinuousWriteRef } from './wave-decision-receipt.js';
+export function publicWriteSet(story) {
+    const claimRefs = (story.planning?.claims ?? [])
+        .filter((claim) => claim.access !== 'read' && claim.evidence === 'verified')
+        .map((claim) => claim.ref);
+    const authoredRefs = [
+        ...claimRefs,
+        ...(story.files_to_modify ?? []),
+        ...(story.contracts ?? []),
+        ...(story.contract_refs ?? []),
+        ...(story.shared_surfaces ?? []),
+    ].map(normalizeContinuousWriteRef);
+    // Never reduce an invalid authored scope to only the lifecycle paths.
+    if (authoredRefs.some((ref) => ref === undefined))
+        return [];
+    return [...new Set([
+            '.neocortex/state.json',
+            `docs/stories/${safeRef(story.id)}.story.md`,
+            ...authoredRefs,
+        ])].sort();
+}
+function safeRef(value) {
+    if (typeof value !== 'string')
+        return '';
+    const normalized = value.trim().replace(/\\/g, '/');
+    return normalized && normalized.length <= 240 && !normalized.startsWith('/') && !normalized.includes('..') && /^[A-Za-z0-9._/:@#-]+$/.test(normalized) ? normalized : '';
+}

package/packages/shared/dist/yoloop/wave-decision-receipt.js

@@ -1,5 +1,16 @@
 /** P208.03 -- public-safe deterministic planning DecisionReceipts. */
 import { createHash } from 'node:crypto';
+/** Canonical public write-path boundary, shipped with bundle admission to every client. */
+export function normalizeContinuousWriteRef(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const normalized = value.replace(/\\/g, '/');
+    if (!normalized || normalized.length > 240 || normalized.startsWith('/')
+        || /^[A-Za-z]:/.test(normalized) || normalized.includes('..') || normalized.includes('//')
+        || normalized.split('/').includes('.') || !/^[A-Za-z0-9._/:@#-]+$/.test(normalized))
+        return undefined;
+    return normalized;
+}
 export const YOLOOP_WAVE_DECISION_RECEIPT_VERSION = 1;
 export function createYoloopWaveDecisionReceipt(input) {
     const epicId = requireId(input.epicId, 'epic-id-invalid');
@@ -42,6 +53,13 @@ export function validateYoloopPreparationBundle(bundle, expected) {
         errors.push('bundle-graph-stale');
     if (![bundle.baseSha, bundle.bundleDigest, bundle.graphRevision, bundle.claimRevision].every(isHash))
         errors.push('bundle-digest-invalid');
+    if (!Array.isArray(bundle.authorizedWriteSet) || bundle.authorizedWriteSet.length === 0
+        || bundle.authorizedWriteSet.some((ref) => typeof ref !== 'string' || normalizeContinuousWriteRef(ref) !== ref)
+        || expected.authorizedWriteSet && !sameStrings(bundle.authorizedWriteSet, expected.authorizedWriteSet))
+        errors.push('bundle-write-set-invalid');
+    if (!bundle.contextDigests || typeof bundle.contextDigests !== 'object'
+        || Object.entries(bundle.contextDigests).some(([path, digest]) => normalizeContinuousWriteRef(path) !== path || !isHash(digest)))
+        errors.push('bundle-context-digests-invalid');
     if (!isTimestamp(bundle.createdAt) || !isTimestamp(bundle.expiresAt) || bundle.expiresAt <= expected.nowIso || bundle.expiresAt <= bundle.createdAt)
         errors.push('bundle-expired');
     if (!Array.isArray(bundle.validationRefs) || bundle.validationRefs.length === 0 || bundle.validationRefs.some((ref) => !isSafeRef(ref)))
@@ -75,3 +93,4 @@ function isHash(value) { return /^[a-f0-9]{40,64}$/.test(value); }
 function isTimestamp(value) { return typeof value === 'string' && Number.isFinite(Date.parse(value)); }
 function isSafeRef(value) { return typeof value === 'string' && value.length > 0 && value.length <= 200 && !value.startsWith('/') && !value.includes('..') && /^[A-Za-z0-9._/:@#-]+$/.test(value); }
 function uniqueSafe(values) { return Object.freeze([...new Set(values)].sort()); }
+function sameStrings(left, right) { return left.length === right.length && left.every((value, index) => value === right[index]); }

package/targets-stubs/antigravity/gemini.md

@@ -1,4 +1,4 @@
-# 🧠 Neocortex v4.60.23 | OrNexus Team
+# 🧠 Neocortex v4.60.25 | OrNexus Team
 
 This project uses Neocortex, a Development Orchestrator.
 

package/targets-stubs/antigravity/neocortex.md

@@ -52,3 +52,21 @@ history, ambient metadata, raw logs, or raw stdout/stderr into this profile. Do
 not pass unmanaged user-owned content. Do not embed, reveal, summarize, or reconstruct proprietary prompts, server-side
 implementation details, orchestration logic, secrets, license keys, or customer
 data. This child must not invoke another Neocortex child.
+
+At the root only, `epicTerminalGitDirective` uses the recorded origin and
+forbids worktree management, force-push and ambiguous/unintegrated cleanup.
+`epicGitReconciliationDirective` runs fail-closed before start/resume children
+and supports explicit `dryRun` audit without Git effects.
+Terminal effects require a fresh aggregate-QA receipt bound to the exact physical
+execution HEAD/current graph and an immutable physical origin binding. PR reuse
+and cleanup revalidate exact SHAs and fresh provider/ref truth immediately before
+effects; active, manual-worktree, ambiguous, protected or raced resources remain.
+Post-commit lease/checkpoint and physical receipts use the fsync/CAS runtime store
+in a private user-owned directory inside the Git common-dir, never a tracked-state rewrite. Accepted story checkpoints
+require independent typed QA and root commit-range review receipts bound to the
+story, commit range, bundle digest and graph revision; fresh physical recomputation is authoritative and generic receipts cannot
+authorize pass/approval. Persisted merge state never replaces fresh root physical
+verification when a terminal-complete response carries the terminal directive.
+Remote branch deletion is
+preserved with `git-resource-remote-delete-cas-unavailable` when no OID-bound
+provider primitive exists; local refs and PRs still reconcile when fully proven.

package/targets-stubs/antigravity/skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex
-description: "🧠 Neocortex v4.60.23 | OrNexus Team"
+description: "🧠 Neocortex v4.60.25 | OrNexus Team"
 ---
 
 <!--

package/targets-stubs/claude-code/neocortex-root.agent.yaml

@@ -4,7 +4,7 @@ agent:
     name: 'Neocortex Root Agent'
     title: 'Development Orchestrator (Root)'
     icon: '>'
-    version: '4.60.23'
+    version: '4.60.25'
     architecture: 'thin-client'
     module: stand-alone
     hasSidecar: false