@ornexus/neocortex 4.60.59 → 4.60.60

package/install.ps1

@@ -17,7 +17,7 @@ param(
     [string]$ServerUrl = ('https://{0}.{1}.{2}' -f 'api','neocortex','sh')
 )
 
-$VERSION = "4.60.59"
+$VERSION = "4.60.60"
 
 # =============================================================================
 # CONFIGURACOES

package/install.sh

@@ -4,7 +4,7 @@
 # Development Orchestrator
 
 # Versao do instalador
-VERSION="4.60.59"
+VERSION="4.60.60"
 
 # Flags
 MIGRATION_DETECTED=false

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ornexus/neocortex",
-  "version": "4.60.59",
-  "description": "Neocortex v4.60.59 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
+  "version": "4.60.60",
+  "description": "Neocortex v4.60.60 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
   "keywords": [
     "claude",
     "claude-code",
@@ -67,6 +67,8 @@
     "packages/shared/dist/yolo/spec-envelope.js",
     "packages/shared/dist/yolo/change-evidence.js",
     "packages/shared/dist/invocation/",
+    "packages/shared/dist/planning/diagnosis-state.js",
+    "packages/shared/dist/merge-readiness/c12-remote-observation.js",
     "packages/shared/dist/state/",
     "packages/shared/dist/continuity/goal-operation-authority.js",
     "!packages/shared/dist/**/__tests__/**",
@@ -148,11 +150,13 @@
     "url": "https://github.com/sponsors/ornexus"
   },
   "dependencies": {
+    "@babel/parser": "^7.29.7",
     "@clack/prompts": "^1.0.1",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "execa": "^9.6.1",
     "node-cache": "^5.1.2",
     "picocolors": "^1.1.1",
+    "yaml": "^2.8.3",
     "zod": "^4.3.6"
   },
   "optionalDependencies": {

package/packages/client/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{getClientVersion as d}from"./version.js";const l=`
+import{getClientVersion as p}from"./version.js";const l=`
 neocortex-client - Neocortex Client CLI
 
 Usage:
@@ -8,9 +8,16 @@ Usage:
 Commands:
   invoke         Send orchestration request to server
   activate       Activate license key
-  refresh-memory Create/repair canonical NEOCORTEX.md links and wrappers
+  refresh-memory Create/repair canonical memory; --verify checks all targets without writes
+  architecture-memory seal  Seal committed Update Memory evidence into local root state
+  planning-diagnosis seal  Seal an independently reviewed P01 checkpoint from stdin
+  planning-research seal  Seal an independently reviewed P02 checkpoint from stdin
+  planning-generation seal  Seal an independently reviewed P03 checkpoint from stdin
   story-checkpoint Root-owned direct-*yolo commit/checkpoint boundary
+  legacy-story-branch Root-owned setup and C01 checkpoint for recorded story-branch projects
+  legacy-story-pr     Root-owned legacy C08/C09 checkpoint, C10 PR, C11 review and C12 merge boundary
   native-agent   Reserve and observe authorized native child dispatches
+  architecture-answers  Save explicit Pact decisions in the local private store
   config         Inspect or change managed subagent approval mode
   cache-status   Show cache and circuit breaker status
   update         Update to latest version (use 'neocortex update' instead)
@@ -49,6 +56,13 @@ Story Checkpoint Options:
   --remote <name>       Git remote (default: origin)
   --format json|plain   Public result format (default: plain)
 
+Architecture Answers:
+  save --project-root <path>  Read five explicit Pact decisions from bounded JSON stdin.
+  status --project-root <path>  Revalidate and show only the public receipt.
+  Required keys: consumer, provider, brokerUrl (null or HTTPS URL),
+  matchersAggressive (boolean), generateProvider (boolean).
+  This stores a private local record only; it does not authorize a Pact child.
+
 Config Actions:
   status                Show requested/effective/source/scope (default)
   max                   Request managed maximum approvals
@@ -84,6 +98,25 @@ Examples:
   neocortex-client story-checkpoint handoff --story P174.03.913359 --format json
   neocortex-client story-checkpoint begin --story P174.03.913359 --format json
   neocortex-client story-checkpoint finalize --story P174.03.913359 --push --format json
+  neocortex-client legacy-story-branch setup --story P174.03.913359 --project-root . --dry-run --format json
+  neocortex-client legacy-story-branch accept --story P174.03.913359 --issue-number 123 --project-root . --format json
+  neocortex-client legacy-story-pr commit-plan --story P174.03.913359 --project-root . --format json
+  neocortex-client legacy-story-pr commit-accept --story P174.03.913359 --authorize-commit --project-root . --format json
+  neocortex-client legacy-story-pr sync-plan --story P174.03.913359 --project-root . --format json
+  neocortex-client legacy-story-pr sync-accept --story P174.03.913359 --authorize-sync --project-root . --format json
+  neocortex-client legacy-story-pr plan --story P174.03.913359 --project-root . --format json
+  neocortex-client legacy-story-pr create --story P174.03.913359 --project-root . --body-file /tmp/reviewed-pr-body.md --authorize-pr-create --format json
+  neocortex-client legacy-story-pr review-plan --story P174.03.913359 --pr-number 41 --project-root . --format json
+  neocortex-client legacy-story-pr review-accept --story P174.03.913359 --pr-number 41 --project-root . --report-file /tmp/review-report.json --authorize-review --format json
+  neocortex-client legacy-story-pr merge-plan --story P174.03.913359 --pr-number 41 --project-root . --format json
+  neocortex-client legacy-story-pr merge-prepare --story P174.03.913359 --pr-number 41 --authorize-pr-update --project-root . --format json
+  neocortex-client legacy-story-pr merge-decision --story P174.03.913359 --pr-number 41 --project-root . --format json
+  neocortex-client legacy-story-pr merge-debt-record --story P174.03.913359 --pr-number 41 --project-root . --format json
+  neocortex-client legacy-story-pr merge-execute --story P174.03.913359 --pr-number 41 --authorize-merge --project-root . --format json
+  neocortex-client legacy-story-pr merge-reconcile --story P174.03.913359 --pr-number 41 --project-root . --format json
+  neocortex-client legacy-story-pr post-merge-plan --story P174.03.913359 --pr-number 41 --project-root . --format json
+  neocortex-client legacy-story-pr post-merge-accept --story P174.03.913359 --pr-number 41 --authorize-post-merge --project-root . --format json
+  neocortex-client architecture-answers save --project-root .  # JSON via stdin; never pass private URLs in argv
 
 Command-level watch inside --args:
   Supported: exactly one final unquoted --watch for *goal create/start/resume
@@ -113,5 +146,5 @@ Invocation payload boundary:
 
 License:
   Licensed under BSL-1.1 (Business Source License 1.1)
-`.trim(),p=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function u(){const a=process.argv.slice(2),r=a[0];r&&p.has(r.toLowerCase())&&process.exit(0),(!r||r==="--help"||r==="-h")&&(console.log(l),process.exit(0)),(r==="--version"||r==="-v")&&(console.log(d()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
-`),process.exit(0));const s=a.slice(1);switch(r){case"invoke":{const{invokeCliHandler:o}=await import("./commands/invoke.js"),e=await o(s);process.exit(e);break}case"activate":{const{activate:o}=await import("./commands/activate.js");let e,i,c=!1;for(let t=0;t<s.length;t++){const n=s[t];n==="--server-url"?i=s[++t]:n==="--non-interactive"?c=!0:n==="--help"||n==="-h"?(console.log(l),process.exit(0)):n.startsWith("-")||(e=n)}e||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const t=await o({licenseKey:e,serverUrl:i,nonInteractive:c});t.success?(console.log(t.message),process.exit(0)):(console.error(t.message),process.exit(1))}catch(t){const n=t instanceof Error?t.message:String(t);console.error(`Activation failed: ${n}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:o}=await import("./commands/config.js"),e=await o(s);process.exit(e);break}case"refresh-memory":{const{refreshMemoryCliHandler:o}=await import("./commands/refresh-memory.js"),e=await o(s);process.exit(e);break}case"story-checkpoint":{const{storyCheckpointCliHandler:o}=await import("./commands/story-checkpoint.js"),e=await o(s);process.exit(e);break}case"native-agent":{const{nativeAgentCliHandler:o}=await import("./commands/native-agent.js"),e=await o(s);process.exit(e);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${r}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}u().catch(a=>{console.error(`Fatal error: ${a instanceof Error?a.message:String(a)}`),process.exit(1)});
+`.trim(),d=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function m(){const s=process.argv.slice(2),a=s[0];a&&d.has(a.toLowerCase())&&process.exit(0),(!a||a==="--help"||a==="-h")&&(console.log(l),process.exit(0)),(a==="--version"||a==="-v")&&(console.log(p()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
+`),process.exit(0));const o=s.slice(1);switch(a){case"invoke":{const{invokeCliHandler:t}=await import("./commands/invoke.js"),e=await t(o);process.exit(e);break}case"activate":{const{activate:t}=await import("./commands/activate.js");let e,i,c=!1;for(let r=0;r<o.length;r++){const n=o[r];n==="--server-url"?i=o[++r]:n==="--non-interactive"?c=!0:n==="--help"||n==="-h"?(console.log(l),process.exit(0)):n.startsWith("-")||(e=n)}e||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const r=await t({licenseKey:e,serverUrl:i,nonInteractive:c});r.success?(console.log(r.message),process.exit(0)):(console.error(r.message),process.exit(1))}catch(r){const n=r instanceof Error?r.message:String(r);console.error(`Activation failed: ${n}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:t}=await import("./commands/config.js"),e=await t(o);process.exit(e);break}case"refresh-memory":{const{refreshMemoryCliHandler:t}=await import("./commands/refresh-memory.js"),e=await t(o);process.exit(e);break}case"architecture-memory":{const{architectureMemoryTerminalCliHandler:t}=await import("./commands/architecture-memory-terminal.js"),e=await t(o);process.exit(e);break}case"planning-diagnosis":{const{planningDiagnosisCliHandler:t}=await import("./commands/planning-diagnosis.js"),e=await t(o);process.exit(e);break}case"planning-research":{const{planningResearchCliHandler:t}=await import("./commands/planning-research.js"),e=await t(o);process.exit(e);break}case"planning-generation":{const{planningGenerationCliHandler:t}=await import("./commands/planning-generation.js"),e=await t(o);process.exit(e);break}case"story-checkpoint":{const{storyCheckpointCliHandler:t}=await import("./commands/story-checkpoint.js"),e=await t(o);process.exit(e);break}case"legacy-story-branch":{const{legacyStoryBranchCliHandler:t}=await import("./commands/legacy-story-branch.js"),e=await t(o);process.exit(e);break}case"legacy-story-pr":{const{legacyStoryPrCliHandler:t}=await import("./commands/legacy-story-pr.js"),e=await t(o);process.exit(e);break}case"native-agent":{const{nativeAgentCliHandler:t}=await import("./commands/native-agent.js"),e=await t(o);process.exit(e);break}case"architecture-answers":{const{architectureAnswersCliHandler:t}=await import("./commands/architecture-answers.js"),e=await t(o);process.exit(e);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${a}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}m().catch(s=>{console.error(`Fatal error: ${s instanceof Error?s.message:String(s)}`),process.exit(1)});

package/packages/client/dist/commands/architecture-answers.d.ts

@@ -0,0 +1,26 @@
+export interface PactAnswers {
+    readonly consumer: string;
+    readonly provider: string;
+    readonly brokerUrl: string | null;
+    readonly matchersAggressive: boolean;
+    readonly generateProvider: boolean;
+}
+export interface PactAnswerReceipt {
+    readonly schemaVersion: 'PactAnswerReceipt/1';
+    readonly targetEpicId: string;
+    readonly graphRevision: string;
+    readonly stateSha256: string;
+    readonly answersSha256: string;
+    readonly questionIds: readonly string[];
+    readonly publicSafe: true;
+}
+/** Store explicit answers without mutating the tracked architecture checkpoint. */
+export declare function savePactAnswers(projectRoot: string, value: unknown): PactAnswerReceipt;
+/** Revalidate the private record against the exact current root checkpoint. Never print answers. */
+export declare function loadPactAnswerReceipt(projectRoot: string): PactAnswerReceipt | undefined;
+/** Internal private handoff only. Callers must never log or return `answers`. */
+export declare function loadPactPrivateAnswers(projectRoot: string): Readonly<{
+    receipt: PactAnswerReceipt;
+    answers: PactAnswers;
+}> | undefined;
+export declare function architectureAnswersCliHandler(args: readonly string[]): Promise<number>;

package/packages/client/dist/commands/architecture-answers.js

@@ -0,0 +1,7 @@
+import{createHash as A,randomBytes as T,randomUUID as U}from"node:crypto";import{execFileSync as R}from"node:child_process";import{isDeepStrictEqual as j}from"node:util";import{closeSync as I,existsSync as w,fsyncSync as P,linkSync as L,lstatSync as l,mkdirSync as B,openSync as k,readFileSync as O,realpathSync as b,unlinkSync as q,writeFileSync as D}from"node:fs";import{isAbsolute as F,join as u,resolve as S}from"node:path";const z=4096,m=Object.freeze(["PACT-Q1-CONSUMER","PACT-Q2-PROVIDER","PACT-Q3-BROKER","PACT-Q4-MATCHERS","PACT-Q5-VERIFY"]),N=Object.freeze(["arch-prd","arch-architecture","arch-fitness-functions","arch-api-contracts"]);function d(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function y(e,n){return Object.keys(e).length===n.length&&n.every(r=>Object.hasOwn(e,r))}function x(e){return typeof e=="string"&&/^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/.test(e)}function Q(e){if(e===null)return!0;if(typeof e!="string"||e.length>512||!e.startsWith("https://")||/[\s\\]/.test(e))return!1;try{const n=new URL(e);return n.protocol==="https:"&&!!n.hostname&&!n.username&&!n.password&&!n.search&&!n.hash}catch{return!1}}function $(e){if(!d(e)||!y(e,["consumer","provider","brokerUrl","matchersAggressive","generateProvider"])||!x(e.consumer)||!x(e.provider)||!Q(e.brokerUrl)||typeof e.matchersAggressive!="boolean"||typeof e.generateProvider!="boolean")throw new Error("architecture-answers-invalid");return{consumer:e.consumer,provider:e.provider,brokerUrl:e.brokerUrl,matchersAggressive:e.matchersAggressive,generateProvider:e.generateProvider}}function C(e,n){const r=S(e),c=R("git",["rev-parse","--show-toplevel"],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(b(r)!==r||S(c)!==r)throw new Error("architecture-answers-private-store-invalid");const o=R("git",["rev-parse","--git-common-dir"],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),s=F(o)?S(o):S(r,o);if(b(s)!==s||l(s).isSymbolicLink())throw new Error("architecture-answers-private-store-invalid");const a=u(s,"neocortex-architecture");if(!w(a)&&!n)return;n&&B(a,{recursive:!0,mode:448});const t=l(a);if(!t.isDirectory()||t.isSymbolicLink()||t.uid!==process.getuid?.()||(t.mode&63)!==0)throw new Error("architecture-answers-private-store-invalid");return a}function J(e,n){const r=u(e,".neocortex","state.json"),c=l(r);if(!c.isFile()||c.isSymbolicLink())throw new Error("architecture-answers-state-invalid");const o=O(r,"utf8"),s=JSON.parse(o),a=d(s)&&d(s.archPlan)?s.archPlan:void 0,t=a&&d(a.execution)?a.execution:void 0,h=t?.acceptedStages;if(!t||t.schemaVersion!==1||t.owner!=="root"||t.evidencePolicy!=="v2-required"||t.currentStageCommand!=="generate-pacts"||!(t.continuationState==="ask-user"&&JSON.stringify(t.questionIds)===JSON.stringify(m)||n&&t.continuationState==="delegate"&&JSON.stringify(t.questionIds)==="[]")||typeof t.targetEpicId!="string"||!/^P[1-9][0-9]{0,11}$/.test(t.targetEpicId)||!d(s)||!d(s.epics)||!Object.hasOwn(s.epics,t.targetEpicId)||typeof t.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(t.graphRevision)||!Array.isArray(h)||h.length!==N.length||!h.every((f,p)=>d(f)&&f.stageCommand===N[p]&&f.targetEpicId===t.targetEpicId&&d(f.completionEvidence)&&d(f.validationEvidence)))throw new Error("architecture-answers-checkpoint-invalid");const i=t.continuationState==="delegate"?t.pactAnswerReceipt:void 0;if(t.continuationState==="delegate"&&(!d(i)||!y(i,["schemaVersion","targetEpicId","graphRevision","stateSha256","answersSha256","questionIds","publicSafe"])||i.schemaVersion!=="PactAnswerReceipt/1"||i.targetEpicId!==t.targetEpicId||i.graphRevision!==t.graphRevision||typeof i.stateSha256!="string"||!/^[a-f0-9]{64}$/.test(i.stateSha256)||typeof i.answersSha256!="string"||!/^[a-f0-9]{64}$/.test(i.answersSha256)||JSON.stringify(i.questionIds)!==JSON.stringify(m)||i.publicSafe!==!0))throw new Error("architecture-answers-checkpoint-invalid");return{targetEpicId:t.targetEpicId,graphRevision:t.graphRevision,stateSha256:t.continuationState==="ask-user"?A("sha256").update(o).digest("hex"):i.stateSha256,...i?{delegatedReceipt:i}:{}}}function g(e){return{schemaVersion:"PactAnswerReceipt/1",targetEpicId:e.targetEpicId,graphRevision:e.graphRevision,stateSha256:e.stateSha256,answersSha256:e.checksumSha256,questionIds:m,publicSafe:!0}}function V(e,n,r){const c={schemaVersion:r?"PactLocalAnswers/2":"PactLocalAnswers/1",...e,...r?{nonce:r}:{},answers:n};return{...c,checksumSha256:A("sha256").update(`${JSON.stringify(c)}
+`).digest("hex")}}function _(e,n){const r=$(n),c=J(e,!1),o=E(e);if(o){if(!j(o.answers,r))throw new Error("architecture-answers-conflict");return g(o)}const s=V(c,r,T(32).toString("hex")),a=`${JSON.stringify(s)}
+`,t=C(e,!0),h=u(t,`pact-answers-${s.targetEpicId}-${s.graphRevision}.json`);if(w(h))throw new Error("architecture-answers-conflict");const i=u(t,`pact-answers-tmp-${U()}.json`);let f=!1;const p=k(i,"wx",384);try{D(p,a),P(p)}finally{I(p)}try{L(i,h),f=!0;const v=k(t,"r");try{P(v)}finally{I(v)}}finally{if(q(i),!f&&w(h))throw new Error("architecture-answers-conflict")}return g(s)}function E(e,n=!1){const r=J(e,!0);if(n&&!r.delegatedReceipt)throw new Error("architecture-answers-checkpoint-invalid");const c=C(e,!1);if(!c)return;const o=u(c,`pact-answers-${r.targetEpicId}-${r.graphRevision}.json`);if(!w(o))return;const s=l(o);if(!s.isFile()||s.isSymbolicLink()||s.size>8192||s.uid!==process.getuid?.()||(s.mode&63)!==0)throw new Error("architecture-answers-conflict");const a=O(o,"utf8"),t=JSON.parse(a);if(!d(t)||!(t.schemaVersion==="PactLocalAnswers/1"&&y(t,["schemaVersion","targetEpicId","graphRevision","stateSha256","answers","checksumSha256"])||t.schemaVersion==="PactLocalAnswers/2"&&y(t,["schemaVersion","targetEpicId","graphRevision","stateSha256","nonce","answers","checksumSha256"])&&typeof t.nonce=="string"&&/^[a-f0-9]{64}$/.test(t.nonce))||t.targetEpicId!==r.targetEpicId||t.graphRevision!==r.graphRevision||t.stateSha256!==r.stateSha256)throw new Error("architecture-answers-conflict");const h=V({targetEpicId:r.targetEpicId,graphRevision:r.graphRevision,stateSha256:r.stateSha256},$(t.answers),t.schemaVersion==="PactLocalAnswers/2"?t.nonce:void 0),i=`${JSON.stringify(h)}
+`;if(a!==i||r.delegatedReceipt&&JSON.stringify(g(h))!==JSON.stringify(r.delegatedReceipt))throw new Error("architecture-answers-conflict");return h}function H(e){const n=E(e);return n?g(n):void 0}function X(e){const n=E(e,!0);return n?{receipt:g(n),answers:n.answers}:void 0}async function M(){const e=[];let n=0;for await(const r of process.stdin){const c=Buffer.isBuffer(r)?r:Buffer.from(String(r));if(n+=c.length,n>z)throw new Error("architecture-answers-input-too-large");e.push(c)}return JSON.parse(Buffer.concat(e).toString("utf8"))}async function ee(e){if(e[0]!=="save"&&e[0]!=="status"||e.length>1&&(e.length!==3||e[1]!=="--project-root"||!e[2]))return process.stdout.write(`{"ok":false,"reasonCode":"architecture-answers-usage-invalid","publicSafe":true}
+`),1;try{const n=e[2]??process.cwd(),r=e[0]==="save"?_(n,await M()):H(n);return process.stdout.write(`${JSON.stringify({ok:!0,...r,...r?{}:{recorded:!1,publicSafe:!0}})}
+`),0}catch(n){const r=n instanceof Error&&/^architecture-answers-[a-z-]+$/.test(n.message)?n.message:"architecture-answers-failed";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:r,publicSafe:!0})}
+`),1}}export{ee as architectureAnswersCliHandler,H as loadPactAnswerReceipt,X as loadPactPrivateAnswers,_ as savePactAnswers};

package/packages/client/dist/commands/architecture-memory-terminal.d.ts

@@ -0,0 +1,21 @@
+export interface ArchitectureTerminalMemoryReceiptV1 {
+    readonly schemaVersion: 'ArchitectureTerminalMemoryReceipt/1';
+    readonly targetEpicId: string;
+    readonly graphRevision: string;
+    readonly sourceHead: string;
+    readonly canonicalSha256: string;
+    readonly projectionSha256: string;
+    readonly fileCount: number;
+    readonly completionReceiptId: string;
+    readonly validationReceiptId: string;
+    readonly receiptId: string;
+    readonly status: 'passed';
+    readonly evidenceIds: readonly string[];
+    readonly publicSafe: true;
+}
+export declare function acceptedArchitectureTerminalMemoryReceipt(value: unknown, execution: unknown): value is ArchitectureTerminalMemoryReceiptV1;
+/** A root-only physical seal; child output and a copied JSON assertion are insufficient. */
+export declare function deriveArchitectureTerminalMemoryReceipt(projectRoot: string, execution: unknown): ArchitectureTerminalMemoryReceiptV1;
+/** Root-only CAS: seal a committed, verified memory projection into local state. */
+export declare function sealArchitectureTerminalMemory(projectRoot: string): ArchitectureTerminalMemoryReceiptV1;
+export declare function architectureMemoryTerminalCliHandler(args: readonly string[]): Promise<number>;

package/packages/client/dist/commands/architecture-memory-terminal.js

@@ -0,0 +1,2 @@
+import{execFileSync as l}from"node:child_process";import{createHash as F,randomUUID as V}from"node:crypto";import{closeSync as h,fsyncSync as w,lstatSync as b,mkdirSync as J,openSync as y,readFileSync as I,realpathSync as O,renameSync as L,unlinkSync as T,writeFileSync as H}from"node:fs";import{isAbsolute as X,join as p,resolve as S}from"node:path";import{listProjectMemoryTargets as q}from"../memory/shared-project-memory-types.js";import{parseRefreshMemoryArgs as U,verifyProjectMemoryTargets as B}from"./refresh-memory.js";function Z(e,t){if(!c(e)||!c(t)||Object.keys(e).sort().join(",")!==["schemaVersion","targetEpicId","graphRevision","sourceHead","canonicalSha256","projectionSha256","fileCount","completionReceiptId","validationReceiptId","receiptId","status","evidenceIds","publicSafe"].sort().join(",")||e.schemaVersion!=="ArchitectureTerminalMemoryReceipt/1"||e.targetEpicId!==t.targetEpicId||e.graphRevision!==t.graphRevision||e.completionReceiptId!==t.completionEvidence?.receiptId||e.validationReceiptId!==t.validationEvidence?.receiptId||typeof e.sourceHead!="string"||!/^[a-f0-9]{40}$/.test(e.sourceHead)||![e.graphRevision,e.canonicalSha256,e.projectionSha256,e.completionReceiptId,e.validationReceiptId,e.receiptId].every(i=>typeof i=="string"&&/^[a-f0-9]{64}$/.test(i))||!Number.isInteger(e.fileCount)||e.fileCount<1||e.fileCount>64||e.status!=="passed"||e.publicSafe!==!0||!Array.isArray(e.evidenceIds)||e.evidenceIds.length!==1)return!1;const n={schemaVersion:e.schemaVersion,targetEpicId:e.targetEpicId,graphRevision:e.graphRevision,sourceHead:e.sourceHead,canonicalSha256:e.canonicalSha256,projectionSha256:e.projectionSha256,fileCount:e.fileCount,completionReceiptId:e.completionReceiptId,validationReceiptId:e.validationReceiptId},o=C(JSON.stringify(n));return e.receiptId===o&&e.evidenceIds[0]===`memory-physical-${o.slice(0,24)}`}function c(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function C(e){return F("sha256").update(e).digest("hex")}function M(e,t){if(!c(t)||t.owner!=="root"||t.currentStageCommand!=="update-memory"||t.continuationState!=="delegate"||t.childStatus!=="succeeded"||t.evidencePolicy!=="v2-required"||typeof t.targetEpicId!="string"||!/^P[1-9][0-9]{0,11}$/.test(t.targetEpicId)||typeof t.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(t.graphRevision)||!Array.isArray(t.acceptedStages)||t.acceptedStages.length!==14||!c(t.reviewDecision)||t.reviewDecision.decision!=="approved"||!c(t.completionEvidence)||t.completionEvidence.status!=="succeeded"||t.completionEvidence.stageCommand!=="update-memory"||!c(t.validationEvidence)||t.validationEvidence.status!=="passed"||t.validationEvidence.stageCommand!=="update-memory"||typeof t.completionEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(t.completionEvidence.receiptId)||typeof t.validationEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(t.validationEvidence.receiptId))throw new Error("architecture-terminal-memory-evidence-incomplete");const n=B(U(["--verify","--project-root",e])),o=l("git",["rev-parse","HEAD"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(!/^[a-f0-9]{40}$/.test(o))throw new Error("architecture-terminal-memory-head-invalid");const i=I(p(e,"NEOCORTEX.md")),f=l("git",["show","HEAD:NEOCORTEX.md"],{cwd:e,stdio:["ignore","pipe","ignore"],maxBuffer:65536});if(!i.equals(f)||C(i)!==n.canonicalSha256)throw new Error("architecture-terminal-memory-uncommitted");const v=[...new Set(["NEOCORTEX.md",...q().flatMap(r=>[r.primaryFile,...r.secondaryFiles.filter(d=>d.scope==="project").map(d=>d.path)])])];if(l("git",["diff","--name-only","HEAD","--",...v],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim())throw new Error("architecture-terminal-memory-uncommitted");const m={schemaVersion:"ArchitectureTerminalMemoryReceipt/1",targetEpicId:t.targetEpicId,graphRevision:t.graphRevision,sourceHead:o,canonicalSha256:n.canonicalSha256,projectionSha256:n.projectionSha256,fileCount:n.fileCount,completionReceiptId:t.completionEvidence.receiptId,validationReceiptId:t.validationEvidence.receiptId},s=C(JSON.stringify(m));return{...m,receiptId:s,status:"passed",evidenceIds:[`memory-physical-${s.slice(0,24)}`],publicSafe:!0}}function _(e){const t=S(e),n=l("git",["rev-parse","--show-toplevel"],{cwd:t,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(O(t)!==t||S(n)!==t)throw new Error("architecture-terminal-memory-project-root-invalid");const o=p(t,".neocortex"),i=p(o,"state.json"),f=p(o,"state.json.architecture.lock"),v=y(f,"wx",384);let a;try{const m=b(i);if(!m.isFile()||m.isSymbolicLink())throw new Error("architecture-terminal-memory-state-invalid");const s=I(i,"utf8"),r=JSON.parse(s);if(!c(r)||!c(r.archPlan)||!c(r.archPlan.execution)||!c(r.epics)||r.scope&&c(r.scope)&&r.scope.kind==="projected"||!Object.hasOwn(r.epics,String(r.archPlan.execution.targetEpicId))||r.archPlan.execution.terminalMemoryCheckpoint!==void 0)throw new Error("architecture-terminal-memory-state-invalid");const d=M(t,r.archPlan.execution),R=l("git",["rev-parse","--git-common-dir"],{cwd:t,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),g=X(R)?S(R):S(t,R);if(O(g)!==g||b(g).isSymbolicLink())throw new Error("architecture-terminal-memory-backup-dir-invalid");const E=p(g,"neocortex-architecture");J(E,{recursive:!0,mode:448});const u=b(E);if(!u.isDirectory()||u.isSymbolicLink()||u.uid!==process.getuid?.()||(u.mode&63)!==0)throw new Error("architecture-terminal-memory-backup-dir-invalid");if(I(i,"utf8")!==s)throw new Error("architecture-terminal-memory-state-conflict");const P=V(),D=p(E,`state-backup-${P}.json`),k=y(D,"wx",384);try{H(k,s),w(k)}finally{h(k)}const A=y(E,"r");try{w(A)}finally{h(A)}const N={...r,archPlan:{...r.archPlan,execution:{...r.archPlan.execution,terminalMemoryCheckpoint:d}}};a=p(o,`state.json.architecture-tmp-${P}`);const j=y(a,"wx",384);try{H(j,`${JSON.stringify(N,null,2)}
+`),w(j)}finally{h(j)}if(I(i,"utf8")!==s)throw new Error("architecture-terminal-memory-state-conflict");if(M(t,r.archPlan.execution).receiptId!==d.receiptId)throw new Error("architecture-terminal-memory-physical-conflict");L(a,i),a=void 0;const $=y(o,"r");try{w($)}finally{h($)}return d}finally{if(a)try{T(a)}catch{}h(v),T(f)}}async function x(e){try{if(e[0]!=="seal"||e.length!==1&&e.length!==3||e.length===3&&e[1]!=="--project-root")throw new Error("usage: architecture-memory seal [--project-root <path>]");const t=_(e.length===3?e[2]:process.cwd());return console.log(`Architecture memory sealed: receipt=${t.receiptId} head=${t.sourceHead} files=${t.fileCount}`),0}catch(t){return console.error(t instanceof Error?t.message:String(t)),1}}export{Z as acceptedArchitectureTerminalMemoryReceipt,x as architectureMemoryTerminalCliHandler,M as deriveArchitectureTerminalMemoryReceipt,_ as sealArchitectureTerminalMemory};

package/packages/client/dist/commands/architecture-root-binding.d.ts

@@ -0,0 +1,2 @@
+export declare function explicitArchitectureEpicTarget(args: string): string | undefined;
+export declare function deriveCommittedArchitectureEpicGraphRevision(projectRoot: string, epicId: string): string;

package/packages/client/dist/commands/architecture-root-binding.js

@@ -0,0 +1 @@
+import{createHash as f}from"node:crypto";import{execFileSync as u}from"node:child_process";import{lstatSync as w,realpathSync as n}from"node:fs";import{join as i,resolve as p}from"node:path";const g=/^P[1-9][0-9]{0,11}$/,v=/^[a-f0-9]{40,64}$/;function x(s){return s.match(/^\s*\*?arch-plan\s+"[^"\n]{1,4096}"\s+@docs\/epics\/epic-(P[1-9][0-9]{0,11})\.md\s*$/)?.[1]}function P(s,r){if(!g.test(r))throw new Error("architecture-root-epic-binding-invalid");const t=p(s),e=`docs/epics/epic-${r}.md`,a=i(t,e);try{if(n(t)!==t)throw new Error("architecture-root-epic-binding-invalid");if(n(i(t,"docs"))!==i(t,"docs")||n(i(t,"docs","epics"))!==i(t,"docs","epics")||n(a)!==a)throw new Error("architecture-root-epic-binding-invalid");const h=w(a);if(!h.isFile()||h.isSymbolicLink()||h.size>256*1024)throw new Error("architecture-root-epic-binding-invalid");const o=l=>u("git",[...l],{cwd:t,encoding:"utf8",stdio:["ignore","pipe","ignore"],maxBuffer:1024*1024}).trim();if(p(o(["rev-parse","--show-toplevel"]))!==t)throw new Error("architecture-root-epic-binding-invalid");const c=o(["rev-parse","--verify",`HEAD:${e}`]),d=o(["hash-object","--",e]),m=o(["ls-files","--stage","--",e]).match(/^100644 ([a-f0-9]{40,64}) 0\t/);if(!v.test(c)||d!==c||m?.[1]!==c)throw new Error("architecture-root-epic-binding-invalid");return f("sha256").update(`architecture-committed-epic-v1\0${r}\0${c}`).digest("hex")}catch{throw new Error("architecture-root-epic-binding-invalid")}}export{P as deriveCommittedArchitectureEpicGraphRevision,x as explicitArchitectureEpicTarget};

package/packages/client/dist/commands/invoke.d.ts

@@ -10,9 +10,11 @@
  *
  * See the LICENSE file in the project root for full license text.
  */
+import { type PactAnswerReceipt } from './architecture-answers.js';
 import type { YoloopPersistedState } from '../yoloop/shared-yoloop-types.js';
+import { type StateMigrationAuthorityV1 } from '../migrations/state-json.js';
 import { type RunnerBootstrapPolicyDecision } from '../continuity/runner-bootstrap-policy.js';
-import { type RunnerSchedulerBootstrapOptions, type RunnerSchedulerBootstrapResult } from '../runner/scheduler.js';
+import { observeRunnerOperationalStatus, type RunnerSchedulerBootstrapOptions, type RunnerSchedulerBootstrapResult, type RunnerOperationalStatusV1 } from '../runner/scheduler.js';
 import { type ContinuityProcessingSummaryCursorTarget } from '../continuity/continuity-client-state-store.js';
 import type { ProjectEvidenceEnvelope } from '../evidence/types.js';
 import { detectNativeHostAttestation } from '../adapters/platform-detector.js';
@@ -23,7 +25,8 @@ import { type InvokeInputEvidenceV1, type InvokeInputEnvelopeV2, type InvokeInpu
 import { type P205TransientExecutionAuthority } from '../git/git-lifecycle-store.js';
 export declare const INVOKE_PAYLOAD_LIMIT_BYTES: number;
 export declare const INVOKE_PAYLOAD_WARNING_THRESHOLD_BYTES: number;
-export declare function getOrCreatePendingEpicIdempotencyKey(projectRoot: string, args: string): {
+type EpicClaimCommand = 'create-epic' | 'idea-diagnose';
+export declare function getOrCreatePendingEpicIdempotencyKey(projectRoot: string, args: string, command?: EpicClaimCommand): {
     readonly key: string;
     readonly fingerprint: string;
 };
@@ -48,6 +51,8 @@ export interface InvokeOptions {
     readonly watch?: boolean;
     /** Test/integration seam for runner auto-bootstrap; CLI callers leave unset. */
     readonly runnerBootstrapper?: InvokeRunnerSchedulerBootstrapper;
+    /** Test seam for request-only runner status; never selects a scheduler action. */
+    readonly runnerObserver?: typeof observeRunnerOperationalStatus;
     /** Test/integration seam for recursion guard env; CLI callers leave unset. */
     readonly environment?: NodeJS.ProcessEnv;
     /** P205.05 exact outer transport policy; never inferred from response metadata. */
@@ -412,6 +417,10 @@ export interface StateSnapshot {
         readonly reserved_ids: readonly string[];
     };
     readonly current_session?: StateSnapshotCurrentSession;
+    /** Bounded public architecture continuation checkpoint; never raw project state. */
+    readonly archPlan?: {
+        readonly execution: Readonly<Record<string, unknown>>;
+    };
     /**
      * P141.01 -- request-only scope metadata. Never persisted to state.json.
      * `projected` snapshots mean omitted entries are unknown/out-of-scope for
@@ -450,12 +459,16 @@ export interface StateSnapshot {
      * non-continuity commands.
      */
     readonly runnerBootstrap?: InvokeRunnerBootstrapMetadata;
+    /** P222.21: request-only local scheduler observation, never canonical state. */
+    readonly runnerOperationalStatus?: RunnerOperationalStatusV1;
     /**
      * Request-only bounded structural evidence for architecture and UI review.
      * It is never persisted, requires explicit --project-evidence opt-in, and
      * grants no workflow or execution authority.
      */
     readonly projectEvidence?: ProjectEvidenceEnvelope;
+    /** P222.18: complete-file migration proof, separate from projected state. */
+    readonly migrationAuthority?: StateMigrationAuthorityV1;
 }
 export declare function shouldCollectProjectEvidenceForInvoke(args: string): boolean;
 interface InvokeResponse {
@@ -472,6 +485,29 @@ export interface InvokeArgsRef {
 interface InvokeRequestBodyBase {
     readonly projectRoot: string;
     readonly stateSnapshot: StateSnapshot;
+    readonly architectureAnswerReceipt?: PactAnswerReceipt;
+    readonly pactExecutionInput?: {
+        readonly schemaVersion: 1;
+        readonly targetEpicId: string;
+        readonly graphRevision: string;
+        readonly answersSha256: string;
+        readonly specSha256: string;
+        readonly pathsSha256: string;
+        readonly endpointCount: number;
+        readonly pathCount: number;
+        readonly publicSafe: true;
+    };
+    readonly uxExecutionInput?: {
+        readonly schemaVersion: 1;
+        readonly targetEpicId: string;
+        readonly graphRevision: string;
+        readonly adapterId: 'storybook-react-vite' | 'storybook-nextjs-vite';
+        readonly authoritySha256: string;
+        readonly pathsSha256: string;
+        readonly screenCount: number;
+        readonly pathCount: number;
+        readonly publicSafe: true;
+    };
     readonly platformTarget?: string;
     readonly nativeHostAttestation?: ReturnType<typeof detectNativeHostAttestation>;
     readonly privateExecution?: {
@@ -598,6 +634,11 @@ export declare function isEpicAwareCommandId(commandId: string | null | undefine
  */
 export declare function assertEpicAwareStateShapeBeforeRepair(projectRoot: string, options?: EpicAwareStateShapeOptions): EpicAwareStateShapeResult;
 export declare function collectStateSnapshot(projectRoot: string, options?: StateSnapshotCollectionOptions): StateSnapshot;
+/** Only this immutable second-parent lineage can be projected before later first-parent checkpoints. */
+export declare function boundedP222PremergeCheckpointPositions(projectRoot: string, firstParentHeads: readonly string[]): ReadonlyMap<string, {
+    readonly headSha: string;
+    readonly position: number;
+}>;
 export declare function collectInvokeP205Authorities(projectRoot: string, args: string, commandId: string | null | undefined): Promise<Readonly<Record<string, P205TransientExecutionAuthority>>>;
 export declare function createFullStateSnapshotScope(trigger: string, snapshot: Pick<StateSnapshot, 'stories' | 'epics'>): FullStateSnapshotScope;
 interface SendResult {