@ornexus/neocortex 4.60.59 → 4.60.61

package/packages/shared/dist/generated/command-registry.generated.js

@@ -2,41 +2,41 @@
 export { PUBLIC_PROJECTION_BUNDLE, PUBLIC_PROJECTION_GENERATION_ID, PUBLIC_PROJECTION_BUNDLE_HASH } from './public-projections.generated.js';
 export const COMMAND_REGISTRY_SCHEMA_VERSION = 1;
 export const COMMAND_REGISTRY_VERSION = "1.0.0";
-export const COMMAND_REGISTRY_CHECKSUM = "2dd14afa94738949eb19750f69590b6ddb0592cfb302ae1fe26073a88d408184";
+export const COMMAND_REGISTRY_CHECKSUM = "a631fa17a24972952ef0270880105bfc4d1a6be17e8622c5916265d945fcb69d";
 export const COMMAND_REGISTRY_PROJECTION_MANIFEST = {
     "schemaVersion": 1,
     "registryVersion": "1.0.0",
-    "registryChecksum": "2dd14afa94738949eb19750f69590b6ddb0592cfb302ae1fe26073a88d408184",
+    "registryChecksum": "a631fa17a24972952ef0270880105bfc4d1a6be17e8622c5916265d945fcb69d",
     "projections": [
         {
             "kind": "admin",
             "entryCount": 62,
-            "sha256": "1ddde581d2c4bc2803227a37e4ae949823e16e9f210e5665234d6fc6fc64993c"
+            "sha256": "e155547000e8f0607360144555b10cb90f222f37b010120eb2e97ac802ce821f"
         },
         {
             "kind": "client",
             "entryCount": 62,
-            "sha256": "1ddde581d2c4bc2803227a37e4ae949823e16e9f210e5665234d6fc6fc64993c"
+            "sha256": "e155547000e8f0607360144555b10cb90f222f37b010120eb2e97ac802ce821f"
         },
         {
             "kind": "docs",
             "entryCount": 62,
-            "sha256": "1ddde581d2c4bc2803227a37e4ae949823e16e9f210e5665234d6fc6fc64993c"
+            "sha256": "e155547000e8f0607360144555b10cb90f222f37b010120eb2e97ac802ce821f"
         },
         {
             "kind": "metrics",
             "entryCount": 62,
-            "sha256": "1ddde581d2c4bc2803227a37e4ae949823e16e9f210e5665234d6fc6fc64993c"
+            "sha256": "e155547000e8f0607360144555b10cb90f222f37b010120eb2e97ac802ce821f"
         },
         {
             "kind": "server",
             "entryCount": 67,
-            "sha256": "ba1827fe64f8f1e73a13411a88c4fbd7cd30909ed6d371ed011b12e660317f65"
+            "sha256": "ffd28ece4ed51da16af392cbd97cfe5580433f925f926dabe1d409387126f1ab"
         },
         {
             "kind": "shared",
             "entryCount": 67,
-            "sha256": "8b9bbf5be73ae1549823fcf7779871ea496e74c9c7ff6bd53f3d31ff00ee0fc8"
+            "sha256": "5c820b21ff7e1d72b867a7a6927d292b404479c1c311be26840d3672b0c056fb"
         }
     ]
 };
@@ -932,6 +932,7 @@ export const GENERATED_SHARED_COMMANDS = [
             "pt-BR": "Commit e push"
         },
         "examples": [
+            "@neocortex *commit",
             "@neocortex *commit @docs/stories/P126.01.story.md"
         ],
         "id": "commit",
@@ -1444,7 +1445,8 @@ export const GENERATED_SHARED_COMMANDS = [
             "pt-BR": "Gerar testes Pact (consumer + provider) de openapi.yaml"
         },
         "examples": [
-            "@neocortex *generate-pacts"
+            "@neocortex *generate-pacts",
+            "@neocortex *generate-pacts P126"
         ],
         "id": "generate-pacts",
         "inputShape": "standalone",
@@ -3922,7 +3924,7 @@ export const GENERATED_SHARED_COMMANDS = [
                 "policy": {
                     "billingClass": "non-billable",
                     "idempotencyClass": "logical-supported",
-                    "minimumTier": "free",
+                    "minimumTier": "pro",
                     "mutationClass": "stateful",
                     "privilege": "authenticated",
                     "quotaClass": "none",

package/packages/shared/dist/generated/invocation-schema.generated.js

@@ -2,13 +2,13 @@
 export const GENERATED_INVOCATION_SCHEMA_MANIFEST = {
     "schemaVersion": "p205-invocation-schema-v1",
     "registryVersion": "1.0.0",
-    "registryChecksum": "2dd14afa94738949eb19750f69590b6ddb0592cfb302ae1fe26073a88d408184",
-    "schemaChecksum": "65ce7e99e9cf5511a9ab02838b31acf6f86752267df453041b26e05ad9feffbc",
+    "registryChecksum": "a631fa17a24972952ef0270880105bfc4d1a6be17e8622c5916265d945fcb69d",
+    "schemaChecksum": "5c1a3ec92913a1e9c84b61de15ccfa72d223556db9d3d9e40504f28e86a09a0e",
     "commandCount": 62,
     "optionCount": 48,
-    "positionalCount": 43,
+    "positionalCount": 44,
     "operationCount": 35,
-    "projectionSha256": "58d6051ce4002dc45fefa70f73da0da0e932d8e903dc56ec822e14d9343e86e5",
+    "projectionSha256": "15e972b62215710565cff40fbd552bcbb7ec6c48f224e57c6b963d0e5809d225",
     "commands": [
         {
             "commandId": "arch-api-contracts",
@@ -391,7 +391,7 @@ export const GENERATED_INVOCATION_SCHEMA_MANIFEST = {
                     "id": "story",
                     "kind": "story-ref",
                     "order": 0,
-                    "required": true
+                    "required": false
                 }
             ],
             "terminator": true
@@ -585,7 +585,15 @@ export const GENERATED_INVOCATION_SCHEMA_MANIFEST = {
                 "operations": []
             },
             "options": [],
-            "positionals": [],
+            "positionals": [
+                {
+                    "cardinality": "one",
+                    "id": "epic",
+                    "kind": "epic-ref",
+                    "order": 0,
+                    "required": false
+                }
+            ],
             "terminator": true
         },
         {

package/packages/shared/dist/generated/public-projections.generated.js

@@ -1,56 +1,56 @@
 /** Generated by scripts/generate-public-catalog-projections.mjs. Do not edit. */
 export const PUBLIC_PROJECTION_BUNDLE = {
     "schemaVersion": "PublicProjectionBundle/1.0",
-    "generationId": "sha256:034eda819703dbfb0dc09ad714b17e2058e1f7befae474d5d581360496e20148",
-    "sourceHash": "034eda819703dbfb0dc09ad714b17e2058e1f7befae474d5d581360496e20148",
-    "catalogHash": "175a7b58faea15f1b7b889ab40b21dbfe3bd000166450299dd0de2038dc01336",
-    "publicProjectionHash": "dc902d3a9d0736fdc9adc6067545d0e33fd07769b75eae851c2dd4e02a080c45",
-    "stageProjectionHash": "56e20ca8c56823d6212314f49d01d609f8a7348d4e1f199dfc6c4d2ee3b3456f",
-    "compilationHash": "adfebaa27af805a0b025e41bd82031b0c67b8fddb55abb737c63112ca2b8c971",
+    "generationId": "sha256:80e56629e3fbf9cb6be8dd1ea937f231eb187c5a02442217e647910183d52929",
+    "sourceHash": "80e56629e3fbf9cb6be8dd1ea937f231eb187c5a02442217e647910183d52929",
+    "catalogHash": "82186cef7dbd3771284389571d313287322bfd0dd80b2142e3f7efec0a0c6bbc",
+    "publicProjectionHash": "45d4fe4407d45ba322d375a6f57e357afdb17fe115bcf016d49811ad1bb4415f",
+    "stageProjectionHash": "fe971b5270073ad859e4e0ba5ab7bec635d17925922d279ad1d087c606f90fbc",
+    "compilationHash": "1f1ec555fe6cb23e9a9d33fa678030c09889469efc4826f372cd32b4d1319dfe",
     "registry": {
         "version": "1.0.0",
-        "checksum": "2dd14afa94738949eb19750f69590b6ddb0592cfb302ae1fe26073a88d408184"
+        "checksum": "a631fa17a24972952ef0270880105bfc4d1a6be17e8622c5916265d945fcb69d"
     },
     "artifacts": [
         {
             "kind": "catalog",
             "schemaVersion": "ExecutableGraphCatalogPublicProjection/1.0",
             "relativePath": "catalog.json",
-            "sha256": "5793df981fd005dda55c6b1e678fd7157968513f56fa91b9c362463f5f45c46c",
+            "sha256": "e6a9ec0c1ecc84572c44fe752efbc46b330dc3569c0b5cb317b62c36737d0875",
             "entryCount": 97,
-            "generationId": "sha256:034eda819703dbfb0dc09ad714b17e2058e1f7befae474d5d581360496e20148"
+            "generationId": "sha256:80e56629e3fbf9cb6be8dd1ea937f231eb187c5a02442217e647910183d52929"
         },
         {
             "kind": "commands",
             "schemaVersion": "CommandRegistryPublicProjection/1.0",
             "relativePath": "commands.json",
-            "sha256": "54439f9472c1f85963ff81ac3e35a470dd7009ff9d442f5a75d6d32638638dfa",
+            "sha256": "c7041309517f9c76f4a7b325660a630325d036ad3d6d8a20d90d27889cff3018",
             "entryCount": 62,
-            "generationId": "sha256:034eda819703dbfb0dc09ad714b17e2058e1f7befae474d5d581360496e20148"
+            "generationId": "sha256:80e56629e3fbf9cb6be8dd1ea937f231eb187c5a02442217e647910183d52929"
         },
         {
             "kind": "progress-view",
             "schemaVersion": "ProgressViewContractProjection/1.0",
             "relativePath": "progress-view.json",
-            "sha256": "172031c0f4f82148dde09a744688c49e4b3c4fc13153b52859b8a8c723224c02",
+            "sha256": "ebe398e5f1cdb408e9a4cde551ed1448df0a673fc0bba456b04d72ff96d4bbdb",
             "entryCount": 1,
-            "generationId": "sha256:034eda819703dbfb0dc09ad714b17e2058e1f7befae474d5d581360496e20148"
+            "generationId": "sha256:80e56629e3fbf9cb6be8dd1ea937f231eb187c5a02442217e647910183d52929"
         },
         {
             "kind": "stages",
             "schemaVersion": "ExecutableGraphStageProjection/1.0",
             "relativePath": "stages.json",
-            "sha256": "1711273d5edbf26bf032e87587a5067796a3d7f82bf5b029b5d901a679e952bc",
+            "sha256": "7688c18fb51c1ae074620c550a22277cd990ac11ed702ebc1d863df319030909",
             "entryCount": 85,
-            "generationId": "sha256:034eda819703dbfb0dc09ad714b17e2058e1f7befae474d5d581360496e20148"
+            "generationId": "sha256:80e56629e3fbf9cb6be8dd1ea937f231eb187c5a02442217e647910183d52929"
         },
         {
             "kind": "surfaces",
             "schemaVersion": "PublicProjectionSurfaces/1.0",
             "relativePath": "surfaces.json",
-            "sha256": "087252259cf5609f1181031e9280772376cd56fab3244aa78952d98c7249a2f4",
+            "sha256": "796bd7507fd99b99cc899cc7b693c27bf698e4dc98473ceca3bf8cd13ee322cf",
             "entryCount": 6,
-            "generationId": "sha256:034eda819703dbfb0dc09ad714b17e2058e1f7befae474d5d581360496e20148"
+            "generationId": "sha256:80e56629e3fbf9cb6be8dd1ea937f231eb187c5a02442217e647910183d52929"
         }
     ],
     "compatibility": {
@@ -143,7 +143,7 @@ export const PUBLIC_PROJECTION_BUNDLE = {
         }
     ],
     "publicSafe": true,
-    "bundleHash": "c7358d9ac8976b71c9cfa9a6da929eb0435814c67465b93c7ee42dcb34e9b0f5"
+    "bundleHash": "5371013ed9041484849f722a19f96b106874efc0112db9c459311ae497229f56"
 };
 export const PUBLIC_PROJECTION_GENERATION_ID = PUBLIC_PROJECTION_BUNDLE.generationId;
 export const PUBLIC_PROJECTION_BUNDLE_HASH = PUBLIC_PROJECTION_BUNDLE.bundleHash;

package/packages/shared/dist/invocation/index.d.ts

@@ -122,7 +122,7 @@ export interface InvocationCommandSchemaV1 {
     readonly positionals: readonly InvocationPositionalSchemaV1[];
     readonly terminator: true;
 }
-export declare const INVOCATION_SCHEMA_CHECKSUM: "65ce7e99e9cf5511a9ab02838b31acf6f86752267df453041b26e05ad9feffbc";
+export declare const INVOCATION_SCHEMA_CHECKSUM: "5c1a3ec92913a1e9c84b61de15ccfa72d223556db9d3d9e40504f28e86a09a0e";
 export interface InvocationSchemaManifestV1 {
     readonly schemaVersion: typeof INVOCATION_SCHEMA_VERSION;
     readonly registryVersion: string;

package/packages/shared/dist/merge-readiness/c12-remote-observation.js

@@ -0,0 +1,80 @@
+import { createHash } from 'node:crypto';
+function record(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value : null;
+}
+function checkRunReason(check) {
+    if (check.status === 'QUEUED' || check.status === 'PENDING')
+        return 'remote_ci_queued_observed';
+    if (check.status === 'IN_PROGRESS' || check.status === 'WAITING')
+        return 'remote_ci_in_progress_observed';
+    if (check.status !== 'COMPLETED')
+        return null;
+    if (check.conclusion === 'SUCCESS')
+        return 'success';
+    if (check.conclusion === 'CANCELLED')
+        return 'remote_ci_cancelled_observed';
+    if (check.conclusion === 'TIMED_OUT')
+        return 'remote_ci_timeout_observed';
+    if (check.conclusion === 'STALE')
+        return 'remote_ci_stale_observed';
+    if (['FAILURE', 'ACTION_REQUIRED', 'NEUTRAL', 'SKIPPED', 'STARTUP_FAILURE'].includes(String(check.conclusion))) {
+        return 'remote_ci_failed_observed';
+    }
+    return null;
+}
+function statusContextReason(check) {
+    if (check.state === 'SUCCESS')
+        return 'success';
+    if (check.state === 'EXPECTED')
+        return 'remote_ci_missing_observed';
+    if (check.state === 'PENDING')
+        return 'remote_ci_queued_observed';
+    if (check.state === 'FAILURE' || check.state === 'ERROR')
+        return 'remote_ci_failed_observed';
+    return null;
+}
+/** Summarize only known categorical fields; never return check names, URLs,
+ * descriptions, raw nodes or arbitrary provider strings. Missing/empty rollups
+ * are observations requiring debt, not green checks. */
+export function summarizeC12RemoteRollup(value) {
+    const reasons = [];
+    const categorical = [];
+    if (value === undefined || value === null) {
+        reasons.push('remote_status_check_rollup_absent_observed');
+        categorical.push('rollup:absent');
+    }
+    else if (!Array.isArray(value) || value.length > 100) {
+        return { ok: false, reasonCode: 'legacy-c12-remote-observation-unclassified' };
+    }
+    else if (value.length === 0) {
+        reasons.push('remote_status_check_rollup_empty_observed');
+        categorical.push('rollup:empty');
+    }
+    else {
+        for (const raw of value) {
+            const check = record(raw);
+            if (!check)
+                return { ok: false, reasonCode: 'legacy-c12-remote-observation-unclassified' };
+            const reason = check.__typename === 'CheckRun' ? checkRunReason(check)
+                : check.__typename === 'StatusContext' ? statusContextReason(check) : null;
+            if (!reason)
+                return { ok: false, reasonCode: 'legacy-c12-remote-observation-unclassified' };
+            reasons.push(reason);
+            categorical.push(`${check.__typename}:${reason}`);
+        }
+    }
+    const reasonCodes = [...new Set(reasons.filter((item) => item !== 'success'))]
+        .sort();
+    const reasonCounts = reasonCodes.map((reasonCode) => Object.freeze({
+        reasonCode, count: reasons.filter((item) => item === reasonCode).length,
+    }));
+    const digest = createHash('sha256').update(JSON.stringify([
+        'legacy-c12-remote-observation-v1', categorical.sort(),
+    ])).digest('hex');
+    return { ok: true, value: Object.freeze({ schemaVersion: 1,
+            kind: 'legacy-c12-remote-observation', source: 'github-pr-status-rollup',
+            checkCount: Array.isArray(value) ? value.length : 0,
+            reasonCodes: Object.freeze(reasonCodes), reasonCounts: Object.freeze(reasonCounts),
+            digest, publicSafe: true }) };
+}

package/packages/shared/dist/planning/diagnosis-state.js

@@ -0,0 +1,143 @@
+/**
+ * Physical P01 state projection shared by the server policy and the client CAS.
+ * This is deliberately not an acceptance decision: callers must establish the
+ * durable claim, independently accepted checkpoint and exact source revision.
+ */
+import { createHash } from 'node:crypto';
+import { isDeepStrictEqual } from 'node:util';
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+const SCALARS = ['goal', 'problem', 'desiredOutcome', 'rawIntent'];
+const LISTS = ['context', 'users', 'surfaces', 'constraints', 'assumptions', 'risks', 'nonGoals',
+    'validationExpectations', 'debtRefs', 'repositoryEvidencePaths', 'journeyIds', 'screenIds',
+    'storybookStoryIds', 'backendContractIds', 'featureBlockerIds', 'remediationRefs'];
+const BOOLEANS = ['uiScope', 'remediationStory'];
+const EXAMPLE_KEYS = ['id', 'title', 'actor', 'given', 'when', 'then', 'source',
+    'coveredRequirement', 'expectedValidation'];
+const CONTRACT_KEYS = ['id', 'kind', 'description', 'path'];
+const UNSAFE = /(?:[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}|https?:\/\/(?:localhost|127\.0\.0\.1|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[0-1])\.\d+\.\d+|[^\s/]*internal[^\s/]*)\S*|sk-[A-Za-z0-9_-]{12,})/i;
+const INLINE_SECRET = /(?:token|api[_-]?key|secret|password|credential|license[_-]?key)\s*[:=]\s*\S+/i;
+const PRIVATE_CONTENT = /(?:customer\s+pii|private\s+prompt|system\s+prompt|developer\s+prompt|raw\s+vendor\s+corpus|begin\s+raw\s+logs?)/i;
+function safeText(value, max = 512) {
+    if (typeof value !== 'string' || value.length > max
+        || /[\x00-\x08\x0b\x0c\x0e-\x1f]/.test(value)
+        || UNSAFE.test(value) || INLINE_SECRET.test(value) || PRIVATE_CONTENT.test(value)) {
+        throw new Error('planning-unsafe-text');
+    }
+    return value;
+}
+function allowedKeys(value, allowed) {
+    if (Object.keys(value).some((key) => !allowed.includes(key)))
+        throw new Error('planning-unknown-field');
+}
+/** Stable revision input shared by the server and the physical root checkpoint. */
+export function canonicalPlanningIntake(value) {
+    if (!record(value) || Buffer.byteLength(JSON.stringify(value)) > 16_384) {
+        throw new Error('planning-intake-shape');
+    }
+    allowedKeys(value, [...SCALARS, ...LISTS, ...BOOLEANS, 'examples', 'contracts']);
+    const result = {};
+    for (const key of SCALARS)
+        if (value[key] !== undefined)
+            result[key] = safeText(value[key]);
+    for (const key of LISTS)
+        if (value[key] !== undefined) {
+            const entries = value[key];
+            if (!Array.isArray(entries) || entries.length > 32)
+                throw new Error('planning-list-shape');
+            result[key] = entries.map((entry) => safeText(entry, 256));
+        }
+    for (const key of BOOLEANS)
+        if (value[key] !== undefined) {
+            if (typeof value[key] !== 'boolean')
+                throw new Error('planning-boolean-shape');
+            result[key] = value[key];
+        }
+    for (const [key, allowed] of [['examples', EXAMPLE_KEYS], ['contracts', CONTRACT_KEYS]]) {
+        if (value[key] === undefined)
+            continue;
+        const entries = value[key];
+        if (!Array.isArray(entries) || entries.length > 16)
+            throw new Error('planning-record-list-shape');
+        result[key] = entries.map((entry) => {
+            if (!record(entry))
+                throw new Error('planning-record-shape');
+            allowedKeys(entry, allowed);
+            const copy = {};
+            for (const field of allowed)
+                if (entry[field] !== undefined)
+                    copy[field] = safeText(entry[field], 256);
+            return copy;
+        });
+    }
+    return result;
+}
+export function planningIntakeRevision(value) {
+    return createHash('sha256').update(JSON.stringify(canonicalPlanningIntake(value))).digest('hex');
+}
+/** A consistency digest only. The caller must separately establish independent QA. */
+export function createPlanningReceiptV1(input) {
+    const summary = input.artifactSummary;
+    if (!/^P[1-9][0-9]{0,11}$/.test(input.epicId)
+        || !/^[a-f0-9]{64}$/.test(input.intakeRevision)
+        || input.accepted !== true || !['diagnosis', 'research'].includes(input.kind)
+        || typeof summary !== 'string' || !summary.trim() || summary.length > 1024
+        || /[\x00-\x08\x0b\x0c\x0e-\x1f]/.test(summary)
+        || /^\s*(?:docs\/|\.neocortex\/|https?:\/)/i.test(summary)
+        || UNSAFE.test(summary) || INLINE_SECRET.test(summary) || PRIVATE_CONTENT.test(summary)
+        || input.kind === 'diagnosis' && input.predecessorReceiptId !== undefined
+        || input.kind === 'research' && !/^[a-f0-9]{64}$/.test(input.predecessorReceiptId ?? '')) {
+        throw new Error('planning-receipt-invalid');
+    }
+    const base = { schemaVersion: 1, kind: input.kind, epicId: input.epicId,
+        intakeRevision: input.intakeRevision, artifactSummary: summary,
+        artifactDigest: createHash('sha256').update(summary).digest('hex'),
+        ...(input.predecessorReceiptId ? { predecessorReceiptId: input.predecessorReceiptId } : {}),
+        accepted: true };
+    return { ...base, receiptId: createHash('sha256').update(JSON.stringify(base)).digest('hex') };
+}
+export function projectDiagnosedEpicState(currentState, input) {
+    const checkpoint = input.checkpoint;
+    if (currentState.schema_version !== 1 || !record(currentState.epics) || !record(currentState.stories)
+        || !/^P[1-9][0-9]{0,11}$/.test(input.epicId)
+        || !/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(input.claimId)
+        || !record(checkpoint) || checkpoint.schemaVersion !== 1
+        || checkpoint.epicId !== input.epicId || !record(checkpoint.intake)
+        || typeof checkpoint.intake.goal !== 'string'
+        || !checkpoint.intake.goal.trim() || checkpoint.intake.goal.length > 512
+        || typeof checkpoint.intakeRevision !== 'string'
+        || !/^[a-f0-9]{64}$/.test(checkpoint.intakeRevision)
+        || !record(checkpoint.diagnosisReceipt)) {
+        throw new Error('planning-diagnosis-identity-invalid');
+    }
+    const ledger = currentState.epic_id_ledger === undefined
+        ? { schema_version: 1, reserved_ids: [] }
+        : currentState.epic_id_ledger;
+    if (!record(ledger) || ledger.schema_version !== 1
+        || !Array.isArray(ledger.reserved_ids) || ledger.reserved_ids.length > 4096
+        || ledger.reserved_ids.some((id) => typeof id !== 'string' || !/^P[1-9][0-9]{0,11}$/.test(id))
+        || new Set(ledger.reserved_ids).size !== ledger.reserved_ids.length) {
+        throw new Error('planning-diagnosis-ledger-invalid');
+    }
+    const epic = {
+        id: input.epicId, title: checkpoint.intake.goal, status: 'diagnosed',
+        source: 'create-epic', stories: [],
+        createEpicPlanningClaim: { schemaVersion: 1, claimId: input.claimId, epicId: input.epicId },
+        createEpicPlanning: checkpoint,
+    };
+    const epics = currentState.epics;
+    if (Object.hasOwn(epics, input.epicId)) {
+        if (isDeepStrictEqual(epics[input.epicId], epic) && ledger.reserved_ids.includes(input.epicId)) {
+            return currentState;
+        }
+        throw new Error('planning-diagnosis-epic-conflict');
+    }
+    if (ledger.reserved_ids.includes(input.epicId))
+        throw new Error('planning-diagnosis-ledger-conflict');
+    return {
+        ...currentState,
+        epics: { ...epics, [input.epicId]: epic },
+        epic_id_ledger: { ...ledger, reserved_ids: [...ledger.reserved_ids, input.epicId] },
+    };
+}

package/packages/shared/dist/yoloop/branch-unit.js

@@ -9,6 +9,13 @@ const LEGACY_INTEGRATION_STEPS = new Set([
     'step-c-11-review-pr',
     'step-c-12-merge-pr',
 ]);
+/** Do not let a stale epic story list hide physical progress in the snapshot. */
+export function resolveEpicStoryIds(epicId, listedStoryIds, snapshotStoryIds) {
+    return [...new Set([
+            ...(listedStoryIds ?? []),
+            ...snapshotStoryIds.filter((id) => id.startsWith(`${epicId}.`)),
+        ])];
+}
 /** Resolve once from persisted state. Existing Git progress always wins. */
 export function resolveBranchUnit(epic, stories) {
     const legacyProgress = stories.some(hasLegacyStoryGitProgress);
@@ -64,7 +71,8 @@ export function reconcileStoryCheckpoint(current, requested) {
         current.graphRevision === requested.graphRevision &&
         current.claimRevision === requested.claimRevision &&
         sameEvidenceReceipt(current.qaReceipt, requested.qaReceipt) &&
-        sameEvidenceReceipt(current.reviewReceipt, requested.reviewReceipt))
+        sameEvidenceReceipt(current.reviewReceipt, requested.reviewReceipt) &&
+        JSON.stringify(current.reviewReconciliation ?? null) === JSON.stringify(requested.reviewReconciliation ?? null))
         return { kind: 'reused', checkpoint: current };
     return { kind: 'blocked', reasonCode: 'checkpoint-idempotency-conflict' };
 }
@@ -183,6 +191,7 @@ function validateCheckpointEvidence(checkpoint) {
         else if (review.schemaVersion !== 1 || review.kind !== 'story_review_evidence'
             || review.producer !== 'root-commit-range-review' || review.verdict !== checkpoint.reviewVerdict
             || !evidenceBindingMatches(checkpoint, review) || !isHash(review.sourceEvidenceDigest)
+            || (review.reviewArtifactDigest !== undefined && !isHash(review.reviewArtifactDigest))
             || !nonEmpty(review.receiptRef) || review.receiptRef !== `story-review:${review.sourceEvidenceDigest}`
             || !Number.isFinite(Date.parse(review.reviewedAt))) {
             errors.push('checkpoint-review-evidence-invalid');
@@ -201,6 +210,19 @@ function validateCheckpointEvidence(checkpoint) {
         if (Date.parse(review.reviewedAt) < Date.parse(qa.checkedAt))
             errors.push('checkpoint-review-before-qa');
     }
+    const reconciliation = checkpoint.reviewReconciliation;
+    if (reconciliation && (!qa || !review || reconciliation.schemaVersion !== 1
+        || reconciliation.kind !== 'historical_review_reconciliation'
+        || reconciliation.storyId !== checkpoint.storyId || reconciliation.epicId !== checkpoint.epicId
+        || reconciliation.checkpointHeadSha !== checkpoint.headSha
+        || !isSha(reconciliation.approvalCommitSha)
+        || !isHash(reconciliation.approvalArtifactDigest) || !isHash(reconciliation.sourceEvidenceDigest)
+        || reconciliation.qaReceiptRef !== qa.receiptRef || reconciliation.reviewReceiptRef !== review.receiptRef
+        || reconciliation.receiptRef !== `story-review-reconciliation:${reconciliation.sourceEvidenceDigest}`
+        || !checkpoint.receiptRefs.includes(reconciliation.receiptRef)
+        || !Number.isFinite(Date.parse(reconciliation.reviewedAt)))) {
+        errors.push('checkpoint-review-reconciliation-invalid');
+    }
     return errors;
 }
 function evidenceBindingMatches(checkpoint, evidence) {

package/targets-stubs/antigravity/gemini.md

@@ -1,4 +1,4 @@
-# 🧠 Neocortex v4.60.59 | OrNexus Team
+# 🧠 Neocortex v4.60.61 | OrNexus Team
 
 This project uses Neocortex, a Development Orchestrator.
 

package/targets-stubs/antigravity/skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex
-description: "🧠 Neocortex v4.60.59 | OrNexus Team"
+description: "🧠 Neocortex v4.60.61 | OrNexus Team"
 ---
 
 <!--

package/targets-stubs/claude-code/neocortex-root.agent.yaml

@@ -4,7 +4,7 @@ agent:
     name: 'Neocortex Root Agent'
     title: 'Development Orchestrator (Root)'
     icon: '>'
-    version: '4.60.59'
+    version: '4.60.61'
     architecture: 'thin-client'
     module: stand-alone
     hasSidecar: false

package/targets-stubs/claude-code/neocortex-root.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex-root
-description: "🧠 Neocortex Root Agent v4.60.59 | OrNexus Team"
+description: "🧠 Neocortex Root Agent v4.60.61 | OrNexus Team"
 model: opus
 color: blue
 tools:
@@ -108,7 +108,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.59                           │
+│      ###  ########      v4.60.61                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/claude-code/neocortex.agent.yaml

@@ -4,7 +4,7 @@ agent:
     name: 'Neocortex'
     title: 'Development Orchestrator'
     icon: '>'
-    version: '4.60.59'
+    version: '4.60.61'
     architecture: 'thin-client'
     module: stand-alone
     hasSidecar: false

package/targets-stubs/claude-code/neocortex.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex
-description: "🧠 Neocortex v4.60.59 | OrNexus Team"
+description: "🧠 Neocortex v4.60.61 | OrNexus Team"
 model: opus
 color: blue
 permissionMode: bypassPermissions
@@ -104,7 +104,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.59                           │
+│      ###  ########      v4.60.61                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/codex/AGENTS.md

@@ -28,7 +28,7 @@ Codex built-in commands or actions.
 
 <!-- END: Plugin Conflict Prevention -->
 
-# Neocortex v4.60.59 | OrNexus Team
+# Neocortex v4.60.61 | OrNexus Team
 
 You are a Development Orchestrator. All orchestration logic is delivered by the remote Neocortex server.
 

package/targets-stubs/cursor/agent.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex
-description: "🧠 Neocortex v4.60.59 | OrNexus Team"
+description: "🧠 Neocortex v4.60.61 | OrNexus Team"
 model: inherit
 readonly: false
 is_background: false
@@ -64,7 +64,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.59                           │
+│      ###  ########      v4.60.61                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/gemini-cli/agent.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex-root
-description: "🧠 Neocortex v4.60.59 | OrNexus Team"
+description: "🧠 Neocortex v4.60.61 | OrNexus Team"
 kind: local
 tools:
   # File operations (Gemini CLI built-ins)
@@ -62,7 +62,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.59                           │
+│      ###  ########      v4.60.61                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/opencode/neocortex-root.md

@@ -58,7 +58,7 @@ explicit server opt-in rather than a local assumption.
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.59                           │
+│      ###  ########      v4.60.61                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/vscode/neocortex.agent.md

@@ -1,6 +1,6 @@
 ---
 name: "neocortex"
-description: "Neocortex v4.60.59 | OrNexus Team"
+description: "Neocortex v4.60.61 | OrNexus Team"
 tools:
   # Read / Edit (built-in tool sets)
   - read
@@ -68,7 +68,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.59                           │
+│      ###  ########      v4.60.61                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │