@ornexus/neocortex 4.60.67 → 4.60.68

package/packages/client/dist/commands/architecture-answers.js

@@ -1,7 +1,274 @@
-import{createHash as A,randomBytes as T,randomUUID as U}from"node:crypto";import{execFileSync as R}from"node:child_process";import{isDeepStrictEqual as j}from"node:util";import{closeSync as I,existsSync as w,fsyncSync as P,linkSync as L,lstatSync as l,mkdirSync as B,openSync as k,readFileSync as O,realpathSync as b,unlinkSync as q,writeFileSync as D}from"node:fs";import{isAbsolute as F,join as u,resolve as S}from"node:path";const z=4096,m=Object.freeze(["PACT-Q1-CONSUMER","PACT-Q2-PROVIDER","PACT-Q3-BROKER","PACT-Q4-MATCHERS","PACT-Q5-VERIFY"]),N=Object.freeze(["arch-prd","arch-architecture","arch-fitness-functions","arch-api-contracts"]);function d(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function y(e,n){return Object.keys(e).length===n.length&&n.every(r=>Object.hasOwn(e,r))}function x(e){return typeof e=="string"&&/^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/.test(e)}function Q(e){if(e===null)return!0;if(typeof e!="string"||e.length>512||!e.startsWith("https://")||/[\s\\]/.test(e))return!1;try{const n=new URL(e);return n.protocol==="https:"&&!!n.hostname&&!n.username&&!n.password&&!n.search&&!n.hash}catch{return!1}}function $(e){if(!d(e)||!y(e,["consumer","provider","brokerUrl","matchersAggressive","generateProvider"])||!x(e.consumer)||!x(e.provider)||!Q(e.brokerUrl)||typeof e.matchersAggressive!="boolean"||typeof e.generateProvider!="boolean")throw new Error("architecture-answers-invalid");return{consumer:e.consumer,provider:e.provider,brokerUrl:e.brokerUrl,matchersAggressive:e.matchersAggressive,generateProvider:e.generateProvider}}function C(e,n){const r=S(e),c=R("git",["rev-parse","--show-toplevel"],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(b(r)!==r||S(c)!==r)throw new Error("architecture-answers-private-store-invalid");const o=R("git",["rev-parse","--git-common-dir"],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),s=F(o)?S(o):S(r,o);if(b(s)!==s||l(s).isSymbolicLink())throw new Error("architecture-answers-private-store-invalid");const a=u(s,"neocortex-architecture");if(!w(a)&&!n)return;n&&B(a,{recursive:!0,mode:448});const t=l(a);if(!t.isDirectory()||t.isSymbolicLink()||t.uid!==process.getuid?.()||(t.mode&63)!==0)throw new Error("architecture-answers-private-store-invalid");return a}function J(e,n){const r=u(e,".neocortex","state.json"),c=l(r);if(!c.isFile()||c.isSymbolicLink())throw new Error("architecture-answers-state-invalid");const o=O(r,"utf8"),s=JSON.parse(o),a=d(s)&&d(s.archPlan)?s.archPlan:void 0,t=a&&d(a.execution)?a.execution:void 0,h=t?.acceptedStages;if(!t||t.schemaVersion!==1||t.owner!=="root"||t.evidencePolicy!=="v2-required"||t.currentStageCommand!=="generate-pacts"||!(t.continuationState==="ask-user"&&JSON.stringify(t.questionIds)===JSON.stringify(m)||n&&t.continuationState==="delegate"&&JSON.stringify(t.questionIds)==="[]")||typeof t.targetEpicId!="string"||!/^P[1-9][0-9]{0,11}$/.test(t.targetEpicId)||!d(s)||!d(s.epics)||!Object.hasOwn(s.epics,t.targetEpicId)||typeof t.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(t.graphRevision)||!Array.isArray(h)||h.length!==N.length||!h.every((f,p)=>d(f)&&f.stageCommand===N[p]&&f.targetEpicId===t.targetEpicId&&d(f.completionEvidence)&&d(f.validationEvidence)))throw new Error("architecture-answers-checkpoint-invalid");const i=t.continuationState==="delegate"?t.pactAnswerReceipt:void 0;if(t.continuationState==="delegate"&&(!d(i)||!y(i,["schemaVersion","targetEpicId","graphRevision","stateSha256","answersSha256","questionIds","publicSafe"])||i.schemaVersion!=="PactAnswerReceipt/1"||i.targetEpicId!==t.targetEpicId||i.graphRevision!==t.graphRevision||typeof i.stateSha256!="string"||!/^[a-f0-9]{64}$/.test(i.stateSha256)||typeof i.answersSha256!="string"||!/^[a-f0-9]{64}$/.test(i.answersSha256)||JSON.stringify(i.questionIds)!==JSON.stringify(m)||i.publicSafe!==!0))throw new Error("architecture-answers-checkpoint-invalid");return{targetEpicId:t.targetEpicId,graphRevision:t.graphRevision,stateSha256:t.continuationState==="ask-user"?A("sha256").update(o).digest("hex"):i.stateSha256,...i?{delegatedReceipt:i}:{}}}function g(e){return{schemaVersion:"PactAnswerReceipt/1",targetEpicId:e.targetEpicId,graphRevision:e.graphRevision,stateSha256:e.stateSha256,answersSha256:e.checksumSha256,questionIds:m,publicSafe:!0}}function V(e,n,r){const c={schemaVersion:r?"PactLocalAnswers/2":"PactLocalAnswers/1",...e,...r?{nonce:r}:{},answers:n};return{...c,checksumSha256:A("sha256").update(`${JSON.stringify(c)}
-`).digest("hex")}}function _(e,n){const r=$(n),c=J(e,!1),o=E(e);if(o){if(!j(o.answers,r))throw new Error("architecture-answers-conflict");return g(o)}const s=V(c,r,T(32).toString("hex")),a=`${JSON.stringify(s)}
-`,t=C(e,!0),h=u(t,`pact-answers-${s.targetEpicId}-${s.graphRevision}.json`);if(w(h))throw new Error("architecture-answers-conflict");const i=u(t,`pact-answers-tmp-${U()}.json`);let f=!1;const p=k(i,"wx",384);try{D(p,a),P(p)}finally{I(p)}try{L(i,h),f=!0;const v=k(t,"r");try{P(v)}finally{I(v)}}finally{if(q(i),!f&&w(h))throw new Error("architecture-answers-conflict")}return g(s)}function E(e,n=!1){const r=J(e,!0);if(n&&!r.delegatedReceipt)throw new Error("architecture-answers-checkpoint-invalid");const c=C(e,!1);if(!c)return;const o=u(c,`pact-answers-${r.targetEpicId}-${r.graphRevision}.json`);if(!w(o))return;const s=l(o);if(!s.isFile()||s.isSymbolicLink()||s.size>8192||s.uid!==process.getuid?.()||(s.mode&63)!==0)throw new Error("architecture-answers-conflict");const a=O(o,"utf8"),t=JSON.parse(a);if(!d(t)||!(t.schemaVersion==="PactLocalAnswers/1"&&y(t,["schemaVersion","targetEpicId","graphRevision","stateSha256","answers","checksumSha256"])||t.schemaVersion==="PactLocalAnswers/2"&&y(t,["schemaVersion","targetEpicId","graphRevision","stateSha256","nonce","answers","checksumSha256"])&&typeof t.nonce=="string"&&/^[a-f0-9]{64}$/.test(t.nonce))||t.targetEpicId!==r.targetEpicId||t.graphRevision!==r.graphRevision||t.stateSha256!==r.stateSha256)throw new Error("architecture-answers-conflict");const h=V({targetEpicId:r.targetEpicId,graphRevision:r.graphRevision,stateSha256:r.stateSha256},$(t.answers),t.schemaVersion==="PactLocalAnswers/2"?t.nonce:void 0),i=`${JSON.stringify(h)}
-`;if(a!==i||r.delegatedReceipt&&JSON.stringify(g(h))!==JSON.stringify(r.delegatedReceipt))throw new Error("architecture-answers-conflict");return h}function H(e){const n=E(e);return n?g(n):void 0}function X(e){const n=E(e,!0);return n?{receipt:g(n),answers:n.answers}:void 0}async function M(){const e=[];let n=0;for await(const r of process.stdin){const c=Buffer.isBuffer(r)?r:Buffer.from(String(r));if(n+=c.length,n>z)throw new Error("architecture-answers-input-too-large");e.push(c)}return JSON.parse(Buffer.concat(e).toString("utf8"))}async function ee(e){if(e[0]!=="save"&&e[0]!=="status"||e.length>1&&(e.length!==3||e[1]!=="--project-root"||!e[2]))return process.stdout.write(`{"ok":false,"reasonCode":"architecture-answers-usage-invalid","publicSafe":true}
-`),1;try{const n=e[2]??process.cwd(),r=e[0]==="save"?_(n,await M()):H(n);return process.stdout.write(`${JSON.stringify({ok:!0,...r,...r?{}:{recorded:!1,publicSafe:!0}})}
-`),0}catch(n){const r=n instanceof Error&&/^architecture-answers-[a-z-]+$/.test(n.message)?n.message:"architecture-answers-failed";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:r,publicSafe:!0})}
-`),1}}export{ee as architectureAnswersCliHandler,H as loadPactAnswerReceipt,X as loadPactPrivateAnswers,_ as savePactAnswers};
+/**
+ * P222.26: root-owned, local-only collection of the five Pact decisions.
+ * The answers never enter invoke args, tracked state, public metadata or logs.
+ * Saving this record does not authorize a private architecture child.
+ */
+import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+import { isDeepStrictEqual } from 'node:util';
+import { closeSync, existsSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+const MAX_INPUT_BYTES = 4096;
+const PACT_QUESTION_IDS = Object.freeze([
+    'PACT-Q1-CONSUMER', 'PACT-Q2-PROVIDER', 'PACT-Q3-BROKER',
+    'PACT-Q4-MATCHERS', 'PACT-Q5-VERIFY',
+]);
+const STAGE_CHAIN = Object.freeze([
+    'arch-prd', 'arch-architecture', 'arch-fitness-functions', 'arch-api-contracts',
+]);
+function object(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+function exactKeys(value, keys) {
+    return Object.keys(value).length === keys.length
+        && keys.every((key) => Object.hasOwn(value, key));
+}
+function safeName(value) {
+    return typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/.test(value);
+}
+function safeBrokerUrl(value) {
+    if (value === null)
+        return true;
+    if (typeof value !== 'string' || value.length > 512
+        || !value.startsWith('https://') || /[\s\\]/.test(value))
+        return false;
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' && !!url.hostname && !url.username && !url.password
+            && !url.search && !url.hash;
+    }
+    catch {
+        return false;
+    }
+}
+function parseAnswers(value) {
+    if (!object(value) || !exactKeys(value, [
+        'consumer', 'provider', 'brokerUrl', 'matchersAggressive', 'generateProvider',
+    ]) || !safeName(value.consumer) || !safeName(value.provider)
+        || !safeBrokerUrl(value.brokerUrl)
+        || typeof value.matchersAggressive !== 'boolean'
+        || typeof value.generateProvider !== 'boolean') {
+        throw new Error('architecture-answers-invalid');
+    }
+    return {
+        consumer: value.consumer, provider: value.provider, brokerUrl: value.brokerUrl,
+        matchersAggressive: value.matchersAggressive, generateProvider: value.generateProvider,
+    };
+}
+function checkedPrivateDirectory(projectRoot, create) {
+    const root = resolve(projectRoot);
+    const top = execFileSync('git', ['rev-parse', '--show-toplevel'], {
+        cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+    if (realpathSync(root) !== root || resolve(top) !== root) {
+        throw new Error('architecture-answers-private-store-invalid');
+    }
+    const commonRaw = execFileSync('git', ['rev-parse', '--git-common-dir'], {
+        cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+    const commonDir = isAbsolute(commonRaw) ? resolve(commonRaw) : resolve(root, commonRaw);
+    if (realpathSync(commonDir) !== commonDir || lstatSync(commonDir).isSymbolicLink()) {
+        throw new Error('architecture-answers-private-store-invalid');
+    }
+    const directory = join(commonDir, 'neocortex-architecture');
+    if (!existsSync(directory) && !create)
+        return undefined;
+    if (create)
+        mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const entry = lstatSync(directory);
+    if (!entry.isDirectory() || entry.isSymbolicLink()
+        || entry.uid !== process.getuid?.() || (entry.mode & 0o077) !== 0) {
+        throw new Error('architecture-answers-private-store-invalid');
+    }
+    return directory;
+}
+function answerContext(projectRoot, allowDelegated) {
+    const statePath = join(projectRoot, '.neocortex', 'state.json');
+    const stateEntry = lstatSync(statePath);
+    if (!stateEntry.isFile() || stateEntry.isSymbolicLink()) {
+        throw new Error('architecture-answers-state-invalid');
+    }
+    const rawState = readFileSync(statePath, 'utf8');
+    const state = JSON.parse(rawState);
+    const archPlan = object(state) && object(state.archPlan) ? state.archPlan : undefined;
+    const checkpoint = archPlan && object(archPlan.execution) ? archPlan.execution : undefined;
+    const rows = checkpoint?.acceptedStages;
+    if (!checkpoint || checkpoint.schemaVersion !== 1 || checkpoint.owner !== 'root'
+        || checkpoint.evidencePolicy !== 'v2-required'
+        || checkpoint.currentStageCommand !== 'generate-pacts'
+        || !(checkpoint.continuationState === 'ask-user'
+            && JSON.stringify(checkpoint.questionIds) === JSON.stringify(PACT_QUESTION_IDS)
+            || allowDelegated && checkpoint.continuationState === 'delegate'
+                && JSON.stringify(checkpoint.questionIds) === '[]')
+        || typeof checkpoint.targetEpicId !== 'string'
+        || !/^P[1-9][0-9]{0,11}$/.test(checkpoint.targetEpicId)
+        || !object(state) || !object(state.epics) || !Object.hasOwn(state.epics, checkpoint.targetEpicId)
+        || typeof checkpoint.graphRevision !== 'string'
+        || !/^[a-f0-9]{64}$/.test(checkpoint.graphRevision)
+        || !Array.isArray(rows) || rows.length !== STAGE_CHAIN.length
+        || !rows.every((row, index) => object(row) && row.stageCommand === STAGE_CHAIN[index]
+            && row.targetEpicId === checkpoint.targetEpicId
+            && object(row.completionEvidence) && object(row.validationEvidence))) {
+        throw new Error('architecture-answers-checkpoint-invalid');
+    }
+    const delegatedReceipt = checkpoint.continuationState === 'delegate'
+        ? checkpoint.pactAnswerReceipt : undefined;
+    if (checkpoint.continuationState === 'delegate'
+        && (!object(delegatedReceipt) || !exactKeys(delegatedReceipt, [
+            'schemaVersion', 'targetEpicId', 'graphRevision', 'stateSha256',
+            'answersSha256', 'questionIds', 'publicSafe',
+        ]) || delegatedReceipt.schemaVersion !== 'PactAnswerReceipt/1'
+            || delegatedReceipt.targetEpicId !== checkpoint.targetEpicId
+            || delegatedReceipt.graphRevision !== checkpoint.graphRevision
+            || typeof delegatedReceipt.stateSha256 !== 'string'
+            || !/^[a-f0-9]{64}$/.test(delegatedReceipt.stateSha256)
+            || typeof delegatedReceipt.answersSha256 !== 'string'
+            || !/^[a-f0-9]{64}$/.test(delegatedReceipt.answersSha256)
+            || JSON.stringify(delegatedReceipt.questionIds) !== JSON.stringify(PACT_QUESTION_IDS)
+            || delegatedReceipt.publicSafe !== true)) {
+        throw new Error('architecture-answers-checkpoint-invalid');
+    }
+    return { targetEpicId: checkpoint.targetEpicId, graphRevision: checkpoint.graphRevision,
+        stateSha256: checkpoint.continuationState === 'ask-user'
+            ? createHash('sha256').update(rawState).digest('hex')
+            : delegatedReceipt.stateSha256,
+        ...(delegatedReceipt ? { delegatedReceipt: delegatedReceipt } : {}) };
+}
+function receiptFor(record) {
+    return {
+        schemaVersion: 'PactAnswerReceipt/1', targetEpicId: record.targetEpicId,
+        graphRevision: record.graphRevision, stateSha256: record.stateSha256,
+        answersSha256: record.checksumSha256,
+        questionIds: PACT_QUESTION_IDS, publicSafe: true,
+    };
+}
+function checkedRecord(context, answers, nonce) {
+    const payload = { schemaVersion: nonce ? 'PactLocalAnswers/2' : 'PactLocalAnswers/1',
+        ...context, ...(nonce ? { nonce } : {}), answers };
+    return { ...payload,
+        checksumSha256: createHash('sha256').update(`${JSON.stringify(payload)}\n`).digest('hex') };
+}
+/** Store explicit answers without mutating the tracked architecture checkpoint. */
+export function savePactAnswers(projectRoot, value) {
+    const answers = parseAnswers(value);
+    const context = answerContext(projectRoot, false);
+    const existing = loadPrivatePactRecord(projectRoot);
+    if (existing) {
+        if (!isDeepStrictEqual(existing.answers, answers))
+            throw new Error('architecture-answers-conflict');
+        return receiptFor(existing);
+    }
+    const record = checkedRecord(context, answers, randomBytes(32).toString('hex'));
+    const canonical = `${JSON.stringify(record)}\n`;
+    const directory = checkedPrivateDirectory(projectRoot, true);
+    const target = join(directory, `pact-answers-${record.targetEpicId}-${record.graphRevision}.json`);
+    if (existsSync(target))
+        throw new Error('architecture-answers-conflict');
+    const temporary = join(directory, `pact-answers-tmp-${randomUUID()}.json`);
+    let linked = false;
+    const file = openSync(temporary, 'wx', 0o600);
+    try {
+        writeFileSync(file, canonical);
+        fsyncSync(file);
+    }
+    finally {
+        closeSync(file);
+    }
+    try {
+        linkSync(temporary, target);
+        linked = true;
+        const handle = openSync(directory, 'r');
+        try {
+            fsyncSync(handle);
+        }
+        finally {
+            closeSync(handle);
+        }
+    }
+    finally {
+        unlinkSync(temporary);
+        if (!linked && existsSync(target))
+            throw new Error('architecture-answers-conflict');
+    }
+    return receiptFor(record);
+}
+function loadPrivatePactRecord(projectRoot, requireDelegated = false) {
+    const context = answerContext(projectRoot, true);
+    if (requireDelegated && !context.delegatedReceipt) {
+        throw new Error('architecture-answers-checkpoint-invalid');
+    }
+    const directory = checkedPrivateDirectory(projectRoot, false);
+    if (!directory)
+        return undefined;
+    const target = join(directory, `pact-answers-${context.targetEpicId}-${context.graphRevision}.json`);
+    if (!existsSync(target))
+        return undefined;
+    const entry = lstatSync(target);
+    if (!entry.isFile() || entry.isSymbolicLink() || entry.size > 8192
+        || entry.uid !== process.getuid?.() || (entry.mode & 0o077) !== 0) {
+        throw new Error('architecture-answers-conflict');
+    }
+    const raw = readFileSync(target, 'utf8');
+    const parsed = JSON.parse(raw);
+    if (!object(parsed) || !(parsed.schemaVersion === 'PactLocalAnswers/1' && exactKeys(parsed, [
+        'schemaVersion', 'targetEpicId', 'graphRevision', 'stateSha256', 'answers', 'checksumSha256',
+    ]) || parsed.schemaVersion === 'PactLocalAnswers/2' && exactKeys(parsed, [
+        'schemaVersion', 'targetEpicId', 'graphRevision', 'stateSha256', 'nonce', 'answers', 'checksumSha256',
+    ]) && typeof parsed.nonce === 'string' && /^[a-f0-9]{64}$/.test(parsed.nonce))
+        || parsed.targetEpicId !== context.targetEpicId
+        || parsed.graphRevision !== context.graphRevision
+        || parsed.stateSha256 !== context.stateSha256) {
+        throw new Error('architecture-answers-conflict');
+    }
+    const record = checkedRecord({ targetEpicId: context.targetEpicId,
+        graphRevision: context.graphRevision, stateSha256: context.stateSha256 }, parseAnswers(parsed.answers), parsed.schemaVersion === 'PactLocalAnswers/2' ? parsed.nonce : undefined);
+    const canonical = `${JSON.stringify(record)}\n`;
+    if (raw !== canonical || context.delegatedReceipt
+        && JSON.stringify(receiptFor(record)) !== JSON.stringify(context.delegatedReceipt)) {
+        throw new Error('architecture-answers-conflict');
+    }
+    return record;
+}
+/** Revalidate the private record against the exact current root checkpoint. Never print answers. */
+export function loadPactAnswerReceipt(projectRoot) {
+    const record = loadPrivatePactRecord(projectRoot);
+    return record ? receiptFor(record) : undefined;
+}
+/** Internal private handoff only. Callers must never log or return `answers`. */
+export function loadPactPrivateAnswers(projectRoot) {
+    const record = loadPrivatePactRecord(projectRoot, true);
+    return record ? { receipt: receiptFor(record), answers: record.answers } : undefined;
+}
+async function readBoundedStdin() {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of process.stdin) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+        total += bytes.length;
+        if (total > MAX_INPUT_BYTES)
+            throw new Error('architecture-answers-input-too-large');
+        chunks.push(bytes);
+    }
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
+export async function architectureAnswersCliHandler(args) {
+    if ((args[0] !== 'save' && args[0] !== 'status')
+        || (args.length > 1 && (args.length !== 3 || args[1] !== '--project-root' || !args[2]))) {
+        process.stdout.write('{"ok":false,"reasonCode":"architecture-answers-usage-invalid","publicSafe":true}\n');
+        return 1;
+    }
+    try {
+        const root = args[2] ?? process.cwd();
+        const receipt = args[0] === 'save'
+            ? savePactAnswers(root, await readBoundedStdin()) : loadPactAnswerReceipt(root);
+        process.stdout.write(`${JSON.stringify({ ok: true, ...receipt,
+            ...(receipt ? {} : { recorded: false, publicSafe: true }) })}\n`);
+        return 0;
+    }
+    catch (error) {
+        const code = error instanceof Error && /^architecture-answers-[a-z-]+$/.test(error.message)
+            ? error.message : 'architecture-answers-failed';
+        process.stdout.write(`${JSON.stringify({ ok: false, reasonCode: code, publicSafe: true })}\n`);
+        return 1;
+    }
+}

package/packages/client/dist/commands/architecture-memory-terminal.js

@@ -1,4 +1,253 @@
-import{architectureMemoryPredecessorCount as F}from"./architecture-non-ui-continuation.js";import{execFileSync as g}from"node:child_process";import{createHash as V,randomUUID as B}from"node:crypto";import{closeSync as w,fsyncSync as I,lstatSync as j,mkdirSync as J,openSync as E,readFileSync as S,realpathSync as M,renameSync as L,unlinkSync as H,writeFileSync as O}from"node:fs";import{isAbsolute as X,join as f,resolve as v}from"node:path";import{listProjectMemoryTargets as q}from"../memory/shared-project-memory-types.js";import{parseRefreshMemoryArgs as U,verifyProjectMemoryTargets as _}from"./refresh-memory.js";function z(r,e){if(!c(r)||!c(e)||Object.keys(r).sort().join(",")!==["schemaVersion","targetEpicId","graphRevision","sourceHead","canonicalSha256","projectionSha256","fileCount","completionReceiptId","validationReceiptId","receiptId","status","evidenceIds","publicSafe"].sort().join(",")||r.schemaVersion!=="ArchitectureTerminalMemoryReceipt/1"||r.targetEpicId!==e.targetEpicId||r.graphRevision!==e.graphRevision||r.completionReceiptId!==e.completionEvidence?.receiptId||r.validationReceiptId!==e.validationEvidence?.receiptId||typeof r.sourceHead!="string"||!/^[a-f0-9]{40}$/.test(r.sourceHead)||![r.graphRevision,r.canonicalSha256,r.projectionSha256,r.completionReceiptId,r.validationReceiptId,r.receiptId].every(n=>typeof n=="string"&&/^[a-f0-9]{64}$/.test(n))||!Number.isInteger(r.fileCount)||r.fileCount<1||r.fileCount>64||r.status!=="passed"||r.publicSafe!==!0||!Array.isArray(r.evidenceIds)||r.evidenceIds.length!==1)return!1;const s={schemaVersion:r.schemaVersion,targetEpicId:r.targetEpicId,graphRevision:r.graphRevision,sourceHead:r.sourceHead,canonicalSha256:r.canonicalSha256,projectionSha256:r.projectionSha256,fileCount:r.fileCount,completionReceiptId:r.completionReceiptId,validationReceiptId:r.validationReceiptId},i=b(JSON.stringify(s));return r.receiptId===i&&r.evidenceIds[0]===`memory-physical-${i.slice(0,24)}`}function c(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function b(r){return V("sha256").update(r).digest("hex")}function T(r,e){if(!c(e)||e.owner!=="root"||e.currentStageCommand!=="update-memory"||e.continuationState!=="delegate"||e.childStatus!=="succeeded"||e.evidencePolicy!=="v2-required"||typeof e.targetEpicId!="string"||!/^P[1-9][0-9]{0,11}$/.test(e.targetEpicId)||typeof e.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(e.graphRevision)||!Array.isArray(e.acceptedStages)||e.acceptedStages.length!==F(e)||!c(e.reviewDecision)||e.reviewDecision.decision!=="approved"||!c(e.completionEvidence)||e.completionEvidence.status!=="succeeded"||e.completionEvidence.stageCommand!=="update-memory"||!c(e.validationEvidence)||e.validationEvidence.status!=="passed"||e.validationEvidence.stageCommand!=="update-memory"||typeof e.completionEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(e.completionEvidence.receiptId)||typeof e.validationEvidence.receiptId!="string"||!/^[a-f0-9]{64}$/.test(e.validationEvidence.receiptId))throw new Error("architecture-terminal-memory-evidence-incomplete");const s=_(U(["--verify","--project-root",r])),i=g("git",["rev-parse","HEAD"],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(!/^[a-f0-9]{40}$/.test(i))throw new Error("architecture-terminal-memory-head-invalid");const n=S(f(r,"NEOCORTEX.md")),u=g("git",["show","HEAD:NEOCORTEX.md"],{cwd:r,stdio:["ignore","pipe","ignore"],maxBuffer:65536});if(!n.equals(u)||b(n)!==s.canonicalSha256)throw new Error("architecture-terminal-memory-uncommitted");const k=[...new Set(["NEOCORTEX.md",...q().flatMap(a=>[a.primaryFile,...a.secondaryFiles.filter(o=>o.scope==="project").map(o=>o.path)])])];if(g("git",["diff","--name-only","HEAD","--",...k],{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim())throw new Error("architecture-terminal-memory-uncommitted");let p=i;if(e.terminalMemoryCheckpoint!==void 0){if(!z(e.terminalMemoryCheckpoint,e))throw new Error("architecture-terminal-memory-checkpoint-invalid");p=e.terminalMemoryCheckpoint.sourceHead;const a=o=>g("git",o,{cwd:r,encoding:"utf8",stdio:["ignore","pipe","ignore"],maxBuffer:1024*1024}).trim();try{a(["merge-base","--is-ancestor",p,i]);const o=a(["rev-list","--max-count=257","--reverse","--parents",`${p}..${i}`]).split(`
-`).filter(Boolean);if(o.length>256)throw new Error("checkpoint-range-too-large");for(const y of o){const l=y.split(" ");if(l.length!==2)throw new Error("checkpoint-merge-unverified");const h=a(["diff-tree","--no-commit-id","--name-only","-r",l[0]]).split(`
-`).filter(Boolean);if(h.length!==1||h[0]!==".neocortex/state.json")throw new Error("checkpoint-range-not-state-only")}}catch{throw new Error("architecture-terminal-memory-checkpoint-range-invalid")}}const m={schemaVersion:"ArchitectureTerminalMemoryReceipt/1",targetEpicId:e.targetEpicId,graphRevision:e.graphRevision,sourceHead:p,canonicalSha256:s.canonicalSha256,projectionSha256:s.projectionSha256,fileCount:s.fileCount,completionReceiptId:e.completionEvidence.receiptId,validationReceiptId:e.validationEvidence.receiptId},t=b(JSON.stringify(m));return{...m,receiptId:t,status:"passed",evidenceIds:[`memory-physical-${t.slice(0,24)}`],publicSafe:!0}}function G(r){const e=v(r),s=g("git",["rev-parse","--show-toplevel"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim();if(M(e)!==e||v(s)!==e)throw new Error("architecture-terminal-memory-project-root-invalid");const i=f(e,".neocortex"),n=f(i,"state.json"),u=f(i,"state.json.architecture.lock"),k=E(u,"wx",384);let d;try{const p=j(n);if(!p.isFile()||p.isSymbolicLink())throw new Error("architecture-terminal-memory-state-invalid");const m=S(n,"utf8"),t=JSON.parse(m);if(!c(t)||!c(t.archPlan)||!c(t.archPlan.execution)||!c(t.epics)||t.scope&&c(t.scope)&&t.scope.kind==="projected"||!Object.hasOwn(t.epics,String(t.archPlan.execution.targetEpicId))||t.archPlan.execution.terminalMemoryCheckpoint!==void 0)throw new Error("architecture-terminal-memory-state-invalid");const a=T(e,t.archPlan.execution),o=g("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),y=X(o)?v(o):v(e,o);if(M(y)!==y||j(y).isSymbolicLink())throw new Error("architecture-terminal-memory-backup-dir-invalid");const l=f(y,"neocortex-architecture");J(l,{recursive:!0,mode:448});const h=j(l);if(!h.isDirectory()||h.isSymbolicLink()||h.uid!==process.getuid?.()||(h.mode&63)!==0)throw new Error("architecture-terminal-memory-backup-dir-invalid");if(S(n,"utf8")!==m)throw new Error("architecture-terminal-memory-state-conflict");const P=B(),D=f(l,`state-backup-${P}.json`),R=E(D,"wx",384);try{O(R,m),I(R)}finally{w(R)}const A=E(l,"r");try{I(A)}finally{w(A)}const N={...t,archPlan:{...t.archPlan,execution:{...t.archPlan.execution,terminalMemoryCheckpoint:a}}};d=f(i,`state.json.architecture-tmp-${P}`);const C=E(d,"wx",384);try{O(C,`${JSON.stringify(N,null,2)}
-`),I(C)}finally{w(C)}if(S(n,"utf8")!==m)throw new Error("architecture-terminal-memory-state-conflict");if(T(e,t.archPlan.execution).receiptId!==a.receiptId)throw new Error("architecture-terminal-memory-physical-conflict");L(d,n),d=void 0;const $=E(i,"r");try{I($)}finally{w($)}return a}finally{if(d)try{H(d)}catch{}w(k),H(u)}}async function re(r){try{if(r[0]!=="seal"||r.length!==1&&r.length!==3||r.length===3&&r[1]!=="--project-root")throw new Error("usage: architecture-memory seal [--project-root <path>]");const e=G(r.length===3?r[2]:process.cwd());return console.log(`Architecture memory sealed: receipt=${e.receiptId} head=${e.sourceHead} files=${e.fileCount}`),0}catch(e){return console.error(e instanceof Error?e.message:String(e)),1}}export{z as acceptedArchitectureTerminalMemoryReceipt,re as architectureMemoryTerminalCliHandler,T as deriveArchitectureTerminalMemoryReceipt,G as sealArchitectureTerminalMemory};
+import { architectureMemoryPredecessorCount } from './architecture-non-ui-continuation.js';
+import { execFileSync } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { closeSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+import { listProjectMemoryTargets } from '../memory/shared-project-memory-types.js';
+import { parseRefreshMemoryArgs, verifyProjectMemoryTargets } from './refresh-memory.js';
+export function acceptedArchitectureTerminalMemoryReceipt(value, execution) {
+    if (!isRecord(value) || !isRecord(execution)
+        || Object.keys(value).sort().join(',') !== [
+            'schemaVersion', 'targetEpicId', 'graphRevision', 'sourceHead', 'canonicalSha256',
+            'projectionSha256', 'fileCount', 'completionReceiptId', 'validationReceiptId',
+            'receiptId', 'status', 'evidenceIds', 'publicSafe',
+        ].sort().join(',')
+        || value.schemaVersion !== 'ArchitectureTerminalMemoryReceipt/1'
+        || value.targetEpicId !== execution.targetEpicId
+        || value.graphRevision !== execution.graphRevision
+        || value.completionReceiptId !== execution.completionEvidence?.receiptId
+        || value.validationReceiptId !== execution.validationEvidence?.receiptId
+        || typeof value.sourceHead !== 'string' || !/^[a-f0-9]{40}$/.test(value.sourceHead)
+        || ![value.graphRevision, value.canonicalSha256, value.projectionSha256,
+            value.completionReceiptId, value.validationReceiptId, value.receiptId]
+            .every((field) => typeof field === 'string' && /^[a-f0-9]{64}$/.test(field))
+        || !Number.isInteger(value.fileCount) || value.fileCount < 1
+        || value.fileCount > 64 || value.status !== 'passed'
+        || value.publicSafe !== true || !Array.isArray(value.evidenceIds)
+        || value.evidenceIds.length !== 1)
+        return false;
+    const fields = {
+        schemaVersion: value.schemaVersion, targetEpicId: value.targetEpicId,
+        graphRevision: value.graphRevision, sourceHead: value.sourceHead,
+        canonicalSha256: value.canonicalSha256, projectionSha256: value.projectionSha256,
+        fileCount: value.fileCount, completionReceiptId: value.completionReceiptId,
+        validationReceiptId: value.validationReceiptId,
+    };
+    const receiptId = hash(JSON.stringify(fields));
+    return value.receiptId === receiptId
+        && value.evidenceIds[0] === `memory-physical-${receiptId.slice(0, 24)}`;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function hash(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+/** A root-only physical seal; child output and a copied JSON assertion are insufficient. */
+export function deriveArchitectureTerminalMemoryReceipt(projectRoot, execution) {
+    if (!isRecord(execution) || execution.owner !== 'root'
+        || execution.currentStageCommand !== 'update-memory'
+        || execution.continuationState !== 'delegate'
+        || execution.childStatus !== 'succeeded'
+        || execution.evidencePolicy !== 'v2-required'
+        || typeof execution.targetEpicId !== 'string'
+        || !/^P[1-9][0-9]{0,11}$/.test(execution.targetEpicId)
+        || typeof execution.graphRevision !== 'string'
+        || !/^[a-f0-9]{64}$/.test(execution.graphRevision)
+        || !Array.isArray(execution.acceptedStages) || execution.acceptedStages.length !== architectureMemoryPredecessorCount(execution)
+        || !isRecord(execution.reviewDecision) || execution.reviewDecision.decision !== 'approved'
+        || !isRecord(execution.completionEvidence) || execution.completionEvidence.status !== 'succeeded'
+        || execution.completionEvidence.stageCommand !== 'update-memory'
+        || !isRecord(execution.validationEvidence) || execution.validationEvidence.status !== 'passed'
+        || execution.validationEvidence.stageCommand !== 'update-memory'
+        || typeof execution.completionEvidence.receiptId !== 'string'
+        || !/^[a-f0-9]{64}$/.test(execution.completionEvidence.receiptId)
+        || typeof execution.validationEvidence.receiptId !== 'string'
+        || !/^[a-f0-9]{64}$/.test(execution.validationEvidence.receiptId)) {
+        throw new Error('architecture-terminal-memory-evidence-incomplete');
+    }
+    const verification = verifyProjectMemoryTargets(parseRefreshMemoryArgs([
+        '--verify', '--project-root', projectRoot,
+    ]));
+    const head = execFileSync('git', ['rev-parse', 'HEAD'], {
+        cwd: projectRoot, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+    if (!/^[a-f0-9]{40}$/.test(head))
+        throw new Error('architecture-terminal-memory-head-invalid');
+    const canonical = readFileSync(join(projectRoot, 'NEOCORTEX.md'));
+    const committedCanonical = execFileSync('git', ['show', 'HEAD:NEOCORTEX.md'], {
+        cwd: projectRoot, stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 65_536,
+    });
+    if (!canonical.equals(committedCanonical) || hash(canonical) !== verification.canonicalSha256) {
+        throw new Error('architecture-terminal-memory-uncommitted');
+    }
+    const projectPaths = [...new Set(['NEOCORTEX.md', ...listProjectMemoryTargets().flatMap((target) => [
+                target.primaryFile, ...target.secondaryFiles.filter((file) => file.scope === 'project').map((file) => file.path),
+            ])])];
+    const changedTracked = execFileSync('git', ['diff', '--name-only', 'HEAD', '--', ...projectPaths], {
+        cwd: projectRoot, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+    if (changedTracked)
+        throw new Error('architecture-terminal-memory-uncommitted');
+    // Persisting the accepted public checkpoint advances HEAD after the memory
+    // commit. Keep its immutable seal only across independently inspected,
+    // single-parent state-only commits, including every intermediate commit.
+    let sourceHead = head;
+    if (execution.terminalMemoryCheckpoint !== undefined) {
+        if (!acceptedArchitectureTerminalMemoryReceipt(execution.terminalMemoryCheckpoint, execution)) {
+            throw new Error('architecture-terminal-memory-checkpoint-invalid');
+        }
+        sourceHead = execution.terminalMemoryCheckpoint.sourceHead;
+        const git = (args) => execFileSync('git', args, {
+            cwd: projectRoot, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 1024 * 1024,
+        }).trim();
+        try {
+            git(['merge-base', '--is-ancestor', sourceHead, head]);
+            const commits = git(['rev-list', '--max-count=257', '--reverse', '--parents', `${sourceHead}..${head}`])
+                .split('\n').filter(Boolean);
+            if (commits.length > 256)
+                throw new Error('checkpoint-range-too-large');
+            for (const row of commits) {
+                const ids = row.split(' ');
+                if (ids.length !== 2)
+                    throw new Error('checkpoint-merge-unverified');
+                const paths = git(['diff-tree', '--no-commit-id', '--name-only', '-r', ids[0]]).split('\n').filter(Boolean);
+                if (paths.length !== 1 || paths[0] !== '.neocortex/state.json')
+                    throw new Error('checkpoint-range-not-state-only');
+            }
+        }
+        catch {
+            throw new Error('architecture-terminal-memory-checkpoint-range-invalid');
+        }
+    }
+    const fields = {
+        schemaVersion: 'ArchitectureTerminalMemoryReceipt/1',
+        targetEpicId: execution.targetEpicId,
+        graphRevision: execution.graphRevision,
+        sourceHead,
+        canonicalSha256: verification.canonicalSha256,
+        projectionSha256: verification.projectionSha256,
+        fileCount: verification.fileCount,
+        completionReceiptId: execution.completionEvidence.receiptId,
+        validationReceiptId: execution.validationEvidence.receiptId,
+    };
+    const receiptId = hash(JSON.stringify(fields));
+    return {
+        ...fields, receiptId, status: 'passed',
+        evidenceIds: [`memory-physical-${receiptId.slice(0, 24)}`],
+        publicSafe: true,
+    };
+}
+/** Root-only CAS: seal a committed, verified memory projection into local state. */
+export function sealArchitectureTerminalMemory(projectRoot) {
+    const root = resolve(projectRoot);
+    const top = execFileSync('git', ['rev-parse', '--show-toplevel'], {
+        cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+    if (realpathSync(root) !== root || resolve(top) !== root) {
+        throw new Error('architecture-terminal-memory-project-root-invalid');
+    }
+    const stateDir = join(root, '.neocortex');
+    const statePath = join(stateDir, 'state.json');
+    const lockPath = join(stateDir, 'state.json.architecture.lock');
+    const lock = openSync(lockPath, 'wx', 0o600);
+    let temporaryPath;
+    try {
+        const entry = lstatSync(statePath);
+        if (!entry.isFile() || entry.isSymbolicLink()) {
+            throw new Error('architecture-terminal-memory-state-invalid');
+        }
+        const raw = readFileSync(statePath, 'utf8');
+        const state = JSON.parse(raw);
+        if (!isRecord(state) || !isRecord(state.archPlan) || !isRecord(state.archPlan.execution)
+            || !isRecord(state.epics) || state.scope && isRecord(state.scope) && state.scope.kind === 'projected'
+            || !Object.hasOwn(state.epics, String(state.archPlan.execution.targetEpicId))
+            || state.archPlan.execution.terminalMemoryCheckpoint !== undefined) {
+            throw new Error('architecture-terminal-memory-state-invalid');
+        }
+        const receipt = deriveArchitectureTerminalMemoryReceipt(root, state.archPlan.execution);
+        const commonRaw = execFileSync('git', ['rev-parse', '--git-common-dir'], {
+            cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        const commonDir = isAbsolute(commonRaw) ? resolve(commonRaw) : resolve(root, commonRaw);
+        if (realpathSync(commonDir) !== commonDir || lstatSync(commonDir).isSymbolicLink()) {
+            throw new Error('architecture-terminal-memory-backup-dir-invalid');
+        }
+        const backupDir = join(commonDir, 'neocortex-architecture');
+        mkdirSync(backupDir, { recursive: true, mode: 0o700 });
+        const backupEntry = lstatSync(backupDir);
+        if (!backupEntry.isDirectory() || backupEntry.isSymbolicLink()
+            || backupEntry.uid !== process.getuid?.() || (backupEntry.mode & 0o077) !== 0) {
+            throw new Error('architecture-terminal-memory-backup-dir-invalid');
+        }
+        if (readFileSync(statePath, 'utf8') !== raw)
+            throw new Error('architecture-terminal-memory-state-conflict');
+        const suffix = randomUUID();
+        const backupPath = join(backupDir, `state-backup-${suffix}.json`);
+        const backup = openSync(backupPath, 'wx', 0o600);
+        try {
+            writeFileSync(backup, raw);
+            fsyncSync(backup);
+        }
+        finally {
+            closeSync(backup);
+        }
+        const backupDirectory = openSync(backupDir, 'r');
+        try {
+            fsyncSync(backupDirectory);
+        }
+        finally {
+            closeSync(backupDirectory);
+        }
+        const next = { ...state, archPlan: { ...state.archPlan,
+                execution: { ...state.archPlan.execution, terminalMemoryCheckpoint: receipt } } };
+        temporaryPath = join(stateDir, `state.json.architecture-tmp-${suffix}`);
+        const temporary = openSync(temporaryPath, 'wx', 0o600);
+        try {
+            writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`);
+            fsyncSync(temporary);
+        }
+        finally {
+            closeSync(temporary);
+        }
+        if (readFileSync(statePath, 'utf8') !== raw)
+            throw new Error('architecture-terminal-memory-state-conflict');
+        if (deriveArchitectureTerminalMemoryReceipt(root, state.archPlan.execution).receiptId !== receipt.receiptId) {
+            throw new Error('architecture-terminal-memory-physical-conflict');
+        }
+        renameSync(temporaryPath, statePath);
+        temporaryPath = undefined;
+        const directory = openSync(stateDir, 'r');
+        try {
+            fsyncSync(directory);
+        }
+        finally {
+            closeSync(directory);
+        }
+        return receipt;
+    }
+    finally {
+        if (temporaryPath)
+            try {
+                unlinkSync(temporaryPath);
+            }
+            catch { /* preserve primary failure */ }
+        closeSync(lock);
+        unlinkSync(lockPath);
+    }
+}
+export async function architectureMemoryTerminalCliHandler(args) {
+    try {
+        if (args[0] !== 'seal' || args.length !== 1 && args.length !== 3
+            || args.length === 3 && args[1] !== '--project-root') {
+            throw new Error('usage: architecture-memory seal [--project-root <path>]');
+        }
+        const receipt = sealArchitectureTerminalMemory(args.length === 3 ? args[2] : process.cwd());
+        console.log(`Architecture memory sealed: receipt=${receipt.receiptId} head=${receipt.sourceHead} files=${receipt.fileCount}`);
+        return 0;
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : String(error));
+        return 1;
+    }
+}