@ornexus/neocortex 4.60.66 → 4.60.68

package/packages/client/dist/commands/native-agent.js

@@ -1,2 +1,136 @@
-import{isNativeDispatchBindingV1 as b,isNativeHostAttestationV1 as A}from"../continuity/native-agent-types.js";import{deriveOpaqueNativeAgentHandle as v,openNativeAgentPrivateStore as m}from"../continuity/native-agent-store.js";const k=64*1024,E=new Set(["requested","spawned","running","completed","failed","interrupted","unknown","lost"]),g=new Set(["native-agent","headless-process","inline"]),N=new Set(["fresh","stale","unknown"]),H=new Set(["host-event","host-list","bounded-poll","local-reservation"]);function l(t,o){const i=t.indexOf(o);return i>=0?t[i+1]:void 0}function h(t,o,i=[]){const n=new Set([...o,...i]);return o.every(a=>Object.prototype.hasOwnProperty.call(t,a))&&Object.keys(t).every(a=>n.has(a))}async function w(){const t=[];let o=0;for await(const n of process.stdin){const a=Buffer.isBuffer(n)?n:Buffer.from(String(n));if(o+=a.length,o>k)throw new Error("native-agent-input-too-large");t.push(a)}const i=JSON.parse(Buffer.concat(t).toString("utf8"));if(!i||typeof i!="object"||Array.isArray(i))throw new Error("native-agent-input-invalid");return i}function r(t){process.stdout.write(`${JSON.stringify(t)}
-`)}function O(t){return t&&typeof t=="object"&&"code"in t&&typeof t.code=="string"?t.code:t instanceof SyntaxError?"native-agent-input-invalid":t instanceof Error&&/^native-agent-[a-z0-9-]+$/.test(t.message)?t.message:"native-agent-operation-failed"}async function C(t){const o=t[0],i=l(t,"--project-root")??process.cwd();let n;try{if(o!=="reserve"&&o!=="observe"&&o!=="status")return r({ok:!1,reasonCode:"native-agent-action-invalid",publicSafe:!0}),1;if(n=await m(i),o==="reserve"){const e=await w();if(!h(e,["directiveKind","supportsTaskDelegation","taskDelegationCapability","binding","hostAttestation"],["requestedAt","topology"]))throw new Error("native-agent-input-invalid");if(e.directiveKind!=="task"||e.supportsTaskDelegation!==!0||e.taskDelegationCapability!=="native_safe"||!b(e.binding)||!A(e.hostAttestation))throw new Error("native-agent-dispatch-not-authorized");const s=e.topology??"native-agent";if(!g.has(s))throw new Error("native-agent-input-invalid");const c=n.store.reserveNativeAgentDispatch({binding:e.binding,hostAttestation:e.hostAttestation,requestedAt:typeof e.requestedAt=="string"?e.requestedAt:new Date().toISOString(),topology:s});return r({ok:!0,authorized:!0,action:c.reserved?"spawn-once":"reconcile-existing",...c,publicSafe:!0}),0}if(o==="observe"){const e=await w();if(!h(e,["dispatchKey","expectedRevision","state","topology","observedAt","freshness","observationSource","reasonCode"],["rawHandle","rawParentHandle","terminalAt"]))throw new Error("native-agent-input-invalid");const s=e.state,c=e.topology,u=e.freshness,d=e.observationSource;if(!E.has(s)||!g.has(c)||!N.has(u)||!H.has(d))throw new Error("native-agent-input-invalid");const p=typeof e.rawHandle=="string"?e.rawHandle:null,f=typeof e.rawParentHandle=="string"?e.rawParentHandle:null,y=n.store.observeNativeAgentDispatch({dispatchKey:String(e.dispatchKey),expectedRevision:Number(e.expectedRevision),state:s,handle:p?v(p,n.paths.handleKeyPath):null,parentHandle:f?v(f,n.paths.handleKeyPath):null,topology:c,observedAt:String(e.observedAt),terminalAt:e.terminalAt===null||typeof e.terminalAt=="string"?e.terminalAt:void 0,freshness:u,observationSource:d,reasonCode:String(e.reasonCode)});return r({ok:!0,...y,publicSafe:!0}),0}const a=l(t,"--dispatch-key"),S=Number(l(t,"--stale-after-ms")??3e4);if(a){const e=n.store.getNativeAgentDispatchStatus(a,{staleAfterMs:S});r({ok:!0,receipt:e,publicSafe:!0})}else{const e=n.store.listRecentNativeAgentDispatches(Number(l(t,"--limit")??20));r({ok:!0,receipts:e,publicSafe:!0})}return 0}catch(a){return r({ok:!1,reasonCode:O(a),publicSafe:!0}),1}finally{n?.store.close()}}export{C as nativeAgentCliHandler};
+import { isNativeDispatchBindingV1, isNativeHostAttestationV1, } from '../continuity/native-agent-types.js';
+import { deriveOpaqueNativeAgentHandle, openNativeAgentPrivateStore, } from '../continuity/native-agent-store.js';
+const MAX_STDIN_BYTES = 64 * 1024;
+const STATES = new Set(['requested', 'spawned', 'running', 'completed', 'failed', 'interrupted', 'unknown', 'lost']);
+const TOPOLOGIES = new Set(['native-agent', 'headless-process', 'inline']);
+const FRESHNESS = new Set(['fresh', 'stale', 'unknown']);
+const SOURCES = new Set(['host-event', 'host-list', 'bounded-poll', 'local-reservation']);
+function parseFlag(args, name) {
+    const index = args.indexOf(name);
+    return index >= 0 ? args[index + 1] : undefined;
+}
+function exactKeys(value, required, optional = []) {
+    const allowed = new Set([...required, ...optional]);
+    return required.every((key) => Object.prototype.hasOwnProperty.call(value, key))
+        && Object.keys(value).every((key) => allowed.has(key));
+}
+async function readBoundedJsonStdin() {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of process.stdin) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+        total += buffer.length;
+        if (total > MAX_STDIN_BYTES)
+            throw new Error('native-agent-input-too-large');
+        chunks.push(buffer);
+    }
+    const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        throw new Error('native-agent-input-invalid');
+    return parsed;
+}
+function output(value) {
+    process.stdout.write(`${JSON.stringify(value)}\n`);
+}
+function safeError(error) {
+    if (error && typeof error === 'object' && 'code' in error && typeof error.code === 'string')
+        return error.code;
+    if (error instanceof SyntaxError)
+        return 'native-agent-input-invalid';
+    if (error instanceof Error && /^native-agent-[a-z0-9-]+$/.test(error.message))
+        return error.message;
+    return 'native-agent-operation-failed';
+}
+export async function nativeAgentCliHandler(args) {
+    const action = args[0];
+    const projectRoot = parseFlag(args, '--project-root') ?? process.cwd();
+    let opened;
+    try {
+        if (action !== 'reserve' && action !== 'observe' && action !== 'status') {
+            output({ ok: false, reasonCode: 'native-agent-action-invalid', publicSafe: true });
+            return 1;
+        }
+        opened = await openNativeAgentPrivateStore(projectRoot);
+        if (action === 'reserve') {
+            const input = await readBoundedJsonStdin();
+            if (!exactKeys(input, [
+                'directiveKind', 'supportsTaskDelegation', 'taskDelegationCapability', 'binding', 'hostAttestation',
+            ], ['requestedAt', 'topology']))
+                throw new Error('native-agent-input-invalid');
+            if (input.directiveKind !== 'task'
+                || input.supportsTaskDelegation !== true
+                || input.taskDelegationCapability !== 'native_safe'
+                || !isNativeDispatchBindingV1(input.binding)
+                || !isNativeHostAttestationV1(input.hostAttestation)) {
+                throw new Error('native-agent-dispatch-not-authorized');
+            }
+            const topology = (input.topology ?? 'native-agent');
+            if (!TOPOLOGIES.has(topology))
+                throw new Error('native-agent-input-invalid');
+            const result = opened.store.reserveNativeAgentDispatch({
+                binding: input.binding,
+                hostAttestation: input.hostAttestation,
+                requestedAt: typeof input.requestedAt === 'string' ? input.requestedAt : new Date().toISOString(),
+                topology,
+            });
+            output({
+                ok: true,
+                authorized: true,
+                action: result.reserved ? 'spawn-once' : 'reconcile-existing',
+                ...result,
+                publicSafe: true,
+            });
+            return 0;
+        }
+        if (action === 'observe') {
+            const input = await readBoundedJsonStdin();
+            if (!exactKeys(input, [
+                'dispatchKey', 'expectedRevision', 'state', 'topology', 'observedAt',
+                'freshness', 'observationSource', 'reasonCode',
+            ], ['rawHandle', 'rawParentHandle', 'terminalAt']))
+                throw new Error('native-agent-input-invalid');
+            const state = input.state;
+            const topology = input.topology;
+            const freshness = input.freshness;
+            const observationSource = input.observationSource;
+            if (!STATES.has(state) || !TOPOLOGIES.has(topology) || !FRESHNESS.has(freshness) || !SOURCES.has(observationSource)) {
+                throw new Error('native-agent-input-invalid');
+            }
+            const rawHandle = typeof input.rawHandle === 'string' ? input.rawHandle : null;
+            const rawParentHandle = typeof input.rawParentHandle === 'string' ? input.rawParentHandle : null;
+            const result = opened.store.observeNativeAgentDispatch({
+                dispatchKey: String(input.dispatchKey),
+                expectedRevision: Number(input.expectedRevision),
+                state,
+                handle: rawHandle ? deriveOpaqueNativeAgentHandle(rawHandle, opened.paths.handleKeyPath) : null,
+                parentHandle: rawParentHandle ? deriveOpaqueNativeAgentHandle(rawParentHandle, opened.paths.handleKeyPath) : null,
+                topology,
+                observedAt: String(input.observedAt),
+                terminalAt: input.terminalAt === null || typeof input.terminalAt === 'string' ? input.terminalAt : undefined,
+                freshness,
+                observationSource,
+                reasonCode: String(input.reasonCode),
+            });
+            output({ ok: true, ...result, publicSafe: true });
+            return 0;
+        }
+        const dispatchKey = parseFlag(args, '--dispatch-key');
+        const staleAfterMs = Number(parseFlag(args, '--stale-after-ms') ?? 30_000);
+        if (dispatchKey) {
+            const receipt = opened.store.getNativeAgentDispatchStatus(dispatchKey, { staleAfterMs });
+            output({ ok: true, receipt, publicSafe: true });
+        }
+        else {
+            const receipts = opened.store.listRecentNativeAgentDispatches(Number(parseFlag(args, '--limit') ?? 20));
+            output({ ok: true, receipts, publicSafe: true });
+        }
+        return 0;
+    }
+    catch (error) {
+        output({ ok: false, reasonCode: safeError(error), publicSafe: true });
+        return 1;
+    }
+    finally {
+        opened?.store.close();
+    }
+}

package/packages/client/dist/commands/planning-diagnosis.js

@@ -1 +1,43 @@
-import{sealPlanningDiagnosis as t}from"../private-execution/planning-diagnosis-checkpoint.js";const a=64*1024;async function c(n){const o=[];let r=0;for await(const i of n){const e=Buffer.isBuffer(i)?i:Buffer.from(i);if(r+=e.length,r>a)throw new Error("planning-diagnosis-review-too-large");o.push(e)}if(r===0)throw new Error("planning-diagnosis-review-missing");return JSON.parse(Buffer.concat(o).toString("utf8"))}async function g(n){return l(n,process.stdin,console)}async function l(n,o,r){if(n[0]!=="seal"||n.length!==1&&n.length!==3||n.length===3&&n[1]!=="--project-root")return r.error("usage: planning-diagnosis seal [--project-root <path>] < review.json"),1;try{const i=await c(o),e=t(n.length===3?n[2]:process.cwd(),i);return r.log(JSON.stringify({ok:!0,epicId:e.epicId,diagnosisReceiptId:e.diagnosisReceiptId,qaEvidenceId:e.qaEvidenceId,publicSafe:!0})),0}catch(i){const e=i instanceof Error?i.message:"",s=/^planning-diagnosis-[a-z-]+$/.test(e)?e:"planning-diagnosis-seal-failed";return r.error(JSON.stringify({ok:!1,reasonCode:s,publicSafe:!0})),1}}export{g as planningDiagnosisCliHandler,l as planningDiagnosisCliHandlerWithIO};
+import { sealPlanningDiagnosis } from '../private-execution/planning-diagnosis-checkpoint.js';
+const MAX_REVIEW_BYTES = 64 * 1024;
+async function readBoundedReview(input) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of input) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += bytes.length;
+        if (size > MAX_REVIEW_BYTES)
+            throw new Error('planning-diagnosis-review-too-large');
+        chunks.push(bytes);
+    }
+    if (size === 0)
+        throw new Error('planning-diagnosis-review-missing');
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
+/** The root supplies reviewed structured evidence through stdin; no agent output is auto-accepted. */
+export async function planningDiagnosisCliHandler(args) {
+    return planningDiagnosisCliHandlerWithIO(args, process.stdin, console);
+}
+/** Injectable IO keeps success and redacted-error output verifiable in tests. */
+export async function planningDiagnosisCliHandlerWithIO(args, input, output) {
+    if (args[0] !== 'seal' || args.length !== 1 && args.length !== 3
+        || args.length === 3 && args[1] !== '--project-root') {
+        output.error('usage: planning-diagnosis seal [--project-root <path>] < review.json');
+        return 1;
+    }
+    try {
+        const review = await readBoundedReview(input);
+        const receipt = sealPlanningDiagnosis(args.length === 3 ? args[2] : process.cwd(), review);
+        output.log(JSON.stringify({ ok: true, epicId: receipt.epicId,
+            diagnosisReceiptId: receipt.diagnosisReceiptId,
+            qaEvidenceId: receipt.qaEvidenceId, publicSafe: true }));
+        return 0;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : '';
+        const reasonCode = /^planning-diagnosis-[a-z-]+$/.test(message)
+            ? message : 'planning-diagnosis-seal-failed';
+        output.error(JSON.stringify({ ok: false, reasonCode, publicSafe: true }));
+        return 1;
+    }
+}

package/packages/client/dist/commands/planning-generation.js

@@ -1 +1,53 @@
-import{sealPlanningGeneration as c,verifyCommittedPlanningGeneration as s}from"../private-execution/planning-generation-checkpoint.js";const f=64*1024;async function l(e){const o=[];let r=0;for await(const n of e){const i=Buffer.isBuffer(n)?n:Buffer.from(n);if(r+=i.length,r>f)throw new Error("planning-generation-review-too-large");o.push(i)}if(r===0)throw new Error("planning-generation-review-missing");return JSON.parse(Buffer.concat(o).toString("utf8"))}async function u(e){return p(e,process.stdin,console)}async function p(e,o,r){if(e[0]!=="seal"&&e[0]!=="verify"||e.length!==1&&e.length!==3||e.length===3&&e[1]!=="--project-root")return r.error("usage: planning-generation <seal|verify> [--project-root <path>] < input.json"),1;try{const n=await l(o),i=e.length===3?e[2]:process.cwd();let t;if(e[0]==="verify"){if(!n||typeof n!="object"||Array.isArray(n)||Object.keys(n).sort().join("|")!=="claimId|epicId|schemaVersion"||n.schemaVersion!=="PlanningGenerationVerification/1"||typeof n.claimId!="string"||typeof n.epicId!="string")throw new Error("planning-generation-verification-input-invalid");const a=n;t=s(i,a.claimId,a.epicId)}else t=c(i,n);return r.log(JSON.stringify({ok:!0,...t,publicSafe:!0})),0}catch(n){const i=n instanceof Error?n.message:"",t=/^planning-generation-[a-z-]+$/.test(i)?i:e[0]==="verify"?"planning-generation-verification-failed":"planning-generation-seal-failed";return r.error(JSON.stringify({ok:!1,reasonCode:t,publicSafe:!0})),1}}export{u as planningGenerationCliHandler,p as planningGenerationCliHandlerWithIO};
+import { sealPlanningGeneration, verifyCommittedPlanningGeneration } from '../private-execution/planning-generation-checkpoint.js';
+const MAX_REVIEW_BYTES = 64 * 1024;
+async function readBoundedReview(input) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of input) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += bytes.length;
+        if (size > MAX_REVIEW_BYTES)
+            throw new Error('planning-generation-review-too-large');
+        chunks.push(bytes);
+    }
+    if (size === 0)
+        throw new Error('planning-generation-review-missing');
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
+export async function planningGenerationCliHandler(args) {
+    return planningGenerationCliHandlerWithIO(args, process.stdin, console);
+}
+export async function planningGenerationCliHandlerWithIO(args, input, output) {
+    if (args[0] !== 'seal' && args[0] !== 'verify' || args.length !== 1 && args.length !== 3
+        || args.length === 3 && args[1] !== '--project-root') {
+        output.error('usage: planning-generation <seal|verify> [--project-root <path>] < input.json');
+        return 1;
+    }
+    try {
+        const review = await readBoundedReview(input);
+        const root = args.length === 3 ? args[2] : process.cwd();
+        let receipt;
+        if (args[0] === 'verify') {
+            if (!review || typeof review !== 'object' || Array.isArray(review)
+                || Object.keys(review).sort().join('|') !== 'claimId|epicId|schemaVersion'
+                || review.schemaVersion !== 'PlanningGenerationVerification/1'
+                || typeof review.claimId !== 'string'
+                || typeof review.epicId !== 'string') {
+                throw new Error('planning-generation-verification-input-invalid');
+            }
+            const identity = review;
+            receipt = verifyCommittedPlanningGeneration(root, identity.claimId, identity.epicId);
+        }
+        else
+            receipt = sealPlanningGeneration(root, review);
+        output.log(JSON.stringify({ ok: true, ...receipt, publicSafe: true }));
+        return 0;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : '';
+        const reasonCode = /^planning-generation-[a-z-]+$/.test(message)
+            ? message : args[0] === 'verify' ? 'planning-generation-verification-failed' : 'planning-generation-seal-failed';
+        output.error(JSON.stringify({ ok: false, reasonCode, publicSafe: true }));
+        return 1;
+    }
+}

package/packages/client/dist/commands/planning-memory.js

@@ -1 +1,40 @@
-import{sealPlanningMemory as s,verifyCommittedPlanningMemory as f}from"../private-execution/planning-memory-checkpoint.js";async function p(n){if(!["seal","verify"].includes(n[0]??"")||n.length!==1&&n.length!==3||n.length===3&&n[1]!=="--project-root")return console.error("usage: planning-memory <seal|verify> [--project-root <path>] < input.json"),1;try{const t=[];let i=0;for await(const o of process.stdin){const l=Buffer.from(o);if(i+=l.length,i>16384)throw new Error("planning-memory-input-too-large");t.push(l)}const e=JSON.parse(Buffer.concat(t).toString("utf8")),c=n.length===3?n[2]:process.cwd();let r;if(n[0]==="verify"){if(!e||typeof e!="object"||Array.isArray(e)||Object.keys(e).sort().join("|")!=="claimId|epicId|schemaVersion"||e.schemaVersion!=="PlanningMemoryVerification/1"||typeof e.claimId!="string"||typeof e.epicId!="string")throw new Error("planning-memory-input-invalid");const o=e;r=f(c,o.claimId,o.epicId)}else r=s(c,e);return console.log(JSON.stringify({ok:!0,receipt:r,publicSafe:!0})),0}catch{return console.error(JSON.stringify({ok:!1,reasonCode:"planning-memory-evidence-unverified",publicSafe:!0})),1}}export{p as planningMemoryCliHandler};
+import { sealPlanningMemory, verifyCommittedPlanningMemory } from '../private-execution/planning-memory-checkpoint.js';
+export async function planningMemoryCliHandler(args) {
+    if (!['seal', 'verify'].includes(args[0] ?? '') || args.length !== 1 && args.length !== 3
+        || args.length === 3 && args[1] !== '--project-root') {
+        console.error('usage: planning-memory <seal|verify> [--project-root <path>] < input.json');
+        return 1;
+    }
+    try {
+        const buffers = [];
+        let size = 0;
+        for await (const chunk of process.stdin) {
+            const bytes = Buffer.from(chunk);
+            size += bytes.length;
+            if (size > 16384)
+                throw new Error('planning-memory-input-too-large');
+            buffers.push(bytes);
+        }
+        const input = JSON.parse(Buffer.concat(buffers).toString('utf8'));
+        const root = args.length === 3 ? args[2] : process.cwd();
+        let receipt;
+        if (args[0] === 'verify') {
+            if (!input || typeof input !== 'object' || Array.isArray(input)
+                || Object.keys(input).sort().join('|') !== 'claimId|epicId|schemaVersion'
+                || input.schemaVersion !== 'PlanningMemoryVerification/1'
+                || typeof input.claimId !== 'string'
+                || typeof input.epicId !== 'string')
+                throw new Error('planning-memory-input-invalid');
+            const identity = input;
+            receipt = verifyCommittedPlanningMemory(root, identity.claimId, identity.epicId);
+        }
+        else
+            receipt = sealPlanningMemory(root, input);
+        console.log(JSON.stringify({ ok: true, receipt, publicSafe: true }));
+        return 0;
+    }
+    catch {
+        console.error(JSON.stringify({ ok: false, reasonCode: 'planning-memory-evidence-unverified', publicSafe: true }));
+        return 1;
+    }
+}

package/packages/client/dist/commands/planning-research.js

@@ -1 +1,42 @@
-import{sealPlanningResearch as o}from"../private-execution/planning-research-checkpoint.js";const s=64*1024;async function a(e){const c=[];let t=0;for await(const n of e){const r=Buffer.isBuffer(n)?n:Buffer.from(n);if(t+=r.length,t>s)throw new Error("planning-research-review-too-large");c.push(r)}if(t===0)throw new Error("planning-research-review-missing");return JSON.parse(Buffer.concat(c).toString("utf8"))}async function h(e){return l(e,process.stdin,console)}async function l(e,c,t){if(e[0]!=="seal"||e.length!==1&&e.length!==3||e.length===3&&e[1]!=="--project-root")return t.error("usage: planning-research seal [--project-root <path>] < review.json"),1;try{const n=await a(c),r=o(e.length===3?e[2]:process.cwd(),n);return t.log(JSON.stringify({ok:!0,epicId:r.epicId,researchReceiptId:r.researchReceiptId,qaEvidenceId:r.qaEvidenceId,publicSafe:!0})),0}catch(n){const r=n instanceof Error?n.message:"",i=/^planning-research-[a-z-]+$/.test(r)?r:"planning-research-seal-failed";return t.error(JSON.stringify({ok:!1,reasonCode:i,publicSafe:!0})),1}}export{h as planningResearchCliHandler,l as planningResearchCliHandlerWithIO};
+import { sealPlanningResearch } from '../private-execution/planning-research-checkpoint.js';
+const MAX_REVIEW_BYTES = 64 * 1024;
+async function readBoundedReview(input) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of input) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += bytes.length;
+        if (size > MAX_REVIEW_BYTES)
+            throw new Error('planning-research-review-too-large');
+        chunks.push(bytes);
+    }
+    if (size === 0)
+        throw new Error('planning-research-review-missing');
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
+/** The root supplies reviewed P02 evidence through stdin; no agent output is auto-accepted. */
+export async function planningResearchCliHandler(args) {
+    return planningResearchCliHandlerWithIO(args, process.stdin, console);
+}
+export async function planningResearchCliHandlerWithIO(args, input, output) {
+    if (args[0] !== 'seal' || args.length !== 1 && args.length !== 3
+        || args.length === 3 && args[1] !== '--project-root') {
+        output.error('usage: planning-research seal [--project-root <path>] < review.json');
+        return 1;
+    }
+    try {
+        const review = await readBoundedReview(input);
+        const receipt = sealPlanningResearch(args.length === 3 ? args[2] : process.cwd(), review);
+        output.log(JSON.stringify({ ok: true, epicId: receipt.epicId,
+            researchReceiptId: receipt.researchReceiptId,
+            qaEvidenceId: receipt.qaEvidenceId, publicSafe: true }));
+        return 0;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : '';
+        const reasonCode = /^planning-research-[a-z-]+$/.test(message)
+            ? message : 'planning-research-seal-failed';
+        output.error(JSON.stringify({ ok: false, reasonCode, publicSafe: true }));
+        return 1;
+    }
+}

package/packages/client/dist/commands/private-session.js

@@ -1 +1,75 @@
-import{validatePrivateYoloImplementation as l}from"../private-execution/implementation-validation.js";import{renewPrivateYoloSessionLease as f}from"../private-execution/session-lease.js";import{acceptPrivateYoloDiagnosisRootReview as m,acceptPrivateYoloResearchRootReview as h,acceptPrivateYoloSpecificationRootReview as w,acceptPrivateYoloTasksRootReview as y,acceptPrivateYoloImplementationRootReview as R,acceptPrivateYoloRefactorAdvisoryRootReview as x,acceptPrivateYoloTestValidationRootReview as S,acceptPrivateYoloQaRootReview as j}from"../private-execution/diagnosis-root-review.js";const s={"accept-project-memory":P,"accept-qa":j,"accept-test-validation":S,"accept-refactor-advisory":x,"validate-implementation":l,"accept-implementation":R,"accept-diagnosis":m,"accept-research":h,"accept-specification":w,"accept-tasks":y};import{acceptPrivateYoloProjectMemoryRootReview as P,discardPrivateYoloRejectedCandidate as Y,inspectPrivateYoloRejectedCandidate as k}from"../private-execution/isolated-session.js";async function O(e){if(!["inspect-rejected","discard-rejected","renew-lease",...Object.keys(s)].includes(e[0]??"")||e.length!==1&&e.length!==3||e.length===3&&e[1]!=="--project-root")return console.error("usage: private-session <inspect-rejected|discard-rejected|renew-lease|accept-diagnosis|accept-research|accept-specification|accept-tasks|validate-implementation|accept-implementation|accept-refactor-advisory|accept-test-validation|accept-qa|accept-project-memory> [--project-root <path>] < root-request.json"),1;try{const o=[];let d=0;for await(const p of process.stdin){const a=Buffer.from(p);if(d+=a.length,d>16384)throw new Error("input-too-large");o.push(a)}const i=JSON.parse(Buffer.concat(o).toString("utf8"));if(Object.hasOwn(s,e[0])){const p=s[e[0]],a=await p(e.length===3?e[2]:process.cwd(),i);return console.log(JSON.stringify({ok:!0,result:a,publicSafe:!0})),0}if(!i||typeof i!="object"||Array.isArray(i))throw new Error("input-invalid");const t=i,c=e[0]==="discard-rejected",r=e[0]==="renew-lease",v=["schemaVersion","storyId","graphRevision","executorStopped",...c?["expectedCandidateDigest","authorizeDiscard"]:[],...r?["expectedSnapshotSha","expiresAt"]:[]];if(Object.keys(t).sort().join("|")!==v.sort().join("|")||t.schemaVersion!==(r?"PrivateYoloSessionLeaseRequest/1":"PrivateYoloRejectedCandidateRequest/1")||typeof t.storyId!="string"||typeof t.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(t.graphRevision)||t.executorStopped!==!0||c&&(t.authorizeDiscard!==!0||typeof t.expectedCandidateDigest!="string")||r&&(typeof t.expectedSnapshotSha!="string"||typeof t.expiresAt!="string"))throw new Error("input-invalid");const n=e.length===3?e[2]:process.cwd(),u=r?await f(n,t.storyId,t.graphRevision,{executorStopped:!0,expectedSnapshotSha:t.expectedSnapshotSha,expiresAt:t.expiresAt}):c?await Y(n,t.storyId,t.graphRevision,{expectedCandidateDigest:t.expectedCandidateDigest,executorStopped:!0,authorizeDiscard:!0}):await k(n,t.storyId,t.graphRevision,!0);return console.log(JSON.stringify({ok:!0,result:u,publicSafe:!0})),0}catch{const o=e[0]==="accept-project-memory"?"private-root-memory-acceptance-unverified":e[0]==="accept-qa"?"private-execution-qa-root-review-unverified":e[0]==="accept-test-validation"?"private-execution-test-validation-root-review-unverified":e[0]==="accept-refactor-advisory"?"private-execution-refactor-advisory-root-review-unverified":e[0]==="validate-implementation"?"private-execution-implementation-validation-unverified":e[0]==="accept-implementation"?"private-execution-implementation-root-review-unverified":e[0]==="accept-diagnosis"?"private-execution-diagnosis-root-review-unverified":e[0]==="accept-research"?"private-execution-research-root-review-unverified":e[0]==="accept-specification"?"private-execution-specification-root-review-unverified":e[0]==="accept-tasks"?"private-execution-tasks-root-review-unverified":e[0]==="renew-lease"?"private-execution-session-renewal-unverified":"private-execution-rejected-candidate-unverified";return console.error(JSON.stringify({ok:!1,reasonCode:o,publicSafe:!0})),1}}export{O as privateSessionCliHandler};
+import { validatePrivateYoloImplementation } from '../private-execution/implementation-validation.js';
+import { renewPrivateYoloSessionLease } from '../private-execution/session-lease.js';
+import { acceptPrivateYoloDiagnosisRootReview, acceptPrivateYoloResearchRootReview, acceptPrivateYoloSpecificationRootReview, acceptPrivateYoloTasksRootReview, acceptPrivateYoloImplementationRootReview, acceptPrivateYoloRefactorAdvisoryRootReview, acceptPrivateYoloTestValidationRootReview, acceptPrivateYoloQaRootReview } from '../private-execution/diagnosis-root-review.js';
+const reviewers = {
+    'accept-project-memory': acceptPrivateYoloProjectMemoryRootReview,
+    'accept-qa': acceptPrivateYoloQaRootReview,
+    'accept-test-validation': acceptPrivateYoloTestValidationRootReview,
+    'accept-refactor-advisory': acceptPrivateYoloRefactorAdvisoryRootReview,
+    'validate-implementation': validatePrivateYoloImplementation,
+    'accept-implementation': acceptPrivateYoloImplementationRootReview,
+    'accept-diagnosis': acceptPrivateYoloDiagnosisRootReview,
+    'accept-research': acceptPrivateYoloResearchRootReview,
+    'accept-specification': acceptPrivateYoloSpecificationRootReview,
+    'accept-tasks': acceptPrivateYoloTasksRootReview,
+};
+import { acceptPrivateYoloProjectMemoryRootReview, discardPrivateYoloRejectedCandidate, inspectPrivateYoloRejectedCandidate } from '../private-execution/isolated-session.js';
+export async function privateSessionCliHandler(args) {
+    if (!['inspect-rejected', 'discard-rejected', 'renew-lease', ...Object.keys(reviewers)].includes(args[0] ?? '')
+        || args.length !== 1 && args.length !== 3 || args.length === 3 && args[1] !== '--project-root') {
+        console.error('usage: private-session <inspect-rejected|discard-rejected|renew-lease|accept-diagnosis|accept-research|accept-specification|accept-tasks|validate-implementation|accept-implementation|accept-refactor-advisory|accept-test-validation|accept-qa|accept-project-memory> [--project-root <path>] < root-request.json');
+        return 1;
+    }
+    try {
+        const chunks = [];
+        let size = 0;
+        for await (const chunk of process.stdin) {
+            const bytes = Buffer.from(chunk);
+            size += bytes.length;
+            if (size > 16384)
+                throw new Error('input-too-large');
+            chunks.push(bytes);
+        }
+        const input = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        if (Object.hasOwn(reviewers, args[0])) {
+            const accept = reviewers[args[0]];
+            const result = await accept(args.length === 3 ? args[2] : process.cwd(), input);
+            console.log(JSON.stringify({ ok: true, result, publicSafe: true }));
+            return 0;
+        }
+        if (!input || typeof input !== 'object' || Array.isArray(input))
+            throw new Error('input-invalid');
+        const r = input, discard = args[0] === 'discard-rejected', renew = args[0] === 'renew-lease';
+        const keys = ['schemaVersion', 'storyId', 'graphRevision', 'executorStopped',
+            ...(discard ? ['expectedCandidateDigest', 'authorizeDiscard'] : []),
+            ...(renew ? ['expectedSnapshotSha', 'expiresAt'] : [])];
+        if (Object.keys(r).sort().join('|') !== keys.sort().join('|')
+            || r.schemaVersion !== (renew ? 'PrivateYoloSessionLeaseRequest/1' : 'PrivateYoloRejectedCandidateRequest/1')
+            || typeof r.storyId !== 'string' || typeof r.graphRevision !== 'string'
+            || !/^[a-f0-9]{64}$/.test(r.graphRevision) || r.executorStopped !== true
+            || discard && (r.authorizeDiscard !== true || typeof r.expectedCandidateDigest !== 'string')
+            || renew && (typeof r.expectedSnapshotSha !== 'string' || typeof r.expiresAt !== 'string'))
+            throw new Error('input-invalid');
+        const root = args.length === 3 ? args[2] : process.cwd();
+        const result = renew ? await renewPrivateYoloSessionLease(root, r.storyId, r.graphRevision, { executorStopped: true, expectedSnapshotSha: r.expectedSnapshotSha, expiresAt: r.expiresAt })
+            : discard ? await discardPrivateYoloRejectedCandidate(root, r.storyId, r.graphRevision, { expectedCandidateDigest: r.expectedCandidateDigest, executorStopped: true, authorizeDiscard: true })
+                : await inspectPrivateYoloRejectedCandidate(root, r.storyId, r.graphRevision, true);
+        console.log(JSON.stringify({ ok: true, result, publicSafe: true }));
+        return 0;
+    }
+    catch {
+        const reasonCode = args[0] === 'accept-project-memory' ? 'private-root-memory-acceptance-unverified'
+            : args[0] === 'accept-qa' ? 'private-execution-qa-root-review-unverified'
+                : args[0] === 'accept-test-validation' ? 'private-execution-test-validation-root-review-unverified'
+                    : args[0] === 'accept-refactor-advisory' ? 'private-execution-refactor-advisory-root-review-unverified'
+                        : args[0] === 'validate-implementation' ? 'private-execution-implementation-validation-unverified'
+                            : args[0] === 'accept-implementation' ? 'private-execution-implementation-root-review-unverified'
+                                : args[0] === 'accept-diagnosis' ? 'private-execution-diagnosis-root-review-unverified'
+                                    : args[0] === 'accept-research' ? 'private-execution-research-root-review-unverified'
+                                        : args[0] === 'accept-specification' ? 'private-execution-specification-root-review-unverified'
+                                            : args[0] === 'accept-tasks' ? 'private-execution-tasks-root-review-unverified'
+                                                : args[0] === 'renew-lease' ? 'private-execution-session-renewal-unverified' : 'private-execution-rejected-candidate-unverified';
+        console.error(JSON.stringify({ ok: false, reasonCode, publicSafe: true }));
+        return 1;
+    }
+}

package/packages/client/dist/commands/property-qa.js

@@ -1 +1,139 @@
-import{inspectPropertyTestCatalog as d,confirmPropertyTestPlan as w}from"../private-execution/property-test-plan.js";import{savePropertyTestChoices as g}from"../private-execution/property-test-choices.js";async function h(n){const r=n[0];let o=process.cwd(),i="plain",p=!1,c=!1;const f=new Set;for(let e=1;e<n.length;e++){const t=n[e];if(f.has(t))return console.error("property-test-invalid-cli-argument"),1;if(f.add(t),t==="--project-root"&&n[e+1])o=n[++e];else if(t==="--format"&&(n[e+1]==="plain"||n[e+1]==="json"))i=n[++e];else if(t==="--authorize-run")p=!0;else if(t==="--authorize-review")c=!0;else return console.error("property-test-invalid-cli-argument"),1}if(r!=="inspect"&&r!=="confirm"&&r!=="save"&&r!=="candidate"&&r!=="verify"&&r!=="review-plan"&&r!=="review-accept"&&r!=="review-status")return console.error("Usage: neocortex-client property-qa inspect|confirm|save|candidate|verify|review-plan|review-accept|review-status --project-root <path> --format json|plain"),1;if(p!==(r==="verify")||c!==(r==="review-accept"))return console.error(r==="review-accept"||c?"property-test-review-authorization-required":"property-test-run-authorization-required"),1;try{if(r==="inspect"){const e=d(o);if(i==="json")console.log(JSON.stringify(e));else{console.log(`PRD: ${e.prdPath} (${e.prdSha256})`);for(const t of e.aggregates)console.log(`${t.name}: ${t.invariantCount} invariants; candidates: ${t.suggestedFiles.join(", ")||"(none)"}`);console.log("Explicit mapping, language and numRuns are required for confirm. No tests were written.")}}else if(r==="verify"){const{verifyPropertyTestRuntime:e}=await import("../private-execution/property-test-runtime.js"),t=e(o);return console.log(i==="json"?JSON.stringify(t):`property-test runtime ${t.outcome}: ${t.reasonCode}; QA not accepted`),t.executionVerified?0:1}else if(r==="review-plan"){const{inspectPropertyTestReviewPlan:e}=await import("../private-execution/property-test-review.js"),t=e(o);console.log(i==="json"?JSON.stringify(t):`property-test review plan ${t.candidateSha256}: ${t.invariants.length} invariant hashes; no QA accepted`)}else if(r==="review-accept"){let e="";for await(const u of process.stdin)if(e+=String(u),Buffer.byteLength(e)>256*1024)throw new Error("property-test-review-too-large");const{parseDocument:t}=await import("yaml"),s=t(e,{strict:!0,uniqueKeys:!0,schema:"core",customTags:[]});if(s.errors.length||s.warnings.length)throw new Error("property-test-review-unverified");const{acceptPropertyTestSemanticReview:l}=await import("../private-execution/property-test-review.js"),a=l(o,JSON.parse(e));console.log(i==="json"?JSON.stringify(a):`property-test review accepted: ${a.invariantCount} invariants, ${a.passedTests} passed and ${a.causalFailedTests} causal failures`)}else if(r==="review-status"){const{readPropertyTestReviewReceipt:e}=await import("../private-execution/property-test-review.js"),t=e(o);console.log(i==="json"?JSON.stringify(t):`property-test review accepted: ${t.invariantCount} invariants at ${t.candidateSha256}`)}else if(r==="candidate"){const{inspectPropertyTestCandidate:e}=await import("../private-execution/property-test-candidate.js"),t=e(o);console.log(i==="json"?JSON.stringify(t):`property-test candidate ${t.artifactSha256}: ${t.testFileCount} test files; execution and QA unverified`)}else{let e="";for await(const l of process.stdin)if(e+=String(l),Buffer.byteLength(e)>32768)throw new Error("property-test-choices-too-large");const t=JSON.parse(e),s=r==="save"?g(o,t):w(o,t);i==="json"?console.log(JSON.stringify(s)):(console.log(`property-test plan ${s.planSha256}: ${s.writeSet.join(", ")}`),console.log(r==="save"?"Choices saved in the private Git common-dir; no tests were written and no QA checkpoint was accepted.":"Read-only preflight: no tests were written and no QA checkpoint was accepted."))}return 0}catch(e){const t=e instanceof Error&&/^property-test-[a-z-]+$/.test(e.message)?e.message:"property-test-preflight-failed";return console.error(t),1}}export{h as propertyQaCliHandler};
+/** Local-only operator preflight for protected property-test. */
+import { inspectPropertyTestCatalog, confirmPropertyTestPlan } from '../private-execution/property-test-plan.js';
+import { savePropertyTestChoices } from '../private-execution/property-test-choices.js';
+export async function propertyQaCliHandler(args) {
+    const action = args[0];
+    let projectRoot = process.cwd();
+    let format = 'plain';
+    let authorizeRun = false;
+    let authorizeReview = false;
+    const seen = new Set();
+    for (let index = 1; index < args.length; index++) {
+        const token = args[index];
+        if (seen.has(token)) {
+            console.error('property-test-invalid-cli-argument');
+            return 1;
+        }
+        seen.add(token);
+        if (token === '--project-root' && args[index + 1])
+            projectRoot = args[++index];
+        else if (token === '--format' && (args[index + 1] === 'plain' || args[index + 1] === 'json')) {
+            format = args[++index];
+        }
+        else if (token === '--authorize-run') {
+            authorizeRun = true;
+        }
+        else if (token === '--authorize-review') {
+            authorizeReview = true;
+        }
+        else {
+            console.error('property-test-invalid-cli-argument');
+            return 1;
+        }
+    }
+    if (action !== 'inspect' && action !== 'confirm' && action !== 'save'
+        && action !== 'candidate' && action !== 'verify' && action !== 'review-plan'
+        && action !== 'review-accept' && action !== 'review-status') {
+        console.error('Usage: neocortex-client property-qa inspect|confirm|save|candidate|verify|review-plan|review-accept|review-status --project-root <path> --format json|plain');
+        return 1;
+    }
+    if (authorizeRun !== (action === 'verify') || authorizeReview !== (action === 'review-accept')) {
+        console.error(action === 'review-accept' || authorizeReview
+            ? 'property-test-review-authorization-required' : 'property-test-run-authorization-required');
+        return 1;
+    }
+    try {
+        if (action === 'inspect') {
+            const result = inspectPropertyTestCatalog(projectRoot);
+            if (format === 'json')
+                console.log(JSON.stringify(result));
+            else {
+                console.log(`PRD: ${result.prdPath} (${result.prdSha256})`);
+                for (const item of result.aggregates) {
+                    console.log(`${item.name}: ${item.invariantCount} invariants; candidates: ${item.suggestedFiles.join(', ') || '(none)'}`);
+                }
+                console.log('Explicit mapping, language and numRuns are required for confirm. No tests were written.');
+            }
+        }
+        else if (action === 'verify') {
+            const { verifyPropertyTestRuntime } = await import('../private-execution/property-test-runtime.js');
+            const result = verifyPropertyTestRuntime(projectRoot);
+            if (format === 'json')
+                console.log(JSON.stringify(result));
+            else
+                console.log(`property-test runtime ${result.outcome}: ${result.reasonCode}; QA not accepted`);
+            return result.executionVerified ? 0 : 1;
+        }
+        else if (action === 'review-plan') {
+            const { inspectPropertyTestReviewPlan } = await import('../private-execution/property-test-review.js');
+            const result = inspectPropertyTestReviewPlan(projectRoot);
+            if (format === 'json')
+                console.log(JSON.stringify(result));
+            else
+                console.log(`property-test review plan ${result.candidateSha256}: ${result.invariants.length} invariant hashes; no QA accepted`);
+        }
+        else if (action === 'review-accept') {
+            let input = '';
+            for await (const chunk of process.stdin) {
+                input += String(chunk);
+                if (Buffer.byteLength(input) > 256 * 1024)
+                    throw new Error('property-test-review-too-large');
+            }
+            const { parseDocument } = await import('yaml');
+            const document = parseDocument(input, { strict: true, uniqueKeys: true,
+                schema: 'core', customTags: [] });
+            if (document.errors.length || document.warnings.length) {
+                throw new Error('property-test-review-unverified');
+            }
+            const { acceptPropertyTestSemanticReview } = await import('../private-execution/property-test-review.js');
+            const result = acceptPropertyTestSemanticReview(projectRoot, JSON.parse(input));
+            if (format === 'json')
+                console.log(JSON.stringify(result));
+            else
+                console.log(`property-test review accepted: ${result.invariantCount} invariants, ${result.passedTests} passed and ${result.causalFailedTests} causal failures`);
+        }
+        else if (action === 'review-status') {
+            const { readPropertyTestReviewReceipt } = await import('../private-execution/property-test-review.js');
+            const result = readPropertyTestReviewReceipt(projectRoot);
+            if (format === 'json')
+                console.log(JSON.stringify(result));
+            else
+                console.log(`property-test review accepted: ${result.invariantCount} invariants at ${result.candidateSha256}`);
+        }
+        else if (action === 'candidate') {
+            const { inspectPropertyTestCandidate } = await import('../private-execution/property-test-candidate.js');
+            const result = inspectPropertyTestCandidate(projectRoot);
+            if (format === 'json')
+                console.log(JSON.stringify(result));
+            else
+                console.log(`property-test candidate ${result.artifactSha256}: ${result.testFileCount} test files; execution and QA unverified`);
+        }
+        else {
+            let input = '';
+            for await (const chunk of process.stdin) {
+                input += String(chunk);
+                if (Buffer.byteLength(input) > 32_768)
+                    throw new Error('property-test-choices-too-large');
+            }
+            const choices = JSON.parse(input);
+            const result = action === 'save'
+                ? savePropertyTestChoices(projectRoot, choices)
+                : confirmPropertyTestPlan(projectRoot, choices);
+            if (format === 'json')
+                console.log(JSON.stringify(result));
+            else {
+                console.log(`property-test plan ${result.planSha256}: ${result.writeSet.join(', ')}`);
+                console.log(action === 'save'
+                    ? 'Choices saved in the private Git common-dir; no tests were written and no QA checkpoint was accepted.'
+                    : 'Read-only preflight: no tests were written and no QA checkpoint was accepted.');
+            }
+        }
+        return 0;
+    }
+    catch (error) {
+        const message = error instanceof Error && /^property-test-[a-z-]+$/.test(error.message)
+            ? error.message : 'property-test-preflight-failed';
+        console.error(message);
+        return 1;
+    }
+}

package/packages/client/dist/commands/qa-control.js

@@ -1 +1,16 @@
-import{requestRootControl as e,refactorControlCliHandler as a}from"./refactor-control.js";async function c(o,t=fetch){try{return await e("qa",o,t)}catch(r){throw r instanceof Error&&/^refactor-root-control-[a-z-]+$/.test(r.message)?new Error(r.message.replace(/^refactor-/,"qa-")):r}}function l(o){return a(o,"qa")}export{l as qaControlCliHandler,c as requestQaControl};
+/** Signed mechanical QA control; no stages, paths or verdicts are uploaded. */
+import { requestRootControl, refactorControlCliHandler } from './refactor-control.js';
+export async function requestQaControl(input, fetchFn = fetch) {
+    try {
+        return await requestRootControl('qa', input, fetchFn);
+    }
+    catch (error) {
+        if (error instanceof Error && /^refactor-root-control-[a-z-]+$/.test(error.message)) {
+            throw new Error(error.message.replace(/^refactor-/, 'qa-'));
+        }
+        throw error;
+    }
+}
+export function qaControlCliHandler(args) {
+    return refactorControlCliHandler(args, 'qa');
+}