@ornexus/neocortex 4.60.66 → 4.60.68

package/packages/client/dist/private-execution/isolated-admission.js

@@ -1,23 +1,1432 @@
-import{execFileSync as Nt,spawnSync as wt}from"node:child_process";import{createHash as F}from"node:crypto";import{existsSync as nt,lstatSync as x,readFileSync as m,realpathSync as ht,writeFileSync as mt}from"node:fs";import{isAbsolute as ot,join as a,relative as dt,sep as vt}from"node:path";import{isDeepStrictEqual as S}from"node:util";import{readPrivateYoloFrozenWriteSet as Dt,verifyPrivateYoloCandidateWriteSet as Ft,verifyPrivateYoloCleanBaseline as Bt}from"./clean-baseline.js";import{PRIVATE_EPIC_PENDING_SIDECAR as et}from"./isolated-workspace.js";import{loadPactPrivateAnswers as Ct}from"../commands/architecture-answers.js";import{derivePactWriteSet as _t}from"./pact-write-set.js";import{deriveUxCandidateWriteSet as zt,deriveUxWriteSet as Lt}from"./ux-write-set.js";import{validateUxCandidateSource as Ht}from"./ux-source-validation.js";import{validatePactTestSource as Jt}from"./pact-test-source.js";import{classifyProjectMemoryUpdate as Mt}from"../memory/project-memory-writer.js";import{privateRootMemoryEffect as yt,privateRootMemorySourceMatches as qt,privateRootMemorySourceMatchReason as Gt}from"./root-memory-scope.js";import{inspectPactToolchain as Yt,planPactToolchainManifest as Ut}from"./pact-toolchain.js";import{acceptedPlanningDiagnosisPredecessor as Wt,planningPendingSidecarDigest as bt}from"./planning-diagnosis-checkpoint.js";import{acceptedPlanningResearchPredecessor as Vt}from"./planning-research-checkpoint.js";import{confirmPropertyTestPlan as xt,renderPropertyTestConfiguration as Xt}from"./property-test-plan.js";import{validatePropertyTestTypeScriptSource as Kt}from"./property-test-source.js";const Z=16*1024*1024,st=1024,ut="acd455ed0e39d98b90fb57391db75e366e4c5604db043e03a89a20e33d643c3c",Zt="81f50aaa801c1660eabe46e645501acbfb3e9873410c991e1496c014ca75c369",Rt="fa2194f89c01f07e225fd6f39e98e679f628e072239b6cd0af3ee527f0722518",Qt="8636f22ec5950410902448ee1e9cb4947359ac98df518742bddbbb367468e3ae";function tt(t,r){return typeof t=="string"&&t.length<=128&&F("sha256").update(t).digest("hex")===r}function Et(){const t={...process.env};for(const r of["GIT_DIR","GIT_WORK_TREE","GIT_INDEX_FILE","GIT_OBJECT_DIRECTORY","GIT_ALTERNATE_OBJECT_DIRECTORIES","GIT_COMMON_DIR","GIT_NAMESPACE","GIT_CEILING_DIRECTORIES"])delete t[r];return t}function G(t,r){return Nt("git",[...r],{cwd:t,env:Et(),stdio:["ignore","pipe","pipe"],timeout:3e4,maxBuffer:Z})}function J(t,r){return G(t,r).toString("utf8").trim()}function B(t,r=!1){return G(t,["status","--porcelain=v1","-z","--untracked-files=all",...r?["--ignored=matching"]:[]])}function rt(t){return!!t&&!ot(t)&&!t.includes("\\")&&!t.includes("\0")&&!t.split("/").some(r=>!r||r==="."||r===".."||r===".git")}function P(t,r){const e=r.split("/");let n=t;for(const o of e.slice(0,-1)){n=a(n,o);try{const i=x(n);if(!i.isDirectory()||i.isSymbolicLink())throw new Error("path-boundary")}catch(i){if(i.code==="ENOENT")return;throw i}}try{const o=x(a(t,r));if(!o.isFile()||o.isSymbolicLink()||o.size>Z)throw new Error("path-boundary")}catch(o){if(o.code!=="ENOENT")throw o}}function At(t){const r=[...t.matchAll(/\/\/\s*arch:keep-start[^\n]*\n[\s\S]*?\/\/\s*arch:keep-end[^\n]*/g)].map(o=>o[0]),e=(t.match(/arch:keep-start/g)??[]).length,n=(t.match(/arch:keep-end/g)??[]).length;if(e!==n||e!==r.length)throw new Error("architecture-keep-marker-invalid");return r}function M(t,r=!1,e=!1,n=[]){const o=[],i=[];for(const s of t.toString("utf8").split("\0").filter(Boolean)){if(s.length<4||s[2]!==" ")throw new Error("status-invalid");const d=s.slice(0,2),l=s.slice(3);if(!rt(l)||d!=="??"&&d!==" M"&&d!==" D"&&!(d===" T"&&n.includes(l))&&!(e&&d==="!!"&&l===et))throw new Error("status-invalid");o.push(l),d==="??"&&i.push(l)}if(!r&&o.length===0||o.length>st||new Set(o).size!==o.length)throw new Error("status-invalid");return{paths:o.sort(),untracked:i.sort()}}function lt(t,r,e,n){const o=G(r,["ls-tree","-z",e,"--",n]).toString("utf8");if(!o)try{return x(a(t,n)),!1}catch(s){return s.code==="ENOENT"}const i=/^([0-7]{6}) blob [a-f0-9]{40,64}\t([^\0]+)\0$/.exec(o);if(!i||i[2]!==n||!["100644","100755"].includes(i[1]))return!1;try{const s=x(a(t,n));return!s.isFile()||s.isSymbolicLink()||s.size>Z||!!(s.mode&73)!=(i[1]==="100755")?!1:m(a(t,n)).equals(G(r,["show",`${e}:${n}`]))}catch{return!1}}function ve(t,r,e,n){return rt(n)&&/^[a-f0-9]{40,64}$/.test(e)&&lt(t,r,e,n)}function it(t,r){try{const e=a(t,et),n=x(a(t,".neocortex")),o=x(e);return n.isDirectory()&&!n.isSymbolicLink()&&n.uid===process.getuid?.()&&(n.mode&18)===0&&o.isFile()&&!o.isSymbolicLink()&&o.uid===process.getuid?.()&&(o.mode&63)===0&&o.size>0&&o.size<=128*1024&&F("sha256").update(m(e)).digest("hex")===r}catch{return!1}}function ft(t,r,e,n,o,i){const s=new Set(n),d=i?yt(i).files.map(f=>f.path):[],l=M(B(t),!0,!!o,d),c=i?Gt(i,t,r,e):"matched";if(c!=="matched")throw new Error(`root-memory-${c}`);if(!l.paths.every(f=>s.has(f)||d.includes(f)||f===et&&!!o&&it(t,o)))throw new Error("source-unclaimed-delta");if(!n.every(f=>lt(t,r,e,f)))throw new Error("source-frozen-mismatch");return!o||it(t,o)}function kt(t,r){const e=wt("git",["diff","--no-index","--binary","--no-ext-diff","--","/dev/null",r],{cwd:t,env:Et(),encoding:"buffer",timeout:3e4,maxBuffer:Z});if(e.error||e.status!==1||!Buffer.isBuffer(e.stdout)||e.stdout.byteLength===0)throw new Error("patch-invalid");return e.stdout}function St(t,r,e){const n=wt("git",["apply",...e?["--check"]:[],"--binary","-"],{cwd:t,env:Et(),input:r,encoding:"buffer",timeout:3e4,maxBuffer:Z});if(n.error||n.status!==0)throw new Error("apply-failed")}function pt(t,r,e){const n=a(t,e),o=a(r,e);try{const i=x(n),s=x(o);return i.isFile()&&s.isFile()&&(i.mode&73)===(s.mode&73)&&m(n).equals(m(o))}catch(i){if(i.code!=="ENOENT")return!1;try{return x(n),!1}catch(s){if(s.code!=="ENOENT")return!1}try{return x(o),!1}catch(s){return s.code==="ENOENT"}}}function _e(t,r,e,n){$t(t,r,e,!0,n)}function be(t,r,e,n){if($t(t,r,e,!1,n),G(t.workspacePath,["diff","--cached","--name-only"]).byteLength!==0)throw new Error("private-execution-isolated-snapshot-unverified")}function $t(t,r,e,n,o){try{if(process.platform!=="linux"||t.schemaVersion!==1||!ot(t.sourceRoot)||!ot(t.workspacePath)||ht(t.sourceRoot)!==t.sourceRoot||ht(t.workspacePath)!==t.workspacePath||!x(t.workspacePath).isDirectory()||(x(t.workspacePath).mode&63)!==0||dt(t.sourceRoot,t.workspacePath)===""||dt(t.sourceRoot,t.workspacePath).split(vt)[0]!==".."||!/^[a-f0-9]{40,64}$/.test(t.baseSha)||!/^[a-f0-9]{40,64}$/.test(e)||J(t.sourceRoot,["rev-parse","--show-toplevel"])!==t.sourceRoot||J(t.workspacePath,["rev-parse","--show-toplevel"])!==t.workspacePath||J(t.sourceRoot,["rev-parse","HEAD"])!==t.baseSha||J(t.workspacePath,["rev-parse","HEAD"])!==e||J(t.sourceRoot,["symbolic-ref","--short","HEAD"])!==t.executionBranch||J(t.workspacePath,["symbolic-ref","--short","HEAD"])!==t.executionBranch||nt(a(t.workspacePath,".git","objects","info","alternates"))||n&&B(t.workspacePath,!0).byteLength!==0||r.length===0||r.length>st||r.some(i=>!rt(i))||new Set(r).size!==r.length)throw new Error("boundary-invalid");if(G(t.workspacePath,["merge-base","--is-ancestor",t.baseSha,e]),!ft(t.sourceRoot,t.workspacePath,e,r,void 0,o))throw new Error("boundary-raced")}catch(i){const s=i instanceof Error&&(["boundary-invalid","boundary-raced","status-invalid","source-unclaimed-delta","source-frozen-mismatch"].includes(i.message)||/^root-memory-(scope-binding|snapshot-ancestry|snapshot-content|source-content|source-projection)(-unsafe)?$/.test(i.message))?i.message:"physical-inspection-failed";throw new Error("private-execution-isolated-snapshot-unverified",{cause:new Error(s)})}}function Y(t,r,e,n,o,i=[],s){try{if(process.platform!=="linux"||t.schemaVersion!==1||!ot(t.sourceRoot)||!ot(t.workspacePath)||ht(t.sourceRoot)!==t.sourceRoot||ht(t.workspacePath)!==t.workspacePath||!x(t.workspacePath).isDirectory()||(x(t.workspacePath).mode&63)!==0||dt(t.sourceRoot,t.workspacePath)===""||dt(t.sourceRoot,t.workspacePath).split(vt)[0]!==".."||J(t.sourceRoot,["rev-parse","--show-toplevel"])!==t.sourceRoot||J(t.workspacePath,["rev-parse","--show-toplevel"])!==t.workspacePath||J(t.sourceRoot,["rev-parse","HEAD"])!==t.baseSha||!/^[a-f0-9]{40,64}$/.test(e)||J(t.workspacePath,["rev-parse","HEAD"])!==e||J(t.sourceRoot,["symbolic-ref","--short","HEAD"])!==t.executionBranch||J(t.workspacePath,["symbolic-ref","--short","HEAD"])!==t.executionBranch||r.length===0||r.length>st||r.some(g=>!rt(g))||new Set(r).size!==r.length)throw new Error("authority-invalid");if(G(t.workspacePath,["merge-base","--is-ancestor",t.baseSha,e]),!ft(t.sourceRoot,t.workspacePath,e,r,n,s))throw new Error("source-snapshot-mismatch");const d=B(t.workspacePath,!0),l=M(d),c=new Set(r);if(l.paths.some(g=>!c.has(g)||i.includes(g)))throw new Error("path-unclaimed");if(o&&!o())throw new Error("candidate-raced");for(const g of l.paths)P(t.workspacePath,g),P(t.sourceRoot,g);const h=[G(t.workspacePath,["diff","--binary","--no-ext-diff","--no-textconv","HEAD","--"]),...l.untracked.map(g=>kt(t.workspacePath,g))],p=Buffer.concat(h.map(g=>Buffer.concat([g,Buffer.from(`
-`)])));if(p.byteLength===0||p.byteLength>Z||!B(t.workspacePath,!0).equals(d)||o&&!o()||!ft(t.sourceRoot,t.workspacePath,e,r,n,s))throw new Error("patch-raced");if(St(t.sourceRoot,p,!0),!B(t.workspacePath,!0).equals(d)||o&&!o()||!ft(t.sourceRoot,t.workspacePath,e,r,n,s))throw new Error("patch-raced");St(t.sourceRoot,p,!1);const v=s?yt(s).files.map(g=>g.path):[];if(M(B(t.sourceRoot),!0,!!n,v).paths.some(g=>!c.has(g)&&!v.includes(g)&&g!==et)||s&&!qt(s,t.sourceRoot)||n&&!it(t.sourceRoot,n)||r.some(g=>!pt(t.workspacePath,t.sourceRoot,g))||J(t.sourceRoot,["rev-parse","HEAD"])!==t.baseSha||J(t.sourceRoot,["symbolic-ref","--short","HEAD"])!==t.executionBranch)throw new Error("admission-raced");return Object.freeze({schemaVersion:1,outcome:"admitted-unverified",baseSha:t.baseSha,executionBranch:t.executionBranch,changedPaths:Object.freeze([...l.paths]),patchSha256:F("sha256").update(p).digest("hex")})}catch{throw new Error("private-execution-isolated-admission-unverified")}}async function xe(t,r,e,n=t.baseSha,o=!1,i){try{const s=await Dt(t.sourceRoot,r,t.executionBranch,e);if(i){const f=yt(i);if(f.storyId!==r||f.childClaimRevision!==F("sha256").update([...s].sort().join("\0")).digest("hex"))throw new Error("root-memory-claim-mismatch")}const d=a(t.workspacePath,".neocortex","state.json"),l=x(d);if(!l.isFile()||l.isSymbolicLink()||l.size>Z)throw new Error("candidate-state-invalid");Ft(m(d,"utf8"),r,s);const c=Y(t,s,n,void 0,void 0,o?[".neocortex/state.json"]:[],i);return await Bt(t.sourceRoot,r,t.executionBranch,e),c}catch{throw new Error("private-execution-isolated-admission-unverified")}}const It=new Set(["id","epic_id","title","description","status","steps_completed","last_step","branch_name","estimated_hours","complexity","priority","type","depends_on","created_at","updated_at","acceptance_criteria"]),te=new Set(["id","title","description","status","stories","total_stories","completed_stories","estimated_hours","complexity","priority","created_at","updated_at","last_updated","source","tags"]);function Ot(t){return["title","description","complexity","priority","type","created_at","updated_at","last_updated","source"].some(e=>t[e]!==void 0&&typeof t[e]!="string")||t.estimated_hours!==void 0&&(typeof t.estimated_hours!="number"||!Number.isFinite(t.estimated_hours)||t.estimated_hours<0)?!1:["depends_on","acceptance_criteria","tags"].every(e=>t[e]===void 0||Array.isArray(t[e])&&t[e].length<=256&&t[e].every(n=>typeof n=="string"))}function ee(t){return Object.keys(t).every(r=>It.has(r))&&t.status==="backlog"&&Ot(t)&&(t.steps_completed===void 0||Array.isArray(t.steps_completed)&&t.steps_completed.length===0)&&(t.last_step===void 0||t.last_step===null)&&(t.branch_name===void 0||t.branch_name===null)}function Re(t,r,e,n,o){try{if(!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(r)||!/^P[1-9][0-9]*$/.test(e)||!/^[a-f0-9]{64}$/.test(n)||!/^[a-f0-9]{64}$/.test(o)||!it(t.sourceRoot,o))throw new Error("claim-invalid");const i=JSON.parse(m(a(t.sourceRoot,et),"utf8")),s=i&&typeof i=="object"&&!Array.isArray(i)?i.operations?.[n]:void 0;if(!s||typeof s!="object"||Array.isArray(s)||s.claimId!==r||s.epicId!==e)throw new Error("claim-sidecar-mismatch");const d=M(B(t.workspacePath,!0)),l=`docs/epics/epic-${e}.md`,c=".neocortex/state.json",f=new RegExp(`^docs/stories/${e}\\.[0-9]{2}\\.story\\.md$`),h=d.paths.filter(E=>f.test(E));if(!d.paths.includes(l)||!d.paths.includes(c)||h.length===0||h.length>99||d.paths.some(E=>E!==l&&E!==c&&E!=="NEOCORTEX.md"&&!f.test(E)))throw new Error("artifact-scope-invalid");const p=h.map(E=>E.slice(13,-9)).sort();if(p.some((E,T)=>E!==`${e}.${String(T+1).padStart(2,"0")}`))throw new Error("story-sequence-invalid");for(const E of[l,...h])try{throw x(a(t.sourceRoot,E)),new Error("artifact-already-exists")}catch(T){if(T.code!=="ENOENT")throw T}const v=(E,T)=>{P(t.workspacePath,E);const K=m(a(t.workspacePath,E),"utf8");return Buffer.byteLength(K)>Z?null:/^---\r?\n([\s\S]{1,8192}?)\r?\n---(?:\r?\n|$)/.exec(K)?.[1]?.split(/\r?\n/).find(ct=>ct.startsWith(`${T}:`))?.slice(T.length+1).trim()?.replace(/^(["'])(.*)\1$/,"$2")??null};if(v(l,"id")!==e||h.some((E,T)=>v(E,"id")!==p[T]||v(E,"epic_id")!==e))throw new Error("artifact-id-invalid");P(t.workspacePath,c);const u=JSON.parse(m(a(t.workspacePath,c),"utf8"));if(!u||typeof u!="object"||Array.isArray(u))throw new Error("state-invalid");const g=u,_=g.epics,j=g.stories,b=_?.[e],N=g.epic_id_ledger;if(g.schema_version!==1||!b||b.id!==e||b.status!=="memory-updated"||Object.keys(b).some(E=>!te.has(E))||!Ot(b)||b.completed_stories!==void 0&&b.completed_stories!==0||b.total_stories!==void 0&&b.total_stories!==p.length||!Array.isArray(b.stories)||b.stories.length!==p.length||b.stories.some((E,T)=>E!==p[T])||!j||p.some(E=>{const T=j[E];return!T||T.id!==E||T.epic_id!==e||!ee(T)})||!N||!Array.isArray(N.reserved_ids)||!N.reserved_ids.includes(e))throw new Error("state-claim-mismatch");P(t.sourceRoot,c);const y=JSON.parse(m(a(t.sourceRoot,c),"utf8")),A=y.epics,R=y.stories;if(!A||!R||A[e]!==void 0||p.some(E=>R[E]!==void 0))throw new Error("state-claim-conflict");const{[e]:U,...L}=_,$={...j};for(const E of p)delete $[E];const{epic_id_ledger:q,last_updated:C,...z}=y,{epic_id_ledger:V,last_updated:X,...Q}=g;if(!S(L,A)||!S($,R)||!S({...Q,epics:void 0,stories:void 0},{...z,epics:void 0,stories:void 0}))throw new Error("state-unrelated-drift");const O=y.epic_id_ledger&&typeof y.epic_id_ledger=="object"?y.epic_id_ledger.reserved_ids:void 0,{reserved_ids:W,...w}=N,D=y.epic_id_ledger&&typeof y.epic_id_ledger=="object"?y.epic_id_ledger:{schema_version:1},{reserved_ids:H,...k}=D;if(O!==void 0&&(!Array.isArray(O)||O.some(E=>typeof E!="string"||!/^P[1-9][0-9]*$/.test(E))||new Set(O).size!==O.length))throw new Error("ledger-drift");const I=[...Array.isArray(O)?O:[]];if(I.includes(e)||I.push(e),!S(N.reserved_ids,I)||!S(w,k))throw new Error("ledger-drift");return Y(t,d.paths,t.baseSha,o)}catch{throw new Error("private-execution-epic-claim-admission-unverified")}}function Ae(t,r,e,n,o,i){try{if(!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(r)||!/^P[1-9][0-9]{0,11}$/.test(e)||!/^[a-f0-9]{64}$/.test(n)||!/^[a-f0-9]{64}$/.test(o)||typeof i!="string"||!i.trim()||i.length>16384||!it(t.sourceRoot,o))throw new Error("planning-claim-invalid");const s=JSON.parse(m(a(t.sourceRoot,et),"utf8")),d=s&&typeof s=="object"&&!Array.isArray(s)?s.operations?.[n]:void 0;if(!d||typeof d!="object"||Array.isArray(d)||d.claimId!==r||d.epicId!==e)throw new Error("planning-claim-sidecar-mismatch");const l=`.neocortex/planning/epic-${e}`,c=`${l}/idea.json`,f=`${l}/diagnosis.md`,h=`${l}/enriched-prompt.md`,p=".neocortex/planning/planning.json",v=[c,f,h,p],u=M(B(t.workspacePath,!0));if(u.paths.length!==v.length||u.paths.some(E=>!v.includes(E)))throw new Error("planning-artifact-scope-invalid");for(const E of[c,f,h]){P(t.workspacePath,E);try{throw x(a(t.sourceRoot,E)),new Error("planning-artifact-already-exists")}catch(T){if(T.code!=="ENOENT")throw T}}const g=(E,T)=>{const K=x(a(t.workspacePath,E));if(!K.isFile()||K.isSymbolicLink()||K.size<1||K.size>T)throw new Error("planning-artifact-invalid");return m(a(t.workspacePath,E),"utf8")},_=JSON.parse(g(c,32*1024));if(!_||typeof _!="object"||Array.isArray(_)||_.epic_id!==e||_.status!=="diagnosed"||typeof _.raw_input!="string"||_.raw_input!==i)throw new Error("planning-idea-invalid");const j=g(f,256*1024),b=g(h,256*1024),N=(E,T)=>{const K=/^---\n([\s\S]{1,8192}?)\n---\n/.exec(E.replace(/\r\n/g,`
-`))?.[1];if(!K)return!1;const Pt=K.split(`
-`),at=gt=>{const ct=Pt.filter(jt=>jt.startsWith(`${gt}:`));return ct.length===1?ct[0].slice(gt.length+1).trim().replace(/^(?:"(.*)"|'(.*)')$/,"$1$2"):void 0};return at("epic_id")===e&&tt(at("step"),T)&&at("status")==="completed"};if(!N(j,ut)||!N(b,Zt))throw new Error("planning-document-identity-invalid");P(t.workspacePath,p),P(t.sourceRoot,p);const y=JSON.parse(g(p,128*1024)),A=nt(a(t.sourceRoot,p))?JSON.parse(m(a(t.sourceRoot,p),"utf8")):void 0;if(!y||typeof y!="object"||Array.isArray(y)||!("epics"in y)||!y.epics||typeof y.epics!="object"||Array.isArray(y.epics)||A!==void 0&&(!A||typeof A!="object"||Array.isArray(A)||!("epics"in A)||!A.epics||typeof A.epics!="object"||Array.isArray(A.epics)))throw new Error("planning-index-invalid");const R=y,U=R.epics,L=U[e],$=L,q=$?.output_files;if(!L||typeof L!="object"||Array.isArray(L)||$?.id!==e||$.status!=="diagnosed"||$.idea!==_.raw_input||!Array.isArray($.steps_completed)||$.steps_completed.length!==1||!tt($.steps_completed[0],ut)||typeof $.created_at!="string"||!Number.isFinite(Date.parse($.created_at))||$.completed_at!==null||!q||typeof q!="object"||Array.isArray(q)||!S(q,{diagnosis:`${l}/diagnosis.md`})||!S(Object.keys($).sort(),["id","idea","status","steps_completed","created_at","completed_at","output_files"].sort()))throw new Error("planning-index-epic-invalid");const{last_scan:C,epics:z,...V}=R,X=A,Q=X?.epics,{last_scan:O,epics:W,...w}=X??{},{[e]:D,...H}=U;if(Q?.[e]!==void 0||!S(H,Q??{})||X!==void 0&&!S(V,w)||X===void 0&&(Object.keys(U).length!==1||!S(Object.keys(R).sort(),["version","next_epic_id","last_scan","existing_epics_discovered","epics"].sort())||R.version!=="1.0.0"||R.next_epic_id!==1||!S(R.existing_epics_discovered,[]))||typeof R.last_scan!="string"||!Number.isFinite(Date.parse(R.last_scan)))throw new Error("planning-index-drift");const k=v.map(E=>F("sha256").update(m(a(t.workspacePath,E))).digest("hex")),I=()=>v.every((E,T)=>{try{return P(t.workspacePath,E),F("sha256").update(m(a(t.workspacePath,E))).digest("hex")===k[T]}catch{return!1}});return Y(t,v,t.baseSha,o,I)}catch{throw new Error("private-execution-planning-diagnosis-admission-unverified")}}function Se(t,r,e,n,o,i){try{if(!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(r)||!/^P[1-9][0-9]{0,11}$/.test(e)||!/^[a-f0-9]{64}$/.test(n)||!/^[a-f0-9]{64}$/.test(o)||!/^[a-f0-9]{64}$/.test(i))throw new Error("planning-research-binding-invalid");const s=".neocortex/state.json",d=".neocortex/planning/planning.json",l=`.neocortex/planning/epic-${e}`,c=`${l}/research.md`;if(P(t.sourceRoot,s),P(t.workspacePath,s),P(t.sourceRoot,d),P(t.workspacePath,d),P(t.sourceRoot,c),P(t.workspacePath,c),x(a(t.sourceRoot,s)).size>8*1024*1024||x(a(t.workspacePath,s)).size>8*1024*1024||x(a(t.sourceRoot,d)).size>128*1024||x(a(t.workspacePath,d)).size>128*1024)throw new Error("planning-research-source-size-invalid");const f=m(a(t.sourceRoot,s));if(F("sha256").update(f).digest("hex")!==i||!f.equals(m(a(t.workspacePath,s))))throw new Error("planning-research-state-drift");const h=JSON.parse(f.toString("utf8")),p=Wt(h,r,e);if(p.diagnosisReceiptId!==n||p.intakeRevision!==o)throw new Error("planning-research-predecessor-mismatch");const u=h.epics[e].createEpicPlanningPhysical.artifactDigests;for(const[O,W]of Object.entries({idea:`${l}/idea.json`,diagnosis:`${l}/diagnosis.md`,enrichment:`${l}/enriched-prompt.md`,index:d}))if(P(t.sourceRoot,W),F("sha256").update(m(a(t.sourceRoot,W))).digest("hex")!==u[O])throw new Error("planning-research-source-artifact-drift");try{throw x(a(t.sourceRoot,c)),new Error("planning-research-already-exists")}catch(O){if(O.code!=="ENOENT")throw O}const g=[c,d],_=M(B(t.workspacePath,!0));if(_.paths.length!==g.length||_.paths.some(O=>!g.includes(O)))throw new Error("planning-research-write-scope-invalid");const j=x(a(t.workspacePath,c));if(!j.isFile()||j.isSymbolicLink()||j.size<64||j.size>256*1024)throw new Error("planning-research-document-invalid");const b=m(a(t.workspacePath,c),"utf8"),N=/^---\n([\s\S]{1,8192}?)\n---\n/.exec(b.replace(/\r\n/g,`
-`))?.[1],y=O=>{const W=N?.split(`
-`).filter(w=>w.startsWith(`${O}:`))??[];return W.length===1?W[0].slice(O.length+1).trim().replace(/^(?:"(.*)"|'(.*)')$/,"$1$2"):void 0};if(!N||y("epic_id")!==e||y("status")!=="completed"||!tt(y("step"),Rt)||!b.slice(N.length+8).trim())throw new Error("planning-research-document-identity-invalid");const A=JSON.parse(m(a(t.sourceRoot,d),"utf8")),R=JSON.parse(m(a(t.workspacePath,d),"utf8"));if(!A||typeof A!="object"||Array.isArray(A)||!R||typeof R!="object"||Array.isArray(R))throw new Error("planning-research-index-invalid");const U=A,L=R,$=U.epics,q=L.epics,C=$?.[e];if(!$||Array.isArray($)||!q||Array.isArray(q)||!C||Array.isArray(C)||C.id!==e||C.idea!==p.rawIntent||C.status!=="diagnosed"||!Array.isArray(C.steps_completed)||C.steps_completed.length!==1||!tt(C.steps_completed[0],ut)||!S(C.output_files,{diagnosis:`${l}/diagnosis.md`})||typeof L.last_scan!="string"||!Number.isFinite(Date.parse(L.last_scan)))throw new Error("planning-research-index-predecessor-invalid");const z={...C,status:"researched",steps_completed:[...C.steps_completed,y("step")],output_files:{diagnosis:`${l}/diagnosis.md`,research:c}},V={...U,last_scan:L.last_scan,epics:{...$,[e]:z}};if(!S(L,V))throw new Error("planning-research-index-drift");const X=g.map(O=>F("sha256").update(m(a(t.workspacePath,O))).digest("hex")),Q=()=>g.every((O,W)=>{try{return P(t.workspacePath,O),F("sha256").update(m(a(t.workspacePath,O))).digest("hex")===X[W]}catch{return!1}});return Y(t,g,t.baseSha,bt(t.sourceRoot),Q)}catch{throw new Error("private-execution-planning-research-admission-unverified")}}function $e(t,r,e,n,o,i,s){try{if(!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(r)||!/^P[1-9][0-9]{0,11}$/.test(e)||[n,o,i,s].some(w=>!/^[a-f0-9]{64}$/.test(w)))throw new Error("planning-generation-binding-invalid");const d=".neocortex/state.json",l=".neocortex/planning/planning.json",c=`.neocortex/planning/epic-${e}`,f=`docs/epics/epic-${e}.md`;for(const w of[d,l,`${c}/idea.json`,`${c}/diagnosis.md`,`${c}/enriched-prompt.md`,`${c}/research.md`]){P(t.sourceRoot,w),P(t.workspacePath,w);const D=m(a(t.sourceRoot,w));if(w!==l&&!D.equals(m(a(t.workspacePath,w)))||!D.equals(G(t.sourceRoot,["show",`HEAD:${w}`])))throw new Error("planning-generation-predecessor-uncommitted")}const h=m(a(t.sourceRoot,d));if(h.byteLength>8*1024*1024||F("sha256").update(h).digest("hex")!==s)throw new Error("planning-generation-state-drift");const p=JSON.parse(h.toString("utf8")),v=Vt(p,r,e);if(v.diagnosisReceiptId!==n||v.researchReceiptId!==o||v.intakeRevision!==i)throw new Error("planning-generation-predecessor-mismatch");const u=p.epics[e],g=u.createEpicPlanningPhysical.artifactDigests,_=u.createEpicPlanningResearchPhysical.artifactDigests,j={idea:`${c}/idea.json`,diagnosis:`${c}/diagnosis.md`,enrichment:`${c}/enriched-prompt.md`,research:`${c}/research.md`};for(const[w,D]of Object.entries(j)){const H=w==="research"?_.research:g[w];if(F("sha256").update(m(a(t.sourceRoot,D))).digest("hex")!==H)throw new Error("planning-generation-artifact-drift")}if(F("sha256").update(m(a(t.sourceRoot,l))).digest("hex")!==_.index)throw new Error("planning-generation-index-drift");const b=M(B(t.workspacePath,!0)),N=new RegExp(`^docs/stories/${e}\\.([0-9]{2})\\.story\\.md$`),y=b.paths.filter(w=>N.test(w)).sort((w,D)=>Number(N.exec(w)[1])-Number(N.exec(D)[1]));if(y.length<1||y.length>24||y.some((w,D)=>N.exec(w)[1]!==String(D+1).padStart(2,"0"))||b.paths.length!==y.length+2||b.paths.some(w=>w!==f&&w!==l&&!N.test(w)))throw new Error("planning-generation-write-scope-invalid");const A=[f,l,...y];for(const w of[f,...y]){P(t.sourceRoot,w),P(t.workspacePath,w);try{throw x(a(t.sourceRoot,w)),new Error("planning-generation-path-collision")}catch(H){if(H.code!=="ENOENT")throw H}const D=x(a(t.workspacePath,w));if(!D.isFile()||D.isSymbolicLink()||D.size<128||D.size>(w===f?512:128)*1024)throw new Error("planning-generation-document-invalid")}const R=(w,D)=>{const k=/^---\n([\s\S]{1,8192}?)\n---\n/.exec(w.replace(/\r\n/g,`
-`))?.[1]?.split(`
-`).filter(I=>I.startsWith(`${D}:`))??[];return k.length===1?k[0].slice(D.length+1).trim().replace(/^(?:"(.*)"|'(.*)')$/,"$1$2"):void 0},U=m(a(t.workspacePath,f),"utf8");if(R(U,"id")!==e||R(U,"stories_count")!==String(y.length)||!U.includes("## Stories"))throw new Error("planning-generation-epic-invalid");for(const[w,D]of y.entries()){const H=m(a(t.workspacePath,D),"utf8"),k=/^---\n([\s\S]{1,8192}?)\n---\n/.exec(H.replace(/\r\n/g,`
-`))?.[1]??"";if(R(H,"id")!==`${e}.${String(w+1).padStart(2,"0")}`||R(H,"epic_id")!==e||/^\s*epic\s*:/m.test(k)||R(H,"status")!=="backlog"||!H.includes("## Acceptance Criteria")||!/\bGiven\b[\s\S]*\bWhen\b[\s\S]*\bThen\b/.test(H))throw new Error("planning-generation-story-invalid")}const L=JSON.parse(m(a(t.sourceRoot,l),"utf8")),$=JSON.parse(m(a(t.workspacePath,l),"utf8")),q=L.epics,C=$.epics,z=q?.[e],V=C?.[e];if(!q||!C||!z||!V||z.id!==e||z.status!=="researched"||!Array.isArray(z.steps_completed)||z.steps_completed.length!==2||!tt(z.steps_completed[0],ut)||!tt(z.steps_completed[1],Rt)||!S(z.output_files,{diagnosis:`${c}/diagnosis.md`,research:`${c}/research.md`})||typeof $.last_scan!="string"||!Number.isFinite(Date.parse($.last_scan))||typeof V.completed_at!="string"||!Number.isFinite(Date.parse(V.completed_at)))throw new Error("planning-generation-index-predecessor-invalid");const X=V.steps_completed?.[2];if(!tt(X,Qt))throw new Error("planning-generation-index-transition-invalid");const Q={...L,last_scan:$.last_scan,epics:{...q,[e]:{...z,status:"generated",steps_completed:[...z.steps_completed,X],completed_at:V.completed_at,output_files:{...z.output_files,epic:f,stories:y}}}};if(!S($,Q))throw new Error("planning-generation-index-transition-invalid");const O=A.map(w=>F("sha256").update(m(a(t.workspacePath,w))).digest("hex")),W=()=>A.every((w,D)=>{try{return P(t.workspacePath,w),F("sha256").update(m(a(t.workspacePath,w))).digest("hex")===O[D]}catch{return!1}});return Y(t,A,t.baseSha,bt(t.sourceRoot),W)}catch{throw new Error("private-execution-planning-generation-admission-unverified")}}function Oe(t,r,e){try{if(!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(e))throw new Error("story-id-invalid");const n=".neocortex/state.json";P(r.sourceRoot,n),P(r.workspacePath,n);const o=m(a(r.sourceRoot,n));if(!o.equals(m(a(r.workspacePath,n))))throw new Error("state-drift");const i=JSON.parse(o.toString("utf8")),s=i?.stories?.[e],d=s?.files_to_modify;if(i?.schema_version!==1||s?.id!==e||!Array.isArray(d)||d.length<1||d.length>st||d.some(f=>typeof f!="string"||!rt(f)||f.length>1024||/[\r\n]/.test(f))||new Set(d).size!==d.length)throw new Error("write-set-invalid");const l=d,c=l.filter(f=>{if(!f.startsWith("docs/stories/")||!f.endsWith(".story.md"))return!1;P(r.sourceRoot,f),P(r.workspacePath,f);const h=m(a(r.sourceRoot,f));if(!h.equals(m(a(r.workspacePath,f))))throw new Error("story-drift");const v=/^---\r?\n([\s\S]{1,8192}?)\r?\n---(?:\r?\n|$)/.exec(h.toString("utf8"))?.[1]?.split(/\r?\n/).filter(u=>u.startsWith("id:"))??[];return v.length===1&&v[0].slice(3).trim().replace(/^(["'])(.*)\1$/,"$2")===e});if(c.length!==1)throw new Error("story-target-ambiguous");return`${t}
-
-Private story handoff (local only):
-${JSON.stringify({storyId:e,storyPath:c[0],allowedPaths:[...l].sort()})}
-Work from this isolated checkout's current directory. Use the exact storyPath above for the delivered current step; do not use an unresolved story-file placeholder or infer a filename. Persist the current step's actual result in the declared files; a final chat response alone is not a saved candidate. Modify only allowedPaths and preserve story identity and the write set. Do not operate Git, change unrelated stories, grant root QA/checkpoint authority, or declare the story, epic or pipeline complete. If required inputs are unavailable, report failure without inventing evidence or completion.
-`}catch{throw new Error("private-execution-state-step-handoff-unverified")}}function Te(t,r){try{if(!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(r))throw new Error("story-id-invalid");const e=".neocortex/state.json";P(t.sourceRoot,e),P(t.workspacePath,e);const n=JSON.parse(m(a(t.sourceRoot,e),"utf8")),o=JSON.parse(m(a(t.workspacePath,e),"utf8"));if(!n||typeof n!="object"||Array.isArray(n)||!o||typeof o!="object"||Array.isArray(o))throw new Error("state-invalid");const i=n,s=o,d=i.stories,l=s.stories,c=d?.[r],f=l?.[r],h=c?.files_to_modify;if(i.schema_version!==1||s.schema_version!==1||!d||!l||!c||!f||c.id!==r||f.id!==r||f.epic_id!==c.epic_id||!Array.isArray(h)||h.length===0||h.length>st||h.some(R=>typeof R!="string"||!rt(R)||R.length>1024)||new Set(h).size!==h.length||!S(f.files_to_modify,h))throw new Error("write-set-invalid");const{[r]:p,...v}=d,{[r]:u,...g}=l,{stories:_,last_updated:j,...b}=i,{stories:N,last_updated:y,...A}=s;if(!S(g,v)||!S(A,b))throw new Error("state-unrelated-drift");return Y(t,[...h].sort(),t.baseSha)}catch{throw new Error("private-execution-state-step-admission-unverified")}}function je(t,r,e){if(r==="chaos-plan"&&e==="chaos-quarterly-v1")try{const o=new Date,i=`Q${Math.floor(o.getUTCMonth()/3)+1}-${o.getUTCFullYear()}`,s=M(B(t.workspacePath,!0)).paths,d=`tools/chaos/${i}-plan.md`,l=`.neocortex/chaos-history/${i}.md`,c=s.filter(u=>u.startsWith("tools/chaos/experiments/")),f=c.map(u=>/^tools\/chaos\/experiments\/(chaos-mesh|litmus|aws-fis)-(?:PodKill|NetworkChaos|IOChaos|StressChaos|TimeChaos|pod-kill|network-chaos|io-chaos|stress-chaos|time-chaos)-([a-z0-9]+(?:-[a-z0-9]+)*)\.yaml$/.exec(u));if(!s.includes(d)||!s.includes(l)||c.length<5||c.length>10||s.length!==c.length+2||f.some(u=>!u)||new Set(f.map(u=>u[1])).size!==1)throw new Error("chaos-write-set-invalid");for(const u of s)if(P(t.workspacePath,u),x(a(t.workspacePath,u)).size===0)throw new Error("chaos-empty-artifact");const h=m(a(t.workspacePath,l),"utf8");if(!h.includes(i)||!/\bPLANNED\b/.test(h))throw new Error("chaos-history-invalid");const v=G(t.workspacePath,["ls-tree","-z","HEAD","--",l]).length>0?G(t.workspacePath,["show",`HEAD:${l}`]).toString("utf8"):"";if(v&&!h.startsWith(v))throw new Error("chaos-history-not-append-only");return Y(t,s,t.baseSha)}catch{throw new Error("private-execution-project-step-admission-unverified")}const n=r==="sync-openapi"&&e==="sync-openapi-contract-v1"?["docs/architecture/api-contracts.md","docs/api/openapi.yaml"]:r==="tech-debt"&&e==="tech-debt-registry-v1"?[".neocortex/tech-debt-registry.json"]:void 0;if(!n)throw new Error("private-execution-project-step-admission-unverified");try{if(r==="tech-debt"){const o=".neocortex/tech-debt-registry.json";P(t.workspacePath,o);const i=JSON.parse(m(a(t.workspacePath,o),"utf8"));if(!i||typeof i!="object"||Array.isArray(i))throw new Error("registry-invalid");const s=i;if(s.schema_version!==2||s.version!==void 0&&s.version!==2||!Array.isArray(s.items))throw new Error("registry-invalid")}return Y(t,n,t.baseSha)}catch{throw new Error("private-execution-project-step-admission-unverified")}}function Tt(t,r){const e=t==="arch-prd"&&r==="arch-prd-docs-v1"?["docs/architecture/prd.md","docs/architecture/product-experience.md"]:t==="arch-architecture"&&r==="arch-architecture-doc-v1"?["docs/architecture/architecture.md"]:t==="arch-fitness-functions"&&r==="arch-fitness-tools-v1"?["tools/architecture/dependency-cruiser.config.js","tools/architecture/archunit-test.ts","tools/architecture/.eslintrc.boundaries.js"]:t==="arch-api-contracts"&&r==="arch-api-contracts-docs-v1"?["docs/architecture/api-contracts.md","docs/api/openapi.yaml"]:t==="arch-api-integrations"&&r==="arch-api-integrations-doc-v1"?["docs/architecture/api-integrations.md"]:t==="arch-database"&&r==="arch-database-doc-v1"?["docs/architecture/database-schema.md"]:t==="arch-security"&&r==="arch-security-doc-v1"?["docs/architecture/cyber-security.md"]:t==="arch-design-system"&&r==="arch-design-system-doc-v1"?["docs/architecture/atomic-design-system.md"]:t==="arch-performance"&&r==="arch-performance-doc-v1"?["docs/architecture/performance-strategy.md"]:t==="arch-testing"&&r==="arch-testing-doc-v1"?["docs/architecture/testing-strategy.md"]:t==="arch-infrastructure"&&r==="arch-infrastructure-doc-v1"?["docs/architecture/infrastructure-deploy.md"]:t==="arch-review"&&r==="arch-review-doc-v1"?["docs/architecture/review-consolidation.md"]:t==="update-memory"&&r==="arch-memory-canonical-v1"?["NEOCORTEX.md"]:null;return e===null?null:Object.freeze(e)}function Ne(t,r,e,n="all"){const o=Tt(r,e);if(!o)throw new Error("private-execution-architecture-admission-unverified");return`${t}
-
-Private architecture handoff (local only):
-${JSON.stringify({allowedPaths:o})}
-${n==="non-ui"?`The server admitted a signed non-UI scope for this snapshot. Preserve the backend-only scope: design-system and UX phases are not applicable. Do not require or generate interface artifacts.
-`:""}Write exactly the listed nonempty artifacts inside this isolated clone. Existing compliant listed artifacts may remain unchanged; all listed artifacts must exist after execution. Place any necessary scope notes inside those artifacts. Do not edit README, package files, other documents, state, Git, QA records or configuration outside the listed paths. Do not install dependencies, use network, deploy or continue to another stage. Preserve existing arch:keep blocks byte-for-byte. Do not add new arch:keep markers. For managed memory, preserve all bytes outside its existing managed block. Root independently reviews artifacts and owns continuation, Git and acceptance.
-`}function De(t,r,e,n,o){const i=Tt(r,e);if(!i||!/^P[1-9][0-9]{0,11}$/.test(n)||!/^[a-f0-9]{64}$/.test(o))throw new Error("private-execution-architecture-admission-unverified");try{P(t.workspacePath,".neocortex/state.json");const s=JSON.parse(m(a(t.workspacePath,".neocortex/state.json"),"utf8"));if(!s||typeof s!="object"||Array.isArray(s))throw new Error("state-invalid");const d=s,c=d.archPlan?.execution,f=d.epics;if(!c||c.currentStageCommand!==r||c.targetEpicId!==n||c.graphRevision!==o||!f||!Object.hasOwn(f,n))throw new Error("state-binding-mismatch");if(r==="update-memory"){if(c.continuationState!=="delegate"||c.reviewDecision?.decision!=="approved")throw new Error("memory-root-review-missing");const h="NEOCORTEX.md";if(!M(B(t.workspacePath,!0)).paths.includes(h))throw new Error("memory-effect-missing");P(t.sourceRoot,h),P(t.workspacePath,h);const p=m(a(t.sourceRoot,h),"utf8"),v=m(a(t.workspacePath,h),"utf8"),u="<!-- NEOCORTEX-MEMORY-START -->",g="<!-- NEOCORTEX-MEMORY-END -->",_=y=>{if(y.split(u).length!==2||y.split(g).length!==2||y.indexOf(u)>=y.indexOf(g))throw new Error("memory-markers-invalid");const A=y.indexOf(u)+u.length,R=y.indexOf(g);return{before:y.slice(0,A),body:y.slice(A,R),after:y.slice(R)}},j=_(p),b=_(v);if(j.before!==b.before||j.after!==b.after||j.body===b.body||Buffer.byteLength(v,"utf8")>32768||v.split(`
-`).length>240)throw new Error("memory-managed-block-invalid");const N=new Set(j.body.split(`
-`));for(const y of b.body.split(`
-`))N.has(y)||Mt(y)}if(r==="arch-prd"){const h="docs/architecture/prd.md";if(!M(B(t.workspacePath,!0)).paths.includes(h))throw new Error("prd-effect-missing");if(P(t.workspacePath,h),x(a(t.workspacePath,h)).size===0)throw new Error("prd-empty")}if(r==="arch-api-contracts"||r==="arch-fitness-functions"||r==="arch-api-integrations"||r==="arch-database"||r==="arch-security"||r==="arch-design-system"||r==="arch-performance"||r==="arch-testing"||r==="arch-infrastructure"||r==="arch-review"){const h=M(B(t.workspacePath,!0)).paths;for(const p of i){if(!h.includes(p)&&G(t.workspacePath,["cat-file","-t",`${t.baseSha}:${p}`]).toString("utf8").trim()!=="blob")throw new Error("architecture-required-effect-missing");if(P(t.workspacePath,p),x(a(t.workspacePath,p)).size===0)throw new Error("architecture-required-effect-empty");if(r==="arch-fitness-functions"){P(t.sourceRoot,p);const v=nt(a(t.sourceRoot,p))?m(a(t.sourceRoot,p),"utf8"):"",u=m(a(t.workspacePath,p),"utf8"),g=At(v),_=At(u);if(!S(_,g))throw new Error("architecture-keep-marker-changed")}}}return Y(t,i,t.baseSha)}catch{throw new Error("private-execution-architecture-admission-unverified")}}function Fe(t,r,e,n){try{if(!/^P[1-9][0-9]{0,11}$/.test(r)||!/^[a-f0-9]{64}$/.test(e)||n.schemaVersion!==1||n.targetEpicId!==r)throw new Error("binding-invalid");const o=Lt(t.sourceRoot,r),i=zt(t.workspacePath,r);if(!S(o,n)||!S(i,n))throw new Error("write-set-invalid");P(t.workspacePath,".neocortex/state.json");const s=JSON.parse(m(a(t.workspacePath,".neocortex/state.json"),"utf8"));if(!s||typeof s!="object"||Array.isArray(s))throw new Error("state-invalid");const d=s,c=d.archPlan?.execution,f=d.epics;if(!c||c.currentStageCommand!=="arch-ux-design"||c.continuationState!=="delegate"||c.targetEpicId!==r||c.graphRevision!==e||!f||!Object.hasOwn(f,r))throw new Error("stage-invalid");const h=M(B(t.workspacePath,!0)).paths;if(h.length!==n.pathCount||h.some(p=>!n.paths.includes(p)))throw new Error("agent-path-unclaimed");for(const p of n.paths){P(t.sourceRoot,p),P(t.workspacePath,p);const v=x(a(t.workspacePath,p));if(!v.isFile()||v.isSymbolicLink()||v.size<1)throw new Error("effect-empty");const u=new TextDecoder("utf-8",{fatal:!0}).decode(m(a(t.workspacePath,p)));if(!u.trim()||u.includes("\0"))throw new Error("effect-invalid")}return Ht(t.workspacePath,n),Y(t,n.paths,t.baseSha)}catch{throw new Error("private-execution-ux-admission-unverified")}}function Be(t,r,e,n,o,i){try{if(!/^P[1-9][0-9]{0,11}$/.test(r)||!/^[a-f0-9]{64}$/.test(e)||n.targetEpicId!==r||n.graphRevision!==e||o.schemaVersion!==1)throw new Error("binding-invalid");const s=Ct(t.sourceRoot);if(!s||!S(s.receipt,n))throw new Error("answers-invalid");const d=_t(t.sourceRoot,s.answers.generateProvider),l=_t(t.workspacePath,s.answers.generateProvider);if(d.outcome!=="ready"||l.outcome!=="ready"||!S(d.writeSet,o)||!S(l.writeSet,o))throw new Error("write-set-invalid");const c=M(B(t.workspacePath,!0)).paths;if(c.some(u=>!o.paths.includes(u)))throw new Error("agent-path-unclaimed");let f=0,h=0;for(const u of o.paths){if(P(t.sourceRoot,u),nt(a(t.sourceRoot,u))||!c.includes(u))throw new Error("effect-missing-or-overwrite");P(t.workspacePath,u);const g=x(a(t.workspacePath,u));if(!g.isFile()||g.size<1)throw new Error("effect-empty");const _=new TextDecoder("utf-8",{fatal:!0}).decode(m(a(t.workspacePath,u))),j=o.interactions.find(N=>N.filePath===u);if(u!==o.providerPath&&!j)throw new Error("private-execution-pact-interaction-missing");const b=Jt(u,_,s.answers.brokerUrl,j,t.workspacePath,s.answers.matchersAggressive);b.consumerBinding==="app-import-candidate"&&f++,b.consumerBinding==="mock-only-scaffold"&&h++}let p=o.paths;if(i){const u=Ut(t.sourceRoot,s.answers.generateProvider),g=_=>F("sha256").update(_).digest("hex");if(i.schemaVersion!==1||i.outcome!=="candidate-unverified"||i.executionVerified!==!1||i.sourceManifestSha256!==g(u.sourceText)||i.sourceLockSha256!==(u.sourceLockText===null?null:g(u.sourceLockText))||i.manifestText!==u.candidateText||!lt(t.sourceRoot,t.workspacePath,t.baseSha,"package.json")||!lt(t.sourceRoot,t.workspacePath,t.baseSha,"package-lock.json"))throw new Error("toolchain-binding-invalid");for(const _ of["package.json","package-lock.json"]){P(t.sourceRoot,_),P(t.workspacePath,_);const j=_==="package.json"?u.sourceText:u.sourceLockText,b=nt(a(t.workspacePath,_))?m(a(t.workspacePath,_),"utf8"):null;if(j!==b)throw new Error("toolchain-clone-raced")}if(mt(a(t.workspacePath,"package.json"),i.manifestText),mt(a(t.workspacePath,"package-lock.json"),i.lockText),Yt(t.workspacePath,s.answers.generateProvider).outcome!=="manifest-aligned")throw new Error("toolchain-candidate-invalid");p=[...o.paths,"package.json","package-lock.json"]}const v=Y(t,p,t.baseSha);return Object.freeze({...v,consumerBindingCandidateCount:f,consumerScaffoldCount:h})}catch{throw new Error("private-execution-pact-admission-unverified")}}function Ce(t,r,e,n=new Date().toISOString()){try{const o=xt(t.sourceRoot,r);if(!S(o,e)||!pt(t.sourceRoot,t.workspacePath,e.prdPath)||e.aggregates.some(h=>!pt(t.sourceRoot,t.workspacePath,h.implementationFile))||e.writeSet.length===0)throw new Error("plan-drift");const i=M(B(t.workspacePath,!0)).paths;if(!S(i,e.writeSet))throw new Error("agent-path-unclaimed");const s=new Map;for(const h of e.aggregates){P(t.sourceRoot,h.testFile),P(t.workspacePath,h.testFile);const p=x(a(t.workspacePath,h.testFile));if(!p.isFile()||p.isSymbolicLink()||p.size<1||p.size>Z)throw new Error("test-invalid");const v=m(a(t.workspacePath,h.testFile)),u=new TextDecoder("utf-8",{fatal:!0}).decode(v),g=e.language==="typescript"?(u.match(/\b(?:it|test)\s*\(/g)??[]).length:(u.match(/^def\s+test_[A-Za-z0-9_]+\s*\(/gm)??[]).length;if(!u.trim()||u.includes("\0")||g<h.invariantCount||/\b(?:it|test|describe)\s*\.\s*(?:skip|todo|only)\s*\(/.test(u)||!u.includes(String(e.numRuns)))throw new Error("test-invalid");e.language==="typescript"&&Kt({source:u,testFile:h.testFile,implementationFile:h.implementationFile,invariantCount:h.invariantCount,numRuns:e.numRuns}),s.set(h.testFile,F("sha256").update(v).digest("hex"))}P(t.sourceRoot,e.prdPath),P(t.workspacePath,e.prdPath);const d=m(a(t.workspacePath,e.prdPath)),l=new TextDecoder("utf-8",{fatal:!0}).decode(d),c=Xt(l,e,n);mt(a(t.workspacePath,e.prdPath),c);const f=F("sha256").update(c).digest("hex");return Y(t,[...e.writeSet,e.prdPath],t.baseSha,void 0,()=>{try{return!S(xt(t.sourceRoot,r),e)||e.aggregates.some(h=>!pt(t.sourceRoot,t.workspacePath,h.implementationFile))||F("sha256").update(m(a(t.workspacePath,e.prdPath))).digest("hex")!==f?!1:[...s].every(([h,p])=>F("sha256").update(m(a(t.workspacePath,h))).digest("hex")===p)}catch{return!1}})}catch{throw new Error("private-execution-property-admission-unverified")}}export{De as admitPrivateArchitectureStageWorkspace,Re as admitPrivateEpicClaimWorkspace,$e as admitPrivateGenerateEpicWorkspace,Ae as admitPrivateIdeaDiagnosisWorkspace,Se as admitPrivateIdeaResearchWorkspace,Be as admitPrivatePactWorkspace,je as admitPrivateProjectStepWorkspace,Ce as admitPrivatePropertyTestWorkspace,Te as admitPrivateStateBoundStepWorkspace,Fe as admitPrivateUxWorkspace,xe as admitPrivateYoloFrozenWorkspace,Ne as appendPrivateArchitectureHandoff,Oe as appendPrivateStateBoundStepHandoff,Tt as privateArchitectureStagePaths,ve as privateYoloSourceFileMatchesSnapshot,be as verifyPrivateYoloRejectedCandidateOrigin,_e as verifyPrivateYoloSnapshotBoundary};
+/** Root-owned, fail-closed patch admission from a private agent checkout. */
+import { execFileSync, spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync, readFileSync, realpathSync, writeFileSync } from 'node:fs';
+import { isAbsolute, join, relative, sep } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { readPrivateYoloFrozenWriteSet, verifyPrivateYoloCandidateWriteSet, verifyPrivateYoloCleanBaseline, } from './clean-baseline.js';
+import { PRIVATE_EPIC_PENDING_SIDECAR } from './isolated-workspace.js';
+import { loadPactPrivateAnswers } from '../commands/architecture-answers.js';
+import { derivePactWriteSet } from './pact-write-set.js';
+import { deriveUxCandidateWriteSet, deriveUxWriteSet } from './ux-write-set.js';
+import { validateUxCandidateSource } from './ux-source-validation.js';
+import { validatePactTestSource } from './pact-test-source.js';
+import { classifyProjectMemoryUpdate } from '../memory/project-memory-writer.js';
+import { privateRootMemoryEffect, privateRootMemorySourceMatches, privateRootMemorySourceMatchReason } from './root-memory-scope.js';
+import { inspectPactToolchain, planPactToolchainManifest } from './pact-toolchain.js';
+import { acceptedPlanningDiagnosisPredecessor, planningPendingSidecarDigest } from './planning-diagnosis-checkpoint.js';
+import { acceptedPlanningResearchPredecessor } from './planning-research-checkpoint.js';
+import { confirmPropertyTestPlan, renderPropertyTestConfiguration } from './property-test-plan.js';
+import { validatePropertyTestTypeScriptSource } from './property-test-source.js';
+const MAX_PATCH_BYTES = 16 * 1024 * 1024;
+const MAX_PATHS = 1024;
+// Full digest of the server-owned P01 step ID; do not ship that identifier in client dist.
+const P01_DIAGNOSIS_STEP_SHA256 = 'acd455ed0e39d98b90fb57391db75e366e4c5604db043e03a89a20e33d643c3c';
+const P01_ENRICHMENT_STEP_SHA256 = '81f50aaa801c1660eabe46e645501acbfb3e9873410c991e1496c014ca75c369';
+// Full digest of the server-owned P02 step ID; do not ship its plaintext in client dist.
+const P02_RESEARCH_STEP_SHA256 = 'fa2194f89c01f07e225fd6f39e98e679f628e072239b6cd0af3ee527f0722518';
+const P03_GENERATION_STEP_SHA256 = '8636f22ec5950410902448ee1e9cb4947359ac98df518742bddbbb367468e3ae';
+function matchesStepDigest(value, digest) {
+    return typeof value === 'string' && value.length <= 128
+        && createHash('sha256').update(value).digest('hex') === digest;
+}
+function environment() {
+    const env = { ...process.env };
+    for (const key of [
+        'GIT_DIR', 'GIT_WORK_TREE', 'GIT_INDEX_FILE', 'GIT_OBJECT_DIRECTORY',
+        'GIT_ALTERNATE_OBJECT_DIRECTORIES', 'GIT_COMMON_DIR', 'GIT_NAMESPACE', 'GIT_CEILING_DIRECTORIES',
+    ])
+        delete env[key];
+    return env;
+}
+function git(root, args) {
+    return execFileSync('git', [...args], {
+        cwd: root, env: environment(), stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 30_000, maxBuffer: MAX_PATCH_BYTES,
+    });
+}
+function output(root, args) {
+    return git(root, args).toString('utf8').trim();
+}
+function status(root, includeIgnored = false) {
+    return git(root, ['status', '--porcelain=v1', '-z', '--untracked-files=all',
+        ...(includeIgnored ? ['--ignored=matching'] : [])]);
+}
+function safePath(path) {
+    return Boolean(path) && !isAbsolute(path) && !path.includes('\\') && !path.includes('\0')
+        && !path.split('/').some((part) => !part || part === '.' || part === '..' || part === '.git');
+}
+function regularOrAbsent(root, path) {
+    const parts = path.split('/');
+    let current = root;
+    for (const part of parts.slice(0, -1)) {
+        current = join(current, part);
+        try {
+            const entry = lstatSync(current);
+            if (!entry.isDirectory() || entry.isSymbolicLink())
+                throw new Error('path-boundary');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return;
+            throw error;
+        }
+    }
+    try {
+        const entry = lstatSync(join(root, path));
+        if (!entry.isFile() || entry.isSymbolicLink() || entry.size > MAX_PATCH_BYTES) {
+            throw new Error('path-boundary');
+        }
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+/** Fitness regeneration may replace managed rules, but never a user's marked custom blocks. */
+function architectureKeepBlocks(value) {
+    const blocks = [...value.matchAll(/\/\/\s*arch:keep-start[^\n]*\n[\s\S]*?\/\/\s*arch:keep-end[^\n]*/g)]
+        .map((match) => match[0]);
+    const starts = (value.match(/arch:keep-start/g) ?? []).length;
+    const ends = (value.match(/arch:keep-end/g) ?? []).length;
+    if (starts !== ends || starts !== blocks.length)
+        throw new Error('architecture-keep-marker-invalid');
+    return blocks;
+}
+function changedPaths(raw, allowEmpty = false, allowIgnoredPendingSidecar = false, rootMemoryTypeChanges = []) {
+    const paths = [];
+    const untracked = [];
+    for (const record of raw.toString('utf8').split('\0').filter(Boolean)) {
+        if (record.length < 4 || record[2] !== ' ')
+            throw new Error('status-invalid');
+        const code = record.slice(0, 2);
+        const path = record.slice(3);
+        if (!safePath(path) || (code !== '??' && code !== ' M' && code !== ' D'
+            && !(code === ' T' && rootMemoryTypeChanges.includes(path))
+            && !(allowIgnoredPendingSidecar && code === '!!' && path === PRIVATE_EPIC_PENDING_SIDECAR))) {
+            throw new Error('status-invalid');
+        }
+        paths.push(path);
+        if (code === '??')
+            untracked.push(path);
+    }
+    if ((!allowEmpty && paths.length === 0) || paths.length > MAX_PATHS
+        || new Set(paths).size !== paths.length) {
+        throw new Error('status-invalid');
+    }
+    return { paths: paths.sort(), untracked: untracked.sort() };
+}
+function sameAsSnapshot(root, snapshotRoot, snapshotSha, path) {
+    const tree = git(snapshotRoot, ['ls-tree', '-z', snapshotSha, '--', path]).toString('utf8');
+    if (!tree) {
+        try {
+            lstatSync(join(root, path));
+            return false;
+        }
+        catch (error) {
+            return error.code === 'ENOENT';
+        }
+    }
+    const entry = /^([0-7]{6}) blob [a-f0-9]{40,64}\t([^\0]+)\0$/.exec(tree);
+    if (!entry || entry[2] !== path || !['100644', '100755'].includes(entry[1]))
+        return false;
+    try {
+        const file = lstatSync(join(root, path));
+        if (!file.isFile() || file.isSymbolicLink() || file.size > MAX_PATCH_BYTES
+            || Boolean(file.mode & 0o111) !== (entry[1] === '100755'))
+            return false;
+        return readFileSync(join(root, path)).equals(git(snapshotRoot, ['show', `${snapshotSha}:${path}`]));
+    }
+    catch {
+        return false;
+    }
+}
+/** Read-only regular-file comparison; it grants no additional write scope. */
+export function privateYoloSourceFileMatchesSnapshot(root, snapshotRoot, snapshotSha, path) {
+    return safePath(path) && /^[a-f0-9]{40,64}$/.test(snapshotSha) && sameAsSnapshot(root, snapshotRoot, snapshotSha, path);
+}
+function pendingSidecarMatches(root, digest) {
+    try {
+        const path = join(root, PRIVATE_EPIC_PENDING_SIDECAR);
+        const directory = lstatSync(join(root, '.neocortex'));
+        const entry = lstatSync(path);
+        return directory.isDirectory() && !directory.isSymbolicLink()
+            && directory.uid === process.getuid?.() && (directory.mode & 0o022) === 0
+            && entry.isFile() && !entry.isSymbolicLink()
+            && entry.uid === process.getuid?.() && (entry.mode & 0o077) === 0
+            && entry.size > 0 && entry.size <= 128 * 1024
+            && createHash('sha256').update(readFileSync(path)).digest('hex') === digest;
+    }
+    catch {
+        return false;
+    }
+}
+function sourceMatchesSnapshot(root, snapshotRoot, snapshotSha, frozenPaths, pendingSidecarSha256, rootMemoryScope) {
+    const claimed = new Set(frozenPaths);
+    const memory = rootMemoryScope ? privateRootMemoryEffect(rootMemoryScope).files.map(file => file.path) : [];
+    const dirty = changedPaths(status(root), true, !!pendingSidecarSha256, memory);
+    const memoryMatch = rootMemoryScope ? privateRootMemorySourceMatchReason(rootMemoryScope, root, snapshotRoot, snapshotSha) : 'matched';
+    if (memoryMatch !== 'matched') {
+        throw new Error(`root-memory-${memoryMatch}`);
+    }
+    if (!dirty.paths.every((path) => claimed.has(path) || memory.includes(path)
+        || path === PRIVATE_EPIC_PENDING_SIDECAR && !!pendingSidecarSha256
+            && pendingSidecarMatches(root, pendingSidecarSha256)))
+        throw new Error('source-unclaimed-delta');
+    if (!frozenPaths.every((path) => sameAsSnapshot(root, snapshotRoot, snapshotSha, path)))
+        throw new Error('source-frozen-mismatch');
+    return !pendingSidecarSha256 || pendingSidecarMatches(root, pendingSidecarSha256);
+}
+function patchForNewFile(root, path) {
+    const result = spawnSync('git', ['diff', '--no-index', '--binary', '--no-ext-diff', '--', '/dev/null', path], {
+        cwd: root, env: environment(), encoding: 'buffer', timeout: 30_000, maxBuffer: MAX_PATCH_BYTES,
+    });
+    if (result.error || result.status !== 1 || !Buffer.isBuffer(result.stdout)
+        || result.stdout.byteLength === 0)
+        throw new Error('patch-invalid');
+    return result.stdout;
+}
+function apply(root, patch, check) {
+    const result = spawnSync('git', ['apply', ...(check ? ['--check'] : []), '--binary', '-'], {
+        cwd: root, env: environment(), input: patch, encoding: 'buffer', timeout: 30_000,
+        maxBuffer: MAX_PATCH_BYTES,
+    });
+    if (result.error || result.status !== 0)
+        throw new Error('apply-failed');
+}
+function sameFile(source, target, path) {
+    const left = join(source, path);
+    const right = join(target, path);
+    try {
+        const sourceEntry = lstatSync(left);
+        const targetEntry = lstatSync(right);
+        return sourceEntry.isFile() && targetEntry.isFile()
+            && (sourceEntry.mode & 0o111) === (targetEntry.mode & 0o111)
+            && readFileSync(left).equals(readFileSync(right));
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            return false;
+        try {
+            lstatSync(left);
+            return false;
+        }
+        catch (leftError) {
+            if (leftError.code !== 'ENOENT')
+                return false;
+        }
+        try {
+            lstatSync(right);
+            return false;
+        }
+        catch (rightError) {
+            return rightError.code === 'ENOENT';
+        }
+    }
+}
+/** A persisted snapshot must still match both physical checkouts before reuse. */
+export function verifyPrivateYoloSnapshotBoundary(workspace, frozenPaths, snapshotSha, rootMemoryScope) {
+    verifySnapshotBoundary(workspace, frozenPaths, snapshotSha, true, rootMemoryScope);
+}
+/** Recovery may inspect unaccepted working files, never a changed index or pin. */
+export function verifyPrivateYoloRejectedCandidateOrigin(workspace, frozenPaths, snapshotSha, rootMemoryScope) {
+    verifySnapshotBoundary(workspace, frozenPaths, snapshotSha, false, rootMemoryScope);
+    if (git(workspace.workspacePath, ['diff', '--cached', '--name-only']).byteLength !== 0) {
+        throw new Error('private-execution-isolated-snapshot-unverified');
+    }
+}
+function verifySnapshotBoundary(workspace, frozenPaths, snapshotSha, requireCleanCandidate, rootMemoryScope) {
+    try {
+        if (process.platform !== 'linux' || workspace.schemaVersion !== 1
+            || !isAbsolute(workspace.sourceRoot) || !isAbsolute(workspace.workspacePath)
+            || realpathSync(workspace.sourceRoot) !== workspace.sourceRoot
+            || realpathSync(workspace.workspacePath) !== workspace.workspacePath
+            || !lstatSync(workspace.workspacePath).isDirectory()
+            || (lstatSync(workspace.workspacePath).mode & 0o077) !== 0
+            || relative(workspace.sourceRoot, workspace.workspacePath) === ''
+            || relative(workspace.sourceRoot, workspace.workspacePath).split(sep)[0] !== '..'
+            || !/^[a-f0-9]{40,64}$/.test(workspace.baseSha)
+            || !/^[a-f0-9]{40,64}$/.test(snapshotSha)
+            || output(workspace.sourceRoot, ['rev-parse', '--show-toplevel']) !== workspace.sourceRoot
+            || output(workspace.workspacePath, ['rev-parse', '--show-toplevel']) !== workspace.workspacePath
+            || output(workspace.sourceRoot, ['rev-parse', 'HEAD']) !== workspace.baseSha
+            || output(workspace.workspacePath, ['rev-parse', 'HEAD']) !== snapshotSha
+            || output(workspace.sourceRoot, ['symbolic-ref', '--short', 'HEAD']) !== workspace.executionBranch
+            || output(workspace.workspacePath, ['symbolic-ref', '--short', 'HEAD']) !== workspace.executionBranch
+            || existsSync(join(workspace.workspacePath, '.git', 'objects', 'info', 'alternates'))
+            || requireCleanCandidate && status(workspace.workspacePath, true).byteLength !== 0
+            || frozenPaths.length === 0 || frozenPaths.length > MAX_PATHS
+            || frozenPaths.some((path) => !safePath(path))
+            || new Set(frozenPaths).size !== frozenPaths.length)
+            throw new Error('boundary-invalid');
+        git(workspace.workspacePath, ['merge-base', '--is-ancestor', workspace.baseSha, snapshotSha]);
+        if (!sourceMatchesSnapshot(workspace.sourceRoot, workspace.workspacePath, snapshotSha, frozenPaths, undefined, rootMemoryScope)) {
+            throw new Error('boundary-raced');
+        }
+    }
+    catch (error) {
+        const reason = error instanceof Error && (['boundary-invalid', 'boundary-raced', 'status-invalid',
+            'source-unclaimed-delta', 'source-frozen-mismatch'].includes(error.message) || /^root-memory-(scope-binding|snapshot-ancestry|snapshot-content|source-content|source-projection)(-unsafe)?$/.test(error.message))
+            ? error.message : 'physical-inspection-failed';
+        throw new Error('private-execution-isolated-snapshot-unverified', { cause: new Error(reason) });
+    }
+}
+/**
+ * Admit one uncommitted agent patch into a still-clean root. This deliberately
+ * does not stage, commit, emit QA, or claim that a YOLO step passed.
+ * @internal The frozen-claim entrypoint below is required for C01 ownership.
+ */
+function admitPrivateYoloIsolatedWorkspace(workspace, authorizedPaths, snapshotSha, pendingSidecarSha256, candidateIntegrity, forbiddenPaths = [], rootMemoryScope) {
+    try {
+        if (process.platform !== 'linux' || workspace.schemaVersion !== 1
+            || !isAbsolute(workspace.sourceRoot) || !isAbsolute(workspace.workspacePath)
+            || realpathSync(workspace.sourceRoot) !== workspace.sourceRoot
+            || realpathSync(workspace.workspacePath) !== workspace.workspacePath
+            || !lstatSync(workspace.workspacePath).isDirectory()
+            || (lstatSync(workspace.workspacePath).mode & 0o077) !== 0
+            || relative(workspace.sourceRoot, workspace.workspacePath) === ''
+            || relative(workspace.sourceRoot, workspace.workspacePath).split(sep)[0] !== '..'
+            || output(workspace.sourceRoot, ['rev-parse', '--show-toplevel']) !== workspace.sourceRoot
+            || output(workspace.workspacePath, ['rev-parse', '--show-toplevel']) !== workspace.workspacePath
+            || output(workspace.sourceRoot, ['rev-parse', 'HEAD']) !== workspace.baseSha
+            || !/^[a-f0-9]{40,64}$/.test(snapshotSha)
+            || output(workspace.workspacePath, ['rev-parse', 'HEAD']) !== snapshotSha
+            || output(workspace.sourceRoot, ['symbolic-ref', '--short', 'HEAD']) !== workspace.executionBranch
+            || output(workspace.workspacePath, ['symbolic-ref', '--short', 'HEAD']) !== workspace.executionBranch
+            || authorizedPaths.length === 0 || authorizedPaths.length > MAX_PATHS
+            || authorizedPaths.some((path) => !safePath(path))
+            || new Set(authorizedPaths).size !== authorizedPaths.length)
+            throw new Error('authority-invalid');
+        git(workspace.workspacePath, ['merge-base', '--is-ancestor', workspace.baseSha, snapshotSha]);
+        if (!sourceMatchesSnapshot(workspace.sourceRoot, workspace.workspacePath, snapshotSha, authorizedPaths, pendingSidecarSha256, rootMemoryScope)) {
+            throw new Error('source-snapshot-mismatch');
+        }
+        const before = status(workspace.workspacePath, true);
+        const changes = changedPaths(before);
+        const claim = new Set(authorizedPaths);
+        if (changes.paths.some((path) => !claim.has(path) || forbiddenPaths.includes(path))) {
+            throw new Error('path-unclaimed');
+        }
+        if (candidateIntegrity && !candidateIntegrity())
+            throw new Error('candidate-raced');
+        for (const path of changes.paths) {
+            regularOrAbsent(workspace.workspacePath, path);
+            regularOrAbsent(workspace.sourceRoot, path);
+        }
+        const trackedPatch = git(workspace.workspacePath, ['diff', '--binary', '--no-ext-diff', '--no-textconv', 'HEAD', '--']);
+        const patches = [trackedPatch, ...changes.untracked.map((path) => patchForNewFile(workspace.workspacePath, path))];
+        const patch = Buffer.concat(patches.map((item) => Buffer.concat([item, Buffer.from('\n')])));
+        if (patch.byteLength === 0 || patch.byteLength > MAX_PATCH_BYTES
+            || !status(workspace.workspacePath, true).equals(before)
+            || candidateIntegrity && !candidateIntegrity()
+            || !sourceMatchesSnapshot(workspace.sourceRoot, workspace.workspacePath, snapshotSha, authorizedPaths, pendingSidecarSha256, rootMemoryScope)) {
+            throw new Error('patch-raced');
+        }
+        apply(workspace.sourceRoot, patch, true);
+        if (!status(workspace.workspacePath, true).equals(before)
+            || candidateIntegrity && !candidateIntegrity()
+            || !sourceMatchesSnapshot(workspace.sourceRoot, workspace.workspacePath, snapshotSha, authorizedPaths, pendingSidecarSha256, rootMemoryScope)) {
+            throw new Error('patch-raced');
+        }
+        apply(workspace.sourceRoot, patch, false);
+        const memory = rootMemoryScope ? privateRootMemoryEffect(rootMemoryScope).files.map(file => file.path) : [];
+        const admitted = changedPaths(status(workspace.sourceRoot), true, !!pendingSidecarSha256, memory);
+        if (admitted.paths.some((path) => !claim.has(path) && !memory.includes(path) && path !== PRIVATE_EPIC_PENDING_SIDECAR)
+            || rootMemoryScope && !privateRootMemorySourceMatches(rootMemoryScope, workspace.sourceRoot)
+            || pendingSidecarSha256 && !pendingSidecarMatches(workspace.sourceRoot, pendingSidecarSha256)
+            || authorizedPaths.some((path) => !sameFile(workspace.workspacePath, workspace.sourceRoot, path))
+            || output(workspace.sourceRoot, ['rev-parse', 'HEAD']) !== workspace.baseSha
+            || output(workspace.sourceRoot, ['symbolic-ref', '--short', 'HEAD']) !== workspace.executionBranch) {
+            throw new Error('admission-raced');
+        }
+        return Object.freeze({ schemaVersion: 1, outcome: 'admitted-unverified',
+            baseSha: workspace.baseSha, executionBranch: workspace.executionBranch,
+            changedPaths: Object.freeze([...changes.paths]),
+            patchSha256: createHash('sha256').update(patch).digest('hex') });
+    }
+    catch {
+        throw new Error('private-execution-isolated-admission-unverified');
+    }
+}
+/** Bind one-shot admission to the physically verified C01 claim and graph. */
+export async function admitPrivateYoloFrozenWorkspace(workspace, storyId, graphRevision, snapshotSha = workspace.baseSha, rootOwnedSetup = false, rootMemoryScope) {
+    try {
+        const frozen = await readPrivateYoloFrozenWriteSet(workspace.sourceRoot, storyId, workspace.executionBranch, graphRevision);
+        if (rootMemoryScope) {
+            const effect = privateRootMemoryEffect(rootMemoryScope);
+            if (effect.storyId !== storyId || effect.childClaimRevision !== createHash('sha256').update([...frozen].sort().join('\0')).digest('hex')) {
+                throw new Error('root-memory-claim-mismatch');
+            }
+        }
+        const statePath = join(workspace.workspacePath, '.neocortex', 'state.json');
+        const stat = lstatSync(statePath);
+        if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_PATCH_BYTES) {
+            throw new Error('candidate-state-invalid');
+        }
+        verifyPrivateYoloCandidateWriteSet(readFileSync(statePath, 'utf8'), storyId, frozen);
+        const receipt = admitPrivateYoloIsolatedWorkspace(workspace, frozen, snapshotSha, undefined, undefined, rootOwnedSetup ? ['.neocortex/state.json'] : [], rootMemoryScope);
+        await verifyPrivateYoloCleanBaseline(workspace.sourceRoot, storyId, workspace.executionBranch, graphRevision);
+        return receipt;
+    }
+    catch {
+        throw new Error('private-execution-isolated-admission-unverified');
+    }
+}
+/**
+ * Admit only a generated epic whose physical artifacts agree with the reserved
+ * epic ID. The claim is still unverified: this checks structure and write scope,
+ * not the quality of the agent's planning or story acceptance criteria.
+ */
+// A newly generated queue entry cannot carry a private agent's workflow authority.
+const PRIVATE_EPIC_STORY_DRAFT_KEYS = new Set([
+    'id', 'epic_id', 'title', 'description', 'status', 'steps_completed', 'last_step',
+    'branch_name', 'estimated_hours', 'complexity', 'priority', 'type', 'depends_on',
+    'created_at', 'updated_at', 'acceptance_criteria',
+]);
+const PRIVATE_EPIC_DRAFT_KEYS = new Set([
+    'id', 'title', 'description', 'status', 'stories', 'total_stories', 'completed_stories',
+    'estimated_hours', 'complexity', 'priority', 'created_at', 'updated_at', 'last_updated', 'source', 'tags',
+]);
+function validPrivateEpicDraftMetadata(value) {
+    const strings = ['title', 'description', 'complexity', 'priority', 'type', 'created_at', 'updated_at', 'last_updated', 'source'];
+    if (strings.some(key => value[key] !== undefined && typeof value[key] !== 'string'))
+        return false;
+    if (value.estimated_hours !== undefined && (typeof value.estimated_hours !== 'number'
+        || !Number.isFinite(value.estimated_hours) || value.estimated_hours < 0))
+        return false;
+    return ['depends_on', 'acceptance_criteria', 'tags'].every(key => value[key] === undefined
+        || Array.isArray(value[key]) && value[key].length <= 256
+            && value[key].every(item => typeof item === 'string'));
+}
+function validPrivateEpicStoryDraft(story) {
+    return Object.keys(story).every(key => PRIVATE_EPIC_STORY_DRAFT_KEYS.has(key))
+        && story.status === 'backlog' && validPrivateEpicDraftMetadata(story)
+        && (story.steps_completed === undefined || Array.isArray(story.steps_completed) && story.steps_completed.length === 0)
+        && (story.last_step === undefined || story.last_step === null)
+        && (story.branch_name === undefined || story.branch_name === null);
+}
+export function admitPrivateEpicClaimWorkspace(workspace, claimId, epicId, logicalFingerprint, pendingSidecarSha256) {
+    try {
+        if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(claimId)
+            || !/^P[1-9][0-9]*$/.test(epicId) || !/^[a-f0-9]{64}$/.test(logicalFingerprint)
+            || !/^[a-f0-9]{64}$/.test(pendingSidecarSha256)
+            || !pendingSidecarMatches(workspace.sourceRoot, pendingSidecarSha256)) {
+            throw new Error('claim-invalid');
+        }
+        const pending = JSON.parse(readFileSync(join(workspace.sourceRoot, PRIVATE_EPIC_PENDING_SIDECAR), 'utf8'));
+        const operation = pending && typeof pending === 'object' && !Array.isArray(pending)
+            ? pending.operations?.[logicalFingerprint]
+            : undefined;
+        if (!operation || typeof operation !== 'object' || Array.isArray(operation)
+            || operation.claimId !== claimId
+            || operation.epicId !== epicId) {
+            throw new Error('claim-sidecar-mismatch');
+        }
+        const changes = changedPaths(status(workspace.workspacePath, true));
+        const epicPath = `docs/epics/epic-${epicId}.md`;
+        const statePath = '.neocortex/state.json';
+        const storyPattern = new RegExp(`^docs/stories/${epicId}\\.[0-9]{2}\\.story\\.md$`);
+        const storyPaths = changes.paths.filter((path) => storyPattern.test(path));
+        if (!changes.paths.includes(epicPath) || !changes.paths.includes(statePath)
+            || storyPaths.length === 0 || storyPaths.length > 99
+            || changes.paths.some((path) => path !== epicPath && path !== statePath
+                && path !== 'NEOCORTEX.md' && !storyPattern.test(path))) {
+            throw new Error('artifact-scope-invalid');
+        }
+        const storyIds = storyPaths.map((path) => path.slice('docs/stories/'.length, -'.story.md'.length)).sort();
+        if (storyIds.some((id, index) => id !== `${epicId}.${String(index + 1).padStart(2, '0')}`)) {
+            throw new Error('story-sequence-invalid');
+        }
+        for (const path of [epicPath, ...storyPaths]) {
+            try {
+                lstatSync(join(workspace.sourceRoot, path));
+                throw new Error('artifact-already-exists');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        const scalar = (path, key) => {
+            regularOrAbsent(workspace.workspacePath, path);
+            const content = readFileSync(join(workspace.workspacePath, path), 'utf8');
+            if (Buffer.byteLength(content) > MAX_PATCH_BYTES)
+                return null;
+            const frontmatter = /^---\r?\n([\s\S]{1,8192}?)\r?\n---(?:\r?\n|$)/.exec(content)?.[1];
+            const line = frontmatter?.split(/\r?\n/).find((item) => item.startsWith(`${key}:`));
+            const raw = line?.slice(key.length + 1).trim();
+            return raw?.replace(/^(["'])(.*)\1$/, '$2') ?? null;
+        };
+        if (scalar(epicPath, 'id') !== epicId
+            || storyPaths.some((path, index) => scalar(path, 'id') !== storyIds[index]
+                || scalar(path, 'epic_id') !== epicId)) {
+            throw new Error('artifact-id-invalid');
+        }
+        regularOrAbsent(workspace.workspacePath, statePath);
+        const state = JSON.parse(readFileSync(join(workspace.workspacePath, statePath), 'utf8'));
+        if (!state || typeof state !== 'object' || Array.isArray(state))
+            throw new Error('state-invalid');
+        const record = state;
+        const epics = record.epics;
+        const stories = record.stories;
+        const epic = epics?.[epicId];
+        const ledger = record.epic_id_ledger;
+        if (record.schema_version !== 1 || !epic || epic.id !== epicId || epic.status !== 'memory-updated'
+            || Object.keys(epic).some(key => !PRIVATE_EPIC_DRAFT_KEYS.has(key))
+            || !validPrivateEpicDraftMetadata(epic)
+            || epic.completed_stories !== undefined && epic.completed_stories !== 0
+            || epic.total_stories !== undefined && epic.total_stories !== storyIds.length
+            || !Array.isArray(epic.stories) || epic.stories.length !== storyIds.length
+            || epic.stories.some((id, index) => id !== storyIds[index])
+            || !stories || storyIds.some((id) => {
+            const story = stories[id];
+            return !story || story.id !== id || story.epic_id !== epicId || !validPrivateEpicStoryDraft(story);
+        })
+            || !ledger || !Array.isArray(ledger.reserved_ids)
+            || !ledger.reserved_ids.includes(epicId)) {
+            throw new Error('state-claim-mismatch');
+        }
+        regularOrAbsent(workspace.sourceRoot, statePath);
+        const original = JSON.parse(readFileSync(join(workspace.sourceRoot, statePath), 'utf8'));
+        const originalEpics = original.epics;
+        const originalStories = original.stories;
+        if (!originalEpics || !originalStories || originalEpics[epicId] !== undefined
+            || storyIds.some((id) => originalStories[id] !== undefined)) {
+            throw new Error('state-claim-conflict');
+        }
+        const { [epicId]: _newEpic, ...priorEpics } = epics;
+        const priorStories = { ...stories };
+        for (const id of storyIds)
+            delete priorStories[id];
+        const { epic_id_ledger: _oldLedger, last_updated: _oldUpdated, ...originalOther } = original;
+        const { epic_id_ledger: _newLedger, last_updated: _newUpdated, ...candidateOther } = record;
+        if (!isDeepStrictEqual(priorEpics, originalEpics)
+            || !isDeepStrictEqual(priorStories, originalStories)
+            || !isDeepStrictEqual({ ...candidateOther, epics: undefined, stories: undefined }, { ...originalOther, epics: undefined, stories: undefined })) {
+            throw new Error('state-unrelated-drift');
+        }
+        const priorReserved = original.epic_id_ledger && typeof original.epic_id_ledger === 'object'
+            ? original.epic_id_ledger.reserved_ids : undefined;
+        const { reserved_ids: _candidateReserved, ...candidateLedgerOther } = ledger;
+        const originalLedger = original.epic_id_ledger && typeof original.epic_id_ledger === 'object'
+            ? original.epic_id_ledger : { schema_version: 1 };
+        const { reserved_ids: _originalReserved, ...originalLedgerOther } = originalLedger;
+        if (priorReserved !== undefined && (!Array.isArray(priorReserved)
+            || priorReserved.some((id) => typeof id !== 'string' || !/^P[1-9][0-9]*$/.test(id))
+            || new Set(priorReserved).size !== priorReserved.length))
+            throw new Error('ledger-drift');
+        const expectedReserved = [...(Array.isArray(priorReserved) ? priorReserved : [])];
+        if (!expectedReserved.includes(epicId))
+            expectedReserved.push(epicId);
+        if (!isDeepStrictEqual(ledger.reserved_ids, expectedReserved)
+            || !isDeepStrictEqual(candidateLedgerOther, originalLedgerOther)) {
+            throw new Error('ledger-drift');
+        }
+        return admitPrivateYoloIsolatedWorkspace(workspace, changes.paths, workspace.baseSha, pendingSidecarSha256);
+    }
+    catch {
+        throw new Error('private-execution-epic-claim-admission-unverified');
+    }
+}
+/** P01 may admit planning artifacts only. Canonical state and QA remain root-owned. */
+export function admitPrivateIdeaDiagnosisWorkspace(workspace, claimId, epicId, logicalFingerprint, pendingSidecarSha256, expectedIdea) {
+    try {
+        if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(claimId)
+            || !/^P[1-9][0-9]{0,11}$/.test(epicId)
+            || !/^[a-f0-9]{64}$/.test(logicalFingerprint)
+            || !/^[a-f0-9]{64}$/.test(pendingSidecarSha256)
+            || typeof expectedIdea !== 'string' || !expectedIdea.trim() || expectedIdea.length > 16_384
+            || !pendingSidecarMatches(workspace.sourceRoot, pendingSidecarSha256)) {
+            throw new Error('planning-claim-invalid');
+        }
+        const pending = JSON.parse(readFileSync(join(workspace.sourceRoot, PRIVATE_EPIC_PENDING_SIDECAR), 'utf8'));
+        const operation = pending && typeof pending === 'object' && !Array.isArray(pending)
+            ? pending.operations?.[logicalFingerprint]
+            : undefined;
+        if (!operation || typeof operation !== 'object' || Array.isArray(operation)
+            || operation.claimId !== claimId
+            || operation.epicId !== epicId) {
+            throw new Error('planning-claim-sidecar-mismatch');
+        }
+        const prefix = `.neocortex/planning/epic-${epicId}`;
+        const ideaPath = `${prefix}/idea.json`;
+        const diagnosisPath = `${prefix}/diagnosis.md`;
+        const enrichedPath = `${prefix}/enriched-prompt.md`;
+        const indexPath = '.neocortex/planning/planning.json';
+        const authorized = [ideaPath, diagnosisPath, enrichedPath, indexPath];
+        const changes = changedPaths(status(workspace.workspacePath, true));
+        if (changes.paths.length !== authorized.length
+            || changes.paths.some((path) => !authorized.includes(path))) {
+            throw new Error('planning-artifact-scope-invalid');
+        }
+        for (const path of [ideaPath, diagnosisPath, enrichedPath]) {
+            regularOrAbsent(workspace.workspacePath, path);
+            try {
+                lstatSync(join(workspace.sourceRoot, path));
+                throw new Error('planning-artifact-already-exists');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        const readCandidate = (path, maxBytes) => {
+            const entry = lstatSync(join(workspace.workspacePath, path));
+            if (!entry.isFile() || entry.isSymbolicLink() || entry.size < 1 || entry.size > maxBytes) {
+                throw new Error('planning-artifact-invalid');
+            }
+            return readFileSync(join(workspace.workspacePath, path), 'utf8');
+        };
+        const idea = JSON.parse(readCandidate(ideaPath, 32 * 1024));
+        if (!idea || typeof idea !== 'object' || Array.isArray(idea)
+            || idea.epic_id !== epicId
+            || idea.status !== 'diagnosed'
+            || typeof idea.raw_input !== 'string'
+            || idea.raw_input !== expectedIdea) {
+            throw new Error('planning-idea-invalid');
+        }
+        const diagnosis = readCandidate(diagnosisPath, 256 * 1024);
+        const enriched = readCandidate(enrichedPath, 256 * 1024);
+        const documentIdentity = (content, stepDigest) => {
+            const header = /^---\n([\s\S]{1,8192}?)\n---\n/.exec(content.replace(/\r\n/g, '\n'))?.[1];
+            if (!header)
+                return false;
+            const lines = header.split('\n');
+            const scalar = (key) => {
+                const matches = lines.filter((line) => line.startsWith(`${key}:`));
+                return matches.length === 1 ? matches[0].slice(key.length + 1).trim().replace(/^(?:"(.*)"|'(.*)')$/, '$1$2') : undefined;
+            };
+            return scalar('epic_id') === epicId
+                && matchesStepDigest(scalar('step'), stepDigest) && scalar('status') === 'completed';
+        };
+        if (!documentIdentity(diagnosis, P01_DIAGNOSIS_STEP_SHA256)
+            || !documentIdentity(enriched, P01_ENRICHMENT_STEP_SHA256)) {
+            throw new Error('planning-document-identity-invalid');
+        }
+        regularOrAbsent(workspace.workspacePath, indexPath);
+        regularOrAbsent(workspace.sourceRoot, indexPath);
+        const candidate = JSON.parse(readCandidate(indexPath, 128 * 1024));
+        const original = existsSync(join(workspace.sourceRoot, indexPath))
+            ? JSON.parse(readFileSync(join(workspace.sourceRoot, indexPath), 'utf8')) : undefined;
+        if (!candidate || typeof candidate !== 'object' || Array.isArray(candidate)
+            || !('epics' in candidate) || !candidate.epics || typeof candidate.epics !== 'object'
+            || Array.isArray(candidate.epics)
+            || original !== undefined && (!original || typeof original !== 'object' || Array.isArray(original)
+                || !('epics' in original) || !original.epics || typeof original.epics !== 'object'
+                || Array.isArray(original.epics))) {
+            throw new Error('planning-index-invalid');
+        }
+        const index = candidate;
+        const entries = index.epics;
+        const recorded = entries[epicId];
+        const record = recorded;
+        const outputs = record?.output_files;
+        if (!recorded || typeof recorded !== 'object' || Array.isArray(recorded)
+            || record?.id !== epicId || record.status !== 'diagnosed'
+            || record.idea !== idea.raw_input
+            || !Array.isArray(record.steps_completed) || record.steps_completed.length !== 1
+            || !matchesStepDigest(record.steps_completed[0], P01_DIAGNOSIS_STEP_SHA256)
+            || typeof record.created_at !== 'string' || !Number.isFinite(Date.parse(record.created_at))
+            || record.completed_at !== null || !outputs || typeof outputs !== 'object' || Array.isArray(outputs)
+            || !isDeepStrictEqual(outputs, { diagnosis: `${prefix}/diagnosis.md` })
+            || !isDeepStrictEqual(Object.keys(record).sort(), ['id', 'idea', 'status', 'steps_completed', 'created_at', 'completed_at', 'output_files'].sort())) {
+            throw new Error('planning-index-epic-invalid');
+        }
+        const { last_scan: _newScan, epics: _newEpics, ...candidateOther } = index;
+        const baseline = original;
+        const prior = baseline?.epics;
+        const { last_scan: _oldScan, epics: _oldEpics, ...originalOther } = baseline ?? {};
+        const { [epicId]: _newEntry, ...unrelatedEntries } = entries;
+        if (prior?.[epicId] !== undefined
+            || !isDeepStrictEqual(unrelatedEntries, prior ?? {})
+            || baseline !== undefined && !isDeepStrictEqual(candidateOther, originalOther)
+            || baseline === undefined && (Object.keys(entries).length !== 1
+                || !isDeepStrictEqual(Object.keys(index).sort(), ['version', 'next_epic_id', 'last_scan', 'existing_epics_discovered', 'epics'].sort())
+                || index.version !== '1.0.0' || index.next_epic_id !== 1
+                || !isDeepStrictEqual(index.existing_epics_discovered, []))
+            || typeof index.last_scan !== 'string' || !Number.isFinite(Date.parse(index.last_scan))) {
+            throw new Error('planning-index-drift');
+        }
+        const digests = authorized.map((path) => createHash('sha256')
+            .update(readFileSync(join(workspace.workspacePath, path))).digest('hex'));
+        const candidateIntegrity = () => authorized.every((path, index) => {
+            try {
+                regularOrAbsent(workspace.workspacePath, path);
+                return createHash('sha256').update(readFileSync(join(workspace.workspacePath, path))).digest('hex')
+                    === digests[index];
+            }
+            catch {
+                return false;
+            }
+        });
+        return admitPrivateYoloIsolatedWorkspace(workspace, authorized, workspace.baseSha, pendingSidecarSha256, candidateIntegrity);
+    }
+    catch {
+        throw new Error('private-execution-planning-diagnosis-admission-unverified');
+    }
+}
+/** P02 admits only a research candidate on a committed, physically accepted P01. */
+export function admitPrivateIdeaResearchWorkspace(workspace, claimId, epicId, diagnosisReceiptId, intakeRevision, stateSnapshotSha256) {
+    try {
+        if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(claimId)
+            || !/^P[1-9][0-9]{0,11}$/.test(epicId)
+            || !/^[a-f0-9]{64}$/.test(diagnosisReceiptId)
+            || !/^[a-f0-9]{64}$/.test(intakeRevision)
+            || !/^[a-f0-9]{64}$/.test(stateSnapshotSha256)) {
+            throw new Error('planning-research-binding-invalid');
+        }
+        const statePath = '.neocortex/state.json';
+        const indexPath = '.neocortex/planning/planning.json';
+        const prefix = `.neocortex/planning/epic-${epicId}`;
+        const researchPath = `${prefix}/research.md`;
+        regularOrAbsent(workspace.sourceRoot, statePath);
+        regularOrAbsent(workspace.workspacePath, statePath);
+        regularOrAbsent(workspace.sourceRoot, indexPath);
+        regularOrAbsent(workspace.workspacePath, indexPath);
+        regularOrAbsent(workspace.sourceRoot, researchPath);
+        regularOrAbsent(workspace.workspacePath, researchPath);
+        if (lstatSync(join(workspace.sourceRoot, statePath)).size > 8 * 1024 * 1024
+            || lstatSync(join(workspace.workspacePath, statePath)).size > 8 * 1024 * 1024
+            || lstatSync(join(workspace.sourceRoot, indexPath)).size > 128 * 1024
+            || lstatSync(join(workspace.workspacePath, indexPath)).size > 128 * 1024) {
+            throw new Error('planning-research-source-size-invalid');
+        }
+        const stateBytes = readFileSync(join(workspace.sourceRoot, statePath));
+        if (createHash('sha256').update(stateBytes).digest('hex') !== stateSnapshotSha256
+            || !stateBytes.equals(readFileSync(join(workspace.workspacePath, statePath)))) {
+            throw new Error('planning-research-state-drift');
+        }
+        const state = JSON.parse(stateBytes.toString('utf8'));
+        const predecessor = acceptedPlanningDiagnosisPredecessor(state, claimId, epicId);
+        if (predecessor.diagnosisReceiptId !== diagnosisReceiptId
+            || predecessor.intakeRevision !== intakeRevision) {
+            throw new Error('planning-research-predecessor-mismatch');
+        }
+        const epicState = state.epics[epicId];
+        const physicalDigests = epicState.createEpicPlanningPhysical.artifactDigests;
+        for (const [name, path] of Object.entries({ idea: `${prefix}/idea.json`,
+            diagnosis: `${prefix}/diagnosis.md`, enrichment: `${prefix}/enriched-prompt.md`,
+            index: indexPath })) {
+            regularOrAbsent(workspace.sourceRoot, path);
+            if (createHash('sha256').update(readFileSync(join(workspace.sourceRoot, path))).digest('hex')
+                !== physicalDigests[name])
+                throw new Error('planning-research-source-artifact-drift');
+        }
+        try {
+            lstatSync(join(workspace.sourceRoot, researchPath));
+            throw new Error('planning-research-already-exists');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const authorized = [researchPath, indexPath];
+        const changes = changedPaths(status(workspace.workspacePath, true));
+        if (changes.paths.length !== authorized.length
+            || changes.paths.some((path) => !authorized.includes(path))) {
+            throw new Error('planning-research-write-scope-invalid');
+        }
+        const researchEntry = lstatSync(join(workspace.workspacePath, researchPath));
+        if (!researchEntry.isFile() || researchEntry.isSymbolicLink()
+            || researchEntry.size < 64 || researchEntry.size > 256 * 1024) {
+            throw new Error('planning-research-document-invalid');
+        }
+        const research = readFileSync(join(workspace.workspacePath, researchPath), 'utf8');
+        const header = /^---\n([\s\S]{1,8192}?)\n---\n/.exec(research.replace(/\r\n/g, '\n'))?.[1];
+        const scalar = (key) => {
+            const found = header?.split('\n').filter((line) => line.startsWith(`${key}:`)) ?? [];
+            return found.length === 1
+                ? found[0].slice(key.length + 1).trim().replace(/^(?:"(.*)"|'(.*)')$/, '$1$2')
+                : undefined;
+        };
+        if (!header || scalar('epic_id') !== epicId || scalar('status') !== 'completed'
+            || !matchesStepDigest(scalar('step'), P02_RESEARCH_STEP_SHA256)
+            || !research.slice(header.length + 8).trim()) {
+            throw new Error('planning-research-document-identity-invalid');
+        }
+        const sourceIndex = JSON.parse(readFileSync(join(workspace.sourceRoot, indexPath), 'utf8'));
+        const candidateIndex = JSON.parse(readFileSync(join(workspace.workspacePath, indexPath), 'utf8'));
+        if (!sourceIndex || typeof sourceIndex !== 'object' || Array.isArray(sourceIndex)
+            || !candidateIndex || typeof candidateIndex !== 'object' || Array.isArray(candidateIndex)) {
+            throw new Error('planning-research-index-invalid');
+        }
+        const source = sourceIndex;
+        const candidate = candidateIndex;
+        const sourceEpics = source.epics;
+        const candidateEpics = candidate.epics;
+        const oldEpic = sourceEpics?.[epicId];
+        if (!sourceEpics || Array.isArray(sourceEpics) || !candidateEpics || Array.isArray(candidateEpics)
+            || !oldEpic || Array.isArray(oldEpic) || oldEpic.id !== epicId
+            || oldEpic.idea !== predecessor.rawIntent || oldEpic.status !== 'diagnosed'
+            || !Array.isArray(oldEpic.steps_completed) || oldEpic.steps_completed.length !== 1
+            || !matchesStepDigest(oldEpic.steps_completed[0], P01_DIAGNOSIS_STEP_SHA256)
+            || !isDeepStrictEqual(oldEpic.output_files, { diagnosis: `${prefix}/diagnosis.md` })
+            || typeof candidate.last_scan !== 'string'
+            || !Number.isFinite(Date.parse(candidate.last_scan))) {
+            throw new Error('planning-research-index-predecessor-invalid');
+        }
+        const expectedEpic = { ...oldEpic, status: 'researched',
+            steps_completed: [...oldEpic.steps_completed, scalar('step')],
+            output_files: { diagnosis: `${prefix}/diagnosis.md`, research: researchPath } };
+        const expectedIndex = { ...source, last_scan: candidate.last_scan,
+            epics: { ...sourceEpics, [epicId]: expectedEpic } };
+        if (!isDeepStrictEqual(candidate, expectedIndex)) {
+            throw new Error('planning-research-index-drift');
+        }
+        const digests = authorized.map((path) => createHash('sha256')
+            .update(readFileSync(join(workspace.workspacePath, path))).digest('hex'));
+        const candidateIntegrity = () => authorized.every((path, index) => {
+            try {
+                regularOrAbsent(workspace.workspacePath, path);
+                return createHash('sha256').update(readFileSync(join(workspace.workspacePath, path))).digest('hex')
+                    === digests[index];
+            }
+            catch {
+                return false;
+            }
+        });
+        return admitPrivateYoloIsolatedWorkspace(workspace, authorized, workspace.baseSha, planningPendingSidecarDigest(workspace.sourceRoot), candidateIntegrity);
+    }
+    catch {
+        throw new Error('private-execution-planning-research-admission-unverified');
+    }
+}
+/** Admit only a bounded P03 document/index candidate; root owns QA and state integration. */
+export function admitPrivateGenerateEpicWorkspace(workspace, claimId, epicId, diagnosisReceiptId, researchReceiptId, intakeRevision, sourceStateSha256) {
+    try {
+        if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(claimId)
+            || !/^P[1-9][0-9]{0,11}$/.test(epicId)
+            || [diagnosisReceiptId, researchReceiptId, intakeRevision, sourceStateSha256]
+                .some((value) => !/^[a-f0-9]{64}$/.test(value)))
+            throw new Error('planning-generation-binding-invalid');
+        const statePath = '.neocortex/state.json';
+        const indexPath = '.neocortex/planning/planning.json';
+        const prefix = `.neocortex/planning/epic-${epicId}`;
+        const epicPath = `docs/epics/epic-${epicId}.md`;
+        for (const path of [statePath, indexPath, `${prefix}/idea.json`, `${prefix}/diagnosis.md`,
+            `${prefix}/enriched-prompt.md`, `${prefix}/research.md`]) {
+            regularOrAbsent(workspace.sourceRoot, path);
+            regularOrAbsent(workspace.workspacePath, path);
+            const source = readFileSync(join(workspace.sourceRoot, path));
+            if (path !== indexPath && !source.equals(readFileSync(join(workspace.workspacePath, path)))
+                || !source.equals(git(workspace.sourceRoot, ['show', `HEAD:${path}`]))) {
+                throw new Error('planning-generation-predecessor-uncommitted');
+            }
+        }
+        const stateBytes = readFileSync(join(workspace.sourceRoot, statePath));
+        if (stateBytes.byteLength > 8 * 1024 * 1024
+            || createHash('sha256').update(stateBytes).digest('hex') !== sourceStateSha256) {
+            throw new Error('planning-generation-state-drift');
+        }
+        const state = JSON.parse(stateBytes.toString('utf8'));
+        const predecessor = acceptedPlanningResearchPredecessor(state, claimId, epicId);
+        if (predecessor.diagnosisReceiptId !== diagnosisReceiptId
+            || predecessor.researchReceiptId !== researchReceiptId
+            || predecessor.intakeRevision !== intakeRevision)
+            throw new Error('planning-generation-predecessor-mismatch');
+        const epicState = (state.epics[epicId]);
+        const p01 = epicState.createEpicPlanningPhysical.artifactDigests;
+        const p02 = epicState.createEpicPlanningResearchPhysical.artifactDigests;
+        const acceptedFiles = { idea: `${prefix}/idea.json`, diagnosis: `${prefix}/diagnosis.md`,
+            enrichment: `${prefix}/enriched-prompt.md`, research: `${prefix}/research.md` };
+        for (const [name, path] of Object.entries(acceptedFiles)) {
+            const expected = name === 'research' ? p02.research : p01[name];
+            if (createHash('sha256').update(readFileSync(join(workspace.sourceRoot, path))).digest('hex') !== expected) {
+                throw new Error('planning-generation-artifact-drift');
+            }
+        }
+        if (createHash('sha256').update(readFileSync(join(workspace.sourceRoot, indexPath))).digest('hex')
+            !== p02.index)
+            throw new Error('planning-generation-index-drift');
+        const changes = changedPaths(status(workspace.workspacePath, true));
+        const storyPattern = new RegExp(`^docs/stories/${epicId}\\.([0-9]{2})\\.story\\.md$`);
+        const storyPaths = changes.paths.filter((path) => storyPattern.test(path)).sort((left, right) => Number(storyPattern.exec(left)[1]) - Number(storyPattern.exec(right)[1]));
+        if (storyPaths.length < 1 || storyPaths.length > 24
+            || storyPaths.some((path, index) => storyPattern.exec(path)[1] !== String(index + 1).padStart(2, '0'))
+            || changes.paths.length !== storyPaths.length + 2
+            || changes.paths.some((path) => path !== epicPath && path !== indexPath && !storyPattern.test(path))) {
+            throw new Error('planning-generation-write-scope-invalid');
+        }
+        const authorized = [epicPath, indexPath, ...storyPaths];
+        for (const path of [epicPath, ...storyPaths]) {
+            regularOrAbsent(workspace.sourceRoot, path);
+            regularOrAbsent(workspace.workspacePath, path);
+            try {
+                lstatSync(join(workspace.sourceRoot, path));
+                throw new Error('planning-generation-path-collision');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+            const entry = lstatSync(join(workspace.workspacePath, path));
+            if (!entry.isFile() || entry.isSymbolicLink() || entry.size < 128
+                || entry.size > (path === epicPath ? 512 : 128) * 1024) {
+                throw new Error('planning-generation-document-invalid');
+            }
+        }
+        const scalar = (content, key) => {
+            const header = /^---\n([\s\S]{1,8192}?)\n---\n/.exec(content.replace(/\r\n/g, '\n'))?.[1];
+            const fields = header?.split('\n').filter((line) => line.startsWith(`${key}:`)) ?? [];
+            return fields.length === 1 ? fields[0].slice(key.length + 1).trim()
+                .replace(/^(?:"(.*)"|'(.*)')$/, '$1$2') : undefined;
+        };
+        const epicDocument = readFileSync(join(workspace.workspacePath, epicPath), 'utf8');
+        if (scalar(epicDocument, 'id') !== epicId
+            || scalar(epicDocument, 'stories_count') !== String(storyPaths.length)
+            || !epicDocument.includes('## Stories'))
+            throw new Error('planning-generation-epic-invalid');
+        for (const [index, path] of storyPaths.entries()) {
+            const story = readFileSync(join(workspace.workspacePath, path), 'utf8');
+            const header = /^---\n([\s\S]{1,8192}?)\n---\n/.exec(story.replace(/\r\n/g, '\n'))?.[1] ?? '';
+            if (scalar(story, 'id') !== `${epicId}.${String(index + 1).padStart(2, '0')}`
+                || scalar(story, 'epic_id') !== epicId || /^\s*epic\s*:/m.test(header)
+                || scalar(story, 'status') !== 'backlog'
+                || !story.includes('## Acceptance Criteria')
+                || !/\bGiven\b[\s\S]*\bWhen\b[\s\S]*\bThen\b/.test(story)) {
+                throw new Error('planning-generation-story-invalid');
+            }
+        }
+        const before = JSON.parse(readFileSync(join(workspace.sourceRoot, indexPath), 'utf8'));
+        const after = JSON.parse(readFileSync(join(workspace.workspacePath, indexPath), 'utf8'));
+        const sourceEpics = before.epics;
+        const candidateEpics = after.epics;
+        const oldEpic = sourceEpics?.[epicId];
+        const candidateEpic = candidateEpics?.[epicId];
+        if (!sourceEpics || !candidateEpics || !oldEpic || !candidateEpic
+            || oldEpic.id !== epicId || oldEpic.status !== 'researched'
+            || !Array.isArray(oldEpic.steps_completed) || oldEpic.steps_completed.length !== 2
+            || !matchesStepDigest(oldEpic.steps_completed[0], P01_DIAGNOSIS_STEP_SHA256)
+            || !matchesStepDigest(oldEpic.steps_completed[1], P02_RESEARCH_STEP_SHA256)
+            || !isDeepStrictEqual(oldEpic.output_files, {
+                diagnosis: `${prefix}/diagnosis.md`, research: `${prefix}/research.md`,
+            }) || typeof after.last_scan !== 'string' || !Number.isFinite(Date.parse(after.last_scan))
+            || typeof candidateEpic.completed_at !== 'string'
+            || !Number.isFinite(Date.parse(candidateEpic.completed_at))) {
+            throw new Error('planning-generation-index-predecessor-invalid');
+        }
+        const generatedStep = candidateEpic.steps_completed?.[2];
+        if (!matchesStepDigest(generatedStep, P03_GENERATION_STEP_SHA256)) {
+            throw new Error('planning-generation-index-transition-invalid');
+        }
+        const expected = { ...before, last_scan: after.last_scan, epics: { ...sourceEpics,
+                [epicId]: { ...oldEpic, status: 'generated',
+                    steps_completed: [...oldEpic.steps_completed, generatedStep],
+                    completed_at: candidateEpic.completed_at,
+                    output_files: { ...oldEpic.output_files,
+                        epic: epicPath, stories: storyPaths } } } };
+        if (!isDeepStrictEqual(after, expected)) {
+            throw new Error('planning-generation-index-transition-invalid');
+        }
+        const digests = authorized.map((path) => createHash('sha256')
+            .update(readFileSync(join(workspace.workspacePath, path))).digest('hex'));
+        const candidateIntegrity = () => authorized.every((path, index) => {
+            try {
+                regularOrAbsent(workspace.workspacePath, path);
+                return createHash('sha256').update(readFileSync(join(workspace.workspacePath, path))).digest('hex')
+                    === digests[index];
+            }
+            catch {
+                return false;
+            }
+        });
+        return admitPrivateYoloIsolatedWorkspace(workspace, authorized, workspace.baseSha, planningPendingSidecarDigest(workspace.sourceRoot), candidateIntegrity);
+    }
+    catch {
+        throw new Error('private-execution-planning-generation-admission-unverified');
+    }
+}
+/** Admit a state-bound step without granting the agent direct source writes. */
+/** Bind a standalone private step to its actual local story and existing write set. */
+export function appendPrivateStateBoundStepHandoff(material, workspace, storyId) {
+    try {
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(storyId))
+            throw new Error('story-id-invalid');
+        const statePath = '.neocortex/state.json';
+        regularOrAbsent(workspace.sourceRoot, statePath);
+        regularOrAbsent(workspace.workspacePath, statePath);
+        const sourceBytes = readFileSync(join(workspace.sourceRoot, statePath));
+        if (!sourceBytes.equals(readFileSync(join(workspace.workspacePath, statePath))))
+            throw new Error('state-drift');
+        const state = JSON.parse(sourceBytes.toString('utf8'));
+        const story = state?.stories?.[storyId];
+        const paths = story?.files_to_modify;
+        if (state?.schema_version !== 1 || story?.id !== storyId
+            || !Array.isArray(paths) || paths.length < 1 || paths.length > MAX_PATHS
+            || paths.some((path) => typeof path !== 'string' || !safePath(path)
+                || path.length > 1024 || /[\r\n]/.test(path))
+            || new Set(paths).size !== paths.length)
+            throw new Error('write-set-invalid');
+        const allowedPaths = paths;
+        const targets = allowedPaths.filter((path) => {
+            if (!path.startsWith('docs/stories/') || !path.endsWith('.story.md'))
+                return false;
+            regularOrAbsent(workspace.sourceRoot, path);
+            regularOrAbsent(workspace.workspacePath, path);
+            const source = readFileSync(join(workspace.sourceRoot, path));
+            if (!source.equals(readFileSync(join(workspace.workspacePath, path))))
+                throw new Error('story-drift');
+            const header = /^---\r?\n([\s\S]{1,8192}?)\r?\n---(?:\r?\n|$)/.exec(source.toString('utf8'))?.[1];
+            const ids = header?.split(/\r?\n/).filter((line) => line.startsWith('id:')) ?? [];
+            return ids.length === 1 && ids[0].slice(3).trim().replace(/^(["'])(.*)\1$/, '$2') === storyId;
+        });
+        if (targets.length !== 1)
+            throw new Error('story-target-ambiguous');
+        return `${material}\n\nPrivate story handoff (local only):\n${JSON.stringify({
+            storyId, storyPath: targets[0], allowedPaths: [...allowedPaths].sort(),
+        })}\nWork from this isolated checkout's current directory. Use the exact storyPath above for the delivered current step; do not use an unresolved story-file placeholder or infer a filename. Persist the current step's actual result in the declared files; a final chat response alone is not a saved candidate. Modify only allowedPaths and preserve story identity and the write set. Do not operate Git, change unrelated stories, grant root QA/checkpoint authority, or declare the story, epic or pipeline complete. If required inputs are unavailable, report failure without inventing evidence or completion.\n`;
+    }
+    catch {
+        throw new Error('private-execution-state-step-handoff-unverified');
+    }
+}
+export function admitPrivateStateBoundStepWorkspace(workspace, storyId) {
+    try {
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(storyId))
+            throw new Error('story-id-invalid');
+        const statePath = '.neocortex/state.json';
+        regularOrAbsent(workspace.sourceRoot, statePath);
+        regularOrAbsent(workspace.workspacePath, statePath);
+        const original = JSON.parse(readFileSync(join(workspace.sourceRoot, statePath), 'utf8'));
+        const candidate = JSON.parse(readFileSync(join(workspace.workspacePath, statePath), 'utf8'));
+        if (!original || typeof original !== 'object' || Array.isArray(original)
+            || !candidate || typeof candidate !== 'object' || Array.isArray(candidate)) {
+            throw new Error('state-invalid');
+        }
+        const sourceState = original;
+        const candidateState = candidate;
+        const sourceStories = sourceState.stories;
+        const candidateStories = candidateState.stories;
+        const sourceStory = sourceStories?.[storyId];
+        const candidateStory = candidateStories?.[storyId];
+        const paths = sourceStory?.files_to_modify;
+        if (sourceState.schema_version !== 1 || candidateState.schema_version !== 1
+            || !sourceStories || !candidateStories || !sourceStory || !candidateStory
+            || sourceStory.id !== storyId || candidateStory.id !== storyId
+            || candidateStory.epic_id !== sourceStory.epic_id
+            || !Array.isArray(paths) || paths.length === 0 || paths.length > MAX_PATHS
+            || paths.some((path) => typeof path !== 'string' || !safePath(path) || path.length > 1024)
+            || new Set(paths).size !== paths.length
+            || !isDeepStrictEqual(candidateStory.files_to_modify, paths)) {
+            throw new Error('write-set-invalid');
+        }
+        const { [storyId]: _sourceStory, ...otherSourceStories } = sourceStories;
+        const { [storyId]: _candidateStory, ...otherCandidateStories } = candidateStories;
+        const { stories: _sourceStories, last_updated: _sourceUpdated, ...otherSourceState } = sourceState;
+        const { stories: _candidateStories, last_updated: _candidateUpdated, ...otherCandidateState } = candidateState;
+        if (!isDeepStrictEqual(otherCandidateStories, otherSourceStories)
+            || !isDeepStrictEqual(otherCandidateState, otherSourceState)) {
+            throw new Error('state-unrelated-drift');
+        }
+        return admitPrivateYoloIsolatedWorkspace(workspace, [...paths].sort(), workspace.baseSha);
+    }
+    catch {
+        throw new Error('private-execution-state-step-admission-unverified');
+    }
+}
+/** One project-level utility contract, with no state/Git/other-file write grant. */
+export function admitPrivateProjectStepWorkspace(workspace, commandId, writeSetId) {
+    if (commandId === 'chaos-plan' && writeSetId === 'chaos-quarterly-v1') {
+        try {
+            const now = new Date();
+            const quarter = `Q${Math.floor(now.getUTCMonth() / 3) + 1}-${now.getUTCFullYear()}`;
+            const paths = changedPaths(status(workspace.workspacePath, true)).paths;
+            const planPath = `tools/chaos/${quarter}-plan.md`;
+            const historyPath = `.neocortex/chaos-history/${quarter}.md`;
+            const experimentPaths = paths.filter((path) => path.startsWith('tools/chaos/experiments/'));
+            const match = experimentPaths.map((path) => /^tools\/chaos\/experiments\/(chaos-mesh|litmus|aws-fis)-(?:PodKill|NetworkChaos|IOChaos|StressChaos|TimeChaos|pod-kill|network-chaos|io-chaos|stress-chaos|time-chaos)-([a-z0-9]+(?:-[a-z0-9]+)*)\.yaml$/.exec(path));
+            if (!paths.includes(planPath) || !paths.includes(historyPath)
+                || experimentPaths.length < 5 || experimentPaths.length > 10
+                || paths.length !== experimentPaths.length + 2
+                || match.some((item) => !item)
+                || new Set(match.map((item) => item[1])).size !== 1) {
+                throw new Error('chaos-write-set-invalid');
+            }
+            for (const path of paths) {
+                regularOrAbsent(workspace.workspacePath, path);
+                const entry = lstatSync(join(workspace.workspacePath, path));
+                if (entry.size === 0)
+                    throw new Error('chaos-empty-artifact');
+            }
+            const history = readFileSync(join(workspace.workspacePath, historyPath), 'utf8');
+            if (!history.includes(quarter) || !/\bPLANNED\b/.test(history)) {
+                throw new Error('chaos-history-invalid');
+            }
+            const historyInHead = git(workspace.workspacePath, ['ls-tree', '-z', 'HEAD', '--', historyPath]).length > 0;
+            const originalHistory = historyInHead
+                ? git(workspace.workspacePath, ['show', `HEAD:${historyPath}`]).toString('utf8') : '';
+            if (originalHistory && !history.startsWith(originalHistory)) {
+                throw new Error('chaos-history-not-append-only');
+            }
+            return admitPrivateYoloIsolatedWorkspace(workspace, paths, workspace.baseSha);
+        }
+        catch {
+            throw new Error('private-execution-project-step-admission-unverified');
+        }
+    }
+    const allowedPaths = commandId === 'sync-openapi' && writeSetId === 'sync-openapi-contract-v1'
+        ? ['docs/architecture/api-contracts.md', 'docs/api/openapi.yaml']
+        : commandId === 'tech-debt' && writeSetId === 'tech-debt-registry-v1'
+            ? ['.neocortex/tech-debt-registry.json'] : undefined;
+    if (!allowedPaths) {
+        throw new Error('private-execution-project-step-admission-unverified');
+    }
+    try {
+        if (commandId === 'tech-debt') {
+            const registryPath = '.neocortex/tech-debt-registry.json';
+            regularOrAbsent(workspace.workspacePath, registryPath);
+            const raw = JSON.parse(readFileSync(join(workspace.workspacePath, registryPath), 'utf8'));
+            if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+                throw new Error('registry-invalid');
+            const registry = raw;
+            if (registry.schema_version !== 2 || registry.version !== undefined && registry.version !== 2
+                || !Array.isArray(registry.items))
+                throw new Error('registry-invalid');
+        }
+        return admitPrivateYoloIsolatedWorkspace(workspace, allowedPaths, workspace.baseSha);
+    }
+    catch {
+        throw new Error('private-execution-project-step-admission-unverified');
+    }
+}
+/** Closed artifact authority shared by model handoff and physical admission. */
+export function privateArchitectureStagePaths(commandId, writeSetId) {
+    const allowedPaths = commandId === 'arch-prd' && writeSetId === 'arch-prd-docs-v1'
+        ? ['docs/architecture/prd.md', 'docs/architecture/product-experience.md']
+        : commandId === 'arch-architecture' && writeSetId === 'arch-architecture-doc-v1'
+            ? ['docs/architecture/architecture.md']
+            : commandId === 'arch-fitness-functions' && writeSetId === 'arch-fitness-tools-v1'
+                ? ['tools/architecture/dependency-cruiser.config.js', 'tools/architecture/archunit-test.ts',
+                    'tools/architecture/.eslintrc.boundaries.js']
+                : commandId === 'arch-api-contracts' && writeSetId === 'arch-api-contracts-docs-v1'
+                    ? ['docs/architecture/api-contracts.md', 'docs/api/openapi.yaml']
+                    : commandId === 'arch-api-integrations' && writeSetId === 'arch-api-integrations-doc-v1'
+                        ? ['docs/architecture/api-integrations.md']
+                        : commandId === 'arch-database' && writeSetId === 'arch-database-doc-v1'
+                            ? ['docs/architecture/database-schema.md']
+                            : commandId === 'arch-security' && writeSetId === 'arch-security-doc-v1'
+                                ? ['docs/architecture/cyber-security.md']
+                                : commandId === 'arch-design-system' && writeSetId === 'arch-design-system-doc-v1'
+                                    ? ['docs/architecture/atomic-design-system.md']
+                                    : commandId === 'arch-performance' && writeSetId === 'arch-performance-doc-v1'
+                                        ? ['docs/architecture/performance-strategy.md']
+                                        : commandId === 'arch-testing' && writeSetId === 'arch-testing-doc-v1'
+                                            ? ['docs/architecture/testing-strategy.md']
+                                            : commandId === 'arch-infrastructure' && writeSetId === 'arch-infrastructure-doc-v1'
+                                                ? ['docs/architecture/infrastructure-deploy.md']
+                                                : commandId === 'arch-review' && writeSetId === 'arch-review-doc-v1'
+                                                    ? ['docs/architecture/review-consolidation.md']
+                                                    : commandId === 'update-memory' && writeSetId === 'arch-memory-canonical-v1'
+                                                        ? ['NEOCORTEX.md'] : null;
+    return allowedPaths === null ? null : Object.freeze(allowedPaths);
+}
+/** Mechanical scope only; protected workflow material remains server supplied. */
+export function appendPrivateArchitectureHandoff(material, commandId, writeSetId, applicability = 'all') {
+    const paths = privateArchitectureStagePaths(commandId, writeSetId);
+    if (!paths)
+        throw new Error('private-execution-architecture-admission-unverified');
+    return `${material}\n\nPrivate architecture handoff (local only):\n${JSON.stringify({ allowedPaths: paths })}\n${applicability === 'non-ui' ? 'The server admitted a signed non-UI scope for this snapshot. Preserve the backend-only scope: design-system and UX phases are not applicable. Do not require or generate interface artifacts.\n' : ''}Write exactly the listed nonempty artifacts inside this isolated clone. Existing compliant listed artifacts may remain unchanged; all listed artifacts must exist after execution. Place any necessary scope notes inside those artifacts. Do not edit README, package files, other documents, state, Git, QA records or configuration outside the listed paths. Do not install dependencies, use network, deploy or continue to another stage. Preserve existing arch:keep blocks byte-for-byte. Do not add new arch:keep markers. For managed memory, preserve all bytes outside its existing managed block. Root independently reviews artifacts and owns continuation, Git and acceptance.\n`;
+}
+/** Architecture agent writes only its closed documents; stage/graph progression remains root-owned. */
+export function admitPrivateArchitectureStageWorkspace(workspace, commandId, writeSetId, targetEpicId, graphRevision) {
+    const allowedPaths = privateArchitectureStagePaths(commandId, writeSetId);
+    if (!allowedPaths
+        || !/^P[1-9][0-9]{0,11}$/.test(targetEpicId)
+        || !/^[a-f0-9]{64}$/.test(graphRevision)) {
+        throw new Error('private-execution-architecture-admission-unverified');
+    }
+    try {
+        regularOrAbsent(workspace.workspacePath, '.neocortex/state.json');
+        const state = JSON.parse(readFileSync(join(workspace.workspacePath, '.neocortex/state.json'), 'utf8'));
+        if (!state || typeof state !== 'object' || Array.isArray(state))
+            throw new Error('state-invalid');
+        const record = state;
+        const archPlan = record.archPlan;
+        const execution = archPlan?.execution;
+        const epics = record.epics;
+        if (!execution || execution.currentStageCommand !== commandId
+            || execution.targetEpicId !== targetEpicId || execution.graphRevision !== graphRevision
+            || !epics || !Object.hasOwn(epics, targetEpicId))
+            throw new Error('state-binding-mismatch');
+        if (commandId === 'update-memory') {
+            if (execution.continuationState !== 'delegate'
+                || execution.reviewDecision?.decision !== 'approved') {
+                throw new Error('memory-root-review-missing');
+            }
+            const path = 'NEOCORTEX.md';
+            if (!changedPaths(status(workspace.workspacePath, true)).paths.includes(path)) {
+                throw new Error('memory-effect-missing');
+            }
+            regularOrAbsent(workspace.sourceRoot, path);
+            regularOrAbsent(workspace.workspacePath, path);
+            const before = readFileSync(join(workspace.sourceRoot, path), 'utf8');
+            const after = readFileSync(join(workspace.workspacePath, path), 'utf8');
+            const start = '<!-- NEOCORTEX-MEMORY-START -->';
+            const end = '<!-- NEOCORTEX-MEMORY-END -->';
+            const split = (content) => {
+                if (content.split(start).length !== 2 || content.split(end).length !== 2
+                    || content.indexOf(start) >= content.indexOf(end))
+                    throw new Error('memory-markers-invalid');
+                const bodyStart = content.indexOf(start) + start.length;
+                const bodyEnd = content.indexOf(end);
+                return { before: content.slice(0, bodyStart), body: content.slice(bodyStart, bodyEnd),
+                    after: content.slice(bodyEnd) };
+            };
+            const original = split(before);
+            const candidate = split(after);
+            if (original.before !== candidate.before || original.after !== candidate.after
+                || original.body === candidate.body || Buffer.byteLength(after, 'utf8') > 32_768
+                || after.split('\n').length > 240)
+                throw new Error('memory-managed-block-invalid');
+            const originalLines = new Set(original.body.split('\n'));
+            for (const line of candidate.body.split('\n')) {
+                if (!originalLines.has(line))
+                    classifyProjectMemoryUpdate(line);
+            }
+        }
+        if (commandId === 'arch-prd') {
+            const prdPath = 'docs/architecture/prd.md';
+            if (!changedPaths(status(workspace.workspacePath, true)).paths.includes(prdPath)) {
+                throw new Error('prd-effect-missing');
+            }
+            regularOrAbsent(workspace.workspacePath, prdPath);
+            if (lstatSync(join(workspace.workspacePath, prdPath)).size === 0)
+                throw new Error('prd-empty');
+        }
+        if (commandId === 'arch-api-contracts' || commandId === 'arch-fitness-functions'
+            || commandId === 'arch-api-integrations' || commandId === 'arch-database'
+            || commandId === 'arch-security' || commandId === 'arch-design-system'
+            || commandId === 'arch-performance' || commandId === 'arch-testing'
+            || commandId === 'arch-infrastructure' || commandId === 'arch-review') {
+            const changed = changedPaths(status(workspace.workspacePath, true)).paths;
+            for (const path of allowedPaths) {
+                // A repair need not rewrite a correct artifact already in the admitted base.
+                // New/missing outputs still refuse; containment and a real delta remain mandatory below.
+                if (!changed.includes(path) && git(workspace.workspacePath, ['cat-file', '-t', `${workspace.baseSha}:${path}`]).toString('utf8').trim() !== 'blob') {
+                    throw new Error('architecture-required-effect-missing');
+                }
+                regularOrAbsent(workspace.workspacePath, path);
+                if (lstatSync(join(workspace.workspacePath, path)).size === 0)
+                    throw new Error('architecture-required-effect-empty');
+                if (commandId === 'arch-fitness-functions') {
+                    regularOrAbsent(workspace.sourceRoot, path);
+                    const source = existsSync(join(workspace.sourceRoot, path))
+                        ? readFileSync(join(workspace.sourceRoot, path), 'utf8') : '';
+                    const generated = readFileSync(join(workspace.workspacePath, path), 'utf8');
+                    const priorBlocks = architectureKeepBlocks(source);
+                    const generatedBlocks = architectureKeepBlocks(generated);
+                    if (!isDeepStrictEqual(generatedBlocks, priorBlocks)) {
+                        throw new Error('architecture-keep-marker-changed');
+                    }
+                }
+            }
+        }
+        return admitPrivateYoloIsolatedWorkspace(workspace, allowedPaths, workspace.baseSha);
+    }
+    catch {
+        throw new Error('private-execution-architecture-admission-unverified');
+    }
+}
+/** A08 paths come only from a committed root approval, never the child result. */
+export function admitPrivateUxWorkspace(workspace, targetEpicId, graphRevision, expectedWriteSet) {
+    try {
+        if (!/^P[1-9][0-9]{0,11}$/.test(targetEpicId)
+            || !/^[a-f0-9]{64}$/.test(graphRevision)
+            || expectedWriteSet.schemaVersion !== 1
+            || expectedWriteSet.targetEpicId !== targetEpicId)
+            throw new Error('binding-invalid');
+        const source = deriveUxWriteSet(workspace.sourceRoot, targetEpicId);
+        const candidate = deriveUxCandidateWriteSet(workspace.workspacePath, targetEpicId);
+        if (!isDeepStrictEqual(source, expectedWriteSet)
+            || !isDeepStrictEqual(candidate, expectedWriteSet))
+            throw new Error('write-set-invalid');
+        regularOrAbsent(workspace.workspacePath, '.neocortex/state.json');
+        const state = JSON.parse(readFileSync(join(workspace.workspacePath, '.neocortex/state.json'), 'utf8'));
+        if (!state || typeof state !== 'object' || Array.isArray(state))
+            throw new Error('state-invalid');
+        const record = state;
+        const archPlan = record.archPlan;
+        const execution = archPlan?.execution;
+        const epics = record.epics;
+        if (!execution || execution.currentStageCommand !== 'arch-ux-design'
+            || execution.continuationState !== 'delegate'
+            || execution.targetEpicId !== targetEpicId || execution.graphRevision !== graphRevision
+            || !epics || !Object.hasOwn(epics, targetEpicId))
+            throw new Error('stage-invalid');
+        const changed = changedPaths(status(workspace.workspacePath, true)).paths;
+        if (changed.length !== expectedWriteSet.pathCount
+            || changed.some((path) => !expectedWriteSet.paths.includes(path))) {
+            throw new Error('agent-path-unclaimed');
+        }
+        for (const path of expectedWriteSet.paths) {
+            regularOrAbsent(workspace.sourceRoot, path);
+            regularOrAbsent(workspace.workspacePath, path);
+            const entry = lstatSync(join(workspace.workspacePath, path));
+            if (!entry.isFile() || entry.isSymbolicLink() || entry.size < 1)
+                throw new Error('effect-empty');
+            const content = new TextDecoder('utf-8', { fatal: true })
+                .decode(readFileSync(join(workspace.workspacePath, path)));
+            if (!content.trim() || content.includes('\0'))
+                throw new Error('effect-invalid');
+        }
+        validateUxCandidateSource(workspace.workspacePath, expectedWriteSet);
+        return admitPrivateYoloIsolatedWorkspace(workspace, expectedWriteSet.paths, workspace.baseSha);
+    }
+    catch {
+        throw new Error('private-execution-ux-admission-unverified');
+    }
+}
+/**
+ * The private agent writes only the exact OpenAPI-derived test set. Optional
+ * package/lockfile integration is staged by the root after validating that set,
+ * then admitted in the same exact patch. This still proves no test execution.
+ */
+export function admitPrivatePactWorkspace(workspace, targetEpicId, graphRevision, expectedAnswers, expectedWriteSet, toolchainCandidate) {
+    try {
+        if (!/^P[1-9][0-9]{0,11}$/.test(targetEpicId)
+            || !/^[a-f0-9]{64}$/.test(graphRevision)
+            || expectedAnswers.targetEpicId !== targetEpicId
+            || expectedAnswers.graphRevision !== graphRevision
+            || expectedWriteSet.schemaVersion !== 1)
+            throw new Error('binding-invalid');
+        const privateAnswers = loadPactPrivateAnswers(workspace.sourceRoot);
+        if (!privateAnswers || !isDeepStrictEqual(privateAnswers.receipt, expectedAnswers)) {
+            throw new Error('answers-invalid');
+        }
+        const source = derivePactWriteSet(workspace.sourceRoot, privateAnswers.answers.generateProvider);
+        const candidate = derivePactWriteSet(workspace.workspacePath, privateAnswers.answers.generateProvider);
+        if (source.outcome !== 'ready' || candidate.outcome !== 'ready'
+            || !isDeepStrictEqual(source.writeSet, expectedWriteSet)
+            || !isDeepStrictEqual(candidate.writeSet, expectedWriteSet)) {
+            throw new Error('write-set-invalid');
+        }
+        const changed = changedPaths(status(workspace.workspacePath, true)).paths;
+        if (changed.some((path) => !expectedWriteSet.paths.includes(path))) {
+            throw new Error('agent-path-unclaimed');
+        }
+        let consumerBindingCandidateCount = 0;
+        let consumerScaffoldCount = 0;
+        for (const path of expectedWriteSet.paths) {
+            regularOrAbsent(workspace.sourceRoot, path);
+            if (existsSync(join(workspace.sourceRoot, path)) || !changed.includes(path)) {
+                throw new Error('effect-missing-or-overwrite');
+            }
+            regularOrAbsent(workspace.workspacePath, path);
+            const entry = lstatSync(join(workspace.workspacePath, path));
+            if (!entry.isFile() || entry.size < 1)
+                throw new Error('effect-empty');
+            const content = new TextDecoder('utf-8', { fatal: true })
+                .decode(readFileSync(join(workspace.workspacePath, path)));
+            const expectedInteraction = expectedWriteSet.interactions
+                .find((interaction) => interaction.filePath === path);
+            if (path !== expectedWriteSet.providerPath && !expectedInteraction) {
+                throw new Error('private-execution-pact-interaction-missing');
+            }
+            const inspected = validatePactTestSource(path, content, privateAnswers.answers.brokerUrl, expectedInteraction, workspace.workspacePath, privateAnswers.answers.matchersAggressive);
+            if (inspected.consumerBinding === 'app-import-candidate')
+                consumerBindingCandidateCount++;
+            if (inspected.consumerBinding === 'mock-only-scaffold')
+                consumerScaffoldCount++;
+        }
+        let authorizedPaths = expectedWriteSet.paths;
+        if (toolchainCandidate) {
+            const planned = planPactToolchainManifest(workspace.sourceRoot, privateAnswers.answers.generateProvider);
+            const sha = (value) => createHash('sha256').update(value).digest('hex');
+            if (toolchainCandidate.schemaVersion !== 1
+                || toolchainCandidate.outcome !== 'candidate-unverified'
+                || toolchainCandidate.executionVerified !== false
+                || toolchainCandidate.sourceManifestSha256 !== sha(planned.sourceText)
+                || toolchainCandidate.sourceLockSha256 !== (planned.sourceLockText === null
+                    ? null : sha(planned.sourceLockText))
+                || toolchainCandidate.manifestText !== planned.candidateText
+                || !sameAsSnapshot(workspace.sourceRoot, workspace.workspacePath, workspace.baseSha, 'package.json')
+                || !sameAsSnapshot(workspace.sourceRoot, workspace.workspacePath, workspace.baseSha, 'package-lock.json'))
+                throw new Error('toolchain-binding-invalid');
+            for (const path of ['package.json', 'package-lock.json']) {
+                regularOrAbsent(workspace.sourceRoot, path);
+                regularOrAbsent(workspace.workspacePath, path);
+                const sourceText = path === 'package.json' ? planned.sourceText : planned.sourceLockText;
+                const cloneText = existsSync(join(workspace.workspacePath, path))
+                    ? readFileSync(join(workspace.workspacePath, path), 'utf8') : null;
+                if (sourceText !== cloneText)
+                    throw new Error('toolchain-clone-raced');
+            }
+            writeFileSync(join(workspace.workspacePath, 'package.json'), toolchainCandidate.manifestText);
+            writeFileSync(join(workspace.workspacePath, 'package-lock.json'), toolchainCandidate.lockText);
+            if (inspectPactToolchain(workspace.workspacePath, privateAnswers.answers.generateProvider).outcome !== 'manifest-aligned') {
+                throw new Error('toolchain-candidate-invalid');
+            }
+            authorizedPaths = [...expectedWriteSet.paths, 'package.json', 'package-lock.json'];
+        }
+        const admitted = admitPrivateYoloIsolatedWorkspace(workspace, authorizedPaths, workspace.baseSha);
+        return Object.freeze({ ...admitted, consumerBindingCandidateCount, consumerScaffoldCount });
+    }
+    catch {
+        throw new Error('private-execution-pact-admission-unverified');
+    }
+}
+/**
+ * Admit only plan-bound property-test candidates. The agent cannot edit the
+ * PRD: the root appends the operator-confirmed configuration in the clone only
+ * after checking the complete test write set. This is not a QA verdict.
+ */
+export function admitPrivatePropertyTestWorkspace(workspace, choices, expectedPlan, generatedAt = new Date().toISOString()) {
+    try {
+        const sourcePlan = confirmPropertyTestPlan(workspace.sourceRoot, choices);
+        if (!isDeepStrictEqual(sourcePlan, expectedPlan)
+            || !sameFile(workspace.sourceRoot, workspace.workspacePath, expectedPlan.prdPath)
+            || expectedPlan.aggregates.some((item) => !sameFile(workspace.sourceRoot, workspace.workspacePath, item.implementationFile))
+            || expectedPlan.writeSet.length === 0)
+            throw new Error('plan-drift');
+        const changed = changedPaths(status(workspace.workspacePath, true)).paths;
+        if (!isDeepStrictEqual(changed, expectedPlan.writeSet))
+            throw new Error('agent-path-unclaimed');
+        const candidateDigests = new Map();
+        for (const item of expectedPlan.aggregates) {
+            regularOrAbsent(workspace.sourceRoot, item.testFile);
+            regularOrAbsent(workspace.workspacePath, item.testFile);
+            const entry = lstatSync(join(workspace.workspacePath, item.testFile));
+            if (!entry.isFile() || entry.isSymbolicLink() || entry.size < 1 || entry.size > MAX_PATCH_BYTES) {
+                throw new Error('test-invalid');
+            }
+            const bytes = readFileSync(join(workspace.workspacePath, item.testFile));
+            const content = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+            const testCount = expectedPlan.language === 'typescript'
+                ? (content.match(/\b(?:it|test)\s*\(/g) ?? []).length
+                : (content.match(/^def\s+test_[A-Za-z0-9_]+\s*\(/gm) ?? []).length;
+            if (!content.trim() || content.includes('\0') || testCount < item.invariantCount
+                || /\b(?:it|test|describe)\s*\.\s*(?:skip|todo|only)\s*\(/.test(content)
+                || !content.includes(String(expectedPlan.numRuns)))
+                throw new Error('test-invalid');
+            if (expectedPlan.language === 'typescript') {
+                validatePropertyTestTypeScriptSource({ source: content, testFile: item.testFile,
+                    implementationFile: item.implementationFile, invariantCount: item.invariantCount,
+                    numRuns: expectedPlan.numRuns });
+            }
+            candidateDigests.set(item.testFile, createHash('sha256').update(bytes).digest('hex'));
+        }
+        regularOrAbsent(workspace.sourceRoot, expectedPlan.prdPath);
+        regularOrAbsent(workspace.workspacePath, expectedPlan.prdPath);
+        const prdBytes = readFileSync(join(workspace.workspacePath, expectedPlan.prdPath));
+        const prd = new TextDecoder('utf-8', { fatal: true }).decode(prdBytes);
+        const configured = renderPropertyTestConfiguration(prd, expectedPlan, generatedAt);
+        writeFileSync(join(workspace.workspacePath, expectedPlan.prdPath), configured);
+        const configuredDigest = createHash('sha256').update(configured).digest('hex');
+        return admitPrivateYoloIsolatedWorkspace(workspace, [...expectedPlan.writeSet, expectedPlan.prdPath], workspace.baseSha, undefined, () => {
+            try {
+                if (!isDeepStrictEqual(confirmPropertyTestPlan(workspace.sourceRoot, choices), expectedPlan)
+                    || expectedPlan.aggregates.some((item) => !sameFile(workspace.sourceRoot, workspace.workspacePath, item.implementationFile))
+                    || createHash('sha256').update(readFileSync(join(workspace.workspacePath, expectedPlan.prdPath))).digest('hex') !== configuredDigest)
+                    return false;
+                return [...candidateDigests].every(([path, sha]) => createHash('sha256').update(readFileSync(join(workspace.workspacePath, path)))
+                    .digest('hex') === sha);
+            }
+            catch {
+                return false;
+            }
+        });
+    }
+    catch {
+        throw new Error('private-execution-property-admission-unverified');
+    }
+}