@ornexus/neocortex 4.60.71 → 4.60.73

package/packages/client/dist/continuity/autonomous-governance.js

@@ -1 +1,285 @@
-import{createHash as y}from"node:crypto";const c=1,R="autonomous_governance_audit",s="[P199-EV-GOVERNANCE]",p=Object.freeze({OK:"continuity-ok",BYPASS_BLOCKED:"headless-directive-rejected"}),S=/^\*yolo @(?<target>docs\/stories\/(?<storyId>[A-Za-z0-9._-]+)\.story\.md)$/,T=/^\*yoloop @(?<target>docs\/epics\/epic-(?<epicId>[A-Za-z0-9._-]+)\.md)$/,O=/^\*yoloop @(?<target>docs\/epics\/?|docs\/epics)$/,K=/^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/,v=/^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/,$=/^docs\/epics\/?$/,C=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/,N=/^sha256:[a-f0-9]{64}$/,P=/(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i;function G(e){const o=e.trim(),r=o.match(S);if(r?.groups?.target&&r.groups.storyId)return{autonomousKind:"yolo",source:"direct-yolo",targetKind:"story",targetRef:r.groups.target,storyId:r.groups.storyId,commandHash:u(o)};const t=o.match(T);return t?.groups?.target&&t.groups.epicId?{autonomousKind:"yoloop",source:"direct-yoloop",targetKind:"epic",targetRef:t.groups.target,epicId:t.groups.epicId,commandHash:u(o)}:o.match(O)?.groups?.target?{autonomousKind:"yoloop",source:"direct-yoloop",targetKind:"epic_directory",targetRef:"docs/epics/",commandHash:u(o)}:null}function D(e){return G(e)!==null}function U(e){const o=e.storyId??e.epicId??e.targetRef,r=g(o),t=e.operationSeed??`${e.autonomousKind}:${e.source}:${e.targetRef}:${e.jobId??""}`,a=k(t),_=e.jobId??`job-${g(e.autonomousKind)}-${r}`.slice(0,96),h=`exec-gov-${r}-${a}`.slice(0,120),b=`audit-gov-${r}-${a}`.slice(0,120),E=`receipt-gov-${r}-${a}`.slice(0,120),A=e.commandHash??u(`${e.autonomousKind}:${e.targetRef}`);return{schemaVersion:1,contractVersion:"continuity-v1",governanceVersion:c,envelopeId:`gov-${r}-${a}`.slice(0,120),jobId:_,executionId:h,auditId:b,receiptId:E,autonomousKind:e.autonomousKind,source:e.source,targetKind:e.targetKind,targetRef:e.targetRef,...e.storyId?{storyId:e.storyId}:{},...e.epicId?{epicId:e.epicId}:{},status:e.status??"accepted",reasonCode:e.reasonCode??p.OK,publicSummary:`${s} Autonomous execution accepted under public continuity governance.`,counts:{targets:1},hashes:{command:A},relativePaths:[e.targetRef],publicSafe:!0}}function l(e,o){const r=[];if(!d(e))return i("autonomousGovernance",r);const t=e;t.schemaVersion!==1&&r.push(n("schemaVersion","unsafe_key","value-denied")),t.contractVersion!=="continuity-v1"&&r.push(n("contractVersion","unsafe_key","value-denied")),t.governanceVersion!==c&&r.push(n("governanceVersion","unsafe_key","value-denied")),t.publicSafe!==!0&&r.push(n("publicSafe","unsafe_key","value-denied")),t.status!=="accepted"&&r.push(n("status","unsafe_key","value-denied"));for(const a of["envelopeId","jobId","executionId","auditId","receiptId","reasonCode"])f(t[a])||r.push(n(a,"unsafe_key","value-denied"));return j(t.autonomousKind)||r.push(n("autonomousKind","unsafe_key","value-denied")),V(t.source)||r.push(n("source","unsafe_key","value-denied")),t.targetKind!=="story"&&t.targetKind!=="epic"&&t.targetKind!=="epic_directory"&&r.push(n("targetKind","unsafe_key","value-denied")),(typeof t.targetRef!="string"||!x(t.targetKind,t.targetRef))&&r.push(n("targetRef","prompt_body","value-denied")),t.storyId!==void 0&&(!f(t.storyId)||t.targetKind!=="story")&&r.push(n("storyId","prompt_body","value-denied")),t.epicId!==void 0&&(!f(t.epicId)||t.targetKind!=="epic")&&r.push(n("epicId","prompt_body","value-denied")),(typeof t.publicSummary!="string"||t.publicSummary.length>240||m(t.publicSummary))&&r.push(n("publicSummary","unbounded_text","value-denied")),(!d(t.counts)||typeof t.counts.targets!="number")&&r.push(n("counts","unsafe_key","value-denied")),(!d(t.hashes)||typeof t.hashes.command!="string"||!N.test(t.hashes.command))&&r.push(n("hashes.command","prompt_body","value-denied")),(!Array.isArray(t.relativePaths)||t.relativePaths.length!==1||t.relativePaths[0]!==t.targetRef)&&r.push(n("relativePaths","local_absolute_path","value-denied")),o?.autonomousKind&&t.autonomousKind!==o.autonomousKind&&r.push(n("autonomousKind","unsafe_key","operation-denied")),o?.jobId&&t.jobId!==o.jobId&&r.push(n("jobId","unsafe_key","operation-denied")),o?.targetKind&&t.targetKind!==o.targetKind&&r.push(n("targetKind","prompt_body","operation-denied")),o?.targetRef&&t.targetRef!==o.targetRef&&r.push(n("targetRef","prompt_body","operation-denied")),r.length>0?i("autonomousGovernance",r):{ok:!0,envelope:t}}function Y(e,o){if(!e)return i("autonomousGovernance",[]);try{const r=JSON.parse(e);return d(r)?l(r.autonomousGovernance,o):i("autonomousGovernance",[])}catch{return i("autonomousGovernance",[])}}function Z(e,o,r,t={}){const a=l(o);return a.ok?t.requireExistingJob&&!e.jobExists(o.jobId)?I(o,`${s} Governance bypass blocked before autonomous execution.`):(e.runInTransaction(()=>{t.requireExistingJob||e.recordJob({jobId:o.jobId,kind:"runner",status:"active",createdAt:r,updatedAt:r,summary:`${s} Governed autonomous execution job.`,reasonCode:o.reasonCode,operationId:`${o.executionId}:job`,idempotencyKey:`${o.envelopeId}:job`,metadata:{autonomousGovernance:o,publicSafe:!0}}),e.appendEvent({eventId:o.auditId,jobId:o.jobId,operationId:`${o.executionId}:audit`,idempotencyKey:`${o.envelopeId}:audit`,type:R,summary:o.publicSummary,reasonCode:o.reasonCode,createdAt:r,metadata:{autonomousGovernance:o,publicSafe:!0}}),e.appendReceipt({receiptId:o.receiptId,jobId:o.jobId,operationId:`${o.executionId}:receipt`,idempotencyKey:`${o.envelopeId}:receipt`,status:"accepted",reasonCode:o.reasonCode,appliedOperationIds:[o.executionId],createdAt:r,metadata:{autonomousGovernance:o,publicSafe:!0}})}),{ok:!0,envelope:o,reasonCode:o.reasonCode,publicSummary:o.publicSummary,publicSafe:!0}):I(o,a.publicSummary)}function B(e,o){return{...o??{},autonomousGovernance:e,governanceVersion:c,governanceEvidence:s,publicSafe:!0}}function i(e,o){return{ok:!1,reasonCode:p.BYPASS_BLOCKED,publicSummary:`${s} Governance envelope missing or invalid before autonomous execution.`,redactionSummary:o.length>0?o:[n(e,"unsafe_key","operation-denied")]}}function I(e,o){return{ok:!1,envelope:e,reasonCode:p.BYPASS_BLOCKED,publicSummary:o,publicSafe:!0}}function u(e){return`sha256:${y("sha256").update(e).digest("hex")}`}function k(e){return y("sha256").update(e).digest("hex").slice(0,12)}function g(e){return(e.replace(/^docs\/stories\//,"").replace(/^docs\/epics\/epic-/,"").replace(/\.story\.md$/,"").replace(/\.md$/,"").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"autonomous").slice(0,60)}function f(e){return typeof e=="string"&&C.test(e)&&!m(e)}function j(e){return e==="yolo"||e==="yoloop"||e==="run_yolo"||e==="run_yoloop"}function V(e){return e==="direct-yolo"||e==="direct-yoloop"||e==="headless-run-yolo"||e==="headless-run-yoloop"||e==="delegated-subagent"}function x(e,o){return m(o)?!1:e==="story"?K.test(o):e==="epic"?v.test(o):e==="epic_directory"?$.test(o):!1}function m(e){return P.test(e)||/[;&|`$<>\n\r\0]/.test(e)}function d(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function n(e,o,r){return{field:e,reason:o,evidence:r,publicSafe:!0}}export{R as AUTONOMOUS_GOVERNANCE_EVENT_TYPE,s as AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG,p as AUTONOMOUS_GOVERNANCE_REASON_CODES,c as AUTONOMOUS_GOVERNANCE_VERSION,B as autonomousGovernanceMetadata,U as buildAutonomousGovernanceEnvelope,D as isAutonomousInvoke,G as parseAutonomousInvokeIntent,Y as readAutonomousGovernanceEnvelopeFromMetadata,Z as recordAutonomousGovernance,l as validateAutonomousGovernanceEnvelope};
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P199.03 -- public-safe autonomous execution governance envelope.
+ */
+import { createHash } from 'node:crypto';
+export const AUTONOMOUS_GOVERNANCE_VERSION = 1;
+export const AUTONOMOUS_GOVERNANCE_EVENT_TYPE = 'autonomous_governance_audit';
+export const AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG = '[P199-EV-GOVERNANCE]';
+export const AUTONOMOUS_GOVERNANCE_REASON_CODES = Object.freeze({
+    OK: 'continuity-ok',
+    BYPASS_BLOCKED: 'headless-directive-rejected',
+});
+const DIRECT_YOLO_PATTERN = /^\*yolo @(?<target>docs\/stories\/(?<storyId>[A-Za-z0-9._-]+)\.story\.md)$/;
+const DIRECT_YOLOOP_PATTERN = /^\*yoloop @(?<target>docs\/epics\/epic-(?<epicId>[A-Za-z0-9._-]+)\.md)$/;
+const DIRECT_YOLOOP_DIRECTORY_PATTERN = /^\*yoloop @(?<target>docs\/epics\/?|docs\/epics)$/;
+const STORY_TARGET_PATTERN = /^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/;
+const EPIC_TARGET_PATTERN = /^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/;
+const EPIC_DIRECTORY_TARGET_PATTERN = /^docs\/epics\/?$/;
+const SAFE_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/;
+const HASH_PATTERN = /^sha256:[a-f0-9]{64}$/;
+const UNSAFE_VALUE_PATTERN = /(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i;
+export function parseAutonomousInvokeIntent(args) {
+    const trimmed = args.trim();
+    const yolo = trimmed.match(DIRECT_YOLO_PATTERN);
+    if (yolo?.groups?.target && yolo.groups.storyId) {
+        return {
+            autonomousKind: 'yolo',
+            source: 'direct-yolo',
+            targetKind: 'story',
+            targetRef: yolo.groups.target,
+            storyId: yolo.groups.storyId,
+            commandHash: hashPublicValue(trimmed),
+        };
+    }
+    const yoloop = trimmed.match(DIRECT_YOLOOP_PATTERN);
+    if (yoloop?.groups?.target && yoloop.groups.epicId) {
+        return {
+            autonomousKind: 'yoloop',
+            source: 'direct-yoloop',
+            targetKind: 'epic',
+            targetRef: yoloop.groups.target,
+            epicId: yoloop.groups.epicId,
+            commandHash: hashPublicValue(trimmed),
+        };
+    }
+    const yoloopDirectory = trimmed.match(DIRECT_YOLOOP_DIRECTORY_PATTERN);
+    if (yoloopDirectory?.groups?.target) {
+        return {
+            autonomousKind: 'yoloop',
+            source: 'direct-yoloop',
+            targetKind: 'epic_directory',
+            targetRef: 'docs/epics/',
+            commandHash: hashPublicValue(trimmed),
+        };
+    }
+    return null;
+}
+export function isAutonomousInvoke(args) {
+    return parseAutonomousInvokeIntent(args) !== null;
+}
+export function buildAutonomousGovernanceEnvelope(input) {
+    const idBase = input.storyId ?? input.epicId ?? input.targetRef;
+    const safeBase = sanitizeIdPart(idBase);
+    const seed = input.operationSeed ?? `${input.autonomousKind}:${input.source}:${input.targetRef}:${input.jobId ?? ''}`;
+    const suffix = stableSuffix(seed);
+    const jobId = input.jobId ?? `job-${sanitizeIdPart(input.autonomousKind)}-${safeBase}`.slice(0, 96);
+    const executionId = `exec-gov-${safeBase}-${suffix}`.slice(0, 120);
+    const auditId = `audit-gov-${safeBase}-${suffix}`.slice(0, 120);
+    const receiptId = `receipt-gov-${safeBase}-${suffix}`.slice(0, 120);
+    const commandHash = input.commandHash ?? hashPublicValue(`${input.autonomousKind}:${input.targetRef}`);
+    return {
+        schemaVersion: 1,
+        contractVersion: 'continuity-v1',
+        governanceVersion: AUTONOMOUS_GOVERNANCE_VERSION,
+        envelopeId: `gov-${safeBase}-${suffix}`.slice(0, 120),
+        jobId,
+        executionId,
+        auditId,
+        receiptId,
+        autonomousKind: input.autonomousKind,
+        source: input.source,
+        targetKind: input.targetKind,
+        targetRef: input.targetRef,
+        ...(input.storyId ? { storyId: input.storyId } : {}),
+        ...(input.epicId ? { epicId: input.epicId } : {}),
+        status: input.status ?? 'accepted',
+        reasonCode: input.reasonCode ?? AUTONOMOUS_GOVERNANCE_REASON_CODES.OK,
+        publicSummary: `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Autonomous execution accepted under public continuity governance.`,
+        counts: { targets: 1 },
+        hashes: { command: commandHash },
+        relativePaths: [input.targetRef],
+        publicSafe: true,
+    };
+}
+export function validateAutonomousGovernanceEnvelope(input, expected) {
+    const redactions = [];
+    if (!isRecord(input)) {
+        return rejectedGovernance('autonomousGovernance', redactions);
+    }
+    const envelope = input;
+    if (envelope.schemaVersion !== 1)
+        redactions.push(redaction('schemaVersion', 'unsafe_key', 'value-denied'));
+    if (envelope.contractVersion !== 'continuity-v1')
+        redactions.push(redaction('contractVersion', 'unsafe_key', 'value-denied'));
+    if (envelope.governanceVersion !== AUTONOMOUS_GOVERNANCE_VERSION)
+        redactions.push(redaction('governanceVersion', 'unsafe_key', 'value-denied'));
+    if (envelope.publicSafe !== true)
+        redactions.push(redaction('publicSafe', 'unsafe_key', 'value-denied'));
+    if (envelope.status !== 'accepted')
+        redactions.push(redaction('status', 'unsafe_key', 'value-denied'));
+    for (const field of ['envelopeId', 'jobId', 'executionId', 'auditId', 'receiptId', 'reasonCode']) {
+        if (!safeId(envelope[field]))
+            redactions.push(redaction(field, 'unsafe_key', 'value-denied'));
+    }
+    if (!safeKind(envelope.autonomousKind))
+        redactions.push(redaction('autonomousKind', 'unsafe_key', 'value-denied'));
+    if (!safeSource(envelope.source))
+        redactions.push(redaction('source', 'unsafe_key', 'value-denied'));
+    if (envelope.targetKind !== 'story' && envelope.targetKind !== 'epic' && envelope.targetKind !== 'epic_directory')
+        redactions.push(redaction('targetKind', 'unsafe_key', 'value-denied'));
+    if (typeof envelope.targetRef !== 'string' || !targetMatches(envelope.targetKind, envelope.targetRef))
+        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
+    if (envelope.storyId !== undefined && (!safeId(envelope.storyId) || envelope.targetKind !== 'story'))
+        redactions.push(redaction('storyId', 'prompt_body', 'value-denied'));
+    if (envelope.epicId !== undefined && (!safeId(envelope.epicId) || envelope.targetKind !== 'epic'))
+        redactions.push(redaction('epicId', 'prompt_body', 'value-denied'));
+    if (typeof envelope.publicSummary !== 'string' || envelope.publicSummary.length > 240 || unsafe(envelope.publicSummary))
+        redactions.push(redaction('publicSummary', 'unbounded_text', 'value-denied'));
+    if (!isRecord(envelope.counts) || typeof envelope.counts.targets !== 'number')
+        redactions.push(redaction('counts', 'unsafe_key', 'value-denied'));
+    if (!isRecord(envelope.hashes) || typeof envelope.hashes.command !== 'string' || !HASH_PATTERN.test(envelope.hashes.command))
+        redactions.push(redaction('hashes.command', 'prompt_body', 'value-denied'));
+    if (!Array.isArray(envelope.relativePaths) || envelope.relativePaths.length !== 1 || envelope.relativePaths[0] !== envelope.targetRef)
+        redactions.push(redaction('relativePaths', 'local_absolute_path', 'value-denied'));
+    if (expected?.autonomousKind && envelope.autonomousKind !== expected.autonomousKind)
+        redactions.push(redaction('autonomousKind', 'unsafe_key', 'operation-denied'));
+    if (expected?.jobId && envelope.jobId !== expected.jobId)
+        redactions.push(redaction('jobId', 'unsafe_key', 'operation-denied'));
+    if (expected?.targetKind && envelope.targetKind !== expected.targetKind)
+        redactions.push(redaction('targetKind', 'prompt_body', 'operation-denied'));
+    if (expected?.targetRef && envelope.targetRef !== expected.targetRef)
+        redactions.push(redaction('targetRef', 'prompt_body', 'operation-denied'));
+    if (redactions.length > 0)
+        return rejectedGovernance('autonomousGovernance', redactions);
+    return { ok: true, envelope: envelope };
+}
+export function readAutonomousGovernanceEnvelopeFromMetadata(metadataJson, expected) {
+    if (!metadataJson)
+        return rejectedGovernance('autonomousGovernance', []);
+    try {
+        const metadata = JSON.parse(metadataJson);
+        if (!isRecord(metadata))
+            return rejectedGovernance('autonomousGovernance', []);
+        return validateAutonomousGovernanceEnvelope(metadata.autonomousGovernance, expected);
+    }
+    catch {
+        return rejectedGovernance('autonomousGovernance', []);
+    }
+}
+export function recordAutonomousGovernance(store, envelope, nowIso, options = {}) {
+    const validation = validateAutonomousGovernanceEnvelope(envelope);
+    if (!validation.ok)
+        return failedRecord(envelope, validation.publicSummary);
+    if (options.requireExistingJob && !store.jobExists(envelope.jobId)) {
+        return failedRecord(envelope, `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Governance bypass blocked before autonomous execution.`);
+    }
+    store.runInTransaction(() => {
+        if (!options.requireExistingJob) {
+            store.recordJob({
+                jobId: envelope.jobId,
+                kind: 'runner',
+                status: 'active',
+                createdAt: nowIso,
+                updatedAt: nowIso,
+                summary: `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Governed autonomous execution job.`,
+                reasonCode: envelope.reasonCode,
+                operationId: `${envelope.executionId}:job`,
+                idempotencyKey: `${envelope.envelopeId}:job`,
+                metadata: { autonomousGovernance: envelope, publicSafe: true },
+            });
+        }
+        store.appendEvent({
+            eventId: envelope.auditId,
+            jobId: envelope.jobId,
+            operationId: `${envelope.executionId}:audit`,
+            idempotencyKey: `${envelope.envelopeId}:audit`,
+            type: AUTONOMOUS_GOVERNANCE_EVENT_TYPE,
+            summary: envelope.publicSummary,
+            reasonCode: envelope.reasonCode,
+            createdAt: nowIso,
+            metadata: { autonomousGovernance: envelope, publicSafe: true },
+        });
+        store.appendReceipt({
+            receiptId: envelope.receiptId,
+            jobId: envelope.jobId,
+            operationId: `${envelope.executionId}:receipt`,
+            idempotencyKey: `${envelope.envelopeId}:receipt`,
+            status: 'accepted',
+            reasonCode: envelope.reasonCode,
+            appliedOperationIds: [envelope.executionId],
+            createdAt: nowIso,
+            metadata: { autonomousGovernance: envelope, publicSafe: true },
+        });
+    });
+    return {
+        ok: true,
+        envelope,
+        reasonCode: envelope.reasonCode,
+        publicSummary: envelope.publicSummary,
+        publicSafe: true,
+    };
+}
+export function autonomousGovernanceMetadata(envelope, base) {
+    return {
+        ...(base ?? {}),
+        autonomousGovernance: envelope,
+        governanceVersion: AUTONOMOUS_GOVERNANCE_VERSION,
+        governanceEvidence: AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG,
+        publicSafe: true,
+    };
+}
+function rejectedGovernance(field, redactions) {
+    return {
+        ok: false,
+        reasonCode: AUTONOMOUS_GOVERNANCE_REASON_CODES.BYPASS_BLOCKED,
+        publicSummary: `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Governance envelope missing or invalid before autonomous execution.`,
+        redactionSummary: redactions.length > 0 ? redactions : [redaction(field, 'unsafe_key', 'operation-denied')],
+    };
+}
+function failedRecord(envelope, publicSummary) {
+    return {
+        ok: false,
+        envelope,
+        reasonCode: AUTONOMOUS_GOVERNANCE_REASON_CODES.BYPASS_BLOCKED,
+        publicSummary,
+        publicSafe: true,
+    };
+}
+function hashPublicValue(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+function stableSuffix(value) {
+    return createHash('sha256').update(value).digest('hex').slice(0, 12);
+}
+function sanitizeIdPart(value) {
+    const normalized = value
+        .replace(/^docs\/stories\//, '')
+        .replace(/^docs\/epics\/epic-/, '')
+        .replace(/\.story\.md$/, '')
+        .replace(/\.md$/, '')
+        .replace(/[^A-Za-z0-9._-]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+    return (normalized || 'autonomous').slice(0, 60);
+}
+function safeId(value) {
+    return typeof value === 'string' && SAFE_ID_PATTERN.test(value) && !unsafe(value);
+}
+function safeKind(value) {
+    return value === 'yolo' || value === 'yoloop' || value === 'run_yolo' || value === 'run_yoloop';
+}
+function safeSource(value) {
+    return value === 'direct-yolo' || value === 'direct-yoloop' || value === 'headless-run-yolo' || value === 'headless-run-yoloop' || value === 'delegated-subagent';
+}
+function targetMatches(kind, targetRef) {
+    if (unsafe(targetRef))
+        return false;
+    if (kind === 'story')
+        return STORY_TARGET_PATTERN.test(targetRef);
+    if (kind === 'epic')
+        return EPIC_TARGET_PATTERN.test(targetRef);
+    if (kind === 'epic_directory')
+        return EPIC_DIRECTORY_TARGET_PATTERN.test(targetRef);
+    return false;
+}
+function unsafe(value) {
+    return UNSAFE_VALUE_PATTERN.test(value) || /[;&|`$<>\n\r\0]/.test(value);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function redaction(field, reason, evidence) {
+    return { field, reason, evidence, publicSafe: true };
+}