@ornexus/neocortex 4.60.63 → 4.60.64

package/dist/release-source.json

@@ -1 +1 @@
-{"schemaVersion":1,"sourceRevision":"188e7b33f3a995dafdbbbaca3b78346abe1a9232","version":"4.60.63"}
+{"schemaVersion":1,"sourceRevision":"679552f191d498e43109ae2dda12ef9b940e969a","version":"4.60.64"}

package/dist/sbom.cdx.json

@@ -1159,7 +1159,7 @@
       "version": "1.31.0"
     },
     {
-      "bom-ref": "@neocortex/client@4.60.63",
+      "bom-ref": "@neocortex/client@4.60.64",
       "group": "@neocortex",
       "name": "client",
       "properties": [
@@ -1168,9 +1168,9 @@
           "value": "node_modules/@neocortex/client"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/client@4.60.63",
+      "purl": "pkg:npm/%40neocortex/client@4.60.64",
       "type": "library",
-      "version": "4.60.63"
+      "version": "4.60.64"
     },
     {
       "bom-ref": "@neocortex/core@0.1.0",
@@ -1187,7 +1187,7 @@
       "version": "0.1.0"
     },
     {
-      "bom-ref": "@neocortex/server@4.60.63",
+      "bom-ref": "@neocortex/server@4.60.64",
       "group": "@neocortex",
       "name": "server",
       "properties": [
@@ -1196,12 +1196,12 @@
           "value": "node_modules/@neocortex/server"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/server@4.60.63",
+      "purl": "pkg:npm/%40neocortex/server@4.60.64",
       "type": "library",
-      "version": "4.60.63"
+      "version": "4.60.64"
     },
     {
-      "bom-ref": "@neocortex/shared@4.60.63",
+      "bom-ref": "@neocortex/shared@4.60.64",
       "group": "@neocortex",
       "name": "shared",
       "properties": [
@@ -1210,9 +1210,9 @@
           "value": "node_modules/@neocortex/shared"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/shared@4.60.63",
+      "purl": "pkg:npm/%40neocortex/shared@4.60.64",
       "type": "library",
-      "version": "4.60.63"
+      "version": "4.60.64"
     },
     {
       "bom-ref": "@opentelemetry/api-logs@0.214.0",
@@ -9660,10 +9660,10 @@
         "@clack/prompts@0.11.0",
         "@hono/node-server@1.19.17",
         "@modelcontextprotocol/sdk@1.31.0",
-        "@neocortex/client@4.60.63",
+        "@neocortex/client@4.60.64",
         "@neocortex/core@0.1.0",
-        "@neocortex/server@4.60.63",
-        "@neocortex/shared@4.60.63",
+        "@neocortex/server@4.60.64",
+        "@neocortex/shared@4.60.64",
         "axe-core@4.14.0",
         "better-sqlite3@11.10.0",
         "execa@9.6.1",
@@ -9674,12 +9674,12 @@
         "yaml@2.9.0",
         "zod@4.4.3"
       ],
-      "ref": "@ornexus/neocortex@4.60.63"
+      "ref": "@ornexus/neocortex@4.60.64"
     },
     {
       "dependsOn": [
         "@babel/parser@7.29.7",
-        "@neocortex/shared@4.60.63",
+        "@neocortex/shared@4.60.64",
         "axe-core@4.14.0",
         "better-sqlite3@11.10.0",
         "jose@6.2.2",
@@ -9687,7 +9687,7 @@
         "playwright-core@1.55.0",
         "yaml@2.9.0"
       ],
-      "ref": "@neocortex/client@4.60.63"
+      "ref": "@neocortex/client@4.60.64"
     },
     {
       "dependsOn": [
@@ -9742,7 +9742,7 @@
         "@fastify/jwt@10.2.2",
         "@fastify/rate-limit@10.3.0",
         "@fastify/static@10.1.3",
-        "@neocortex/shared@4.60.63",
+        "@neocortex/shared@4.60.64",
         "@sentry/node@10.62.0",
         "bcryptjs@3.0.3",
         "drizzle-orm@0.45.2",
@@ -9755,7 +9755,7 @@
         "stripe@20.4.1",
         "yaml@2.9.0"
       ],
-      "ref": "@neocortex/server@4.60.63"
+      "ref": "@neocortex/server@4.60.64"
     },
     {
       "dependsOn": [
@@ -9876,7 +9876,7 @@
     },
     {
       "dependsOn": [
-        "@neocortex/shared@4.60.63"
+        "@neocortex/shared@4.60.64"
       ],
       "ref": "@neocortex/core@0.1.0"
     },
@@ -10936,7 +10936,7 @@
       "ref": "@lukeed/ms@2.0.2"
     },
     {
-      "ref": "@neocortex/shared@4.60.63"
+      "ref": "@neocortex/shared@4.60.64"
     },
     {
       "ref": "@opentelemetry/api@1.9.1"
@@ -11425,8 +11425,8 @@
   "metadata": {
     "component": {
       "author": "OrNexus Team",
-      "bom-ref": "@ornexus/neocortex@4.60.63",
-      "description": "Neocortex v4.60.63 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
+      "bom-ref": "@ornexus/neocortex@4.60.64",
+      "description": "Neocortex v4.60.64 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
       "externalReferences": [
         {
           "comment": "as detected from PackageJson property \"bugs.url\"",
@@ -11459,9 +11459,9 @@
           "value": ""
         }
       ],
-      "purl": "pkg:npm/%40ornexus/neocortex@4.60.63?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2FOrNexus-AI%2Fneocortex.git",
+      "purl": "pkg:npm/%40ornexus/neocortex@4.60.64?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2FOrNexus-AI%2Fneocortex.git",
       "type": "application",
-      "version": "4.60.63"
+      "version": "4.60.64"
     },
     "tools": {
       "components": [

package/install.ps1

@@ -17,7 +17,7 @@ param(
     [string]$ServerUrl = ('https://{0}.{1}.{2}' -f 'api','neocortex','sh')
 )
 
-$VERSION = "4.60.63"
+$VERSION = "4.60.64"
 
 # =============================================================================
 # CONFIGURACOES

package/install.sh

@@ -4,7 +4,7 @@
 # Development Orchestrator
 
 # Versao do instalador
-VERSION="4.60.63"
+VERSION="4.60.64"
 
 # Flags
 MIGRATION_DETECTED=false

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ornexus/neocortex",
-  "version": "4.60.63",
-  "description": "Neocortex v4.60.63 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
+  "version": "4.60.64",
+  "description": "Neocortex v4.60.64 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
   "keywords": [
     "claude",
     "claude-code",
@@ -78,7 +78,12 @@
     "packages/shared/dist/generated/invocation-schema.generated.js",
     "packages/shared/dist/generated/public-projections.generated.js",
     "packages/shared/dist/executable-graph-catalog/contracts.js",
+    "packages/shared/dist/private-yolo-predecessor-decision.js",
+    "packages/shared/dist/private-qa-structural-admission.js",
+    "packages/shared/dist/project-memory-targets.js",
+    "packages/shared/dist/project-validation-commands.js",
     "packages/shared/dist/yoloop/branch-unit.js",
+    "packages/shared/dist/yoloop/root-memory-effect.js",
     "packages/shared/dist/yoloop/canonical.js",
     "packages/shared/dist/yoloop/epic-terminal-git.js",
     "packages/shared/dist/yoloop/operational-budget.js",

package/packages/client/dist/cli.js

@@ -12,7 +12,9 @@ Commands:
   architecture-memory seal  Seal committed Update Memory evidence into local root state
   planning-diagnosis seal  Seal an independently reviewed P01 checkpoint from stdin
   planning-research seal  Seal an independently reviewed P02 checkpoint from stdin
-  planning-generation seal  Seal an independently reviewed P03 checkpoint from stdin
+  planning-generation <seal|verify>  Seal a reviewed P03 or verify its committed evidence from stdin
+  planning-memory <seal|verify>  Seal reviewed committed memory or reopen its physical receipt
+  private-session <inspect-rejected|discard-rejected|renew-lease|accept-diagnosis|accept-research|accept-specification|accept-tasks|validate-implementation|accept-implementation|accept-refactor-advisory|accept-test-validation|accept-qa|accept-project-memory>  Root recovery and phase validation
   story-checkpoint Root-owned direct-*yolo commit/checkpoint boundary
   legacy-story-branch Root-owned setup and C01 checkpoint for recorded story-branch projects
   legacy-story-pr     Root-owned legacy C08/C09 checkpoint, C10 PR, C11 review and C12 merge boundary
@@ -20,6 +22,8 @@ Commands:
   mutation-qa   Root-owned mutation-test scope, Stryker checkpoint and local QA decision
   property-qa   Local-only property-test preflight, sandbox proof and root semantic QA review
   qa-scan-review  Root-only loopback browser capture, physical QA review and multi-surface reconciliation
+  qa-synthetic-backend  Separately granted no-network synthetic backend observations; JSON stdin
+  qa-root        Authenticated control of an operator-registered isolated QA worker
   refactor-root  Root-only scope, Node characterization, semantic QA and Git checkpoint
   native-agent   Reserve and observe authorized native child dispatches
   architecture-answers  Save explicit Pact decisions in the local private store
@@ -40,6 +44,7 @@ Invoke Options:
   --watch                Keep invoke open and poll local continuity summaries
   --server-url <url>     Server URL override
   --platform-target <id> Explicit host override (default: fail-closed runtime detection)
+  --private-execution-model <id> Explicit model for private beta; no fallback or global config change
 
 Refresh Memory Options:
   --project-root <path>  Project root directory (default: cwd)
@@ -196,5 +201,5 @@ Invocation payload boundary:
 
 License:
   Licensed under BSL-1.1 (Business Source License 1.1)
-`.trim(),m=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function d(){const c=process.argv.slice(2),a=c[0];a&&m.has(a.toLowerCase())&&process.exit(0),(!a||a==="--help"||a==="-h")&&(console.log(l),process.exit(0)),(a==="--version"||a==="-v")&&(console.log(p()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
-`),process.exit(0));const t=c.slice(1);switch(a){case"invoke":{const{invokeCliHandler:o}=await import("./commands/invoke.js"),e=await o(t);process.exit(e);break}case"activate":{const{activate:o}=await import("./commands/activate.js");let e,n,i=!1;for(let r=0;r<t.length;r++){const s=t[r];s==="--server-url"?n=t[++r]:s==="--non-interactive"?i=!0:s==="--help"||s==="-h"?(console.log(l),process.exit(0)):s.startsWith("-")||(e=s)}e||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const r=await o({licenseKey:e,serverUrl:n,nonInteractive:i});r.success?(console.log(r.message),process.exit(0)):(console.error(r.message),process.exit(1))}catch(r){const s=r instanceof Error?r.message:String(r);console.error(`Activation failed: ${s}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:o}=await import("./commands/config.js"),e=await o(t);process.exit(e);break}case"refresh-memory":{const{refreshMemoryCliHandler:o}=await import("./commands/refresh-memory.js"),e=await o(t);process.exit(e);break}case"architecture-memory":{const{architectureMemoryTerminalCliHandler:o}=await import("./commands/architecture-memory-terminal.js"),e=await o(t);process.exit(e);break}case"planning-diagnosis":{const{planningDiagnosisCliHandler:o}=await import("./commands/planning-diagnosis.js"),e=await o(t);process.exit(e);break}case"planning-research":{const{planningResearchCliHandler:o}=await import("./commands/planning-research.js"),e=await o(t);process.exit(e);break}case"planning-generation":{const{planningGenerationCliHandler:o}=await import("./commands/planning-generation.js"),e=await o(t);process.exit(e);break}case"story-checkpoint":{const{storyCheckpointCliHandler:o}=await import("./commands/story-checkpoint.js"),e=await o(t);process.exit(e);break}case"legacy-story-branch":{const{legacyStoryBranchCliHandler:o}=await import("./commands/legacy-story-branch.js"),e=await o(t);process.exit(e);break}case"legacy-story-pr":{const{legacyStoryPrCliHandler:o}=await import("./commands/legacy-story-pr.js"),e=await o(t);process.exit(e);break}case"legacy-epic-terminal":{const{legacyEpicTerminalCliHandler:o}=await import("./commands/legacy-epic-terminal.js"),e=await o(t);process.exit(e);break}case"mutation-qa":{const{mutationQaCliHandler:o}=await import("./commands/mutation-qa.js"),e=await o(t);process.exit(e);break}case"property-qa":{const{propertyQaCliHandler:o}=await import("./commands/property-qa.js"),e=await o(t);process.exit(e);break}case"qa-scan-review":{const{qaScanReviewCliHandler:o}=await import("./commands/qa-scan-review.js"),e=await o(t);process.exit(e);break}case"refactor-root":{if(t[0]==="characterize"){const{refactorCharacterizationCliHandler:n}=await import("./commands/refactor-characterization.js");process.exit(n(t))}if(t[0]==="review-accept"||t[0]==="review-status"){const{refactorReviewCliHandler:n}=await import("./commands/refactor-review.js");process.exit(await n(t))}if(t[0]?.startsWith("commit-")){const{refactorCommitCliHandler:n}=await import("./commands/refactor-commit.js");process.exit(n(t))}const{refactorRootCliHandler:o}=await import("./commands/refactor-root.js"),e=o(t);process.exit(e);break}case"native-agent":{const{nativeAgentCliHandler:o}=await import("./commands/native-agent.js"),e=await o(t);process.exit(e);break}case"architecture-answers":{const{architectureAnswersCliHandler:o}=await import("./commands/architecture-answers.js"),e=await o(t);process.exit(e);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${a}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}d().catch(c=>{console.error(`Fatal error: ${c instanceof Error?c.message:String(c)}`),process.exit(1)});
+`.trim(),m=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function d(){const s=process.argv.slice(2),n=s[0];n&&m.has(n.toLowerCase())&&process.exit(0),(!n||n==="--help"||n==="-h")&&(console.log(l),process.exit(0)),(n==="--version"||n==="-v")&&(console.log(p()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
+`),process.exit(0));const o=s.slice(1);switch(n){case"invoke":{const{invokeCliHandler:e,flushInvokeCliOutput:t}=await import("./commands/invoke.js"),r=await e(o),i=await t();process.exitCode=i?r:1;break}case"activate":{const{activate:e}=await import("./commands/activate.js");let t,r,i=!1;for(let a=0;a<o.length;a++){const c=o[a];c==="--server-url"?r=o[++a]:c==="--non-interactive"?i=!0:c==="--help"||c==="-h"?(console.log(l),process.exit(0)):c.startsWith("-")||(t=c)}t||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const a=await e({licenseKey:t,serverUrl:r,nonInteractive:i});a.success?(console.log(a.message),process.exit(0)):(console.error(a.message),process.exit(1))}catch(a){const c=a instanceof Error?a.message:String(a);console.error(`Activation failed: ${c}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:e}=await import("./commands/config.js"),t=await e(o);process.exit(t);break}case"refresh-memory":{const{refreshMemoryCliHandler:e}=await import("./commands/refresh-memory.js"),t=await e(o);process.exit(t);break}case"architecture-memory":{const{architectureMemoryTerminalCliHandler:e}=await import("./commands/architecture-memory-terminal.js"),t=await e(o);process.exit(t);break}case"planning-diagnosis":{const{planningDiagnosisCliHandler:e}=await import("./commands/planning-diagnosis.js"),t=await e(o);process.exit(t);break}case"planning-research":{const{planningResearchCliHandler:e}=await import("./commands/planning-research.js"),t=await e(o);process.exit(t);break}case"private-session":{const{privateSessionCliHandler:e}=await import("./commands/private-session.js"),t=await e(o);process.exit(t);break}case"planning-memory":{const{planningMemoryCliHandler:e}=await import("./commands/planning-memory.js"),t=await e(o);process.exit(t);break}case"planning-generation":{const{planningGenerationCliHandler:e}=await import("./commands/planning-generation.js"),t=await e(o);process.exit(t);break}case"story-checkpoint":{const{storyCheckpointCliHandler:e}=await import("./commands/story-checkpoint.js"),t=await e(o);process.exit(t);break}case"legacy-story-branch":{const{legacyStoryBranchCliHandler:e}=await import("./commands/legacy-story-branch.js"),t=await e(o);process.exit(t);break}case"legacy-story-pr":{const{legacyStoryPrCliHandler:e}=await import("./commands/legacy-story-pr.js"),t=await e(o);process.exit(t);break}case"legacy-epic-terminal":{const{legacyEpicTerminalCliHandler:e}=await import("./commands/legacy-epic-terminal.js"),t=await e(o);process.exit(t);break}case"mutation-qa":{const{mutationQaCliHandler:e}=await import("./commands/mutation-qa.js"),t=await e(o);process.exit(t);break}case"property-qa":{const{propertyQaCliHandler:e}=await import("./commands/property-qa.js"),t=await e(o);process.exit(t);break}case"qa-synthetic-backend":{const{syntheticBackendCliHandler:e}=await import("./commands/qa-synthetic-backend.js");process.exitCode=await e(s.slice(1));break}case"qa-scan-review":{const{qaScanReviewCliHandler:e}=await import("./commands/qa-scan-review.js"),t=await e(o);process.exit(t);break}case"qa-root":{const{qaControlCliHandler:e}=await import("./commands/qa-control.js");process.exit(await e(o));break}case"refactor-root":{if(o[0]==="control"){const{refactorControlCliHandler:r}=await import("./commands/refactor-control.js");process.exit(await r(o))}if(o[0]==="characterize"){const{refactorCharacterizationCliHandler:r}=await import("./commands/refactor-characterization.js");process.exit(r(o))}if(o[0]==="review-accept"||o[0]==="review-status"){const{refactorReviewCliHandler:r}=await import("./commands/refactor-review.js");process.exit(await r(o))}if(o[0]?.startsWith("commit-")){const{refactorCommitCliHandler:r}=await import("./commands/refactor-commit.js");process.exit(r(o))}const{refactorRootCliHandler:e}=await import("./commands/refactor-root.js"),t=e(o);process.exit(t);break}case"native-agent":{const{nativeAgentCliHandler:e}=await import("./commands/native-agent.js"),t=await e(o);process.exit(t);break}case"architecture-answers":{const{architectureAnswersCliHandler:e}=await import("./commands/architecture-answers.js"),t=await e(o);process.exit(t);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${n}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}d().catch(s=>{console.error(`Fatal error: ${s instanceof Error?s.message:String(s)}`),process.exit(1)});

package/packages/client/dist/commands/activate.js

@@ -1,8 +1,8 @@
-import{existsSync as V,mkdirSync as x,writeFileSync as Y,readFileSync as I}from"node:fs";import{join as o,dirname as C}from"node:path";import{homedir as X}from"node:os";import{fileURLToPath as W}from"node:url";import{LicenseClient as J}from"../license/license-client.js";import{EncryptedCache as P}from"../cache/encrypted-cache.js";import{getMachineFingerprint as S}from"../machine/fingerprint.js";import{updateAgentDescription as E}from"../agent/update-description.js";import{refreshStubs as h}from"../agent/refresh-stubs.js";import{updateAgentYaml as N}from"../agent/update-agent-yaml.js";import{saveSecureConfig as B,setSecureDirPermissions as _}from"../config/secure-config.js";import{DEFAULT_SERVER_URL as G}from"../constants.js";function b(){try{const e=W(import.meta.url);let t=C(e);for(let r=0;r<5;r++){try{const n=JSON.parse(I(o(t,"package.json"),"utf-8"));if(n.name==="@ornexus/neocortex"||n.name==="@neocortex/client")return n.version??"0.0.0"}catch{}t=C(t)}}catch{}return"0.0.0"}const i=o(X(),".neocortex"),c=o(i,"config.json"),z=/^NX-(F|P|E)-[a-f0-9]+-[a-f0-9]+$/i,q=/^nxk_(?:[a-z]+_)?[a-f0-9]+_[a-f0-9]+$/;function H(e){if(!e||e.trim().length===0)return{valid:!1,error:"License key cannot be empty"};const t=e.trim().toUpperCase();return t.startsWith("NX-")?z.test(t)?{valid:!0}:{valid:!1,error:"Invalid license key format. Expected: NX-{TIER}-{ID} (e.g., NX-PRO-ABC-123)"}:{valid:!1,error:'License key must start with "NX-"'}}function Q(e){if(!e||e.trim().length===0)return{valid:!1,error:"API key cannot be empty"};const t=e.trim();return t.startsWith("nxk_")?t.length<20?{valid:!1,error:"API key is too short"}:q.test(t)?{valid:!0}:{valid:!1,error:"Invalid API key format. Expected: nxk_{id}_{check} (e.g., nxk_abc123def456...)"}:{valid:!1,error:'API key must start with "nxk_"'}}function pe(){try{if(V(c)){const e=I(c,"utf-8");return JSON.parse(e)}}catch{}return null}function A(e){x(i,{recursive:!0}),_(i);const t=o(i,"cache");if(x(t,{recursive:!0}),_(t),e.licenseKey||e.apiKey)B({serverUrl:e.serverUrl,mode:e.mode,machineId:e.machineId,activatedAt:e.activatedAt,tier:e.tier,licenseKey:e.licenseKey??e.apiKey});else{const r={configVersion:1,...e};Y(c,JSON.stringify(r,null,2)+`
-`,"utf-8")}}async function he(e){const{licenseKey:t,serverUrl:r=G}=e;if(!t)return{success:!1,message:["No key provided.","","Get your license key at https://neocortex.sh/portal/login","","Usage:","  neocortex activate YOUR-LICENSE-KEY","  neocortex activate YOUR-API-KEY"].join(`
-`)};const n=t.trim();if(n.startsWith("nxk_")){const a=Q(n);if(!a.valid)return{success:!1,message:`Invalid API key: ${a.error}`};const k=n.match(/^nxk_(free|pro|ent)_/),R={free:"free",pro:"pro",ent:"enterprise"},T=k?.[1]?R[k[1]]??"unknown":"unknown",w=S(),l=b();let m;try{const s=await fetch(`${r}/api/v1/license/activate-key`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({api_key:n,machine_id:w,client_version:l})});if(!s.ok)return{success:!1,message:`API key activation failed: ${(await s.json().catch(()=>({}))).message??`HTTP ${s.status}`}`};m=await s.json()}catch{return{success:!1,message:["Failed to connect to IP Protection Server.","","Possible causes:",`  - Server at ${r} is unreachable`,"  - Network connectivity issue","","Workaround: Use --local flag to run in local mode"].join(`
-`)}}const p=m.tier??T,L=o(i,"cache");try{await new P({cacheDir:L,passphrase:n}).set("neocortex:jwt:token",m.token,m.expires_in*1e3)}catch{}const $={serverUrl:r,mode:"remote",machineId:w,activatedAt:new Date().toISOString(),tier:p,apiKey:n};try{A($)}catch(s){return{success:!1,message:`Failed to save configuration: ${s instanceof Error?s.message:"unknown error"}`}}const M=h(l,{forceCreate:!0,targetFilter:"claude-code"})+h(l);return E(l,p),N(l,p),{success:!0,message:["Neocortex activated successfully.","","Open your preferred platform (Claude Code, Cursor, VS Code, etc.)","and reference the Neocortex agent.",...M>0?["","Managed agent wrappers were refreshed while preserving existing Markdown frontmatter and unrelated platform files."]:[],"","Use *menu to see available commands or check the Docs in your Dashboard."].join(`
-`),tier:p,serverUrl:r,configPath:c}}const y=H(n);if(!y.valid)return{success:!1,message:`Invalid license key: ${y.error}`};const d=n,v=d.match(/^NX-(F|P|E)-/i),F={F:"free",P:"pro",E:"enterprise"},u=v?.[1]?F[v[1].toUpperCase()]??"unknown":"unknown",K=o(i,"cache"),U=new P({cacheDir:K,passphrase:d}),j=new J({serverUrl:r,licenseKey:d,cacheProvider:U});let g;try{g=await j.activate()}catch{return{success:!1,message:["Failed to connect to IP Protection Server.","","Possible causes:",`  - Server at ${r} is unreachable`,"  - Network connectivity issue","  - Server is still being deployed","","Workaround: Use --local flag to run in local mode"].join(`
-`)}}if(!g)return{success:!1,message:["License activation failed.","","Possible causes:","  - Invalid or expired license key","  - License already activated on another machine","  - Server rejected the activation request","","Check your license key and try again.","Contact support if the problem persists."].join(`
-`)};const D={serverUrl:r,mode:"remote",machineId:S(),activatedAt:new Date().toISOString(),tier:u,licenseKey:d};try{A(D)}catch(a){return{success:!1,message:`Failed to save config to ${c}: ${a instanceof Error?a.message:String(a)}`}}const f=b(),O=h(f,{forceCreate:!0,targetFilter:"claude-code"})+h(f);return E(f,u),N(f,u),{success:!0,message:["Neocortex activated successfully.","","Open your preferred platform (Claude Code, Cursor, VS Code, etc.)","and reference the Neocortex agent.",...O>0?["","Managed agent wrappers were refreshed while preserving existing Markdown frontmatter and unrelated platform files."]:[],"","Use *menu to see available commands or check the Docs in your Dashboard."].join(`
-`),tier:u,serverUrl:r,configPath:c}}export{he as activate,Q as validateApiKeyFormat,H as validateLicenseKeyFormat};
+import{existsSync as Y,mkdirSync as x,writeFileSync as X,readFileSync as I}from"node:fs";import{join as i,dirname as C}from"node:path";import{homedir as W}from"node:os";import{fileURLToPath as J}from"node:url";import{LicenseClient as B}from"../license/license-client.js";import{EncryptedCache as P}from"../cache/encrypted-cache.js";import{getMachineFingerprint as S}from"../machine/fingerprint.js";import{updateAgentDescription as E}from"../agent/update-description.js";import{refreshStubs as h}from"../agent/refresh-stubs.js";import{updateAgentYaml as N}from"../agent/update-agent-yaml.js";import{saveSecureConfig as G,setSecureDirPermissions as _}from"../config/secure-config.js";import{DEFAULT_SERVER_URL as z}from"../constants.js";function b(){try{const e=J(import.meta.url);let t=C(e);for(let r=0;r<5;r++){try{const n=JSON.parse(I(i(t,"package.json"),"utf-8"));if(n.name==="@ornexus/neocortex"||n.name==="@neocortex/client")return n.version??"0.0.0"}catch{}t=C(t)}}catch{}return"0.0.0"}const o=i(W(),".neocortex"),c=i(o,"config.json"),q=/^NX-(F|P|E)-[a-f0-9]+-[a-f0-9]+$/i,H=/^nxk_(?:[a-z]+_)?[a-f0-9]+_[a-f0-9]+$/;function Q(e){if(!e||e.trim().length===0)return{valid:!1,error:"License key cannot be empty"};const t=e.trim().toUpperCase();return t.startsWith("NX-")?q.test(t)?{valid:!0}:{valid:!1,error:"Invalid license key format. Expected: NX-{TIER}-{ID} (e.g., NX-PRO-ABC-123)"}:{valid:!1,error:'License key must start with "NX-"'}}function Z(e){if(!e||e.trim().length===0)return{valid:!1,error:"API key cannot be empty"};const t=e.trim();return t.startsWith("nxk_")?t.length<20?{valid:!1,error:"API key is too short"}:H.test(t)?{valid:!0}:{valid:!1,error:"Invalid API key format. Expected: nxk_{id}_{check} (e.g., nxk_abc123def456...)"}:{valid:!1,error:'API key must start with "nxk_"'}}function he(){try{if(Y(c)){const e=I(c,"utf-8");return JSON.parse(e)}}catch{}return null}function A(e){x(o,{recursive:!0}),_(o);const t=i(o,"cache");if(x(t,{recursive:!0}),_(t),e.licenseKey||e.apiKey)G({serverUrl:e.serverUrl,mode:e.mode,machineId:e.machineId,activatedAt:e.activatedAt,tier:e.tier,licenseKey:e.licenseKey??e.apiKey});else{const r={configVersion:1,...e};X(c,JSON.stringify(r,null,2)+`
+`,"utf-8")}}async function ye(e){const{licenseKey:t,serverUrl:r=z}=e;if(!t)return{success:!1,message:["No key provided.","","Get your license key at https://neocortex.sh/portal/login","","Usage:","  neocortex activate YOUR-LICENSE-KEY","  neocortex activate YOUR-API-KEY"].join(`
+`)};const n=t.trim();if(n.startsWith("nxk_")){const s=Z(n);if(!s.valid)return{success:!1,message:`Invalid API key: ${s.error}`};const k=n.match(/^nxk_(free|pro|ent)_/),T={free:"free",pro:"pro",ent:"enterprise"},L=k?.[1]?T[k[1]]??"unknown":"unknown",w=S(),l=b();let m;try{const a=await fetch(`${r}/api/v1/license/activate-key`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({api_key:n,machine_id:w,client_version:l})});if(!a.ok)return{success:!1,message:`API key activation failed: ${(await a.json().catch(()=>({}))).message??`HTTP ${a.status}`}`};m=await a.json()}catch{return{success:!1,message:["Failed to connect to IP Protection Server.","","Possible causes:",`  - Server at ${r} is unreachable`,"  - Network connectivity issue","","Workaround: Use --local flag to run in local mode"].join(`
+`)}}const p=m.tier??L,$=i(o,"cache");try{await new P({cacheDir:$,passphrase:n}).set("neocortex:jwt:token",m.token,m.expires_in*1e3)}catch{}const M={serverUrl:r,mode:"remote",machineId:w,activatedAt:new Date().toISOString(),tier:p,apiKey:n};try{A(M)}catch(a){return{success:!1,message:`Failed to save configuration: ${a instanceof Error?a.message:"unknown error"}`}}const V=h(l,{forceCreate:!0,targetFilter:"claude-code"})+h(l);return E(l,p),N(l,p),{success:!0,message:["Neocortex activated successfully.","","Open your preferred platform (Claude Code, Cursor, VS Code, etc.)","and reference the Neocortex agent.",...V>0?["","Managed agent wrappers were refreshed while preserving existing Markdown frontmatter and unrelated platform files."]:[],"","Use *menu to see available commands or check the Docs in your Dashboard."].join(`
+`),tier:p,serverUrl:r,configPath:c}}const v=Q(n);if(!v.valid)return{success:!1,message:`Invalid license key: ${v.error}`};const d=n,g=d.match(/^NX-(F|P|E)-/i),F={F:"free",P:"pro",E:"enterprise"},K=g?.[1]?F[g[1].toUpperCase()]??"unknown":"unknown",U=i(o,"cache"),j=new P({cacheDir:U,passphrase:d}),D=new B({serverUrl:r,licenseKey:d,cacheProvider:j});let y;try{y=await D.activate()}catch{return{success:!1,message:["Failed to connect to IP Protection Server.","","Possible causes:",`  - Server at ${r} is unreachable`,"  - Network connectivity issue","  - Server is still being deployed","","Workaround: Use --local flag to run in local mode"].join(`
+`)}}if(!y)return{success:!1,message:["License activation failed.","","Possible causes:","  - Invalid or expired license key","  - License already activated on another machine","  - Server rejected the activation request","","Check your license key and try again.","Contact support if the problem persists."].join(`
+`)};const u=y.tier??K,O={serverUrl:r,mode:"remote",machineId:S(),activatedAt:new Date().toISOString(),tier:u,licenseKey:d};try{A(O)}catch(s){return{success:!1,message:`Failed to save config to ${c}: ${s instanceof Error?s.message:String(s)}`}}const f=b(),R=h(f,{forceCreate:!0,targetFilter:"claude-code"})+h(f);return E(f,u),N(f,u),{success:!0,message:["Neocortex activated successfully.","","Open your preferred platform (Claude Code, Cursor, VS Code, etc.)","and reference the Neocortex agent.",...R>0?["","Managed agent wrappers were refreshed while preserving existing Markdown frontmatter and unrelated platform files."]:[],"","Use *menu to see available commands or check the Docs in your Dashboard."].join(`
+`),tier:u,serverUrl:r,configPath:c}}export{ye as activate,Z as validateApiKeyFormat,Q as validateLicenseKeyFormat};

package/packages/client/dist/commands/architecture-memory-terminal.js

@@ -1,2 +1,4 @@
-import{execFileSync as l}from"node:child_process";import{createHash as F,randomUUID as V}from"node:crypto";import{closeSync as h,fsyncSync as w,lstatSync as b,mkdirSync as J,openSync as y,readFileSync as I,realpathSync as O,renameSync as L,unlinkSync as T,writeFileSync as H}from"node:fs";import{isAbsolute as X,join as p,resolve as S}from"node:path";import{listProjectMemoryTargets as q}from"../memory/shared-project-memory-types.js";import{parseRefreshMemoryArgs as U,verifyProjectMemoryTargets as B}from"./refresh-memory.js";function Z(e,t){if(!c(e)||!c(t)||Object.keys(e).sort().join(",")!==["schemaVersion","targetEpicId","graphRevision","sourceHead","canonicalSha256","projectionSha256","fileCount","completionReceiptId","validationReceiptId","receiptId","status","evidenceIds","publicSafe"].sort().join(",")||e.schemaVersion!=="ArchitectureTerminalMemoryReceipt/1"||e.targetEpicId!==t.targetEpicId||e.graphRevision!==t.graphRevision||e.completionReceiptId!==t.completionEvidence?.receiptId||e.validationReceiptId!==t.validationEvidence?.receiptId||typeof e.sourceHead!="string"||!/^[a-f0-9]{40}$/.test(e.sourceHead)||![e.graphRevision,e.canonicalSha256,e.projectionSha256,e.completionReceiptId,e.validationReceiptId,e.receiptId].every(i=>typeof i=="string"&&/^[a-f0-9]{64}$/.test(i))||!Number.isInteger(e.fileCount)||e.fileCount<1||e.fileCount>64||e.status!=="passed"||e.publicSafe!==!0||!Array.isArray(e.evidenceIds)||e.evidenceIds.length!==1)return!1;const n={schemaVersion:e.schemaVersion,targetEpicId:e.targetEpicId,graphRevision:e.graphRevision,sourceHead:e.sourceHead,canonicalSha256:e.canonicalSha256,projectionSha256:e.projectionSha256,fileCount:e.fileCount,completionReceiptId:e.completionReceiptId,validationReceiptId:e.validationReceiptId},o=C(JSON.stringify(n));return e.receiptId===o&&e.evidenceIds[0]===`memory-physical-${o.slice(0,24)}`}function c(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function C(e){return F("sha256").update(e).digest("hex")}function M(e,t){if(!c(t)||t.owner!=="root"||t.currentStageCommand!=="update-memory"||t.continuationState!=="delegate"||t.childStatus!=="succeeded"||t.evidencePolicy!=="v2-required"||typeof t.targetEpicId!="string"||!/^P[1-9][0-9]{0,11}$/.test(t.targetEpicId)||typeof t.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(t.graphRevision)||!Array.isArray(t.acceptedStages)||t.acceptedStages.length!==14||!c(t.reviewDecision)||t.reviewDecision.decision!=="approved"||!c(t.completionEvidence)||t.completionEvidence.status!=="succeeded"||t.completionEvidence.stageCommand!=="update-memory"||!c(t.validationEvidence)||t.validationEvidence.status!=="passed"||t.validationEvidence.stageCommand!=="update-memory"||typeof t.completionEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(t.completionEvidence.receiptId)||typeof t.validationEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(t.validationEvidence.receiptId))throw new Error("architecture-terminal-memory-evidence-incomplete");const n=B(U(["--verify","--project-root",e])),o=l("git",["rev-parse","HEAD"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(!/^[a-f0-9]{40}$/.test(o))throw new Error("architecture-terminal-memory-head-invalid");const i=I(p(e,"NEOCORTEX.md")),f=l("git",["show","HEAD:NEOCORTEX.md"],{cwd:e,stdio:["ignore","pipe","ignore"],maxBuffer:65536});if(!i.equals(f)||C(i)!==n.canonicalSha256)throw new Error("architecture-terminal-memory-uncommitted");const v=[...new Set(["NEOCORTEX.md",...q().flatMap(r=>[r.primaryFile,...r.secondaryFiles.filter(d=>d.scope==="project").map(d=>d.path)])])];if(l("git",["diff","--name-only","HEAD","--",...v],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim())throw new Error("architecture-terminal-memory-uncommitted");const m={schemaVersion:"ArchitectureTerminalMemoryReceipt/1",targetEpicId:t.targetEpicId,graphRevision:t.graphRevision,sourceHead:o,canonicalSha256:n.canonicalSha256,projectionSha256:n.projectionSha256,fileCount:n.fileCount,completionReceiptId:t.completionEvidence.receiptId,validationReceiptId:t.validationEvidence.receiptId},s=C(JSON.stringify(m));return{...m,receiptId:s,status:"passed",evidenceIds:[`memory-physical-${s.slice(0,24)}`],publicSafe:!0}}function _(e){const t=S(e),n=l("git",["rev-parse","--show-toplevel"],{cwd:t,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(O(t)!==t||S(n)!==t)throw new Error("architecture-terminal-memory-project-root-invalid");const o=p(t,".neocortex"),i=p(o,"state.json"),f=p(o,"state.json.architecture.lock"),v=y(f,"wx",384);let a;try{const m=b(i);if(!m.isFile()||m.isSymbolicLink())throw new Error("architecture-terminal-memory-state-invalid");const s=I(i,"utf8"),r=JSON.parse(s);if(!c(r)||!c(r.archPlan)||!c(r.archPlan.execution)||!c(r.epics)||r.scope&&c(r.scope)&&r.scope.kind==="projected"||!Object.hasOwn(r.epics,String(r.archPlan.execution.targetEpicId))||r.archPlan.execution.terminalMemoryCheckpoint!==void 0)throw new Error("architecture-terminal-memory-state-invalid");const d=M(t,r.archPlan.execution),R=l("git",["rev-parse","--git-common-dir"],{cwd:t,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),g=X(R)?S(R):S(t,R);if(O(g)!==g||b(g).isSymbolicLink())throw new Error("architecture-terminal-memory-backup-dir-invalid");const E=p(g,"neocortex-architecture");J(E,{recursive:!0,mode:448});const u=b(E);if(!u.isDirectory()||u.isSymbolicLink()||u.uid!==process.getuid?.()||(u.mode&63)!==0)throw new Error("architecture-terminal-memory-backup-dir-invalid");if(I(i,"utf8")!==s)throw new Error("architecture-terminal-memory-state-conflict");const P=V(),D=p(E,`state-backup-${P}.json`),k=y(D,"wx",384);try{H(k,s),w(k)}finally{h(k)}const A=y(E,"r");try{w(A)}finally{h(A)}const N={...r,archPlan:{...r.archPlan,execution:{...r.archPlan.execution,terminalMemoryCheckpoint:d}}};a=p(o,`state.json.architecture-tmp-${P}`);const j=y(a,"wx",384);try{H(j,`${JSON.stringify(N,null,2)}
-`),w(j)}finally{h(j)}if(I(i,"utf8")!==s)throw new Error("architecture-terminal-memory-state-conflict");if(M(t,r.archPlan.execution).receiptId!==d.receiptId)throw new Error("architecture-terminal-memory-physical-conflict");L(a,i),a=void 0;const $=y(o,"r");try{w($)}finally{h($)}return d}finally{if(a)try{T(a)}catch{}h(v),T(f)}}async function x(e){try{if(e[0]!=="seal"||e.length!==1&&e.length!==3||e.length===3&&e[1]!=="--project-root")throw new Error("usage: architecture-memory seal [--project-root <path>]");const t=_(e.length===3?e[2]:process.cwd());return console.log(`Architecture memory sealed: receipt=${t.receiptId} head=${t.sourceHead} files=${t.fileCount}`),0}catch(t){return console.error(t instanceof Error?t.message:String(t)),1}}export{Z as acceptedArchitectureTerminalMemoryReceipt,x as architectureMemoryTerminalCliHandler,M as deriveArchitectureTerminalMemoryReceipt,_ as sealArchitectureTerminalMemory};
+import{architectureMemoryPredecessorCount as F}from"./architecture-non-ui-continuation.js";import{execFileSync as g}from"node:child_process";import{createHash as V,randomUUID as B}from"node:crypto";import{closeSync as w,fsyncSync as I,lstatSync as j,mkdirSync as J,openSync as E,readFileSync as S,realpathSync as M,renameSync as L,unlinkSync as H,writeFileSync as O}from"node:fs";import{isAbsolute as X,join as f,resolve as v}from"node:path";import{listProjectMemoryTargets as q}from"../memory/shared-project-memory-types.js";import{parseRefreshMemoryArgs as U,verifyProjectMemoryTargets as _}from"./refresh-memory.js";function z(r,e){if(!c(r)||!c(e)||Object.keys(r).sort().join(",")!==["schemaVersion","targetEpicId","graphRevision","sourceHead","canonicalSha256","projectionSha256","fileCount","completionReceiptId","validationReceiptId","receiptId","status","evidenceIds","publicSafe"].sort().join(",")||r.schemaVersion!=="ArchitectureTerminalMemoryReceipt/1"||r.targetEpicId!==e.targetEpicId||r.graphRevision!==e.graphRevision||r.completionReceiptId!==e.completionEvidence?.receiptId||r.validationReceiptId!==e.validationEvidence?.receiptId||typeof r.sourceHead!="string"||!/^[a-f0-9]{40}$/.test(r.sourceHead)||![r.graphRevision,r.canonicalSha256,r.projectionSha256,r.completionReceiptId,r.validationReceiptId,r.receiptId].every(n=>typeof n=="string"&&/^[a-f0-9]{64}$/.test(n))||!Number.isInteger(r.fileCount)||r.fileCount<1||r.fileCount>64||r.status!=="passed"||r.publicSafe!==!0||!Array.isArray(r.evidenceIds)||r.evidenceIds.length!==1)return!1;const s={schemaVersion:r.schemaVersion,targetEpicId:r.targetEpicId,graphRevision:r.graphRevision,sourceHead:r.sourceHead,canonicalSha256:r.canonicalSha256,projectionSha256:r.projectionSha256,fileCount:r.fileCount,completionReceiptId:r.completionReceiptId,validationReceiptId:r.validationReceiptId},i=b(JSON.stringify(s));return r.receiptId===i&&r.evidenceIds[0]===`memory-physical-${i.slice(0,24)}`}function c(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function b(r){return V("sha256").update(r).digest("hex")}function T(r,e){if(!c(e)||e.owner!=="root"||e.currentStageCommand!=="update-memory"||e.continuationState!=="delegate"||e.childStatus!=="succeeded"||e.evidencePolicy!=="v2-required"||typeof e.targetEpicId!="string"||!/^P[1-9][0-9]{0,11}$/.test(e.targetEpicId)||typeof e.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(e.graphRevision)||!Array.isArray(e.acceptedStages)||e.acceptedStages.length!==F(e)||!c(e.reviewDecision)||e.reviewDecision.decision!=="approved"||!c(e.completionEvidence)||e.completionEvidence.status!=="succeeded"||e.completionEvidence.stageCommand!=="update-memory"||!c(e.validationEvidence)||e.validationEvidence.status!=="passed"||e.validationEvidence.stageCommand!=="update-memory"||typeof e.completionEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(e.completionEvidence.receiptId)||typeof e.validationEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(e.validationEvidence.receiptId))throw new Error("architecture-terminal-memory-evidence-incomplete");const s=_(U(["--verify","--project-root",r])),i=g("git",["rev-parse","HEAD"],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(!/^[a-f0-9]{40}$/.test(i))throw new Error("architecture-terminal-memory-head-invalid");const n=S(f(r,"NEOCORTEX.md")),u=g("git",["show","HEAD:NEOCORTEX.md"],{cwd:r,stdio:["ignore","pipe","ignore"],maxBuffer:65536});if(!n.equals(u)||b(n)!==s.canonicalSha256)throw new Error("architecture-terminal-memory-uncommitted");const k=[...new Set(["NEOCORTEX.md",...q().flatMap(a=>[a.primaryFile,...a.secondaryFiles.filter(o=>o.scope==="project").map(o=>o.path)])])];if(g("git",["diff","--name-only","HEAD","--",...k],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim())throw new Error("architecture-terminal-memory-uncommitted");let p=i;if(e.terminalMemoryCheckpoint!==void 0){if(!z(e.terminalMemoryCheckpoint,e))throw new Error("architecture-terminal-memory-checkpoint-invalid");p=e.terminalMemoryCheckpoint.sourceHead;const a=o=>g("git",o,{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"],maxBuffer:1024*1024}).trim();try{a(["merge-base","--is-ancestor",p,i]);const o=a(["rev-list","--max-count=257","--reverse","--parents",`${p}..${i}`]).split(`
+`).filter(Boolean);if(o.length>256)throw new Error("checkpoint-range-too-large");for(const y of o){const l=y.split(" ");if(l.length!==2)throw new Error("checkpoint-merge-unverified");const h=a(["diff-tree","--no-commit-id","--name-only","-r",l[0]]).split(`
+`).filter(Boolean);if(h.length!==1||h[0]!==".neocortex/state.json")throw new Error("checkpoint-range-not-state-only")}}catch{throw new Error("architecture-terminal-memory-checkpoint-range-invalid")}}const m={schemaVersion:"ArchitectureTerminalMemoryReceipt/1",targetEpicId:e.targetEpicId,graphRevision:e.graphRevision,sourceHead:p,canonicalSha256:s.canonicalSha256,projectionSha256:s.projectionSha256,fileCount:s.fileCount,completionReceiptId:e.completionEvidence.receiptId,validationReceiptId:e.validationEvidence.receiptId},t=b(JSON.stringify(m));return{...m,receiptId:t,status:"passed",evidenceIds:[`memory-physical-${t.slice(0,24)}`],publicSafe:!0}}function G(r){const e=v(r),s=g("git",["rev-parse","--show-toplevel"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(M(e)!==e||v(s)!==e)throw new Error("architecture-terminal-memory-project-root-invalid");const i=f(e,".neocortex"),n=f(i,"state.json"),u=f(i,"state.json.architecture.lock"),k=E(u,"wx",384);let d;try{const p=j(n);if(!p.isFile()||p.isSymbolicLink())throw new Error("architecture-terminal-memory-state-invalid");const m=S(n,"utf8"),t=JSON.parse(m);if(!c(t)||!c(t.archPlan)||!c(t.archPlan.execution)||!c(t.epics)||t.scope&&c(t.scope)&&t.scope.kind==="projected"||!Object.hasOwn(t.epics,String(t.archPlan.execution.targetEpicId))||t.archPlan.execution.terminalMemoryCheckpoint!==void 0)throw new Error("architecture-terminal-memory-state-invalid");const a=T(e,t.archPlan.execution),o=g("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),y=X(o)?v(o):v(e,o);if(M(y)!==y||j(y).isSymbolicLink())throw new Error("architecture-terminal-memory-backup-dir-invalid");const l=f(y,"neocortex-architecture");J(l,{recursive:!0,mode:448});const h=j(l);if(!h.isDirectory()||h.isSymbolicLink()||h.uid!==process.getuid?.()||(h.mode&63)!==0)throw new Error("architecture-terminal-memory-backup-dir-invalid");if(S(n,"utf8")!==m)throw new Error("architecture-terminal-memory-state-conflict");const P=B(),D=f(l,`state-backup-${P}.json`),R=E(D,"wx",384);try{O(R,m),I(R)}finally{w(R)}const A=E(l,"r");try{I(A)}finally{w(A)}const N={...t,archPlan:{...t.archPlan,execution:{...t.archPlan.execution,terminalMemoryCheckpoint:a}}};d=f(i,`state.json.architecture-tmp-${P}`);const C=E(d,"wx",384);try{O(C,`${JSON.stringify(N,null,2)}
+`),I(C)}finally{w(C)}if(S(n,"utf8")!==m)throw new Error("architecture-terminal-memory-state-conflict");if(T(e,t.archPlan.execution).receiptId!==a.receiptId)throw new Error("architecture-terminal-memory-physical-conflict");L(d,n),d=void 0;const $=E(i,"r");try{I($)}finally{w($)}return a}finally{if(d)try{H(d)}catch{}w(k),H(u)}}async function re(r){try{if(r[0]!=="seal"||r.length!==1&&r.length!==3||r.length===3&&r[1]!=="--project-root")throw new Error("usage: architecture-memory seal [--project-root <path>]");const e=G(r.length===3?r[2]:process.cwd());return console.log(`Architecture memory sealed: receipt=${e.receiptId} head=${e.sourceHead} files=${e.fileCount}`),0}catch(e){return console.error(e instanceof Error?e.message:String(e)),1}}export{z as acceptedArchitectureTerminalMemoryReceipt,re as architectureMemoryTerminalCliHandler,T as deriveArchitectureTerminalMemoryReceipt,G as sealArchitectureTerminalMemory};

package/packages/client/dist/commands/architecture-non-ui-continuation.d.ts

@@ -0,0 +1,3 @@
+export declare function architectureMemoryPredecessorCount(execution: Record<string, unknown>): number;
+export type NonUiClientTransition = 'advance' | 'delegate' | 'ask-user' | 'complete' | 'complete-replay';
+export declare function classifyNonUiArchitectureTransition(request: Record<string, unknown>, execution: Record<string, unknown>, memoryReceiptValid?: boolean): NonUiClientTransition | undefined;

package/packages/client/dist/commands/architecture-non-ui-continuation.js

@@ -0,0 +1 @@
+import{isDeepStrictEqual as d}from"node:util";import{ARCHITECTURE_PUBLIC_STAGE_COMMANDS as A,NON_UI_ARCHITECTURE_STAGE_COMMANDS as R,parseArchitectureNonUiScopeReceipt as y}from"./shared-architecture-non-ui-contract.js";const a=e=>!!e&&typeof e=="object"&&!Array.isArray(e),r=R;function C(e){const t=y(e.nonUiScopeReceipt);return t&&t.targetEpicId===e.targetEpicId&&t.graphRevision===e.graphRevision&&a(e.accounting)&&t.accountingId===e.accounting.accountingId&&a(e.evidenceExpectation)&&t.rootInputSha256===e.evidenceExpectation.inputHash?t:void 0}function D(e){if(e.nonUiScopeReceipt===void 0)return A.length-1;if(!C(e))throw new Error("architecture-non-ui-scope-invalid");return r.length-1}function f(e,t,c,n){return Array.isArray(e)&&e.length===t&&e.every((i,o)=>a(i)&&i.targetEpicId===c&&i.stageCommand===r[o]&&a(i.completionEvidence)&&a(i.validationEvidence)&&i.completionEvidence.stageCommand===i.stageCommand&&i.completionEvidence.status==="succeeded"&&i.validationEvidence.stageCommand===i.stageCommand&&i.validationEvidence.status==="passed"&&i.completionEvidence.targetEpicId===c&&i.validationEvidence.targetEpicId===c&&i.completionEvidence.artifactHash===i.validationEvidence.artifactHash&&a(i.validationEvidence.isolated)&&a(i.validationEvidence.regression)&&i.validationEvidence.isolated.graphHash===n&&i.validationEvidence.regression.graphHash===n)}function H(e){const t=e.reviewDecision,c=e.completionEvidence,n=e.validationEvidence;return a(t)&&a(c)&&a(n)&&t.schemaVersion==="ArchitectureReviewDecision/1"&&t.decision==="approved"&&t.targetEpicId===e.targetEpicId&&t.graphRevision===e.graphRevision&&t.artifactHash===c.artifactHash&&t.artifactHash===n.artifactHash&&t.completionReceiptId===c.receiptId&&t.validationReceiptId===n.receiptId}function O(e,t,c=!1){const n=t.checkpoint;if(!a(n))return;const i=C(n);if(!i||i.targetEpicId!==e.targetEpicId||i.graphRevision!==e.graphRevision||!a(e.evidenceExpectation)||i.rootInputSha256!==e.evidenceExpectation.inputHash||!a(e.accounting)||i.accountingId!==e.accounting.accountingId||e.nonUiScopeReceipt!==void 0&&!d(e.nonUiScopeReceipt,i))return;const o=e.acceptedStages,s=n.acceptedStages,l=r.indexOf(String(e.currentStageCommand)),p=e.targetEpicId,u=e.graphRevision,g=S=>d(n[S],e[S]),h=e.childStatus===void 0&&e.completionEvidence===void 0&&e.validationEvidence===void 0,E=n.childStatus===void 0&&n.completionEvidence===void 0&&n.validationEvidence===void 0;if(e.currentStageCommand==="arch-design-system"&&e.continuationState==="advance"&&h&&E&&n.currentStageCommand==="arch-performance"&&n.continuationState==="advance"&&t.nextAction==="resume"&&f(o,r.indexOf("arch-performance"),p,u)&&d(s,o))return"advance";if(l<r.indexOf("arch-security")||e.nonUiScopeReceipt===void 0&&e.currentStageCommand!=="arch-security")return;if(e.continuationState==="complete"&&e.currentStageCommand==="update-memory"&&n.continuationState==="complete"&&n.currentStageCommand==="update-memory"&&t.nextAction==="complete"&&f(o,r.length,p,u)&&d(s,o)&&["childStatus","completionEvidence","validationEvidence","reviewDecision","terminalMemoryCheckpoint"].every(g)&&c)return"complete-replay";if(!f(o,l,p,u))return;if(h&&E&&["advance","delegate"].includes(String(e.continuationState))&&n.currentStageCommand===e.currentStageCommand&&n.continuationState==="delegate"&&t.nextAction==="delegate"&&d(s,o)&&g("reviewDecision"))return"delegate";const m=e.completionEvidence,v=e.validationEvidence;if(e.childStatus!=="succeeded"||!a(m)||!a(v)||m.status!=="succeeded"||v.status!=="passed"||m.stageCommand!==e.currentStageCommand||v.stageCommand!==e.currentStageCommand||m.targetEpicId!==p||v.targetEpicId!==p||m.artifactHash!==v.artifactHash)return;if(e.currentStageCommand==="arch-review"&&!H(e))return n.currentStageCommand==="arch-review"&&n.continuationState==="ask-user"&&t.nextAction==="ask-user"&&d(s,o)&&["childStatus","completionEvidence","validationEvidence"].every(g)&&d(n.questionIds,["ARCH-REVIEW-A09-APPROVAL"])&&e.reviewDecision===void 0?"ask-user":void 0;if(e.currentStageCommand==="arch-review"&&(e.continuationState!=="ask-user"||!d(e.questionIds,["ARCH-REVIEW-A09-APPROVAL"])))return;const I=[...o,{targetEpicId:p,stageCommand:e.currentStageCommand,completionEvidence:m,validationEvidence:v}];if(!(!d(s,I)||!g("reviewDecision"))){if(e.currentStageCommand==="update-memory")return n.currentStageCommand==="update-memory"&&n.continuationState==="complete"&&t.nextAction==="complete"&&["childStatus","completionEvidence","validationEvidence","terminalMemoryCheckpoint"].every(g)&&c?"complete":void 0;if(E&&n.currentStageCommand===r[l+1]&&n.continuationState==="advance"&&t.nextAction==="resume")return"advance"}}export{D as architectureMemoryPredecessorCount,O as classifyNonUiArchitectureTransition};

package/packages/client/dist/commands/invoke.d.ts

@@ -1,15 +1,3 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * This file is part of Neocortex CLI, licensed under the
- * Functional Source License, Version 1.1 (FSL-1.1).
- *
- * Change Date: February 20, 2029
- * Change License: MIT
- *
- * See the LICENSE file in the project root for full license text.
- */
 import { type PactAnswerReceipt } from './architecture-answers.js';
 import type { YoloopPersistedState } from '../yoloop/shared-yoloop-types.js';
 import { type StateMigrationAuthorityV1 } from '../migrations/state-json.js';
@@ -19,7 +7,7 @@ import { type ContinuityProcessingSummaryCursorTarget } from '../continuity/cont
 import type { ProjectEvidenceEnvelope } from '../evidence/types.js';
 import { detectNativeHostAttestation } from '../adapters/platform-detector.js';
 import type { YoloSpecEnvelopeV1 } from '../../../shared/dist/yolo/spec-envelope.js';
-import type { YoloChangeEvidenceV1 } from '../../../shared/dist/yolo/change-evidence.js';
+import type { YoloChangeEvidence } from '../../../shared/dist/yolo/change-evidence.js';
 import { type InvokeEffectContext, type StrictReadOnlyInvokeEnvelope } from '../../../shared/dist/strict-readonly.js';
 import { type InvokeInputEvidenceV1, type InvokeInputEnvelopeV2, type InvokeInputSourceV2, type InvocationMalformedInputReasonV1, type InvocationAdmissionResultV1, type ProjectIdentityMigrationRequestV1 } from '../../../shared/dist/invocation/index.js';
 import { type P205TransientExecutionAuthority } from '../git/git-lifecycle-store.js';
@@ -31,7 +19,7 @@ export declare function getOrCreatePendingEpicIdempotencyKey(projectRoot: string
     readonly fingerprint: string;
 };
 export declare function clearPendingEpicIdempotencyKey(projectRoot: string, fingerprint: string): void;
-export declare function recordPendingEpicReservation(projectRoot: string, fingerprint: string, claimId: string, epicId: string): void;
+export declare function recordPendingEpicReservation(projectRoot: string, fingerprint: string, claimId: string, epicId: string, planningProtocol?: 'root-staged-v1'): void;
 export interface InvokeOptions {
     /** Raw args from the user (e.g., "*yolo @docs/stories/1.1.story.md") */
     readonly args: string;
@@ -59,6 +47,10 @@ export interface InvokeOptions {
     readonly strictReadOnly?: boolean;
     /** Explicit P222.16 beta; never inferred from Codex being installed. */
     readonly privateExecutionBeta?: boolean;
+    /** Explicit local subscription model override; never part of server args or a fallback. */
+    readonly privateExecutionModel?: string;
+    /** Host-only safe failure observation; never serialized to HTTP or agent input. */
+    readonly onPrivateExecutionWorkspaceFailure?: (observation: import('../private-execution/codex-executor.js').PrivateCodexWorkspaceEffectFailureV1) => void;
     /** Test-only parent for root-owned private YOLO/planning clones; CLI leaves unset. */
     readonly privateExecutionWorkspaceParent?: string;
 }
@@ -245,6 +237,7 @@ export interface InvokeCliParsedOptions {
     readonly platformTarget?: string;
     readonly strictReadOnly: boolean;
     readonly privateExecutionBeta: boolean;
+    readonly privateExecutionModel?: string;
 }
 type InvokeCommandLevelWatchCommand = 'goal' | 'loop' | 'jobs';
 type InvokeCommandLevelWatchOperation = 'create' | 'start' | 'resume' | 'run-once' | 'watch';
@@ -516,7 +509,7 @@ interface InvokeRequestBodyBase {
         readonly hostKind: 'codex-cli';
         readonly hostVersion: string;
         readonly sandboxProof: {
-            readonly schemaVersion: 5;
+            readonly schemaVersion: 6;
             readonly trust: 'client-self-attested';
             readonly credentialKind: 'chatgpt-subscription';
             readonly authIsolation: 'passed';
@@ -526,6 +519,7 @@ interface InvokeRequestBodyBase {
             readonly mcpIsolation: 'passed';
             readonly environmentIsolation: 'passed';
             readonly networkDenied: 'passed';
+            readonly webSearchDisabled: 'passed';
             readonly observedAtMs: number;
         };
     };
@@ -538,7 +532,7 @@ interface InvokeRequestBodyBase {
     readonly registryChecksum: string;
     readonly strictReadOnly?: StrictReadOnlyInvokeEnvelope;
     readonly yoloSpecEnvelope?: YoloSpecEnvelopeV1;
-    readonly yoloChangeEvidence?: YoloChangeEvidenceV1;
+    readonly yoloChangeEvidence?: YoloChangeEvidence;
 }
 export type InvokeRequestBody = InvokeRequestBodyBase & ({
     readonly args: string;
@@ -612,6 +606,8 @@ export declare function __resetSchemaDriftWarnedForTests(): void;
 export interface StateSnapshotCollectionOptions {
     readonly epicAware?: boolean;
     readonly projectless?: boolean;
+    /** Opt-in physical P03 reopening for private root planning, never ordinary dashboards. */
+    readonly verifyPlanningGeneration?: boolean;
     /** Process-local proof keyed by story; never read from or written to JSON. */
     readonly p205Authorities?: Readonly<Record<string, P205TransientExecutionAuthority>>;
 }
@@ -699,6 +695,10 @@ export declare function sendEpicClaimAcknowledgement(serverUrl: string, authToke
     readonly projectId: string;
     readonly epicId: string;
     readonly status: 'materialized' | 'abandoned';
+    readonly planningCheckpoint?: {
+        readonly memoryReceiptId: string;
+        readonly snapshot: Record<string, unknown>;
+    };
 }, retryOptions?: InvokePhysicalRetryOptions): Promise<boolean>;
 export declare function acknowledgeMaterializedPendingEpicClaims(projectRoot: string, stateSnapshot: StateSnapshot, serverUrl: string, authToken: string, projectId: string | undefined, retryOptions?: InvokePhysicalRetryOptions): Promise<number>;
 /**
@@ -723,6 +723,9 @@ export declare function extractPreFlightTrigger(args: string): string | null;
 export declare const INVOKE_HELP_TEXT: string;
 export declare function parseInvokeCliOptions(argv: string[], readers?: InvokeCliInputReaders): InvokeCliParsedOptions;
 export declare function writeInvokeCliSuccessOutput(result: InvokeResult, parsed: Pick<InvokeCliParsedOptions, 'format' | 'watch' | 'commandLevelWatch'>, stdout?: InvokeWatchWritable, stderr?: InvokeWatchWritable): void;
+/** P222.26 T2.5: process.exit must wait for sanitized pipe output to finish.
+ * A failed or stalled output stream cannot produce a successful CLI receipt. */
+export declare function flushInvokeCliOutput(stdout?: NodeJS.WritableStream, stderr?: NodeJS.WritableStream): Promise<boolean>;
 /**
  * CLI handler for the invoke command.
  * Parses CLI args and delegates to invoke().