@ornexus/neocortex 4.60.66 → 4.60.68

package/packages/client/dist/git/secure-filesystem-boundary.js

@@ -1,4 +1,17 @@
-import{spawn as b}from"node:child_process";import{randomBytes as B}from"node:crypto";import{lstat as w,stat as x}from"node:fs/promises";const T=String.raw`
+/**
+ * Handle-anchored filesystem mutations for private lifecycle namespaces.
+ *
+ * Node does not expose openat(2). A short-lived helper is started with the
+ * validated parent as its cwd, verifies the cwd device/inode before effects,
+ * and performs every final mutation with relative basenames. Once the OS has
+ * handed the cwd to the helper, renaming/replacing the public parent path can
+ * no longer redirect the effect. Platforms without that POSIX guarantee fail
+ * closed instead of using a pathname fallback.
+ */
+import { spawn } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { lstat, stat } from 'node:fs/promises';
+const HELPER = String.raw `
 const fs = require('node:fs');
 const crypto = require('node:crypto');
 const [op, expectedDev, expectedIno, name, temporary, expectedSha] = process.argv.slice(1);
@@ -93,7 +106,8 @@ if (op === 'mkdir' || op === 'mkdir-exclusive') {
   if (safeExisting(name, 'directory')) fail('secure-filesystem-directory-remained');
 } else fail('secure-filesystem-operation-invalid');
 try { const parent = fs.openSync('.', fs.constants.O_RDONLY); fs.fsyncSync(parent); fs.closeSync(parent); } catch {}
-`,k=String.raw`
+`;
+const GIT_HELPER = String.raw `
 const fs = require('node:fs');
 const cp = require('node:child_process');
 const [expectedParentDev, expectedParentIno, name, expectedChildDev, expectedChildIno, encodedArgs, handshake, binary] = process.argv.slice(1);
@@ -145,6 +159,169 @@ if (result.error) fail('secure-git-command-error:' + String(result.error.code ||
 if (result.status !== 0) fail('secure-git-command-failed:' + String(Number.isInteger(result.status) ? result.status : 1));
 if (result.stdout && result.stdout.length > maxOutputBytes) fail('secure-git-output-too-large');
 if (result.stdout) process.stdout.write(result.stdout);
-`;function v(r=process.platform){return r!=="win32"}async function G(r,t,e,i={}){const s=`.${t}.${process.pid}.${B(8).toString("hex")}.tmp`;await y(r,["write",t,s],Buffer.isBuffer(e)?e:Buffer.from(e),i)}async function P(r,t,e,i,s={}){const n=`.${t}.${process.pid}.${B(8).toString("hex")}.tmp`;await y(r,["write-cas",t,n,i],Buffer.isBuffer(e)?e:Buffer.from(e),s)}async function H(r,t,e={}){await y(r,["remove",t],void 0,e)}async function W(r,t,e={}){await y(r,["mkdir",t],void 0,e)}async function $(r,t){const i=(await y(r,["mkdir-exclusive",t])).toString("utf8").match(/^secure-filesystem-identity:([0-9]+):([0-9]+)$/);if(!i)throw new Error("secure-filesystem-created-identity-missing");return Object.freeze({dev:i[1],ino:i[2]})}async function X(r){if(!v())throw new Error("secure-filesystem-platform-unsupported");const t=await w(r,{bigint:!0}),e=await x(r,{bigint:!0});if(t.isSymbolicLink()||!t.isDirectory()||!e.isDirectory()||t.dev!==e.dev||t.ino!==e.ino)throw new Error("secure-filesystem-directory-unsafe");return Object.freeze({dev:String(e.dev),ino:String(e.ino)})}async function Y(r,t,e,i,s,n={}){return O("git",r,t,e,i,s,n)}async function M(r,t,e,i,s,n={}){return O("node",r,t,e,i,s,n)}async function K(r,t,e,i){return O("npm",r,t,e,i)}async function O(r,t,e,i,s,n,f={}){if(!v(f.platform??process.platform))throw new Error("secure-filesystem-platform-unsupported");if(s.length===0||s.length>512||s.some(a=>typeof a!="string"||a.length>4096||a.includes("\0")))throw new Error("secure-git-args-invalid");const d=await x(t,{bigint:!0}),o=await w(t,{bigint:!0});if(!d.isDirectory()||o.isSymbolicLink()||!o.isDirectory()||d.dev!==o.dev||d.ino!==o.ino)throw new Error("secure-filesystem-parent-invalid");await f.beforeHandoff?.();const m=r==="git"?16*1024*1024:64*1024*1024;return await new Promise((a,p)=>{const l=f.afterHandoff?"1":"0",g=Buffer.from(JSON.stringify([...s])).toString("base64url"),c=b(process.execPath,["-e",k,String(d.dev),String(d.ino),e,i.dev,i.ino,g,l,r],{cwd:t,stdio:["pipe","pipe","pipe"]}),h=[],E=[];let S=0,_=!f.afterHandoff,I=!1;const N=async()=>{if(!I){I=!0;try{await f.afterHandoff?.(),_=!0,c.stdin.end(n===void 0?void 0:Buffer.isBuffer(n)?n:Buffer.from(n))}catch(u){c.kill(),p(u)}}};c.stdout.on("data",u=>{S+=u.length,S>m?c.kill():h.push(u)}),c.stderr.on("data",u=>{E.push(u),!_&&Buffer.concat(E).includes(Buffer.from(`secure-git-handoff-ready
-`))&&N()}),c.once("error",p),c.once("close",u=>{if(u===0&&S<=m)return a(Buffer.concat(h));const R=Buffer.concat(E).toString("utf8").split(`
-`).find(D=>D.startsWith("secure-git-")&&D!=="secure-git-handoff-ready")??(S>m?"secure-git-output-too-large":"secure-git-helper-failed");p(new Error(R))}),f.afterHandoff||N()})}async function q(r,t,e){await y(r,["create-owned-directory",t],Buffer.isBuffer(e)?e:Buffer.from(e))}async function J(r,t,e,i={}){await y(r,["rename-directory",t,e],void 0,i)}async function U(r,t,e={}){await y(r,["remove-directory",t],void 0,e)}async function y(r,t,e,i={}){if(!v(i.platform??process.platform))throw new Error("secure-filesystem-platform-unsupported");const s=await x(r,{bigint:!0});if(!s.isDirectory())throw new Error("secure-filesystem-parent-invalid");if((await w(r,{bigint:!0})).isSymbolicLink())throw new Error("secure-filesystem-parent-symlink");return await i.beforeHandoff?.(),await new Promise((f,d)=>{const o=b(process.execPath,["-e",T,...t.slice(0,1),String(s.dev),String(s.ino),...t.slice(1)],{cwd:r,stdio:["pipe","pipe","pipe"]}),m=[];let a=0;const p=[];o.stdout.on("data",l=>{a+=l.length,a>1024?o.kill():m.push(l)}),o.stderr.on("data",l=>p.push(l)),o.once("error",d),o.once("close",l=>{if(l===0&&a<=1024)return f(Buffer.concat(m));const g=Buffer.concat(p).toString("utf8")||"secure-filesystem-helper-failed",c=new Error(g),h=g.match(/^secure-filesystem-os:(E[A-Z0-9]+)$/)?.[1];h&&(c.code=h),g==="secure-filesystem-entry-exists"&&(c.code="EEXIST"),d(c)}),o.stdin.end(e)})}export{G as anchoredAtomicWriteFile,P as anchoredCompareAndSwapFile,$ as anchoredCreateDirectory,q as anchoredCreateOwnedDirectory,X as anchoredDirectoryIdentity,W as anchoredEnsureDirectory,Y as anchoredExecuteGit,M as anchoredExecuteNode,K as anchoredExecuteNpm,U as anchoredRemoveDirectory,H as anchoredRemoveFile,J as anchoredRenameDirectory,v as secureFilesystemBoundaryAvailable};
+`;
+export function secureFilesystemBoundaryAvailable(platform = process.platform) {
+    return platform !== 'win32';
+}
+export async function anchoredAtomicWriteFile(parent, name, content, options = {}) {
+    const temporary = `.${name}.${process.pid}.${randomBytes(8).toString('hex')}.tmp`;
+    await runAnchored(parent, ['write', name, temporary], Buffer.isBuffer(content) ? content : Buffer.from(content), options);
+}
+/** Replace a regular tracked file only while its exact preimage still matches. */
+export async function anchoredCompareAndSwapFile(parent, name, content, expectedSha256, options = {}) {
+    const temporary = `.${name}.${process.pid}.${randomBytes(8).toString('hex')}.tmp`;
+    await runAnchored(parent, ['write-cas', name, temporary, expectedSha256], Buffer.isBuffer(content) ? content : Buffer.from(content), options);
+}
+export async function anchoredRemoveFile(parent, name, options = {}) {
+    await runAnchored(parent, ['remove', name], undefined, options);
+}
+export async function anchoredEnsureDirectory(parent, name, options = {}) {
+    await runAnchored(parent, ['mkdir', name], undefined, options);
+}
+export async function anchoredCreateDirectory(parent, name) {
+    const output = (await runAnchored(parent, ['mkdir-exclusive', name])).toString('utf8');
+    const match = output.match(/^secure-filesystem-identity:([0-9]+):([0-9]+)$/);
+    if (!match)
+        throw new Error('secure-filesystem-created-identity-missing');
+    return Object.freeze({ dev: match[1], ino: match[2] });
+}
+export async function anchoredDirectoryIdentity(path) {
+    if (!secureFilesystemBoundaryAvailable())
+        throw new Error('secure-filesystem-platform-unsupported');
+    const entry = await lstat(path, { bigint: true });
+    const identity = await stat(path, { bigint: true });
+    if (entry.isSymbolicLink() || !entry.isDirectory() || !identity.isDirectory()
+        || entry.dev !== identity.dev || entry.ino !== identity.ino) {
+        throw new Error('secure-filesystem-directory-unsafe');
+    }
+    return Object.freeze({ dev: String(identity.dev), ino: String(identity.ino) });
+}
+/** Execute Git only after a helper owns and revalidates the sandbox directory cwd. */
+export async function anchoredExecuteGit(parent, name, expectedChild, args, input, options = {}) {
+    return runAnchoredCommand('git', parent, name, expectedChild, args, input, options);
+}
+/** Gate commands inherit a pinned cwd, never a mutable sandbox pathname. */
+export async function anchoredExecuteNode(parent, name, expectedChild, args, input, options = {}) {
+    return runAnchoredCommand('node', parent, name, expectedChild, args, input, options);
+}
+export async function anchoredExecuteNpm(parent, name, expectedChild, args) {
+    return runAnchoredCommand('npm', parent, name, expectedChild, args);
+}
+async function runAnchoredCommand(binary, parent, name, expectedChild, args, input, options = {}) {
+    if (!secureFilesystemBoundaryAvailable(options.platform ?? process.platform)) {
+        throw new Error('secure-filesystem-platform-unsupported');
+    }
+    if (args.length === 0 || args.length > 512
+        || args.some((arg) => typeof arg !== 'string' || arg.length > 4096 || arg.includes('\0'))) {
+        throw new Error('secure-git-args-invalid');
+    }
+    const identity = await stat(parent, { bigint: true });
+    const entry = await lstat(parent, { bigint: true });
+    if (!identity.isDirectory() || entry.isSymbolicLink() || !entry.isDirectory()
+        || identity.dev !== entry.dev || identity.ino !== entry.ino) {
+        throw new Error('secure-filesystem-parent-invalid');
+    }
+    await options.beforeHandoff?.();
+    const maxOutputBytes = binary === 'git' ? 16 * 1024 * 1024 : 64 * 1024 * 1024;
+    return await new Promise((resolveProcess, rejectProcess) => {
+        const handshake = options.afterHandoff ? '1' : '0';
+        const encodedArgs = Buffer.from(JSON.stringify([...args])).toString('base64url');
+        const child = spawn(process.execPath, [
+            '-e', GIT_HELPER, String(identity.dev), String(identity.ino), name,
+            expectedChild.dev, expectedChild.ino, encodedArgs, handshake, binary,
+        ], { cwd: parent, stdio: ['pipe', 'pipe', 'pipe'] });
+        const output = [];
+        const errors = [];
+        let outputBytes = 0;
+        let handoffObserved = !options.afterHandoff;
+        let hookStarted = false;
+        const finishInput = async () => {
+            if (hookStarted)
+                return;
+            hookStarted = true;
+            try {
+                await options.afterHandoff?.();
+                handoffObserved = true;
+                child.stdin.end(input === undefined ? undefined : Buffer.isBuffer(input) ? input : Buffer.from(input));
+            }
+            catch (error) {
+                child.kill();
+                rejectProcess(error);
+            }
+        };
+        child.stdout.on('data', (chunk) => {
+            outputBytes += chunk.length;
+            if (outputBytes > maxOutputBytes)
+                child.kill();
+            else
+                output.push(chunk);
+        });
+        child.stderr.on('data', (chunk) => {
+            errors.push(chunk);
+            if (!handoffObserved && Buffer.concat(errors).includes(Buffer.from('secure-git-handoff-ready\n')))
+                void finishInput();
+        });
+        child.once('error', rejectProcess);
+        child.once('close', (code) => {
+            if (code === 0 && outputBytes <= maxOutputBytes)
+                return resolveProcess(Buffer.concat(output));
+            const raw = Buffer.concat(errors).toString('utf8');
+            const reason = raw.split('\n').find((line) => line.startsWith('secure-git-') && line !== 'secure-git-handoff-ready')
+                ?? (outputBytes > maxOutputBytes ? 'secure-git-output-too-large' : 'secure-git-helper-failed');
+            rejectProcess(new Error(reason));
+        });
+        if (!options.afterHandoff)
+            void finishInput();
+    });
+}
+export async function anchoredCreateOwnedDirectory(parent, name, owner) {
+    await runAnchored(parent, ['create-owned-directory', name], Buffer.isBuffer(owner) ? owner : Buffer.from(owner));
+}
+export async function anchoredRenameDirectory(parent, sourceName, destinationName, options = {}) {
+    await runAnchored(parent, ['rename-directory', sourceName, destinationName], undefined, options);
+}
+export async function anchoredRemoveDirectory(parent, name, options = {}) {
+    await runAnchored(parent, ['remove-directory', name], undefined, options);
+}
+async function runAnchored(parent, args, input, options = {}) {
+    if (!secureFilesystemBoundaryAvailable(options.platform ?? process.platform))
+        throw new Error('secure-filesystem-platform-unsupported');
+    const identity = await stat(parent, { bigint: true });
+    if (!identity.isDirectory())
+        throw new Error('secure-filesystem-parent-invalid');
+    const entry = await lstat(parent, { bigint: true });
+    if (entry.isSymbolicLink())
+        throw new Error('secure-filesystem-parent-symlink');
+    await options.beforeHandoff?.();
+    return await new Promise((resolveProcess, rejectProcess) => {
+        const child = spawn(process.execPath, ['-e', HELPER, ...args.slice(0, 1), String(identity.dev), String(identity.ino), ...args.slice(1)], {
+            cwd: parent,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const output = [];
+        let outputBytes = 0;
+        const errors = [];
+        child.stdout.on('data', (chunk) => {
+            outputBytes += chunk.length;
+            if (outputBytes > 1024)
+                child.kill();
+            else
+                output.push(chunk);
+        });
+        child.stderr.on('data', (chunk) => errors.push(chunk));
+        child.once('error', rejectProcess);
+        child.once('close', (code) => {
+            if (code === 0 && outputBytes <= 1024)
+                return resolveProcess(Buffer.concat(output));
+            const message = Buffer.concat(errors).toString('utf8') || 'secure-filesystem-helper-failed';
+            const error = new Error(message);
+            const osCode = message.match(/^secure-filesystem-os:(E[A-Z0-9]+)$/)?.[1];
+            if (osCode)
+                error.code = osCode;
+            if (message === 'secure-filesystem-entry-exists')
+                error.code = 'EEXIST';
+            rejectProcess(error);
+        });
+        child.stdin.end(input);
+    });
+}

package/packages/client/dist/graph-retrieval/pre-command-hook.js

@@ -1 +1,284 @@
-import{createHash as v}from"node:crypto";import{existsSync as T,readFileSync as I,statSync as E}from"node:fs";import{join as h}from"node:path";import{DEFAULT_GRAPH_RETRIEVAL_BUDGETS as y,createGraphRetrievalMetadata as g,normalizeGraphRetrievalPath as i,resolveClientCommandContextPolicy as P}from"./shared-graph-retrieval-contract.js";import{admitInvocation as A}from"../../../shared/dist/invocation/index.js";const u="client-pre-command-v1",x="1970-01-01T00:00:00.000Z",R=new Set([".archive","_archive","_archives","archive","archives","archived"]),S=Object.freeze({exists:T,stat:E,readText:e=>I(e,"utf8")});function k(e){return A(e)}function $(e){const t=k(e);if(t.outcome!=="resolved")return null;const o=P(t.selection.commandId);return o?{policy:o,selection:t.selection}:null}function p(e){return v("sha256").update(e).digest("hex")}function m(e){const t=i(e),o=t.split("/").some(s=>R.has(s.toLowerCase()));return t.length===0||t.startsWith("/")||t.startsWith("..")||t.includes("/../")||o||/(^|\/)\.env(?:$|[./-])/i.test(t)||/(^|\/)(?:credentials?|secrets?|tokens?|private-prompts?|raw-logs?)(?:\.|\/|$)/i.test(t)||/\.(?:sqlite|db|pem|key|p12|pfx|crt|cer|der|bin)$/i.test(t)}function D(e,t,o){const s=i(t);if(m(s))return null;const r=h(e,s);if(!o.exists(r))return null;const n=o.stat(r);if(!n.isFile()||n.size>96*1024)return null;const a=o.readText(r);return{kind:"repo-path",path:s,contentHash:p(a).slice(0,16),mtimeMs:Math.floor(n.mtimeMs)}}function b(e){let t=e;const o=t;return t=t.replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi,"[REDACTED_EMAIL]"),t=t.replace(/\b(api[-_ ]?key|license[-_ ]?key|token|password|secret)\b\s*[:=]\s*[^\s`'"\])}]+/gi,"$1=[REDACTED_SECRET]"),t=t.replace(/\b(?:sk|pk|ghp|github_pat|pat)_[A-Za-z0-9_\-]{16,}\b/g,"[REDACTED_TOKEN]"),t=t.replace(/\b[A-Za-z0-9+/]{32,}={0,2}\b/g,"[REDACTED_TOKEN]"),t=t.replace(/<!--\s*(?:server|private|proprietary)[\s\S]*?-->/gi,"[REDACTED_PRIVATE_PROMPT]"),t=t.replace(/\b(?:private|proprietary|protected)\s+(?:prompt|workflow|step\s*body|orchestration)\b[^.!?\n]*/gi,"[REDACTED_PRIVATE_PROMPT]"),{text:t,redacted:t!==o}}function w(e,t=y.maxSnippetChars){const o=e.split(/\r?\n/).map(r=>r.trim()).filter(r=>r.length>0&&!r.startsWith("---")&&!r.startsWith("<!--")).slice(0,8).join(" "),s=b(o);return{summary:s.text.slice(0,t),redacted:s.redacted}}function G(e,t,o){const s=D(e,t.path,o);if(!s)return null;const r=o.readText(h(e,s.path)),n=w(r,t.maxSnippetChars);return{nodeType:t.nodeType,stableId:t.stableId,source:s,confidence:n.redacted?Math.min(t.confidence,.72):t.confidence,reasonCode:t.reasonCode,budgetCost:t.budgetCost,summary:n.summary,warnings:n.redacted?["redacted_sensitive_content"]:void 0,score:t.score}}function M(e){const t=`Public command ${e.commandId}; graphRetrieval profile ${e.retrievalProfile}; context is auxiliary, redacted, budgeted and non-authoritative.`;return{nodeType:"Command",stableId:`command:${e.commandId}`,source:{kind:"command",path:e.commandId,contentHash:p(t).slice(0,16)},confidence:.88,reasonCode:"command_surface_match",budgetCost:1,summary:t.slice(0,e.retrievalBudget.maxSnippetChars),score:90}}function z(e){const t=e.uiUxReview?.architectureDir;return t?[...e.positionals,t]:e.positionals}function _(e){return e.find(o=>/^@?docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/u.test(o))?.replace(/^@/u,"")??null}function B(e){return e.find(o=>/^@?docs\/epics\/[A-Za-z0-9._-]+\.md$/u.test(o))?.replace(/^@/u,"")??null}function O(e){const s=_(e)?.split("/").pop()?.replace(/\.story\.md$/,"")?.match(/^(P\d+)\./i)?.[1];if(s)return s.toUpperCase();const r=e.map(n=>n.match(/^@?(?:docs\/epics\/epic-)?(P\d+)(?:\.md)?$/iu)?.[1]).find(n=>!!n);return r?r.toUpperCase():null}function j(e){return e.map(t=>t.match(/^@?((?:docs|core)\/[A-Za-z0-9_./-]+\.md)$/u)?.[1]).filter(t=>!!t).map(t=>i(t)).filter(t=>!m(t))}function H(e){return e.startsWith("docs/stories/")?{nodeType:"Story",reasonCode:"story_scope_match"}:e.startsWith("docs/epics/")?{nodeType:"Epic",reasonCode:"epic_scope_match"}:e.includes("security")||e.includes("policy")||e.includes("standard")?{nodeType:"Guardrail",reasonCode:"guardrail_match"}:{nodeType:"Doc",reasonCode:"architecture_reference"}}function c(e,t){const o=i(t.path);if(m(o))return;e.some(r=>r.nodeType===t.nodeType&&i(r.path)===o)||e.push({...t,path:o})}function L(e,t,o){const s=_(t);if(s){const a=s.split("/").pop()?.replace(/\.story\.md$/,"")??s;c(e,{path:s,nodeType:"Story",stableId:a,reasonCode:"story_scope_match",confidence:.96,budgetCost:3,score:96,maxSnippetChars:o})}const r=B(t),n=O(t);if(r){const a=r.split("/").pop()?.replace(/\.md$/,"")??r;c(e,{path:r,nodeType:"Epic",stableId:a,reasonCode:"epic_scope_match",confidence:.92,budgetCost:3,score:92,maxSnippetChars:o})}else n&&c(e,{path:`docs/epics/epic-${n}.md`,nodeType:"Epic",stableId:n,reasonCode:"epic_scope_match",confidence:.9,budgetCost:3,score:90,maxSnippetChars:o});for(const a of j(t)){const d=a.split("/").pop()?.replace(/\.md$/,"").replace(/\.story$/,"")??a,l=H(a);c(e,{path:a,stableId:d,...l,confidence:.84,budgetCost:3,score:82,maxSnippetChars:o})}}function N(e,t,o,s){const r=e.retrievalBudget.maxSnippetChars,n=[];return c(n,{path:"NEOCORTEX.md",nodeType:"CanonicalMemory",stableId:"canonical-memory",reasonCode:"canonical_memory_seed",confidence:.92,budgetCost:4,score:100,maxSnippetChars:r}),c(n,{path:"AGENTS.md",nodeType:"PlatformMemory",stableId:"platform-memory:agents",reasonCode:"platform_memory_reference",confidence:.7,budgetCost:2,score:66,maxSnippetChars:r}),c(n,{path:"package.json",nodeType:"Package",stableId:"root-package",reasonCode:"package_surface_match",confidence:.78,budgetCost:2,score:72,maxSnippetChars:r}),(e.retrievalProfile!=="utility"||e.commandId==="ui-ux-review")&&c(n,{path:"docs/arquitetura-software/deterministic-graph-retrieval.md",nodeType:"Doc",stableId:"deterministic-graph-retrieval",reasonCode:"architecture_reference",confidence:.9,budgetCost:4,score:84,maxSnippetChars:r}),L(n,z(t),r),(["story-execution","diagnostic","research","review","qa","recovery","planning"].includes(e.retrievalProfile)||e.commandId==="tech-debt")&&c(n,{path:".neocortex/tech-debt-registry.json",nodeType:"Debt",stableId:"tech-debt-registry",reasonCode:"debt_area_match",confidence:.74,budgetCost:3,score:76,maxSnippetChars:r}),["story-execution","diagnostic","research","review","qa","recovery","planning","architecture"].includes(e.retrievalProfile)&&c(n,{path:"core/standards/spec-driven-development.md",nodeType:"Guardrail",stableId:"spec-driven-development",reasonCode:"guardrail_match",confidence:.82,budgetCost:3,score:78,maxSnippetChars:r}),e.retrievalProfile==="security"&&c(n,{path:"docs/architecture/solyd-security-system-contract.md",nodeType:"Guardrail",stableId:"solyd-security-system-contract",reasonCode:"guardrail_match",confidence:.86,budgetCost:3,score:84,maxSnippetChars:r}),e.retrievalProfile==="continuity"&&(c(n,{path:"core/standards/enterprise-continuity-plane.md",nodeType:"Guardrail",stableId:"enterprise-continuity-plane",reasonCode:"guardrail_match",confidence:.86,budgetCost:3,score:84,maxSnippetChars:r}),c(n,{path:"docs/runbooks/enterprise-continuity-runner.md",nodeType:"Doc",stableId:"enterprise-continuity-runner",reasonCode:"architecture_reference",confidence:.78,budgetCost:3,score:72,maxSnippetChars:r})),["utility","continuity","recovery"].includes(e.retrievalProfile)&&c(n,{path:".neocortex/state.json",nodeType:"State",stableId:"project-state",reasonCode:"state_status_match",confidence:.68,budgetCost:3,score:70,maxSnippetChars:r}),[M(e),...n.map(a=>G(o,a,s)).filter(a=>a!==null)]}function Z(e){let t=[...e.items],o=e;const s=Math.min(e.budget.maxPayloadBytes,y.maxPayloadBytes);for(;Buffer.byteLength(JSON.stringify(o),"utf8")>s&&t.length>0;){const r=t.pop(),n=g({retrievalId:e.retrievalId,query:e.query,items:t,generatedAt:e.generatedAt,warnings:e.warnings,budgets:e.budget});o={...n,skipped:r?[...n.skipped,{stableId:r.stableId,source:r.source,reasonCode:"budget_exceeded"}]:n.skipped,contractVersion:u,command:e.command}}return o}async function K(e){const t=$(e.args);if(!t)return{applied:!1,reason:"command_not_allowlisted"};const{policy:o,selection:s}=t,r=o.commandId;try{const n=N(o,s,e.projectRoot,e.fileReader??S);if(n.length===0)return{applied:!1,reason:"no_items",command:r,profile:o.retrievalProfile};const a=b(s.positionals.join(" ").slice(0,240)).text,d=p(`${u}:${r}:${a}:${n.map(f=>`${f.source.path}:${f.source.contentHash??""}`).sort().join("|")}`).slice(0,24),l=g({retrievalId:d,query:a,items:n,generatedAt:e.nowIso??x,budgets:o.retrievalBudget}),C=Z({...l,contractVersion:u,command:r});return{applied:!0,reason:"applied",command:r,profile:o.retrievalProfile,metadata:C}}catch(n){const a=n instanceof Error?n.message:String(n);return e.logger?.warn?.(`[neocortex] graph retrieval hook failed: ${a}. Proceeding without enrichment.`),{applied:!1,reason:"hook_error",command:r,profile:o.retrievalProfile,warning:a}}}export{k as admitGraphInvocation,K as runGraphRetrievalHook};
+/**
+ * P158.06 -- optional pre-command deterministic graph retrieval enrichment.
+ *
+ * The client collects a tiny, public, redacted context envelope for commands
+ * resolved by the shared command context policy shadow. It never constructs
+ * workflow prompts or decides orchestration; the server validates and decides
+ * whether to consume this auxiliary metadata.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { DEFAULT_GRAPH_RETRIEVAL_BUDGETS, createGraphRetrievalMetadata, normalizeGraphRetrievalPath, resolveClientCommandContextPolicy, } from './shared-graph-retrieval-contract.js';
+import { admitInvocation, } from '../../../shared/dist/invocation/index.js';
+const CONTRACT_VERSION = 'client-pre-command-v1';
+const DEFAULT_GENERATED_AT = '1970-01-01T00:00:00.000Z';
+const ARCHIVE_PATH_SEGMENTS = new Set(['.archive', '_archive', '_archives', 'archive', 'archives', 'archived']);
+const DEFAULT_FILE_READER = Object.freeze({
+    exists: existsSync,
+    stat: statSync,
+    readText: (path) => readFileSync(path, 'utf8'),
+});
+export function admitGraphInvocation(args) {
+    return admitInvocation(args);
+}
+function resolveAdmission(args) {
+    const admission = admitGraphInvocation(args);
+    if (admission.outcome !== 'resolved')
+        return null;
+    const policy = resolveClientCommandContextPolicy(admission.selection.commandId);
+    return policy ? { policy, selection: admission.selection } : null;
+}
+function stableHash(input) {
+    return createHash('sha256').update(input).digest('hex');
+}
+function isUnsafeGraphRetrievalPath(relativePath) {
+    const normalized = normalizeGraphRetrievalPath(relativePath);
+    const containsArchiveSegment = normalized
+        .split('/')
+        .some((segment) => ARCHIVE_PATH_SEGMENTS.has(segment.toLowerCase()));
+    return normalized.length === 0 ||
+        normalized.startsWith('/') ||
+        normalized.startsWith('..') ||
+        normalized.includes('/../') ||
+        containsArchiveSegment ||
+        /(^|\/)\.env(?:$|[./-])/i.test(normalized) ||
+        /(^|\/)(?:credentials?|secrets?|tokens?|private-prompts?|raw-logs?)(?:\.|\/|$)/i.test(normalized) ||
+        /\.(?:sqlite|db|pem|key|p12|pfx|crt|cer|der|bin)$/i.test(normalized);
+}
+function sourceFor(projectRoot, relativePath, fileReader) {
+    const normalized = normalizeGraphRetrievalPath(relativePath);
+    if (isUnsafeGraphRetrievalPath(normalized)) {
+        return null;
+    }
+    const absolute = join(projectRoot, normalized);
+    if (!fileReader.exists(absolute))
+        return null;
+    const stat = fileReader.stat(absolute);
+    if (!stat.isFile() || stat.size > 96 * 1024)
+        return null;
+    const content = fileReader.readText(absolute);
+    return {
+        kind: 'repo-path',
+        path: normalized,
+        contentHash: stableHash(content).slice(0, 16),
+        mtimeMs: Math.floor(stat.mtimeMs),
+    };
+}
+function redactPublicText(input) {
+    let text = input;
+    const before = text;
+    text = text.replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi, '[REDACTED_EMAIL]');
+    text = text.replace(/\b(api[-_ ]?key|license[-_ ]?key|token|password|secret)\b\s*[:=]\s*[^\s`'"\])}]+/gi, '$1=[REDACTED_SECRET]');
+    text = text.replace(/\b(?:sk|pk|ghp|github_pat|pat)_[A-Za-z0-9_\-]{16,}\b/g, '[REDACTED_TOKEN]');
+    text = text.replace(/\b[A-Za-z0-9+/]{32,}={0,2}\b/g, '[REDACTED_TOKEN]');
+    text = text.replace(/<!--\s*(?:server|private|proprietary)[\s\S]*?-->/gi, '[REDACTED_PRIVATE_PROMPT]');
+    text = text.replace(/\b(?:private|proprietary|protected)\s+(?:prompt|workflow|step\s*body|orchestration)\b[^.!?\n]*/gi, '[REDACTED_PRIVATE_PROMPT]');
+    return { text, redacted: text !== before };
+}
+function compactSummary(content, maxChars = DEFAULT_GRAPH_RETRIEVAL_BUDGETS.maxSnippetChars) {
+    const lines = content
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0 && !line.startsWith('---') && !line.startsWith('<!--'))
+        .slice(0, 8)
+        .join(' ');
+    const redacted = redactPublicText(lines);
+    return {
+        summary: redacted.text.slice(0, maxChars),
+        redacted: redacted.redacted,
+    };
+}
+function readItem(projectRoot, params, fileReader) {
+    const source = sourceFor(projectRoot, params.path, fileReader);
+    if (!source)
+        return null;
+    const content = fileReader.readText(join(projectRoot, source.path));
+    const summary = compactSummary(content, params.maxSnippetChars);
+    return {
+        nodeType: params.nodeType,
+        stableId: params.stableId,
+        source,
+        confidence: summary.redacted ? Math.min(params.confidence, 0.72) : params.confidence,
+        reasonCode: params.reasonCode,
+        budgetCost: params.budgetCost,
+        summary: summary.summary,
+        warnings: summary.redacted ? ['redacted_sensitive_content'] : undefined,
+        score: params.score,
+    };
+}
+function generatedCommandItem(policy) {
+    const summary = `Public command ${policy.commandId}; graphRetrieval profile ${policy.retrievalProfile}; context is auxiliary, redacted, budgeted and non-authoritative.`;
+    return {
+        nodeType: 'Command',
+        stableId: `command:${policy.commandId}`,
+        source: {
+            kind: 'command',
+            path: policy.commandId,
+            contentHash: stableHash(summary).slice(0, 16),
+        },
+        confidence: 0.88,
+        reasonCode: 'command_surface_match',
+        budgetCost: 1,
+        summary: summary.slice(0, policy.retrievalBudget.maxSnippetChars),
+        score: 90,
+    };
+}
+function targetTokens(selection) {
+    const typedPath = selection.uiUxReview?.architectureDir;
+    return typedPath ? [...selection.positionals, typedPath] : selection.positionals;
+}
+function extractStoryPath(tokens) {
+    const token = tokens.find((value) => /^@?docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/u.test(value));
+    return token?.replace(/^@/u, '') ?? null;
+}
+function extractEpicPath(tokens) {
+    const token = tokens.find((value) => /^@?docs\/epics\/[A-Za-z0-9._-]+\.md$/u.test(value));
+    return token?.replace(/^@/u, '') ?? null;
+}
+function extractEpicId(tokens) {
+    const storyPath = extractStoryPath(tokens);
+    const storyId = storyPath?.split('/').pop()?.replace(/\.story\.md$/, '');
+    const fromStory = storyId?.match(/^(P\d+)\./i)?.[1];
+    if (fromStory)
+        return fromStory.toUpperCase();
+    const direct = tokens
+        .map((value) => value.match(/^@?(?:docs\/epics\/epic-)?(P\d+)(?:\.md)?$/iu)?.[1])
+        .find((value) => Boolean(value));
+    return direct ? direct.toUpperCase() : null;
+}
+function extractMarkdownPaths(tokens) {
+    return tokens
+        .map((value) => value.match(/^@?((?:docs|core)\/[A-Za-z0-9_./-]+\.md)$/u)?.[1])
+        .filter((value) => Boolean(value))
+        .map((value) => normalizeGraphRetrievalPath(value))
+        .filter((path) => !isUnsafeGraphRetrievalPath(path));
+}
+function candidateKindForPath(path) {
+    if (path.startsWith('docs/stories/'))
+        return { nodeType: 'Story', reasonCode: 'story_scope_match' };
+    if (path.startsWith('docs/epics/'))
+        return { nodeType: 'Epic', reasonCode: 'epic_scope_match' };
+    if (path.includes('security') || path.includes('policy') || path.includes('standard'))
+        return { nodeType: 'Guardrail', reasonCode: 'guardrail_match' };
+    return { nodeType: 'Doc', reasonCode: 'architecture_reference' };
+}
+function addSpec(specs, spec) {
+    const normalized = normalizeGraphRetrievalPath(spec.path);
+    if (isUnsafeGraphRetrievalPath(normalized))
+        return;
+    const duplicate = specs.some((existing) => existing.nodeType === spec.nodeType && normalizeGraphRetrievalPath(existing.path) === normalized);
+    if (!duplicate)
+        specs.push({ ...spec, path: normalized });
+}
+function addTargetSpecs(specs, tokens, maxSnippetChars) {
+    const storyPath = extractStoryPath(tokens);
+    if (storyPath) {
+        const storyId = storyPath.split('/').pop()?.replace(/\.story\.md$/, '') ?? storyPath;
+        addSpec(specs, { path: storyPath, nodeType: 'Story', stableId: storyId, reasonCode: 'story_scope_match', confidence: 0.96, budgetCost: 3, score: 96, maxSnippetChars });
+    }
+    const epicPath = extractEpicPath(tokens);
+    const epicId = extractEpicId(tokens);
+    if (epicPath) {
+        const stableId = epicPath.split('/').pop()?.replace(/\.md$/, '') ?? epicPath;
+        addSpec(specs, { path: epicPath, nodeType: 'Epic', stableId, reasonCode: 'epic_scope_match', confidence: 0.92, budgetCost: 3, score: 92, maxSnippetChars });
+    }
+    else if (epicId) {
+        addSpec(specs, { path: `docs/epics/epic-${epicId}.md`, nodeType: 'Epic', stableId: epicId, reasonCode: 'epic_scope_match', confidence: 0.9, budgetCost: 3, score: 90, maxSnippetChars });
+    }
+    for (const path of extractMarkdownPaths(tokens)) {
+        const stableId = path.split('/').pop()?.replace(/\.md$/, '').replace(/\.story$/, '') ?? path;
+        const kind = candidateKindForPath(path);
+        addSpec(specs, { path, stableId, ...kind, confidence: 0.84, budgetCost: 3, score: 82, maxSnippetChars });
+    }
+}
+function collectCandidateItems(policy, selection, projectRoot, fileReader) {
+    const maxSnippetChars = policy.retrievalBudget.maxSnippetChars;
+    const specs = [];
+    addSpec(specs, { path: 'NEOCORTEX.md', nodeType: 'CanonicalMemory', stableId: 'canonical-memory', reasonCode: 'canonical_memory_seed', confidence: 0.92, budgetCost: 4, score: 100, maxSnippetChars });
+    addSpec(specs, { path: 'AGENTS.md', nodeType: 'PlatformMemory', stableId: 'platform-memory:agents', reasonCode: 'platform_memory_reference', confidence: 0.7, budgetCost: 2, score: 66, maxSnippetChars });
+    addSpec(specs, { path: 'package.json', nodeType: 'Package', stableId: 'root-package', reasonCode: 'package_surface_match', confidence: 0.78, budgetCost: 2, score: 72, maxSnippetChars });
+    if (policy.retrievalProfile !== 'utility' || policy.commandId === 'ui-ux-review') {
+        addSpec(specs, { path: 'docs/arquitetura-software/deterministic-graph-retrieval.md', nodeType: 'Doc', stableId: 'deterministic-graph-retrieval', reasonCode: 'architecture_reference', confidence: 0.9, budgetCost: 4, score: 84, maxSnippetChars });
+    }
+    addTargetSpecs(specs, targetTokens(selection), maxSnippetChars);
+    if (['story-execution', 'diagnostic', 'research', 'review', 'qa', 'recovery', 'planning'].includes(policy.retrievalProfile) || policy.commandId === 'tech-debt') {
+        addSpec(specs, { path: '.neocortex/tech-debt-registry.json', nodeType: 'Debt', stableId: 'tech-debt-registry', reasonCode: 'debt_area_match', confidence: 0.74, budgetCost: 3, score: 76, maxSnippetChars });
+    }
+    if (['story-execution', 'diagnostic', 'research', 'review', 'qa', 'recovery', 'planning', 'architecture'].includes(policy.retrievalProfile)) {
+        addSpec(specs, { path: 'core/standards/spec-driven-development.md', nodeType: 'Guardrail', stableId: 'spec-driven-development', reasonCode: 'guardrail_match', confidence: 0.82, budgetCost: 3, score: 78, maxSnippetChars });
+    }
+    if (policy.retrievalProfile === 'security') {
+        addSpec(specs, { path: 'docs/architecture/solyd-security-system-contract.md', nodeType: 'Guardrail', stableId: 'solyd-security-system-contract', reasonCode: 'guardrail_match', confidence: 0.86, budgetCost: 3, score: 84, maxSnippetChars });
+    }
+    if (policy.retrievalProfile === 'continuity') {
+        addSpec(specs, { path: 'core/standards/enterprise-continuity-plane.md', nodeType: 'Guardrail', stableId: 'enterprise-continuity-plane', reasonCode: 'guardrail_match', confidence: 0.86, budgetCost: 3, score: 84, maxSnippetChars });
+        addSpec(specs, { path: 'docs/runbooks/enterprise-continuity-runner.md', nodeType: 'Doc', stableId: 'enterprise-continuity-runner', reasonCode: 'architecture_reference', confidence: 0.78, budgetCost: 3, score: 72, maxSnippetChars });
+    }
+    if (['utility', 'continuity', 'recovery'].includes(policy.retrievalProfile)) {
+        addSpec(specs, { path: '.neocortex/state.json', nodeType: 'State', stableId: 'project-state', reasonCode: 'state_status_match', confidence: 0.68, budgetCost: 3, score: 70, maxSnippetChars });
+    }
+    return [generatedCommandItem(policy), ...specs
+            .map((spec) => readItem(projectRoot, spec, fileReader))
+            .filter((item) => item !== null)];
+}
+function enforceSerializedPayloadLimit(metadata) {
+    let items = [...metadata.items];
+    let next = metadata;
+    const maxPayloadBytes = Math.min(metadata.budget.maxPayloadBytes, DEFAULT_GRAPH_RETRIEVAL_BUDGETS.maxPayloadBytes);
+    while (Buffer.byteLength(JSON.stringify(next), 'utf8') > maxPayloadBytes && items.length > 0) {
+        const removed = items.pop();
+        const base = createGraphRetrievalMetadata({
+            retrievalId: metadata.retrievalId,
+            query: metadata.query,
+            items,
+            generatedAt: metadata.generatedAt,
+            warnings: metadata.warnings,
+            budgets: metadata.budget,
+        });
+        next = {
+            ...base,
+            skipped: removed
+                ? [...base.skipped, { stableId: removed.stableId, source: removed.source, reasonCode: 'budget_exceeded' }]
+                : base.skipped,
+            contractVersion: CONTRACT_VERSION,
+            command: metadata.command,
+        };
+    }
+    return next;
+}
+export async function runGraphRetrievalHook(ctx) {
+    const resolved = resolveAdmission(ctx.args);
+    if (!resolved) {
+        return { applied: false, reason: 'command_not_allowlisted' };
+    }
+    const { policy, selection } = resolved;
+    const command = policy.commandId;
+    try {
+        const items = collectCandidateItems(policy, selection, ctx.projectRoot, ctx.fileReader ?? DEFAULT_FILE_READER);
+        if (items.length === 0)
+            return { applied: false, reason: 'no_items', command, profile: policy.retrievalProfile };
+        // Query and target projection consume only values emitted by the exact
+        // admission authority. Raw quoting/option syntax is never reparsed here.
+        const query = redactPublicText(selection.positionals.join(' ').slice(0, 240)).text;
+        const retrievalId = stableHash(`${CONTRACT_VERSION}:${command}:${query}:${items.map((item) => `${item.source.path}:${item.source.contentHash ?? ''}`).sort().join('|')}`).slice(0, 24);
+        const base = createGraphRetrievalMetadata({
+            retrievalId,
+            query,
+            items,
+            generatedAt: ctx.nowIso ?? DEFAULT_GENERATED_AT,
+            budgets: policy.retrievalBudget,
+        });
+        const metadata = enforceSerializedPayloadLimit({
+            ...base,
+            contractVersion: CONTRACT_VERSION,
+            command,
+        });
+        return { applied: true, reason: 'applied', command, profile: policy.retrievalProfile, metadata };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        ctx.logger?.warn?.(`[neocortex] graph retrieval hook failed: ${msg}. Proceeding without enrichment.`);
+        return { applied: false, reason: 'hook_error', command, profile: policy.retrievalProfile, warning: msg };
+    }
+}