@ornexus/neocortex 4.60.67 → 4.60.68

package/packages/client/dist/private-execution/session-lease.js

@@ -1 +1,63 @@
-import{resolve as g}from"node:path";import{acquireGitLifecyclePhysicalIntegrationLock as b,mutateGitLifecycleRuntime as A,readGitLifecycleRuntime as D,releaseGitLifecyclePhysicalIntegrationLock as k}from"../git/git-lifecycle-store.js";import{resumePrivateYoloIsolatedSession as m}from"./isolated-session.js";async function P(y,r,s,t){const n=g(y),c=Date.now(),i=Date.parse(t.expiresAt);if(t.executorStopped!==!0||!/^[a-f0-9]{40,64}$/.test(t.expectedSnapshotSha)||!Number.isFinite(i)||i<=c||i>c+3600*1e3)throw new Error("private-execution-session-renewal-input-invalid");const h=await D(n,{required:!0}),S=r.split(".")[0],p=h.epics[S],w=p?.branch_lease,e=w&&typeof w=="object"&&!Array.isArray(w)?w:void 0;if(!e||e.schemaVersion!==1||e.ownerStoryId!==r||e.sessionId!==e.idempotencyKey||typeof e.sessionId!="string"||p?.graph_revision!==s||typeof e.expiresAt!="string"||!Number.isFinite(Date.parse(e.expiresAt))||Date.parse(e.expiresAt)<=c||i<Date.parse(e.expiresAt)||!p.origin_binding)throw new Error("private-execution-session-renewal-authority-invalid");const l=e.sessionId,u=e.expiresAt,f=await b(n,{kind:"direct",storyId:r,sessionId:l,idempotencyKey:l,expiresAt:new Date(c+5*6e4).toISOString(),persistent:!1});if(!f.ok)throw new Error("private-execution-session-renewal-backpressure");try{const o=await m(n,r,s);if(o.snapshotSha!==t.expectedSnapshotSha||o.setupSessionId!==l||o.workspace.baseSha!==e.setupHeadSha)throw new Error("private-execution-session-renewal-pin-invalid");const x=new Date(i).toISOString();let v=h.revision;return Date.parse(u)!==i&&(v=(await A(n,d=>{const a=d.epics[S];if(!a||JSON.stringify(a.origin_binding)!==JSON.stringify(p.origin_binding)||JSON.stringify(a.branch_lease)!==JSON.stringify(e)||a.graph_revision!==s)throw new Error("private-execution-session-renewal-raced");a.branch_lease={...e,expiresAt:x}},{expectedRevision:h.revision,preCommit:async()=>{if(Date.parse(u)<=Date.now())throw new Error("private-execution-session-renewal-expired");const d=await m(n,r,s);if(d.snapshotSha!==t.expectedSnapshotSha||d.setupSessionId!==l)throw new Error("private-execution-session-renewal-raced")}})).document.revision),{schemaVersion:"PrivateYoloSessionLeaseRenewal/1",storyId:r,graphRevision:s,snapshotSha:o.snapshotSha,sourceHead:o.workspace.baseSha,previousExpiresAt:u,expiresAt:x,revision:v,reused:Date.parse(u)===i,sessionPinPreserved:!0,originPreserved:!0,checkpointAccepted:!1,publicSafe:!0}}finally{if(!await k(f.path,f.owner))throw new Error("private-execution-session-renewal-lock-unverified")}}export{P as renewPrivateYoloSessionLease};
+/** Bounded host renewal preserves the existing C01 owner, origin and session pin. */
+import { resolve } from 'node:path';
+import { acquireGitLifecyclePhysicalIntegrationLock, mutateGitLifecycleRuntime, readGitLifecycleRuntime, releaseGitLifecyclePhysicalIntegrationLock } from '../git/git-lifecycle-store.js';
+import { resumePrivateYoloIsolatedSession } from './isolated-session.js';
+export async function renewPrivateYoloSessionLease(projectRoot, storyId, graphRevision, input) {
+    const root = resolve(projectRoot), now = Date.now(), requested = Date.parse(input.expiresAt);
+    if (input.executorStopped !== true || !/^[a-f0-9]{40,64}$/.test(input.expectedSnapshotSha)
+        || !Number.isFinite(requested) || requested <= now || requested > now + 60 * 60 * 1000) {
+        throw new Error('private-execution-session-renewal-input-invalid');
+    }
+    const before = await readGitLifecycleRuntime(root, { required: true });
+    const epicId = storyId.split('.')[0], epic = before.epics[epicId], rawLease = epic?.branch_lease;
+    const lease = rawLease && typeof rawLease === 'object' && !Array.isArray(rawLease)
+        ? rawLease : undefined;
+    if (!lease || lease.schemaVersion !== 1 || lease.ownerStoryId !== storyId || lease.sessionId !== lease.idempotencyKey
+        || typeof lease.sessionId !== 'string' || epic?.graph_revision !== graphRevision
+        || typeof lease.expiresAt !== 'string' || !Number.isFinite(Date.parse(lease.expiresAt)) || Date.parse(lease.expiresAt) <= now
+        || requested < Date.parse(lease.expiresAt) || !epic.origin_binding) {
+        throw new Error('private-execution-session-renewal-authority-invalid');
+    }
+    const sessionId = lease.sessionId, previousExpiresAt = lease.expiresAt;
+    const lock = await acquireGitLifecyclePhysicalIntegrationLock(root, { kind: 'direct', storyId,
+        sessionId, idempotencyKey: sessionId,
+        expiresAt: new Date(now + 5 * 60_000).toISOString(), persistent: false });
+    if (!lock.ok)
+        throw new Error('private-execution-session-renewal-backpressure');
+    try {
+        const session = await resumePrivateYoloIsolatedSession(root, storyId, graphRevision);
+        if (session.snapshotSha !== input.expectedSnapshotSha || session.setupSessionId !== sessionId
+            || session.workspace.baseSha !== lease.setupHeadSha)
+            throw new Error('private-execution-session-renewal-pin-invalid');
+        const expiresAt = new Date(requested).toISOString();
+        let revision = before.revision;
+        if (Date.parse(previousExpiresAt) !== requested) {
+            const mutation = await mutateGitLifecycleRuntime(root, document => {
+                const current = document.epics[epicId];
+                if (!current || JSON.stringify(current.origin_binding) !== JSON.stringify(epic.origin_binding)
+                    || JSON.stringify(current.branch_lease) !== JSON.stringify(lease)
+                    || current.graph_revision !== graphRevision)
+                    throw new Error('private-execution-session-renewal-raced');
+                current.branch_lease = { ...lease, expiresAt };
+            }, { expectedRevision: before.revision, preCommit: async () => {
+                    if (Date.parse(previousExpiresAt) <= Date.now())
+                        throw new Error('private-execution-session-renewal-expired');
+                    const fresh = await resumePrivateYoloIsolatedSession(root, storyId, graphRevision);
+                    if (fresh.snapshotSha !== input.expectedSnapshotSha || fresh.setupSessionId !== sessionId) {
+                        throw new Error('private-execution-session-renewal-raced');
+                    }
+                } });
+            revision = mutation.document.revision;
+        }
+        return { schemaVersion: 'PrivateYoloSessionLeaseRenewal/1', storyId, graphRevision,
+            snapshotSha: session.snapshotSha, sourceHead: session.workspace.baseSha,
+            previousExpiresAt, expiresAt, revision,
+            reused: Date.parse(previousExpiresAt) === requested, sessionPinPreserved: true,
+            originPreserved: true, checkpointAccepted: false, publicSafe: true };
+    }
+    finally {
+        if (!await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner)) {
+            throw new Error('private-execution-session-renewal-lock-unverified');
+        }
+    }
+}

package/packages/client/dist/private-execution/shared-private-admission-types.js

@@ -1 +1,50 @@
-const i="step-a8ce5c64",o="step-b2fe7cb5",n="step-8721319d";function a(t){return Array.isArray(t)&&t.length<=1&&t.every(e=>{if(!e||typeof e!="object"||Array.isArray(e))return!1;const r=e;return Object.keys(r).sort().join("|")===["stepId","featureFlagId","enabled","tier","publicSafe"].sort().join("|")&&r.stepId===i&&r.featureFlagId==="property-testing"&&typeof r.enabled=="boolean"&&["free","pro","enterprise"].includes(String(r.tier))&&(r.enabled===!1||r.tier==="free")&&r.publicSafe===!0})}function p(t){if(!Array.isArray(t)||t.length>2)return!1;const e=[];for(const r of t){if(a([r])){e.push(r.stepId);continue}if(!r||typeof r!="object"||Array.isArray(r))return!1;const s=r;if(Object.keys(s).sort().join("|")!==["stepId","featureGate","reason","tier","publicSafe"].sort().join("|")||s.stepId!==o||s.featureGate!=="validate-tests"||s.reason!=="subscription-tier"||s.tier!=="free"||s.publicSafe!==!0)return!1;e.push(s.stepId)}return new Set(e).size===e.length&&(t.length<2||e[0]===i&&e[1]===o&&t[0].tier==="free")}function c(t){if(!t||typeof t!="object"||Array.isArray(t))return!1;const e=t,r=e.checks;return Object.keys(e).sort().join("|")===["schemaVersion","kind","stepId","generationId","graphRevision","topologyGenerationId","tier","checks","publicSafe"].sort().join("|")&&e.schemaVersion===1&&e.kind==="server-private-qa-structural-admission"&&e.stepId===n&&typeof e.generationId=="string"&&/^sha256:[a-f0-9]{64}$/.test(e.generationId)&&typeof e.graphRevision=="string"&&/^[a-f0-9]{64}$/.test(e.graphRevision)&&typeof e.topologyGenerationId=="string"&&/^sha256:[a-f0-9]{64}$/.test(e.topologyGenerationId)&&["free","pro","enterprise"].includes(String(e.tier))&&e.publicSafe===!0&&!!r&&typeof r=="object"&&!Array.isArray(r)&&Object.keys(r).sort().join("|")===["classifiedAssetDelivery","licensedCommandAdmission","registeredStatusMapping","prerequisiteStateAdmitted"].sort().join("|")&&Object.values(r).every(s=>s===!0)}export{p as isPrivateQaSkippedPredecessors,c as isPrivateQaStructuralAdmission,a as isPrivateYoloSkippedPredecessors};
+/** Standalone-client shadows of public private-execution admission contracts. */
+const PROPERTY_STEP = `step-${'a8ce5c64'}`;
+const VALIDATE_STEP = `step-${'b2fe7cb5'}`;
+const QA_STEP = `step-${'8721319d'}`;
+export function isPrivateYoloSkippedPredecessors(value) {
+    return Array.isArray(value) && value.length <= 1 && value.every(item => {
+        if (!item || typeof item !== 'object' || Array.isArray(item))
+            return false;
+        const record = item;
+        return Object.keys(record).sort().join('|') === ['stepId', 'featureFlagId', 'enabled', 'tier', 'publicSafe'].sort().join('|')
+            && record.stepId === PROPERTY_STEP && record.featureFlagId === 'property-testing'
+            && typeof record.enabled === 'boolean' && ['free', 'pro', 'enterprise'].includes(String(record.tier))
+            && (record.enabled === false || record.tier === 'free') && record.publicSafe === true;
+    });
+}
+export function isPrivateQaSkippedPredecessors(value) {
+    if (!Array.isArray(value) || value.length > 2)
+        return false;
+    const ids = [];
+    for (const item of value) {
+        if (isPrivateYoloSkippedPredecessors([item])) {
+            ids.push(item.stepId);
+            continue;
+        }
+        if (!item || typeof item !== 'object' || Array.isArray(item))
+            return false;
+        const record = item;
+        if (Object.keys(record).sort().join('|') !== ['stepId', 'featureGate', 'reason', 'tier', 'publicSafe'].sort().join('|')
+            || record.stepId !== VALIDATE_STEP || record.featureGate !== 'validate-tests'
+            || record.reason !== 'subscription-tier' || record.tier !== 'free' || record.publicSafe !== true)
+            return false;
+        ids.push(record.stepId);
+    }
+    return new Set(ids).size === ids.length && (value.length < 2
+        || ids[0] === PROPERTY_STEP && ids[1] === VALIDATE_STEP && value[0].tier === 'free');
+}
+export function isPrivateQaStructuralAdmission(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const record = value, checks = record.checks;
+    return Object.keys(record).sort().join('|') === ['schemaVersion', 'kind', 'stepId', 'generationId', 'graphRevision', 'topologyGenerationId', 'tier', 'checks', 'publicSafe'].sort().join('|')
+        && record.schemaVersion === 1 && record.kind === 'server-private-qa-structural-admission' && record.stepId === QA_STEP
+        && typeof record.generationId === 'string' && /^sha256:[a-f0-9]{64}$/.test(record.generationId)
+        && typeof record.graphRevision === 'string' && /^[a-f0-9]{64}$/.test(record.graphRevision)
+        && typeof record.topologyGenerationId === 'string' && /^sha256:[a-f0-9]{64}$/.test(record.topologyGenerationId)
+        && ['free', 'pro', 'enterprise'].includes(String(record.tier)) && record.publicSafe === true
+        && !!checks && typeof checks === 'object' && !Array.isArray(checks)
+        && Object.keys(checks).sort().join('|') === ['classifiedAssetDelivery', 'licensedCommandAdmission', 'registeredStatusMapping', 'prerequisiteStateAdmitted'].sort().join('|')
+        && Object.values(checks).every(result => result === true);
+}

package/packages/client/dist/private-execution/shared-project-validation.js

@@ -1 +1,66 @@
-const P=["unit","integration","contract","bdd-example","e2e"];function x(p,a){const o=new Map;let c=!1,t=!1;const h=new Set(["story","spec","tasks"].map(e=>`docs/stories/${p}.${e}.md`));if(a.length>3||new Set(a.map(e=>e.path)).size!==a.length)return{declared:!0,invalid:!0,commands:[]};for(const e of a){if(!h.has(e.path)||Buffer.byteLength(e.content)>131072){t=!0,c=!0;continue}let n=!1,d=!1,m=0,r=0;for(const g of e.content.split(/\r?\n/)){const i=g.trim();if(/^(?:```|~~~)/.test(i)){d=!d;continue}if(d)continue;if(/^##\s+/.test(i)){n&&r===0&&(t=!0),n=i==="## Validation Commands",n&&(c=!0,m++,r=0,m>1&&(t=!0));continue}if(!n||!i)continue;const l=/^- (unit|integration|contract|bdd-example|e2e): `([^`]{1,220})`$/.exec(i);if(!l){t=!0;continue}const f=l[1],s=l[2];if(!/^[A-Za-z0-9_./-]+(?: [A-Za-z0-9_./:@%+=,-]+)*$/.test(s)||/(?:token|password|license_key|secret|credential)=|(?:https?|ssh):\/\/|@[^ /]+\.[A-Za-z]/i.test(s)||s.split(" ").some(w=>w.split("/").includes(".."))){t=!0;continue}r++;const u=o.get(f);if(u&&u.command!==s||u?.sourcePaths.includes(e.path)){t=!0;continue}o.set(f,{kind:f,command:s,sourcePaths:[...u?.sourcePaths??[],e.path]})}n&&r===0&&(t=!0)}return c&&!o.has("unit")&&(t=!0),{declared:c,invalid:t,commands:[...o.values()]}}export{P as PROJECT_VALIDATION_KINDS,x as readProjectValidationCommands};
+/** Standalone-client shadow of bounded project validation declarations. */
+export const PROJECT_VALIDATION_KINDS = ['unit', 'integration', 'contract', 'bdd-example', 'e2e'];
+export function readProjectValidationCommands(storyId, sources) {
+    const byKind = new Map();
+    let declared = false, invalid = false;
+    const allowedPaths = new Set(['story', 'spec', 'tasks'].map(suffix => `docs/stories/${storyId}.${suffix}.md`));
+    if (sources.length > 3 || new Set(sources.map(source => source.path)).size !== sources.length) {
+        return { declared: true, invalid: true, commands: [] };
+    }
+    for (const source of sources) {
+        if (!allowedPaths.has(source.path) || Buffer.byteLength(source.content) > 131072) {
+            invalid = true;
+            declared = true;
+            continue;
+        }
+        let active = false, fenced = false, headings = 0, entries = 0;
+        for (const raw of source.content.split(/\r?\n/)) {
+            const line = raw.trim();
+            if (/^(?:```|~~~)/.test(line)) {
+                fenced = !fenced;
+                continue;
+            }
+            if (fenced)
+                continue;
+            if (/^##\s+/.test(line)) {
+                if (active && entries === 0)
+                    invalid = true;
+                active = line === '## Validation Commands';
+                if (active) {
+                    declared = true;
+                    headings++;
+                    entries = 0;
+                    if (headings > 1)
+                        invalid = true;
+                }
+                continue;
+            }
+            if (!active || !line)
+                continue;
+            const match = /^- (unit|integration|contract|bdd-example|e2e): `([^`]{1,220})`$/.exec(line);
+            if (!match) {
+                invalid = true;
+                continue;
+            }
+            const kind = match[1], command = match[2];
+            if (!/^[A-Za-z0-9_./-]+(?: [A-Za-z0-9_./:@%+=,-]+)*$/.test(command)
+                || /(?:token|password|license_key|secret|credential)=|(?:https?|ssh):\/\/|@[^ /]+\.[A-Za-z]/i.test(command)
+                || command.split(' ').some(argument => argument.split('/').includes('..'))) {
+                invalid = true;
+                continue;
+            }
+            entries++;
+            const prior = byKind.get(kind);
+            if (prior && prior.command !== command || prior?.sourcePaths.includes(source.path)) {
+                invalid = true;
+                continue;
+            }
+            byKind.set(kind, { kind, command, sourcePaths: [...(prior?.sourcePaths ?? []), source.path] });
+        }
+        if (active && entries === 0)
+            invalid = true;
+    }
+    if (declared && !byKind.has('unit'))
+        invalid = true;
+    return { declared, invalid, commands: [...byKind.values()] };
+}

package/packages/client/dist/private-execution/shared-root-memory-types.js

@@ -1 +1,61 @@
-import{getProjectMemoryTarget as u,listProjectMemoryTargets as l}from"../memory/shared-project-memory-types.js";function S(n){const s=e=>Array.isArray(e)?e.map(s):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(i=>[i,s(e[i])])):e;return JSON.stringify(s(n))}function y(){return[...new Set(["NEOCORTEX.md",...l().flatMap(n=>[n.primaryFile,...n.secondaryFiles.filter(s=>s.scope==="project").map(s=>s.path)])])].sort()}function g(n){const s=t=>t!==null&&typeof t=="object"&&!Array.isArray(t)?t:void 0,e=s(n),i=["schemaVersion","producer","storyId","epicId","executionBranch","sourceHeadSha","sourceSnapshotSha","memorySnapshotSha","graphRevision","childClaimRevision","setupSessionId","rootQaReceiptId","proposalSha256","canonicalSha256","projectionSha256","projectionFileCount","files","recordedAt","publicSafe"];if(!e||Object.keys(e).sort().join("|")!==i.sort().join("|")||e.schemaVersion!=="RootProjectMemoryEffect/1"||e.producer!=="root-project-memory"||e.publicSafe!==!0||typeof e.storyId!="string"||!/^P[1-9][0-9]*\.[0-9]+$/.test(e.storyId)||e.epicId!==e.storyId.split(".")[0]||e.executionBranch!==`epic/${e.epicId}`||["sourceHeadSha","sourceSnapshotSha","memorySnapshotSha"].some(t=>typeof e[t]!="string"||!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(e[t]))||["graphRevision","childClaimRevision","rootQaReceiptId","proposalSha256","canonicalSha256","projectionSha256"].some(t=>typeof e[t]!="string"||!/^[a-f0-9]{64}$/.test(e[t]))||typeof e.setupSessionId!="string"||!/^setup-[a-f0-9]{64}$/.test(e.setupSessionId)||typeof e.recordedAt!="string"||!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(e.recordedAt)||!Number.isFinite(Date.parse(e.recordedAt))||new Date(e.recordedAt).toISOString()!==e.recordedAt||!Number.isSafeInteger(e.projectionFileCount)||e.projectionFileCount<1||e.projectionFileCount>128||!Array.isArray(e.files)||e.files.length>128)return!1;const d=new Set(y()),a=new Set,c=(t,o,p)=>{const r=s(t);if(!r||!["absent","regular","symlink"].includes(String(r.kind))||Object.keys(r).sort().join("|")!==["kind","sha256",...r.kind==="symlink"?["linkTarget"]:[]].sort().join("|"))return!1;if(r.kind==="absent")return!p&&r.sha256===null;if(typeof r.sha256!="string"||!/^[a-f0-9]{64}$/.test(r.sha256)||o==="NEOCORTEX.md"&&r.kind!=="regular")return!1;const f="../".repeat(o.split("/").length-1)+"NEOCORTEX.md";return r.kind!=="symlink"||typeof r.linkTarget=="string"&&r.linkTarget.length<=1024&&(p?r.linkTarget===f:r.linkTarget.split("/").filter(h=>h!==".").join("/")===f)};return e.files.every(t=>{const o=s(t);return!o||Object.keys(o).sort().join("|")!=="after|before|path"||typeof o.path!="string"||!d.has(o.path)||a.has(o.path)||!c(o.before,o.path,!1)||!c(o.after,o.path,!0)?!1:(a.add(o.path),!0)})}export{S as canonicalRootMemoryEffectJson,u as getProjectMemoryTarget,g as isRootProjectMemoryEffect,l as listProjectMemoryTargets,y as rootProjectMemoryPaths};
+/** Standalone-client shadow of the public root-memory effect contract. */
+import { getProjectMemoryTarget, listProjectMemoryTargets } from '../memory/shared-project-memory-types.js';
+export { getProjectMemoryTarget, listProjectMemoryTargets };
+export function canonicalRootMemoryEffectJson(effect) {
+    const ordered = (value) => Array.isArray(value) ? value.map(ordered)
+        : value !== null && typeof value === 'object'
+            ? Object.fromEntries(Object.keys(value).sort().map(key => [key, ordered(value[key])]))
+            : value;
+    return JSON.stringify(ordered(effect));
+}
+export function rootProjectMemoryPaths() {
+    return [...new Set(['NEOCORTEX.md', ...listProjectMemoryTargets().flatMap(target => [target.primaryFile,
+                ...target.secondaryFiles.filter(file => file.scope === 'project').map(file => file.path)])])].sort();
+}
+export function isRootProjectMemoryEffect(value) {
+    const record = (candidate) => candidate !== null && typeof candidate === 'object' && !Array.isArray(candidate)
+        ? candidate : undefined;
+    const effect = record(value);
+    const keys = ['schemaVersion', 'producer', 'storyId', 'epicId', 'executionBranch', 'sourceHeadSha',
+        'sourceSnapshotSha', 'memorySnapshotSha', 'graphRevision', 'childClaimRevision', 'setupSessionId',
+        'rootQaReceiptId', 'proposalSha256', 'canonicalSha256', 'projectionSha256', 'projectionFileCount', 'files', 'recordedAt', 'publicSafe'];
+    if (!effect || Object.keys(effect).sort().join('|') !== keys.sort().join('|')
+        || effect.schemaVersion !== 'RootProjectMemoryEffect/1' || effect.producer !== 'root-project-memory'
+        || effect.publicSafe !== true || typeof effect.storyId !== 'string'
+        || !/^P[1-9][0-9]*\.[0-9]+$/.test(effect.storyId) || effect.epicId !== effect.storyId.split('.')[0]
+        || effect.executionBranch !== `epic/${effect.epicId}`
+        || ['sourceHeadSha', 'sourceSnapshotSha', 'memorySnapshotSha'].some(key => typeof effect[key] !== 'string' || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(effect[key]))
+        || ['graphRevision', 'childClaimRevision', 'rootQaReceiptId', 'proposalSha256', 'canonicalSha256', 'projectionSha256'].some(key => typeof effect[key] !== 'string' || !/^[a-f0-9]{64}$/.test(effect[key]))
+        || typeof effect.setupSessionId !== 'string' || !/^setup-[a-f0-9]{64}$/.test(effect.setupSessionId)
+        || typeof effect.recordedAt !== 'string' || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(effect.recordedAt)
+        || !Number.isFinite(Date.parse(effect.recordedAt)) || new Date(effect.recordedAt).toISOString() !== effect.recordedAt
+        || !Number.isSafeInteger(effect.projectionFileCount) || effect.projectionFileCount < 1
+        || effect.projectionFileCount > 128 || !Array.isArray(effect.files) || effect.files.length > 128)
+        return false;
+    const allowed = new Set(rootProjectMemoryPaths()), seen = new Set();
+    const state = (candidate, path, after) => {
+        const item = record(candidate);
+        if (!item || !['absent', 'regular', 'symlink'].includes(String(item.kind))
+            || Object.keys(item).sort().join('|') !== ['kind', 'sha256', ...(item.kind === 'symlink' ? ['linkTarget'] : [])].sort().join('|'))
+            return false;
+        if (item.kind === 'absent')
+            return !after && item.sha256 === null;
+        if (typeof item.sha256 !== 'string' || !/^[a-f0-9]{64}$/.test(item.sha256))
+            return false;
+        if (path === 'NEOCORTEX.md' && item.kind !== 'regular')
+            return false;
+        const canonicalTarget = '../'.repeat(path.split('/').length - 1) + 'NEOCORTEX.md';
+        return item.kind !== 'symlink' || typeof item.linkTarget === 'string' && item.linkTarget.length <= 1024
+            && (after ? item.linkTarget === canonicalTarget
+                : item.linkTarget.split('/').filter(part => part !== '.').join('/') === canonicalTarget);
+    };
+    return effect.files.every(candidate => {
+        const file = record(candidate);
+        if (!file || Object.keys(file).sort().join('|') !== 'after|before|path' || typeof file.path !== 'string'
+            || !allowed.has(file.path) || seen.has(file.path) || !state(file.before, file.path, false)
+            || !state(file.after, file.path, true))
+            return false;
+        seen.add(file.path);
+        return true;
+    });
+}