@ornexus/neocortex 4.60.71 → 4.60.73

package/packages/client/dist/private-execution/diagnosis-root-review.js

@@ -1,2 +1,294 @@
-import{isPrivateYoloSkippedPredecessors as ue,isPrivateQaSkippedPredecessors as qe,isPrivateQaStructuralAdmission as ve}from"./shared-private-admission-types.js";import{readPrivateYoloImplementationValidation as me}from"./implementation-validation.js";import{createHash as Ae}from"node:crypto";import{execFileSync as F}from"node:child_process";import{existsSync as xe,lstatSync as ye,readFileSync as S}from"node:fs";import{join as u,resolve as Ce}from"node:path";import{acquireGitLifecyclePhysicalIntegrationLock as $e,applyGitLifecycleRuntimeOverlay as De,ensureGitLifecyclePrivateChildDirectory as he,gitLifecycleRuntimeDirectory as we,mutateGitLifecycleRuntime as _e,readGitLifecycleRuntime as Ye,releaseGitLifecyclePhysicalIntegrationLock as je,assertGitLifecyclePrivateFile as ge}from"../git/git-lifecycle-store.js";import{anchoredAtomicWriteFile as Oe}from"../git/secure-filesystem-boundary.js";import{privateYoloRootOnlySetupReady as Se}from"./clean-baseline.js";import{resumePrivateYoloIsolatedSession as Ve}from"./isolated-session.js";const Ne=["analysisComplete","enrichmentReviewed","implementationBoundaryReviewed","dependenciesReviewed","smellsReviewed","warningsReviewed","mandatoryRequirementsResolved","noImplementationChange"],C=r=>Ae("sha256").update(r).digest("hex"),J={diagnosis:{schema:"PrivateYoloDiagnosisAcceptance/1",token:"step-50224b19",digest:"50224b193dae7ba2a066e54f7091d2656302b849ea7a145a3a4c556d85f3fe3c",status:"diagnose",previousStatus:"branch-ready",predecessorCount:1,artifact:"diagnosis",checks:Ne},research:{schema:"PrivateYoloResearchAcceptance/1",token:"step-f757f6bf",digest:"f757f6bf1182f23e5d7acbe47cbce9f0fa12f211d290b486892c6722bc42b4e8",status:"research",previousStatus:"diagnose",predecessorCount:2,artifact:"research",checks:["researchComplete","officialSourcesReviewed","context7AvailabilityReviewed","existingPatternsReviewed","mockStrategyReviewed","requirementsTraced","mandatoryRequirementsResolved","noImplementationChange"]},specification:{schema:"PrivateYoloSpecificationAcceptance/1",token:"step-9cd927d0",digest:"9cd927d02ff5979b5077e75b09cb34be275eca0e1c955403235b9ba0fb7a55eb",status:"write-spec",previousStatus:"research",predecessorCount:3,artifact:"spec",checks:["specificationComplete","acceptedResearchReviewed","acceptanceExamplesReviewed","contractsAndNonGoalsReviewed","implementationPlanReviewed","validationPlanReviewed","mandatoryRequirementsResolved","noImplementationChange"]},tasks:{schema:"PrivateYoloTasksAcceptance/1",token:"step-a3f880e8",digest:"a3f880e8d5bca9158a88c46f88754c0948237a3e8516c83a762ba1ee22c27d46",status:"create-tasks",previousStatus:"write-spec",predecessorCount:4,artifact:"tasks",checks:["tasksComplete","acceptedSpecificationReviewed","acceptanceTraceabilityReviewed","causalTestSequenceReviewed","implementationScopeReviewed","validationPlanReviewed","mandatoryRequirementsResolved","noImplementationChange"]},implementation:{schema:"PrivateYoloImplementationAcceptance/1",token:"step-41803e35",digest:"41803e35aae66fedeb7f3d7086f234b7d8894fa31c93088d510fd9bd1ea6a3ab",status:"implemented",previousStatus:"create-tasks",predecessorCount:5,artifact:"validation-evidence",checks:["implementationComplete","acceptedPlanningReviewed","acceptanceTraceabilityReviewed","causalTestsReviewed","implementationScopeReviewed","contractsReviewed","mandatoryRequirementsResolved","rootValidationReviewed"]},"refactor-advisory":{schema:"PrivateYoloRefactorAdvisoryAcceptance/1",token:"step-fe2e4997",digest:"fe2e499748a0a6ffa5f952b0e7f6eb0f42361b6f304722aaa9eae736ca9565e7",status:"refactor-suggest-done",previousStatus:"implemented",predecessorCount:6,artifact:"validation-evidence",checks:["advisoryComplete","registryReviewed","tierAndGatesReviewed","scopeReviewed","suggestionsReviewed","nonBlockingWarningsReviewed","traceabilityReviewed","noImplementationChange"]},"test-validation":{schema:"PrivateYoloTestValidationAcceptance/1",token:"step-b2fe7cb5",digest:"b2fe7cb5d577eecef3f9da45f9f4f11487b5a1ac27dfdf6c425a0cc5a9c9db3d",status:"tests-validated",previousStatus:"property-tests-emitted",predecessorCount:8,artifact:"validation-evidence",checks:["testCoverageComplete","acceptedPlanningReviewed","acceptanceTraceabilityReviewed","literalCommandsReviewed","skippedCoverageReviewed","contractsReviewed","mandatoryRequirementsResolved","rootValidationReviewed"]},qa:{schema:"PrivateYoloQaAcceptance/1",token:"step-8721319d",digest:"8721319de90ade506bc9b72a908d8296856b34a11bc640629178bed3fe32e373",status:"qa-gate-passed",previousStatus:"tests-validated",predecessorCount:9,artifact:"qa-gate-result",checks:["requirementsReviewed","examplesReviewed","contractsReviewed","securityAndDataReviewed","structuralIntegrityReviewed","skippedAndDeferredCoverageReviewed","findingsResolved","implementationScopeReviewed"]}};async function Ee(r,n){return R(r,n,"qa")}async function We(r,n){return R(r,n,"test-validation")}async function Ke(r,n){return R(r,n,"refactor-advisory")}async function Me(r,n){return R(r,n,"implementation")}async function Xe(r,n){return R(r,n,"diagnosis")}async function Ze(r,n){return R(r,n,"research")}async function et(r,n){return R(r,n,"specification")}async function tt(r,n){return R(r,n,"tasks")}async function R(r,n,e){const c=J[e],I=`${e}Sha256`,o=()=>{throw new Error(`private-execution-${e}-root-review-unverified`)},v=l=>l!==null&&typeof l=="object"&&!Array.isArray(l)?l:void 0,q=v(n),a=v(q?.directive),t=v(q?.review),B=a?.structuralPrecheck,$=(l,D)=>Object.keys(l).sort().join("|")===D.sort().join("|");(!q||!a||!t||!$(q,["schemaVersion","executorStopped","directive","review"])||q.schemaVersion!==c.schema||q.executorStopped!==!0||!$(a,["schemaVersion","action","storyId","executionBranch","graphRevision","stepId","publicSafe",...e==="test-validation"?["skippedPredecessors"]:[],...e==="qa"?["skippedPredecessors","structuralPrecheck"]:[]])||a.schemaVersion!==1||a.action!==`review-${e}-candidate`||e==="test-validation"&&!ue(a.skippedPredecessors)||e==="qa"&&(!qe(a.skippedPredecessors)||!ve(B)||B.graphRevision!==a.graphRevision||a.skippedPredecessors.some(l=>l.tier!==B.tier))||a.stepId!==c.token||a.publicSafe!==!0||typeof a.storyId!="string"||!/^P[1-9][0-9]*\.[0-9]+$/.test(a.storyId)||typeof a.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(a.graphRevision)||!$(t,["reviewer","decision","snapshotSha",I,"sourceStateSha256","rawStepId","reviewedAt","checks",...["implementation","test-validation","qa"].includes(e)?["validationReceiptId"]:[],...["refactor-advisory","test-validation","qa"].includes(e)?["previousPhaseReceiptId"]:[]])||t.reviewer!=="root"||t.decision!==`approve-${e}`||typeof t.snapshotSha!="string"||!/^[a-f0-9]{40,64}$/.test(t.snapshotSha)||typeof t[I]!="string"||!/^[a-f0-9]{64}$/.test(t[I])||typeof t.sourceStateSha256!="string"||!/^[a-f0-9]{64}$/.test(t.sourceStateSha256)||typeof t.rawStepId!="string"||C(t.rawStepId)!==c.digest||typeof t.reviewedAt!="string"||!Number.isFinite(Date.parse(t.reviewedAt))||Date.parse(t.reviewedAt)>Date.now()||Date.now()-Date.parse(t.reviewedAt)>10*6e4||!v(t.checks)||!$(v(t.checks),[...c.checks])||c.checks.some(l=>v(t.checks)[l]!==!0))&&o();const z=e==="test-validation"&&a.skippedPredecessors.length===1,ee=c.predecessorCount-(z?1:0),te=z?"refactor-suggest-done":c.previousStatus;let k,se=[];const d=Ce(r),s=a.storyId,A=a.graphRevision,ie=s.split(".")[0],N=await Ye(d,{required:!0}),U=N.epics[ie],m=v(U?.branch_lease);(!m||typeof m.sessionId!="string"||m.ownerStoryId!==s||m.idempotencyKey!==m.sessionId||U?.graph_revision!==A||typeof m.expiresAt!="string"||!Number.isFinite(Date.parse(m.expiresAt))||Date.parse(m.expiresAt)<=Date.now())&&o();const H=await $e(d,{kind:"direct",storyId:s,sessionId:m.sessionId,idempotencyKey:m.sessionId,expiresAt:new Date(Date.now()+5*6e4).toISOString(),persistent:!1});if(!H.ok)throw new Error(`private-execution-${e}-root-review-unverified`);try{const l=async()=>{const i=await Ve(d,s,A);(i.snapshotSha!==t.snapshotSha||i.sequence<1||i.workspace.executionBranch!==a.executionBranch)&&o();const g=JSON.parse(S(u(d,".neocortex/state.json"),"utf8")),j=c.predecessorCount>=5?g.stories?.[s]?.files_to_modify:[];(!Array.isArray(j)||j.some(p=>typeof p!="string"))&&o();const K=[...j,".neocortex/state.json",`docs/stories/${s}.story.md`,`.neocortex/stories/${s}/diagnosis.md`,`.neocortex/stories/${s}/diagnose.md`,...c.predecessorCount>=2?[`.neocortex/stories/${s}/research.md`,`docs/stories/${s}.research.md`]:[],...c.predecessorCount>=3?[`docs/stories/${s}.spec.md`,`docs/stories/${s}.rtm.md`]:[],...c.predecessorCount>=4?[`docs/stories/${s}.tasks.md`]:[]];F("git",["diff","--name-only","-z",i.workspace.baseSha,i.snapshotSha,"--"],{cwd:i.workspace.workspacePath,env:Object.fromEntries(Object.entries(process.env).filter(([p])=>!p.startsWith("GIT_"))),encoding:"utf8",timeout:3e4,maxBuffer:1024*1024,stdio:["ignore","pipe","ignore"]}).split("\0").filter(Boolean).some(p=>!K.includes(p))&&o();const O=e==="qa"?u(d,".neocortex","stories",s,"qa-gate-result.json"):c.artifact==="validation-evidence"?u(d,".neocortex","stories",s,"validation-evidence.md"):c.predecessorCount<3?u(d,".neocortex","stories",s,`${c.artifact}.md`):u(d,"docs","stories",`${s}.${c.artifact}.md`),y=ye(O);if((!y.isFile()||y.isSymbolicLink()||y.nlink!==1||y.size<128||y.size>262144||C(S(O))!==t[I]||C(S(u(d,".neocortex/state.json")))!==t.sourceStateSha256)&&o(),c.predecessorCount>=5&&(F("git",["show",`${i.workspace.baseSha}:.neocortex/state.json`],{cwd:i.workspace.workspacePath,timeout:3e4,stdio:["ignore","pipe","ignore"]}).equals(S(u(d,".neocortex/state.json")))||o(),F("git",["diff","--check",i.workspace.baseSha,i.snapshotSha],{cwd:i.workspace.workspacePath,timeout:3e4,stdio:"ignore"}),(e==="implementation"||e==="test-validation"||e==="qa")&&await me(d,t.validationReceiptId,{storyId:s,graphRevision:A,snapshotSha:i.snapshotSha,sourceHeadSha:i.workspace.baseSha}),e==="refactor-advisory"||e==="test-validation"||e==="qa")){const G=t.previousPhaseReceiptId;(typeof G!="string"||!/^[a-f0-9]{64}$/.test(G))&&o();const ce=await he(await we(d),"private-execution"),ne=e==="qa"?a.skippedPredecessors:[],V=ne.some(w=>w.stepId==="step-b2fe7cb5"),M=ne.some(w=>w.stepId==="step-a8ce5c64"),de=e==="qa"?V?M?"refactor-advisory":"property-tests":"test-validation":e==="refactor-advisory"?"implementation":z?"refactor-advisory":"property-tests",pe=u(ce,`${de}-review-${G}.json`);await ge(pe,ce);const X=S(pe);(X.length>16384||C(X)!==G)&&o();const h=JSON.parse(X.toString());(h.kind!==`private-${de}-root-review`||h.storyId!==s||h.sourceHeadSha!==i.workspace.baseSha||!/^[a-f0-9]{40,64}$/.test(h.snapshotSha)||h.independentStoryQaAccepted!==!1||h.terminalAccepted!==!1)&&o();const le=(...w)=>F("git",w,{cwd:i.workspace.workspacePath,timeout:3e4,encoding:"utf8",stdio:["ignore","pipe","ignore"]});le("merge-base","--is-ancestor",h.snapshotSha,i.snapshotSha);const Pe=le("diff","--name-only","-z",h.snapshotSha,i.snapshotSha).split("\0").filter(Boolean),Ie=[...e==="qa"?[`.neocortex/stories/${s}/qa-gate-result.json`]:[],`.neocortex/stories/${s}/validation-evidence.md`,`.neocortex/stories/${s}/tdd-evidence.md`,`docs/stories/${s}.rtm.md`];if(Pe.some(w=>!Ie.includes(w))&&o(),e==="qa"){!V&&!ue(h.skippedPredecessors)&&o();const w=V?M:h.skippedPredecessors.length===1,fe=[...["diagnosis","research","specification","tasks","implementation","refactor-advisory"].map(x=>J[x].digest),...w?[]:["a8ce5c6462803364cabab06cd41304a578ca2f1d50627c7f162020159670dedf"],...V?[]:[J["test-validation"].digest]];k={digests:fe,count:fe.length+1,status:V?M?"refactor-suggest-done":"property-tests-emitted":"tests-validated"};const Q=await me(d,t.validationReceiptId,{storyId:s,graphRevision:A,snapshotSha:i.snapshotSha,sourceHeadSha:i.workspace.baseSha});(Q.structuralIntegrity?.schemaVersion!==1||Q.structuralIntegrity?.scope!=="project-snapshot"||Q.structuralIntegrity.canonicalStateParsed!==!0||Q.structuralIntegrity.trackedInputsUnchanged!==!0)&&o();const f=JSON.parse(S(O,"utf8"));(f.schemaVersion!==3||f.candidate!==!0||f.stageComplete!==!1||f.status!=="qa-review-pending"||f.independentStoryQaAccepted!==!1||!Array.isArray(f.blockingChecks)||f.blockingChecks.length!==0||!ve(f.structuralPrecheck)||["schemaVersion","kind","stepId","generationId","graphRevision","topologyGenerationId","tier","publicSafe"].some(x=>f.structuralPrecheck[x]!==a.structuralPrecheck[x])||!Array.isArray(f.followUpDebt)||f.followUpDebt.length>50)&&o();for(const x of f.followUpDebt){const P=v(x);(!P||!$(P,["id","reasonCode","ownerArea","severity","description","trigger","publicSafe"])||P.publicSafe!==!0||!["P2","P3"].includes(String(P.severity))||["id","reasonCode","ownerArea","description","trigger"].some(Z=>typeof P[Z]!="string"||P[Z].length<1||P[Z].length>1e3))&&o()}se=f.followUpDebt}}if(e==="tasks"||c.predecessorCount>=5){const p=ye(u(d,"docs/stories",`${s}.rtm.md`));(!p.isFile()||p.isSymbolicLink()||p.nlink!==1||p.size<128||p.size>262144)&&o()}return i},D=await l(),Re=JSON.parse(S(u(d,".neocortex/state.json"),"utf8")),ke=De(Re,N),b=v(v(ke.stories)?.[s]);(!b||b.checkpoint!==void 0)&&o();const L=t.rawStepId,ae=i=>{if(e==="diagnosis")return Se(i);const g=i.steps_completed,j=[...["diagnosis","research","specification","tasks","implementation","refactor-advisory"].map(y=>J[y].digest),"a8ce5c6462803364cabab06cd41304a578ca2f1d50627c7f162020159670dedf"];if(e==="qa"&&!k)return!1;const K=e==="qa"?k.status:te,re=e==="qa"?k.count:ee,O=e==="qa"?k.digests:j;return i.status===K&&Array.isArray(g)&&g.length===re&&i.last_step===g.at(-1)&&g.slice(1).every((y,p)=>typeof y=="string"&&C(y)===O[p])&&Se({status:"branch-ready",last_step:g[0],steps_completed:[g[0]]})},_=b.steps_completed,E=b?.status===c.status&&b.last_step===L&&Array.isArray(_)&&_.length===(e==="qa"?k.count:ee)+1&&_.at(-1)===L&&ae({status:e==="qa"?k.status:te,last_step:_.at(-2),steps_completed:_.slice(0,-1)});!E&&!ae(b)&&o();const be={schemaVersion:1,kind:`private-${e}-root-review`,storyId:s,graphRevision:A,sourceHeadSha:D.workspace.baseSha,snapshotSha:D.snapshotSha,[I]:t[I],sourceStateSha256:t.sourceStateSha256,reviewedAt:t.reviewedAt,checks:t.checks,...["implementation","test-validation","qa"].includes(e)?{validationReceiptId:t.validationReceiptId}:{},...["refactor-advisory","test-validation","qa"].includes(e)?{previousPhaseReceiptId:t.previousPhaseReceiptId}:{},...["test-validation","qa"].includes(e)?{skippedPredecessors:a.skippedPredecessors}:{},...e==="qa"?{structuralPrecheck:a.structuralPrecheck,precommitQaAccepted:!0,optionalDebt:se}:{},independentStoryQaAccepted:!1,terminalAccepted:!1},W=JSON.stringify(be)+`
-`,oe=C(W),Y=await he(await we(d),"private-execution"),T=`${e}-review-${oe}.json`;return xe(u(Y,T))?(await ge(u(Y,T),Y),S(u(Y,T),"utf8")!==W&&o()):await Oe(Y,T,W),E||await _e(d,i=>{(JSON.stringify(i.epics[ie])!==JSON.stringify(U)||JSON.stringify(i.stories[s])!==JSON.stringify(N.stories[s]))&&o(),i.stories[s]={...i.stories[s],status:c.status,last_step:L,steps_completed:[...b.steps_completed,L]}},{expectedRevision:N.revision,preCommit:async()=>{await l()}}),{schemaVersion:1,outcome:`${e}-root-accepted`,storyId:s,graphRevision:A,receiptId:oe,snapshotSha:D.snapshotSha,reused:E,sourceStateUnchanged:!0,...e==="qa"?{precommitQaAccepted:!0}:{},independentStoryQaAccepted:!1,terminalAccepted:!1,publicSafe:!0}}finally{await je(H.path,H.owner)||o()}}export{Xe as acceptPrivateYoloDiagnosisRootReview,Me as acceptPrivateYoloImplementationRootReview,Ee as acceptPrivateYoloQaRootReview,Ke as acceptPrivateYoloRefactorAdvisoryRootReview,Ze as acceptPrivateYoloResearchRootReview,et as acceptPrivateYoloSpecificationRootReview,tt as acceptPrivateYoloTasksRootReview,We as acceptPrivateYoloTestValidationRootReview};
+import { isPrivateYoloSkippedPredecessors, isPrivateQaSkippedPredecessors, isPrivateQaStructuralAdmission } from './shared-private-admission-types.js';
+/** Independent root acceptance of analysis candidates; no story QA authority. */
+import { readPrivateYoloImplementationValidation } from './implementation-validation.js';
+import { createHash } from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+import { existsSync, lstatSync, readFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { acquireGitLifecyclePhysicalIntegrationLock, applyGitLifecycleRuntimeOverlay, ensureGitLifecyclePrivateChildDirectory, gitLifecycleRuntimeDirectory, mutateGitLifecycleRuntime, readGitLifecycleRuntime, releaseGitLifecyclePhysicalIntegrationLock, assertGitLifecyclePrivateFile } from '../git/git-lifecycle-store.js';
+import { anchoredAtomicWriteFile } from '../git/secure-filesystem-boundary.js';
+import { privateYoloRootOnlySetupReady } from './clean-baseline.js';
+import { resumePrivateYoloIsolatedSession } from './isolated-session.js';
+const checks = ['analysisComplete', 'enrichmentReviewed', 'implementationBoundaryReviewed',
+    'dependenciesReviewed', 'smellsReviewed', 'warningsReviewed', 'mandatoryRequirementsResolved',
+    'noImplementationChange'];
+const hash = (value) => createHash('sha256').update(value).digest('hex');
+const profiles = {
+    diagnosis: { schema: 'PrivateYoloDiagnosisAcceptance/1', token: 'step-50224b19',
+        digest: '50224b193dae7ba2a066e54f7091d2656302b849ea7a145a3a4c556d85f3fe3c',
+        status: 'diagnose', previousStatus: 'branch-ready', predecessorCount: 1, artifact: 'diagnosis', checks },
+    research: { schema: 'PrivateYoloResearchAcceptance/1', token: 'step-f757f6bf',
+        digest: 'f757f6bf1182f23e5d7acbe47cbce9f0fa12f211d290b486892c6722bc42b4e8',
+        status: 'research', previousStatus: 'diagnose', predecessorCount: 2, artifact: 'research',
+        checks: ['researchComplete', 'officialSourcesReviewed', 'context7AvailabilityReviewed',
+            'existingPatternsReviewed', 'mockStrategyReviewed', 'requirementsTraced',
+            'mandatoryRequirementsResolved', 'noImplementationChange'] },
+    specification: { schema: 'PrivateYoloSpecificationAcceptance/1', token: 'step-9cd927d0',
+        digest: '9cd927d02ff5979b5077e75b09cb34be275eca0e1c955403235b9ba0fb7a55eb',
+        status: 'write-spec', previousStatus: 'research', predecessorCount: 3, artifact: 'spec',
+        checks: ['specificationComplete', 'acceptedResearchReviewed', 'acceptanceExamplesReviewed',
+            'contractsAndNonGoalsReviewed', 'implementationPlanReviewed', 'validationPlanReviewed',
+            'mandatoryRequirementsResolved', 'noImplementationChange'] },
+    tasks: { schema: 'PrivateYoloTasksAcceptance/1', token: 'step-a3f880e8',
+        digest: 'a3f880e8d5bca9158a88c46f88754c0948237a3e8516c83a762ba1ee22c27d46',
+        status: 'create-tasks', previousStatus: 'write-spec', predecessorCount: 4, artifact: 'tasks',
+        checks: ['tasksComplete', 'acceptedSpecificationReviewed', 'acceptanceTraceabilityReviewed',
+            'causalTestSequenceReviewed', 'implementationScopeReviewed', 'validationPlanReviewed',
+            'mandatoryRequirementsResolved', 'noImplementationChange'] },
+    implementation: { schema: 'PrivateYoloImplementationAcceptance/1', token: 'step-41803e35',
+        digest: '41803e35aae66fedeb7f3d7086f234b7d8894fa31c93088d510fd9bd1ea6a3ab', status: 'implemented', previousStatus: 'create-tasks', predecessorCount: 5,
+        artifact: 'validation-evidence', checks: ['implementationComplete', 'acceptedPlanningReviewed',
+            'acceptanceTraceabilityReviewed', 'causalTestsReviewed', 'implementationScopeReviewed',
+            'contractsReviewed', 'mandatoryRequirementsResolved', 'rootValidationReviewed'] },
+    'refactor-advisory': { schema: 'PrivateYoloRefactorAdvisoryAcceptance/1', token: 'step-fe2e4997',
+        digest: 'fe2e499748a0a6ffa5f952b0e7f6eb0f42361b6f304722aaa9eae736ca9565e7', status: 'refactor-suggest-done', previousStatus: 'implemented', predecessorCount: 6,
+        artifact: 'validation-evidence', checks: ['advisoryComplete', 'registryReviewed', 'tierAndGatesReviewed',
+            'scopeReviewed', 'suggestionsReviewed', 'nonBlockingWarningsReviewed', 'traceabilityReviewed', 'noImplementationChange'] },
+    'test-validation': { schema: 'PrivateYoloTestValidationAcceptance/1', token: 'step-b2fe7cb5',
+        digest: 'b2fe7cb5d577eecef3f9da45f9f4f11487b5a1ac27dfdf6c425a0cc5a9c9db3d', status: 'tests-validated', previousStatus: 'property-tests-emitted', predecessorCount: 8,
+        artifact: 'validation-evidence', checks: ['testCoverageComplete', 'acceptedPlanningReviewed',
+            'acceptanceTraceabilityReviewed', 'literalCommandsReviewed', 'skippedCoverageReviewed',
+            'contractsReviewed', 'mandatoryRequirementsResolved', 'rootValidationReviewed'] },
+    qa: { schema: 'PrivateYoloQaAcceptance/1', token: 'step-8721319d', digest: '8721319de90ade506bc9b72a908d8296856b34a11bc640629178bed3fe32e373',
+        status: 'qa-gate-passed', previousStatus: 'tests-validated', predecessorCount: 9, artifact: 'qa-gate-result',
+        checks: ['requirementsReviewed', 'examplesReviewed', 'contractsReviewed', 'securityAndDataReviewed',
+            'structuralIntegrityReviewed', 'skippedAndDeferredCoverageReviewed', 'findingsResolved', 'implementationScopeReviewed'] },
+};
+export async function acceptPrivateYoloQaRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'qa');
+}
+export async function acceptPrivateYoloTestValidationRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'test-validation');
+}
+export async function acceptPrivateYoloRefactorAdvisoryRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'refactor-advisory');
+}
+export async function acceptPrivateYoloImplementationRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'implementation');
+}
+export async function acceptPrivateYoloDiagnosisRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'diagnosis');
+}
+export async function acceptPrivateYoloResearchRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'research');
+}
+export async function acceptPrivateYoloSpecificationRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'specification');
+}
+export async function acceptPrivateYoloTasksRootReview(projectRoot, request) {
+    return acceptPrivateYoloAnalysisRootReview(projectRoot, request, 'tasks');
+}
+async function acceptPrivateYoloAnalysisRootReview(projectRoot, request, phase) {
+    const profile = profiles[phase], artifactField = `${phase}Sha256`;
+    const fail = () => { throw new Error(`private-execution-${phase}-root-review-unverified`); };
+    const record = (v) => v !== null && typeof v === 'object' && !Array.isArray(v) ? v : undefined;
+    const r = record(request), directive = record(r?.directive), review = record(r?.review);
+    const qaStructural = directive?.structuralPrecheck;
+    const equalKeys = (v, keys) => Object.keys(v).sort().join('|') === keys.sort().join('|');
+    if (!r || !directive || !review || !equalKeys(r, ['schemaVersion', 'executorStopped', 'directive', 'review'])
+        || r.schemaVersion !== profile.schema || r.executorStopped !== true
+        || !equalKeys(directive, ['schemaVersion', 'action', 'storyId', 'executionBranch', 'graphRevision', 'stepId', 'publicSafe', ...(phase === 'test-validation' ? ['skippedPredecessors'] : []), ...(phase === 'qa' ? ['skippedPredecessors', 'structuralPrecheck'] : [])])
+        || directive.schemaVersion !== 1 || directive.action !== `review-${phase}-candidate`
+        || phase === 'test-validation' && !isPrivateYoloSkippedPredecessors(directive.skippedPredecessors)
+        || phase === 'qa' && (!isPrivateQaSkippedPredecessors(directive.skippedPredecessors)
+            || !isPrivateQaStructuralAdmission(qaStructural)
+            || qaStructural.graphRevision !== directive.graphRevision
+            || directive.skippedPredecessors.some(entry => entry.tier !== qaStructural.tier))
+        || directive.stepId !== profile.token || directive.publicSafe !== true
+        || typeof directive.storyId !== 'string' || !/^P[1-9][0-9]*\.[0-9]+$/.test(directive.storyId)
+        || typeof directive.graphRevision !== 'string' || !/^[a-f0-9]{64}$/.test(directive.graphRevision)
+        || !equalKeys(review, ['reviewer', 'decision', 'snapshotSha', artifactField, 'sourceStateSha256',
+            'rawStepId', 'reviewedAt', 'checks', ...(['implementation', 'test-validation', 'qa'].includes(phase) ? ['validationReceiptId'] : []), ...(['refactor-advisory', 'test-validation', 'qa'].includes(phase) ? ['previousPhaseReceiptId'] : [])])
+        || review.reviewer !== 'root' || review.decision !== `approve-${phase}`
+        || typeof review.snapshotSha !== 'string' || !/^[a-f0-9]{40,64}$/.test(review.snapshotSha)
+        || typeof review[artifactField] !== 'string' || !/^[a-f0-9]{64}$/.test(review[artifactField])
+        || typeof review.sourceStateSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(review.sourceStateSha256)
+        || typeof review.rawStepId !== 'string'
+        || hash(review.rawStepId) !== profile.digest
+        || typeof review.reviewedAt !== 'string' || !Number.isFinite(Date.parse(review.reviewedAt))
+        || Date.parse(review.reviewedAt) > Date.now() || Date.now() - Date.parse(review.reviewedAt) > 10 * 60_000
+        || !record(review.checks) || !equalKeys(record(review.checks), [...profile.checks])
+        || profile.checks.some(key => record(review.checks)[key] !== true))
+        fail();
+    const skippedProperty = phase === 'test-validation' && directive.skippedPredecessors.length === 1;
+    const predecessorCount = profile.predecessorCount - (skippedProperty ? 1 : 0);
+    const previousStatus = skippedProperty ? 'refactor-suggest-done' : profile.previousStatus;
+    let qaPredecessor;
+    let qaOptionalDebt = [];
+    const root = resolve(projectRoot), storyId = directive.storyId;
+    const graphRevision = directive.graphRevision, epicId = storyId.split('.')[0];
+    const before = await readGitLifecycleRuntime(root, { required: true });
+    const epic = before.epics[epicId], lease = record(epic?.branch_lease);
+    if (!lease || typeof lease.sessionId !== 'string' || lease.ownerStoryId !== storyId
+        || lease.idempotencyKey !== lease.sessionId || epic?.graph_revision !== graphRevision
+        || typeof lease.expiresAt !== 'string' || !Number.isFinite(Date.parse(lease.expiresAt))
+        || Date.parse(lease.expiresAt) <= Date.now())
+        fail();
+    const lock = await acquireGitLifecyclePhysicalIntegrationLock(root, { kind: 'direct', storyId,
+        sessionId: lease.sessionId, idempotencyKey: lease.sessionId,
+        expiresAt: new Date(Date.now() + 5 * 60_000).toISOString(), persistent: false });
+    if (!lock.ok)
+        throw new Error(`private-execution-${phase}-root-review-unverified`);
+    try {
+        const verify = async () => {
+            const session = await resumePrivateYoloIsolatedSession(root, storyId, graphRevision);
+            if (session.snapshotSha !== review.snapshotSha || session.sequence < 1
+                || session.workspace.executionBranch !== directive.executionBranch)
+                fail();
+            const sourceState = JSON.parse(readFileSync(join(root, '.neocortex/state.json'), 'utf8'));
+            const implementationClaim = profile.predecessorCount >= 5 ? sourceState.stories?.[storyId]?.files_to_modify : [];
+            if (!Array.isArray(implementationClaim) || implementationClaim.some((p) => typeof p !== 'string'))
+                fail();
+            const allowed = [...implementationClaim, '.neocortex/state.json', `docs/stories/${storyId}.story.md`,
+                `.neocortex/stories/${storyId}/diagnosis.md`, `.neocortex/stories/${storyId}/diagnose.md`,
+                ...(profile.predecessorCount >= 2 ? [`.neocortex/stories/${storyId}/research.md`, `docs/stories/${storyId}.research.md`] : []),
+                ...(profile.predecessorCount >= 3 ? [`docs/stories/${storyId}.spec.md`, `docs/stories/${storyId}.rtm.md`] : []),
+                ...(profile.predecessorCount >= 4 ? [`docs/stories/${storyId}.tasks.md`] : [])];
+            const delta = execFileSync('git', ['diff', '--name-only', '-z', session.workspace.baseSha, session.snapshotSha, '--'], {
+                cwd: session.workspace.workspacePath,
+                env: Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith('GIT_'))),
+                encoding: 'utf8', timeout: 30_000, maxBuffer: 1024 * 1024,
+                stdio: ['ignore', 'pipe', 'ignore'],
+            }).split('\0').filter(Boolean);
+            if (delta.some(path => !allowed.includes(path)))
+                fail();
+            const path = phase === 'qa' ? join(root, '.neocortex', 'stories', storyId, 'qa-gate-result.json') : profile.artifact === 'validation-evidence' ? join(root, '.neocortex', 'stories', storyId, 'validation-evidence.md') : profile.predecessorCount < 3
+                ? join(root, '.neocortex', 'stories', storyId, `${profile.artifact}.md`)
+                : join(root, 'docs', 'stories', `${storyId}.${profile.artifact}.md`);
+            const file = lstatSync(path);
+            if (!file.isFile() || file.isSymbolicLink() || file.nlink !== 1 || file.size < 128 || file.size > 256 * 1024
+                || hash(readFileSync(path)) !== review[artifactField]
+                || hash(readFileSync(join(root, '.neocortex/state.json'))) !== review.sourceStateSha256)
+                fail();
+            if (profile.predecessorCount >= 5) {
+                const baselineState = execFileSync('git', ['show', `${session.workspace.baseSha}:.neocortex/state.json`], { cwd: session.workspace.workspacePath, timeout: 30_000, stdio: ['ignore', 'pipe', 'ignore'] });
+                if (!baselineState.equals(readFileSync(join(root, '.neocortex/state.json'))))
+                    fail();
+                execFileSync('git', ['diff', '--check', session.workspace.baseSha, session.snapshotSha], { cwd: session.workspace.workspacePath, timeout: 30_000, stdio: 'ignore' });
+                if (phase === 'implementation' || phase === 'test-validation' || phase === 'qa')
+                    await readPrivateYoloImplementationValidation(root, review.validationReceiptId, { storyId, graphRevision, snapshotSha: session.snapshotSha, sourceHeadSha: session.workspace.baseSha });
+                if (phase === 'refactor-advisory' || phase === 'test-validation' || phase === 'qa') {
+                    const id = review.previousPhaseReceiptId;
+                    if (typeof id !== 'string' || !/^[a-f0-9]{64}$/.test(id))
+                        fail();
+                    const parent = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(root), 'private-execution');
+                    const qaSkips = phase === 'qa' ? directive.skippedPredecessors : [];
+                    const qaSkippedTests = qaSkips.some(entry => entry.stepId === 'step-b2fe7cb5');
+                    const qaSkippedProperty = qaSkips.some(entry => entry.stepId === 'step-a8ce5c64');
+                    const previousPhase = phase === 'qa' ? qaSkippedTests ? qaSkippedProperty ? 'refactor-advisory' : 'property-tests' : 'test-validation'
+                        : phase === 'refactor-advisory' ? 'implementation' : skippedProperty ? 'refactor-advisory' : 'property-tests';
+                    const predecessorPath = join(parent, `${previousPhase}-review-${id}.json`);
+                    await assertGitLifecyclePrivateFile(predecessorPath, parent);
+                    const bytes = readFileSync(predecessorPath);
+                    if (bytes.length > 16384 || hash(bytes) !== id)
+                        fail();
+                    const predecessor = JSON.parse(bytes.toString());
+                    if (predecessor.kind !== `private-${previousPhase}-root-review` || predecessor.storyId !== storyId
+                        || predecessor.sourceHeadSha !== session.workspace.baseSha || !/^[a-f0-9]{40,64}$/.test(predecessor.snapshotSha)
+                        || predecessor.independentStoryQaAccepted !== false || predecessor.terminalAccepted !== false)
+                        fail();
+                    const git = (...args) => execFileSync('git', args, { cwd: session.workspace.workspacePath, timeout: 30_000, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
+                    git('merge-base', '--is-ancestor', predecessor.snapshotSha, session.snapshotSha);
+                    const changes = git('diff', '--name-only', '-z', predecessor.snapshotSha, session.snapshotSha).split('\0').filter(Boolean);
+                    const metadata = [...(phase === 'qa' ? [`.neocortex/stories/${storyId}/qa-gate-result.json`] : []), `.neocortex/stories/${storyId}/validation-evidence.md`, `.neocortex/stories/${storyId}/tdd-evidence.md`, `docs/stories/${storyId}.rtm.md`];
+                    if (changes.some(path => !metadata.includes(path)))
+                        fail();
+                    if (phase === 'qa') {
+                        if (!qaSkippedTests && !isPrivateYoloSkippedPredecessors(predecessor.skippedPredecessors))
+                            fail();
+                        const propertyWasSkipped = qaSkippedTests ? qaSkippedProperty : predecessor.skippedPredecessors.length === 1;
+                        const digests = [...['diagnosis', 'research', 'specification', 'tasks', 'implementation', 'refactor-advisory'].map(key => profiles[key].digest),
+                            ...(propertyWasSkipped ? [] : ['a8ce5c6462803364cabab06cd41304a578ca2f1d50627c7f162020159670dedf']), ...(qaSkippedTests ? [] : [profiles['test-validation'].digest])];
+                        qaPredecessor = { digests, count: digests.length + 1, status: qaSkippedTests ? qaSkippedProperty ? 'refactor-suggest-done' : 'property-tests-emitted' : 'tests-validated' };
+                        const local = await readPrivateYoloImplementationValidation(root, review.validationReceiptId, { storyId, graphRevision, snapshotSha: session.snapshotSha, sourceHeadSha: session.workspace.baseSha });
+                        if (local.structuralIntegrity?.schemaVersion !== 1 || local.structuralIntegrity?.scope !== 'project-snapshot'
+                            || local.structuralIntegrity.canonicalStateParsed !== true || local.structuralIntegrity.trackedInputsUnchanged !== true)
+                            fail();
+                        const candidate = JSON.parse(readFileSync(path, 'utf8'));
+                        if (candidate.schemaVersion !== 3 || candidate.candidate !== true || candidate.stageComplete !== false
+                            || candidate.status !== 'qa-review-pending' || candidate.independentStoryQaAccepted !== false
+                            || !Array.isArray(candidate.blockingChecks) || candidate.blockingChecks.length !== 0
+                            || !isPrivateQaStructuralAdmission(candidate.structuralPrecheck)
+                            || ['schemaVersion', 'kind', 'stepId', 'generationId', 'graphRevision', 'topologyGenerationId', 'tier', 'publicSafe'].some(key => candidate.structuralPrecheck[key] !== directive.structuralPrecheck[key])
+                            || !Array.isArray(candidate.followUpDebt) || candidate.followUpDebt.length > 50)
+                            fail();
+                        for (const item of candidate.followUpDebt) {
+                            const debt = record(item);
+                            if (!debt || !equalKeys(debt, ['id', 'reasonCode', 'ownerArea', 'severity', 'description', 'trigger', 'publicSafe'])
+                                || debt.publicSafe !== true || !['P2', 'P3'].includes(String(debt.severity))
+                                || ['id', 'reasonCode', 'ownerArea', 'description', 'trigger'].some(key => typeof debt[key] !== 'string' || debt[key].length < 1 || debt[key].length > 1000))
+                                fail();
+                        }
+                        qaOptionalDebt = candidate.followUpDebt;
+                    }
+                }
+            }
+            if (phase === 'tasks' || profile.predecessorCount >= 5) {
+                const matrix = lstatSync(join(root, 'docs/stories', `${storyId}.rtm.md`));
+                if (!matrix.isFile() || matrix.isSymbolicLink() || matrix.nlink !== 1 || matrix.size < 128
+                    || matrix.size > 256 * 1024)
+                    fail();
+            }
+            return session;
+        };
+        const session = await verify();
+        const state = JSON.parse(readFileSync(join(root, '.neocortex/state.json'), 'utf8'));
+        const effective = applyGitLifecycleRuntimeOverlay(state, before);
+        const story = record(record(effective.stories)?.[storyId]);
+        if (!story || story.checkpoint !== undefined)
+            fail();
+        const rawStepId = review.rawStepId;
+        const predecessorReady = (candidate) => {
+            if (phase === 'diagnosis')
+                return privateYoloRootOnlySetupReady(candidate);
+            const steps = candidate.steps_completed;
+            const predecessorDigests = [...['diagnosis', 'research', 'specification', 'tasks', 'implementation', 'refactor-advisory'].map(key => profiles[key].digest), 'a8ce5c6462803364cabab06cd41304a578ca2f1d50627c7f162020159670dedf'];
+            if (phase === 'qa' && !qaPredecessor)
+                return false;
+            const requiredStatus = phase === 'qa' ? qaPredecessor.status : previousStatus;
+            const requiredCount = phase === 'qa' ? qaPredecessor.count : predecessorCount;
+            const requiredDigests = phase === 'qa' ? qaPredecessor.digests : predecessorDigests;
+            return candidate.status === requiredStatus && Array.isArray(steps) && steps.length === requiredCount
+                && candidate.last_step === steps.at(-1)
+                && steps.slice(1).every((step, index) => typeof step === 'string' && hash(step) === requiredDigests[index])
+                && privateYoloRootOnlySetupReady({ status: 'branch-ready', last_step: steps[0], steps_completed: [steps[0]] });
+        };
+        const completed = story.steps_completed;
+        const replay = story?.status === profile.status && story.last_step === rawStepId
+            && Array.isArray(completed) && completed.length === (phase === 'qa' ? qaPredecessor.count : predecessorCount) + 1
+            && completed.at(-1) === rawStepId
+            && predecessorReady({ status: phase === 'qa' ? qaPredecessor.status : previousStatus, last_step: completed.at(-2), steps_completed: completed.slice(0, -1) });
+        if (!replay && !predecessorReady(story))
+            fail();
+        const receipt = { schemaVersion: 1, kind: `private-${phase}-root-review`, storyId, graphRevision,
+            sourceHeadSha: session.workspace.baseSha, snapshotSha: session.snapshotSha,
+            [artifactField]: review[artifactField], sourceStateSha256: review.sourceStateSha256,
+            reviewedAt: review.reviewedAt, checks: review.checks, ...(['implementation', 'test-validation', 'qa'].includes(phase) ? { validationReceiptId: review.validationReceiptId } : {}), ...(['refactor-advisory', 'test-validation', 'qa'].includes(phase) ? { previousPhaseReceiptId: review.previousPhaseReceiptId } : {}), ...(['test-validation', 'qa'].includes(phase) ? { skippedPredecessors: directive.skippedPredecessors } : {}), ...(phase === 'qa' ? { structuralPrecheck: directive.structuralPrecheck, precommitQaAccepted: true, optionalDebt: qaOptionalDebt } : {}), independentStoryQaAccepted: false,
+            terminalAccepted: false };
+        const bytes = JSON.stringify(receipt) + '\n', receiptId = hash(bytes);
+        const parent = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(root), 'private-execution');
+        const receiptName = `${phase}-review-${receiptId}.json`;
+        if (existsSync(join(parent, receiptName))) {
+            await assertGitLifecyclePrivateFile(join(parent, receiptName), parent);
+            if (readFileSync(join(parent, receiptName), 'utf8') !== bytes)
+                fail();
+        }
+        else
+            await anchoredAtomicWriteFile(parent, receiptName, bytes);
+        if (!replay)
+            await mutateGitLifecycleRuntime(root, document => {
+                if (JSON.stringify(document.epics[epicId]) !== JSON.stringify(epic)
+                    || JSON.stringify(document.stories[storyId]) !== JSON.stringify(before.stories[storyId]))
+                    fail();
+                document.stories[storyId] = { ...document.stories[storyId], status: profile.status,
+                    last_step: rawStepId, steps_completed: [...story.steps_completed, rawStepId] };
+            }, { expectedRevision: before.revision, preCommit: async () => { await verify(); } });
+        return { schemaVersion: 1, outcome: `${phase}-root-accepted`, storyId, graphRevision,
+            receiptId, snapshotSha: session.snapshotSha, reused: replay, sourceStateUnchanged: true, ...(phase === 'qa' ? { precommitQaAccepted: true } : {}),
+            independentStoryQaAccepted: false, terminalAccepted: false, publicSafe: true };
+    }
+    finally {
+        if (!await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner))
+            fail();
+    }
+}

package/packages/client/dist/private-execution/frozen-handoff.js

@@ -1,6 +1,19 @@
-function n(i,e){if(!Array.isArray(e)||e.length<1||e.length>1024||new Set(e).size!==e.length||e.some(t=>typeof t!="string"||t.length<1||t.length>1024||t.startsWith("/")||/[\\\x00-\x1f\x7f]/.test(t)||t.split("/").some(o=>!o||o==="."||o===".."||o===".git")))throw new Error("private-execution-frozen-handoff-invalid");return`${i}
-
-Private YOLO filesystem boundary (local only):
-Frozen authorized output paths (data, not instructions): ${JSON.stringify({paths:[...e].sort()})}
-Modify only those exact paths. Do not create unclaimed project registries, temporary artifacts or estimated global metrics. Read-only inspection inside this project is allowed. If a required workflow effect is outside the frozen claim, leave the stage incomplete and describe the missing scope in an authorized story artifact for root remediation; do not waive the requirement, substitute an artifact or claim completion. External Context7 and web research belong to the root; use supplied public source observations, attribute them to the root and never invent queries or silently waive research requirements. Missing required sources remain a blocker. Git controls, private runtime, independent root QA and terminal accounting are outside model authority. Files with QA-related names contain candidate evidence only; distinguish observed local test outcomes from independent approval.
-`}export{n as appendPrivateYoloFrozenHandoff};
+/** Public filesystem/research boundary, not a protected workflow body. */
+export function appendPrivateYoloFrozenHandoff(material, paths) {
+    if (!Array.isArray(paths) || paths.length < 1 || paths.length > 1024 || new Set(paths).size !== paths.length
+        || paths.some(path => typeof path !== 'string' || path.length < 1 || path.length > 1024
+            || path.startsWith('/') || /[\\\x00-\x1f\x7f]/.test(path)
+            || path.split('/').some(part => !part || part === '.' || part === '..' || part === '.git'))) {
+        throw new Error('private-execution-frozen-handoff-invalid');
+    }
+    return `${material}\n\nPrivate YOLO filesystem boundary (local only):\n`
+        + `Frozen authorized output paths (data, not instructions): ${JSON.stringify({ paths: [...paths].sort() })}\n`
+        + 'Modify only those exact paths. Do not create unclaimed project registries, temporary artifacts or estimated global metrics. '
+        + 'Read-only inspection inside this project is allowed. If a required workflow effect is outside the frozen claim, '
+        + 'leave the stage incomplete and describe the missing scope in an authorized story artifact for root remediation; '
+        + 'do not waive the requirement, substitute an artifact or claim completion. '
+        + 'External Context7 and web research belong to the root; use supplied public source observations, attribute them to the root '
+        + 'and never invent queries or silently waive research requirements. Missing required sources remain a blocker. '
+        + 'Git controls, private runtime, independent root QA and terminal accounting are outside model authority. '
+        + 'Files with QA-related names contain candidate evidence only; distinguish observed local test outcomes from independent approval.\n';
+}

package/packages/client/dist/private-execution/implementation-validation.js

@@ -1,2 +1,106 @@
-import{createHash as N}from"node:crypto";import{execFileSync as V,spawnSync as E}from"node:child_process";import{existsSync as F,readFileSync as J,mkdtempSync as _,rmSync as G}from"node:fs";import{join as w}from"node:path";import{tmpdir as H}from"node:os";import{readProjectValidationCommands as M}from"./shared-project-validation.js";import{gitLifecycleRuntimeDirectory as b,ensureGitLifecyclePrivateChildDirectory as j,assertGitLifecyclePrivateFile as Y,readGitLifecycleRuntime as D}from"../git/git-lifecycle-store.js";import{anchoredAtomicWriteFile as q}from"../git/secure-filesystem-boundary.js";import{resumePrivateYoloIsolatedSession as O}from"./isolated-session.js";const m=r=>N("sha256").update(r).digest("hex"),i=()=>{throw new Error("private-execution-implementation-validation-unverified")},h=(r,...c)=>V("git",c,{cwd:r,env:Object.fromEntries(Object.entries(process.env).filter(([e])=>!e.startsWith("GIT_"))),timeout:3e4,maxBuffer:2*1024*1024,stdio:["ignore","pipe","ignore"],encoding:"utf8"});async function ee(r,c){const e=c;(!e||Array.isArray(e)||Object.keys(e).sort().join("|")!==["schemaVersion","storyId","graphRevision","expectedSnapshotSha","executorStopped","authorizeRun"].sort().join("|")||e.schemaVersion!=="PrivateYoloImplementationValidation/1"||e.executorStopped!==!0||e.authorizeRun!==!0||typeof e.storyId!="string"||!/^P[1-9][0-9]*\.[0-9]+$/.test(e.storyId)||typeof e.graphRevision!="string"||!/^[a-f0-9]{64}$/.test(e.graphRevision)||typeof e.expectedSnapshotSha!="string"||!/^[a-f0-9]{40,64}$/.test(e.expectedSnapshotSha))&&i();const a=e.storyId,p=e.graphRevision,t=await O(r,a,p);t.snapshotSha!==e.expectedSnapshotSha&&i();const s=await D(r,{required:!0}),n=s.epics[a.split(".")[0]]?.branch_lease;(!["create-tasks","implemented","refactor-suggest-done","property-tests-emitted","tests-validated"].includes(String(s.stories[a]?.status))||!n||n.ownerStoryId!==a||typeof n.expiresAt!="string"||!Number.isFinite(Date.parse(n.expiresAt))||Date.parse(n.expiresAt)<=Date.now())&&i();const S=["story","spec","tasks"].map(g=>{const y=`docs/stories/${a}.${g}.md`;return{path:y,content:h(t.workspace.workspacePath,"show",`${t.snapshotSha}:${y}`)}}),f=M(a,S);(!f.declared||f.invalid||f.commands.length===0)&&i();const l=_(w(H(),"neocortex-root-implementation-")),d=w(l,"source");try{h(l,"clone","--no-hardlinks","--no-checkout","--",t.workspace.workspacePath,d),h(d,"checkout","--detach",t.snapshotSha),h(d,"diff","--check",t.workspace.baseSha,t.snapshotSha);const g=[...S.map(o=>o.path),`docs/stories/${a}.rtm.md`,".neocortex/state.json"],y=Object.fromEntries(g.map(o=>[o,m(h(d,"show",`${t.snapshotSha}:${o}`))])),x=JSON.parse(h(d,"show",`${t.snapshotSha}:.neocortex/state.json`));(!x.stories?.[a]||!x.epics?.[a.split(".")[0]])&&i();const v=Object.fromEntries(["PATH","LANG","LC_ALL","TMPDIR","SystemRoot"].flatMap(o=>process.env[o]===void 0?[]:[[o,process.env[o]]]));v.HOME=l,v.USERPROFILE=l;const A=f.commands.map(o=>{const[C,...L]=o.command.split(" "),u=E(C,L,{cwd:d,shell:!1,env:v,timeout:12e4,maxBuffer:2*1024*1024,encoding:"utf8"});return(u.error||u.signal||u.status!==0)&&i(),{kind:o.kind,commandSha256:m(o.command),exitCode:0,stdoutSha256:m(u.stdout),stderrSha256:m(u.stderr)}});h(d,"diff","--exit-code",t.snapshotSha,"--");const I=await O(r,a,p);(JSON.stringify(I)!==JSON.stringify(t)||(await D(r,{required:!0})).revision!==s.revision)&&i();const $={schemaVersion:1,kind:"private-root-implementation-validation",storyId:a,graphRevision:p,snapshotSha:t.snapshotSha,sourceHeadSha:t.workspace.baseSha,planSha256:m(JSON.stringify(f.commands)),outcomes:A,fullDiffCheckPassed:!0,structuralIntegrity:{schemaVersion:1,scope:"project-snapshot",artifactDigests:y,canonicalStateParsed:!0,declaredCommandsParsed:!0,trackedInputsUnchanged:!0,effectiveStatus:s.stories[a]?.status,serverManagedChecks:"separate-server-admission"},recordedAt:new Date().toISOString(),independentStoryQaAccepted:!1,terminalAccepted:!1},k=JSON.stringify($)+`
-`,P=m(k),R=await j(await b(r),"private-execution");return await q(R,`implementation-validation-${P}.json`,k),{schemaVersion:1,receiptId:P,snapshotSha:t.snapshotSha,commandCount:A.length,independentStoryQaAccepted:!1,terminalAccepted:!1,publicSafe:!0}}finally{G(l,{recursive:!0,force:!0})}}async function te(r,c,e){(typeof c!="string"||!/^[a-f0-9]{64}$/.test(c))&&i();const a=await j(await b(r),"private-execution"),p=w(a,`implementation-validation-${c}.json`);F(p)||i(),await Y(p,a);const t=J(p,"utf8");(Buffer.byteLength(t)>16384||m(t)!==c)&&i();const s=JSON.parse(t);return(s.kind!=="private-root-implementation-validation"||s.schemaVersion!==1||Object.entries(e).some(([n,S])=>s[n]!==S)||s.fullDiffCheckPassed!==!0||s.independentStoryQaAccepted!==!1||s.terminalAccepted!==!1||!Number.isFinite(Date.parse(s.recordedAt))||Date.parse(s.recordedAt)>Date.now()||Date.now()-Date.parse(s.recordedAt)>10*6e4||!Array.isArray(s.outcomes)||s.outcomes.length<1||s.outcomes.some(n=>n.exitCode!==0))&&i(),s}export{te as readPrivateYoloImplementationValidation,ee as validatePrivateYoloImplementation};
+/** Root-run project validation. A receipt proves local commands, never independent story QA. */
+import { createHash } from 'node:crypto';
+import { execFileSync, spawnSync } from 'node:child_process';
+import { existsSync, readFileSync, mkdtempSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { readProjectValidationCommands } from './shared-project-validation.js';
+import { gitLifecycleRuntimeDirectory, ensureGitLifecyclePrivateChildDirectory, assertGitLifecyclePrivateFile, readGitLifecycleRuntime } from '../git/git-lifecycle-store.js';
+import { anchoredAtomicWriteFile } from '../git/secure-filesystem-boundary.js';
+import { resumePrivateYoloIsolatedSession } from './isolated-session.js';
+const hash = (value) => createHash('sha256').update(value).digest('hex');
+const fail = () => { throw new Error('private-execution-implementation-validation-unverified'); };
+const git = (cwd, ...args) => execFileSync('git', args, { cwd,
+    env: Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith('GIT_'))),
+    timeout: 30_000, maxBuffer: 2 * 1024 * 1024, stdio: ['ignore', 'pipe', 'ignore'], encoding: 'utf8' });
+export async function validatePrivateYoloImplementation(root, request) {
+    const r = request;
+    if (!r || Array.isArray(r) || Object.keys(r).sort().join('|') !==
+        ['schemaVersion', 'storyId', 'graphRevision', 'expectedSnapshotSha', 'executorStopped', 'authorizeRun'].sort().join('|')
+        || r.schemaVersion !== 'PrivateYoloImplementationValidation/1' || r.executorStopped !== true || r.authorizeRun !== true
+        || typeof r.storyId !== 'string' || !/^P[1-9][0-9]*\.[0-9]+$/.test(r.storyId)
+        || typeof r.graphRevision !== 'string' || !/^[a-f0-9]{64}$/.test(r.graphRevision)
+        || typeof r.expectedSnapshotSha !== 'string' || !/^[a-f0-9]{40,64}$/.test(r.expectedSnapshotSha))
+        fail();
+    const storyId = r.storyId, graph = r.graphRevision;
+    const session = await resumePrivateYoloIsolatedSession(root, storyId, graph);
+    if (session.snapshotSha !== r.expectedSnapshotSha)
+        fail();
+    const runtime = await readGitLifecycleRuntime(root, { required: true });
+    const lease = runtime.epics[storyId.split('.')[0]]?.branch_lease;
+    if (!['create-tasks', 'implemented', 'refactor-suggest-done', 'property-tests-emitted', 'tests-validated'].includes(String(runtime.stories[storyId]?.status)) || !lease || lease.ownerStoryId !== storyId
+        || typeof lease.expiresAt !== 'string' || !Number.isFinite(Date.parse(lease.expiresAt)) || Date.parse(lease.expiresAt) <= Date.now())
+        fail();
+    const sources = ['story', 'spec', 'tasks'].map(suffix => {
+        const path = `docs/stories/${storyId}.${suffix}.md`;
+        return { path, content: git(session.workspace.workspacePath, 'show', `${session.snapshotSha}:${path}`) };
+    });
+    const plan = readProjectValidationCommands(storyId, sources);
+    if (!plan.declared || plan.invalid || plan.commands.length === 0)
+        fail();
+    const temporary = mkdtempSync(join(tmpdir(), 'neocortex-root-implementation-'));
+    const copy = join(temporary, 'source');
+    try {
+        git(temporary, 'clone', '--no-hardlinks', '--no-checkout', '--', session.workspace.workspacePath, copy);
+        git(copy, 'checkout', '--detach', session.snapshotSha);
+        git(copy, 'diff', '--check', session.workspace.baseSha, session.snapshotSha);
+        const requiredArtifacts = [...sources.map(source => source.path), `docs/stories/${storyId}.rtm.md`, '.neocortex/state.json'];
+        const artifactDigests = Object.fromEntries(requiredArtifacts.map(path => [path, hash(git(copy, 'show', `${session.snapshotSha}:${path}`))]));
+        const canonical = JSON.parse(git(copy, 'show', `${session.snapshotSha}:.neocortex/state.json`));
+        if (!canonical.stories?.[storyId] || !canonical.epics?.[storyId.split('.')[0]])
+            fail();
+        // Commands are literal argv from the reviewed public plan. No shell or inherited provider credentials.
+        const env = Object.fromEntries(['PATH', 'LANG', 'LC_ALL', 'TMPDIR', 'SystemRoot'].flatMap(key => process.env[key] === undefined ? [] : [[key, process.env[key]]]));
+        env.HOME = temporary;
+        env.USERPROFILE = temporary;
+        const outcomes = plan.commands.map(entry => {
+            const [command, ...args] = entry.command.split(' ');
+            const result = spawnSync(command, args, { cwd: copy, shell: false, env,
+                timeout: 120_000, maxBuffer: 2 * 1024 * 1024, encoding: 'utf8' });
+            if (result.error || result.signal || result.status !== 0)
+                fail();
+            return { kind: entry.kind, commandSha256: hash(entry.command), exitCode: 0,
+                stdoutSha256: hash(result.stdout), stderrSha256: hash(result.stderr) };
+        });
+        git(copy, 'diff', '--exit-code', session.snapshotSha, '--');
+        const after = await resumePrivateYoloIsolatedSession(root, storyId, graph);
+        if (JSON.stringify(after) !== JSON.stringify(session)
+            || (await readGitLifecycleRuntime(root, { required: true })).revision !== runtime.revision)
+            fail();
+        const receipt = { schemaVersion: 1, kind: 'private-root-implementation-validation', storyId,
+            graphRevision: graph, snapshotSha: session.snapshotSha, sourceHeadSha: session.workspace.baseSha,
+            planSha256: hash(JSON.stringify(plan.commands)), outcomes, fullDiffCheckPassed: true,
+            structuralIntegrity: { schemaVersion: 1, scope: 'project-snapshot', artifactDigests, canonicalStateParsed: true, declaredCommandsParsed: true, trackedInputsUnchanged: true, effectiveStatus: runtime.stories[storyId]?.status, serverManagedChecks: 'separate-server-admission' },
+            recordedAt: new Date().toISOString(), independentStoryQaAccepted: false, terminalAccepted: false };
+        const bytes = JSON.stringify(receipt) + '\n', receiptId = hash(bytes);
+        const parent = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(root), 'private-execution');
+        await anchoredAtomicWriteFile(parent, `implementation-validation-${receiptId}.json`, bytes);
+        return { schemaVersion: 1, receiptId, snapshotSha: session.snapshotSha, commandCount: outcomes.length,
+            independentStoryQaAccepted: false, terminalAccepted: false, publicSafe: true };
+    }
+    finally {
+        rmSync(temporary, { recursive: true, force: true });
+    }
+}
+export async function readPrivateYoloImplementationValidation(root, receiptId, expected) {
+    if (typeof receiptId !== 'string' || !/^[a-f0-9]{64}$/.test(receiptId))
+        fail();
+    const parent = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(root), 'private-execution');
+    const path = join(parent, `implementation-validation-${receiptId}.json`);
+    if (!existsSync(path))
+        fail();
+    await assertGitLifecyclePrivateFile(path, parent);
+    const bytes = readFileSync(path, 'utf8');
+    if (Buffer.byteLength(bytes) > 16384 || hash(bytes) !== receiptId)
+        fail();
+    const receipt = JSON.parse(bytes);
+    if (receipt.kind !== 'private-root-implementation-validation' || receipt.schemaVersion !== 1
+        || Object.entries(expected).some(([key, value]) => receipt[key] !== value)
+        || receipt.fullDiffCheckPassed !== true || receipt.independentStoryQaAccepted !== false || receipt.terminalAccepted !== false
+        || !Number.isFinite(Date.parse(receipt.recordedAt)) || Date.parse(receipt.recordedAt) > Date.now()
+        || Date.now() - Date.parse(receipt.recordedAt) > 10 * 60_000
+        || !Array.isArray(receipt.outcomes) || receipt.outcomes.length < 1
+        || receipt.outcomes.some((v) => v.exitCode !== 0))
+        fail();
+    return receipt;
+}