@ornexus/neocortex 4.60.66 → 4.60.68

package/packages/client/dist/runner/headless/epic-terminal-git-cli-adapter.js

@@ -1,8 +1,1236 @@
-import{execFile as ye}from"node:child_process";import{createHash as O}from"node:crypto";import{readFile as ae}from"node:fs/promises";import{join as we}from"node:path";import{promisify as be}from"node:util";import{classifyGitReconciliationCandidate as ie,reconcileTerminalReceipt as Se}from"../../../../shared/dist/yoloop/epic-terminal-git.js";import{collectGitResourceOwnership as _e,GIT_INVENTORY_PR_LIMIT as ne,GIT_INVENTORY_REF_LIMIT as Z}from"./epic-git-reconciliation-inventory.js";import{executeEpicMergeCandidateQa as oe,verifiedEpicMergeCandidateReceipt as W}from"./epic-merge-candidate-qa.js";import{applyGitLifecycleRuntimeOverlay as xe,ensureRuntimeEpic as z,executeP205TransientAuthority as ve,P205_COMPLETE_COMMAND as Q,projectP205TransientExecutionEvidence as Re,verifyAcceptedGitLifecycleStoryCheckpoint as ce,mutateGitLifecycleRuntime as J,readGitLifecycleRuntime as He}from"../../git/git-lifecycle-store.js";const ke=be(ye);function ze(e,a={}){const c=we(e,".neocortex","state.json"),t=a.gitRunner??((...r)=>ue("git",r,e)),u=a.providerRunner??((...r)=>ue("gh",r,e)),m=new Map;return{async prepareLifecycleEvidence(r){try{try{await ae(c,"utf8")}catch(k){if(Oe(k,"ENOENT"))return{ok:!0,originBindingCaptured:!1,aggregateQaRecorded:!1};throw k}const n=(await D(e,c)).epics?.[r.epicId];if(!n)return o("epic-state-missing",!1,!1);if(S(n.branch_mode)!=="epic")return{ok:!0,originBindingCaptured:!1,aggregateQaRecorded:!1};const s=S(n.execution_branch),d=S(n.origin_branch);if(!s||!E(s))return o("epic-execution-branch-missing",!1,!1);let l=await t("symbolic-ref","--quiet","--short","HEAD").catch(()=>""),f=await t("rev-parse","HEAD"),h=_(n.origin_binding)?n.origin_binding:null,b=!1;if(h){if(h.executionBranch!==s||h.originBranch!==d||l!==s&&l!==h.originBranch||!await j(t,h.originHeadSha)||!await v(t,h.originHeadSha,f))return o("epic-origin-binding-physical-drift",!1,!1)}else{if(!l||l===s||!E(l))return o("epic-origin-binding-capture-window-missed",!1,!1);if(d&&d!==l)return o("epic-origin-binding-recorded-origin-drift",!1,!1);h={schemaVersion:1,originBranch:l,originHeadSha:f,executionBranch:s,capturedFromCurrentCheckout:!0,capturedAt:r.nowIso},await J(e,k=>{const y=z(k,r.epicId);if(y.origin_binding&&JSON.stringify(y.origin_binding)!==JSON.stringify(h))throw new Error("origin-binding-cas-conflict");y.origin_branch=l,y.origin_binding=h}),b=!0}if(l!==s){const k=await le(t,`refs/heads/${s}`);try{if(k){if(!await v(t,h.originHeadSha,k))return o("epic-execution-branch-origin-drift",!1,!1);await t("switch",s)}else await t("switch","-c",s,h.originHeadSha)}catch{const y=await t("status","--porcelain","--untracked-files=normal").catch(()=>"");return o(y?"epic-execution-branch-switch-blocked-by-user-changes":"epic-execution-branch-switch-failed",!0,!1)}if(l=await t("symbolic-ref","--quiet","--short","HEAD"),f=await t("rev-parse","HEAD"),l!==s)return o("epic-execution-branch-switch-unverified",!0,!1)}const g=await D(e,c,!0),p=g.epics?.[r.epicId];if(!p)return o("epic-state-missing",!1,!1);const x=Y(p),w=await Promise.all(x.map(k=>ce(e,g.stories?.[k]?.checkpoint,k,r.epicId,s).then(y=>y&&ge(g.stories?.[k]?.checkpoint))));if(!(x.length>0&&w.every(Boolean)))return{ok:!0,originBindingCaptured:b,aggregateQaRecorded:!1};if(l!==s)return o("epic-aggregate-qa-execution-checkout-required",!0,!1);const H=S(p.graph_revision);if(!/^[a-f0-9]{64}$/i.test(H))return o("epic-aggregate-qa-graph-required",!1,!1);if(await pe(t))return o("epic-aggregate-qa-checkout-dirty",!0,!1);const G=await ve(e,{headSha:f,graphRevision:H,nowIso:r.nowIso}),B=Re(G);if(!B)return o("epic-aggregate-qa-authority-invalid",!1,!1);if(await a.aggregateQaRunner?.({projectRoot:e,gateIds:B.gateIds}),await t("rev-parse","HEAD")!==f||await pe(t))return o("epic-aggregate-qa-head-raced",!0,!1);const M=`local-yolo-tdd:${O("sha256").update(["epic-aggregate-p205-execution-v2",Q,f,H,B.manifestDigest,B.gateIds.join(","),B.resultDigest].join("\0")).digest("hex")}`,T={schemaVersion:1,evidenceVersion:"p205-execution-v2",producer:"local-yolo-tdd",contract:"P205-CI-02",command:Q,verdict:"passed",executionHeadSha:f,graphRevision:H,manifestDigest:B.manifestDigest,resultDigest:B.resultDigest,checkedAt:B.executedAt,receiptRef:M,gateIds:B.gateIds};return await J(e,k=>{const y=z(k,r.epicId);y.aggregate_qa_receipt=T}),{ok:!0,originBindingCaptured:b,aggregateQaRecorded:!0,p205Authority:G}}catch{return o("epic-lifecycle-evidence-production-failed",!0,!1)}},async inspect(r){try{const i=await D(e,c,!0),n=i.epics?.[r.epicId];if(!n)return o("epic-state-missing",!1,!1);if(S(n.execution_branch)!==r.executionBranch||S(n.origin_branch)!==r.originBranch)return o("epic-branch-boundary-drift",!1,!1);const s=await t("rev-parse",`refs/heads/${r.executionBranch}`),d=await A(t,r.originBranch);await P(t,r.originBranch,d);const l=await X(e,i,n,r.epicId,r.executionBranch);let f=_(n.terminal_git_receipt)?n.terminal_git_receipt:null;f?.physicalStatus==="pushed"&&(f.pushedSha&&await v(t,f.executionHeadSha,f.pushedSha)&&await v(t,f.pushedSha,d)||(f=null)),f||(f=await Ae({directive:r,executionHeadSha:s,originHeadSha:d,git:t}));const h=new Set((Array.isArray(n.git_reconciliation_receipts)?n.git_reconciliation_receipts:[]).filter(_).filter(K).map(R=>S(R.resourceId)).filter(Boolean)),b=await t("symbolic-ref","--quiet","--short","HEAD").catch(()=>""),g=r.reconcile.enabled?await se({state:i,epic:n,directive:r,currentBranch:b,originHeadSha:d,receiptIds:h,git:t,gh:u}):[],p=_(n.origin_binding)?n.origin_binding:null,x=p&&p.originBranch===r.originBranch&&p.executionBranch===r.executionBranch&&await j(t,p.originHeadSha)&&await v(t,p.originHeadSha,s)?p:null;return{ok:!0,snapshot:{executionHeadSha:s,originHeadSha:d,...S(n.graph_revision)?{graphRevision:S(n.graph_revision)}:{},writerLeaseActive:re(n.branch_lease),acceptedCheckpointIds:l,existingReceipt:f,aggregateQaReceipt:_(n.aggregate_qa_receipt)?n.aggregate_qa_receipt:null,originBinding:x,reconciliationCandidates:g}}}catch(i){return o(de(i)??"epic-terminal-inspection-failed",!0,!1)}},async prepareMergeObject(r){let i;try{const n=await t("merge-tree","--write-tree",r.originHeadSha,r.executionHeadSha);i=await t("commit-tree",n,"-p",r.originHeadSha,"-p",r.executionHeadSha,"-m",r.message)}catch{return o("epic-terminal-merge-conflict",!1,!1)}try{const n=await oe(e,{mergeSha:i,originHeadSha:r.originHeadSha,executionHeadSha:r.executionHeadSha,graphRevision:r.graphRevision},r.nowIso);return m.set(i,n.candidateAuthority),{ok:!0,mergeSha:i,...n}}catch{return o("epic-merge-candidate-qa-failed",!0,!1)}},async inspectReconciliation(r){try{const i=await D(e,c,!0),n=i.epics?.[r.epicId];if(!n)return o("epic-state-missing",!1,!1);if(S(n.execution_branch)!==r.executionBranch||S(n.origin_branch)!==r.originBranch)return o("epic-branch-boundary-drift",!1,!1);const s=await A(t,r.originBranch);await P(t,r.originBranch,s);const d=new Set((Array.isArray(n.git_reconciliation_receipts)?n.git_reconciliation_receipts:[]).filter(_).filter(K).map(h=>S(h.resourceId)).filter(Boolean)),l=await t("symbolic-ref","--quiet","--short","HEAD").catch(()=>"");return{ok:!0,candidates:await se({state:i,epic:n,directive:r,currentBranch:l,originHeadSha:s,receiptIds:d,git:t,gh:u})}}catch(i){return o(de(i)??"git-reconciliation-inspection-failed",!0,!1)}},async pushMergeObject(r){try{if(!W(r.candidateAuthority,{mergeSha:r.mergeSha,originHeadSha:r.expectedOriginSha,executionHeadSha:r.executionHeadSha,graphRevision:r.graphRevision}))return o("epic-merge-candidate-authority-required",!1,!1);const n=await D(e,c,!0),s=n.epics?.[r.epicId];if(!s||s.execution_branch!==r.executionBranch||s.origin_branch!==r.originBranch||s.graph_revision!==r.graphRevision||re(s.branch_lease)||await t("rev-parse",`refs/heads/${r.executionBranch}`)!==r.executionHeadSha)return o("epic-merge-candidate-authority-raced",!0,!1);const d=await X(e,n,s,r.epicId,r.executionBranch);if(!ee(d,r.storyCheckpointIds)||!ee(Y(s),r.storyCheckpointIds))return o("epic-checkpoint-set-revalidation-drift",!0,!1);const l=_(s.aggregate_qa_receipt)?s.aggregate_qa_receipt:null;if(!he(l,r.executionHeadSha,r.graphRevision,r.nowIso)||l.receiptRef!==r.aggregateQaReceipt.receiptRef)return o("epic-terminal-aggregate-qa-revalidation-drift",!0,!1);if(await A(t,r.originBranch)!==r.expectedOriginSha)return o("epic-origin-head-raced",!0,!1);await t("push","--porcelain","origin",`${r.mergeSha}:refs/heads/${r.originBranch}`);const h=await A(t,r.originBranch);return h!==r.mergeSha?o("epic-terminal-push-unverified",!0,!1):{ok:!0,pushedSha:h}}catch(i){return te(i)?o("epic-terminal-remote-policy-denied",!0,!0):o("epic-terminal-push-failed",!0,!1)}},async ensureSingleEpicPullRequest(r){try{const i=W(r.candidateAuthority,{mergeSha:r.expectedPullRequestHeadSha,originHeadSha:r.candidateQa.originHeadSha,executionHeadSha:r.expectedStoryHeadSha,graphRevision:r.candidateQa.graphRevision});if(!i||i!==r.candidateQa||!await v(t,r.candidateQa.originHeadSha,r.expectedPullRequestHeadSha)||!await v(t,r.expectedStoryHeadSha,r.expectedPullRequestHeadSha))return o("epic-merge-candidate-authority-required",!1,!1);const n=await I(t,u);if(!n)return o("git-resource-provider-repository-unverified",!0,!0);const s=`https://github.com/${n.nameWithOwner}`,d=await C(t,r.executionBranch);if(d&&d!==r.expectedPullRequestHeadSha){if(await P(t,r.executionBranch,d),!await v(t,d,r.expectedPullRequestHeadSha))return o("epic-terminal-execution-remote-head-drift",!0,!0);await t("push","--porcelain","origin",`${r.expectedPullRequestHeadSha}:refs/heads/${r.executionBranch}`)}if(d||await t("push","--porcelain","origin",`${r.expectedPullRequestHeadSha}:refs/heads/${r.executionBranch}`),await A(t,r.executionBranch)!==r.expectedPullRequestHeadSha)return o("epic-terminal-execution-publish-unverified",!0,!0);const l=await u("pr","list","--repo",s,"--state","all","--head",r.executionBranch,"--base",r.originBranch,"--json","number,state,headRefName,headRefOid,baseRefName,mergeCommit","--limit","100"),f=JSON.parse(l),h=f.filter(w=>w.headRefName===r.executionBranch&&w.baseRefName===r.originBranch&&w.headRefOid===r.expectedPullRequestHeadSha&&(w.state==="OPEN"||w.state==="MERGED"));if(h.length>1)return o("epic-terminal-duplicate-prs",!1,!0);if(typeof h[0]?.number=="number")return{ok:!0,prNumber:h[0].number};if(f.some(w=>w.state==="OPEN"))return o("epic-terminal-stale-pr",!1,!0);const g=(await u("pr","create","--repo",s,"--head",r.executionBranch,"--base",r.originBranch,"--title",`[${r.epicId}] Terminal epic integration`,"--body",`Autonomous terminal integration receipt: ${r.idempotencyKey}`)).match(/\/(\d+)(?:\s*)$/);if(!g)return o("epic-terminal-pr-number-unverified",!0,!0);const p=Number(g[1]),x=await L(u,n.nameWithOwner,p);return!x||x.state!=="OPEN"||x.headRefName!==r.executionBranch||x.baseRefName!==r.originBranch||x.headRefOid!==r.expectedPullRequestHeadSha?o("epic-terminal-pr-create-unverified",!0,!0):{ok:!0,prNumber:p}}catch(i){return o("epic-terminal-pr-create-denied",!0,te(i))}},async mergeEpicPullRequest(r){try{const i=await I(t,u);if(!i)return o("git-resource-provider-repository-unverified",!0,!0);const n=r.candidateQa&&W(r.candidateAuthority,{mergeSha:r.expectedPullRequestHeadSha,graphRevision:r.candidateQa.graphRevision,originHeadSha:r.expectedOriginHeadSha,executionHeadSha:r.expectedStoryHeadSha});if(!n||n!==r.candidateQa)return o("epic-merge-candidate-authority-required",!1,!1);const s=await L(u,i.nameWithOwner,r.prNumber),d=await C(t,r.executionBranch),l=await A(t,r.originBranch);if(!s||s.headRefName!==r.executionBranch||s.baseRefName!==r.originBranch||s.headRefOid!==r.expectedPullRequestHeadSha||d&&d!==r.expectedPullRequestHeadSha||!await v(t,r.expectedOriginHeadSha,r.expectedPullRequestHeadSha)||!await v(t,r.expectedStoryHeadSha,r.expectedPullRequestHeadSha))return o("epic-terminal-pr-revalidation-drift",!0,!0);if(s.state==="OPEN"&&l!==r.expectedOriginHeadSha)return o("epic-terminal-pr-origin-raced",!0,!0);let f;if(s.state==="OPEN"){const w=await Ee(u,i.nameWithOwner,r.originBranch,r.expectedPullRequestHeadSha,r.expectedOriginHeadSha,r.nowIso);if(!w.ok)return o(w.reasonCode,!0,!0);if(f=w.receipt,await A(t,r.originBranch)!==r.expectedOriginHeadSha)return o("epic-terminal-pr-origin-raced",!0,!0);await u("pr","merge",String(r.prNumber),"--repo",`https://github.com/${i.nameWithOwner}`,"--merge","--match-head-commit",r.expectedPullRequestHeadSha)}else{if(s.state!=="MERGED")return o("epic-terminal-pr-not-open-or-merged",!1,!0);f={schemaVersion:1,provider:"github",mode:"recovered_exact_tree",source:"physical_recovery",prHeadSha:r.expectedPullRequestHeadSha,originHeadSha:r.expectedOriginHeadSha,checkedAt:r.nowIso,publicSafe:!0}}const h=await L(u,i.nameWithOwner,r.prNumber),b=h?.mergeCommit?.oid;if(h?.state!=="MERGED"||!b)return o("epic-terminal-pr-merge-unverified",!0,!0);const g=await A(t,r.originBranch);if(await P(t,r.originBranch,g),!await v(t,r.expectedStoryHeadSha,g)||!await v(t,r.expectedPullRequestHeadSha,g)||!await v(t,b,g))return o("epic-terminal-pr-merge-ancestry-unproven",!0,!0);const[p,x]=await Promise.all([t("rev-parse",`${r.expectedPullRequestHeadSha}^{tree}`),t("rev-parse",`${b}^{tree}`)]);return p!==r.candidateQa.treeSha||x!==p?o("epic-terminal-pr-merged-tree-mismatch",!1,!0):{ok:!0,mergeSha:r.expectedPullRequestHeadSha,pushedSha:b,providerGuard:f}}catch(i){return o("epic-terminal-pr-merge-denied",!0,te(i))}},async verifyTerminalReceipt(r,i,n){try{if(i.physicalStatus!=="pushed"||!i.pushedSha||!i.mergeSha)return o("epic-terminal-physical-revalidation-required",!0,!1);const s=await D(e,c,!0),d=s.epics?.[r.epicId];if(!d||S(d.execution_branch)!==r.executionBranch||S(d.origin_branch)!==r.originBranch||S(d.graph_revision)!==r.graphRevision)return o("epic-terminal-state-revalidation-drift",!0,!1);const l=await t("rev-parse",`refs/heads/${r.executionBranch}`);if(l!==r.expectedExecutionHeadSha||i.executionHeadSha!==l)return o("epic-terminal-execution-revalidation-drift",!0,!1);const f=_(d.origin_binding)?d.origin_binding:null;if(!f||f.originBranch!==r.originBranch||f.executionBranch!==r.executionBranch||!await j(t,f.originHeadSha)||!await v(t,f.originHeadSha,l))return o("epic-origin-binding-revalidation-drift",!0,!1);const h=await X(e,s,d,r.epicId,r.executionBranch);if(re(d.branch_lease)||!ee(h,r.storyCheckpointIds))return o("epic-checkpoint-set-revalidation-drift",!0,!1);const b=_(d.aggregate_qa_receipt)?d.aggregate_qa_receipt:null;if(!he(b,l,r.graphRevision,n)||b?.receiptRef!==r.localGates.aggregateQaReceipt.receiptRef)return o("epic-terminal-aggregate-qa-revalidation-drift",!0,!1);const g=await A(t,r.originBranch);if(await P(t,r.originBranch,g),!await v(t,l,g)||!await v(t,i.mergeSha,g)||!await v(t,i.pushedSha,g))return o("epic-terminal-physical-ancestry-unproven",!0,!1);const p={originHeadSha:i.baseSha,executionHeadSha:l,mergeSha:i.mergeSha,graphRevision:r.graphRevision};let x=m.get(i.mergeSha),w=W(x,p);if(!w){const H=await oe(e,p,n);x=H.candidateAuthority,w=H.candidateQa,m.set(i.mergeSha,x)}if(i.candidateQa&&(i.candidateQa.originHeadSha!==w.originHeadSha||i.candidateQa.executionHeadSha!==w.executionHeadSha||i.candidateQa.graphRevision!==w.graphRevision||i.candidateQa.treeSha!==w.treeSha))return o("epic-merge-candidate-receipt-drift",!0,!1);let R=i.providerGuard;if(i.strategy==="single_pr"){if(!i.prNumber)return o("epic-terminal-pr-merge-unverified",!0,!1);if(await t("rev-parse",`${i.pushedSha}^{tree}`)!==w.treeSha)return o("epic-terminal-pr-merged-tree-mismatch",!1,!1);if(R&&!Ie(R,i))return o("epic-terminal-pr-base-guard-unverifiable",!1,!1);R??={schemaVersion:1,provider:"github",mode:"recovered_exact_tree",source:"physical_recovery",prHeadSha:i.mergeSha,originHeadSha:i.baseSha,checkedAt:n,publicSafe:!0}}else if(R)return o("epic-terminal-pr-base-guard-unverifiable",!1,!1);return{ok:!0,candidateQa:w,candidateAuthority:x,...R?{providerGuard:R}:{}}}catch{return o("epic-terminal-physical-revalidation-failed",!0,!1)}},async applyReconciliation(r,i,n){if(i.action==="preserve")return o("git-reconciliation-preserve-not-actionable",!1,!1);if(n)return{ok:!0,outcome:"dry_run"};if(i.action==="no_op")return{ok:!0,outcome:"already_absent"};if(i.action==="delete_remote_branch")return Be(r,i,t,u);try{const s=await F({candidate:r,decision:i,git:t,gh:u});if(!s.ok)return o(s.reasonCode,!0,!1);if(s.alreadyAbsent)return{ok:!0,outcome:"already_absent"};if(i.action==="delete_local_branch")await t("update-ref","-d",`refs/heads/${r.branchName}`,r.headSha);else if(i.action==="close_pull_request"){if(!r.prNumber)return o("git-reconciliation-pr-number-missing",!1,!1);const d=await I(t,u);if(!d)return o("git-resource-provider-repository-unverified",!0,!0);const l=`https://github.com/${d.nameWithOwner}`,f=`neocortex-reconciliation:${O("sha256").update(r.resourceId).digest("hex")}`,h=JSON.parse(await u("pr","view",String(r.prNumber),"--repo",l,"--json","comments"));if(!_(h)||!Array.isArray(h.comments)||h.comments.length>1e3||h.comments.some(p=>!_(p)||typeof p.body!="string"))return o("git-reconciliation-pr-comments-unverified",!0,!0);h.comments.some(p=>String(p.body).includes(f))||await u("pr","comment",String(r.prNumber),"--repo",l,"--body",`Neocortex reconciliation verified managed ownership and integrated content; requesting closure. [${f}]`);const b=await F({candidate:r,decision:i,git:t,gh:u});if(!b.ok)return o(b.reasonCode,!0,!1);if(b.alreadyAbsent)return{ok:!0,outcome:"already_absent"};await u("pr","close",String(r.prNumber),"--repo",l);const g=await F({candidate:r,decision:i,git:t,gh:u});if(!g.ok)return o(g.reasonCode,!0,!1);if(!g.alreadyAbsent)return o("git-reconciliation-pr-close-unverified",!0,!0)}return{ok:!0,outcome:"applied"}}catch{return o("git-reconciliation-effect-failed",!0,!1)}},async persist(r){try{let i;return await J(e,n=>{const s=z(n,r.terminalReceipt.epicId),d=Array.isArray(s.git_reconciliation_receipts)?s.git_reconciliation_receipts.filter(_):[],l=new Map(d.map(b=>[b.idempotencyKey,b]));for(const b of r.reconciliationReceipts)K(l.get(b.idempotencyKey))||l.set(b.idempotencyKey,b);const f=_(s.terminal_git_receipt)?s.terminal_git_receipt:null,h=Se(f,r.terminalReceipt);if(h.kind==="blocked"){i=h.reasonCode;return}s.terminal_git_receipt=h.receipt,s.git_reconciliation_receipts=[...l.values()],s.physicalMergeStatus=r.terminalReceipt.physicalStatus==="pushed"?"merged":r.terminalReceipt.physicalStatus,s.pr_number=r.terminalReceipt.prNumber??s.pr_number??null,s.git_reconciliation_debt=me(s.git_reconciliation_debt,r.preservedDecisions)}),i?o(i,!1,!1):{ok:!0}}catch{return o("epic-terminal-state-persist-failed",!0,!1)}},async persistReconciliation(r){try{return await J(e,i=>{const n=z(i,r.epicId),s=Array.isArray(n.git_reconciliation_receipts)?n.git_reconciliation_receipts.filter(_):[],d=new Map(s.map(l=>[l.idempotencyKey,l]));for(const l of r.reconciliationReceipts)K(d.get(l.idempotencyKey))||d.set(l.idempotencyKey,l);n.git_reconciliation_receipts=[...d.values()],n.git_reconciliation_debt=me(n.git_reconciliation_debt,r.preservedDecisions)}),{ok:!0}}catch{return o("git-reconciliation-state-persist-failed",!0,!1)}}}}async function I(e,a){try{const c=await e("remote","get-url","origin"),t=c.match(/^https:\/\/github\.com\/([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?\/?$/)?.[1]??c.match(/^git@github\.com:([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?$/)?.[1];if(!t)return null;const u=JSON.parse(await a("repo","view",`https://github.com/${t}`,"--json","id,nameWithOwner,url"));return u.nameWithOwner!==t||u.url!==`https://github.com/${t}`||typeof u.id!="string"||!/^[A-Za-z0-9_=-]{1,256}$/.test(u.id)?null:{id:u.id,nameWithOwner:t}}catch{return null}}async function Be(e,a,c,t){try{if(e.kind!=="remote_branch"||a.resourceId!==e.resourceId||!e.baseBranch||e.baseBranch===e.branchName||!E(e.branchName)||!E(e.baseBranch)||!/^[a-f0-9]{40}$/.test(e.headSha)||!/^[a-f0-9]{40}$/.test(e.integrationHeadSha))return o("git-reconciliation-candidate-no-longer-safe",!1,!1);const u=await I(c,t);if(!u)return o("git-resource-remote-delete-cas-unavailable",!1,!1);if(!await C(c,e.branchName))return{ok:!0,outcome:"already_absent"};const r=await F({candidate:e,decision:a,git:c,gh:t});if(!r.ok)return o(r.reasonCode,!0,!1);if((await I(c,t))?.id!==u.id)return o("git-resource-provider-repository-raced",!0,!1);const n=O("sha256").update(["managed-remote-delete-v1",u.id,e.branchName,e.headSha,e.baseBranch,e.integrationHeadSha].join("\0")).digest("hex"),s=(f,h,b)=>`{name:${JSON.stringify(`refs/heads/${f}`)},beforeOid:${JSON.stringify(h)},afterOid:${JSON.stringify(b)},force:false}`,d=`mutation{updateRefs(input:{repositoryId:${JSON.stringify(u.id)},clientMutationId:${JSON.stringify(n)},refUpdates:[`+s(e.branchName,e.headSha,"0".repeat(40))+","+s(e.baseBranch,e.integrationHeadSha,e.integrationHeadSha)+"]}){clientMutationId}}",l=JSON.parse(await t("api","graphql","--hostname","github.com","-f",`query=${d}`));return l.errors||l.data?.updateRefs?.clientMutationId!==n?o("git-resource-remote-delete-cas-unverified",!0,!0):await C(c,e.branchName)?o("git-resource-remote-delete-recreated-or-unverified",!0,!1):{ok:!0,outcome:"applied"}}catch{return o("git-resource-remote-delete-cas-rejected",!0,!0)}}async function F(e){const{candidate:a,decision:c,git:t,gh:u}=e;if(!c.managed||!a.providerVerified||a.current||a.origin||a.protected||a.lifecycle==="active"||a.hasExclusiveCommits||a.worktreeActive)return{ok:!1,reasonCode:"git-reconciliation-candidate-no-longer-safe"};const m=await t("symbolic-ref","--quiet","--short","HEAD").catch(()=>""),r=await fe(t);if(m===a.branchName||r.has(a.branchName))return{ok:!1,reasonCode:"git-resource-worktree-active"};if(a.kind==="local_branch"){const d=await le(t,`refs/heads/${a.branchName}`);return d?d!==a.headSha?{ok:!1,reasonCode:"git-resource-expected-oid-raced"}:!a.baseBranch||await A(t,a.baseBranch)!==a.integrationHeadSha||!await v(t,d,a.integrationHeadSha)?{ok:!1,reasonCode:"git-resource-integration-unproven"}:{ok:!0}:{ok:!0,alreadyAbsent:!0}}if(a.kind==="remote_branch"){const d=await C(t,a.branchName);if(!d)return{ok:!0};if(d!==a.headSha)return{ok:!1,reasonCode:"git-resource-expected-oid-raced"};const l=await I(t,u);return l?await U(u,l.nameWithOwner,a.branchName)!=="unprotected"?{ok:!1,reasonCode:"git-resource-protected"}:!a.baseBranch||await A(t,a.baseBranch)!==a.integrationHeadSha?{ok:!1,reasonCode:"git-resource-integration-unproven"}:(await t("fetch","--quiet","--no-tags","origin",`refs/heads/${a.branchName}`),await t("rev-parse","FETCH_HEAD")!==a.headSha||!await v(t,a.headSha,a.integrationHeadSha)?{ok:!1,reasonCode:"git-resource-integration-unproven"}:{ok:!0}):{ok:!1,reasonCode:"git-resource-provider-repository-unverified"}}if(!a.prNumber||!a.baseBranch)return{ok:!1,reasonCode:"git-reconciliation-pr-proof-missing"};const i=await I(t,u);if(!i)return{ok:!1,reasonCode:"git-resource-provider-repository-unverified"};const n=await L(u,i.nameWithOwner,a.prNumber);if(!n||n.headRefName!==a.branchName||n.baseRefName!==a.baseBranch||n.headRefOid!==a.headSha)return{ok:!1,reasonCode:"git-resource-expected-oid-raced"};if(n.state==="CLOSED"||n.state==="MERGED")return{ok:!0,alreadyAbsent:!0};if(await U(u,i.nameWithOwner,a.branchName)!=="unprotected")return{ok:!1,reasonCode:"git-resource-protected"};const s=await C(t,a.branchName);return!n||n.state!=="OPEN"||n.headRefName!==a.branchName||n.baseRefName!==a.baseBranch||n.headRefOid!==a.headSha||s!==a.headSha?{ok:!1,reasonCode:"git-resource-expected-oid-raced"}:(await t("fetch","--quiet","--no-tags","origin",`refs/heads/${a.branchName}`),await t("rev-parse","FETCH_HEAD")!==a.headSha||await A(t,a.baseBranch)!==a.integrationHeadSha||!await v(t,a.headSha,a.integrationHeadSha)?{ok:!1,reasonCode:"git-resource-integration-unproven"}:{ok:!0})}async function se(e){const a=[],c=await fe(e.git),t=_e(e.state),u=await I(e.git,e.gh),m=g=>{const p=g.split(`
-`).filter(Boolean).map(w=>w.split(/\s+/));if(p.length>Z)throw new Error("git-reconciliation-ref-inventory-limit");const x=new Map;for(const[w,R]of p){const H=R?.replace(/^refs\/heads\//,"");if(!H||!E(H)||!/^[a-f0-9]{40,64}$/.test(w??"")||x.has(H))throw new Error("git-reconciliation-ref-inventory-invalid");x.set(H,w)}return x},r=m(await e.git("for-each-ref",`--count=${Z+1}`,"--format=%(objectname) %(refname)","refs/heads")),i=m(await e.git("ls-remote","--heads","origin")),n=new Set([...t.claims.keys()].filter(E)),s=u?await $e(e.gh,u.nameWithOwner,n):[],d=new Map([[e.directive.originBranch,e.originHeadSha]]),l=async g=>{if(d.has(g))return d.get(g);const p=i.get(g);return p?(await P(e.git,g,p),d.set(g,p),p):""},f=new Map,h=async(g,p)=>{const x=`${g}:${p}`;return f.has(x)||f.set(x,!!(g&&p)&&await v(e.git,g,p)),f.get(x)},b=new Set([...r.keys(),...i.keys(),...t.claims.keys()]);if(b.size>Z)throw new Error("git-reconciliation-ref-inventory-limit");for(const g of[...b].sort()){if(!E(g))continue;const p=t.claims.get(g)??[],x=new Set(p.map(y=>`${y.epicId}:${y.origin}`)),w=x.size===1?p[0].origin:e.directive.originBranch,R=await l(w),H=p.length===0||p.some(y=>y.active),G=r.get(g),B=i.get(g);B&&await P(e.git,g,B);const M=u&&B?await U(e.gh,u.nameWithOwner,g):"unknown",T=async y=>{if(x.size!==1)return[];const $=new Set;for(const q of p)for(const N of q.proofs)N.head===y&&(N.mergeSha&&(!N.pushedSha||!await h(y,N.mergeSha)||!await h(N.mergeSha,N.pushedSha)||!await h(N.pushedSha,R))||N.evidence.forEach(V=>$.add(V)));return[...$]},k={schemaVersion:1,branchName:g,baseBranch:w,integrationHeadSha:R,lifecycle:H?"active":"integrated",current:g===e.currentBranch,origin:t.origins.has(g)||g===e.directive.originBranch,worktreeActive:c.has(g),contentEquivalent:!1,publicSafe:!0};for(const[y,$]of[["local_branch",G],["remote_branch",B]]){if(!$)continue;const q=`${y}:${O("sha256").update(g).digest("hex")}:${$}`,N=await h($,R);a.push({...k,resourceId:q,kind:y,headSha:$,ownershipEvidence:await T($),protected:!!B&&M!=="unprotected",providerVerified:y==="local_branch"?!0:!!u&&M!=="unknown",...y==="remote_branch"&&u?{remoteDeletionCas:"github-update-refs-v1"}:{},commitsReachable:N,hasExclusiveCommits:!N,previouslyReconciled:e.receiptIds.has(q)})}for(const y of s.filter($=>$.headRefName===g)){const $=y.baseRefName===w&&y.sameRepository,q=await T(y.headRefOid);$&&q.includes("managed_metadata")&&q.push("pr_head_base_match");const N=`pr:${y.number}:${y.headRefOid}:${O("sha256").update(y.baseRefName).digest("hex")}`,V=await h(y.headRefOid,R);a.push({...k,resourceId:N,kind:"pull_request",prNumber:y.number,headSha:y.headRefOid,lifecycle:y.state!=="OPEN"?"already_absent":H?"active":"superseded",ownershipEvidence:q,providerVerified:$,protected:M!=="unprotected",commitsReachable:V,hasExclusiveCommits:!V,previouslyReconciled:e.receiptIds.has(N)})}}return Ne(e.epic,a),a}function Ne(e,a){const c=new Set((Array.isArray(e.git_reconciliation_receipts)?e.git_reconciliation_receipts:[]).filter(_).map(m=>S(m.idempotencyKey))),t=new Set((Array.isArray(e.git_reconciliation_debt)?e.git_reconciliation_debt:[]).filter(_).map(m=>S(m.resourceId))),u=new Set(a.filter(m=>m.kind==="pull_request"&&ie(m).action==="close_pull_request").map(m=>m.branchName));for(const m of a){const r=ie(m);r.action==="preserve"?t.add(m.resourceId):(c.add(`reconciliation:v2:${O("sha256").update([m.resourceId,r.action].join("\0")).digest("hex")}`),m.kind!=="pull_request"&&u.has(m.branchName)&&t.add(m.resourceId))}if(c.size>1024)throw new Error("git-reconciliation-receipt-capacity");if(t.size>1024)throw new Error("git-reconciliation-debt-capacity")}function de(e){const a=new Set(["git-reconciliation-state-inventory-limit","git-reconciliation-ref-inventory-limit","git-reconciliation-ref-inventory-invalid","git-reconciliation-pr-inventory-limit","git-reconciliation-pr-inventory-invalid","git-reconciliation-receipt-capacity","git-reconciliation-debt-capacity"]);return e instanceof Error&&a.has(e.message)?e.message:void 0}async function $e(e,a,c){const t=a.split("/")[0];if(!t||!/^[A-Za-z0-9_.-]+$/.test(t))throw new Error("git-reconciliation-pr-inventory-invalid");const u=[],m=new Set,r=100,i=Math.floor(ne/r)+1;for(const n of[...c].sort()){if(!E(n))throw new Error("git-reconciliation-pr-inventory-invalid");const s=encodeURIComponent(`${t}:${n}`);for(let d=1;d<=i;d+=1){const l=`repos/${a}/pulls?state=all&head=${s}&per_page=${r}&page=${d}`,f=JSON.parse(await e("api",l,"--hostname","github.com"));if(!Array.isArray(f)||f.length>r)throw new Error("git-reconciliation-pr-inventory-limit");for(const h of f){if(!_(h)||!Number.isSafeInteger(h.number)||Number(h.number)<=0||m.has(Number(h.number))||!_(h.head)||!_(h.base)||S(h.head.ref)!==n||!E(S(h.head.ref))||!E(S(h.base.ref))||!/^[a-f0-9]{40,64}$/.test(S(h.head.sha))||!["open","closed"].includes(S(h.state)))throw new Error("git-reconciliation-pr-inventory-invalid");if(m.add(Number(h.number)),u.push({number:Number(h.number),state:S(h.state).toUpperCase(),headRefName:S(h.head.ref),headRefOid:S(h.head.sha),baseRefName:S(h.base.ref),sameRepository:_(h.head.repo)&&_(h.base.repo)&&h.head.repo.full_name===a&&h.base.repo.full_name===a}),u.length>ne)throw new Error("git-reconciliation-pr-inventory-limit")}if(f.length<r)break}}return u}function K(e){return _(e)&&(e.outcome==="applied"||e.outcome==="already_absent")}async function Ae(e){try{const a=(await e.git("log",e.originHeadSha,"--format=%H","--fixed-strings",`--grep=Neocortex-Idempotency: ${e.directive.idempotencyKey}`)).split(`
-`).filter(s=>/^[a-f0-9]{40,64}$/i.test(s));if(a.length!==1)return null;const c=a[0],t=(await e.git("rev-list","--parents","-n","1",c)).split(/\s+/),u=await e.git("show","-s","--format=%B",c),[m]=u.split(`
-`),r=`merge(${e.directive.epicId}): integrate ${e.directive.executionBranch} into ${e.directive.originBranch}`;if(t.length!==3||t[2]!==e.executionHeadSha||m!==r)return null;const i=new Set(u.split(`
-`).map(s=>s.trim()));for(const s of[`Neocortex-Epic: ${e.directive.epicId}`,`Neocortex-Origin-Branch: ${e.directive.originBranch}`,`Neocortex-Execution-Branch: ${e.directive.executionBranch}`,`Neocortex-Execution-Head: ${e.executionHeadSha}`,`Neocortex-Origin-Base: ${t[1]}`,`Neocortex-Graph-Revision: ${e.directive.graphRevision}`,`Neocortex-Aggregate-QA: ${e.directive.localGates.aggregateQaReceipt.receiptRef}`,`Neocortex-Idempotency: ${e.directive.idempotencyKey}`])if(!i.has(s))return null;const n=await e.git("show","-s","--format=%cI",c);return{schemaVersion:1,epicId:e.directive.epicId,executionBranch:e.directive.executionBranch,originBranch:e.directive.originBranch,baseSha:t[1],executionHeadSha:e.executionHeadSha,mergeSha:c,pushedSha:c,strategy:"direct",physicalStatus:"pushed",localGateReceiptRefs:e.directive.localGates.receiptRefs,idempotencyKey:e.directive.idempotencyKey,attemptStartedAt:n,completedAt:n,retryEligible:!1,reasonCodes:["epic-terminal-recovered-physical-push"],publicSafe:!0}}catch{return null}}async function U(e,a,c){try{if(!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(a))return"unknown";const t=await e("api",`repos/${a}/branches/${encodeURIComponent(c)}`,"--hostname","github.com","--jq",".protected");return t==="false"?"unprotected":t==="true"?"protected":"unknown"}catch{return"unknown"}}async function L(e,a,c){try{const t=JSON.parse(await e("pr","view",String(c),"--repo",`https://github.com/${a}`,"--json","state,headRefName,headRefOid,baseRefName,mergeCommit"));return[t.state,t.headRefName,t.headRefOid,t.baseRefName].every(u=>typeof u=="string")?t:null}catch{return null}}async function Ee(e,a,c,t,u,m){if(!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(a)||!E(c)||!/^[a-f0-9]{40,64}$/i.test(t)||!/^[a-f0-9]{40,64}$/i.test(u)||Number.isNaN(Date.parse(m)))return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"};let r;try{const d=JSON.parse(await e("api",`repos/${a}/rules/branches/${encodeURIComponent(c)}`,"--hostname","github.com","--paginate","--slurp")),l=Array.isArray(d)&&d.every(Array.isArray)?d.flat():d;if(!Array.isArray(l)||l.length>256||l.some(f=>!_(f)))return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"};r=l}catch{return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"}}if(r.some(d=>d.type==="merge_queue"))return{ok:!1,reasonCode:"epic-terminal-pr-merge-queue-local-gate-required"};const i=r.some(d=>d.type==="required_status_checks"&&_(d.parameters)&&d.parameters.strict_required_status_checks_policy===!0);let n=!1;try{const d=JSON.parse(await e("api",`repos/${a}/branches/${encodeURIComponent(c)}/protection/required_status_checks`,"--hostname","github.com"));if(!_(d)||typeof d.strict!="boolean")return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"};n=d.strict}catch(d){if(!qe(d))return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"}}return!i&&!n?{ok:!1,reasonCode:"epic-terminal-pr-strict-base-guard-required"}:{ok:!0,receipt:{schemaVersion:1,provider:"github",mode:"strict_up_to_date_expected_head",source:i&&n?"branch_protection_and_ruleset":i?"ruleset":"branch_protection",prHeadSha:t,originHeadSha:u,checkedAt:m,publicSafe:!0}}}function qe(e){return e instanceof Error&&/(?:HTTP\s*)?404\b|not found/i.test(e.message)}function Ie(e,a){const c=e.mode==="recovered_exact_tree"?e.source==="physical_recovery":e.mode==="strict_up_to_date_expected_head"&&["branch_protection","ruleset","branch_protection_and_ruleset"].includes(e.source);return e.schemaVersion===1&&e.provider==="github"&&c&&e.publicSafe===!0&&!Number.isNaN(Date.parse(e.checkedAt))&&e.prHeadSha===a.mergeSha&&e.originHeadSha===a.baseSha}async function ue(e,a,c){return(await ke(e,[...a],{cwd:c,encoding:"utf8",maxBuffer:16777216})).stdout.trim()}async function D(e,a,c=!1){const t=JSON.parse(await ae(a,"utf8"));return xe(t,await He(e,{required:c}))}function he(e,a,c,t){if(!e||e.schemaVersion!==1||e.evidenceVersion!=="p205-execution-v2"||e.producer!=="local-yolo-tdd"||e.contract!=="P205-CI-02"||e.command!==Q||e.verdict!=="passed"||e.executionHeadSha!==a||e.graphRevision!==c||!/^[a-f0-9]{64}$/i.test(e.manifestDigest??"")||!/^[a-f0-9]{64}$/i.test(e.resultDigest??"")||e.gateIds.length===0)return!1;const u=`local-yolo-tdd:${O("sha256").update(["epic-aggregate-p205-execution-v2",Q,a,c,e.manifestDigest,e.gateIds.join(","),e.resultDigest].join("\0")).digest("hex")}`;if(e.receiptRef!==u)return!1;const m=Date.parse(e.checkedAt),r=Date.parse(t);return Number.isFinite(m)&&Number.isFinite(r)&&r-m<=1800*1e3&&m-r<=300*1e3}async function A(e,a){const c=await C(e,a);if(!c)throw new Error("origin-ref-missing");return c}async function C(e,a){if(!E(a))throw new Error("branch-ref-invalid");const t=(await e("ls-remote","--heads","origin",`refs/heads/${a}`)).split(`
-`).filter(Boolean).map(u=>u.split(/\s+/));if(t.length!==0){if(t.length!==1||t[0].length!==2||t[0][1]!==`refs/heads/${a}`||!/^[a-f0-9]{40,64}$/i.test(t[0][0]??""))throw new Error("remote-ref-query-invalid");return t[0][0]}}async function P(e,a,c){if(await e("fetch","--quiet","--no-tags","origin",`refs/heads/${a}`),await e("rev-parse","FETCH_HEAD")!==c)throw new Error("remote-head-raced")}async function le(e,a){try{return await e("rev-parse","--verify",a)}catch{return}}async function v(e,a,c){try{return await e("merge-base","--is-ancestor",a,c),!0}catch{return!1}}async function j(e,a){if(!/^[a-f0-9]{40,64}$/i.test(a))return!1;try{return await e("cat-file","-t",a)==="commit"}catch{return!1}}async function fe(e){const a=new Set,c=await e("worktree","list","--porcelain");for(const t of c.split(`
-`))t.startsWith("branch refs/heads/")&&a.add(t.slice(18));return a}function o(e,a,c){return{ok:!1,reasonCode:e,retryEligible:a,externalPolicy:c}}function S(e){return typeof e=="string"?e.trim():""}function E(e){return e.length>0&&e.length<=240&&!e.startsWith("-")&&!e.startsWith("/")&&!e.endsWith("/")&&!e.endsWith(".lock")&&!e.includes("..")&&!e.includes("\\")&&!e.includes("@{")&&!e.includes("//")&&/^[A-Za-z0-9._/-]+$/.test(e)}function _(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function Oe(e,a){return e instanceof Error&&"code"in e&&e.code===a}function Y(e){return(Array.isArray(e.stories)?e.stories:Array.isArray(e.story_ids)?e.story_ids:[]).filter(c=>typeof c=="string")}async function X(e,a,c,t,u){const m=Y(c),r=await Promise.all(m.map(i=>ce(e,a.stories?.[i]?.checkpoint,i,t,u).then(n=>n&&ge(a.stories?.[i]?.checkpoint))));return m.filter((i,n)=>r[n])}function ge(e){const a=_(e)?e:void 0,c=a&&_(a.qaReceipt)?a.qaReceipt:void 0;return!!(c&&c.evidenceVersion==="p205-execution-v2"&&c.producer==="local-yolo-tdd"&&c.contract==="P205-CI-02"&&c.command===Q&&/^[a-f0-9]{64}$/i.test(S(c.manifestDigest))&&/^[a-f0-9]{64}$/i.test(S(c.resultDigest))&&Array.isArray(c.gateIds)&&c.gateIds.length>0)}function ee(e,a){return e.length===a.length&&[...e].sort().every((c,t)=>c===[...a].sort()[t])}function re(e){return _(e)&&typeof e.expiresAt=="string"&&e.expiresAt>new Date().toISOString()}async function pe(e){const a=new Set([".neocortex/yoloop.lock",".neocortex/yoloop-state.json",".neocortex/continuity/continuity.sqlite",".neocortex/continuity/continuity.sqlite-shm",".neocortex/continuity/continuity.sqlite-wal"]);return(await e("status","--porcelain","--untracked-files=all")).split(`
-`).filter(Boolean).some(c=>!c.startsWith("?? ")||!a.has(c.slice(3)))}function te(e){const a=e instanceof Error?e.message:"";return/protected branch|branch protection|required pull request|GH006|GH013|ruleset|review required/i.test(a)}function me(e,a){const c=Array.isArray(e)?e.filter(_):[],t=new Map(c.map(u=>[S(u.resourceId),u]));for(const u of a)t.set(u.resourceId,u);return[...t.values()]}export{ze as createCliEpicTerminalGitAdapter};
+/** Production Git/GitHub adapter for the terminal epic lifecycle. */
+import { execFile } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { promisify } from 'node:util';
+import { classifyGitReconciliationCandidate, reconcileTerminalReceipt } from '../../../../shared/dist/yoloop/epic-terminal-git.js';
+import { collectGitResourceOwnership, GIT_INVENTORY_PR_LIMIT, GIT_INVENTORY_REF_LIMIT, } from './epic-git-reconciliation-inventory.js';
+import { executeEpicMergeCandidateQa, verifiedEpicMergeCandidateReceipt } from './epic-merge-candidate-qa.js';
+import { applyGitLifecycleRuntimeOverlay, ensureRuntimeEpic, executeP205TransientAuthority, P205_COMPLETE_COMMAND, projectP205TransientExecutionEvidence, verifyAcceptedGitLifecycleStoryCheckpoint, mutateGitLifecycleRuntime, readGitLifecycleRuntime, } from '../../git/git-lifecycle-store.js';
+const execFileAsync = promisify(execFile);
+export function createCliEpicTerminalGitAdapter(projectRoot, options = {}) {
+    const statePath = join(projectRoot, '.neocortex', 'state.json');
+    const git = options.gitRunner ?? ((...args) => command('git', args, projectRoot));
+    const gh = options.providerRunner ?? ((...args) => command('gh', args, projectRoot));
+    const candidateAuthorities = new Map();
+    return {
+        async prepareLifecycleEvidence(input) {
+            try {
+                try {
+                    await readFile(statePath, 'utf8');
+                }
+                catch (error) {
+                    // Continuity can execute in projectless fixtures/hosts. Git lifecycle
+                    // evidence is inapplicable until a canonical project state exists.
+                    if (isNodeError(error, 'ENOENT')) {
+                        return { ok: true, originBindingCaptured: false, aggregateQaRecorded: false };
+                    }
+                    throw error;
+                }
+                const state = await readEffectiveState(projectRoot, statePath);
+                const epic = state.epics?.[input.epicId];
+                if (!epic)
+                    return failure('epic-state-missing', false, false);
+                if (stringValue(epic.branch_mode) !== 'epic') {
+                    return { ok: true, originBindingCaptured: false, aggregateQaRecorded: false };
+                }
+                const executionBranch = stringValue(epic.execution_branch);
+                const recordedOrigin = stringValue(epic.origin_branch);
+                if (!executionBranch || !safeBranch(executionBranch))
+                    return failure('epic-execution-branch-missing', false, false);
+                let currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
+                let currentHead = await git('rev-parse', 'HEAD');
+                let originBinding = isRecord(epic.origin_binding)
+                    ? epic.origin_binding
+                    : null;
+                let originBindingCaptured = false;
+                if (!originBinding) {
+                    if (!currentBranch || currentBranch === executionBranch || !safeBranch(currentBranch)) {
+                        return failure('epic-origin-binding-capture-window-missed', false, false);
+                    }
+                    if (recordedOrigin && recordedOrigin !== currentBranch) {
+                        return failure('epic-origin-binding-recorded-origin-drift', false, false);
+                    }
+                    originBinding = {
+                        schemaVersion: 1,
+                        originBranch: currentBranch,
+                        originHeadSha: currentHead,
+                        executionBranch,
+                        capturedFromCurrentCheckout: true,
+                        capturedAt: input.nowIso,
+                    };
+                    await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
+                        const runtimeEpic = ensureRuntimeEpic(runtime, input.epicId);
+                        if (runtimeEpic.origin_binding && JSON.stringify(runtimeEpic.origin_binding) !== JSON.stringify(originBinding)) {
+                            throw new Error('origin-binding-cas-conflict');
+                        }
+                        runtimeEpic.origin_branch = currentBranch;
+                        runtimeEpic.origin_binding = originBinding;
+                    });
+                    originBindingCaptured = true;
+                }
+                else if (originBinding.executionBranch !== executionBranch
+                    || originBinding.originBranch !== recordedOrigin
+                    || currentBranch !== executionBranch && currentBranch !== originBinding.originBranch
+                    || !(await isCommit(git, originBinding.originHeadSha))
+                    || !(await isAncestor(git, originBinding.originHeadSha, currentHead))) {
+                    return failure('epic-origin-binding-physical-drift', false, false);
+                }
+                if (currentBranch !== executionBranch) {
+                    const executionHead = await resolveOptionalRef(git, `refs/heads/${executionBranch}`);
+                    try {
+                        if (executionHead) {
+                            if (!(await isAncestor(git, originBinding.originHeadSha, executionHead))) {
+                                return failure('epic-execution-branch-origin-drift', false, false);
+                            }
+                            await git('switch', executionBranch);
+                        }
+                        else {
+                            await git('switch', '-c', executionBranch, originBinding.originHeadSha);
+                        }
+                    }
+                    catch {
+                        const dirty = await git('status', '--porcelain', '--untracked-files=normal').catch(() => '');
+                        return failure(dirty ? 'epic-execution-branch-switch-blocked-by-user-changes' : 'epic-execution-branch-switch-failed', true, false);
+                    }
+                    currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD');
+                    currentHead = await git('rev-parse', 'HEAD');
+                    if (currentBranch !== executionBranch)
+                        return failure('epic-execution-branch-switch-unverified', true, false);
+                }
+                const effective = await readEffectiveState(projectRoot, statePath, true);
+                const effectiveEpic = effective.epics?.[input.epicId];
+                if (!effectiveEpic)
+                    return failure('epic-state-missing', false, false);
+                const checkpointStoryIds = storyIds(effectiveEpic);
+                const checkpointVerdicts = await Promise.all(checkpointStoryIds.map((storyId) => verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, effective.stories?.[storyId]?.checkpoint, storyId, input.epicId, executionBranch).then((verified) => verified && hasP205ExecutionAuthority(effective.stories?.[storyId]?.checkpoint))));
+                const checkpointsReady = checkpointStoryIds.length > 0 && checkpointVerdicts.every(Boolean);
+                if (!checkpointsReady)
+                    return { ok: true, originBindingCaptured, aggregateQaRecorded: false };
+                if (currentBranch !== executionBranch)
+                    return failure('epic-aggregate-qa-execution-checkout-required', true, false);
+                const graphRevision = stringValue(effectiveEpic.graph_revision);
+                if (!/^[a-f0-9]{64}$/i.test(graphRevision))
+                    return failure('epic-aggregate-qa-graph-required', false, false);
+                if (await hasUncommittedSourceChanges(git)) {
+                    return failure('epic-aggregate-qa-checkout-dirty', true, false);
+                }
+                const p205Authority = await executeP205TransientAuthority(projectRoot, {
+                    headSha: currentHead,
+                    graphRevision,
+                    nowIso: input.nowIso,
+                });
+                const evidence = projectP205TransientExecutionEvidence(p205Authority);
+                if (!evidence)
+                    return failure('epic-aggregate-qa-authority-invalid', false, false);
+                await options.aggregateQaRunner?.({ projectRoot, gateIds: evidence.gateIds });
+                if (await git('rev-parse', 'HEAD') !== currentHead || await hasUncommittedSourceChanges(git)) {
+                    return failure('epic-aggregate-qa-head-raced', true, false);
+                }
+                const receiptRef = `local-yolo-tdd:${createHash('sha256').update([
+                    'epic-aggregate-p205-execution-v2', P205_COMPLETE_COMMAND,
+                    currentHead, graphRevision, evidence.manifestDigest, evidence.gateIds.join(','), evidence.resultDigest,
+                ].join('\0')).digest('hex')}`;
+                const aggregateQaReceipt = {
+                    schemaVersion: 1, evidenceVersion: 'p205-execution-v2', producer: 'local-yolo-tdd',
+                    contract: 'P205-CI-02', command: P205_COMPLETE_COMMAND,
+                    verdict: 'passed', executionHeadSha: currentHead, graphRevision,
+                    manifestDigest: evidence.manifestDigest, resultDigest: evidence.resultDigest,
+                    checkedAt: evidence.executedAt, receiptRef, gateIds: evidence.gateIds,
+                };
+                await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
+                    const runtimeEpic = ensureRuntimeEpic(runtime, input.epicId);
+                    runtimeEpic.aggregate_qa_receipt = aggregateQaReceipt;
+                });
+                return { ok: true, originBindingCaptured, aggregateQaRecorded: true, p205Authority };
+            }
+            catch {
+                return failure('epic-lifecycle-evidence-production-failed', true, false);
+            }
+        },
+        async inspect(directive) {
+            try {
+                const state = await readEffectiveState(projectRoot, statePath, true);
+                const epic = state.epics?.[directive.epicId];
+                if (!epic)
+                    return failure('epic-state-missing', false, false);
+                if (stringValue(epic.execution_branch) !== directive.executionBranch || stringValue(epic.origin_branch) !== directive.originBranch) {
+                    return failure('epic-branch-boundary-drift', false, false);
+                }
+                const executionHeadSha = await git('rev-parse', `refs/heads/${directive.executionBranch}`);
+                const originHeadSha = await resolveRemoteHeadFresh(git, directive.originBranch);
+                await fetchRemoteHeadExact(git, directive.originBranch, originHeadSha);
+                const acceptedCheckpointIds = await acceptedPhysicalCheckpointIds(projectRoot, state, epic, directive.epicId, directive.executionBranch);
+                let existingReceipt = isRecord(epic.terminal_git_receipt)
+                    ? epic.terminal_git_receipt
+                    : null;
+                if (existingReceipt?.physicalStatus === 'pushed') {
+                    const receiptStillPhysical = Boolean(existingReceipt.pushedSha)
+                        && await isAncestor(git, existingReceipt.executionHeadSha, existingReceipt.pushedSha)
+                        && await isAncestor(git, existingReceipt.pushedSha, originHeadSha);
+                    if (!receiptStillPhysical)
+                        existingReceipt = null;
+                }
+                if (!existingReceipt) {
+                    existingReceipt = await recoverDirectPhysicalReceipt({ directive, executionHeadSha, originHeadSha, git });
+                }
+                const receiptIds = new Set((Array.isArray(epic.git_reconciliation_receipts) ? epic.git_reconciliation_receipts : [])
+                    .filter(isRecord).filter(successfulReconciliation).map((item) => stringValue(item.resourceId)).filter(Boolean));
+                const currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
+                const candidates = directive.reconcile.enabled
+                    ? await buildCandidates({ state, epic, directive, currentBranch, originHeadSha, receiptIds, git, gh }) : [];
+                const persistedOriginBinding = isRecord(epic.origin_binding)
+                    ? epic.origin_binding
+                    : null;
+                const originBinding = persistedOriginBinding
+                    && persistedOriginBinding.originBranch === directive.originBranch
+                    && persistedOriginBinding.executionBranch === directive.executionBranch
+                    && await isCommit(git, persistedOriginBinding.originHeadSha)
+                    && await isAncestor(git, persistedOriginBinding.originHeadSha, executionHeadSha)
+                    ? persistedOriginBinding
+                    : null;
+                const snapshot = {
+                    executionHeadSha, originHeadSha,
+                    ...(stringValue(epic.graph_revision) ? { graphRevision: stringValue(epic.graph_revision) } : {}),
+                    writerLeaseActive: isLiveLease(epic.branch_lease),
+                    acceptedCheckpointIds,
+                    existingReceipt,
+                    aggregateQaReceipt: isRecord(epic.aggregate_qa_receipt)
+                        ? epic.aggregate_qa_receipt
+                        : null,
+                    originBinding,
+                    reconciliationCandidates: candidates,
+                };
+                return { ok: true, snapshot };
+            }
+            catch (error) {
+                return failure(publicInventoryReason(error) ?? 'epic-terminal-inspection-failed', true, false);
+            }
+        },
+        async prepareMergeObject(input) {
+            let mergeSha;
+            try {
+                const treeSha = await git('merge-tree', '--write-tree', input.originHeadSha, input.executionHeadSha);
+                mergeSha = await git('commit-tree', treeSha, '-p', input.originHeadSha, '-p', input.executionHeadSha, '-m', input.message);
+            }
+            catch {
+                return failure('epic-terminal-merge-conflict', false, false);
+            }
+            try {
+                const accepted = await executeEpicMergeCandidateQa(projectRoot, {
+                    mergeSha, originHeadSha: input.originHeadSha, executionHeadSha: input.executionHeadSha,
+                    graphRevision: input.graphRevision,
+                }, input.nowIso);
+                candidateAuthorities.set(mergeSha, accepted.candidateAuthority);
+                return { ok: true, mergeSha, ...accepted };
+            }
+            catch {
+                return failure('epic-merge-candidate-qa-failed', true, false);
+            }
+        },
+        async inspectReconciliation(directive) {
+            try {
+                const state = await readEffectiveState(projectRoot, statePath, true);
+                const epic = state.epics?.[directive.epicId];
+                if (!epic)
+                    return failure('epic-state-missing', false, false);
+                if (stringValue(epic.execution_branch) !== directive.executionBranch || stringValue(epic.origin_branch) !== directive.originBranch) {
+                    return failure('epic-branch-boundary-drift', false, false);
+                }
+                const originHeadSha = await resolveRemoteHeadFresh(git, directive.originBranch);
+                await fetchRemoteHeadExact(git, directive.originBranch, originHeadSha);
+                const receiptIds = new Set((Array.isArray(epic.git_reconciliation_receipts) ? epic.git_reconciliation_receipts : [])
+                    .filter(isRecord).filter(successfulReconciliation).map((item) => stringValue(item.resourceId)).filter(Boolean));
+                const currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
+                const candidates = await buildCandidates({ state, epic, directive, currentBranch, originHeadSha, receiptIds, git, gh });
+                return { ok: true, candidates };
+            }
+            catch (error) {
+                return failure(publicInventoryReason(error) ?? 'git-reconciliation-inspection-failed', true, false);
+            }
+        },
+        async pushMergeObject(input) {
+            try {
+                const candidate = verifiedEpicMergeCandidateReceipt(input.candidateAuthority, {
+                    mergeSha: input.mergeSha, originHeadSha: input.expectedOriginSha,
+                    executionHeadSha: input.executionHeadSha, graphRevision: input.graphRevision,
+                });
+                if (!candidate)
+                    return failure('epic-merge-candidate-authority-required', false, false);
+                const state = await readEffectiveState(projectRoot, statePath, true);
+                const epic = state.epics?.[input.epicId];
+                if (!epic || epic.execution_branch !== input.executionBranch || epic.origin_branch !== input.originBranch
+                    || epic.graph_revision !== input.graphRevision || isLiveLease(epic.branch_lease)
+                    || await git('rev-parse', `refs/heads/${input.executionBranch}`) !== input.executionHeadSha) {
+                    return failure('epic-merge-candidate-authority-raced', true, false);
+                }
+                const accepted = await acceptedPhysicalCheckpointIds(projectRoot, state, epic, input.epicId, input.executionBranch);
+                if (!sameSet(accepted, input.storyCheckpointIds) || !sameSet(storyIds(epic), input.storyCheckpointIds)) {
+                    return failure('epic-checkpoint-set-revalidation-drift', true, false);
+                }
+                const aggregate = isRecord(epic.aggregate_qa_receipt) ? epic.aggregate_qa_receipt : null;
+                if (!validFreshAggregate(aggregate, input.executionHeadSha, input.graphRevision, input.nowIso)
+                    || aggregate.receiptRef !== input.aggregateQaReceipt.receiptRef) {
+                    return failure('epic-terminal-aggregate-qa-revalidation-drift', true, false);
+                }
+                const physicalOrigin = await resolveRemoteHeadFresh(git, input.originBranch);
+                if (physicalOrigin !== input.expectedOriginSha)
+                    return failure('epic-origin-head-raced', true, false);
+                await git('push', '--porcelain', 'origin', `${input.mergeSha}:refs/heads/${input.originBranch}`);
+                const pushedSha = await resolveRemoteHeadFresh(git, input.originBranch);
+                if (pushedSha !== input.mergeSha)
+                    return failure('epic-terminal-push-unverified', true, false);
+                return { ok: true, pushedSha };
+            }
+            catch (error) {
+                return looksLikeRemotePolicy(error)
+                    ? failure('epic-terminal-remote-policy-denied', true, true)
+                    : failure('epic-terminal-push-failed', true, false);
+            }
+        },
+        async ensureSingleEpicPullRequest(input) {
+            try {
+                const candidate = verifiedEpicMergeCandidateReceipt(input.candidateAuthority, {
+                    mergeSha: input.expectedPullRequestHeadSha,
+                    originHeadSha: input.candidateQa.originHeadSha,
+                    executionHeadSha: input.expectedStoryHeadSha,
+                    graphRevision: input.candidateQa.graphRevision,
+                });
+                if (!candidate || candidate !== input.candidateQa
+                    || !(await isAncestor(git, input.candidateQa.originHeadSha, input.expectedPullRequestHeadSha))
+                    || !(await isAncestor(git, input.expectedStoryHeadSha, input.expectedPullRequestHeadSha))) {
+                    return failure('epic-merge-candidate-authority-required', false, false);
+                }
+                const repository = await githubOriginRepository(git, gh);
+                if (!repository)
+                    return failure('git-resource-provider-repository-unverified', true, true);
+                const repositoryUrl = `https://github.com/${repository.nameWithOwner}`;
+                const remoteHead = await resolveRemoteHeadFreshOptional(git, input.executionBranch);
+                if (remoteHead && remoteHead !== input.expectedPullRequestHeadSha) {
+                    await fetchRemoteHeadExact(git, input.executionBranch, remoteHead);
+                    if (!(await isAncestor(git, remoteHead, input.expectedPullRequestHeadSha))) {
+                        return failure('epic-terminal-execution-remote-head-drift', true, true);
+                    }
+                    await git('push', '--porcelain', 'origin', `${input.expectedPullRequestHeadSha}:refs/heads/${input.executionBranch}`);
+                }
+                if (!remoteHead) {
+                    await git('push', '--porcelain', 'origin', `${input.expectedPullRequestHeadSha}:refs/heads/${input.executionBranch}`);
+                }
+                if (await resolveRemoteHeadFresh(git, input.executionBranch) !== input.expectedPullRequestHeadSha) {
+                    return failure('epic-terminal-execution-publish-unverified', true, true);
+                }
+                const existingJson = await gh('pr', 'list', '--repo', repositoryUrl, '--state', 'all', '--head', input.executionBranch, '--base', input.originBranch, '--json', 'number,state,headRefName,headRefOid,baseRefName,mergeCommit', '--limit', '100');
+                const existing = JSON.parse(existingJson);
+                const matching = existing.filter((item) => item.headRefName === input.executionBranch
+                    && item.baseRefName === input.originBranch && item.headRefOid === input.expectedPullRequestHeadSha
+                    && (item.state === 'OPEN' || item.state === 'MERGED'));
+                if (matching.length > 1)
+                    return failure('epic-terminal-duplicate-prs', false, true);
+                if (typeof matching[0]?.number === 'number')
+                    return { ok: true, prNumber: matching[0].number };
+                if (existing.some((item) => item.state === 'OPEN')) {
+                    return failure('epic-terminal-stale-pr', false, true);
+                }
+                const created = await gh('pr', 'create', '--repo', repositoryUrl, '--head', input.executionBranch, '--base', input.originBranch, '--title', `[${input.epicId}] Terminal epic integration`, '--body', `Autonomous terminal integration receipt: ${input.idempotencyKey}`);
+                const match = created.match(/\/(\d+)(?:\s*)$/);
+                if (!match)
+                    return failure('epic-terminal-pr-number-unverified', true, true);
+                const prNumber = Number(match[1]);
+                const createdView = await inspectPullRequest(gh, repository.nameWithOwner, prNumber);
+                if (!createdView || createdView.state !== 'OPEN' || createdView.headRefName !== input.executionBranch
+                    || createdView.baseRefName !== input.originBranch || createdView.headRefOid !== input.expectedPullRequestHeadSha) {
+                    return failure('epic-terminal-pr-create-unverified', true, true);
+                }
+                return { ok: true, prNumber };
+            }
+            catch (error) {
+                return failure('epic-terminal-pr-create-denied', true, looksLikeRemotePolicy(error));
+            }
+        },
+        async mergeEpicPullRequest(input) {
+            try {
+                const repository = await githubOriginRepository(git, gh);
+                if (!repository)
+                    return failure('git-resource-provider-repository-unverified', true, true);
+                const candidate = input.candidateQa && verifiedEpicMergeCandidateReceipt(input.candidateAuthority, {
+                    mergeSha: input.expectedPullRequestHeadSha,
+                    graphRevision: input.candidateQa.graphRevision,
+                    originHeadSha: input.expectedOriginHeadSha,
+                    executionHeadSha: input.expectedStoryHeadSha,
+                });
+                if (!candidate || candidate !== input.candidateQa) {
+                    return failure('epic-merge-candidate-authority-required', false, false);
+                }
+                const before = await inspectPullRequest(gh, repository.nameWithOwner, input.prNumber);
+                const freshExecution = await resolveRemoteHeadFreshOptional(git, input.executionBranch);
+                const freshOrigin = await resolveRemoteHeadFresh(git, input.originBranch);
+                if (!before || before.headRefName !== input.executionBranch || before.baseRefName !== input.originBranch
+                    || before.headRefOid !== input.expectedPullRequestHeadSha
+                    || freshExecution && freshExecution !== input.expectedPullRequestHeadSha
+                    || !(await isAncestor(git, input.expectedOriginHeadSha, input.expectedPullRequestHeadSha))
+                    || !(await isAncestor(git, input.expectedStoryHeadSha, input.expectedPullRequestHeadSha))) {
+                    return failure('epic-terminal-pr-revalidation-drift', true, true);
+                }
+                if (before.state === 'OPEN' && freshOrigin !== input.expectedOriginHeadSha) {
+                    return failure('epic-terminal-pr-origin-raced', true, true);
+                }
+                let providerGuard;
+                if (before.state === 'OPEN') {
+                    const guarded = await inspectGitHubBaseGuard(gh, repository.nameWithOwner, input.originBranch, input.expectedPullRequestHeadSha, input.expectedOriginHeadSha, input.nowIso);
+                    if (!guarded.ok)
+                        return failure(guarded.reasonCode, true, true);
+                    providerGuard = guarded.receipt;
+                    if (await resolveRemoteHeadFresh(git, input.originBranch) !== input.expectedOriginHeadSha) {
+                        return failure('epic-terminal-pr-origin-raced', true, true);
+                    }
+                    await gh('pr', 'merge', String(input.prNumber), '--repo', `https://github.com/${repository.nameWithOwner}`, '--merge', '--match-head-commit', input.expectedPullRequestHeadSha);
+                }
+                else if (before.state !== 'MERGED') {
+                    return failure('epic-terminal-pr-not-open-or-merged', false, true);
+                }
+                else {
+                    providerGuard = {
+                        schemaVersion: 1, provider: 'github', mode: 'recovered_exact_tree', source: 'physical_recovery',
+                        prHeadSha: input.expectedPullRequestHeadSha, originHeadSha: input.expectedOriginHeadSha,
+                        checkedAt: input.nowIso, publicSafe: true,
+                    };
+                }
+                const view = await inspectPullRequest(gh, repository.nameWithOwner, input.prNumber);
+                const providerMergeSha = view?.mergeCommit?.oid;
+                if (view?.state !== 'MERGED' || !providerMergeSha)
+                    return failure('epic-terminal-pr-merge-unverified', true, true);
+                const postMergeOrigin = await resolveRemoteHeadFresh(git, input.originBranch);
+                await fetchRemoteHeadExact(git, input.originBranch, postMergeOrigin);
+                if (!(await isAncestor(git, input.expectedStoryHeadSha, postMergeOrigin))
+                    || !(await isAncestor(git, input.expectedPullRequestHeadSha, postMergeOrigin))
+                    || !(await isAncestor(git, providerMergeSha, postMergeOrigin))) {
+                    return failure('epic-terminal-pr-merge-ancestry-unproven', true, true);
+                }
+                const [candidateTree, pushedTree] = await Promise.all([
+                    git('rev-parse', `${input.expectedPullRequestHeadSha}^{tree}`),
+                    git('rev-parse', `${providerMergeSha}^{tree}`),
+                ]);
+                if (candidateTree !== input.candidateQa.treeSha || pushedTree !== candidateTree) {
+                    return failure('epic-terminal-pr-merged-tree-mismatch', false, true);
+                }
+                return { ok: true, mergeSha: input.expectedPullRequestHeadSha, pushedSha: providerMergeSha, providerGuard };
+            }
+            catch (error) {
+                return failure('epic-terminal-pr-merge-denied', true, looksLikeRemotePolicy(error));
+            }
+        },
+        async verifyTerminalReceipt(directive, receipt, nowIso) {
+            try {
+                if (receipt.physicalStatus !== 'pushed' || !receipt.pushedSha || !receipt.mergeSha) {
+                    return failure('epic-terminal-physical-revalidation-required', true, false);
+                }
+                const state = await readEffectiveState(projectRoot, statePath, true);
+                const epic = state.epics?.[directive.epicId];
+                if (!epic || stringValue(epic.execution_branch) !== directive.executionBranch
+                    || stringValue(epic.origin_branch) !== directive.originBranch
+                    || stringValue(epic.graph_revision) !== directive.graphRevision) {
+                    return failure('epic-terminal-state-revalidation-drift', true, false);
+                }
+                const executionHead = await git('rev-parse', `refs/heads/${directive.executionBranch}`);
+                if (executionHead !== directive.expectedExecutionHeadSha || receipt.executionHeadSha !== executionHead) {
+                    return failure('epic-terminal-execution-revalidation-drift', true, false);
+                }
+                const originBinding = isRecord(epic.origin_binding)
+                    ? epic.origin_binding
+                    : null;
+                if (!originBinding || originBinding.originBranch !== directive.originBranch
+                    || originBinding.executionBranch !== directive.executionBranch
+                    || !(await isCommit(git, originBinding.originHeadSha))
+                    || !(await isAncestor(git, originBinding.originHeadSha, executionHead))) {
+                    return failure('epic-origin-binding-revalidation-drift', true, false);
+                }
+                const acceptedCheckpointIds = await acceptedPhysicalCheckpointIds(projectRoot, state, epic, directive.epicId, directive.executionBranch);
+                if (isLiveLease(epic.branch_lease) || !sameSet(acceptedCheckpointIds, directive.storyCheckpointIds)) {
+                    return failure('epic-checkpoint-set-revalidation-drift', true, false);
+                }
+                const aggregate = isRecord(epic.aggregate_qa_receipt)
+                    ? epic.aggregate_qa_receipt
+                    : null;
+                if (!validFreshAggregate(aggregate, executionHead, directive.graphRevision, nowIso)
+                    || aggregate?.receiptRef !== directive.localGates.aggregateQaReceipt.receiptRef) {
+                    return failure('epic-terminal-aggregate-qa-revalidation-drift', true, false);
+                }
+                const physicalOrigin = await resolveRemoteHeadFresh(git, directive.originBranch);
+                await fetchRemoteHeadExact(git, directive.originBranch, physicalOrigin);
+                if (!(await isAncestor(git, executionHead, physicalOrigin))
+                    || !(await isAncestor(git, receipt.mergeSha, physicalOrigin))
+                    || !(await isAncestor(git, receipt.pushedSha, physicalOrigin))) {
+                    return failure('epic-terminal-physical-ancestry-unproven', true, false);
+                }
+                const binding = { originHeadSha: receipt.baseSha, executionHeadSha: executionHead,
+                    mergeSha: receipt.mergeSha, graphRevision: directive.graphRevision };
+                let authority = candidateAuthorities.get(receipt.mergeSha);
+                let candidateQa = verifiedEpicMergeCandidateReceipt(authority, binding);
+                if (!candidateQa) {
+                    const accepted = await executeEpicMergeCandidateQa(projectRoot, binding, nowIso);
+                    authority = accepted.candidateAuthority;
+                    candidateQa = accepted.candidateQa;
+                    candidateAuthorities.set(receipt.mergeSha, authority);
+                }
+                if (receipt.candidateQa && (receipt.candidateQa.originHeadSha !== candidateQa.originHeadSha
+                    || receipt.candidateQa.executionHeadSha !== candidateQa.executionHeadSha
+                    || receipt.candidateQa.graphRevision !== candidateQa.graphRevision
+                    || receipt.candidateQa.treeSha !== candidateQa.treeSha)) {
+                    return failure('epic-merge-candidate-receipt-drift', true, false);
+                }
+                let providerGuard = receipt.providerGuard;
+                if (receipt.strategy === 'single_pr') {
+                    if (!receipt.prNumber)
+                        return failure('epic-terminal-pr-merge-unverified', true, false);
+                    const pushedTree = await git('rev-parse', `${receipt.pushedSha}^{tree}`);
+                    if (pushedTree !== candidateQa.treeSha) {
+                        return failure('epic-terminal-pr-merged-tree-mismatch', false, false);
+                    }
+                    if (providerGuard && !validProviderGuardReceipt(providerGuard, receipt)) {
+                        return failure('epic-terminal-pr-base-guard-unverifiable', false, false);
+                    }
+                    providerGuard ??= {
+                        schemaVersion: 1, provider: 'github', mode: 'recovered_exact_tree', source: 'physical_recovery',
+                        prHeadSha: receipt.mergeSha, originHeadSha: receipt.baseSha, checkedAt: nowIso, publicSafe: true,
+                    };
+                }
+                else if (providerGuard) {
+                    return failure('epic-terminal-pr-base-guard-unverifiable', false, false);
+                }
+                return { ok: true, candidateQa, candidateAuthority: authority, ...(providerGuard ? { providerGuard } : {}) };
+            }
+            catch {
+                return failure('epic-terminal-physical-revalidation-failed', true, false);
+            }
+        },
+        async applyReconciliation(candidate, decision, dryRun) {
+            if (decision.action === 'preserve')
+                return failure('git-reconciliation-preserve-not-actionable', false, false);
+            if (dryRun)
+                return { ok: true, outcome: 'dry_run' };
+            if (decision.action === 'no_op')
+                return { ok: true, outcome: 'already_absent' };
+            if (decision.action === 'delete_remote_branch') {
+                return deleteRemoteBranchWithCas(candidate, decision, git, gh);
+            }
+            try {
+                const revalidated = await revalidateCandidate({ candidate, decision, git, gh });
+                if (!revalidated.ok)
+                    return failure(revalidated.reasonCode, true, false);
+                if (revalidated.alreadyAbsent)
+                    return { ok: true, outcome: 'already_absent' };
+                if (decision.action === 'delete_local_branch') {
+                    await git('update-ref', '-d', `refs/heads/${candidate.branchName}`, candidate.headSha);
+                }
+                else if (decision.action === 'close_pull_request') {
+                    if (!candidate.prNumber)
+                        return failure('git-reconciliation-pr-number-missing', false, false);
+                    const repository = await githubOriginRepository(git, gh);
+                    if (!repository)
+                        return failure('git-resource-provider-repository-unverified', true, true);
+                    const repositoryUrl = `https://github.com/${repository.nameWithOwner}`;
+                    const marker = `neocortex-reconciliation:${createHash('sha256').update(candidate.resourceId).digest('hex')}`;
+                    const commentView = JSON.parse(await gh('pr', 'view', String(candidate.prNumber), '--repo', repositoryUrl, '--json', 'comments'));
+                    if (!isRecord(commentView) || !Array.isArray(commentView.comments) || commentView.comments.length > 1000
+                        || commentView.comments.some((item) => !isRecord(item) || typeof item.body !== 'string')) {
+                        return failure('git-reconciliation-pr-comments-unverified', true, true);
+                    }
+                    if (!commentView.comments.some((item) => String(item.body).includes(marker))) {
+                        await gh('pr', 'comment', String(candidate.prNumber), '--repo', repositoryUrl, '--body', `Neocortex reconciliation verified managed ownership and integrated content; requesting closure. [${marker}]`);
+                    }
+                    // Commenting is an external round trip: repeat head/base/protection
+                    // proof before closure, then verify closure before releasing branches.
+                    const beforeClose = await revalidateCandidate({ candidate, decision, git, gh });
+                    if (!beforeClose.ok)
+                        return failure(beforeClose.reasonCode, true, false);
+                    if (beforeClose.alreadyAbsent)
+                        return { ok: true, outcome: 'already_absent' };
+                    await gh('pr', 'close', String(candidate.prNumber), '--repo', repositoryUrl);
+                    const closed = await revalidateCandidate({ candidate, decision, git, gh });
+                    if (!closed.ok)
+                        return failure(closed.reasonCode, true, false);
+                    if (!closed.alreadyAbsent)
+                        return failure('git-reconciliation-pr-close-unverified', true, true);
+                }
+                return { ok: true, outcome: 'applied' };
+            }
+            catch {
+                // Provider 404/auth/transport text does not prove the resource absent.
+                return failure('git-reconciliation-effect-failed', true, false);
+            }
+        },
+        async persist(input) {
+            try {
+                let blocked;
+                await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
+                    const epic = ensureRuntimeEpic(runtime, input.terminalReceipt.epicId);
+                    const existing = Array.isArray(epic.git_reconciliation_receipts)
+                        ? epic.git_reconciliation_receipts.filter(isRecord)
+                        : [];
+                    const byKey = new Map(existing.map((item) => [item.idempotencyKey, item]));
+                    for (const receipt of input.reconciliationReceipts) {
+                        if (!successfulReconciliation(byKey.get(receipt.idempotencyKey)))
+                            byKey.set(receipt.idempotencyKey, receipt);
+                    }
+                    const currentReceipt = isRecord(epic.terminal_git_receipt)
+                        ? epic.terminal_git_receipt
+                        : null;
+                    const terminalReceipt = reconcileTerminalReceipt(currentReceipt, input.terminalReceipt);
+                    if (terminalReceipt.kind === 'blocked') {
+                        blocked = terminalReceipt.reasonCode;
+                        return;
+                    }
+                    epic.terminal_git_receipt = terminalReceipt.receipt;
+                    epic.git_reconciliation_receipts = [...byKey.values()];
+                    epic.physicalMergeStatus = input.terminalReceipt.physicalStatus === 'pushed' ? 'merged' : input.terminalReceipt.physicalStatus;
+                    epic.pr_number = input.terminalReceipt.prNumber ?? epic.pr_number ?? null;
+                    epic.git_reconciliation_debt = dedupePreserved(epic.git_reconciliation_debt, input.preservedDecisions);
+                });
+                if (blocked)
+                    return failure(blocked, false, false);
+                return { ok: true };
+            }
+            catch {
+                return failure('epic-terminal-state-persist-failed', true, false);
+            }
+        },
+        async persistReconciliation(input) {
+            try {
+                await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
+                    const epic = ensureRuntimeEpic(runtime, input.epicId);
+                    const existing = Array.isArray(epic.git_reconciliation_receipts)
+                        ? epic.git_reconciliation_receipts.filter(isRecord)
+                        : [];
+                    const byKey = new Map(existing.map((item) => [item.idempotencyKey, item]));
+                    for (const receipt of input.reconciliationReceipts) {
+                        if (!successfulReconciliation(byKey.get(receipt.idempotencyKey)))
+                            byKey.set(receipt.idempotencyKey, receipt);
+                    }
+                    epic.git_reconciliation_receipts = [...byKey.values()];
+                    epic.git_reconciliation_debt = dedupePreserved(epic.git_reconciliation_debt, input.preservedDecisions);
+                });
+                return { ok: true };
+            }
+            catch {
+                return failure('git-reconciliation-state-persist-failed', true, false);
+            }
+        },
+    };
+}
+/** Bind provider identity to origin; ambient GH_REPO must never redirect deletion. */
+async function githubOriginRepository(git, gh) {
+    try {
+        const origin = await git('remote', 'get-url', 'origin');
+        const nameWithOwner = origin.match(/^https:\/\/github\.com\/([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?\/?$/)?.[1]
+            ?? origin.match(/^git@github\.com:([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?$/)?.[1];
+        if (!nameWithOwner)
+            return null;
+        const repository = JSON.parse(await gh('repo', 'view', `https://github.com/${nameWithOwner}`, '--json', 'id,nameWithOwner,url'));
+        if (repository.nameWithOwner !== nameWithOwner || repository.url !== `https://github.com/${nameWithOwner}`
+            || typeof repository.id !== 'string' || !/^[A-Za-z0-9_=-]{1,256}$/.test(repository.id))
+            return null;
+        return { id: repository.id, nameWithOwner };
+    }
+    catch {
+        return null;
+    }
+}
+async function deleteRemoteBranchWithCas(candidate, decision, git, gh) {
+    try {
+        if (candidate.kind !== 'remote_branch' || decision.resourceId !== candidate.resourceId
+            || !candidate.baseBranch || candidate.baseBranch === candidate.branchName
+            || !safeBranch(candidate.branchName) || !safeBranch(candidate.baseBranch)
+            || !/^[a-f0-9]{40}$/.test(candidate.headSha) || !/^[a-f0-9]{40}$/.test(candidate.integrationHeadSha)) {
+            return failure('git-reconciliation-candidate-no-longer-safe', false, false);
+        }
+        const repository = await githubOriginRepository(git, gh);
+        if (!repository)
+            return failure('git-resource-remote-delete-cas-unavailable', false, false);
+        const currentHead = await resolveRemoteHeadFreshOptional(git, candidate.branchName);
+        if (!currentHead)
+            return { ok: true, outcome: 'already_absent' };
+        const revalidated = await revalidateCandidate({ candidate, decision, git, gh });
+        if (!revalidated.ok)
+            return failure(revalidated.reasonCode, true, false);
+        // Recheck provider identity after revalidation, which itself issues queries.
+        const freshRepository = await githubOriginRepository(git, gh);
+        if (freshRepository?.id !== repository.id)
+            return failure('git-resource-provider-repository-raced', true, false);
+        const mutationId = createHash('sha256').update([
+            'managed-remote-delete-v1', repository.id, candidate.branchName, candidate.headSha,
+            candidate.baseBranch, candidate.integrationHeadSha,
+        ].join('\0')).digest('hex');
+        const update = (name, before, after) => `{name:${JSON.stringify(`refs/heads/${name}`)},beforeOid:${JSON.stringify(before)},afterOid:${JSON.stringify(after)},force:false}`;
+        const query = `mutation{updateRefs(input:{repositoryId:${JSON.stringify(repository.id)},clientMutationId:${JSON.stringify(mutationId)},refUpdates:[`
+            + update(candidate.branchName, candidate.headSha, '0'.repeat(40)) + ','
+            + update(candidate.baseBranch, candidate.integrationHeadSha, candidate.integrationHeadSha)
+            + ']}){clientMutationId}}';
+        const result = JSON.parse(await gh('api', 'graphql', '--hostname', 'github.com', '-f', `query=${query}`));
+        if (result.errors || result.data?.updateRefs?.clientMutationId !== mutationId) {
+            return failure('git-resource-remote-delete-cas-unverified', true, true);
+        }
+        if (await resolveRemoteHeadFreshOptional(git, candidate.branchName)) {
+            return failure('git-resource-remote-delete-recreated-or-unverified', true, false);
+        }
+        return { ok: true, outcome: 'applied' };
+    }
+    catch {
+        return failure('git-resource-remote-delete-cas-rejected', true, true);
+    }
+}
+async function revalidateCandidate(input) {
+    const { candidate, decision, git, gh } = input;
+    if (!decision.managed || !candidate.providerVerified || candidate.current || candidate.origin || candidate.protected
+        || candidate.lifecycle === 'active' || candidate.hasExclusiveCommits || candidate.worktreeActive) {
+        return { ok: false, reasonCode: 'git-reconciliation-candidate-no-longer-safe' };
+    }
+    const current = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
+    const worktrees = await inspectWorktreeBranches(git);
+    if (current === candidate.branchName || worktrees.has(candidate.branchName)) {
+        return { ok: false, reasonCode: 'git-resource-worktree-active' };
+    }
+    if (candidate.kind === 'local_branch') {
+        const head = await resolveOptionalRef(git, `refs/heads/${candidate.branchName}`);
+        if (!head)
+            return { ok: true, alreadyAbsent: true };
+        if (head !== candidate.headSha)
+            return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
+        if (!candidate.baseBranch || await resolveRemoteHeadFresh(git, candidate.baseBranch) !== candidate.integrationHeadSha
+            || !(await isAncestor(git, head, candidate.integrationHeadSha))) {
+            return { ok: false, reasonCode: 'git-resource-integration-unproven' };
+        }
+        return { ok: true };
+    }
+    if (candidate.kind === 'remote_branch') {
+        const head = await resolveRemoteHeadFreshOptional(git, candidate.branchName);
+        if (!head)
+            return { ok: true };
+        if (head !== candidate.headSha)
+            return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
+        const repository = await githubOriginRepository(git, gh);
+        if (!repository)
+            return { ok: false, reasonCode: 'git-resource-provider-repository-unverified' };
+        if (await inspectRemoteBranchProtection(gh, repository.nameWithOwner, candidate.branchName) !== 'unprotected') {
+            return { ok: false, reasonCode: 'git-resource-protected' };
+        }
+        if (!candidate.baseBranch || await resolveRemoteHeadFresh(git, candidate.baseBranch) !== candidate.integrationHeadSha) {
+            return { ok: false, reasonCode: 'git-resource-integration-unproven' };
+        }
+        await git('fetch', '--quiet', '--no-tags', 'origin', `refs/heads/${candidate.branchName}`);
+        if (await git('rev-parse', 'FETCH_HEAD') !== candidate.headSha
+            || !(await isAncestor(git, candidate.headSha, candidate.integrationHeadSha))) {
+            return { ok: false, reasonCode: 'git-resource-integration-unproven' };
+        }
+        return { ok: true };
+    }
+    if (!candidate.prNumber || !candidate.baseBranch)
+        return { ok: false, reasonCode: 'git-reconciliation-pr-proof-missing' };
+    const repository = await githubOriginRepository(git, gh);
+    if (!repository)
+        return { ok: false, reasonCode: 'git-resource-provider-repository-unverified' };
+    const pr = await inspectPullRequest(gh, repository.nameWithOwner, candidate.prNumber);
+    if (!pr || pr.headRefName !== candidate.branchName || pr.baseRefName !== candidate.baseBranch || pr.headRefOid !== candidate.headSha) {
+        return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
+    }
+    // A positively observed closed resource requires no effect, even if its
+    // integrated branch has since been removed. Unknown/error is not absence.
+    if (pr.state === 'CLOSED' || pr.state === 'MERGED')
+        return { ok: true, alreadyAbsent: true };
+    if (await inspectRemoteBranchProtection(gh, repository.nameWithOwner, candidate.branchName) !== 'unprotected') {
+        return { ok: false, reasonCode: 'git-resource-protected' };
+    }
+    const remoteHead = await resolveRemoteHeadFreshOptional(git, candidate.branchName);
+    if (!pr || pr.state !== 'OPEN' || pr.headRefName !== candidate.branchName || pr.baseRefName !== candidate.baseBranch
+        || pr.headRefOid !== candidate.headSha || remoteHead !== candidate.headSha) {
+        return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
+    }
+    await git('fetch', '--quiet', '--no-tags', 'origin', `refs/heads/${candidate.branchName}`);
+    if (await git('rev-parse', 'FETCH_HEAD') !== candidate.headSha
+        || await resolveRemoteHeadFresh(git, candidate.baseBranch) !== candidate.integrationHeadSha
+        || !(await isAncestor(git, candidate.headSha, candidate.integrationHeadSha))) {
+        return { ok: false, reasonCode: 'git-resource-integration-unproven' };
+    }
+    return { ok: true };
+}
+async function buildCandidates(input) {
+    const candidates = [];
+    const activeWorktreeBranches = await inspectWorktreeBranches(input.git);
+    const ownership = collectGitResourceOwnership(input.state);
+    const repository = await githubOriginRepository(input.git, input.gh);
+    const parseRefs = (output) => {
+        const entries = output.split('\n').filter(Boolean).map((line) => line.split(/\s+/));
+        if (entries.length > GIT_INVENTORY_REF_LIMIT)
+            throw new Error('git-reconciliation-ref-inventory-limit');
+        const map = new Map();
+        for (const [sha, ref] of entries) {
+            const branch = ref?.replace(/^refs\/heads\//, '');
+            if (!branch || !safeBranch(branch) || !/^[a-f0-9]{40,64}$/.test(sha ?? '') || map.has(branch)) {
+                throw new Error('git-reconciliation-ref-inventory-invalid');
+            }
+            map.set(branch, sha);
+        }
+        return map;
+    };
+    const local = parseRefs(await input.git('for-each-ref', `--count=${GIT_INVENTORY_REF_LIMIT + 1}`, '--format=%(objectname) %(refname)', 'refs/heads'));
+    const remote = parseRefs(await input.git('ls-remote', '--heads', 'origin'));
+    const managedBranches = new Set([...ownership.claims.keys()].filter(safeBranch));
+    const prs = repository
+        ? await listRepositoryPullRequests(input.gh, repository.nameWithOwner, managedBranches)
+        : [];
+    const origins = new Map([[input.directive.originBranch, input.originHeadSha]]);
+    const originHead = async (branch) => {
+        if (origins.has(branch))
+            return origins.get(branch);
+        const head = remote.get(branch);
+        if (!head)
+            return '';
+        await fetchRemoteHeadExact(input.git, branch, head);
+        origins.set(branch, head);
+        return head;
+    };
+    const ancestry = new Map();
+    const ancestor = async (head, base) => {
+        const key = `${head}:${base}`;
+        if (!ancestry.has(key))
+            ancestry.set(key, Boolean(head && base) && await isAncestor(input.git, head, base));
+        return ancestry.get(key);
+    };
+    // PRs can corroborate a branch already claimed by durable Neocortex state,
+    // but an arbitrary repository PR must never create an ownership candidate.
+    // Keeping the branch set independent from PR inventory also prevents large
+    // repository histories from exhausting the managed-ref bound.
+    const branches = new Set([...local.keys(), ...remote.keys(), ...ownership.claims.keys()]);
+    if (branches.size > GIT_INVENTORY_REF_LIMIT)
+        throw new Error('git-reconciliation-ref-inventory-limit');
+    for (const branchName of [...branches].sort()) {
+        if (!safeBranch(branchName))
+            continue;
+        const claims = ownership.claims.get(branchName) ?? [];
+        const uniqueOwners = new Set(claims.map((claim) => `${claim.epicId}:${claim.origin}`));
+        const baseBranch = uniqueOwners.size === 1 ? claims[0].origin : input.directive.originBranch;
+        const integrationHeadSha = await originHead(baseBranch);
+        const active = claims.length === 0 || claims.some((claim) => claim.active);
+        const localHead = local.get(branchName), remoteHead = remote.get(branchName);
+        if (remoteHead)
+            await fetchRemoteHeadExact(input.git, branchName, remoteHead);
+        const protection = repository && remoteHead
+            ? await inspectRemoteBranchProtection(input.gh, repository.nameWithOwner, branchName) : 'unknown';
+        const evidenceFor = async (head) => {
+            if (uniqueOwners.size !== 1)
+                return [];
+            const evidence = new Set();
+            for (const claim of claims)
+                for (const proof of claim.proofs) {
+                    if (proof.head !== head)
+                        continue;
+                    if (proof.mergeSha && (!proof.pushedSha || !(await ancestor(head, proof.mergeSha))
+                        || !(await ancestor(proof.mergeSha, proof.pushedSha)) || !(await ancestor(proof.pushedSha, integrationHeadSha))))
+                        continue;
+                    proof.evidence.forEach((item) => evidence.add(item));
+                }
+            return [...evidence];
+        };
+        const common = {
+            schemaVersion: 1, branchName, baseBranch, integrationHeadSha,
+            lifecycle: active ? 'active' : 'integrated',
+            current: branchName === input.currentBranch,
+            origin: ownership.origins.has(branchName) || branchName === input.directive.originBranch,
+            worktreeActive: activeWorktreeBranches.has(branchName), contentEquivalent: false, publicSafe: true,
+        };
+        for (const [kind, head] of [['local_branch', localHead], ['remote_branch', remoteHead]]) {
+            if (!head)
+                continue;
+            const resourceId = `${kind}:${createHash('sha256').update(branchName).digest('hex')}:${head}`;
+            const reachable = await ancestor(head, integrationHeadSha);
+            candidates.push({ ...common, resourceId, kind, headSha: head, ownershipEvidence: await evidenceFor(head),
+                // Local-only refs have no provider policy; matching remote protected refs
+                // are protected on both sides. Unknown remote policy fails closed.
+                protected: Boolean(remoteHead) && protection !== 'unprotected',
+                providerVerified: kind === 'local_branch' ? true : Boolean(repository) && protection !== 'unknown',
+                ...(kind === 'remote_branch' && repository ? { remoteDeletionCas: 'github-update-refs-v1' } : {}),
+                commitsReachable: reachable, hasExclusiveCommits: !reachable,
+                previouslyReconciled: input.receiptIds.has(resourceId), });
+        }
+        for (const pr of prs.filter((item) => item.headRefName === branchName)) {
+            const headBaseMatch = pr.baseRefName === baseBranch && pr.sameRepository;
+            const evidence = await evidenceFor(pr.headRefOid);
+            if (headBaseMatch && evidence.includes('managed_metadata'))
+                evidence.push('pr_head_base_match');
+            const resourceId = `pr:${pr.number}:${pr.headRefOid}:${createHash('sha256').update(pr.baseRefName).digest('hex')}`;
+            const reachable = await ancestor(pr.headRefOid, integrationHeadSha);
+            candidates.push({ ...common, resourceId, kind: 'pull_request', prNumber: pr.number, headSha: pr.headRefOid,
+                lifecycle: pr.state !== 'OPEN' ? 'already_absent' : active ? 'active' : 'superseded',
+                ownershipEvidence: evidence, providerVerified: headBaseMatch,
+                protected: protection !== 'unprotected', commitsReachable: reachable, hasExclusiveCommits: !reachable,
+                previouslyReconciled: input.receiptIds.has(resourceId),
+            });
+        }
+    }
+    assertReconciliationCapacity(input.epic, candidates);
+    return candidates;
+}
+/** Preflight the whole batch before any ref/PR effect. Never trim old receipts. */
+function assertReconciliationCapacity(epic, candidates) {
+    const receipts = new Set((Array.isArray(epic.git_reconciliation_receipts) ? epic.git_reconciliation_receipts : [])
+        .filter(isRecord).map((item) => stringValue(item.idempotencyKey)));
+    const debt = new Set((Array.isArray(epic.git_reconciliation_debt) ? epic.git_reconciliation_debt : [])
+        .filter(isRecord).map((item) => stringValue(item.resourceId)));
+    const prBranches = new Set(candidates.filter((item) => item.kind === 'pull_request'
+        && classifyGitReconciliationCandidate(item).action === 'close_pull_request').map((item) => item.branchName));
+    for (const candidate of candidates) {
+        const decision = classifyGitReconciliationCandidate(candidate);
+        if (decision.action === 'preserve')
+            debt.add(candidate.resourceId);
+        else {
+            receipts.add(`reconciliation:v2:${createHash('sha256').update([candidate.resourceId, decision.action].join('\0')).digest('hex')}`);
+            // A failed PR close defers related branch effects into preserved debt.
+            if (candidate.kind !== 'pull_request' && prBranches.has(candidate.branchName))
+                debt.add(candidate.resourceId);
+        }
+    }
+    if (receipts.size > 1024)
+        throw new Error('git-reconciliation-receipt-capacity');
+    if (debt.size > 1024)
+        throw new Error('git-reconciliation-debt-capacity');
+}
+function publicInventoryReason(error) {
+    const reasons = new Set([
+        'git-reconciliation-state-inventory-limit', 'git-reconciliation-ref-inventory-limit',
+        'git-reconciliation-ref-inventory-invalid', 'git-reconciliation-pr-inventory-limit',
+        'git-reconciliation-pr-inventory-invalid', 'git-reconciliation-receipt-capacity',
+        'git-reconciliation-debt-capacity',
+    ]);
+    return error instanceof Error && reasons.has(error.message) ? error.message : undefined;
+}
+async function listRepositoryPullRequests(gh, repository, managedBranches) {
+    const repositoryOwner = repository.split('/')[0];
+    if (!repositoryOwner || !/^[A-Za-z0-9_.-]+$/.test(repositoryOwner)) {
+        throw new Error('git-reconciliation-pr-inventory-invalid');
+    }
+    const result = [];
+    const seen = new Set();
+    const pageSize = 100;
+    const maxPagesPerBranch = Math.floor(GIT_INVENTORY_PR_LIMIT / pageSize) + 1;
+    for (const branch of [...managedBranches].sort()) {
+        if (!safeBranch(branch))
+            throw new Error('git-reconciliation-pr-inventory-invalid');
+        const head = encodeURIComponent(`${repositoryOwner}:${branch}`);
+        for (let page = 1; page <= maxPagesPerBranch; page += 1) {
+            const endpoint = `repos/${repository}/pulls?state=all&head=${head}&per_page=${pageSize}&page=${page}`;
+            const items = JSON.parse(await gh('api', endpoint, '--hostname', 'github.com'));
+            if (!Array.isArray(items) || items.length > pageSize) {
+                throw new Error('git-reconciliation-pr-inventory-limit');
+            }
+            for (const item of items) {
+                if (!isRecord(item) || !Number.isSafeInteger(item.number) || Number(item.number) <= 0 || seen.has(Number(item.number))
+                    || !isRecord(item.head) || !isRecord(item.base) || stringValue(item.head.ref) !== branch
+                    || !safeBranch(stringValue(item.head.ref)) || !safeBranch(stringValue(item.base.ref))
+                    || !/^[a-f0-9]{40,64}$/.test(stringValue(item.head.sha))
+                    || !['open', 'closed'].includes(stringValue(item.state)))
+                    throw new Error('git-reconciliation-pr-inventory-invalid');
+                seen.add(Number(item.number));
+                result.push({ number: Number(item.number), state: stringValue(item.state).toUpperCase(),
+                    headRefName: stringValue(item.head.ref), headRefOid: stringValue(item.head.sha), baseRefName: stringValue(item.base.ref),
+                    sameRepository: isRecord(item.head.repo) && isRecord(item.base.repo)
+                        && item.head.repo.full_name === repository && item.base.repo.full_name === repository,
+                });
+                if (result.length > GIT_INVENTORY_PR_LIMIT) {
+                    throw new Error('git-reconciliation-pr-inventory-limit');
+                }
+            }
+            if (items.length < pageSize)
+                break;
+        }
+    }
+    return result;
+}
+function successfulReconciliation(value) {
+    return isRecord(value) && (value.outcome === 'applied' || value.outcome === 'already_absent');
+}
+async function recoverDirectPhysicalReceipt(input) {
+    try {
+        const matches = (await input.git('log', input.originHeadSha, '--format=%H', '--fixed-strings', `--grep=Neocortex-Idempotency: ${input.directive.idempotencyKey}`)).split('\n').filter((sha) => /^[a-f0-9]{40,64}$/i.test(sha));
+        if (matches.length !== 1)
+            return null;
+        const mergeSha = matches[0];
+        const parents = (await input.git('rev-list', '--parents', '-n', '1', mergeSha)).split(/\s+/);
+        const message = await input.git('show', '-s', '--format=%B', mergeSha);
+        const [subject] = message.split('\n');
+        const expectedSubject = `merge(${input.directive.epicId}): integrate ${input.directive.executionBranch} into ${input.directive.originBranch}`;
+        if (parents.length !== 3 || parents[2] !== input.executionHeadSha || subject !== expectedSubject)
+            return null;
+        const trailers = new Set(message.split('\n').map((line) => line.trim()));
+        for (const trailer of [
+            `Neocortex-Epic: ${input.directive.epicId}`,
+            `Neocortex-Origin-Branch: ${input.directive.originBranch}`,
+            `Neocortex-Execution-Branch: ${input.directive.executionBranch}`,
+            `Neocortex-Execution-Head: ${input.executionHeadSha}`,
+            `Neocortex-Origin-Base: ${parents[1]}`,
+            `Neocortex-Graph-Revision: ${input.directive.graphRevision}`,
+            `Neocortex-Aggregate-QA: ${input.directive.localGates.aggregateQaReceipt.receiptRef}`,
+            `Neocortex-Idempotency: ${input.directive.idempotencyKey}`,
+        ])
+            if (!trailers.has(trailer))
+                return null;
+        const completedAt = await input.git('show', '-s', '--format=%cI', mergeSha);
+        return {
+            schemaVersion: 1, epicId: input.directive.epicId, executionBranch: input.directive.executionBranch,
+            originBranch: input.directive.originBranch, baseSha: parents[1], executionHeadSha: input.executionHeadSha,
+            mergeSha, pushedSha: mergeSha, strategy: 'direct', physicalStatus: 'pushed',
+            localGateReceiptRefs: input.directive.localGates.receiptRefs, idempotencyKey: input.directive.idempotencyKey,
+            attemptStartedAt: completedAt, completedAt, retryEligible: false,
+            reasonCodes: ['epic-terminal-recovered-physical-push'], publicSafe: true,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+async function inspectRemoteBranchProtection(gh, nameWithOwner, branchName) {
+    try {
+        if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(nameWithOwner))
+            return 'unknown';
+        const value = await gh('api', `repos/${nameWithOwner}/branches/${encodeURIComponent(branchName)}`, '--hostname', 'github.com', '--jq', '.protected');
+        return value === 'false' ? 'unprotected' : value === 'true' ? 'protected' : 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+async function inspectPullRequest(gh, nameWithOwner, prNumber) {
+    try {
+        const value = JSON.parse(await gh('pr', 'view', String(prNumber), '--repo', `https://github.com/${nameWithOwner}`, '--json', 'state,headRefName,headRefOid,baseRefName,mergeCommit'));
+        if (![value.state, value.headRefName, value.headRefOid, value.baseRefName].every((item) => typeof item === 'string'))
+            return null;
+        return value;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * GitHub protects expectedHeadOid but has no expected base OID on PR merge.
+ * A strict up-to-date rule closes that base race: the tested candidate already
+ * contains the exact base, and GitHub refuses it if the base advances. Merge
+ * queues are a separate candidate/CI lifecycle and remain fail-closed here.
+ */
+async function inspectGitHubBaseGuard(gh, nameWithOwner, originBranch, prHeadSha, originHeadSha, checkedAt) {
+    if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(nameWithOwner) || !safeBranch(originBranch)
+        || !/^[a-f0-9]{40,64}$/i.test(prHeadSha) || !/^[a-f0-9]{40,64}$/i.test(originHeadSha)
+        || Number.isNaN(Date.parse(checkedAt))) {
+        return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
+    }
+    let rules;
+    try {
+        const raw = JSON.parse(await gh('api', `repos/${nameWithOwner}/rules/branches/${encodeURIComponent(originBranch)}`, '--hostname', 'github.com', '--paginate', '--slurp'));
+        const flattened = Array.isArray(raw) && raw.every(Array.isArray) ? raw.flat() : raw;
+        if (!Array.isArray(flattened) || flattened.length > 256 || flattened.some((item) => !isRecord(item))) {
+            return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
+        }
+        rules = flattened;
+    }
+    catch {
+        return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
+    }
+    if (rules.some((rule) => rule.type === 'merge_queue')) {
+        return { ok: false, reasonCode: 'epic-terminal-pr-merge-queue-local-gate-required' };
+    }
+    const rulesetStrict = rules.some((rule) => rule.type === 'required_status_checks'
+        && isRecord(rule.parameters) && rule.parameters.strict_required_status_checks_policy === true);
+    let branchProtectionStrict = false;
+    try {
+        const classic = JSON.parse(await gh('api', `repos/${nameWithOwner}/branches/${encodeURIComponent(originBranch)}/protection/required_status_checks`, '--hostname', 'github.com'));
+        if (!isRecord(classic) || typeof classic.strict !== 'boolean') {
+            return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
+        }
+        branchProtectionStrict = classic.strict;
+    }
+    catch (error) {
+        if (!isProviderNotFound(error)) {
+            return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
+        }
+    }
+    if (!rulesetStrict && !branchProtectionStrict) {
+        return { ok: false, reasonCode: 'epic-terminal-pr-strict-base-guard-required' };
+    }
+    const source = rulesetStrict && branchProtectionStrict
+        ? 'branch_protection_and_ruleset'
+        : rulesetStrict ? 'ruleset' : 'branch_protection';
+    return {
+        ok: true,
+        receipt: {
+            schemaVersion: 1, provider: 'github', mode: 'strict_up_to_date_expected_head', source,
+            prHeadSha, originHeadSha, checkedAt, publicSafe: true,
+        },
+    };
+}
+function isProviderNotFound(error) {
+    return error instanceof Error && /(?:HTTP\s*)?404\b|not found/i.test(error.message);
+}
+function validProviderGuardReceipt(value, terminal) {
+    const modeSourceValid = value.mode === 'recovered_exact_tree'
+        ? value.source === 'physical_recovery'
+        : value.mode === 'strict_up_to_date_expected_head'
+            && ['branch_protection', 'ruleset', 'branch_protection_and_ruleset'].includes(value.source);
+    return value.schemaVersion === 1 && value.provider === 'github' && modeSourceValid
+        && value.publicSafe === true && !Number.isNaN(Date.parse(value.checkedAt))
+        && value.prHeadSha === terminal.mergeSha && value.originHeadSha === terminal.baseSha;
+}
+async function command(binary, args, cwd) {
+    const result = await execFileAsync(binary, [...args], { cwd, encoding: 'utf8', maxBuffer: 16 * 1024 * 1024 });
+    return result.stdout.trim();
+}
+async function readEffectiveState(projectRoot, statePath, requiredRuntime = false) {
+    const tracked = JSON.parse(await readFile(statePath, 'utf8'));
+    return applyGitLifecycleRuntimeOverlay(tracked, await readGitLifecycleRuntime(projectRoot, { required: requiredRuntime }));
+}
+function validFreshAggregate(value, executionHeadSha, graphRevision, nowIso) {
+    if (!value || value.schemaVersion !== 1 || value.evidenceVersion !== 'p205-execution-v2'
+        || value.producer !== 'local-yolo-tdd' || value.contract !== 'P205-CI-02'
+        || value.command !== P205_COMPLETE_COMMAND || value.verdict !== 'passed'
+        || value.executionHeadSha !== executionHeadSha || value.graphRevision !== graphRevision
+        || !/^[a-f0-9]{64}$/i.test(value.manifestDigest ?? '')
+        || !/^[a-f0-9]{64}$/i.test(value.resultDigest ?? '') || value.gateIds.length === 0)
+        return false;
+    const expectedRef = `local-yolo-tdd:${createHash('sha256').update([
+        'epic-aggregate-p205-execution-v2', P205_COMPLETE_COMMAND,
+        executionHeadSha, graphRevision, value.manifestDigest, value.gateIds.join(','), value.resultDigest,
+    ].join('\0')).digest('hex')}`;
+    if (value.receiptRef !== expectedRef)
+        return false;
+    const checkedAt = Date.parse(value.checkedAt);
+    const now = Date.parse(nowIso);
+    return Number.isFinite(checkedAt) && Number.isFinite(now)
+        && now - checkedAt <= 30 * 60 * 1000 && checkedAt - now <= 5 * 60 * 1000;
+}
+async function resolveRemoteHeadFresh(git, branch) {
+    const sha = await resolveRemoteHeadFreshOptional(git, branch);
+    if (!sha)
+        throw new Error('origin-ref-missing');
+    return sha;
+}
+async function resolveRemoteHeadFreshOptional(git, branch) {
+    if (!safeBranch(branch))
+        throw new Error('branch-ref-invalid');
+    // Only a successful empty query proves absence. Transport/auth failure or
+    // malformed/ambiguous output must never authorize creation/deletion/replay.
+    const output = await git('ls-remote', '--heads', 'origin', `refs/heads/${branch}`);
+    const matches = output.split('\n').filter(Boolean).map((line) => line.split(/\s+/));
+    if (matches.length === 0)
+        return undefined;
+    if (matches.length !== 1 || matches[0].length !== 2 || matches[0][1] !== `refs/heads/${branch}`
+        || !/^[a-f0-9]{40,64}$/i.test(matches[0][0] ?? ''))
+        throw new Error('remote-ref-query-invalid');
+    return matches[0][0];
+}
+async function fetchRemoteHeadExact(git, branch, expectedSha) {
+    await git('fetch', '--quiet', '--no-tags', 'origin', `refs/heads/${branch}`);
+    if (await git('rev-parse', 'FETCH_HEAD') !== expectedSha)
+        throw new Error('remote-head-raced');
+}
+async function resolveOptionalRef(git, ref) {
+    try {
+        return await git('rev-parse', '--verify', ref);
+    }
+    catch {
+        return undefined;
+    }
+}
+async function isAncestor(git, ancestor, branch) {
+    try {
+        await git('merge-base', '--is-ancestor', ancestor, branch);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function isCommit(git, sha) {
+    if (!/^[a-f0-9]{40,64}$/i.test(sha))
+        return false;
+    try {
+        return await git('cat-file', '-t', sha) === 'commit';
+    }
+    catch {
+        return false;
+    }
+}
+async function inspectWorktreeBranches(git) {
+    const branches = new Set();
+    const output = await git('worktree', 'list', '--porcelain');
+    for (const line of output.split('\n')) {
+        if (line.startsWith('branch refs/heads/'))
+            branches.add(line.slice('branch refs/heads/'.length));
+    }
+    return branches;
+}
+function failure(reasonCode, retryEligible, externalPolicy) {
+    return { ok: false, reasonCode, retryEligible, externalPolicy };
+}
+function stringValue(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+function safeBranch(value) {
+    return value.length > 0 && value.length <= 240 && !value.startsWith('-') && !value.startsWith('/')
+        && !value.endsWith('/') && !value.endsWith('.lock') && !value.includes('..') && !value.includes('\\')
+        && !value.includes('@{') && !value.includes('//') && /^[A-Za-z0-9._/-]+$/.test(value);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isNodeError(error, code) {
+    return error instanceof Error && 'code' in error && error.code === code;
+}
+function storyIds(epic) {
+    const value = Array.isArray(epic.stories) ? epic.stories : Array.isArray(epic.story_ids) ? epic.story_ids : [];
+    return value.filter((item) => typeof item === 'string');
+}
+async function acceptedPhysicalCheckpointIds(projectRoot, state, epic, epicId, executionBranch) {
+    const ids = storyIds(epic);
+    const verdicts = await Promise.all(ids.map((storyId) => verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, state.stories?.[storyId]?.checkpoint, storyId, epicId, executionBranch).then((verified) => verified && hasP205ExecutionAuthority(state.stories?.[storyId]?.checkpoint))));
+    return ids.filter((_storyId, index) => verdicts[index]);
+}
+function hasP205ExecutionAuthority(value) {
+    const checkpoint = isRecord(value) ? value : undefined;
+    const qa = checkpoint && isRecord(checkpoint.qaReceipt) ? checkpoint.qaReceipt : undefined;
+    return Boolean(qa
+        && qa.evidenceVersion === 'p205-execution-v2'
+        && qa.producer === 'local-yolo-tdd'
+        && qa.contract === 'P205-CI-02'
+        && qa.command === P205_COMPLETE_COMMAND
+        && /^[a-f0-9]{64}$/i.test(stringValue(qa.manifestDigest))
+        && /^[a-f0-9]{64}$/i.test(stringValue(qa.resultDigest))
+        && Array.isArray(qa.gateIds)
+        && qa.gateIds.length > 0);
+}
+function sameSet(left, right) {
+    return left.length === right.length
+        && [...left].sort().every((item, index) => item === [...right].sort()[index]);
+}
+function isLiveLease(value) {
+    return isRecord(value) && typeof value.expiresAt === 'string' && value.expiresAt > new Date().toISOString();
+}
+async function hasUncommittedSourceChanges(git) {
+    // These exact untracked files are the running client's own operational data.
+    // Never exempt a tracked modification (including a user-tracked SQLite), and
+    // never ignore an entire directory that could contain unrelated user work.
+    const runtimeFiles = new Set([
+        '.neocortex/yoloop.lock', '.neocortex/yoloop-state.json',
+        '.neocortex/continuity/continuity.sqlite', '.neocortex/continuity/continuity.sqlite-shm',
+        '.neocortex/continuity/continuity.sqlite-wal',
+    ]);
+    return (await git('status', '--porcelain', '--untracked-files=all')).split('\n').filter(Boolean)
+        .some((line) => !line.startsWith('?? ') || !runtimeFiles.has(line.slice(3)));
+}
+function looksLikeRemotePolicy(error) {
+    const text = error instanceof Error ? error.message : '';
+    return /protected branch|branch protection|required pull request|GH006|GH013|ruleset|review required/i.test(text);
+}
+function dedupePreserved(existing, decisions) {
+    const values = Array.isArray(existing) ? existing.filter(isRecord) : [];
+    const byId = new Map(values.map((item) => [stringValue(item.resourceId), item]));
+    for (const decision of decisions)
+        byId.set(decision.resourceId, decision);
+    return [...byId.values()];
+}