@ornexus/neocortex 4.60.68 → 4.60.70

package/packages/client/dist/git/secure-filesystem-boundary.js

@@ -1,17 +1,4 @@
-/**
- * Handle-anchored filesystem mutations for private lifecycle namespaces.
- *
- * Node does not expose openat(2). A short-lived helper is started with the
- * validated parent as its cwd, verifies the cwd device/inode before effects,
- * and performs every final mutation with relative basenames. Once the OS has
- * handed the cwd to the helper, renaming/replacing the public parent path can
- * no longer redirect the effect. Platforms without that POSIX guarantee fail
- * closed instead of using a pathname fallback.
- */
-import { spawn } from 'node:child_process';
-import { randomBytes } from 'node:crypto';
-import { lstat, stat } from 'node:fs/promises';
-const HELPER = String.raw `
+import{spawn as b}from"node:child_process";import{randomBytes as B}from"node:crypto";import{lstat as w,stat as x}from"node:fs/promises";const T=String.raw`
 const fs = require('node:fs');
 const crypto = require('node:crypto');
 const [op, expectedDev, expectedIno, name, temporary, expectedSha] = process.argv.slice(1);
@@ -106,8 +93,7 @@ if (op === 'mkdir' || op === 'mkdir-exclusive') {
   if (safeExisting(name, 'directory')) fail('secure-filesystem-directory-remained');
 } else fail('secure-filesystem-operation-invalid');
 try { const parent = fs.openSync('.', fs.constants.O_RDONLY); fs.fsyncSync(parent); fs.closeSync(parent); } catch {}
-`;
-const GIT_HELPER = String.raw `
+`,k=String.raw`
 const fs = require('node:fs');
 const cp = require('node:child_process');
 const [expectedParentDev, expectedParentIno, name, expectedChildDev, expectedChildIno, encodedArgs, handshake, binary] = process.argv.slice(1);
@@ -159,169 +145,6 @@ if (result.error) fail('secure-git-command-error:' + String(result.error.code ||
 if (result.status !== 0) fail('secure-git-command-failed:' + String(Number.isInteger(result.status) ? result.status : 1));
 if (result.stdout && result.stdout.length > maxOutputBytes) fail('secure-git-output-too-large');
 if (result.stdout) process.stdout.write(result.stdout);
-`;
-export function secureFilesystemBoundaryAvailable(platform = process.platform) {
-    return platform !== 'win32';
-}
-export async function anchoredAtomicWriteFile(parent, name, content, options = {}) {
-    const temporary = `.${name}.${process.pid}.${randomBytes(8).toString('hex')}.tmp`;
-    await runAnchored(parent, ['write', name, temporary], Buffer.isBuffer(content) ? content : Buffer.from(content), options);
-}
-/** Replace a regular tracked file only while its exact preimage still matches. */
-export async function anchoredCompareAndSwapFile(parent, name, content, expectedSha256, options = {}) {
-    const temporary = `.${name}.${process.pid}.${randomBytes(8).toString('hex')}.tmp`;
-    await runAnchored(parent, ['write-cas', name, temporary, expectedSha256], Buffer.isBuffer(content) ? content : Buffer.from(content), options);
-}
-export async function anchoredRemoveFile(parent, name, options = {}) {
-    await runAnchored(parent, ['remove', name], undefined, options);
-}
-export async function anchoredEnsureDirectory(parent, name, options = {}) {
-    await runAnchored(parent, ['mkdir', name], undefined, options);
-}
-export async function anchoredCreateDirectory(parent, name) {
-    const output = (await runAnchored(parent, ['mkdir-exclusive', name])).toString('utf8');
-    const match = output.match(/^secure-filesystem-identity:([0-9]+):([0-9]+)$/);
-    if (!match)
-        throw new Error('secure-filesystem-created-identity-missing');
-    return Object.freeze({ dev: match[1], ino: match[2] });
-}
-export async function anchoredDirectoryIdentity(path) {
-    if (!secureFilesystemBoundaryAvailable())
-        throw new Error('secure-filesystem-platform-unsupported');
-    const entry = await lstat(path, { bigint: true });
-    const identity = await stat(path, { bigint: true });
-    if (entry.isSymbolicLink() || !entry.isDirectory() || !identity.isDirectory()
-        || entry.dev !== identity.dev || entry.ino !== identity.ino) {
-        throw new Error('secure-filesystem-directory-unsafe');
-    }
-    return Object.freeze({ dev: String(identity.dev), ino: String(identity.ino) });
-}
-/** Execute Git only after a helper owns and revalidates the sandbox directory cwd. */
-export async function anchoredExecuteGit(parent, name, expectedChild, args, input, options = {}) {
-    return runAnchoredCommand('git', parent, name, expectedChild, args, input, options);
-}
-/** Gate commands inherit a pinned cwd, never a mutable sandbox pathname. */
-export async function anchoredExecuteNode(parent, name, expectedChild, args, input, options = {}) {
-    return runAnchoredCommand('node', parent, name, expectedChild, args, input, options);
-}
-export async function anchoredExecuteNpm(parent, name, expectedChild, args) {
-    return runAnchoredCommand('npm', parent, name, expectedChild, args);
-}
-async function runAnchoredCommand(binary, parent, name, expectedChild, args, input, options = {}) {
-    if (!secureFilesystemBoundaryAvailable(options.platform ?? process.platform)) {
-        throw new Error('secure-filesystem-platform-unsupported');
-    }
-    if (args.length === 0 || args.length > 512
-        || args.some((arg) => typeof arg !== 'string' || arg.length > 4096 || arg.includes('\0'))) {
-        throw new Error('secure-git-args-invalid');
-    }
-    const identity = await stat(parent, { bigint: true });
-    const entry = await lstat(parent, { bigint: true });
-    if (!identity.isDirectory() || entry.isSymbolicLink() || !entry.isDirectory()
-        || identity.dev !== entry.dev || identity.ino !== entry.ino) {
-        throw new Error('secure-filesystem-parent-invalid');
-    }
-    await options.beforeHandoff?.();
-    const maxOutputBytes = binary === 'git' ? 16 * 1024 * 1024 : 64 * 1024 * 1024;
-    return await new Promise((resolveProcess, rejectProcess) => {
-        const handshake = options.afterHandoff ? '1' : '0';
-        const encodedArgs = Buffer.from(JSON.stringify([...args])).toString('base64url');
-        const child = spawn(process.execPath, [
-            '-e', GIT_HELPER, String(identity.dev), String(identity.ino), name,
-            expectedChild.dev, expectedChild.ino, encodedArgs, handshake, binary,
-        ], { cwd: parent, stdio: ['pipe', 'pipe', 'pipe'] });
-        const output = [];
-        const errors = [];
-        let outputBytes = 0;
-        let handoffObserved = !options.afterHandoff;
-        let hookStarted = false;
-        const finishInput = async () => {
-            if (hookStarted)
-                return;
-            hookStarted = true;
-            try {
-                await options.afterHandoff?.();
-                handoffObserved = true;
-                child.stdin.end(input === undefined ? undefined : Buffer.isBuffer(input) ? input : Buffer.from(input));
-            }
-            catch (error) {
-                child.kill();
-                rejectProcess(error);
-            }
-        };
-        child.stdout.on('data', (chunk) => {
-            outputBytes += chunk.length;
-            if (outputBytes > maxOutputBytes)
-                child.kill();
-            else
-                output.push(chunk);
-        });
-        child.stderr.on('data', (chunk) => {
-            errors.push(chunk);
-            if (!handoffObserved && Buffer.concat(errors).includes(Buffer.from('secure-git-handoff-ready\n')))
-                void finishInput();
-        });
-        child.once('error', rejectProcess);
-        child.once('close', (code) => {
-            if (code === 0 && outputBytes <= maxOutputBytes)
-                return resolveProcess(Buffer.concat(output));
-            const raw = Buffer.concat(errors).toString('utf8');
-            const reason = raw.split('\n').find((line) => line.startsWith('secure-git-') && line !== 'secure-git-handoff-ready')
-                ?? (outputBytes > maxOutputBytes ? 'secure-git-output-too-large' : 'secure-git-helper-failed');
-            rejectProcess(new Error(reason));
-        });
-        if (!options.afterHandoff)
-            void finishInput();
-    });
-}
-export async function anchoredCreateOwnedDirectory(parent, name, owner) {
-    await runAnchored(parent, ['create-owned-directory', name], Buffer.isBuffer(owner) ? owner : Buffer.from(owner));
-}
-export async function anchoredRenameDirectory(parent, sourceName, destinationName, options = {}) {
-    await runAnchored(parent, ['rename-directory', sourceName, destinationName], undefined, options);
-}
-export async function anchoredRemoveDirectory(parent, name, options = {}) {
-    await runAnchored(parent, ['remove-directory', name], undefined, options);
-}
-async function runAnchored(parent, args, input, options = {}) {
-    if (!secureFilesystemBoundaryAvailable(options.platform ?? process.platform))
-        throw new Error('secure-filesystem-platform-unsupported');
-    const identity = await stat(parent, { bigint: true });
-    if (!identity.isDirectory())
-        throw new Error('secure-filesystem-parent-invalid');
-    const entry = await lstat(parent, { bigint: true });
-    if (entry.isSymbolicLink())
-        throw new Error('secure-filesystem-parent-symlink');
-    await options.beforeHandoff?.();
-    return await new Promise((resolveProcess, rejectProcess) => {
-        const child = spawn(process.execPath, ['-e', HELPER, ...args.slice(0, 1), String(identity.dev), String(identity.ino), ...args.slice(1)], {
-            cwd: parent,
-            stdio: ['pipe', 'pipe', 'pipe'],
-        });
-        const output = [];
-        let outputBytes = 0;
-        const errors = [];
-        child.stdout.on('data', (chunk) => {
-            outputBytes += chunk.length;
-            if (outputBytes > 1024)
-                child.kill();
-            else
-                output.push(chunk);
-        });
-        child.stderr.on('data', (chunk) => errors.push(chunk));
-        child.once('error', rejectProcess);
-        child.once('close', (code) => {
-            if (code === 0 && outputBytes <= 1024)
-                return resolveProcess(Buffer.concat(output));
-            const message = Buffer.concat(errors).toString('utf8') || 'secure-filesystem-helper-failed';
-            const error = new Error(message);
-            const osCode = message.match(/^secure-filesystem-os:(E[A-Z0-9]+)$/)?.[1];
-            if (osCode)
-                error.code = osCode;
-            if (message === 'secure-filesystem-entry-exists')
-                error.code = 'EEXIST';
-            rejectProcess(error);
-        });
-        child.stdin.end(input);
-    });
-}
+`;function v(r=process.platform){return r!=="win32"}async function G(r,t,e,i={}){const s=`.${t}.${process.pid}.${B(8).toString("hex")}.tmp`;await y(r,["write",t,s],Buffer.isBuffer(e)?e:Buffer.from(e),i)}async function P(r,t,e,i,s={}){const n=`.${t}.${process.pid}.${B(8).toString("hex")}.tmp`;await y(r,["write-cas",t,n,i],Buffer.isBuffer(e)?e:Buffer.from(e),s)}async function H(r,t,e={}){await y(r,["remove",t],void 0,e)}async function W(r,t,e={}){await y(r,["mkdir",t],void 0,e)}async function $(r,t){const i=(await y(r,["mkdir-exclusive",t])).toString("utf8").match(/^secure-filesystem-identity:([0-9]+):([0-9]+)$/);if(!i)throw new Error("secure-filesystem-created-identity-missing");return Object.freeze({dev:i[1],ino:i[2]})}async function X(r){if(!v())throw new Error("secure-filesystem-platform-unsupported");const t=await w(r,{bigint:!0}),e=await x(r,{bigint:!0});if(t.isSymbolicLink()||!t.isDirectory()||!e.isDirectory()||t.dev!==e.dev||t.ino!==e.ino)throw new Error("secure-filesystem-directory-unsafe");return Object.freeze({dev:String(e.dev),ino:String(e.ino)})}async function Y(r,t,e,i,s,n={}){return O("git",r,t,e,i,s,n)}async function M(r,t,e,i,s,n={}){return O("node",r,t,e,i,s,n)}async function K(r,t,e,i){return O("npm",r,t,e,i)}async function O(r,t,e,i,s,n,f={}){if(!v(f.platform??process.platform))throw new Error("secure-filesystem-platform-unsupported");if(s.length===0||s.length>512||s.some(a=>typeof a!="string"||a.length>4096||a.includes("\0")))throw new Error("secure-git-args-invalid");const d=await x(t,{bigint:!0}),o=await w(t,{bigint:!0});if(!d.isDirectory()||o.isSymbolicLink()||!o.isDirectory()||d.dev!==o.dev||d.ino!==o.ino)throw new Error("secure-filesystem-parent-invalid");await f.beforeHandoff?.();const m=r==="git"?16*1024*1024:64*1024*1024;return await new Promise((a,p)=>{const l=f.afterHandoff?"1":"0",g=Buffer.from(JSON.stringify([...s])).toString("base64url"),c=b(process.execPath,["-e",k,String(d.dev),String(d.ino),e,i.dev,i.ino,g,l,r],{cwd:t,stdio:["pipe","pipe","pipe"]}),h=[],E=[];let S=0,_=!f.afterHandoff,I=!1;const N=async()=>{if(!I){I=!0;try{await f.afterHandoff?.(),_=!0,c.stdin.end(n===void 0?void 0:Buffer.isBuffer(n)?n:Buffer.from(n))}catch(u){c.kill(),p(u)}}};c.stdout.on("data",u=>{S+=u.length,S>m?c.kill():h.push(u)}),c.stderr.on("data",u=>{E.push(u),!_&&Buffer.concat(E).includes(Buffer.from(`secure-git-handoff-ready
+`))&&N()}),c.once("error",p),c.once("close",u=>{if(u===0&&S<=m)return a(Buffer.concat(h));const R=Buffer.concat(E).toString("utf8").split(`
+`).find(D=>D.startsWith("secure-git-")&&D!=="secure-git-handoff-ready")??(S>m?"secure-git-output-too-large":"secure-git-helper-failed");p(new Error(R))}),f.afterHandoff||N()})}async function q(r,t,e){await y(r,["create-owned-directory",t],Buffer.isBuffer(e)?e:Buffer.from(e))}async function J(r,t,e,i={}){await y(r,["rename-directory",t,e],void 0,i)}async function U(r,t,e={}){await y(r,["remove-directory",t],void 0,e)}async function y(r,t,e,i={}){if(!v(i.platform??process.platform))throw new Error("secure-filesystem-platform-unsupported");const s=await x(r,{bigint:!0});if(!s.isDirectory())throw new Error("secure-filesystem-parent-invalid");if((await w(r,{bigint:!0})).isSymbolicLink())throw new Error("secure-filesystem-parent-symlink");return await i.beforeHandoff?.(),await new Promise((f,d)=>{const o=b(process.execPath,["-e",T,...t.slice(0,1),String(s.dev),String(s.ino),...t.slice(1)],{cwd:r,stdio:["pipe","pipe","pipe"]}),m=[];let a=0;const p=[];o.stdout.on("data",l=>{a+=l.length,a>1024?o.kill():m.push(l)}),o.stderr.on("data",l=>p.push(l)),o.once("error",d),o.once("close",l=>{if(l===0&&a<=1024)return f(Buffer.concat(m));const g=Buffer.concat(p).toString("utf8")||"secure-filesystem-helper-failed",c=new Error(g),h=g.match(/^secure-filesystem-os:(E[A-Z0-9]+)$/)?.[1];h&&(c.code=h),g==="secure-filesystem-entry-exists"&&(c.code="EEXIST"),d(c)}),o.stdin.end(e)})}export{G as anchoredAtomicWriteFile,P as anchoredCompareAndSwapFile,$ as anchoredCreateDirectory,q as anchoredCreateOwnedDirectory,X as anchoredDirectoryIdentity,W as anchoredEnsureDirectory,Y as anchoredExecuteGit,M as anchoredExecuteNode,K as anchoredExecuteNpm,U as anchoredRemoveDirectory,H as anchoredRemoveFile,J as anchoredRenameDirectory,v as secureFilesystemBoundaryAvailable};

package/packages/client/dist/graph-retrieval/pre-command-hook.js

@@ -1,284 +1 @@
-/**
- * P158.06 -- optional pre-command deterministic graph retrieval enrichment.
- *
- * The client collects a tiny, public, redacted context envelope for commands
- * resolved by the shared command context policy shadow. It never constructs
- * workflow prompts or decides orchestration; the server validates and decides
- * whether to consume this auxiliary metadata.
- */
-import { createHash } from 'node:crypto';
-import { existsSync, readFileSync, statSync } from 'node:fs';
-import { join } from 'node:path';
-import { DEFAULT_GRAPH_RETRIEVAL_BUDGETS, createGraphRetrievalMetadata, normalizeGraphRetrievalPath, resolveClientCommandContextPolicy, } from './shared-graph-retrieval-contract.js';
-import { admitInvocation, } from '../../../shared/dist/invocation/index.js';
-const CONTRACT_VERSION = 'client-pre-command-v1';
-const DEFAULT_GENERATED_AT = '1970-01-01T00:00:00.000Z';
-const ARCHIVE_PATH_SEGMENTS = new Set(['.archive', '_archive', '_archives', 'archive', 'archives', 'archived']);
-const DEFAULT_FILE_READER = Object.freeze({
-    exists: existsSync,
-    stat: statSync,
-    readText: (path) => readFileSync(path, 'utf8'),
-});
-export function admitGraphInvocation(args) {
-    return admitInvocation(args);
-}
-function resolveAdmission(args) {
-    const admission = admitGraphInvocation(args);
-    if (admission.outcome !== 'resolved')
-        return null;
-    const policy = resolveClientCommandContextPolicy(admission.selection.commandId);
-    return policy ? { policy, selection: admission.selection } : null;
-}
-function stableHash(input) {
-    return createHash('sha256').update(input).digest('hex');
-}
-function isUnsafeGraphRetrievalPath(relativePath) {
-    const normalized = normalizeGraphRetrievalPath(relativePath);
-    const containsArchiveSegment = normalized
-        .split('/')
-        .some((segment) => ARCHIVE_PATH_SEGMENTS.has(segment.toLowerCase()));
-    return normalized.length === 0 ||
-        normalized.startsWith('/') ||
-        normalized.startsWith('..') ||
-        normalized.includes('/../') ||
-        containsArchiveSegment ||
-        /(^|\/)\.env(?:$|[./-])/i.test(normalized) ||
-        /(^|\/)(?:credentials?|secrets?|tokens?|private-prompts?|raw-logs?)(?:\.|\/|$)/i.test(normalized) ||
-        /\.(?:sqlite|db|pem|key|p12|pfx|crt|cer|der|bin)$/i.test(normalized);
-}
-function sourceFor(projectRoot, relativePath, fileReader) {
-    const normalized = normalizeGraphRetrievalPath(relativePath);
-    if (isUnsafeGraphRetrievalPath(normalized)) {
-        return null;
-    }
-    const absolute = join(projectRoot, normalized);
-    if (!fileReader.exists(absolute))
-        return null;
-    const stat = fileReader.stat(absolute);
-    if (!stat.isFile() || stat.size > 96 * 1024)
-        return null;
-    const content = fileReader.readText(absolute);
-    return {
-        kind: 'repo-path',
-        path: normalized,
-        contentHash: stableHash(content).slice(0, 16),
-        mtimeMs: Math.floor(stat.mtimeMs),
-    };
-}
-function redactPublicText(input) {
-    let text = input;
-    const before = text;
-    text = text.replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi, '[REDACTED_EMAIL]');
-    text = text.replace(/\b(api[-_ ]?key|license[-_ ]?key|token|password|secret)\b\s*[:=]\s*[^\s`'"\])}]+/gi, '$1=[REDACTED_SECRET]');
-    text = text.replace(/\b(?:sk|pk|ghp|github_pat|pat)_[A-Za-z0-9_\-]{16,}\b/g, '[REDACTED_TOKEN]');
-    text = text.replace(/\b[A-Za-z0-9+/]{32,}={0,2}\b/g, '[REDACTED_TOKEN]');
-    text = text.replace(/<!--\s*(?:server|private|proprietary)[\s\S]*?-->/gi, '[REDACTED_PRIVATE_PROMPT]');
-    text = text.replace(/\b(?:private|proprietary|protected)\s+(?:prompt|workflow|step\s*body|orchestration)\b[^.!?\n]*/gi, '[REDACTED_PRIVATE_PROMPT]');
-    return { text, redacted: text !== before };
-}
-function compactSummary(content, maxChars = DEFAULT_GRAPH_RETRIEVAL_BUDGETS.maxSnippetChars) {
-    const lines = content
-        .split(/\r?\n/)
-        .map((line) => line.trim())
-        .filter((line) => line.length > 0 && !line.startsWith('---') && !line.startsWith('<!--'))
-        .slice(0, 8)
-        .join(' ');
-    const redacted = redactPublicText(lines);
-    return {
-        summary: redacted.text.slice(0, maxChars),
-        redacted: redacted.redacted,
-    };
-}
-function readItem(projectRoot, params, fileReader) {
-    const source = sourceFor(projectRoot, params.path, fileReader);
-    if (!source)
-        return null;
-    const content = fileReader.readText(join(projectRoot, source.path));
-    const summary = compactSummary(content, params.maxSnippetChars);
-    return {
-        nodeType: params.nodeType,
-        stableId: params.stableId,
-        source,
-        confidence: summary.redacted ? Math.min(params.confidence, 0.72) : params.confidence,
-        reasonCode: params.reasonCode,
-        budgetCost: params.budgetCost,
-        summary: summary.summary,
-        warnings: summary.redacted ? ['redacted_sensitive_content'] : undefined,
-        score: params.score,
-    };
-}
-function generatedCommandItem(policy) {
-    const summary = `Public command ${policy.commandId}; graphRetrieval profile ${policy.retrievalProfile}; context is auxiliary, redacted, budgeted and non-authoritative.`;
-    return {
-        nodeType: 'Command',
-        stableId: `command:${policy.commandId}`,
-        source: {
-            kind: 'command',
-            path: policy.commandId,
-            contentHash: stableHash(summary).slice(0, 16),
-        },
-        confidence: 0.88,
-        reasonCode: 'command_surface_match',
-        budgetCost: 1,
-        summary: summary.slice(0, policy.retrievalBudget.maxSnippetChars),
-        score: 90,
-    };
-}
-function targetTokens(selection) {
-    const typedPath = selection.uiUxReview?.architectureDir;
-    return typedPath ? [...selection.positionals, typedPath] : selection.positionals;
-}
-function extractStoryPath(tokens) {
-    const token = tokens.find((value) => /^@?docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/u.test(value));
-    return token?.replace(/^@/u, '') ?? null;
-}
-function extractEpicPath(tokens) {
-    const token = tokens.find((value) => /^@?docs\/epics\/[A-Za-z0-9._-]+\.md$/u.test(value));
-    return token?.replace(/^@/u, '') ?? null;
-}
-function extractEpicId(tokens) {
-    const storyPath = extractStoryPath(tokens);
-    const storyId = storyPath?.split('/').pop()?.replace(/\.story\.md$/, '');
-    const fromStory = storyId?.match(/^(P\d+)\./i)?.[1];
-    if (fromStory)
-        return fromStory.toUpperCase();
-    const direct = tokens
-        .map((value) => value.match(/^@?(?:docs\/epics\/epic-)?(P\d+)(?:\.md)?$/iu)?.[1])
-        .find((value) => Boolean(value));
-    return direct ? direct.toUpperCase() : null;
-}
-function extractMarkdownPaths(tokens) {
-    return tokens
-        .map((value) => value.match(/^@?((?:docs|core)\/[A-Za-z0-9_./-]+\.md)$/u)?.[1])
-        .filter((value) => Boolean(value))
-        .map((value) => normalizeGraphRetrievalPath(value))
-        .filter((path) => !isUnsafeGraphRetrievalPath(path));
-}
-function candidateKindForPath(path) {
-    if (path.startsWith('docs/stories/'))
-        return { nodeType: 'Story', reasonCode: 'story_scope_match' };
-    if (path.startsWith('docs/epics/'))
-        return { nodeType: 'Epic', reasonCode: 'epic_scope_match' };
-    if (path.includes('security') || path.includes('policy') || path.includes('standard'))
-        return { nodeType: 'Guardrail', reasonCode: 'guardrail_match' };
-    return { nodeType: 'Doc', reasonCode: 'architecture_reference' };
-}
-function addSpec(specs, spec) {
-    const normalized = normalizeGraphRetrievalPath(spec.path);
-    if (isUnsafeGraphRetrievalPath(normalized))
-        return;
-    const duplicate = specs.some((existing) => existing.nodeType === spec.nodeType && normalizeGraphRetrievalPath(existing.path) === normalized);
-    if (!duplicate)
-        specs.push({ ...spec, path: normalized });
-}
-function addTargetSpecs(specs, tokens, maxSnippetChars) {
-    const storyPath = extractStoryPath(tokens);
-    if (storyPath) {
-        const storyId = storyPath.split('/').pop()?.replace(/\.story\.md$/, '') ?? storyPath;
-        addSpec(specs, { path: storyPath, nodeType: 'Story', stableId: storyId, reasonCode: 'story_scope_match', confidence: 0.96, budgetCost: 3, score: 96, maxSnippetChars });
-    }
-    const epicPath = extractEpicPath(tokens);
-    const epicId = extractEpicId(tokens);
-    if (epicPath) {
-        const stableId = epicPath.split('/').pop()?.replace(/\.md$/, '') ?? epicPath;
-        addSpec(specs, { path: epicPath, nodeType: 'Epic', stableId, reasonCode: 'epic_scope_match', confidence: 0.92, budgetCost: 3, score: 92, maxSnippetChars });
-    }
-    else if (epicId) {
-        addSpec(specs, { path: `docs/epics/epic-${epicId}.md`, nodeType: 'Epic', stableId: epicId, reasonCode: 'epic_scope_match', confidence: 0.9, budgetCost: 3, score: 90, maxSnippetChars });
-    }
-    for (const path of extractMarkdownPaths(tokens)) {
-        const stableId = path.split('/').pop()?.replace(/\.md$/, '').replace(/\.story$/, '') ?? path;
-        const kind = candidateKindForPath(path);
-        addSpec(specs, { path, stableId, ...kind, confidence: 0.84, budgetCost: 3, score: 82, maxSnippetChars });
-    }
-}
-function collectCandidateItems(policy, selection, projectRoot, fileReader) {
-    const maxSnippetChars = policy.retrievalBudget.maxSnippetChars;
-    const specs = [];
-    addSpec(specs, { path: 'NEOCORTEX.md', nodeType: 'CanonicalMemory', stableId: 'canonical-memory', reasonCode: 'canonical_memory_seed', confidence: 0.92, budgetCost: 4, score: 100, maxSnippetChars });
-    addSpec(specs, { path: 'AGENTS.md', nodeType: 'PlatformMemory', stableId: 'platform-memory:agents', reasonCode: 'platform_memory_reference', confidence: 0.7, budgetCost: 2, score: 66, maxSnippetChars });
-    addSpec(specs, { path: 'package.json', nodeType: 'Package', stableId: 'root-package', reasonCode: 'package_surface_match', confidence: 0.78, budgetCost: 2, score: 72, maxSnippetChars });
-    if (policy.retrievalProfile !== 'utility' || policy.commandId === 'ui-ux-review') {
-        addSpec(specs, { path: 'docs/arquitetura-software/deterministic-graph-retrieval.md', nodeType: 'Doc', stableId: 'deterministic-graph-retrieval', reasonCode: 'architecture_reference', confidence: 0.9, budgetCost: 4, score: 84, maxSnippetChars });
-    }
-    addTargetSpecs(specs, targetTokens(selection), maxSnippetChars);
-    if (['story-execution', 'diagnostic', 'research', 'review', 'qa', 'recovery', 'planning'].includes(policy.retrievalProfile) || policy.commandId === 'tech-debt') {
-        addSpec(specs, { path: '.neocortex/tech-debt-registry.json', nodeType: 'Debt', stableId: 'tech-debt-registry', reasonCode: 'debt_area_match', confidence: 0.74, budgetCost: 3, score: 76, maxSnippetChars });
-    }
-    if (['story-execution', 'diagnostic', 'research', 'review', 'qa', 'recovery', 'planning', 'architecture'].includes(policy.retrievalProfile)) {
-        addSpec(specs, { path: 'core/standards/spec-driven-development.md', nodeType: 'Guardrail', stableId: 'spec-driven-development', reasonCode: 'guardrail_match', confidence: 0.82, budgetCost: 3, score: 78, maxSnippetChars });
-    }
-    if (policy.retrievalProfile === 'security') {
-        addSpec(specs, { path: 'docs/architecture/solyd-security-system-contract.md', nodeType: 'Guardrail', stableId: 'solyd-security-system-contract', reasonCode: 'guardrail_match', confidence: 0.86, budgetCost: 3, score: 84, maxSnippetChars });
-    }
-    if (policy.retrievalProfile === 'continuity') {
-        addSpec(specs, { path: 'core/standards/enterprise-continuity-plane.md', nodeType: 'Guardrail', stableId: 'enterprise-continuity-plane', reasonCode: 'guardrail_match', confidence: 0.86, budgetCost: 3, score: 84, maxSnippetChars });
-        addSpec(specs, { path: 'docs/runbooks/enterprise-continuity-runner.md', nodeType: 'Doc', stableId: 'enterprise-continuity-runner', reasonCode: 'architecture_reference', confidence: 0.78, budgetCost: 3, score: 72, maxSnippetChars });
-    }
-    if (['utility', 'continuity', 'recovery'].includes(policy.retrievalProfile)) {
-        addSpec(specs, { path: '.neocortex/state.json', nodeType: 'State', stableId: 'project-state', reasonCode: 'state_status_match', confidence: 0.68, budgetCost: 3, score: 70, maxSnippetChars });
-    }
-    return [generatedCommandItem(policy), ...specs
-            .map((spec) => readItem(projectRoot, spec, fileReader))
-            .filter((item) => item !== null)];
-}
-function enforceSerializedPayloadLimit(metadata) {
-    let items = [...metadata.items];
-    let next = metadata;
-    const maxPayloadBytes = Math.min(metadata.budget.maxPayloadBytes, DEFAULT_GRAPH_RETRIEVAL_BUDGETS.maxPayloadBytes);
-    while (Buffer.byteLength(JSON.stringify(next), 'utf8') > maxPayloadBytes && items.length > 0) {
-        const removed = items.pop();
-        const base = createGraphRetrievalMetadata({
-            retrievalId: metadata.retrievalId,
-            query: metadata.query,
-            items,
-            generatedAt: metadata.generatedAt,
-            warnings: metadata.warnings,
-            budgets: metadata.budget,
-        });
-        next = {
-            ...base,
-            skipped: removed
-                ? [...base.skipped, { stableId: removed.stableId, source: removed.source, reasonCode: 'budget_exceeded' }]
-                : base.skipped,
-            contractVersion: CONTRACT_VERSION,
-            command: metadata.command,
-        };
-    }
-    return next;
-}
-export async function runGraphRetrievalHook(ctx) {
-    const resolved = resolveAdmission(ctx.args);
-    if (!resolved) {
-        return { applied: false, reason: 'command_not_allowlisted' };
-    }
-    const { policy, selection } = resolved;
-    const command = policy.commandId;
-    try {
-        const items = collectCandidateItems(policy, selection, ctx.projectRoot, ctx.fileReader ?? DEFAULT_FILE_READER);
-        if (items.length === 0)
-            return { applied: false, reason: 'no_items', command, profile: policy.retrievalProfile };
-        // Query and target projection consume only values emitted by the exact
-        // admission authority. Raw quoting/option syntax is never reparsed here.
-        const query = redactPublicText(selection.positionals.join(' ').slice(0, 240)).text;
-        const retrievalId = stableHash(`${CONTRACT_VERSION}:${command}:${query}:${items.map((item) => `${item.source.path}:${item.source.contentHash ?? ''}`).sort().join('|')}`).slice(0, 24);
-        const base = createGraphRetrievalMetadata({
-            retrievalId,
-            query,
-            items,
-            generatedAt: ctx.nowIso ?? DEFAULT_GENERATED_AT,
-            budgets: policy.retrievalBudget,
-        });
-        const metadata = enforceSerializedPayloadLimit({
-            ...base,
-            contractVersion: CONTRACT_VERSION,
-            command,
-        });
-        return { applied: true, reason: 'applied', command, profile: policy.retrievalProfile, metadata };
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        ctx.logger?.warn?.(`[neocortex] graph retrieval hook failed: ${msg}. Proceeding without enrichment.`);
-        return { applied: false, reason: 'hook_error', command, profile: policy.retrievalProfile, warning: msg };
-    }
-}
+import{createHash as v}from"node:crypto";import{existsSync as T,readFileSync as I,statSync as E}from"node:fs";import{join as h}from"node:path";import{DEFAULT_GRAPH_RETRIEVAL_BUDGETS as y,createGraphRetrievalMetadata as g,normalizeGraphRetrievalPath as i,resolveClientCommandContextPolicy as P}from"./shared-graph-retrieval-contract.js";import{admitInvocation as A}from"../../../shared/dist/invocation/index.js";const u="client-pre-command-v1",x="1970-01-01T00:00:00.000Z",R=new Set([".archive","_archive","_archives","archive","archives","archived"]),S=Object.freeze({exists:T,stat:E,readText:e=>I(e,"utf8")});function k(e){return A(e)}function $(e){const t=k(e);if(t.outcome!=="resolved")return null;const o=P(t.selection.commandId);return o?{policy:o,selection:t.selection}:null}function p(e){return v("sha256").update(e).digest("hex")}function m(e){const t=i(e),o=t.split("/").some(s=>R.has(s.toLowerCase()));return t.length===0||t.startsWith("/")||t.startsWith("..")||t.includes("/../")||o||/(^|\/)\.env(?:$|[./-])/i.test(t)||/(^|\/)(?:credentials?|secrets?|tokens?|private-prompts?|raw-logs?)(?:\.|\/|$)/i.test(t)||/\.(?:sqlite|db|pem|key|p12|pfx|crt|cer|der|bin)$/i.test(t)}function D(e,t,o){const s=i(t);if(m(s))return null;const r=h(e,s);if(!o.exists(r))return null;const n=o.stat(r);if(!n.isFile()||n.size>96*1024)return null;const a=o.readText(r);return{kind:"repo-path",path:s,contentHash:p(a).slice(0,16),mtimeMs:Math.floor(n.mtimeMs)}}function b(e){let t=e;const o=t;return t=t.replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi,"[REDACTED_EMAIL]"),t=t.replace(/\b(api[-_ ]?key|license[-_ ]?key|token|password|secret)\b\s*[:=]\s*[^\s`'"\])}]+/gi,"$1=[REDACTED_SECRET]"),t=t.replace(/\b(?:sk|pk|ghp|github_pat|pat)_[A-Za-z0-9_\-]{16,}\b/g,"[REDACTED_TOKEN]"),t=t.replace(/\b[A-Za-z0-9+/]{32,}={0,2}\b/g,"[REDACTED_TOKEN]"),t=t.replace(/<!--\s*(?:server|private|proprietary)[\s\S]*?-->/gi,"[REDACTED_PRIVATE_PROMPT]"),t=t.replace(/\b(?:private|proprietary|protected)\s+(?:prompt|workflow|step\s*body|orchestration)\b[^.!?\n]*/gi,"[REDACTED_PRIVATE_PROMPT]"),{text:t,redacted:t!==o}}function w(e,t=y.maxSnippetChars){const o=e.split(/\r?\n/).map(r=>r.trim()).filter(r=>r.length>0&&!r.startsWith("---")&&!r.startsWith("<!--")).slice(0,8).join(" "),s=b(o);return{summary:s.text.slice(0,t),redacted:s.redacted}}function G(e,t,o){const s=D(e,t.path,o);if(!s)return null;const r=o.readText(h(e,s.path)),n=w(r,t.maxSnippetChars);return{nodeType:t.nodeType,stableId:t.stableId,source:s,confidence:n.redacted?Math.min(t.confidence,.72):t.confidence,reasonCode:t.reasonCode,budgetCost:t.budgetCost,summary:n.summary,warnings:n.redacted?["redacted_sensitive_content"]:void 0,score:t.score}}function M(e){const t=`Public command ${e.commandId}; graphRetrieval profile ${e.retrievalProfile}; context is auxiliary, redacted, budgeted and non-authoritative.`;return{nodeType:"Command",stableId:`command:${e.commandId}`,source:{kind:"command",path:e.commandId,contentHash:p(t).slice(0,16)},confidence:.88,reasonCode:"command_surface_match",budgetCost:1,summary:t.slice(0,e.retrievalBudget.maxSnippetChars),score:90}}function z(e){const t=e.uiUxReview?.architectureDir;return t?[...e.positionals,t]:e.positionals}function _(e){return e.find(o=>/^@?docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/u.test(o))?.replace(/^@/u,"")??null}function B(e){return e.find(o=>/^@?docs\/epics\/[A-Za-z0-9._-]+\.md$/u.test(o))?.replace(/^@/u,"")??null}function O(e){const s=_(e)?.split("/").pop()?.replace(/\.story\.md$/,"")?.match(/^(P\d+)\./i)?.[1];if(s)return s.toUpperCase();const r=e.map(n=>n.match(/^@?(?:docs\/epics\/epic-)?(P\d+)(?:\.md)?$/iu)?.[1]).find(n=>!!n);return r?r.toUpperCase():null}function j(e){return e.map(t=>t.match(/^@?((?:docs|core)\/[A-Za-z0-9_./-]+\.md)$/u)?.[1]).filter(t=>!!t).map(t=>i(t)).filter(t=>!m(t))}function H(e){return e.startsWith("docs/stories/")?{nodeType:"Story",reasonCode:"story_scope_match"}:e.startsWith("docs/epics/")?{nodeType:"Epic",reasonCode:"epic_scope_match"}:e.includes("security")||e.includes("policy")||e.includes("standard")?{nodeType:"Guardrail",reasonCode:"guardrail_match"}:{nodeType:"Doc",reasonCode:"architecture_reference"}}function c(e,t){const o=i(t.path);if(m(o))return;e.some(r=>r.nodeType===t.nodeType&&i(r.path)===o)||e.push({...t,path:o})}function L(e,t,o){const s=_(t);if(s){const a=s.split("/").pop()?.replace(/\.story\.md$/,"")??s;c(e,{path:s,nodeType:"Story",stableId:a,reasonCode:"story_scope_match",confidence:.96,budgetCost:3,score:96,maxSnippetChars:o})}const r=B(t),n=O(t);if(r){const a=r.split("/").pop()?.replace(/\.md$/,"")??r;c(e,{path:r,nodeType:"Epic",stableId:a,reasonCode:"epic_scope_match",confidence:.92,budgetCost:3,score:92,maxSnippetChars:o})}else n&&c(e,{path:`docs/epics/epic-${n}.md`,nodeType:"Epic",stableId:n,reasonCode:"epic_scope_match",confidence:.9,budgetCost:3,score:90,maxSnippetChars:o});for(const a of j(t)){const d=a.split("/").pop()?.replace(/\.md$/,"").replace(/\.story$/,"")??a,l=H(a);c(e,{path:a,stableId:d,...l,confidence:.84,budgetCost:3,score:82,maxSnippetChars:o})}}function N(e,t,o,s){const r=e.retrievalBudget.maxSnippetChars,n=[];return c(n,{path:"NEOCORTEX.md",nodeType:"CanonicalMemory",stableId:"canonical-memory",reasonCode:"canonical_memory_seed",confidence:.92,budgetCost:4,score:100,maxSnippetChars:r}),c(n,{path:"AGENTS.md",nodeType:"PlatformMemory",stableId:"platform-memory:agents",reasonCode:"platform_memory_reference",confidence:.7,budgetCost:2,score:66,maxSnippetChars:r}),c(n,{path:"package.json",nodeType:"Package",stableId:"root-package",reasonCode:"package_surface_match",confidence:.78,budgetCost:2,score:72,maxSnippetChars:r}),(e.retrievalProfile!=="utility"||e.commandId==="ui-ux-review")&&c(n,{path:"docs/arquitetura-software/deterministic-graph-retrieval.md",nodeType:"Doc",stableId:"deterministic-graph-retrieval",reasonCode:"architecture_reference",confidence:.9,budgetCost:4,score:84,maxSnippetChars:r}),L(n,z(t),r),(["story-execution","diagnostic","research","review","qa","recovery","planning"].includes(e.retrievalProfile)||e.commandId==="tech-debt")&&c(n,{path:".neocortex/tech-debt-registry.json",nodeType:"Debt",stableId:"tech-debt-registry",reasonCode:"debt_area_match",confidence:.74,budgetCost:3,score:76,maxSnippetChars:r}),["story-execution","diagnostic","research","review","qa","recovery","planning","architecture"].includes(e.retrievalProfile)&&c(n,{path:"core/standards/spec-driven-development.md",nodeType:"Guardrail",stableId:"spec-driven-development",reasonCode:"guardrail_match",confidence:.82,budgetCost:3,score:78,maxSnippetChars:r}),e.retrievalProfile==="security"&&c(n,{path:"docs/architecture/solyd-security-system-contract.md",nodeType:"Guardrail",stableId:"solyd-security-system-contract",reasonCode:"guardrail_match",confidence:.86,budgetCost:3,score:84,maxSnippetChars:r}),e.retrievalProfile==="continuity"&&(c(n,{path:"core/standards/enterprise-continuity-plane.md",nodeType:"Guardrail",stableId:"enterprise-continuity-plane",reasonCode:"guardrail_match",confidence:.86,budgetCost:3,score:84,maxSnippetChars:r}),c(n,{path:"docs/runbooks/enterprise-continuity-runner.md",nodeType:"Doc",stableId:"enterprise-continuity-runner",reasonCode:"architecture_reference",confidence:.78,budgetCost:3,score:72,maxSnippetChars:r})),["utility","continuity","recovery"].includes(e.retrievalProfile)&&c(n,{path:".neocortex/state.json",nodeType:"State",stableId:"project-state",reasonCode:"state_status_match",confidence:.68,budgetCost:3,score:70,maxSnippetChars:r}),[M(e),...n.map(a=>G(o,a,s)).filter(a=>a!==null)]}function Z(e){let t=[...e.items],o=e;const s=Math.min(e.budget.maxPayloadBytes,y.maxPayloadBytes);for(;Buffer.byteLength(JSON.stringify(o),"utf8")>s&&t.length>0;){const r=t.pop(),n=g({retrievalId:e.retrievalId,query:e.query,items:t,generatedAt:e.generatedAt,warnings:e.warnings,budgets:e.budget});o={...n,skipped:r?[...n.skipped,{stableId:r.stableId,source:r.source,reasonCode:"budget_exceeded"}]:n.skipped,contractVersion:u,command:e.command}}return o}async function K(e){const t=$(e.args);if(!t)return{applied:!1,reason:"command_not_allowlisted"};const{policy:o,selection:s}=t,r=o.commandId;try{const n=N(o,s,e.projectRoot,e.fileReader??S);if(n.length===0)return{applied:!1,reason:"no_items",command:r,profile:o.retrievalProfile};const a=b(s.positionals.join(" ").slice(0,240)).text,d=p(`${u}:${r}:${a}:${n.map(f=>`${f.source.path}:${f.source.contentHash??""}`).sort().join("|")}`).slice(0,24),l=g({retrievalId:d,query:a,items:n,generatedAt:e.nowIso??x,budgets:o.retrievalBudget}),C=Z({...l,contractVersion:u,command:r});return{applied:!0,reason:"applied",command:r,profile:o.retrievalProfile,metadata:C}}catch(n){const a=n instanceof Error?n.message:String(n);return e.logger?.warn?.(`[neocortex] graph retrieval hook failed: ${a}. Proceeding without enrichment.`),{applied:!1,reason:"hook_error",command:r,profile:o.retrievalProfile,warning:a}}}export{k as admitGraphInvocation,K as runGraphRetrievalHook};