@ornexus/neocortex 4.60.72 → 4.60.73

package/packages/client/dist/git/git-lifecycle-store.js

@@ -1,9 +1,1981 @@
-import{execFile as pi,execFileSync as M}from"node:child_process";import{createHash as w,randomBytes as De}from"node:crypto";import{lstat as Re,open as mi,readFile as F,realpath as X,stat as yi}from"node:fs/promises";import{existsSync as H,lstatSync as ze,readFileSync as He,realpathSync as _e}from"node:fs";import{basename as C,dirname as K,isAbsolute as ae,join as S,relative as bi,resolve as v}from"node:path";import{promisify as wi}from"node:util";import{publicWriteSet as vi}from"../../../shared/dist/yoloop/public-story-write-set.js";import{isRootProjectMemoryEffect as Si}from"../private-execution/shared-root-memory-types.js";import{verifyRootMemoryPhysicalWriteSet as Di}from"../private-execution/root-memory-git-evidence.js";import{resolveBranchUnit as Ri}from"../../../shared/dist/yoloop/branch-unit.js";import{anchoredAtomicWriteFile as _i,anchoredCreateOwnedDirectory as je,anchoredEnsureDirectory as Ge,anchoredExecuteGit as Ei,anchoredExecuteNode as Te,anchoredRemoveDirectory as xi,anchoredRenameDirectory as re}from"./secure-filesystem-boundary.js";import{GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID as Ii,GIT_LIFECYCLE_REVIEW_PR_STEP_ID as Ai,GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID as Ee}from"./git-lifecycle-step-ids.js";const V=wi(pi),le="neocortex-yoloop",he="runtime.json",q="node scripts/test-root.mjs --gate complete",Me=Object.freeze({"P174.03.029264":"339141be7339a0edf55710cbccb6e6558f514792"}),ki=Object.freeze({"P174.03.811759":Object.freeze({baseSha:"749c8fc732deaf26c81a8e08cc94b83c8cf0f5ba",headSha:"84162456d9cbe5000ffd0ed3eb3d0e88cfeba499",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2",commitBodyDigest:"b4fc759a49765fd8c0b3d0f5d1c333c2a4bf28d324e83eedabb12f9530df3738",changedPathsDigest:"11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2",qaDigest:"f1100775e21f5d0d990f77303a2a06d936908f016983e32a63316d81aee6b9fc",reviewDigest:"50400bbcddb6f02408837cf99077de5d3af8c84822ab23a8b5499c338af7103a"}),"P174.03.685003":Object.freeze({baseSha:"84162456d9cbe5000ffd0ed3eb3d0e88cfeba499",headSha:"272a7fee89e4b9324d35701df1c83b671fa96299",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641",commitBodyDigest:"e97966e26ce3ba31d5951b9fdac67808c88c1fd8be7ec1e73982f3f1cc7ffd81",changedPathsDigest:"6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641",qaDigest:"7439329a93321f39fb6b0de0a41c22e58373a399f9048e362dff4ffa6f1a7d89",reviewDigest:"1b2d12262e84acf9da7d06149a0effb11274ebdc986affbfd47635b855ec7135"}),"P174.03.029264":Object.freeze({baseSha:"272a7fee89e4b9324d35701df1c83b671fa96299",headSha:"339141be7339a0edf55710cbccb6e6558f514792",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab",commitBodyDigest:"0f269a00dcd168a6f548ff10dfa667b193c948ac9c7211f5cb11a0561757c371",changedPathsDigest:"1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab",qaDigest:"ef0fd2c6e216557825cd8521ccb2f9960a3af48f18e7a5ada441bee8bfda400b",reviewDigest:"372d0f4a2f32978c8b39f20167637b3917187edb75d49875e93200c4c5a19d0d"}),"P174.03.913359":Object.freeze({baseSha:"339141be7339a0edf55710cbccb6e6558f514792",headSha:"4ccc90b85c49b27f718090bf25bc452f1b84e5e3",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5",commitBodyDigest:"89a6653197509e75246a758d2706876b337770571a1cac47d9d85ec96c196459",changedPathsDigest:"12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5",qaDigest:"c7d3762ad30e4f9356243df17a1dd7123cbf1b660808d68176f44d1cd5da6449",reviewDigest:"e4ecf577e174fd66f31aa4a0113ab672ced16b12ee531f6831aa533795145ba1"}),"P174.03.724350":Object.freeze({baseSha:"4ccc90b85c49b27f718090bf25bc452f1b84e5e3",headSha:"568e9464fb086304146b9eb4594281f91302aef1",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe",commitBodyDigest:"b3032338bfcd6c9dc460e9426220a1966dedeff9968c4064fdd36a315560721b",changedPathsDigest:"c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe",qaDigest:"91f2f5b00935b1b04bb5d400df500cbc97c412072078b713c6e5ba8fda669bd0",reviewDigest:"9bc92069d3b3a76cc8b02d339d432690258be1376464b69e152ed8fd3d682f05"}),"P174.03.011976":Object.freeze({baseSha:"568e9464fb086304146b9eb4594281f91302aef1",headSha:"195599b1a99a99a8416c4c26c9ab9990847338a4",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21",commitBodyDigest:"b8a28392fac663dd614b695a49c894b7cab116d45722a42850e3b24e2aaf36f4",changedPathsDigest:"49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21",qaDigest:"6eb4459a7d80c4a268fc931297e8156ed2a320584f8775f0787d91b42c0929d4",reviewDigest:"98b21de29f7cceeec73da19000c6c144395cce6eb699c6a82dfab505d4ab7b44"}),"P174.03.686659":Object.freeze({baseSha:"195599b1a99a99a8416c4c26c9ab9990847338a4",headSha:"0db3681a5dad4e25ce37d967c636eb9d54915556",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e",commitBodyDigest:"143257f4018ad773afc0c7280bd8aab8786851a9c20b65f8110881ff54656839",changedPathsDigest:"5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e",qaDigest:"6303dbf473e2815a3671aeb2c25528d8daba484b92a5a40d1eea5215e1f6763e",reviewDigest:"1bd6695846ed9340c8677cfa9b573880532187aeee487efaaa70577a0c94e7f2"})}),xe="neocortex-yoloop-runtime.json",Ci="runtime.lock",Fe=new WeakMap;async function Pt(i,e){return(await Oi(i,{headSha:e.headSha,graphRevisions:[e.graphRevision],...e.nowIso!==void 0?{nowIso:e.nowIso}:{},...e.anchoredWorkspace!==void 0?{anchoredWorkspace:e.anchoredWorkspace}:{}})).get(e.graphRevision)}async function Oi(i,e){const t=[...new Set(e.graphRevisions)];if(!D(e.headSha)||t.length===0||t.some(x=>!p(x)))throw new Error("p205-transient-binding-invalid");const r=e.anchoredWorkspace;if(r&&v(i)!==S(v(r.parent),r.name))throw new Error("p205-transient-anchor-binding-invalid");const n=async x=>r?(await Ei(r.parent,r.name,r.identity,x)).toString("utf8"):String((await V("git",[...x],{cwd:i,encoding:"utf8",maxBuffer:8*1024*1024})).stdout),a=async()=>r?JSON.parse((await Te(r.parent,r.name,r.identity,["-e","const fs=require('node:fs');process.stdout.write(JSON.stringify({manifest:fs.readFileSync('config/release-gates.v2.json','utf8'),runner:fs.readFileSync('scripts/test-root.mjs','utf8')}));"])).toString("utf8")):{manifest:await F(S(i,"config","release-gates.v2.json"),"utf8"),runner:await F(S(i,"scripts","test-root.mjs"),"utf8")};if((await n(["rev-parse","HEAD"])).trim()!==e.headSha)throw new Error("p205-transient-head-mismatch");const{manifest:o,runner:u}=await a(),[c,d]=await Promise.all([n(["show",`${e.headSha}:config/release-gates.v2.json`]),n(["show",`${e.headSha}:scripts/test-root.mjs`])]);if(o!==c||u!==d)throw new Error("p205-transient-producer-dirty");const l=JSON.parse(o),g=Array.isArray(l.requiredCompleteClasses)?l.requiredCompleteClasses.filter(x=>typeof x=="string"&&/^[a-z0-9-]+$/.test(x)):[];if(l.contract!=="P205-CI-02"||g.length===0)throw new Error("p205-transient-manifest-invalid");const h={...process.env};delete h.NEOCORTEX_PROFILE_DIR;const m=r?(await Te(r.parent,r.name,r.identity,["scripts/test-root.mjs","--gate","complete"])).toString("utf8"):String((await V(process.execPath,["scripts/test-root.mjs","--gate","complete"],{cwd:i,encoding:"utf8",maxBuffer:64*1024*1024,env:h})).stdout),{manifest:R,runner:k}=await a();if(R!==o||k!==u)throw new Error("p205-transient-producer-raced");if((await n(["rev-parse","HEAD"])).trim()!==e.headSha)throw new Error("p205-transient-head-raced");const G=w("sha256").update(o).digest("hex"),y=w("sha256").update(m).digest("hex"),b=oe(e.nowIso??new Date().toISOString()),T=new Map,Z=Object.freeze(g);for(const x of t){const U=w("sha256").update(["p205-transient-execution-v1",q,e.headSha,x,G,g.join(","),y,b].join("\0")).digest("hex"),ge=Object.freeze({schemaVersion:1,kind:"p205_transient_execution_authority",contract:"P205-CI-02",command:q,executionHeadSha:e.headSha,graphRevision:x,manifestDigest:G,gateIds:Z,resultDigest:y,executedAt:b,executionEvidenceDigest:U}),ye=Object.freeze(Object.create(null));Fe.set(ye,ge),T.set(x,ye)}return T}async function Ie(i,e={}){const t=await Wi(i);return ni(t,e)}function Pi(i,e={}){let t;try{const r=M("git",["rev-parse","--git-common-dir"],{cwd:i,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),n=_e(i),a=ae(r)?v(r):v(n,r),s=_e(a);if(s!==a)throw new Error("git-lifecycle-common-dir-symlink");Ui(s);const o=S(s,le),u=S(o,he);if(H(o)&&(ai(o,"directory"),_e(o)!==o))throw new Error("git-lifecycle-runtime-directory-symlink");t=H(u)?u:S(s,xe)}catch{if(e.required)throw new Error("git-lifecycle-common-dir-invalid");return Pe()}if(!H(t)){if(e.required)throw new Error("git-lifecycle-runtime-missing");return Pe()}return ai(t,"file"),Oe(JSON.parse(He(t,"utf8")))}async function $t(i){try{await Ie(i,{required:!0});return}catch(e){if(!(e instanceof Error)||e.message!=="git-lifecycle-runtime-missing")throw e}try{await Ke(i,()=>{},{expectedRevision:0})}catch(e){if(!(e instanceof Error)||e.message!=="git-lifecycle-runtime-revision-conflict")throw e;await Ie(i,{required:!0})}}function We(i,e,t){if(!i||i.ownerStoryId!==e)return!1;const r=typeof i.sessionId=="string"?i.sessionId:"",n=Date.parse(String(i.expiresAt));return/^setup-[a-f0-9]{64}$/.test(r)&&i.idempotencyKey===r&&Number.isFinite(n)&&n>t}async function Bt(i,e,t=new Date().toISOString()){if(!pt(e))throw new Error("git-lifecycle-graph-authority-invalid");const r=S(v(i),".neocortex","state.json"),n=await F(r,"utf8"),a=f(JSON.parse(n));if(!a)throw new Error("git-lifecycle-tracked-state-invalid");const s=await Ie(i),o=Bi(a,s),u=f(f(o.epics)?.[e.epicId]),c=f(f(o.stories)?.[e.storyId]);if(!u)throw new Error("git-lifecycle-graph-authority-epic-invalid");if(!c||String(c.epic_id??e.storyId.split(".")[0])!==e.epicId)throw new Error("git-lifecycle-graph-authority-story-invalid");const d=Array.isArray(u.stories)?u.stories.filter(y=>typeof y=="string"):Object.keys(f(o.stories)??{}).filter(y=>{const b=f(f(o.stories)?.[y]);return String(b?.epic_id??y.split(".")[0])===e.epicId});if(Array.isArray(u.stories)&&!d.includes(e.storyId))throw new Error("git-lifecycle-graph-authority-story-invalid");const l=d.map(y=>{const b=f(f(o.stories)?.[y])??{};return{id:y,branch_name:typeof b.branch_name=="string"||b.branch_name===null?b.branch_name:void 0,pr_number:typeof b.pr_number=="number"||b.pr_number===null?b.pr_number:void 0,steps_completed:Array.isArray(b.steps_completed)?b.steps_completed.filter(T=>typeof T=="string"):[],checkpoint:f(b.checkpoint)}}),g=Ri({...u,id:e.epicId},l);if(g.mode!=="epic")throw new Error("git-lifecycle-graph-authority-epic-invalid");if(g.executionBranch!==e.executionBranch)throw new Error("git-lifecycle-graph-authority-branch-mismatch");if(g.originBranch!==void 0&&g.originBranch!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-mismatch");const h=typeof f(s.epics[e.epicId])?.origin_branch=="string"?String(f(s.epics[e.epicId]).origin_branch):void 0;if(h!==void 0&&h!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-mismatch");if(g.originBranch===void 0&&h===void 0){const{stdout:y}=await V("git",["branch","--show-current"],{cwd:i,encoding:"utf8",maxBuffer:1048576});if(String(y).trim()!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-physical-mismatch")}const m=typeof u.graph_revision=="string"?u.graph_revision:void 0,R=typeof f(s.epics[e.epicId])?.graph_revision=="string"?String(f(s.epics[e.epicId]).graph_revision):void 0;if(m!==void 0&&!p(m))throw new Error("git-lifecycle-graph-revision-invalid");if(m===e.graphRevision&&R===e.graphRevision&&g.originBranch===e.originBranch&&h===e.originBranch)return{applied:!1,reused:!0,revision:s.revision,graphRevision:e.graphRevision};const k=Date.parse(t);if(!Number.isFinite(k))throw new Error("git-lifecycle-graph-authority-time-invalid");const E=f(u.branch_lease);if(E&&Number.isFinite(Date.parse(String(E.expiresAt)))&&Date.parse(String(E.expiresAt))>k&&!We(E,e.storyId,k))throw new Error("git-lifecycle-graph-authority-writer-active");return{applied:!0,reused:!1,revision:(await Ke(i,y=>{const b=Ni(y,e.epicId);if(b.branch_mode!==void 0&&b.branch_mode!=="epic")throw new Error("git-lifecycle-graph-authority-epic-raced");const T=b.execution_branch;if(T!==void 0&&T!==e.executionBranch)throw new Error("git-lifecycle-graph-authority-branch-raced");const Z=b.origin_branch;if(Z!==void 0&&Z!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-raced");const x=b.graph_revision;if(x!==void 0&&x!==m)throw new Error("git-lifecycle-graph-authority-epoch-raced");const U=f(b.branch_lease);if(U&&Number.isFinite(Date.parse(String(U.expiresAt)))&&Date.parse(String(U.expiresAt))>k&&!We(U,e.storyId,k))throw new Error("git-lifecycle-graph-authority-writer-active");b.branch_mode="epic",b.execution_branch=e.executionBranch,b.origin_branch=e.originBranch,b.graph_revision=e.graphRevision},{expectedRevision:s.revision,preCommit:async()=>{if(await F(r,"utf8")!==n)throw new Error("git-lifecycle-graph-authority-tracked-state-raced")}})).document.revision,graphRevision:e.graphRevision}}async function Ke(i,e,t={}){const r=await Ce(i),n=await ri(r),a=S(n,Ci),s=await yt(a);try{const o=S(n,he),u=S(r,xe),c=await ni(H(o)?o:u);if(t.expectedRevision!==void 0&&t.expectedRevision!==c.revision)throw new Error("git-lifecycle-runtime-revision-conflict");const d=structuredClone(c),l=e(d),g=Oe({...d,schemaVersion:1,revision:c.revision+1});return await t.preCommit?.(g),await j(n,"directory"),await Qi(o),await _i(n,he,`${JSON.stringify(g,null,2)}
-`),await j(o,"file"),await $i(n),{document:g,value:l}}finally{await bt(a,s).catch(()=>{})}}async function $i(i){let e;try{e=await mi(i,"r")}catch(t){if(process.platform==="win32"&&(P(t,"EPERM")||P(t,"EISDIR")||P(t,"EINVAL")))return;throw t}try{await e.sync()}finally{await e.close()}}function Bi(i,e){const t=structuredClone(i),r=Ye(t,"epics"),n=Ye(t,"stories");for(const[a,s]of Object.entries(e.epics))r[a]={...f(r[a])??{},...structuredClone(s)};for(const[a,s]of Object.entries(e.stories)){const o=f(n[a])??{},u=o.steps_completed,c=s.steps_completed;s.status==="branch-ready"&&s.last_step===Ee&&Array.isArray(c)&&c.length===1&&c[0]===Ee&&s.checkpoint===void 0&&Array.isArray(u)&&u.includes(Ee)||(n[a]={...o,...structuredClone(s)})}return t}function Ye(i,e){const t=i[e];if(t===void 0){const a={};return i[e]=a,a}const r=f(t);if(r)return r;if(!Array.isArray(t))throw new Error(`git-lifecycle-tracked-${e}-invalid`);const n={};for(const a of t){const s=f(a),o=typeof s?.id=="string"?s.id.trim():"";if(!o||n[o]!==void 0)throw new Error(`git-lifecycle-tracked-${e}-ambiguous`);n[o]=s}return i[e]=n,n}function Ni(i,e){return i.epics[e]??(i.epics[e]={})}function Nt(i,e){return i.stories[e]??(i.stories[e]={})}function Je(i,e,t,r){const n=f(i);return!!(n&&n.epicId===t&&n.branch===r&&n.qaVerdict==="passed"&&n.reviewVerdict==="approved"&&ci(n,e))}async function Vt(i,e,t,r,n,a,s=[]){return Qe(i,e,t,r,n,a,s).verdict==="verified"}function Qe(i,e,t,r,n,a,s=[],o=new Date().toISOString(),u=a===void 0?"scheduling":"integration"){const c=()=>Xe({storyId:t,epicId:r,executionBranch:n,value:e,verifiedAt:o,verdict:"rejected",reasonCode:"checkpoint-git-physical-invalid"});try{if(!Je(e,t,r,n))return c();const d=f(e),l=f(d.qaReceipt),g=f(d.reviewReceipt),h=String(d.headSha),m=String(d.baseSha),R=Ae(i,t,h,g.reviewArtifactDigest===void 0),k=g.reviewArtifactDigest===void 0&&!Fi(i,t,h);if(g.reviewArtifactDigest!==void 0&&g.reviewArtifactDigest!==R?.digest)return c();const E=$(i,["rev-parse",`refs/heads/${n}`]).trim();if(M("git",["merge-base","--is-ancestor",h,E],{cwd:i,stdio:"ignore"}),!k&&R?.verdict!=="approved"){if(g.reviewArtifactDigest!==void 0||!Mi(i,d,g,l,t,r,E))return c()}else if(d.reviewReconciliation!==void 0)return c();const y=$(i,["show","--no-patch","--format=%H%n%P%n%B",h]),b=$(i,["rev-parse",`${h}^`]).trim(),T=$(i,["rev-list","--count",`${m}..${h}`]).trim();if(b!==m||T!=="1")return c();const Z=new Set(y.split(`
-`).map(N=>N.trim())),x=y.split(`
-`).map(N=>N.trim()).filter(N=>N.startsWith("Neocortex-Review-Artifact-Digest: "));if(x.length>0&&(x.length!==1||x[0]!==`Neocortex-Review-Artifact-Digest: ${R?.digest}`||g.reviewArtifactDigest!==R?.digest))return c();const ge=[`Neocortex-Story: ${t}`,`Neocortex-Epic: ${r}`,`Neocortex-Execution-Branch: ${n}`,`Neocortex-Bundle-Digest: ${String(d.bundleDigest)}`,`Neocortex-Graph-Revision: ${String(d.graphRevision)}`,...d.dispatchId?[`Neocortex-Dispatch: ${String(d.dispatchId)}`]:[],...d.bundleId?[`Neocortex-Bundle: ${String(d.bundleId)}`]:[],...d.claimRevision?[`Neocortex-Claim-Revision: ${String(d.claimRevision)}`]:[]].every(N=>Z.has(N));if(ge){const qe=[...Z].find(hi=>hi.startsWith("Neocortex-Prepared-Base: "))?.slice(25)??"";if(!/^[a-f0-9]{40,64}$/i.test(qe))return c();M("git",["merge-base","--is-ancestor",qe,h],{cwd:i,stdio:"ignore"})}const ie=$(i,["diff-tree","--no-commit-id","--name-only","-r","-z",h]).split("\0").filter(Boolean);if(ie.length===0||ie.some(N=>!fe(N)))return c();const be=w("sha256").update(y).digest("hex"),we=w("sha256").update([...ie].sort().join("\0")).digest("hex"),L=Ze({projectRoot:i,checkpoint:d,storyId:t,epicId:r,executionBranch:n,baseSha:m,headSha:h,commitBodyDigest:be,changedPathsDigest:we,changedPaths:ie,authorizedWriteSet:s.length>0?s:qi(i,t)});if(!L||l.receiptRef!==`story-qa:${String(l.sourceEvidenceDigest)}`)return c();const Be=ji({storyId:t,baseSha:m,headSha:h,bundleDigest:String(d.bundleDigest),graphRevision:String(d.graphRevision),commitBody:y,changedPaths:ie}),Ne=l.evidenceVersion==="p205-execution-v2"&&l.contract==="P205-CI-02"&&l.command===q&&p(l.manifestDigest)&&z(l.gateIds,32,!0)&&p(l.resultDigest)&&l.sourceEvidenceDigest===Gi({gitEvidenceDigest:Be,headSha:h,graphRevision:String(d.graphRevision),manifestDigest:String(l.manifestDigest),gateIds:l.gateIds,resultDigest:String(l.resultDigest)}),ui=l.evidenceVersion==="git-immutable-v1"&&l.sourceEvidenceDigest===Be,gi=l.evidenceVersion===void 0&&L.mode==="legacy-migration"&&L.binding?.qaDigest===l.sourceEvidenceDigest,ve=Vi(a,E,String(d.graphRevision))&&(Ne||L.mode==="legacy-migration"&&(ui||gi)),Se=u==="scheduling"&&a===void 0&&Ne;if(!ve&&!Se)return c();const Ve=g.reviewArtifactDigest!==void 0,Le=w("sha256").update([Ve?"root-commit-range-review-v2":"root-commit-range-review-v1",t,m,h,String(d.bundleDigest),String(d.graphRevision),String(l.receiptRef),w("sha256").update(y).digest("hex"),[...ie].sort().join(","),...Ve?[R.digest]:[]].join("\0")).digest("hex");if(g.sourceEvidenceDigest!==Le||g.receiptRef!==`story-review:${Le}`||L.mode==="legacy-migration"&&L.binding?.reviewDigest!==void 0&&L.binding.reviewDigest!==g.sourceEvidenceDigest||!ge&&(Me[t]!==h||!Array.isArray(d.receiptRefs)||!d.receiptRefs.some(N=>typeof N=="string"&&N.startsWith("legacy-direct-yolo:"))))return c();const li=w("sha256").update(["checkpoint-p205-transient-v1",t,r,n,m,h,String(d.bundleDigest),be,we,L.mode,L.effectiveClaimRevision,String(l.sourceEvidenceDigest),String(g.sourceEvidenceDigest),...d.reviewReconciliation?[String(f(d.reviewReconciliation)?.sourceEvidenceDigest)]:[],ce(a)?.executionEvidenceDigest??(Se?"scheduling-git-verification":"legacy-bounded-authority")].join("\0")).digest("hex"),te=ve?ce(a):void 0;return Object.freeze({schemaVersion:1,kind:"story_checkpoint_physical_verification",producer:"client-p205-transient-v1",storyId:t,epicId:r,branch:n,baseSha:m,headSha:h,aggregateHeadSha:te?.executionHeadSha??h,commitBodyDigest:be,changedPathsDigest:we,claimVerification:L.mode,effectiveClaimRevision:L.effectiveClaimRevision,sourceEvidenceDigest:li,command:q,manifestDigest:te?.manifestDigest??"0".repeat(64),gateIds:te?.gateIds??Object.freeze(["legacy-bounded"]),resultDigest:te?.resultDigest??"0".repeat(64),graphRevision:String(d.graphRevision),executionEvidenceDigest:te?.executionEvidenceDigest??"0".repeat(64),verifiedAt:te?.executedAt??oe(o),verdict:"verified",reasonCodes:Object.freeze([ve?"checkpoint-p205-transient-verified":Se?"checkpoint-git-scheduling-verified":"checkpoint-legacy-bounded-verified",...L.mode==="legacy-migration"?["checkpoint-legacy-migration-verified"]:[]]),publicSafe:!0})}catch{return c()}}function Lt(i,e,t,r,n,a,s=[],o=new Date().toISOString()){const u=a?"integration":"scheduling",c=Qe(i,e,t,r,n,a,s,o,u);return c.verdict!=="verified"?{kind:"rejected",verification:c}:u==="integration"?{kind:"integration-authorized",verification:c}:c.reasonCodes.includes("checkpoint-git-scheduling-verified")?{kind:"scheduling-only",evidence:Object.freeze({schemaVersion:1,kind:"story_scheduling_checkpoint_evidence",producer:"client-git-physical-v1",storyId:t,epicId:r,branch:n,baseSha:c.baseSha,headSha:c.headSha,graphRevision:c.graphRevision,effectiveClaimRevision:c.effectiveClaimRevision,sourceEvidenceDigest:c.sourceEvidenceDigest,verifiedAt:c.verifiedAt,reasonCodes:Object.freeze(["checkpoint-git-scheduling-verified"]),integrationAuthorized:!1,publicSafe:!0})}:{kind:"rejected",verification:Xe({storyId:t,epicId:r,executionBranch:n,value:e,verifiedAt:o,verdict:"rejected",reasonCode:"checkpoint-git-physical-invalid"})}}function Vi(i,e,t){const r=ce(i);return!!(r&&r.schemaVersion===1&&r.kind==="p205_transient_execution_authority"&&r.contract==="P205-CI-02"&&r.command===q&&r.graphRevision===t&&p(r.resultDigest)&&p(r.executionEvidenceDigest)&&r.executionHeadSha===e&&D(e))}function ce(i){return i&&typeof i=="object"?Fe.get(i):void 0}function qt(i){const e=ce(i);return e?Object.freeze({executionHeadSha:e.executionHeadSha,graphRevision:e.graphRevision,manifestDigest:e.manifestDigest,gateIds:Object.freeze([...e.gateIds]),resultDigest:e.resultDigest,executedAt:e.executedAt,executionEvidenceDigest:e.executionEvidenceDigest}):void 0}function zt(i,e,t){const r=ce(i);return!!(r&&r.executionHeadSha===e&&r.graphRevision===t&&r.command===q)}function Ze(i){const e=ki[i.storyId],t=typeof i.checkpoint.claimRevision=="string"?i.checkpoint.claimRevision:void 0,r=i.storyId==="P174.03.811759"||i.storyId==="P174.03.685003",n=Li(i.authorizedWriteSet);let a=[];if(i.checkpoint.rootMemoryEffect!==void 0){if(e)return;try{a=Di(i.projectRoot,i.checkpoint.rootMemoryEffect,{storyId:i.storyId,executionBranch:i.executionBranch,baseSha:i.baseSha,headRef:i.headSha,childPaths:n}).files.map(o=>o.path)}catch{return}}const s=n.length>0&&n.length===i.authorizedWriteSet.length&&i.changedPaths.every(o=>n.some(u=>Hi(u,o))||a.includes(o));if(e&&i.epicId==="P174"&&i.executionBranch==="epic/P174"&&i.baseSha===e.baseSha&&i.headSha===e.headSha&&i.checkpoint.graphRevision===e.graphRevision&&i.commitBodyDigest===e.commitBodyDigest&&i.changedPathsDigest===e.changedPathsDigest&&(r?t===void 0:t===e.effectiveClaimRevision))return i.authorizedWriteSet.length>0&&(!s||!Ue(e.effectiveClaimRevision,n))?void 0:Object.freeze({mode:"legacy-migration",effectiveClaimRevision:e.effectiveClaimRevision,binding:e});if(t!==void 0&&!(!t||!p(t))&&!(!s||!Ue(t,n)))return Object.freeze({mode:"canonical",effectiveClaimRevision:t})}function Li(i){const e=i.map(t=>t.replaceAll("\\","/").replace(/^\.\//,"").replace(/\/{2,}/g,"/"));return e.some(t=>!fe(t))?Object.freeze([]):Object.freeze([...new Set(e)].sort())}function qi(i,e){try{const t=JSON.parse(He(S(i,".neocortex","state.json"),"utf8")),r=f(t.stories),n=f(r?.[e]),a=Pi(i),s=f(a.stories[e]?.checkpoint)??f(n?.checkpoint);return zi(e,n,s)}catch{return[]}}function zi(i,e,t){const r=Array.isArray(e?.files_to_modify)?e.files_to_modify.filter(n=>typeof n=="string"):[];if(!t?.dispatchId||!t.bundleId)return r;try{return vi({...e,id:i,files_to_modify:r})}catch{return[]}}function Ue(i,e){return i===w("sha256").update(e.join("\0")).digest("hex")||i===w("sha256").update(JSON.stringify(e)).digest("hex")}function Hi(i,e){return i===e||i.endsWith("/")&&e.startsWith(i)}function Ht(i,e,t,r,n,a){try{if(!Je(e,t,r,n))return!1;const s=f(e),o=f(s.qaReceipt),u=f(s.reviewReceipt),c=String(s.headSha),d=String(s.baseSha),l=$(i,["rev-parse",`refs/heads/${n}`]).trim();if(M("git",["merge-base","--is-ancestor",c,l],{cwd:i,stdio:"ignore"}),$(i,["rev-parse",`${c}^`]).trim()!==d||$(i,["rev-list","--count",`${d}..${c}`]).trim()!=="1")return!1;const g=$(i,["show","--no-patch","--format=%H%n%P%n%B",c]),h=$(i,["diff-tree","--no-commit-id","--name-only","-r","-z",c]).split("\0").filter(Boolean);if(h.length===0||h.some(R=>!fe(R)))return!1;const m=Ze({projectRoot:i,checkpoint:s,storyId:t,epicId:r,executionBranch:n,baseSha:d,headSha:c,changedPaths:h,authorizedWriteSet:a,commitBodyDigest:w("sha256").update(g).digest("hex"),changedPathsDigest:w("sha256").update([...h].sort().join("\0")).digest("hex")});return!(m?.mode!=="legacy-migration"||!m.binding||o.sourceEvidenceDigest!==m.binding.qaDigest||o.receiptRef!==`story-qa:${m.binding.qaDigest}`||u.sourceEvidenceDigest!==m.binding.reviewDigest||u.receiptRef!==`story-review:${m.binding.reviewDigest}`||u.qaReceiptRef!==o.receiptRef)}catch{return!1}}function ji(i){return w("sha256").update(["local-yolo-tdd-git-immutable-v1",i.storyId,i.baseSha,i.headSha,i.bundleDigest,i.graphRevision,w("sha256").update(i.commitBody).digest("hex"),w("sha256").update([...i.changedPaths].sort().join("\0")).digest("hex")].join("\0")).digest("hex")}function Gi(i){return w("sha256").update(["local-yolo-tdd-p205-execution-v2",q,i.gitEvidenceDigest,i.headSha,i.graphRevision,i.manifestDigest,i.gateIds.join(","),i.resultDigest].join("\0")).digest("hex")}function Xe(i){const e=f(i.value);return Object.freeze({schemaVersion:1,kind:"story_checkpoint_physical_verification",producer:"client-p205-transient-v1",storyId:i.storyId,epicId:i.epicId,branch:i.executionBranch,baseSha:D(e?.baseSha)?String(e?.baseSha):"0".repeat(40),headSha:D(e?.headSha)?String(e?.headSha):"0".repeat(40),aggregateHeadSha:"0".repeat(40),commitBodyDigest:"0".repeat(64),changedPathsDigest:"0".repeat(64),claimVerification:"canonical",effectiveClaimRevision:"0".repeat(64),command:q,manifestDigest:"0".repeat(64),gateIds:Object.freeze([]),resultDigest:"0".repeat(64),graphRevision:"0".repeat(64),executionEvidenceDigest:"0".repeat(64),sourceEvidenceDigest:"0".repeat(64),verifiedAt:oe(i.verifiedAt),verdict:i.verdict,reasonCodes:Object.freeze([i.reasonCode]),publicSafe:!0})}function $(i,e){return M("git",[...e],{cwd:i,encoding:"utf8",maxBuffer:32*1024*1024})}function Ae(i,e,t,r=!1){if(!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(e)||t!==":"&&!/^[a-f0-9]{40,64}$/i.test(t))return;const n=`.neocortex/stories/${e}/review.md`;let a;try{a=M("git",["show",`${t===":"?":":`${t}:`}${n}`],{cwd:i,maxBuffer:128*1024,stdio:["ignore","pipe","ignore"]})}catch{return}if(a.length===0||a.length>64*1024||a.includes(0))return;let s;try{s=new TextDecoder("utf-8",{fatal:!0}).decode(a)}catch{return}const o=s.replace(/\r\n/g,`
-`).split(`
-`),u=new RegExp(`^#\\s+${e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?=\\s|$|[:\u2014-])`);if(!o.some(g=>u.test(g)))return;const c=o.filter(g=>/^Verdict\s*:/i.test(g));if(o.some(g=>/^Status\s*:\s*(pending|changes-requested|rejected)\b/i.test(g)))return;const d=o.filter(g=>/^Decision\s*:/i.test(g));if(c.length===0&&r&&d.length===1&&/^Decision\s*:\s*APPROVED\b/i.test(d[0]))return Object.freeze({verdict:"approved",digest:w("sha256").update(a).digest("hex")});if(c.length!==1)return;const l=/^Verdict\s*:\s*(approved|pending|changes-requested)(?=\s|$|[;,.])/i.exec(c[0])?.[1]?.toLowerCase();if(!(l!=="approved"&&l!=="pending"&&l!=="changes-requested"))return Object.freeze({verdict:l,digest:w("sha256").update(a).digest("hex")})}function Ti(i){return w("sha256").update(["root-historical-review-reconciliation-v1",i.storyId,i.epicId,i.checkpointHeadSha,i.approvalCommitSha,i.approvalArtifactDigest,i.qaReceiptRef,i.reviewReceiptRef,w("sha256").update(i.approvalCommitBody).digest("hex")].join("\0")).digest("hex")}function Mi(i,e,t,r,n,a,s){const o=f(e.reviewReconciliation);if(!o||!oi(o,e))return!1;const u=String(o.approvalCommitSha),c=String(e.headSha);if(u===c)return!1;try{if(M("git",["merge-base","--is-ancestor",c,u],{cwd:i,stdio:"ignore"}),M("git",["merge-base","--is-ancestor",u,s],{cwd:i,stdio:"ignore"}),!$(i,["rev-list","--first-parent",s]).split(`
-`).includes(u))return!1;const d=$(i,["show","--no-patch","--format=%P",u]).trim().split(/\s+/);if(d.length!==1||!D(d[0]))return!1;const l=$(i,["show","--no-patch","--format=%H%n%P%n%B",u]),g=new Set(l.split(`
-`).map(G=>G.trim()));if(!g.has(`Neocortex-Review-Reconciliation: ${n}`)||!g.has(`Neocortex-Original-Checkpoint: ${c}`)||!g.has(`Neocortex-Original-Review-Receipt: ${String(t.receiptRef)}`))return!1;const h=`.neocortex/stories/${n}/review.md`,m=$(i,["diff-tree","--no-commit-id","--name-only","-r","-z",u]).split("\0").filter(Boolean);if(!m.includes(h)||m.some(G=>!fe(G)))return!1;const R=Ae(i,n,u);if(R?.verdict!=="approved"||R.digest!==o.approvalArtifactDigest)return!1;const k=Ae(i,n,s);if(k?.verdict!=="approved"||k.digest!==R.digest)return!1;const E=Ti({storyId:n,epicId:a,checkpointHeadSha:c,approvalCommitSha:u,approvalArtifactDigest:R.digest,qaReceiptRef:String(r.receiptRef),reviewReceiptRef:String(t.receiptRef),approvalCommitBody:l});return o.sourceEvidenceDigest===E&&o.receiptRef===`story-review-reconciliation:${E}`}catch{return!1}}function Fi(i,e,t){if(!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(e)||!/^[a-f0-9]{40,64}$/i.test(t))return!1;try{return M("git",["cat-file","-e",`${t}:.neocortex/stories/${e}/review.md`],{cwd:i,stdio:"ignore",maxBuffer:1024}),!0}catch{return!1}}function oe(i){return Number.isFinite(Date.parse(i))?new Date(Date.parse(i)).toISOString():new Date().toISOString()}async function jt(i,e){if(Me[e.storyId]!==e.headSha)return;const t=[".neocortex/state.json",`.neocortex/stories/${e.storyId}/qa-gate-result.json`,`.neocortex/stories/${e.storyId}/validation-evidence.md`,`.neocortex/stories/${e.storyId}/review.md`,`docs/stories/${e.storyId}.story.md`];try{const r=(await V("git",["rev-parse",`refs/heads/${e.executionBranch}`],{cwd:i,encoding:"utf8",maxBuffer:1048576})).stdout.trim();if(await V("git",["merge-base","--is-ancestor",e.headSha,r],{cwd:i}),(await V("git",["rev-parse",`${e.headSha}^`],{cwd:i,encoding:"utf8",maxBuffer:1024*1024})).stdout.trim()!==e.baseSha)return;const a=String((await V("git",["diff","--binary","--full-index",`${e.baseSha}..${e.headSha}`],{cwd:i,encoding:"utf8",maxBuffer:32*1024*1024})).stdout);if(w("sha256").update(a).digest("hex")!==e.bundleDigest)return;const s=String((await V("git",["show","--no-patch","--format=%H%n%P%n%B",e.headSha],{cwd:i,encoding:"utf8",maxBuffer:4*1024*1024})).stdout);if(!String((await V("git",["show","--no-patch","--format=%s",e.headSha],{cwd:i,encoding:"utf8",maxBuffer:1024*1024})).stdout).trim().includes(e.storyId))return;const c=String((await V("git",["diff-tree","--no-commit-id","--name-only","-r","-z",e.headSha],{cwd:i,encoding:"utf8",maxBuffer:8*1024*1024})).stdout).split("\0").filter(Boolean);if(!t.every(y=>c.includes(y))||c.some(y=>!fe(y)))return;const d=await Promise.all(t.map(async y=>String((await V("git",["show",`${e.headSha}:${y}`],{cwd:i,encoding:"utf8",maxBuffer:16*1024*1024})).stdout))),l=JSON.parse(d[0]),g=f(l.stories),h=f(l.epics),m=f(g?.[e.storyId]),R=f(h?.[e.epicId]),k=Array.isArray(m?.steps_completed)?m.steps_completed:[],E=JSON.parse(d[1]);return m?.status!=="done"||!k.includes(Ii)||!k.includes(Ai)||R?.branch_mode!=="epic"||R.execution_branch!==e.executionBranch||E.storyId!==e.storyId||E.status!=="qa-passed"||E.safeToContinueYoloop!==!0||!Array.isArray(E.blockingChecks)||E.blockingChecks.length!==0||!d[2].includes(e.storyId)||!/P205[\s\S]{0,80}(pass|aprov)/i.test(d[2])||!d[3].includes(e.storyId)||!/approved|aprovado/i.test(d[3])||!d[4].includes(e.storyId)?void 0:`legacy-direct-yolo:${w("sha256").update(["legacy-direct-yolo-recovery-v1",e.storyId,e.epicId,e.executionBranch,e.baseSha,e.headSha,e.bundleDigest,e.graphRevision,w("sha256").update(s).digest("hex"),w("sha256").update([...c].sort().join("\0")).digest("hex"),...d.map(y=>w("sha256").update(y).digest("hex"))].join("\0")).digest("hex")}`}catch{return}}async function Wi(i){const e=await Ce(i),t=S(e,le),r=S(t,he);if(H(t)&&(await j(t,"directory"),await X(t)!==t))throw new Error("git-lifecycle-runtime-directory-symlink");return H(r)?r:S(e,xe)}async function ei(i){return ri(await Ce(i))}async function Ki(i,e){if(!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(e)||e.includes(".."))throw new Error("git-lifecycle-private-child-invalid");const t=v(i);await Y(t);const r=v(t,e);return ne(t,r),H(r)||await Ge(t,e),await Y(r,t),await Y(t),r}async function _(i,e){const t=v(e),r=v(i);ne(t,r),await Y(t),await Y(r,t)}async function Gt(i,e){await J(i,e)}async function ee(i,e,t){const r=v(e),n=v(i);ne(r,n);try{await _(n,r)}catch(s){if(P(s,"ENOENT"))return!1;throw s}const a=v(r,`${n.slice(r.length+1)}.remove.${process.pid}.${Date.now()}.${De(4).toString("hex")}`);return ne(r,a),await re(r,C(n),C(a)),await _(a,r),t&&!await t(a)?(await se(a,n,r).catch(()=>{}),!1):(await xi(r,C(a)),!0)}async function se(i,e,t){await _(i,t);try{await Re(e);return}catch(r){if(!P(r,"ENOENT"))throw r}await re(t,C(i),C(e)),await _(e,t)}async function B(i){try{await _(i,K(i));const e=S(i,"owner.json");await J(e,i);const t=await F(e);return await J(e,i),w("sha256").update(t).digest("hex")}catch{return}}async function Tt(i,e){const t=await ei(i),r=await Ki(t,"leases"),n=S(r,"integration"),a=`${n}.recovery`;if(H(a)){await _(a,r);const c=await ii(a),d=await B(a);if(c===void 0||me(c))return{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"};if(!d||!await ee(a,r,async l=>await B(l)===d))return{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"}}const s=oe(e.createdAt??new Date().toISOString()),o=Object.freeze({schemaVersion:1,kind:e.kind,storyId:e.storyId,sessionId:e.sessionId,idempotencyKey:e.idempotencyKey,pid:process.pid,createdAt:s,expiresAt:oe(e.expiresAt),persistent:e.persistent,ownerNonce:e.ownerNonce??De(16).toString("hex")});if(Date.parse(o.expiresAt)<=Date.parse(o.createdAt))return{ok:!1,reasonCode:"git-lifecycle-integration-lock-failed"};const u=async()=>{await Y(r,t);try{return await je(r,C(n),`${JSON.stringify(o)}
-`),await _(n,r),await J(S(n,"owner.json"),n),!0}catch(c){throw P(c,"EEXIST")||await ee(n,r).catch(()=>{}),c}};try{return await u(),{ok:!0,owner:o,path:n}}catch(c){if(!P(c,"EEXIST"))return{ok:!1,reasonCode:"git-lifecycle-integration-lock-failed"}}try{const c=await de(n),d=c?void 0:await ii(n);if(c&&ti(c,o))return{ok:!0,owner:c,path:n};if(c&&Date.parse(c.expiresAt)>Date.now()&&(c.persistent||me(c.pid))||d!==void 0&&me(d)||!c&&d===void 0&&await di(n))return{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"};const g=await B(n);if(!g)return{ok:!1,reasonCode:"git-lifecycle-integration-lock-failed"};const h=`${n}.stale.${process.pid}.${Date.now()}`;await re(r,C(n),C(h));try{if(await _(h,r),await B(h)!==g)return await se(h,n,r).catch(()=>{}),{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"};await u()}finally{await ee(h,r,async m=>await B(m)===g).catch(()=>{})}return{ok:!0,owner:o,path:n}}catch(c){return{ok:!1,reasonCode:P(c,"EEXIST")||P(c,"ENOENT")?"git-lifecycle-integration-backpressure":"git-lifecycle-integration-lock-failed"}}}async function Mt(i,e){const t=await de(i);return!!(t&&ke(t,e)&&Date.parse(t.expiresAt)>Date.now())}async function Yi(i,e){try{const t=K(i);await _(i,t);const r=await de(i);if(!r||!ke(r,e))return!1;const n=await B(i);if(!n)return!1;const a=`${i}.release.${process.pid}.${Date.now()}`;await re(t,C(i),C(a)),await _(a,t);const s=await de(a);return!s||!ke(s,e)||await B(a)!==n?(await se(a,i,t).catch(()=>{}),!1):ee(a,t,async o=>await B(o)===n)}catch(t){if(P(t,"ENOENT"))return!1;throw t}}function Ji(i){return w("sha256").update(["git-lifecycle-physical-owner-v1",i.kind,i.storyId,i.sessionId,i.idempotencyKey,String(i.pid),i.createdAt,i.expiresAt,i.persistent?"persistent":"ephemeral",i.ownerNonce].join("\0")).digest("hex")}async function Ft(i,e){if(!Q(e.storyId)||!O(e.idempotencyKey)||!p(e.ownerDigest))return"foreign";const t=await ei(i),r=S(t,"leases"),n=S(r,"integration");if(!H(n))return"absent";try{await _(r,t),await _(n,r);const a=await de(n);return!a||a.kind!=="direct"||a.storyId!==e.storyId||a.sessionId!==e.idempotencyKey||a.idempotencyKey!==e.idempotencyKey||a.persistent!==!0||Ji(a)!==e.ownerDigest?"foreign":await Yi(n,a)?"released":"foreign"}catch{return"foreign"}}async function de(i){try{await _(i,K(i));const e=S(i,"owner.json");await J(e,i);const t=JSON.parse(await F(e,"utf8"));return t.schemaVersion!==1||t.kind!=="direct"&&t.kind!=="continuous"||!Q(t.storyId)||!O(t.sessionId)||!O(t.idempotencyKey)||!Number.isSafeInteger(t.pid)||Number(t.pid)<=0||!A(t.createdAt)||!A(t.expiresAt)||typeof t.persistent!="boolean"||typeof t.ownerNonce!="string"||!/^[a-f0-9]{32}$/.test(t.ownerNonce)?void 0:t}catch{return}}async function ii(i){try{await _(i,K(i));const e=S(i,"owner.json");await J(e,i);const t=JSON.parse(await F(e,"utf8"));return Number.isSafeInteger(t.pid)&&Number(t.pid)>0?Number(t.pid):void 0}catch{return}}function ti(i,e){return i.kind===e.kind&&i.storyId===e.storyId&&i.sessionId===e.sessionId&&i.idempotencyKey===e.idempotencyKey&&i.expiresAt===e.expiresAt&&i.persistent===e.persistent}function ke(i,e){return ti(i,e)&&i.schemaVersion===e.schemaVersion&&i.pid===e.pid&&i.createdAt===e.createdAt&&i.ownerNonce===e.ownerNonce}async function Ce(i){const e=await X(i),r=(await V("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",maxBuffer:1024*1024})).stdout.trim(),n=ae(r)?v(r):v(e,r),a=await X(n);if(a!==n)throw new Error("git-lifecycle-common-dir-symlink");await Zi(a);const o=(await V("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",maxBuffer:1024*1024})).stdout.trim();if((ae(o)?v(o):v(e,o))!==n)throw new Error("git-lifecycle-common-dir-raced");return a}async function ri(i){const e=S(i,le);if(H(e)||await Ge(i,le),await j(e,"directory"),await X(e)!==e)throw new Error("git-lifecycle-runtime-directory-symlink");return e}async function ni(i,e={}){try{return await j(i,"file"),Oe(JSON.parse(await F(i,"utf8")))}catch(t){if(P(t,"ENOENT")){if(e.required)throw new Error("git-lifecycle-runtime-missing");return Pe()}throw t}}async function Qi(i){try{await j(i,"file")}catch(e){if(P(e,"ENOENT"))return;throw e}}async function j(i,e){const t=await Re(i);if(t.isSymbolicLink())throw new Error(`git-lifecycle-${e}-symlink`);if(e==="file"?!t.isFile():!t.isDirectory())throw new Error(`git-lifecycle-${e}-invalid`);if(pe()&&t.uid!==process.getuid())throw new Error(`git-lifecycle-${e}-ownership-mismatch`);if(pe()&&(t.mode&63)!==0)throw new Error(`git-lifecycle-${e}-permissions-unsafe`)}function ne(i,e){const t=v(i),r=v(e),n=bi(t,r);if(!n||n.startsWith("..")||ae(n)||K(r)!==t)throw new Error("git-lifecycle-private-path-escape")}async function Y(i,e){const t=v(i);if(e&&ne(v(e),t),await j(t,"directory"),v(await X(t))!==t)throw new Error("git-lifecycle-directory-substituted");if(e){const r=v(e);if(await j(r,"directory"),v(await X(r))!==r)throw new Error("git-lifecycle-directory-parent-substituted")}}async function J(i,e){const t=v(i);if(ne(v(e),t),await Y(v(e)),await j(t,"file"),v(await X(t))!==t)throw new Error("git-lifecycle-file-substituted")}function ai(i,e){const t=ze(i);if(t.isSymbolicLink())throw new Error(`git-lifecycle-${e}-symlink`);if(e==="file"?!t.isFile():!t.isDirectory())throw new Error(`git-lifecycle-${e}-invalid`);if(pe()&&t.uid!==process.getuid())throw new Error(`git-lifecycle-${e}-ownership-mismatch`);if(pe()&&(t.mode&63)!==0)throw new Error(`git-lifecycle-${e}-permissions-unsafe`)}async function Zi(i){const e=await Re(i);if(e.isSymbolicLink())throw new Error("git-lifecycle-common-dir-symlink");if(!e.isDirectory())throw new Error("git-lifecycle-common-dir-invalid")}function Ui(i){const e=ze(i);if(e.isSymbolicLink())throw new Error("git-lifecycle-common-dir-symlink");if(!e.isDirectory())throw new Error("git-lifecycle-common-dir-invalid")}function pe(i=process.platform){return i!=="win32"&&typeof process.getuid=="function"}function Oe(i){if(!i||typeof i!="object"||Array.isArray(i))throw new Error("git-lifecycle-runtime-invalid");const e=i;I(e,["schemaVersion","revision","epics","stories"],"git-lifecycle-runtime-unknown-field");const t=f(e.epics),r=f(e.stories);if(e.schemaVersion!==1||!Number.isSafeInteger(e.revision)||Number(e.revision)<0||!t||!r||Object.values(t).some(n=>!f(n))||Object.values(r).some(n=>!f(n)))throw new Error("git-lifecycle-runtime-invalid");for(const[n,a]of Object.entries(t))if(!Q(n)||!it(a))throw new Error("git-lifecycle-runtime-epic-invalid");for(const[n,a]of Object.entries(r))if(!Q(n)||!n.includes(".")||!tt(a,n))throw new Error("git-lifecycle-runtime-story-invalid");return e}const Xi=["branch_mode","execution_branch","origin_branch","branch_lease","origin_binding","graph_revision","aggregate_qa_receipt","terminal_git_receipt","physicalMergeStatus","pr_number","git_reconciliation_receipts","git_reconciliation_debt"],et=["checkpoint","status","last_step","steps_completed"];function it(i){return I(i,Xi,"git-lifecycle-runtime-epic-unknown-field"),(i.branch_mode===void 0||i.branch_mode==="epic")&&(i.execution_branch===void 0||W(i.execution_branch))&&(i.origin_branch===void 0||W(i.origin_branch))&&(i.branch_lease===void 0||i.branch_lease===null||rt(i.branch_lease))&&(i.origin_binding===void 0||i.origin_binding===null||ct(i.origin_binding))&&(i.graph_revision===void 0||p(i.graph_revision))&&(i.aggregate_qa_receipt===void 0||i.aggregate_qa_receipt===null||ot(i.aggregate_qa_receipt))&&(i.terminal_git_receipt===void 0||i.terminal_git_receipt===null||st(i.terminal_git_receipt))&&(i.physicalMergeStatus===void 0||["merged","pushed","denied_external_gate","blocked_local_or_repo","not_attempted"].includes(String(i.physicalMergeStatus)))&&(i.pr_number===void 0||i.pr_number===null||Number.isSafeInteger(i.pr_number)&&Number(i.pr_number)>0)&&(i.git_reconciliation_receipts===void 0||lt(i.git_reconciliation_receipts))&&(i.git_reconciliation_debt===void 0||ht(i.git_reconciliation_debt))}function tt(i,e){return I(i,et,"git-lifecycle-runtime-story-unknown-field"),(i.checkpoint===void 0||i.checkpoint===null||ci(i.checkpoint,e))&&(i.status===void 0||O(i.status))&&(i.last_step===void 0||i.last_step===null||O(i.last_step))&&(i.steps_completed===void 0||z(i.steps_completed,128))}function rt(i){const e=f(i);return e?(I(e,["schemaVersion","ownerStoryId","sessionId","idempotencyKey","acquiredAt","expiresAt","handoffGrant","handoffConsumption","setupHeadSha"],"git-lifecycle-runtime-lease-unknown-field"),e.schemaVersion===1&&Q(e.ownerStoryId)&&O(e.sessionId)&&O(e.idempotencyKey)&&A(e.acquiredAt)&&A(e.expiresAt)&&Date.parse(String(e.expiresAt))>Date.parse(String(e.acquiredAt))&&(e.setupHeadSha===void 0||D(e.setupHeadSha))&&(e.handoffGrant===void 0||nt(e.handoffGrant,e))&&(e.handoffConsumption===void 0||at(e.handoffConsumption,e))):!1}function nt(i,e){const t=f(i);return t?(I(t,["schemaVersion","kind","storyId","fromSessionId","tokenDigest","bundleDigest","claimRevision","expiresAt"],"git-lifecycle-runtime-handoff-grant-unknown-field"),t.schemaVersion===1&&t.kind==="direct-yolo-setup-handoff"&&t.storyId===e.ownerStoryId&&t.fromSessionId===e.sessionId&&p(t.tokenDigest)&&p(t.bundleDigest)&&p(t.claimRevision)&&A(t.expiresAt)&&Date.parse(String(t.expiresAt))<=Date.parse(String(e.expiresAt))):!1}function at(i,e){const t=f(i);return t?(I(t,["schemaVersion","kind","state","storyId","fromSessionId","tokenDigest","bundleDigest","claimRevision","consumedBySessionId","consumedAt"],"git-lifecycle-runtime-handoff-consumption-unknown-field"),t.schemaVersion===1&&t.kind==="direct-yolo-setup-handoff-consumption"&&t.state==="consumed"&&t.storyId===e.ownerStoryId&&O(t.fromSessionId)&&p(t.tokenDigest)&&p(t.bundleDigest)&&p(t.claimRevision)&&t.consumedBySessionId===e.sessionId&&A(t.consumedAt)):!1}function ct(i){const e=f(i);return e?(I(e,["schemaVersion","originBranch","originHeadSha","executionBranch","capturedFromCurrentCheckout","capturedAt"],"git-lifecycle-runtime-origin-unknown-field"),e.schemaVersion===1&&W(e.originBranch)&&W(e.executionBranch)&&e.originBranch!==e.executionBranch&&D(e.originHeadSha)&&e.capturedFromCurrentCheckout===!0&&A(e.capturedAt)):!1}function ot(i){const e=f(i);if(!e)return!1;I(e,["schemaVersion","evidenceVersion","producer","contract","command","verdict","executionHeadSha","graphRevision","manifestDigest","resultDigest","checkedAt","receiptRef","gateIds"],"git-lifecycle-runtime-aggregate-qa-unknown-field");const t=e.evidenceVersion==="p205-execution-v2"&&e.producer==="local-yolo-tdd"&&e.contract==="P205-CI-02"&&e.command===q&&p(e.manifestDigest)&&p(e.resultDigest),r=e.evidenceVersion===void 0&&e.producer===void 0&&e.contract===void 0&&e.command===void 0&&e.manifestDigest===void 0&&e.resultDigest===void 0;return e.schemaVersion===1&&(t||r)&&e.verdict==="passed"&&D(e.executionHeadSha)&&p(e.graphRevision)&&A(e.checkedAt)&&ue(e.receiptRef)&&z(e.gateIds,128,!0)}function st(i){const e=f(i);return e?(I(e,["schemaVersion","epicId","executionBranch","originBranch","baseSha","executionHeadSha","mergeSha","pushedSha","strategy","prNumber","physicalStatus","localGateReceiptRefs","idempotencyKey","attemptStartedAt","completedAt","retryEligible","reasonCodes","publicSafe","candidateQa","providerGuard"],"git-lifecycle-runtime-terminal-receipt-unknown-field"),e.schemaVersion===1&&Q(e.epicId)&&W(e.executionBranch)&&W(e.originBranch)&&D(e.baseSha)&&D(e.executionHeadSha)&&(e.mergeSha===void 0||D(e.mergeSha))&&(e.pushedSha===void 0||D(e.pushedSha))&&(e.strategy==="direct"||e.strategy==="single_pr")&&(e.candidateQa===void 0||ft(e.candidateQa,e))&&(e.providerGuard===void 0||dt(e.providerGuard,e))&&(e.prNumber===void 0||Number.isSafeInteger(e.prNumber)&&Number(e.prNumber)>0)&&["prepared","merged","pushed","denied_external_gate","blocked_local_or_repo"].includes(String(e.physicalStatus))&&z(e.localGateReceiptRefs,128,!0)&&O(e.idempotencyKey)&&A(e.attemptStartedAt)&&(e.completedAt===void 0||A(e.completedAt))&&typeof e.retryEligible=="boolean"&&z(e.reasonCodes,128)&&e.publicSafe===!0):!1}function dt(i,e){const t=f(i);if(!t)return!1;I(t,["schemaVersion","provider","mode","source","prHeadSha","originHeadSha","checkedAt","publicSafe"],"git-lifecycle-runtime-provider-guard-unknown-field");const r=t.mode==="recovered_exact_tree"?t.source==="physical_recovery":t.mode==="strict_up_to_date_expected_head"&&["branch_protection","ruleset","branch_protection_and_ruleset"].includes(String(t.source));return t.schemaVersion===1&&t.provider==="github"&&r&&e.strategy==="single_pr"&&e.physicalStatus==="pushed"&&Number.isSafeInteger(e.prNumber)&&Number(e.prNumber)>0&&D(t.prHeadSha)&&t.prHeadSha===e.mergeSha&&D(t.originHeadSha)&&t.originHeadSha===e.baseSha&&A(t.checkedAt)&&t.publicSafe===!0}function ft(i,e){const t=f(i);return t?(I(t,["schemaVersion","kind","contract","command","originHeadSha","executionHeadSha","mergeSha","treeSha","graphRevision","manifestDigest","resultDigest","gateIds","checkedAt","receiptRef"],"git-lifecycle-runtime-merge-candidate-unknown-field"),t.schemaVersion===1&&t.kind==="epic_merge_candidate_qa"&&t.contract==="P205-CI-02"&&t.command===q&&D(t.originHeadSha)&&t.originHeadSha===e.baseSha&&D(t.executionHeadSha)&&t.executionHeadSha===e.executionHeadSha&&D(t.mergeSha)&&t.mergeSha===e.mergeSha&&D(t.treeSha)&&p(t.graphRevision)&&p(t.manifestDigest)&&p(t.resultDigest)&&z(t.gateIds,128,!0)&&A(t.checkedAt)&&ue(t.receiptRef)):!1}function ci(i,e){const t=f(i);if(!t)return!1;I(t,["schemaVersion","storyId","epicId","branch","baseSha","headSha","commits","idempotencyKey","dispatchId","bundleId","bundleDigest","graphRevision","claimRevision","receiptRefs","qaVerdict","reviewVerdict","qaReceipt","reviewReceipt","reviewReconciliation","recordedAt","rootMemoryEffect"],"git-lifecycle-runtime-checkpoint-unknown-field");const r=String(e).split(".")[0];return t.schemaVersion===1&&t.storyId===e&&t.epicId===r&&W(t.branch)&&D(t.baseSha)&&D(t.headSha)&&t.baseSha!==t.headSha&&mt(t.commits)&&t.commits.length===1&&t.commits[0]===t.headSha&&O(t.idempotencyKey)&&(t.dispatchId===void 0||p(t.dispatchId))&&(t.bundleId===void 0||p(t.bundleId))&&p(t.bundleDigest)&&p(t.graphRevision)&&(t.claimRevision===void 0||p(t.claimRevision))&&(t.rootMemoryEffect===void 0||Si(t.rootMemoryEffect)&&t.rootMemoryEffect.storyId===e&&t.rootMemoryEffect.executionBranch===t.branch&&t.rootMemoryEffect.sourceHeadSha===t.baseSha&&t.rootMemoryEffect.childClaimRevision===t.claimRevision)&&z(t.receiptRefs,256,!0)&&(t.qaVerdict==="passed"||t.qaVerdict==="blocked")&&["approved","changes-requested","pending"].includes(String(t.reviewVerdict))&&ut(t.qaReceipt,t)&&(t.reviewVerdict==="pending"?t.reviewReceipt===void 0:gt(t.reviewReceipt,t))&&(t.reviewReconciliation===void 0||oi(t.reviewReconciliation,t))&&A(t.recordedAt)}function oi(i,e){const t=f(i),r=f(e.qaReceipt),n=f(e.reviewReceipt);return!t||!r||!n?!1:(I(t,["schemaVersion","kind","storyId","epicId","checkpointHeadSha","approvalCommitSha","approvalArtifactDigest","qaReceiptRef","reviewReceiptRef","sourceEvidenceDigest","reviewedAt","receiptRef"],"git-lifecycle-runtime-review-reconciliation-unknown-field"),t.schemaVersion===1&&t.kind==="historical_review_reconciliation"&&t.storyId===e.storyId&&t.epicId===e.epicId&&t.checkpointHeadSha===e.headSha&&D(t.approvalCommitSha)&&p(t.approvalArtifactDigest)&&t.qaReceiptRef===r.receiptRef&&t.reviewReceiptRef===n.receiptRef&&p(t.sourceEvidenceDigest)&&A(t.reviewedAt)&&Date.parse(String(t.reviewedAt))>=Date.parse(String(r.checkedAt))&&ue(t.receiptRef)&&Array.isArray(e.receiptRefs)&&e.receiptRefs.includes(t.receiptRef))}function ut(i,e){const t=f(i);return t?(I(t,["schemaVersion","kind","producer","evidenceVersion","storyId","epicId","baseSha","headSha","bundleDigest","graphRevision","contract","command","manifestDigest","gateIds","resultDigest","sourceEvidenceDigest","verdict","checkedAt","receiptRef"],"git-lifecycle-runtime-story-qa-unknown-field"),t.schemaVersion===1&&t.kind==="story_qa_evidence"&&t.producer==="local-yolo-tdd"&&(t.evidenceVersion===void 0||t.evidenceVersion==="git-immutable-v1"||t.evidenceVersion==="p205-execution-v2"&&t.contract==="P205-CI-02"&&t.command===q&&p(t.manifestDigest)&&z(t.gateIds,32,!0)&&p(t.resultDigest))&&si(t,e)&&p(t.sourceEvidenceDigest)&&t.verdict===e.qaVerdict&&(t.verdict==="passed"||t.verdict==="blocked")&&A(t.checkedAt)&&ue(t.receiptRef)&&e.receiptRefs.includes(t.receiptRef)):!1}function gt(i,e){const t=f(i),r=f(e.qaReceipt);return!t||!r?!1:(I(t,["schemaVersion","kind","producer","storyId","epicId","baseSha","headSha","bundleDigest","graphRevision","sourceEvidenceDigest","reviewArtifactDigest","qaReceiptRef","verdict","reviewedAt","receiptRef"],"git-lifecycle-runtime-story-review-unknown-field"),t.schemaVersion===1&&t.kind==="story_review_evidence"&&t.producer==="root-commit-range-review"&&si(t,e)&&p(t.sourceEvidenceDigest)&&(t.reviewArtifactDigest===void 0||p(t.reviewArtifactDigest))&&t.qaReceiptRef===r.receiptRef&&t.receiptRef!==r.receiptRef&&(t.verdict==="approved"||t.verdict==="changes-requested")&&(t.verdict==="approved"?e.reviewVerdict==="approved":e.reviewVerdict==="changes-requested")&&A(t.reviewedAt)&&Date.parse(String(t.reviewedAt))>=Date.parse(String(r.checkedAt))&&ue(t.receiptRef)&&e.receiptRefs.includes(t.receiptRef))}function si(i,e){return["storyId","epicId","baseSha","headSha","bundleDigest","graphRevision"].every(t=>i[t]===e[t])}function lt(i){return!Array.isArray(i)||i.length>1024?!1:i.every(e=>{const t=f(e);return t?(I(t,["schemaVersion","resourceId","action","outcome","idempotencyKey","reasonCodes","recordedAt","publicSafe"],"git-lifecycle-runtime-reconciliation-receipt-unknown-field"),t.schemaVersion===1&&O(t.resourceId)&&["no_op","delete_local_branch","delete_remote_branch","close_pull_request"].includes(String(t.action))&&["applied","already_absent","dry_run","failed"].includes(String(t.outcome))&&O(t.idempotencyKey)&&z(t.reasonCodes,128)&&A(t.recordedAt)&&t.publicSafe===!0):!1})}function ht(i){return!Array.isArray(i)||i.length>1024?!1:i.every(e=>{const t=f(e);return t?(I(t,["schemaVersion","resourceId","action","managed","reasonCodes","evidence","publicSafe"],"git-lifecycle-runtime-reconciliation-debt-unknown-field"),t.schemaVersion===1&&O(t.resourceId)&&t.action==="preserve"&&typeof t.managed=="boolean"&&z(t.reasonCodes,128)&&z(t.evidence,16)&&t.publicSafe===!0):!1})}function I(i,e,t){const r=new Set(e);if(Object.keys(i).some(n=>!r.has(n)))throw new Error(t)}function Q(i){return typeof i=="string"&&/^P[1-9][0-9]*(?:\.[0-9]+)*$/.test(i)}function pt(i){const e=f(i);return e?Object.keys(e).length===10&&e.schemaVersion===1&&e.kind==="git_lifecycle_graph_authority"&&e.producer==="server-continuous-yoloop-v1"&&(e.source==="yolo"||e.source==="yoloop")&&Q(e.epicId)&&Q(e.storyId)&&String(e.storyId).startsWith(`${String(e.epicId)}.`)&&W(e.executionBranch)&&W(e.originBranch)&&e.originBranch!==e.executionBranch&&typeof e.graphRevision=="string"&&/^[a-f0-9]{64}$/.test(e.graphRevision)&&e.publicSafe===!0:!1}function W(i){return typeof i=="string"&&/^[A-Za-z0-9][A-Za-z0-9._/-]{0,239}$/.test(i)&&!i.includes("..")&&!i.includes("//")&&!i.includes("@{")&&!i.endsWith("/")&&!i.endsWith(".")&&!i.split("/").some(e=>!e||e.startsWith(".")||e.endsWith(".lock"))}function fe(i){return i.length>0&&i.length<=1024&&!ae(i)&&!i.includes("\0")&&!i.replaceAll("\\","/").split("/").includes("..")}function O(i){return typeof i=="string"&&i.length>0&&i.length<=240&&/^[A-Za-z0-9._:/#\-[\]]+$/.test(i)&&!i.includes("..")}function ue(i){return O(i)}function D(i){return typeof i=="string"&&/^[a-f0-9]{40,64}$/i.test(i)}function p(i){return typeof i=="string"&&/^[a-f0-9]{64}$/i.test(i)}function A(i){return typeof i=="string"&&i.length<=64&&Number.isFinite(Date.parse(i))}function z(i,e,t=!1){return Array.isArray(i)&&i.length<=e&&(!t||i.length>0)&&i.every(O)}function mt(i){return Array.isArray(i)&&i.length>0&&i.length<=256&&i.every(D)}function Pe(){return{schemaVersion:1,revision:0,epics:{},stories:{}}}async function yt(i){const e=K(i),t={pid:process.pid,nonce:De(16).toString("hex")},r=async()=>{await Y(e),await je(e,C(i),JSON.stringify(t));try{await _(i,e),await J(S(i,"owner.json"),i)}catch(n){throw await ee(i,e).catch(()=>{}),n}};try{await r()}catch(n){if(!P(n,"EEXIST"))throw n;await j(i,"directory");const a=await $e(i);if(a!==void 0&&me(a.pid))throw new Error("git-lifecycle-runtime-lock-active");if(a===void 0&&await di(i))throw new Error("git-lifecycle-runtime-lock-active");const s=await B(i);if(!s)throw new Error("git-lifecycle-runtime-lock-owner-invalid");const o=`${i}.stale.${process.pid}.${Date.now()}`;await re(e,C(i),C(o));try{if(await _(o,e),await B(o)!==s)throw await se(o,i,e).catch(()=>{}),new Error("git-lifecycle-runtime-lock-owner-replaced");await r()}finally{await ee(o,e,async u=>await B(u)===s).catch(()=>{})}}return t}async function bt(i,e){const t=K(i);try{await _(i,t);const r=await $e(i);if(!r||!fi(r,e))return!1;const n=await B(i);if(!n)return!1;const a=`${i}.release.${process.pid}.${Date.now()}`;await re(t,C(i),C(a)),await _(a,t);const s=await $e(a);return!s||!fi(s,e)||await B(a)!==n?(await se(a,i,t).catch(()=>{}),!1):ee(a,t,async o=>await B(o)===n)}catch(r){if(P(r,"ENOENT"))return!1;throw r}}async function di(i){try{return Date.now()-(await yi(i)).mtimeMs<3e4}catch{return!0}}async function $e(i){try{await _(i,K(i));const e=S(i,"owner.json");await J(e,i);const t=JSON.parse(await F(e,"utf8"));return Number.isSafeInteger(t.pid)&&Number(t.pid)>0&&(t.nonce===void 0||typeof t.nonce=="string"&&/^[a-f0-9]{32}$/.test(t.nonce))?{pid:Number(t.pid),...typeof t.nonce=="string"?{nonce:t.nonce}:{}}:void 0}catch{return}}function fi(i,e){return i.pid===e.pid&&i.nonce!==void 0&&i.nonce===e.nonce}function me(i){try{return process.kill(i,0),!0}catch(e){return P(e,"EPERM")}}function f(i){return i&&typeof i=="object"&&!Array.isArray(i)?i:void 0}function P(i,e){return i instanceof Error&&"code"in i&&i.code===e}export{le as GIT_LIFECYCLE_RUNTIME_DIRECTORY,he as GIT_LIFECYCLE_RUNTIME_FILE,Me as LEGACY_DIRECT_YOLO_RECOVERY_COMMITS,ki as LEGACY_P174_CHECKPOINT_MIGRATIONS,q as P205_COMPLETE_COMMAND,Tt as acquireGitLifecyclePhysicalIntegrationLock,Bi as applyGitLifecycleRuntimeOverlay,_ as assertGitLifecyclePrivateDirectory,Gt as assertGitLifecyclePrivateFile,Lt as classifyGitLifecycleStoryCheckpointProjectionSync,Ji as computeGitLifecyclePhysicalIntegrationLockOwnerDigest,Ti as computeHistoricalReviewReconciliationDigest,ji as computeImmutableStoryQaEvidenceDigest,jt as computeLegacyDirectYoloRecoveryReceiptRef,Gi as computeP205StoryQaEvidenceDigest,Ki as ensureGitLifecyclePrivateChildDirectory,$t as ensureGitLifecycleRuntimeInitialized,Ni as ensureRuntimeEpic,Nt as ensureRuntimeStory,Oi as executeP205TransientAuthorities,Pt as executeP205TransientAuthority,ei as gitLifecycleRuntimeDirectory,zi as gitLifecycleStoryWriteSet,Je as isAcceptedGitLifecycleStoryCheckpoint,Ke as mutateGitLifecycleRuntime,zt as p205TransientAuthorityMatchesAggregate,Bt as persistGitLifecycleGraphAuthority,pe as posixSecurityAvailable,qt as projectP205TransientExecutionEvidence,Ae as publicStoryReviewArtifactFromGit,Ie as readGitLifecycleRuntime,Pi as readGitLifecycleRuntimeSync,Yi as releaseGitLifecyclePhysicalIntegrationLock,Ft as releaseGitLifecyclePhysicalIntegrationLockForCheckpoint,ee as removeGitLifecyclePrivateDirectory,Vt as verifyAcceptedGitLifecycleStoryCheckpoint,Qe as verifyAcceptedGitLifecycleStoryCheckpointSync,Mt as verifyGitLifecyclePhysicalIntegrationLock,Ht as verifyLegacyCheckpointMigrationCandidateSync};
+/**
+ * Durable runtime evidence for root-owned Git lifecycle operations.
+ *
+ * The document lives in a private Neocortex-owned directory below the Git
+ * common-dir, so it is shared by manually-created worktrees but is never part
+ * of a story commit. The common-dir itself may legitimately be group-writable;
+ * authority comes from the private child directory and fresh physical checks.
+ */
+import { execFile, execFileSync } from 'node:child_process';
+import { createHash, randomBytes } from 'node:crypto';
+import { lstat, open, readFile, realpath, stat } from 'node:fs/promises';
+import { existsSync, lstatSync, readFileSync, realpathSync } from 'node:fs';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { promisify } from 'node:util';
+import { publicWriteSet } from '../../../shared/dist/yoloop/public-story-write-set.js';
+import { isRootProjectMemoryEffect } from '../private-execution/shared-root-memory-types.js';
+import { verifyRootMemoryPhysicalWriteSet } from '../private-execution/root-memory-git-evidence.js';
+import { resolveBranchUnit, } from '../../../shared/dist/yoloop/branch-unit.js';
+import { anchoredAtomicWriteFile, anchoredCreateOwnedDirectory, anchoredEnsureDirectory, anchoredExecuteGit, anchoredExecuteNode, anchoredRemoveDirectory, anchoredRenameDirectory, } from './secure-filesystem-boundary.js';
+import { GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID, GIT_LIFECYCLE_REVIEW_PR_STEP_ID, GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID, } from './git-lifecycle-step-ids.js';
+const execFileAsync = promisify(execFile);
+export const GIT_LIFECYCLE_RUNTIME_DIRECTORY = 'neocortex-yoloop';
+export const GIT_LIFECYCLE_RUNTIME_FILE = 'runtime.json';
+export const P205_COMPLETE_COMMAND = 'node scripts/test-root.mjs --gate complete';
+export const LEGACY_DIRECT_YOLO_RECOVERY_COMMITS = Object.freeze({
+    'P174.03.029264': '339141be7339a0edf55710cbccb6e6558f514792',
+});
+/**
+ * Exact immutable bindings for the seven P174 checkpoints predating P205-v2.
+ * This table is only an allowlist: every value is recomputed from Git and the
+ * independent QA/review receipts before a fresh aggregate P205 may migrate it.
+ */
+export const LEGACY_P174_CHECKPOINT_MIGRATIONS = Object.freeze({
+    'P174.03.811759': Object.freeze({ baseSha: '749c8fc732deaf26c81a8e08cc94b83c8cf0f5ba', headSha: '84162456d9cbe5000ffd0ed3eb3d0e88cfeba499', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2', commitBodyDigest: 'b4fc759a49765fd8c0b3d0f5d1c333c2a4bf28d324e83eedabb12f9530df3738', changedPathsDigest: '11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2', qaDigest: 'f1100775e21f5d0d990f77303a2a06d936908f016983e32a63316d81aee6b9fc', reviewDigest: '50400bbcddb6f02408837cf99077de5d3af8c84822ab23a8b5499c338af7103a' }),
+    'P174.03.685003': Object.freeze({ baseSha: '84162456d9cbe5000ffd0ed3eb3d0e88cfeba499', headSha: '272a7fee89e4b9324d35701df1c83b671fa96299', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641', commitBodyDigest: 'e97966e26ce3ba31d5951b9fdac67808c88c1fd8be7ec1e73982f3f1cc7ffd81', changedPathsDigest: '6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641', qaDigest: '7439329a93321f39fb6b0de0a41c22e58373a399f9048e362dff4ffa6f1a7d89', reviewDigest: '1b2d12262e84acf9da7d06149a0effb11274ebdc986affbfd47635b855ec7135' }),
+    'P174.03.029264': Object.freeze({ baseSha: '272a7fee89e4b9324d35701df1c83b671fa96299', headSha: '339141be7339a0edf55710cbccb6e6558f514792', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab', commitBodyDigest: '0f269a00dcd168a6f548ff10dfa667b193c948ac9c7211f5cb11a0561757c371', changedPathsDigest: '1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab', qaDigest: 'ef0fd2c6e216557825cd8521ccb2f9960a3af48f18e7a5ada441bee8bfda400b', reviewDigest: '372d0f4a2f32978c8b39f20167637b3917187edb75d49875e93200c4c5a19d0d' }),
+    'P174.03.913359': Object.freeze({ baseSha: '339141be7339a0edf55710cbccb6e6558f514792', headSha: '4ccc90b85c49b27f718090bf25bc452f1b84e5e3', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5', commitBodyDigest: '89a6653197509e75246a758d2706876b337770571a1cac47d9d85ec96c196459', changedPathsDigest: '12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5', qaDigest: 'c7d3762ad30e4f9356243df17a1dd7123cbf1b660808d68176f44d1cd5da6449', reviewDigest: 'e4ecf577e174fd66f31aa4a0113ab672ced16b12ee531f6831aa533795145ba1' }),
+    'P174.03.724350': Object.freeze({ baseSha: '4ccc90b85c49b27f718090bf25bc452f1b84e5e3', headSha: '568e9464fb086304146b9eb4594281f91302aef1', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: 'c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe', commitBodyDigest: 'b3032338bfcd6c9dc460e9426220a1966dedeff9968c4064fdd36a315560721b', changedPathsDigest: 'c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe', qaDigest: '91f2f5b00935b1b04bb5d400df500cbc97c412072078b713c6e5ba8fda669bd0', reviewDigest: '9bc92069d3b3a76cc8b02d339d432690258be1376464b69e152ed8fd3d682f05' }),
+    'P174.03.011976': Object.freeze({ baseSha: '568e9464fb086304146b9eb4594281f91302aef1', headSha: '195599b1a99a99a8416c4c26c9ab9990847338a4', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21', commitBodyDigest: 'b8a28392fac663dd614b695a49c894b7cab116d45722a42850e3b24e2aaf36f4', changedPathsDigest: '49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21', qaDigest: '6eb4459a7d80c4a268fc931297e8156ed2a320584f8775f0787d91b42c0929d4', reviewDigest: '98b21de29f7cceeec73da19000c6c144395cce6eb699c6a82dfab505d4ab7b44' }),
+    'P174.03.686659': Object.freeze({ baseSha: '195599b1a99a99a8416c4c26c9ab9990847338a4', headSha: '0db3681a5dad4e25ce37d967c636eb9d54915556', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e', commitBodyDigest: '143257f4018ad773afc0c7280bd8aab8786851a9c20b65f8110881ff54656839', changedPathsDigest: '5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e', qaDigest: '6303dbf473e2815a3671aeb2c25528d8daba484b92a5a40d1eea5215e1f6763e', reviewDigest: '1bd6695846ed9340c8677cfa9b573880532187aeee487efaaa70577a0c94e7f2' }),
+});
+const LEGACY_STORE_FILE = 'neocortex-yoloop-runtime.json';
+const LOCK_DIRECTORY = 'runtime.lock';
+const TRANSIENT_P205_AUTHORITIES = new WeakMap();
+export async function executeP205TransientAuthority(projectRoot, input) {
+    const authorities = await executeP205TransientAuthorities(projectRoot, {
+        headSha: input.headSha,
+        graphRevisions: [input.graphRevision],
+        ...(input.nowIso !== undefined ? { nowIso: input.nowIso } : {}),
+        ...(input.anchoredWorkspace !== undefined ? { anchoredWorkspace: input.anchoredWorkspace } : {}),
+    });
+    return authorities.get(input.graphRevision);
+}
+/**
+ * Execute the physical P205 gate once for one immutable HEAD and mint a
+ * separate opaque authority for every historical graph epoch accepted at that
+ * HEAD. The graph revision remains part of each evidence digest; only the
+ * expensive, graph-independent command execution is shared.
+ */
+export async function executeP205TransientAuthorities(projectRoot, input) {
+    const graphRevisions = [...new Set(input.graphRevisions)];
+    if (!isSha(input.headSha) || graphRevisions.length === 0 || graphRevisions.some((value) => !isHash(value))) {
+        throw new Error('p205-transient-binding-invalid');
+    }
+    const anchor = input.anchoredWorkspace;
+    if (anchor && resolve(projectRoot) !== join(resolve(anchor.parent), anchor.name)) {
+        throw new Error('p205-transient-anchor-binding-invalid');
+    }
+    const runGit = async (args) => anchor
+        ? (await anchoredExecuteGit(anchor.parent, anchor.name, anchor.identity, args)).toString('utf8')
+        : String((await execFileAsync('git', [...args], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 8 * 1024 * 1024 })).stdout);
+    const readProducer = async () => {
+        if (anchor)
+            return JSON.parse((await anchoredExecuteNode(anchor.parent, anchor.name, anchor.identity, [
+                '-e', "const fs=require('node:fs');process.stdout.write(JSON.stringify({manifest:fs.readFileSync('config/release-gates.v2.json','utf8'),runner:fs.readFileSync('scripts/test-root.mjs','utf8')}));",
+            ])).toString('utf8'));
+        return { manifest: await readFile(join(projectRoot, 'config', 'release-gates.v2.json'), 'utf8'),
+            runner: await readFile(join(projectRoot, 'scripts', 'test-root.mjs'), 'utf8') };
+    };
+    const beforeHead = (await runGit(['rev-parse', 'HEAD'])).trim();
+    if (beforeHead !== input.headSha)
+        throw new Error('p205-transient-head-mismatch');
+    const { manifest: manifestRaw, runner: runnerRaw } = await readProducer();
+    const [committedManifest, committedRunner] = await Promise.all([
+        runGit(['show', `${input.headSha}:config/release-gates.v2.json`]),
+        runGit(['show', `${input.headSha}:scripts/test-root.mjs`]),
+    ]);
+    if (manifestRaw !== committedManifest || runnerRaw !== committedRunner) {
+        throw new Error('p205-transient-producer-dirty');
+    }
+    const manifest = JSON.parse(manifestRaw);
+    const gateIds = Array.isArray(manifest.requiredCompleteClasses)
+        ? manifest.requiredCompleteClasses.filter((item) => typeof item === 'string' && /^[a-z0-9-]+$/.test(item))
+        : [];
+    if (manifest.contract !== 'P205-CI-02' || gateIds.length === 0)
+        throw new Error('p205-transient-manifest-invalid');
+    const gateEnv = { ...process.env };
+    delete gateEnv.NEOCORTEX_PROFILE_DIR;
+    const output = anchor
+        ? (await anchoredExecuteNode(anchor.parent, anchor.name, anchor.identity, ['scripts/test-root.mjs', '--gate', 'complete'])).toString('utf8')
+        : String((await execFileAsync(process.execPath, ['scripts/test-root.mjs', '--gate', 'complete'], {
+            cwd: projectRoot, encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, env: gateEnv,
+        })).stdout);
+    const { manifest: afterManifest, runner: afterRunner } = await readProducer();
+    if (afterManifest !== manifestRaw || afterRunner !== runnerRaw) {
+        throw new Error('p205-transient-producer-raced');
+    }
+    const afterHead = (await runGit(['rev-parse', 'HEAD'])).trim();
+    if (afterHead !== input.headSha)
+        throw new Error('p205-transient-head-raced');
+    const manifestDigest = createHash('sha256').update(manifestRaw).digest('hex');
+    const resultDigest = createHash('sha256').update(output).digest('hex');
+    const executedAt = normalizedIso(input.nowIso ?? new Date().toISOString());
+    const authorities = new Map();
+    const frozenGateIds = Object.freeze(gateIds);
+    for (const graphRevision of graphRevisions) {
+        const executionEvidenceDigest = createHash('sha256').update([
+            'p205-transient-execution-v1', P205_COMPLETE_COMMAND, input.headSha, graphRevision,
+            manifestDigest, gateIds.join(','), resultDigest, executedAt,
+        ].join('\0')).digest('hex');
+        const evidence = Object.freeze({
+            schemaVersion: 1, kind: 'p205_transient_execution_authority',
+            contract: 'P205-CI-02', command: P205_COMPLETE_COMMAND,
+            executionHeadSha: input.headSha, graphRevision,
+            manifestDigest, gateIds: frozenGateIds, resultDigest, executedAt,
+            executionEvidenceDigest,
+        });
+        const authority = Object.freeze(Object.create(null));
+        TRANSIENT_P205_AUTHORITIES.set(authority, evidence);
+        authorities.set(graphRevision, authority);
+    }
+    return authorities;
+}
+export async function readGitLifecycleRuntime(projectRoot, options = {}) {
+    const storePath = await runtimeStorePath(projectRoot);
+    return readDocument(storePath, options);
+}
+export function readGitLifecycleRuntimeSync(projectRoot, options = {}) {
+    let path;
+    try {
+        const commonDir = execFileSync('git', ['rev-parse', '--git-common-dir'], {
+            cwd: projectRoot,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        const canonicalRoot = realpathSync(projectRoot);
+        const absolute = isAbsolute(commonDir) ? resolve(commonDir) : resolve(canonicalRoot, commonDir);
+        const canonicalCommonDir = realpathSync(absolute);
+        if (canonicalCommonDir !== absolute)
+            throw new Error('git-lifecycle-common-dir-symlink');
+        assertCommonDirectoryEntrySync(canonicalCommonDir);
+        const runtimeDirectory = join(canonicalCommonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
+        const currentPath = join(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE);
+        if (existsSync(runtimeDirectory)) {
+            assertSafeFilesystemEntrySync(runtimeDirectory, 'directory');
+            if (realpathSync(runtimeDirectory) !== runtimeDirectory)
+                throw new Error('git-lifecycle-runtime-directory-symlink');
+        }
+        path = existsSync(currentPath) ? currentPath : join(canonicalCommonDir, LEGACY_STORE_FILE);
+    }
+    catch {
+        if (options.required)
+            throw new Error('git-lifecycle-common-dir-invalid');
+        return emptyDocument();
+    }
+    if (!existsSync(path)) {
+        if (options.required)
+            throw new Error('git-lifecycle-runtime-missing');
+        return emptyDocument();
+    }
+    assertSafeFilesystemEntrySync(path, 'file');
+    return validateDocument(JSON.parse(readFileSync(path, 'utf8')));
+}
+/**
+ * Materialize the private lifecycle sidecar for repositories that already
+ * declare the epic-branch contract in tracked state but predate the sidecar.
+ * Missing state is the only recoverable condition: corrupt, substituted or
+ * permission-unsafe paths continue to fail closed.
+ */
+export async function ensureGitLifecycleRuntimeInitialized(projectRoot) {
+    try {
+        await readGitLifecycleRuntime(projectRoot, { required: true });
+        return;
+    }
+    catch (error) {
+        if (!(error instanceof Error) || error.message !== 'git-lifecycle-runtime-missing')
+            throw error;
+    }
+    try {
+        await mutateGitLifecycleRuntime(projectRoot, () => undefined, { expectedRevision: 0 });
+    }
+    catch (error) {
+        // Concurrent first-use initialization is idempotent. Accept only a proven
+        // winning document; every other filesystem or validation error propagates.
+        if (!(error instanceof Error) || error.message !== 'git-lifecycle-runtime-revision-conflict')
+            throw error;
+        await readGitLifecycleRuntime(projectRoot, { required: true });
+    }
+}
+function isLiveSameStorySetupLease(lease, storyId, nowMs) {
+    if (!lease || lease.ownerStoryId !== storyId)
+        return false;
+    const sessionId = typeof lease.sessionId === 'string' ? lease.sessionId : '';
+    const expiresAt = Date.parse(String(lease.expiresAt));
+    return /^setup-[a-f0-9]{64}$/.test(sessionId)
+        && lease.idempotencyKey === sessionId
+        && Number.isFinite(expiresAt)
+        && expiresAt > nowMs;
+}
+/**
+ * Close the server-plan -> client -> P207 sidecar handoff. The authority is
+ * accepted only for the exact tracked epic/story/branch projection that the
+ * server selected. A genuinely new epic may bootstrap its deterministic
+ * `epic/<ID>` unit into the private sidecar after the complete tracked topology
+ * proves there is no legacy story Git progress. Tracked-state drift, explicit
+ * lifecycle conflicts and sidecar revision races fail closed; no tracked,
+ * staged or working-tree bytes are modified.
+ */
+export async function persistGitLifecycleGraphAuthority(projectRoot, authority, nowIso = new Date().toISOString()) {
+    if (!isGitLifecycleGraphAuthority(authority))
+        throw new Error('git-lifecycle-graph-authority-invalid');
+    const trackedPath = join(resolve(projectRoot), '.neocortex', 'state.json');
+    const trackedRaw = await readFile(trackedPath, 'utf8');
+    const tracked = asRecord(JSON.parse(trackedRaw));
+    if (!tracked)
+        throw new Error('git-lifecycle-tracked-state-invalid');
+    // An absent sidecar is the normal first-use state for a new epic. Reading
+    // without `required` yields revision zero while corrupt/unsafe stores still
+    // fail closed. The authenticated authority mutation below materializes the
+    // sidecar only after every tracked-state invariant has passed.
+    const runtime = await readGitLifecycleRuntime(projectRoot);
+    const effective = applyGitLifecycleRuntimeOverlay(tracked, runtime);
+    const epic = asRecord(asRecord(effective.epics)?.[authority.epicId]);
+    const story = asRecord(asRecord(effective.stories)?.[authority.storyId]);
+    if (!epic)
+        throw new Error('git-lifecycle-graph-authority-epic-invalid');
+    if (!story || String(story.epic_id ?? authority.storyId.split('.')[0]) !== authority.epicId) {
+        throw new Error('git-lifecycle-graph-authority-story-invalid');
+    }
+    const declaredStoryIds = Array.isArray(epic.stories)
+        ? epic.stories.filter((value) => typeof value === 'string')
+        : Object.keys(asRecord(effective.stories) ?? {}).filter((storyId) => {
+            const candidate = asRecord(asRecord(effective.stories)?.[storyId]);
+            return String(candidate?.epic_id ?? storyId.split('.')[0]) === authority.epicId;
+        });
+    if (Array.isArray(epic.stories) && !declaredStoryIds.includes(authority.storyId)) {
+        throw new Error('git-lifecycle-graph-authority-story-invalid');
+    }
+    const branchStories = declaredStoryIds.map((storyId) => {
+        const candidate = asRecord(asRecord(effective.stories)?.[storyId]) ?? {};
+        return {
+            id: storyId,
+            branch_name: typeof candidate.branch_name === 'string' || candidate.branch_name === null
+                ? candidate.branch_name : undefined,
+            pr_number: typeof candidate.pr_number === 'number' || candidate.pr_number === null
+                ? candidate.pr_number : undefined,
+            steps_completed: Array.isArray(candidate.steps_completed)
+                ? candidate.steps_completed.filter((value) => typeof value === 'string') : [],
+            checkpoint: asRecord(candidate.checkpoint),
+        };
+    });
+    const branchUnit = resolveBranchUnit({ ...epic, id: authority.epicId }, branchStories);
+    if (branchUnit.mode !== 'epic')
+        throw new Error('git-lifecycle-graph-authority-epic-invalid');
+    if (branchUnit.executionBranch !== authority.executionBranch) {
+        throw new Error('git-lifecycle-graph-authority-branch-mismatch');
+    }
+    if (branchUnit.originBranch !== undefined && branchUnit.originBranch !== authority.originBranch) {
+        throw new Error('git-lifecycle-graph-authority-origin-mismatch');
+    }
+    const runtimeOriginBranch = typeof asRecord(runtime.epics[authority.epicId])?.origin_branch === 'string'
+        ? String(asRecord(runtime.epics[authority.epicId]).origin_branch)
+        : undefined;
+    if (runtimeOriginBranch !== undefined && runtimeOriginBranch !== authority.originBranch) {
+        throw new Error('git-lifecycle-graph-authority-origin-mismatch');
+    }
+    // Bootstrap may capture the origin only from the physical checkout selected
+    // by the operator. Once recorded, later invocations can legitimately run on
+    // the epic execution branch and are bound by the persisted origin instead.
+    if (branchUnit.originBranch === undefined && runtimeOriginBranch === undefined) {
+        const { stdout } = await execFileAsync('git', ['branch', '--show-current'], {
+            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
+        });
+        if (String(stdout).trim() !== authority.originBranch) {
+            throw new Error('git-lifecycle-graph-authority-origin-physical-mismatch');
+        }
+    }
+    const currentGraphRevision = typeof epic.graph_revision === 'string' ? epic.graph_revision : undefined;
+    const runtimeGraphRevision = typeof asRecord(runtime.epics[authority.epicId])?.graph_revision === 'string'
+        ? String(asRecord(runtime.epics[authority.epicId]).graph_revision)
+        : undefined;
+    if (currentGraphRevision !== undefined && !isHash(currentGraphRevision)) {
+        throw new Error('git-lifecycle-graph-revision-invalid');
+    }
+    if (currentGraphRevision === authority.graphRevision && runtimeGraphRevision === authority.graphRevision
+        && branchUnit.originBranch === authority.originBranch && runtimeOriginBranch === authority.originBranch) {
+        return { applied: false, reused: true, revision: runtime.revision, graphRevision: authority.graphRevision };
+    }
+    const nowMs = Date.parse(nowIso);
+    if (!Number.isFinite(nowMs))
+        throw new Error('git-lifecycle-graph-authority-time-invalid');
+    const lease = asRecord(epic.branch_lease);
+    if (lease && Number.isFinite(Date.parse(String(lease.expiresAt)))
+        && Date.parse(String(lease.expiresAt)) > nowMs
+        && !isLiveSameStorySetupLease(lease, authority.storyId, nowMs)) {
+        throw new Error('git-lifecycle-graph-authority-writer-active');
+    }
+    const mutation = await mutateGitLifecycleRuntime(projectRoot, (document) => {
+        const runtimeEpic = ensureRuntimeEpic(document, authority.epicId);
+        if (runtimeEpic.branch_mode !== undefined && runtimeEpic.branch_mode !== 'epic') {
+            throw new Error('git-lifecycle-graph-authority-epic-raced');
+        }
+        const persistedBranch = runtimeEpic.execution_branch;
+        if (persistedBranch !== undefined && persistedBranch !== authority.executionBranch) {
+            throw new Error('git-lifecycle-graph-authority-branch-raced');
+        }
+        const persistedOrigin = runtimeEpic.origin_branch;
+        if (persistedOrigin !== undefined && persistedOrigin !== authority.originBranch) {
+            throw new Error('git-lifecycle-graph-authority-origin-raced');
+        }
+        const persistedRevision = runtimeEpic.graph_revision;
+        if (persistedRevision !== undefined && persistedRevision !== currentGraphRevision) {
+            throw new Error('git-lifecycle-graph-authority-epoch-raced');
+        }
+        const persistedLease = asRecord(runtimeEpic.branch_lease);
+        if (persistedLease && Number.isFinite(Date.parse(String(persistedLease.expiresAt)))
+            && Date.parse(String(persistedLease.expiresAt)) > nowMs
+            && !isLiveSameStorySetupLease(persistedLease, authority.storyId, nowMs)) {
+            throw new Error('git-lifecycle-graph-authority-writer-active');
+        }
+        runtimeEpic.branch_mode = 'epic';
+        runtimeEpic.execution_branch = authority.executionBranch;
+        runtimeEpic.origin_branch = authority.originBranch;
+        runtimeEpic.graph_revision = authority.graphRevision;
+    }, {
+        expectedRevision: runtime.revision,
+        preCommit: async () => {
+            if (await readFile(trackedPath, 'utf8') !== trackedRaw) {
+                throw new Error('git-lifecycle-graph-authority-tracked-state-raced');
+            }
+        },
+    });
+    return {
+        applied: true,
+        reused: false,
+        revision: mutation.document.revision,
+        graphRevision: authority.graphRevision,
+    };
+}
+export async function mutateGitLifecycleRuntime(projectRoot, mutate, options = {}) {
+    const commonDir = await gitCommonDir(projectRoot);
+    const runtimeDirectory = await ensureRuntimeDirectory(commonDir);
+    const lockPath = join(runtimeDirectory, LOCK_DIRECTORY);
+    const lockOwner = await acquireLock(lockPath);
+    try {
+        const storePath = join(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE);
+        const legacyStorePath = join(commonDir, LEGACY_STORE_FILE);
+        const current = await readDocument(existsSync(storePath) ? storePath : legacyStorePath);
+        if (options.expectedRevision !== undefined && options.expectedRevision !== current.revision) {
+            throw new Error('git-lifecycle-runtime-revision-conflict');
+        }
+        const mutable = structuredClone(current);
+        const value = mutate(mutable);
+        if (current.schemaVersion === 2 && options.nextSchemaVersion !== undefined
+            && options.nextSchemaVersion !== 2) {
+            throw new Error('git-lifecycle-runtime-schema-downgrade');
+        }
+        const next = validateDocument({
+            ...mutable,
+            schemaVersion: options.nextSchemaVersion ?? current.schemaVersion,
+            revision: current.revision + 1,
+        });
+        await options.preCommit?.(next);
+        await assertSafeFilesystemEntry(runtimeDirectory, 'directory');
+        await assertStoreDestinationSafe(storePath);
+        await anchoredAtomicWriteFile(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE, `${JSON.stringify(next, null, 2)}\n`);
+        await assertSafeFilesystemEntry(storePath, 'file');
+        await syncDirectory(runtimeDirectory);
+        return { document: next, value };
+    }
+    finally {
+        await releaseRuntimeLock(lockPath, lockOwner).catch(() => undefined);
+    }
+}
+async function syncDirectory(path) {
+    let handle;
+    try {
+        handle = await open(path, 'r');
+    }
+    catch (error) {
+        // Node cannot open directories on Windows. The file itself has already
+        // been flushed; keep the stronger parent-directory flush everywhere else.
+        if (process.platform === 'win32' && (isNodeError(error, 'EPERM') || isNodeError(error, 'EISDIR') || isNodeError(error, 'EINVAL')))
+            return;
+        throw error;
+    }
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Merge the runtime overlay over tracked state without mutating either input. */
+export function applyGitLifecycleRuntimeOverlay(tracked, runtime) {
+    const merged = structuredClone(tracked);
+    const epics = normalizeTrackedCollection(merged, 'epics');
+    const stories = normalizeTrackedCollection(merged, 'stories');
+    for (const [epicId, overlay] of Object.entries(runtime.epics)) {
+        epics[epicId] = { ...(asRecord(epics[epicId]) ?? {}), ...structuredClone(overlay) };
+    }
+    for (const [storyId, overlay] of Object.entries(runtime.stories)) {
+        const trackedStory = asRecord(stories[storyId]) ?? {};
+        const trackedSteps = trackedStory.steps_completed;
+        const runtimeSteps = overlay.steps_completed;
+        const c01OnlyOverlay = overlay.status === 'branch-ready'
+            && overlay.last_step === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
+            && Array.isArray(runtimeSteps) && runtimeSteps.length === 1
+            && runtimeSteps[0] === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
+            && overlay.checkpoint === undefined;
+        // Once the tracked story includes C01, later tracked steps must not be
+        // masked by the private C01-only bridge used before the first commit.
+        if (c01OnlyOverlay && Array.isArray(trackedSteps)
+            && trackedSteps.includes(GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID))
+            continue;
+        stories[storyId] = { ...trackedStory, ...structuredClone(overlay) };
+    }
+    return merged;
+}
+/**
+ * Older project state used arrays while current consumers require records keyed
+ * by canonical IDs. Normalize only the in-memory projection and fail closed on
+ * ambiguous entries; the tracked document remains byte-for-byte untouched.
+ */
+function normalizeTrackedCollection(parent, key) {
+    const current = parent[key];
+    if (current === undefined) {
+        const created = {};
+        parent[key] = created;
+        return created;
+    }
+    const record = asRecord(current);
+    if (record)
+        return record;
+    if (!Array.isArray(current))
+        throw new Error(`git-lifecycle-tracked-${key}-invalid`);
+    const normalized = {};
+    for (const entry of current) {
+        const value = asRecord(entry);
+        const id = typeof value?.id === 'string' ? value.id.trim() : '';
+        if (!id || normalized[id] !== undefined)
+            throw new Error(`git-lifecycle-tracked-${key}-ambiguous`);
+        normalized[id] = value;
+    }
+    parent[key] = normalized;
+    return normalized;
+}
+export function ensureRuntimeEpic(document, epicId) {
+    return document.epics[epicId] ?? (document.epics[epicId] = {});
+}
+export function ensureRuntimeStory(document, storyId) {
+    return document.stories[storyId] ?? (document.stories[storyId] = {});
+}
+/** Runtime-safe accepted-checkpoint predicate kept in the published client closure. */
+export function isAcceptedGitLifecycleStoryCheckpoint(value, storyId, epicId, executionBranch) {
+    const item = asRecord(value);
+    return Boolean(item && item.epicId === epicId && item.branch === executionBranch
+        && item.qaVerdict === 'passed' && item.reviewVerdict === 'approved'
+        && validateCheckpoint(item, storyId));
+}
+/**
+ * Structural JSON is untrusted under a same-UID threat model. Recompute the
+ * commit-range/review authority from Git before a checkpoint can authorize
+ * aggregate QA or terminal integration.
+ */
+export async function verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet = []) {
+    return verifyAcceptedGitLifecycleStoryCheckpointSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet).verdict === 'verified';
+}
+/**
+ * Synchronous variant used at the state-snapshot boundary, before any runtime
+ * overlay is sent to the server. It returns a fresh, public, Git-derived receipt.
+ */
+export function verifyAcceptedGitLifecycleStoryCheckpointSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet = [], nowIso = new Date().toISOString(), mode = transientAuthority === undefined ? 'scheduling' : 'integration') {
+    const rejected = () => checkpointVerification({
+        storyId, epicId, executionBranch, value, verifiedAt: nowIso,
+        verdict: 'rejected', reasonCode: 'checkpoint-git-physical-invalid',
+    });
+    try {
+        if (!isAcceptedGitLifecycleStoryCheckpoint(value, storyId, epicId, executionBranch))
+            return rejected();
+        const checkpoint = asRecord(value);
+        const qa = asRecord(checkpoint.qaReceipt);
+        const review = asRecord(checkpoint.reviewReceipt);
+        const headSha = String(checkpoint.headSha);
+        const baseSha = String(checkpoint.baseSha);
+        const publicReview = publicStoryReviewArtifactFromGit(projectRoot, storyId, headSha, review.reviewArtifactDigest === undefined);
+        const legacyWithoutPublicArtifact = review.reviewArtifactDigest === undefined
+            && !publicStoryReviewBlobExistsInGit(projectRoot, storyId, headSha);
+        if (review.reviewArtifactDigest !== undefined && review.reviewArtifactDigest !== publicReview?.digest)
+            return rejected();
+        const branchHead = gitSync(projectRoot, ['rev-parse', `refs/heads/${executionBranch}`]).trim();
+        execFileSync('git', ['merge-base', '--is-ancestor', headSha, branchHead], { cwd: projectRoot, stdio: 'ignore' });
+        const historicalReviewPending = !legacyWithoutPublicArtifact && publicReview?.verdict !== 'approved';
+        if (historicalReviewPending) {
+            if (review.reviewArtifactDigest !== undefined || !verifyHistoricalReviewReconciliation(projectRoot, checkpoint, review, qa, storyId, epicId, branchHead))
+                return rejected();
+        }
+        else if (checkpoint.reviewReconciliation !== undefined) {
+            // A supplemental receipt cannot replace or shadow an already approved blob.
+            return rejected();
+        }
+        const commitBody = gitSync(projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', headSha]);
+        const parentSha = gitSync(projectRoot, ['rev-parse', `${headSha}^`]).trim();
+        const commitCount = gitSync(projectRoot, ['rev-list', '--count', `${baseSha}..${headSha}`]).trim();
+        if (parentSha !== baseSha || commitCount !== '1')
+            return rejected();
+        const trailers = new Set(commitBody.split('\n').map((line) => line.trim()));
+        const reviewTrailers = commitBody.split('\n').map((line) => line.trim())
+            .filter((line) => line.startsWith('Neocortex-Review-Artifact-Digest: '));
+        if (reviewTrailers.length > 0 && (reviewTrailers.length !== 1
+            || reviewTrailers[0] !== `Neocortex-Review-Artifact-Digest: ${publicReview?.digest}`
+            || review.reviewArtifactDigest !== publicReview?.digest))
+            return rejected();
+        const requiredTrailers = [
+            `Neocortex-Story: ${storyId}`,
+            `Neocortex-Epic: ${epicId}`,
+            `Neocortex-Execution-Branch: ${executionBranch}`,
+            `Neocortex-Bundle-Digest: ${String(checkpoint.bundleDigest)}`,
+            `Neocortex-Graph-Revision: ${String(checkpoint.graphRevision)}`,
+            ...(checkpoint.dispatchId ? [`Neocortex-Dispatch: ${String(checkpoint.dispatchId)}`] : []),
+            ...(checkpoint.bundleId ? [`Neocortex-Bundle: ${String(checkpoint.bundleId)}`] : []),
+            ...(checkpoint.claimRevision ? [`Neocortex-Claim-Revision: ${String(checkpoint.claimRevision)}`] : []),
+        ];
+        const hasCanonicalTrailers = requiredTrailers.every((trailer) => trailers.has(trailer));
+        if (hasCanonicalTrailers) {
+            const preparedBaseLine = [...trailers].find((line) => line.startsWith('Neocortex-Prepared-Base: '));
+            const preparedBase = preparedBaseLine?.slice('Neocortex-Prepared-Base: '.length) ?? '';
+            if (!/^[a-f0-9]{40,64}$/i.test(preparedBase))
+                return rejected();
+            execFileSync('git', ['merge-base', '--is-ancestor', preparedBase, headSha], { cwd: projectRoot, stdio: 'ignore' });
+        }
+        const changedRaw = gitSync(projectRoot, [
+            'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha,
+        ]);
+        const changedPaths = changedRaw.split('\0').filter(Boolean);
+        if (changedPaths.length === 0 || changedPaths.some((path) => !safeRepositoryPath(path)))
+            return rejected();
+        const commitBodyDigest = createHash('sha256').update(commitBody).digest('hex');
+        const changedPathsDigest = createHash('sha256').update([...changedPaths].sort().join('\0')).digest('hex');
+        const claimProof = checkpointClaimProof({
+            projectRoot, checkpoint, storyId, epicId, executionBranch, baseSha, headSha,
+            commitBodyDigest, changedPathsDigest, changedPaths,
+            authorizedWriteSet: authorizedWriteSet.length > 0
+                ? authorizedWriteSet : trackedStoryWriteSet(projectRoot, storyId),
+        });
+        if (!claimProof)
+            return rejected();
+        if (qa.receiptRef !== `story-qa:${String(qa.sourceEvidenceDigest)}`)
+            return rejected();
+        const expectedQaDigest = computeImmutableStoryQaEvidenceDigest({
+            storyId, baseSha, headSha,
+            bundleDigest: String(checkpoint.bundleDigest), graphRevision: String(checkpoint.graphRevision),
+            commitBody, changedPaths,
+        });
+        const executionQa = qa.evidenceVersion === 'p205-execution-v2'
+            && qa.contract === 'P205-CI-02'
+            && qa.command === P205_COMPLETE_COMMAND
+            && isHash(qa.manifestDigest)
+            && safeStringArray(qa.gateIds, 32, true)
+            && isHash(qa.resultDigest)
+            && qa.sourceEvidenceDigest === computeP205StoryQaEvidenceDigest({
+                gitEvidenceDigest: expectedQaDigest,
+                headSha,
+                graphRevision: String(checkpoint.graphRevision),
+                manifestDigest: String(qa.manifestDigest),
+                gateIds: qa.gateIds,
+                resultDigest: String(qa.resultDigest),
+            });
+        const immutableQa = qa.evidenceVersion === 'git-immutable-v1'
+            && qa.sourceEvidenceDigest === expectedQaDigest;
+        const boundedLegacyQa = qa.evidenceVersion === undefined
+            && claimProof.mode === 'legacy-migration'
+            && claimProof.binding?.qaDigest === qa.sourceEvidenceDigest;
+        const aggregateP205 = transientP205AuthorityMatches(transientAuthority, branchHead, String(checkpoint.graphRevision));
+        const transientQa = aggregateP205 && (executionQa
+            || claimProof.mode === 'legacy-migration' && (immutableQa || boundedLegacyQa));
+        const schedulingQa = mode === 'scheduling' && transientAuthority === undefined && executionQa;
+        if (!transientQa && !schedulingQa)
+            return rejected();
+        const artifactBound = review.reviewArtifactDigest !== undefined;
+        const expectedReviewDigest = createHash('sha256').update([
+            artifactBound ? 'root-commit-range-review-v2' : 'root-commit-range-review-v1', storyId, baseSha, headSha,
+            String(checkpoint.bundleDigest), String(checkpoint.graphRevision), String(qa.receiptRef),
+            createHash('sha256').update(commitBody).digest('hex'), [...changedPaths].sort().join(','),
+            ...(artifactBound ? [publicReview.digest] : []),
+        ].join('\0')).digest('hex');
+        if (review.sourceEvidenceDigest !== expectedReviewDigest
+            || review.receiptRef !== `story-review:${expectedReviewDigest}`)
+            return rejected();
+        if (claimProof.mode === 'legacy-migration'
+            && claimProof.binding?.reviewDigest !== undefined
+            && claimProof.binding.reviewDigest !== review.sourceEvidenceDigest)
+            return rejected();
+        if (!hasCanonicalTrailers) {
+            if (LEGACY_DIRECT_YOLO_RECOVERY_COMMITS[storyId] !== headSha
+                || !Array.isArray(checkpoint.receiptRefs)
+                || !checkpoint.receiptRefs.some((item) => typeof item === 'string' && item.startsWith('legacy-direct-yolo:'))) {
+                return rejected();
+            }
+        }
+        const sourceEvidenceDigest = createHash('sha256').update([
+            'checkpoint-p205-transient-v1', storyId, epicId, executionBranch, baseSha, headSha,
+            String(checkpoint.bundleDigest), commitBodyDigest, changedPathsDigest,
+            claimProof.mode, claimProof.effectiveClaimRevision,
+            String(qa.sourceEvidenceDigest), String(review.sourceEvidenceDigest),
+            ...(checkpoint.reviewReconciliation
+                ? [String(asRecord(checkpoint.reviewReconciliation)?.sourceEvidenceDigest)] : []),
+            transientAuthorityEvidence(transientAuthority)?.executionEvidenceDigest
+                ?? (schedulingQa ? 'scheduling-git-verification' : 'legacy-bounded-authority'),
+        ].join('\0')).digest('hex');
+        const effectiveAuthority = transientQa ? transientAuthorityEvidence(transientAuthority) : undefined;
+        return Object.freeze({
+            schemaVersion: 1, kind: 'story_checkpoint_physical_verification', producer: 'client-p205-transient-v1',
+            storyId, epicId, branch: executionBranch, baseSha, headSha,
+            aggregateHeadSha: effectiveAuthority?.executionHeadSha ?? headSha,
+            commitBodyDigest, changedPathsDigest,
+            claimVerification: claimProof.mode,
+            effectiveClaimRevision: claimProof.effectiveClaimRevision,
+            sourceEvidenceDigest,
+            command: P205_COMPLETE_COMMAND,
+            manifestDigest: effectiveAuthority?.manifestDigest ?? '0'.repeat(64),
+            gateIds: effectiveAuthority?.gateIds ?? Object.freeze(['legacy-bounded']),
+            resultDigest: effectiveAuthority?.resultDigest ?? '0'.repeat(64),
+            graphRevision: String(checkpoint.graphRevision),
+            executionEvidenceDigest: effectiveAuthority?.executionEvidenceDigest ?? '0'.repeat(64),
+            verifiedAt: effectiveAuthority?.executedAt ?? normalizedIso(nowIso), verdict: 'verified',
+            reasonCodes: Object.freeze([
+                transientQa ? 'checkpoint-p205-transient-verified'
+                    : schedulingQa ? 'checkpoint-git-scheduling-verified'
+                        : 'checkpoint-legacy-bounded-verified',
+                ...(claimProof.mode === 'legacy-migration' ? ['checkpoint-legacy-migration-verified'] : []),
+            ]), publicSafe: true,
+        });
+    }
+    catch {
+        return rejected();
+    }
+}
+/**
+ * Classify a checkpoint for one story without allowing physical scheduling
+ * evidence to impersonate transient P205 integration authority.
+ */
+export function classifyGitLifecycleStoryCheckpointProjectionSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet = [], nowIso = new Date().toISOString()) {
+    const mode = transientAuthority ? 'integration' : 'scheduling';
+    const verification = verifyAcceptedGitLifecycleStoryCheckpointSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet, nowIso, mode);
+    if (verification.verdict !== 'verified')
+        return { kind: 'rejected', verification };
+    if (mode === 'integration')
+        return { kind: 'integration-authorized', verification };
+    if (!verification.reasonCodes.includes('checkpoint-git-scheduling-verified')) {
+        return { kind: 'rejected', verification: checkpointVerification({
+                storyId, epicId, executionBranch, value, verifiedAt: nowIso,
+                verdict: 'rejected', reasonCode: 'checkpoint-git-physical-invalid',
+            }) };
+    }
+    return {
+        kind: 'scheduling-only',
+        evidence: Object.freeze({
+            schemaVersion: 1,
+            kind: 'story_scheduling_checkpoint_evidence',
+            producer: 'client-git-physical-v1',
+            storyId,
+            epicId,
+            branch: executionBranch,
+            baseSha: verification.baseSha,
+            headSha: verification.headSha,
+            graphRevision: verification.graphRevision,
+            effectiveClaimRevision: verification.effectiveClaimRevision,
+            sourceEvidenceDigest: verification.sourceEvidenceDigest,
+            verifiedAt: verification.verifiedAt,
+            reasonCodes: Object.freeze(['checkpoint-git-scheduling-verified']),
+            integrationAuthorized: false,
+            publicSafe: true,
+        }),
+    };
+}
+function transientP205AuthorityMatches(authority, aggregateHeadSha, graphRevision) {
+    const evidence = transientAuthorityEvidence(authority);
+    return Boolean(evidence
+        && evidence.schemaVersion === 1 && evidence.kind === 'p205_transient_execution_authority'
+        && evidence.contract === 'P205-CI-02' && evidence.command === P205_COMPLETE_COMMAND
+        && evidence.graphRevision === graphRevision
+        && isHash(evidence.resultDigest) && isHash(evidence.executionEvidenceDigest)
+        && evidence.executionHeadSha === aggregateHeadSha && isSha(aggregateHeadSha));
+}
+function transientAuthorityEvidence(authority) {
+    return authority && typeof authority === 'object' ? TRANSIENT_P205_AUTHORITIES.get(authority) : undefined;
+}
+/** Read-only projection for persistence/audit; it never recreates authority. */
+export function projectP205TransientExecutionEvidence(authority) {
+    const evidence = transientAuthorityEvidence(authority);
+    return evidence ? Object.freeze({
+        executionHeadSha: evidence.executionHeadSha,
+        graphRevision: evidence.graphRevision,
+        manifestDigest: evidence.manifestDigest,
+        gateIds: Object.freeze([...evidence.gateIds]),
+        resultDigest: evidence.resultDigest,
+        executedAt: evidence.executedAt,
+        executionEvidenceDigest: evidence.executionEvidenceDigest,
+    }) : undefined;
+}
+export function p205TransientAuthorityMatchesAggregate(authority, headSha, graphRevision) {
+    const evidence = transientAuthorityEvidence(authority);
+    return Boolean(evidence && evidence.executionHeadSha === headSha
+        && evidence.graphRevision === graphRevision && evidence.command === P205_COMPLETE_COMMAND);
+}
+function checkpointClaimProof(input) {
+    const legacy = LEGACY_P174_CHECKPOINT_MIGRATIONS[input.storyId];
+    const persistedClaim = typeof input.checkpoint.claimRevision === 'string' ? input.checkpoint.claimRevision : undefined;
+    const claimlessLegacy = input.storyId === 'P174.03.811759' || input.storyId === 'P174.03.685003';
+    const normalized = normalizeAuthorizedWriteSet(input.authorizedWriteSet);
+    let rootMemoryPaths = [];
+    if (input.checkpoint.rootMemoryEffect !== undefined) {
+        if (legacy)
+            return undefined;
+        try {
+            rootMemoryPaths = verifyRootMemoryPhysicalWriteSet(input.projectRoot, input.checkpoint.rootMemoryEffect, {
+                storyId: input.storyId, executionBranch: input.executionBranch, baseSha: input.baseSha,
+                headRef: input.headSha, childPaths: normalized,
+            }).files.map(file => file.path);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    const declaredWriteSetValid = normalized.length > 0 && normalized.length === input.authorizedWriteSet.length
+        && input.changedPaths.every((path) => normalized.some((scope) => writeSetCovers(scope, path)) || rootMemoryPaths.includes(path));
+    if (legacy
+        && input.epicId === 'P174' && input.executionBranch === 'epic/P174'
+        && input.baseSha === legacy.baseSha && input.headSha === legacy.headSha
+        && input.checkpoint.graphRevision === legacy.graphRevision
+        && input.commitBodyDigest === legacy.commitBodyDigest
+        && input.changedPathsDigest === legacy.changedPathsDigest
+        && (claimlessLegacy ? persistedClaim === undefined : persistedClaim === legacy.effectiveClaimRevision)) {
+        if (input.authorizedWriteSet.length > 0
+            && (!declaredWriteSetValid || !claimMatchesWriteSet(legacy.effectiveClaimRevision, normalized)))
+            return undefined;
+        return Object.freeze({ mode: 'legacy-migration', effectiveClaimRevision: legacy.effectiveClaimRevision, binding: legacy });
+    }
+    // Claimless compatibility is closed over the seven immutable P174 ranges
+    // above. Format, age, story name and otherwise-valid JSON evidence never
+    // authorize a generic migration.
+    if (persistedClaim === undefined)
+        return undefined;
+    if (!persistedClaim || !isHash(persistedClaim))
+        return undefined;
+    if (!declaredWriteSetValid || !claimMatchesWriteSet(persistedClaim, normalized))
+        return undefined;
+    return Object.freeze({ mode: 'canonical', effectiveClaimRevision: persistedClaim });
+}
+function normalizeAuthorizedWriteSet(values) {
+    const normalized = values.map((value) => value.replaceAll('\\', '/').replace(/^\.\//, '').replace(/\/{2,}/g, '/'));
+    if (normalized.some((value) => !safeRepositoryPath(value)))
+        return Object.freeze([]);
+    return Object.freeze([...new Set(normalized)].sort());
+}
+function trackedStoryWriteSet(projectRoot, storyId) {
+    try {
+        const state = JSON.parse(readFileSync(join(projectRoot, '.neocortex', 'state.json'), 'utf8'));
+        const stories = asRecord(state.stories);
+        const story = asRecord(stories?.[storyId]);
+        const runtime = readGitLifecycleRuntimeSync(projectRoot);
+        const checkpoint = asRecord(runtime.stories[storyId]?.checkpoint) ?? asRecord(story?.checkpoint);
+        return gitLifecycleStoryWriteSet(storyId, story, checkpoint);
+    }
+    catch {
+        return [];
+    }
+}
+/** Reconstruct the same closed claim used by the direct or continuous planner. */
+export function gitLifecycleStoryWriteSet(storyId, story, checkpoint) {
+    const authored = Array.isArray(story?.files_to_modify)
+        ? story.files_to_modify.filter((value) => typeof value === 'string') : [];
+    if (!checkpoint?.dispatchId || !checkpoint.bundleId)
+        return authored;
+    try {
+        return publicWriteSet({ ...story, id: storyId, files_to_modify: authored });
+    }
+    catch {
+        return [];
+    }
+}
+function claimMatchesWriteSet(claimRevision, writeSet) {
+    return claimRevision === createHash('sha256').update(writeSet.join('\0')).digest('hex')
+        || claimRevision === createHash('sha256').update(JSON.stringify(writeSet)).digest('hex');
+}
+function writeSetCovers(scope, path) {
+    return scope === path || scope.endsWith('/') && path.startsWith(scope);
+}
+/** Pre-P205 admission for only the exact seven immutable P174 migrations. */
+export function verifyLegacyCheckpointMigrationCandidateSync(projectRoot, value, storyId, epicId, executionBranch, authorizedWriteSet) {
+    try {
+        if (!isAcceptedGitLifecycleStoryCheckpoint(value, storyId, epicId, executionBranch))
+            return false;
+        const checkpoint = asRecord(value);
+        const qa = asRecord(checkpoint.qaReceipt);
+        const review = asRecord(checkpoint.reviewReceipt);
+        const headSha = String(checkpoint.headSha);
+        const baseSha = String(checkpoint.baseSha);
+        const branchHead = gitSync(projectRoot, ['rev-parse', `refs/heads/${executionBranch}`]).trim();
+        execFileSync('git', ['merge-base', '--is-ancestor', headSha, branchHead], { cwd: projectRoot, stdio: 'ignore' });
+        if (gitSync(projectRoot, ['rev-parse', `${headSha}^`]).trim() !== baseSha
+            || gitSync(projectRoot, ['rev-list', '--count', `${baseSha}..${headSha}`]).trim() !== '1')
+            return false;
+        const commitBody = gitSync(projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', headSha]);
+        const changedPaths = gitSync(projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha])
+            .split('\0').filter(Boolean);
+        if (changedPaths.length === 0 || changedPaths.some((path) => !safeRepositoryPath(path)))
+            return false;
+        const proof = checkpointClaimProof({
+            projectRoot, checkpoint, storyId, epicId, executionBranch, baseSha, headSha, changedPaths, authorizedWriteSet,
+            commitBodyDigest: createHash('sha256').update(commitBody).digest('hex'),
+            changedPathsDigest: createHash('sha256').update([...changedPaths].sort().join('\0')).digest('hex'),
+        });
+        if (proof?.mode !== 'legacy-migration' || !proof.binding
+            || qa.sourceEvidenceDigest !== proof.binding.qaDigest
+            || qa.receiptRef !== `story-qa:${proof.binding.qaDigest}`
+            || review.sourceEvidenceDigest !== proof.binding.reviewDigest
+            || review.receiptRef !== `story-review:${proof.binding.reviewDigest}`
+            || review.qaReceiptRef !== qa.receiptRef)
+            return false;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function computeImmutableStoryQaEvidenceDigest(input) {
+    return createHash('sha256').update([
+        'local-yolo-tdd-git-immutable-v1', input.storyId, input.baseSha, input.headSha,
+        input.bundleDigest, input.graphRevision,
+        createHash('sha256').update(input.commitBody).digest('hex'),
+        createHash('sha256').update([...input.changedPaths].sort().join('\0')).digest('hex'),
+    ].join('\0')).digest('hex');
+}
+/** Bind an actual successful P205 execution to immutable Git authority. */
+export function computeP205StoryQaEvidenceDigest(input) {
+    return createHash('sha256').update([
+        'local-yolo-tdd-p205-execution-v2', P205_COMPLETE_COMMAND,
+        input.gitEvidenceDigest, input.headSha, input.graphRevision,
+        input.manifestDigest, input.gateIds.join(','), input.resultDigest,
+    ].join('\0')).digest('hex');
+}
+function checkpointVerification(input) {
+    const checkpoint = asRecord(input.value);
+    return Object.freeze({
+        schemaVersion: 1, kind: 'story_checkpoint_physical_verification', producer: 'client-p205-transient-v1',
+        storyId: input.storyId, epicId: input.epicId, branch: input.executionBranch,
+        baseSha: isSha(checkpoint?.baseSha) ? String(checkpoint?.baseSha) : '0'.repeat(40),
+        headSha: isSha(checkpoint?.headSha) ? String(checkpoint?.headSha) : '0'.repeat(40),
+        aggregateHeadSha: '0'.repeat(40),
+        commitBodyDigest: '0'.repeat(64), changedPathsDigest: '0'.repeat(64),
+        claimVerification: 'canonical', effectiveClaimRevision: '0'.repeat(64),
+        command: P205_COMPLETE_COMMAND, manifestDigest: '0'.repeat(64), gateIds: Object.freeze([]),
+        resultDigest: '0'.repeat(64), graphRevision: '0'.repeat(64), executionEvidenceDigest: '0'.repeat(64),
+        sourceEvidenceDigest: '0'.repeat(64), verifiedAt: normalizedIso(input.verifiedAt),
+        verdict: input.verdict, reasonCodes: Object.freeze([input.reasonCode]), publicSafe: true,
+    });
+}
+function gitSync(cwd, args) {
+    return execFileSync('git', [...args], { cwd, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 });
+}
+/** Read public review evidence from Git, never from the mutable worktree. */
+export function publicStoryReviewArtifactFromGit(projectRoot, storyId, revision, allowLegacyDecision = false) {
+    if (!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(storyId))
+        return undefined;
+    if (revision !== ':' && !/^[a-f0-9]{40,64}$/i.test(revision))
+        return undefined;
+    const path = `.neocortex/stories/${storyId}/review.md`;
+    let bytes;
+    try {
+        bytes = execFileSync('git', ['show', `${revision === ':' ? ':' : `${revision}:`}${path}`], {
+            cwd: projectRoot, maxBuffer: 128 * 1024, stdio: ['ignore', 'pipe', 'ignore'],
+        });
+    }
+    catch {
+        return undefined;
+    }
+    if (bytes.length === 0 || bytes.length > 64 * 1024 || bytes.includes(0))
+        return undefined;
+    let content;
+    try {
+        content = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    }
+    catch {
+        return undefined;
+    }
+    const lines = content.replace(/\r\n/g, '\n').split('\n');
+    const storyHeading = new RegExp(`^#\\s+${storyId.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?=\\s|$|[:—-])`);
+    if (!lines.some((line) => storyHeading.test(line)))
+        return undefined;
+    const verdictLines = lines.filter((line) => /^Verdict\s*:/i.test(line));
+    if (lines.some((line) => /^Status\s*:\s*(pending|changes-requested|rejected)\b/i.test(line))) {
+        return undefined;
+    }
+    const legacyDecisionLines = lines.filter((line) => /^Decision\s*:/i.test(line));
+    if (verdictLines.length === 0 && allowLegacyDecision
+        && legacyDecisionLines.length === 1
+        && /^Decision\s*:\s*APPROVED\b/i.test(legacyDecisionLines[0])) {
+        return Object.freeze({ verdict: 'approved', digest: createHash('sha256').update(bytes).digest('hex') });
+    }
+    if (verdictLines.length !== 1)
+        return undefined;
+    const verdict = /^Verdict\s*:\s*(approved|pending|changes-requested)(?=\s|$|[;,.])/i.exec(verdictLines[0])?.[1]?.toLowerCase();
+    if (verdict !== 'approved' && verdict !== 'pending' && verdict !== 'changes-requested')
+        return undefined;
+    return Object.freeze({ verdict, digest: createHash('sha256').update(bytes).digest('hex') });
+}
+/** Binds a later root approval to the exact immutable range of a legacy checkpoint. */
+export function computeHistoricalReviewReconciliationDigest(input) {
+    return createHash('sha256').update([
+        'root-historical-review-reconciliation-v1', input.storyId, input.epicId,
+        input.checkpointHeadSha, input.approvalCommitSha, input.approvalArtifactDigest,
+        input.qaReceiptRef, input.reviewReceiptRef,
+        createHash('sha256').update(input.approvalCommitBody).digest('hex'),
+    ].join('\0')).digest('hex');
+}
+function verifyHistoricalReviewReconciliation(projectRoot, checkpoint, review, qa, storyId, epicId, branchHead) {
+    const receipt = asRecord(checkpoint.reviewReconciliation);
+    if (!receipt || !validateHistoricalReviewReconciliation(receipt, checkpoint))
+        return false;
+    const approvalSha = String(receipt.approvalCommitSha);
+    const checkpointHead = String(checkpoint.headSha);
+    if (approvalSha === checkpointHead)
+        return false;
+    try {
+        execFileSync('git', ['merge-base', '--is-ancestor', checkpointHead, approvalSha], { cwd: projectRoot, stdio: 'ignore' });
+        execFileSync('git', ['merge-base', '--is-ancestor', approvalSha, branchHead], { cwd: projectRoot, stdio: 'ignore' });
+        if (!gitSync(projectRoot, ['rev-list', '--first-parent', branchHead]).split('\n').includes(approvalSha))
+            return false;
+        const parents = gitSync(projectRoot, ['show', '--no-patch', '--format=%P', approvalSha]).trim().split(/\s+/);
+        if (parents.length !== 1 || !isSha(parents[0]))
+            return false;
+        const approvalCommitBody = gitSync(projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', approvalSha]);
+        const trailers = new Set(approvalCommitBody.split('\n').map((line) => line.trim()));
+        if (!trailers.has(`Neocortex-Review-Reconciliation: ${storyId}`)
+            || !trailers.has(`Neocortex-Original-Checkpoint: ${checkpointHead}`)
+            || !trailers.has(`Neocortex-Original-Review-Receipt: ${String(review.receiptRef)}`))
+            return false;
+        const reviewPath = `.neocortex/stories/${storyId}/review.md`;
+        const changedPaths = gitSync(projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', approvalSha])
+            .split('\0').filter(Boolean);
+        if (!changedPaths.includes(reviewPath) || changedPaths.some((path) => !safeRepositoryPath(path)))
+            return false;
+        const approved = publicStoryReviewArtifactFromGit(projectRoot, storyId, approvalSha);
+        if (approved?.verdict !== 'approved' || approved.digest !== receipt.approvalArtifactDigest)
+            return false;
+        const current = publicStoryReviewArtifactFromGit(projectRoot, storyId, branchHead);
+        if (current?.verdict !== 'approved' || current.digest !== approved.digest)
+            return false;
+        const digest = computeHistoricalReviewReconciliationDigest({
+            storyId, epicId, checkpointHeadSha: checkpointHead, approvalCommitSha: approvalSha,
+            approvalArtifactDigest: approved.digest, qaReceiptRef: String(qa.receiptRef),
+            reviewReceiptRef: String(review.receiptRef), approvalCommitBody,
+        });
+        return receipt.sourceEvidenceDigest === digest
+            && receipt.receiptRef === `story-review-reconciliation:${digest}`;
+    }
+    catch {
+        return false;
+    }
+}
+function publicStoryReviewBlobExistsInGit(projectRoot, storyId, headSha) {
+    if (!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(storyId)
+        || !/^[a-f0-9]{40,64}$/i.test(headSha))
+        return false;
+    try {
+        execFileSync('git', ['cat-file', '-e', `${headSha}:.neocortex/stories/${storyId}/review.md`], {
+            cwd: projectRoot, stdio: 'ignore', maxBuffer: 1024,
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function normalizedIso(value) {
+    return Number.isFinite(Date.parse(value)) ? new Date(Date.parse(value)).toISOString() : new Date().toISOString();
+}
+/**
+ * Bounded migration evidence for direct-*yolo commits created before canonical
+ * trailers were mandatory. The receipt is derived only from immutable commit
+ * data and story-owned evidence blobs; JSON sidecar shape alone is never enough.
+ */
+export async function computeLegacyDirectYoloRecoveryReceiptRef(projectRoot, input) {
+    if (LEGACY_DIRECT_YOLO_RECOVERY_COMMITS[input.storyId] !== input.headSha)
+        return undefined;
+    const evidencePaths = [
+        '.neocortex/state.json',
+        `.neocortex/stories/${input.storyId}/qa-gate-result.json`,
+        `.neocortex/stories/${input.storyId}/validation-evidence.md`,
+        `.neocortex/stories/${input.storyId}/review.md`,
+        `docs/stories/${input.storyId}.story.md`,
+    ];
+    try {
+        const branchHead = (await execFileAsync('git', ['rev-parse', `refs/heads/${input.executionBranch}`], {
+            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
+        })).stdout.trim();
+        await execFileAsync('git', ['merge-base', '--is-ancestor', input.headSha, branchHead], { cwd: projectRoot });
+        const parentSha = (await execFileAsync('git', ['rev-parse', `${input.headSha}^`], {
+            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
+        })).stdout.trim();
+        if (parentSha !== input.baseSha)
+            return undefined;
+        const immutablePayload = String((await execFileAsync('git', [
+            'diff', '--binary', '--full-index', `${input.baseSha}..${input.headSha}`,
+        ], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 })).stdout);
+        if (createHash('sha256').update(immutablePayload).digest('hex') !== input.bundleDigest)
+            return undefined;
+        const commitBody = String((await execFileAsync('git', ['show', '--no-patch', '--format=%H%n%P%n%B', input.headSha], {
+            cwd: projectRoot, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024,
+        })).stdout);
+        const subject = String((await execFileAsync('git', ['show', '--no-patch', '--format=%s', input.headSha], {
+            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
+        })).stdout).trim();
+        if (!subject.includes(input.storyId))
+            return undefined;
+        const changedRaw = String((await execFileAsync('git', [
+            'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', input.headSha,
+        ], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 8 * 1024 * 1024 })).stdout);
+        const changedPaths = changedRaw.split('\0').filter(Boolean);
+        if (!evidencePaths.every((path) => changedPaths.includes(path))
+            || changedPaths.some((path) => !safeRepositoryPath(path)))
+            return undefined;
+        const blobs = await Promise.all(evidencePaths.map(async (path) => String((await execFileAsync('git', [
+            'show', `${input.headSha}:${path}`,
+        ], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 16 * 1024 * 1024 })).stdout)));
+        const state = JSON.parse(blobs[0]);
+        const stories = asRecord(state.stories);
+        const epics = asRecord(state.epics);
+        const story = asRecord(stories?.[input.storyId]);
+        const epic = asRecord(epics?.[input.epicId]);
+        const steps = Array.isArray(story?.steps_completed) ? story.steps_completed : [];
+        const qa = JSON.parse(blobs[1]);
+        if (story?.status !== 'done' || !steps.includes(GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID) || !steps.includes(GIT_LIFECYCLE_REVIEW_PR_STEP_ID)
+            || epic?.branch_mode !== 'epic' || epic.execution_branch !== input.executionBranch
+            || qa.storyId !== input.storyId || qa.status !== 'qa-passed' || qa.safeToContinueYoloop !== true
+            || !Array.isArray(qa.blockingChecks) || qa.blockingChecks.length !== 0
+            || !blobs[2].includes(input.storyId) || !/P205[\s\S]{0,80}(pass|aprov)/i.test(blobs[2])
+            || !blobs[3].includes(input.storyId) || !/approved|aprovado/i.test(blobs[3])
+            || !blobs[4].includes(input.storyId))
+            return undefined;
+        const digest = createHash('sha256').update([
+            'legacy-direct-yolo-recovery-v1', input.storyId, input.epicId, input.executionBranch,
+            input.baseSha, input.headSha, input.bundleDigest, input.graphRevision,
+            createHash('sha256').update(commitBody).digest('hex'),
+            createHash('sha256').update([...changedPaths].sort().join('\0')).digest('hex'),
+            ...blobs.map((blob) => createHash('sha256').update(blob).digest('hex')),
+        ].join('\0')).digest('hex');
+        return `legacy-direct-yolo:${digest}`;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function runtimeStorePath(projectRoot) {
+    const commonDir = await gitCommonDir(projectRoot);
+    const runtimeDirectory = join(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
+    const currentPath = join(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE);
+    if (existsSync(runtimeDirectory)) {
+        await assertSafeFilesystemEntry(runtimeDirectory, 'directory');
+        if (await realpath(runtimeDirectory) !== runtimeDirectory)
+            throw new Error('git-lifecycle-runtime-directory-symlink');
+    }
+    return existsSync(currentPath) ? currentPath : join(commonDir, LEGACY_STORE_FILE);
+}
+/** Resolve/create the private root used by lifecycle state, locks and sandboxes. */
+export async function gitLifecycleRuntimeDirectory(projectRoot) {
+    return ensureRuntimeDirectory(await gitCommonDir(projectRoot));
+}
+/** Create or validate one private direct child without following substitutions. */
+export async function ensureGitLifecyclePrivateChildDirectory(parent, childName) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(childName) || childName.includes('..')) {
+        throw new Error('git-lifecycle-private-child-invalid');
+    }
+    const canonicalParent = resolve(parent);
+    await assertPrivateDirectory(canonicalParent);
+    const child = resolve(canonicalParent, childName);
+    assertDirectChild(canonicalParent, child);
+    if (!existsSync(child))
+        await anchoredEnsureDirectory(canonicalParent, childName);
+    await assertPrivateDirectory(child, canonicalParent);
+    await assertPrivateDirectory(canonicalParent);
+    return child;
+}
+/** Validate a private directory and every direct parent binding before use. */
+export async function assertGitLifecyclePrivateDirectory(path, parent) {
+    const canonicalParent = resolve(parent);
+    const child = resolve(path);
+    assertDirectChild(canonicalParent, child);
+    await assertPrivateDirectory(canonicalParent);
+    await assertPrivateDirectory(child, canonicalParent);
+}
+export async function assertGitLifecyclePrivateFile(path, parent) {
+    await assertSafePrivateFile(path, parent);
+}
+/** Remove only the validated directory object renamed inside its validated parent. */
+export async function removeGitLifecyclePrivateDirectory(path, parent, verifyRenamed) {
+    const canonicalParent = resolve(parent);
+    const child = resolve(path);
+    assertDirectChild(canonicalParent, child);
+    try {
+        await assertGitLifecyclePrivateDirectory(child, canonicalParent);
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return false;
+        throw error;
+    }
+    const quarantine = resolve(canonicalParent, `${child.slice(canonicalParent.length + 1)}.remove.${process.pid}.${Date.now()}.${randomBytes(4).toString('hex')}`);
+    assertDirectChild(canonicalParent, quarantine);
+    await anchoredRenameDirectory(canonicalParent, basename(child), basename(quarantine));
+    await assertGitLifecyclePrivateDirectory(quarantine, canonicalParent);
+    if (verifyRenamed && !(await verifyRenamed(quarantine))) {
+        await restoreQuarantinedPrivateDirectory(quarantine, child, canonicalParent).catch(() => undefined);
+        return false;
+    }
+    await anchoredRemoveDirectory(canonicalParent, basename(quarantine));
+    return true;
+}
+async function restoreQuarantinedPrivateDirectory(quarantine, original, parent) {
+    await assertGitLifecyclePrivateDirectory(quarantine, parent);
+    try {
+        await lstat(original);
+        return;
+    }
+    catch (error) {
+        if (!isNodeError(error, 'ENOENT'))
+            throw error;
+    }
+    await anchoredRenameDirectory(parent, basename(quarantine), basename(original));
+    await assertGitLifecyclePrivateDirectory(original, parent);
+}
+async function privateOwnerFingerprint(path) {
+    try {
+        await assertGitLifecyclePrivateDirectory(path, dirname(path));
+        const ownerPath = join(path, 'owner.json');
+        await assertSafePrivateFile(ownerPath, path);
+        const owner = await readFile(ownerPath);
+        await assertSafePrivateFile(ownerPath, path);
+        return createHash('sha256').update(owner).digest('hex');
+    }
+    catch {
+        return undefined;
+    }
+}
+/** One physical writer lock shared by direct `*yolo` and continuous DAG integration. */
+export async function acquireGitLifecyclePhysicalIntegrationLock(projectRoot, requested) {
+    const runtimeDirectory = await gitLifecycleRuntimeDirectory(projectRoot);
+    const leasesRoot = await ensureGitLifecyclePrivateChildDirectory(runtimeDirectory, 'leases');
+    const lockPath = join(leasesRoot, 'integration');
+    const legacyRecoveryPath = `${lockPath}.recovery`;
+    if (existsSync(legacyRecoveryPath)) {
+        await assertGitLifecyclePrivateDirectory(legacyRecoveryPath, leasesRoot);
+        const recoveryPid = await readLegacyPhysicalIntegrationOwnerPid(legacyRecoveryPath);
+        const recoveryFingerprint = await privateOwnerFingerprint(legacyRecoveryPath);
+        if (recoveryPid === undefined || processExists(recoveryPid)) {
+            return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
+        }
+        if (!recoveryFingerprint || !(await removeGitLifecyclePrivateDirectory(legacyRecoveryPath, leasesRoot, async (renamed) => await privateOwnerFingerprint(renamed) === recoveryFingerprint)))
+            return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
+    }
+    const nowIso = normalizedIso(requested.createdAt ?? new Date().toISOString());
+    const owner = Object.freeze({
+        schemaVersion: 1, kind: requested.kind, storyId: requested.storyId,
+        sessionId: requested.sessionId, idempotencyKey: requested.idempotencyKey,
+        pid: process.pid, createdAt: nowIso, expiresAt: normalizedIso(requested.expiresAt),
+        persistent: requested.persistent,
+        ownerNonce: requested.ownerNonce ?? randomBytes(16).toString('hex'),
+    });
+    if (Date.parse(owner.expiresAt) <= Date.parse(owner.createdAt)) {
+        return { ok: false, reasonCode: 'git-lifecycle-integration-lock-failed' };
+    }
+    const create = async () => {
+        await assertPrivateDirectory(leasesRoot, runtimeDirectory);
+        try {
+            await anchoredCreateOwnedDirectory(leasesRoot, basename(lockPath), `${JSON.stringify(owner)}\n`);
+            await assertGitLifecyclePrivateDirectory(lockPath, leasesRoot);
+            await assertSafePrivateFile(join(lockPath, 'owner.json'), lockPath);
+            return true;
+        }
+        catch (error) {
+            if (!isNodeError(error, 'EEXIST')) {
+                await removeGitLifecyclePrivateDirectory(lockPath, leasesRoot).catch(() => undefined);
+            }
+            throw error;
+        }
+    };
+    try {
+        await create();
+        return { ok: true, owner, path: lockPath };
+    }
+    catch (error) {
+        if (!isNodeError(error, 'EEXIST'))
+            return { ok: false, reasonCode: 'git-lifecycle-integration-lock-failed' };
+    }
+    try {
+        const current = await readPhysicalIntegrationOwner(lockPath);
+        const legacyPid = current ? undefined : await readLegacyPhysicalIntegrationOwnerPid(lockPath);
+        if (current && samePhysicalIntegrationOwner(current, owner))
+            return { ok: true, owner: current, path: lockPath };
+        const currentActive = current && Date.parse(current.expiresAt) > Date.now()
+            && (current.persistent || processExists(current.pid));
+        if (currentActive || legacyPid !== undefined && processExists(legacyPid)
+            || (!current && legacyPid === undefined && await recentlyCreated(lockPath))) {
+            return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
+        }
+        const ownerFingerprint = await privateOwnerFingerprint(lockPath);
+        if (!ownerFingerprint)
+            return { ok: false, reasonCode: 'git-lifecycle-integration-lock-failed' };
+        const quarantine = `${lockPath}.stale.${process.pid}.${Date.now()}`;
+        await anchoredRenameDirectory(leasesRoot, basename(lockPath), basename(quarantine));
+        try {
+            await assertGitLifecyclePrivateDirectory(quarantine, leasesRoot);
+            if (await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
+                await restoreQuarantinedPrivateDirectory(quarantine, lockPath, leasesRoot).catch(() => undefined);
+                return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
+            }
+            await create();
+        }
+        finally {
+            await removeGitLifecyclePrivateDirectory(quarantine, leasesRoot, async (renamed) => await privateOwnerFingerprint(renamed) === ownerFingerprint).catch(() => undefined);
+        }
+        return { ok: true, owner, path: lockPath };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reasonCode: isNodeError(error, 'EEXIST') || isNodeError(error, 'ENOENT')
+                ? 'git-lifecycle-integration-backpressure'
+                : 'git-lifecycle-integration-lock-failed',
+        };
+    }
+}
+export async function verifyGitLifecyclePhysicalIntegrationLock(path, expected) {
+    const current = await readPhysicalIntegrationOwner(path);
+    return Boolean(current && samePhysicalIntegrationOwnerExact(current, expected)
+        && Date.parse(current.expiresAt) > Date.now());
+}
+export async function releaseGitLifecyclePhysicalIntegrationLock(path, expected) {
+    try {
+        const parent = dirname(path);
+        await assertGitLifecyclePrivateDirectory(path, parent);
+        const current = await readPhysicalIntegrationOwner(path);
+        if (!current || !samePhysicalIntegrationOwnerExact(current, expected))
+            return false;
+        const ownerFingerprint = await privateOwnerFingerprint(path);
+        if (!ownerFingerprint)
+            return false;
+        const quarantine = `${path}.release.${process.pid}.${Date.now()}`;
+        await anchoredRenameDirectory(parent, basename(path), basename(quarantine));
+        await assertGitLifecyclePrivateDirectory(quarantine, parent);
+        const renamedOwner = await readPhysicalIntegrationOwner(quarantine);
+        if (!renamedOwner || !samePhysicalIntegrationOwnerExact(renamedOwner, expected)
+            || await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
+            await restoreQuarantinedPrivateDirectory(quarantine, path, parent).catch(() => undefined);
+            return false;
+        }
+        return removeGitLifecyclePrivateDirectory(quarantine, parent, async (renamed) => await privateOwnerFingerprint(renamed) === ownerFingerprint);
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return false;
+        throw error;
+    }
+}
+export function computeGitLifecyclePhysicalIntegrationLockOwnerDigest(owner) {
+    return createHash('sha256').update([
+        'git-lifecycle-physical-owner-v1', owner.kind, owner.storyId, owner.sessionId,
+        owner.idempotencyKey, String(owner.pid), owner.createdAt, owner.expiresAt,
+        owner.persistent ? 'persistent' : 'ephemeral', owner.ownerNonce,
+    ].join('\0')).digest('hex');
+}
+/** Recover only the exact persistent lock whose digest was bound to a checkpoint. */
+export async function releaseGitLifecyclePhysicalIntegrationLockForCheckpoint(projectRoot, input) {
+    if (!isCanonicalLifecycleId(input.storyId) || !safeToken(input.idempotencyKey) || !isHash(input.ownerDigest)) {
+        return 'foreign';
+    }
+    const runtimeDirectory = await gitLifecycleRuntimeDirectory(projectRoot);
+    const leasesRoot = join(runtimeDirectory, 'leases');
+    const lockPath = join(leasesRoot, 'integration');
+    if (!existsSync(lockPath))
+        return 'absent';
+    try {
+        await assertGitLifecyclePrivateDirectory(leasesRoot, runtimeDirectory);
+        await assertGitLifecyclePrivateDirectory(lockPath, leasesRoot);
+        const current = await readPhysicalIntegrationOwner(lockPath);
+        if (!current || current.kind !== 'direct' || current.storyId !== input.storyId
+            || current.sessionId !== input.idempotencyKey || current.idempotencyKey !== input.idempotencyKey
+            || current.persistent !== true
+            || computeGitLifecyclePhysicalIntegrationLockOwnerDigest(current) !== input.ownerDigest)
+            return 'foreign';
+        return await releaseGitLifecyclePhysicalIntegrationLock(lockPath, current) ? 'released' : 'foreign';
+    }
+    catch {
+        return 'foreign';
+    }
+}
+async function readPhysicalIntegrationOwner(path) {
+    try {
+        await assertGitLifecyclePrivateDirectory(path, dirname(path));
+        const ownerPath = join(path, 'owner.json');
+        await assertSafePrivateFile(ownerPath, path);
+        const item = JSON.parse(await readFile(ownerPath, 'utf8'));
+        if (item.schemaVersion !== 1 || (item.kind !== 'direct' && item.kind !== 'continuous')
+            || !isCanonicalLifecycleId(item.storyId) || !safeToken(item.sessionId) || !safeToken(item.idempotencyKey)
+            || !Number.isSafeInteger(item.pid) || Number(item.pid) <= 0 || !isIso(item.createdAt) || !isIso(item.expiresAt)
+            || typeof item.persistent !== 'boolean' || typeof item.ownerNonce !== 'string'
+            || !/^[a-f0-9]{32}$/.test(item.ownerNonce))
+            return undefined;
+        return item;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function readLegacyPhysicalIntegrationOwnerPid(path) {
+    try {
+        await assertGitLifecyclePrivateDirectory(path, dirname(path));
+        const ownerPath = join(path, 'owner.json');
+        await assertSafePrivateFile(ownerPath, path);
+        const item = JSON.parse(await readFile(ownerPath, 'utf8'));
+        return Number.isSafeInteger(item.pid) && Number(item.pid) > 0 ? Number(item.pid) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function samePhysicalIntegrationOwner(left, right) {
+    return left.kind === right.kind && left.storyId === right.storyId
+        && left.sessionId === right.sessionId && left.idempotencyKey === right.idempotencyKey
+        && left.expiresAt === right.expiresAt && left.persistent === right.persistent;
+}
+function samePhysicalIntegrationOwnerExact(left, right) {
+    return samePhysicalIntegrationOwner(left, right)
+        && left.schemaVersion === right.schemaVersion && left.pid === right.pid && left.createdAt === right.createdAt
+        && left.ownerNonce === right.ownerNonce;
+}
+async function gitCommonDir(projectRoot) {
+    const canonicalRoot = await realpath(projectRoot);
+    const result = await execFileAsync('git', ['rev-parse', '--git-common-dir'], {
+        cwd: canonicalRoot,
+        encoding: 'utf8',
+        maxBuffer: 1024 * 1024,
+    });
+    const commonDir = result.stdout.trim();
+    const resolvedCommonDir = isAbsolute(commonDir) ? resolve(commonDir) : resolve(canonicalRoot, commonDir);
+    const canonicalCommonDir = await realpath(resolvedCommonDir);
+    if (canonicalCommonDir !== resolvedCommonDir)
+        throw new Error('git-lifecycle-common-dir-symlink');
+    await assertCommonDirectoryEntry(canonicalCommonDir);
+    const revalidated = await execFileAsync('git', ['rev-parse', '--git-common-dir'], {
+        cwd: canonicalRoot,
+        encoding: 'utf8',
+        maxBuffer: 1024 * 1024,
+    });
+    const secondRaw = revalidated.stdout.trim();
+    const second = isAbsolute(secondRaw) ? resolve(secondRaw) : resolve(canonicalRoot, secondRaw);
+    if (second !== resolvedCommonDir)
+        throw new Error('git-lifecycle-common-dir-raced');
+    return canonicalCommonDir;
+}
+async function ensureRuntimeDirectory(commonDir) {
+    const runtimeDirectory = join(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
+    if (!existsSync(runtimeDirectory)) {
+        await anchoredEnsureDirectory(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
+    }
+    await assertSafeFilesystemEntry(runtimeDirectory, 'directory');
+    if (await realpath(runtimeDirectory) !== runtimeDirectory)
+        throw new Error('git-lifecycle-runtime-directory-symlink');
+    return runtimeDirectory;
+}
+async function readDocument(path, options = {}) {
+    try {
+        await assertSafeFilesystemEntry(path, 'file');
+        return validateDocument(JSON.parse(await readFile(path, 'utf8')));
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT')) {
+            if (options.required)
+                throw new Error('git-lifecycle-runtime-missing');
+            return emptyDocument();
+        }
+        throw error;
+    }
+}
+async function assertStoreDestinationSafe(path) {
+    try {
+        await assertSafeFilesystemEntry(path, 'file');
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return;
+        throw error;
+    }
+}
+async function assertSafeFilesystemEntry(path, kind) {
+    const info = await lstat(path);
+    if (info.isSymbolicLink())
+        throw new Error(`git-lifecycle-${kind}-symlink`);
+    if (kind === 'file' ? !info.isFile() : !info.isDirectory())
+        throw new Error(`git-lifecycle-${kind}-invalid`);
+    if (posixSecurityAvailable() && info.uid !== process.getuid())
+        throw new Error(`git-lifecycle-${kind}-ownership-mismatch`);
+    if (posixSecurityAvailable() && (info.mode & 0o077) !== 0)
+        throw new Error(`git-lifecycle-${kind}-permissions-unsafe`);
+}
+function assertDirectChild(parent, child) {
+    const normalizedParent = resolve(parent);
+    const normalizedChild = resolve(child);
+    const childRelative = relative(normalizedParent, normalizedChild);
+    if (!childRelative || childRelative.startsWith('..') || isAbsolute(childRelative)
+        || dirname(normalizedChild) !== normalizedParent) {
+        throw new Error('git-lifecycle-private-path-escape');
+    }
+}
+async function assertPrivateDirectory(path, expectedParent) {
+    const normalized = resolve(path);
+    if (expectedParent)
+        assertDirectChild(resolve(expectedParent), normalized);
+    await assertSafeFilesystemEntry(normalized, 'directory');
+    if (resolve(await realpath(normalized)) !== normalized)
+        throw new Error('git-lifecycle-directory-substituted');
+    if (expectedParent) {
+        const parent = resolve(expectedParent);
+        await assertSafeFilesystemEntry(parent, 'directory');
+        if (resolve(await realpath(parent)) !== parent)
+            throw new Error('git-lifecycle-directory-parent-substituted');
+    }
+}
+async function assertSafePrivateFile(path, expectedParent) {
+    const normalized = resolve(path);
+    assertDirectChild(resolve(expectedParent), normalized);
+    await assertPrivateDirectory(resolve(expectedParent));
+    await assertSafeFilesystemEntry(normalized, 'file');
+    if (resolve(await realpath(normalized)) !== normalized)
+        throw new Error('git-lifecycle-file-substituted');
+}
+function assertSafeFilesystemEntrySync(path, kind) {
+    const info = lstatSync(path);
+    if (info.isSymbolicLink())
+        throw new Error(`git-lifecycle-${kind}-symlink`);
+    if (kind === 'file' ? !info.isFile() : !info.isDirectory())
+        throw new Error(`git-lifecycle-${kind}-invalid`);
+    if (posixSecurityAvailable() && info.uid !== process.getuid())
+        throw new Error(`git-lifecycle-${kind}-ownership-mismatch`);
+    if (posixSecurityAvailable() && (info.mode & 0o077) !== 0)
+        throw new Error(`git-lifecycle-${kind}-permissions-unsafe`);
+}
+async function assertCommonDirectoryEntry(path) {
+    const info = await lstat(path);
+    if (info.isSymbolicLink())
+        throw new Error('git-lifecycle-common-dir-symlink');
+    if (!info.isDirectory())
+        throw new Error('git-lifecycle-common-dir-invalid');
+}
+function assertCommonDirectoryEntrySync(path) {
+    const info = lstatSync(path);
+    if (info.isSymbolicLink())
+        throw new Error('git-lifecycle-common-dir-symlink');
+    if (!info.isDirectory())
+        throw new Error('git-lifecycle-common-dir-invalid');
+}
+export function posixSecurityAvailable(platform = process.platform) {
+    return platform !== 'win32' && typeof process.getuid === 'function';
+}
+function validateDocument(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('git-lifecycle-runtime-invalid');
+    const record = value;
+    const schemaVersion = record.schemaVersion;
+    assertExactKeys(record, schemaVersion === 2
+        ? ['schemaVersion', 'revision', 'epics', 'stories', 'operational']
+        : ['schemaVersion', 'revision', 'epics', 'stories'], 'git-lifecycle-runtime-unknown-field');
+    const epics = asRecord(record.epics);
+    const stories = asRecord(record.stories);
+    if ((schemaVersion !== 1 && schemaVersion !== 2)
+        || !Number.isSafeInteger(record.revision) || Number(record.revision) < 0
+        || !epics || !stories
+        || Object.values(epics).some((entry) => !asRecord(entry))
+        || Object.values(stories).some((entry) => !asRecord(entry))
+        || (schemaVersion === 2 && !validateOperationalEnvelope(record.operational))) {
+        throw new Error('git-lifecycle-runtime-invalid');
+    }
+    for (const [epicId, overlay] of Object.entries(epics)) {
+        if (!isCanonicalLifecycleId(epicId) || !validateEpicOverlay(overlay)) {
+            throw new Error('git-lifecycle-runtime-epic-invalid');
+        }
+    }
+    for (const [storyId, overlay] of Object.entries(stories)) {
+        if (!isCanonicalLifecycleId(storyId) || !storyId.includes('.') || !validateStoryOverlay(overlay, storyId)) {
+            throw new Error('git-lifecycle-runtime-story-invalid');
+        }
+    }
+    return record;
+}
+/**
+ * Keep the physical store closed even before a domain consumer reads v2. The
+ * domain module validates every nested field; this boundary additionally
+ * rejects future/private top-level fields and unbounded collections so a
+ * malformed document can never be treated as a legacy v1 fallback.
+ */
+function validateOperationalEnvelope(value) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'repositoryFingerprint', 'writerEpoch', 'capabilities',
+        'identities', 'yoloop', 'projectionBindings', 'activeJournal',
+        'backfillReceipts', 'reconciliationReceipts', 'rollbackReceipts',
+    ], 'git-lifecycle-runtime-operational-unknown-field');
+    const identities = asRecord(item.identities);
+    const yoloop = asRecord(item.yoloop);
+    const bindings = asRecord(item.projectionBindings);
+    return item.schemaVersion === 'EpicOperationalState/1.0'
+        && isHash(item.repositoryFingerprint)
+        && Number.isSafeInteger(item.writerEpoch) && Number(item.writerEpoch) >= 1
+        && Array.isArray(item.capabilities) && item.capabilities.length <= 16
+        && item.capabilities.every((capability) => safeToken(capability))
+        && Boolean(identities) && Object.keys(identities).length <= 2_048
+        && Boolean(yoloop) && yoloop.schemaVersion === 'CommonYoloopAuthority/1.0'
+        && Boolean(bindings)
+        && (item.activeJournal === null || Boolean(asRecord(item.activeJournal)))
+        && validateBoundedRecordArray(item.backfillReceipts, 64)
+        && validateBoundedRecordArray(item.reconciliationReceipts, 64)
+        && validateBoundedRecordArray(item.rollbackReceipts, 64);
+}
+function validateBoundedRecordArray(value, max) {
+    return Array.isArray(value) && value.length <= max && value.every((entry) => Boolean(asRecord(entry)));
+}
+const EPIC_OVERLAY_KEYS = [
+    'branch_mode', 'execution_branch', 'origin_branch', 'branch_lease', 'origin_binding',
+    'graph_revision', 'aggregate_qa_receipt', 'terminal_git_receipt', 'physicalMergeStatus',
+    'pr_number', 'git_reconciliation_receipts', 'git_reconciliation_debt',
+];
+const STORY_OVERLAY_KEYS = ['checkpoint', 'status', 'last_step', 'steps_completed'];
+function validateEpicOverlay(value) {
+    assertExactKeys(value, EPIC_OVERLAY_KEYS, 'git-lifecycle-runtime-epic-unknown-field');
+    return (value.branch_mode === undefined || value.branch_mode === 'epic')
+        && (value.execution_branch === undefined || safeGitRef(value.execution_branch))
+        && (value.origin_branch === undefined || safeGitRef(value.origin_branch))
+        && (value.branch_lease === undefined || value.branch_lease === null || validateLease(value.branch_lease))
+        && (value.origin_binding === undefined || value.origin_binding === null || validateOriginBinding(value.origin_binding))
+        && (value.graph_revision === undefined || isHash(value.graph_revision))
+        && (value.aggregate_qa_receipt === undefined || value.aggregate_qa_receipt === null || validateAggregateQa(value.aggregate_qa_receipt))
+        && (value.terminal_git_receipt === undefined || value.terminal_git_receipt === null || validateTerminalReceipt(value.terminal_git_receipt))
+        && (value.physicalMergeStatus === undefined || ['merged', 'pushed', 'denied_external_gate', 'blocked_local_or_repo', 'not_attempted'].includes(String(value.physicalMergeStatus)))
+        && (value.pr_number === undefined || value.pr_number === null || Number.isSafeInteger(value.pr_number) && Number(value.pr_number) > 0)
+        && (value.git_reconciliation_receipts === undefined || validateReconciliationReceipts(value.git_reconciliation_receipts))
+        && (value.git_reconciliation_debt === undefined || validateReconciliationDebt(value.git_reconciliation_debt));
+}
+function validateStoryOverlay(value, storyId) {
+    assertExactKeys(value, STORY_OVERLAY_KEYS, 'git-lifecycle-runtime-story-unknown-field');
+    return (value.checkpoint === undefined || value.checkpoint === null || validateCheckpoint(value.checkpoint, storyId))
+        && (value.status === undefined || safeToken(value.status))
+        && (value.last_step === undefined || value.last_step === null || safeToken(value.last_step))
+        && (value.steps_completed === undefined || safeStringArray(value.steps_completed, 128));
+}
+function validateLease(value) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'ownerStoryId', 'sessionId', 'idempotencyKey', 'acquiredAt', 'expiresAt',
+        'handoffGrant', 'handoffConsumption', 'setupHeadSha',
+    ], 'git-lifecycle-runtime-lease-unknown-field');
+    return item.schemaVersion === 1 && isCanonicalLifecycleId(item.ownerStoryId)
+        && safeToken(item.sessionId) && safeToken(item.idempotencyKey)
+        && isIso(item.acquiredAt) && isIso(item.expiresAt)
+        && Date.parse(String(item.expiresAt)) > Date.parse(String(item.acquiredAt))
+        && (item.setupHeadSha === undefined || isSha(item.setupHeadSha))
+        && (item.handoffGrant === undefined || validateDirectYoloSetupHandoffGrant(item.handoffGrant, item))
+        && (item.handoffConsumption === undefined || validateDirectYoloSetupHandoffConsumption(item.handoffConsumption, item));
+}
+function validateDirectYoloSetupHandoffGrant(value, lease) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'kind', 'storyId', 'fromSessionId', 'tokenDigest',
+        'bundleDigest', 'claimRevision', 'expiresAt',
+    ], 'git-lifecycle-runtime-handoff-grant-unknown-field');
+    return item.schemaVersion === 1 && item.kind === 'direct-yolo-setup-handoff'
+        && item.storyId === lease.ownerStoryId && item.fromSessionId === lease.sessionId
+        && isHash(item.tokenDigest) && isHash(item.bundleDigest) && isHash(item.claimRevision)
+        && isIso(item.expiresAt)
+        && Date.parse(String(item.expiresAt)) <= Date.parse(String(lease.expiresAt));
+}
+function validateDirectYoloSetupHandoffConsumption(value, lease) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'tokenDigest',
+        'bundleDigest', 'claimRevision', 'consumedBySessionId', 'consumedAt',
+    ], 'git-lifecycle-runtime-handoff-consumption-unknown-field');
+    return item.schemaVersion === 1 && item.kind === 'direct-yolo-setup-handoff-consumption'
+        && item.state === 'consumed' && item.storyId === lease.ownerStoryId
+        && safeToken(item.fromSessionId) && isHash(item.tokenDigest)
+        && isHash(item.bundleDigest) && isHash(item.claimRevision)
+        && item.consumedBySessionId === lease.sessionId && isIso(item.consumedAt);
+}
+function validateOriginBinding(value) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, ['schemaVersion', 'originBranch', 'originHeadSha', 'executionBranch', 'capturedFromCurrentCheckout', 'capturedAt'], 'git-lifecycle-runtime-origin-unknown-field');
+    return item.schemaVersion === 1 && safeGitRef(item.originBranch) && safeGitRef(item.executionBranch)
+        && item.originBranch !== item.executionBranch && isSha(item.originHeadSha)
+        && item.capturedFromCurrentCheckout === true && isIso(item.capturedAt);
+}
+function validateAggregateQa(value) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'evidenceVersion', 'producer', 'contract', 'command', 'verdict',
+        'executionHeadSha', 'graphRevision', 'manifestDigest', 'resultDigest', 'checkedAt', 'receiptRef', 'gateIds',
+    ], 'git-lifecycle-runtime-aggregate-qa-unknown-field');
+    const executionV2 = item.evidenceVersion === 'p205-execution-v2'
+        && item.producer === 'local-yolo-tdd' && item.contract === 'P205-CI-02'
+        && item.command === P205_COMPLETE_COMMAND && isHash(item.manifestDigest) && isHash(item.resultDigest);
+    const legacy = item.evidenceVersion === undefined && item.producer === undefined && item.contract === undefined
+        && item.command === undefined && item.manifestDigest === undefined && item.resultDigest === undefined;
+    return item.schemaVersion === 1 && (executionV2 || legacy) && item.verdict === 'passed' && isSha(item.executionHeadSha)
+        && isHash(item.graphRevision) && isIso(item.checkedAt) && safeReceiptRef(item.receiptRef)
+        && safeStringArray(item.gateIds, 128, true);
+}
+function validateTerminalReceipt(value) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'epicId', 'executionBranch', 'originBranch', 'baseSha', 'executionHeadSha',
+        'mergeSha', 'pushedSha', 'strategy', 'prNumber', 'physicalStatus', 'localGateReceiptRefs',
+        'idempotencyKey', 'attemptStartedAt', 'completedAt', 'retryEligible', 'reasonCodes', 'publicSafe', 'candidateQa',
+        'providerGuard',
+    ], 'git-lifecycle-runtime-terminal-receipt-unknown-field');
+    return item.schemaVersion === 1 && isCanonicalLifecycleId(item.epicId)
+        && safeGitRef(item.executionBranch) && safeGitRef(item.originBranch) && isSha(item.baseSha) && isSha(item.executionHeadSha)
+        && (item.mergeSha === undefined || isSha(item.mergeSha)) && (item.pushedSha === undefined || isSha(item.pushedSha))
+        && (item.strategy === 'direct' || item.strategy === 'single_pr')
+        && (item.candidateQa === undefined || validateMergeCandidateQaReceipt(item.candidateQa, item))
+        && (item.providerGuard === undefined || validateProviderGuardReceipt(item.providerGuard, item))
+        && (item.prNumber === undefined || Number.isSafeInteger(item.prNumber) && Number(item.prNumber) > 0)
+        && ['prepared', 'merged', 'pushed', 'denied_external_gate', 'blocked_local_or_repo'].includes(String(item.physicalStatus))
+        && safeStringArray(item.localGateReceiptRefs, 128, true) && safeToken(item.idempotencyKey)
+        && isIso(item.attemptStartedAt) && (item.completedAt === undefined || isIso(item.completedAt))
+        && typeof item.retryEligible === 'boolean' && safeStringArray(item.reasonCodes, 128)
+        && item.publicSafe === true;
+}
+function validateProviderGuardReceipt(value, terminal) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'provider', 'mode', 'source', 'prHeadSha', 'originHeadSha', 'checkedAt', 'publicSafe',
+    ], 'git-lifecycle-runtime-provider-guard-unknown-field');
+    const modeSourceValid = item.mode === 'recovered_exact_tree'
+        ? item.source === 'physical_recovery'
+        : item.mode === 'strict_up_to_date_expected_head'
+            && ['branch_protection', 'ruleset', 'branch_protection_and_ruleset'].includes(String(item.source));
+    return item.schemaVersion === 1 && item.provider === 'github' && modeSourceValid
+        && terminal.strategy === 'single_pr' && terminal.physicalStatus === 'pushed'
+        && Number.isSafeInteger(terminal.prNumber) && Number(terminal.prNumber) > 0
+        && isSha(item.prHeadSha) && item.prHeadSha === terminal.mergeSha
+        && isSha(item.originHeadSha) && item.originHeadSha === terminal.baseSha
+        && isIso(item.checkedAt) && item.publicSafe === true;
+}
+function validateMergeCandidateQaReceipt(value, terminal) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, ['schemaVersion', 'kind', 'contract', 'command', 'originHeadSha', 'executionHeadSha',
+        'mergeSha', 'treeSha', 'graphRevision', 'manifestDigest', 'resultDigest', 'gateIds', 'checkedAt', 'receiptRef'], 'git-lifecycle-runtime-merge-candidate-unknown-field');
+    return item.schemaVersion === 1 && item.kind === 'epic_merge_candidate_qa'
+        && item.contract === 'P205-CI-02' && item.command === P205_COMPLETE_COMMAND
+        && isSha(item.originHeadSha) && item.originHeadSha === terminal.baseSha
+        && isSha(item.executionHeadSha) && item.executionHeadSha === terminal.executionHeadSha
+        && isSha(item.mergeSha) && item.mergeSha === terminal.mergeSha
+        && isSha(item.treeSha) && isHash(item.graphRevision) && isHash(item.manifestDigest) && isHash(item.resultDigest)
+        && safeStringArray(item.gateIds, 128, true) && isIso(item.checkedAt) && safeReceiptRef(item.receiptRef);
+}
+function validateCheckpoint(value, storyId) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'storyId', 'epicId', 'branch', 'baseSha', 'headSha', 'commits', 'idempotencyKey',
+        'dispatchId', 'bundleId', 'bundleDigest', 'graphRevision', 'claimRevision', 'receiptRefs',
+        'qaVerdict', 'reviewVerdict', 'qaReceipt', 'reviewReceipt', 'reviewReconciliation', 'recordedAt', 'rootMemoryEffect',
+    ], 'git-lifecycle-runtime-checkpoint-unknown-field');
+    const epicId = String(storyId).split('.')[0];
+    return item.schemaVersion === 1 && item.storyId === storyId && item.epicId === epicId
+        && safeGitRef(item.branch) && isSha(item.baseSha) && isSha(item.headSha) && item.baseSha !== item.headSha
+        && safeShaArray(item.commits) && item.commits.length === 1 && item.commits[0] === item.headSha
+        && safeToken(item.idempotencyKey) && (item.dispatchId === undefined || isHash(item.dispatchId))
+        && (item.bundleId === undefined || isHash(item.bundleId)) && isHash(item.bundleDigest)
+        && isHash(item.graphRevision) && (item.claimRevision === undefined || isHash(item.claimRevision))
+        && (item.rootMemoryEffect === undefined || isRootProjectMemoryEffect(item.rootMemoryEffect)
+            && item.rootMemoryEffect.storyId === storyId && item.rootMemoryEffect.executionBranch === item.branch
+            && item.rootMemoryEffect.sourceHeadSha === item.baseSha && item.rootMemoryEffect.childClaimRevision === item.claimRevision)
+        && safeStringArray(item.receiptRefs, 256, true)
+        && (item.qaVerdict === 'passed' || item.qaVerdict === 'blocked')
+        && ['approved', 'changes-requested', 'pending'].includes(String(item.reviewVerdict))
+        && validateStoryQaReceipt(item.qaReceipt, item)
+        && (item.reviewVerdict === 'pending' ? item.reviewReceipt === undefined : validateStoryReviewReceipt(item.reviewReceipt, item))
+        && (item.reviewReconciliation === undefined || validateHistoricalReviewReconciliation(item.reviewReconciliation, item))
+        && isIso(item.recordedAt);
+}
+function validateHistoricalReviewReconciliation(value, checkpoint) {
+    const item = asRecord(value);
+    const qa = asRecord(checkpoint.qaReceipt);
+    const review = asRecord(checkpoint.reviewReceipt);
+    if (!item || !qa || !review)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'kind', 'storyId', 'epicId', 'checkpointHeadSha', 'approvalCommitSha',
+        'approvalArtifactDigest', 'qaReceiptRef', 'reviewReceiptRef', 'sourceEvidenceDigest', 'reviewedAt', 'receiptRef',
+    ], 'git-lifecycle-runtime-review-reconciliation-unknown-field');
+    return item.schemaVersion === 1 && item.kind === 'historical_review_reconciliation'
+        && item.storyId === checkpoint.storyId && item.epicId === checkpoint.epicId
+        && item.checkpointHeadSha === checkpoint.headSha && isSha(item.approvalCommitSha)
+        && isHash(item.approvalArtifactDigest) && item.qaReceiptRef === qa.receiptRef
+        && item.reviewReceiptRef === review.receiptRef && isHash(item.sourceEvidenceDigest)
+        && isIso(item.reviewedAt) && Date.parse(String(item.reviewedAt)) >= Date.parse(String(qa.checkedAt))
+        && safeReceiptRef(item.receiptRef)
+        && Array.isArray(checkpoint.receiptRefs) && checkpoint.receiptRefs.includes(item.receiptRef);
+}
+function validateStoryQaReceipt(value, checkpoint) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'kind', 'producer', 'evidenceVersion', 'storyId', 'epicId', 'baseSha', 'headSha', 'bundleDigest',
+        'graphRevision', 'contract', 'command', 'manifestDigest', 'gateIds', 'resultDigest',
+        'sourceEvidenceDigest', 'verdict', 'checkedAt', 'receiptRef',
+    ], 'git-lifecycle-runtime-story-qa-unknown-field');
+    return item.schemaVersion === 1 && item.kind === 'story_qa_evidence' && item.producer === 'local-yolo-tdd'
+        && (item.evidenceVersion === undefined || item.evidenceVersion === 'git-immutable-v1'
+            || item.evidenceVersion === 'p205-execution-v2' && item.contract === 'P205-CI-02'
+                && item.command === P205_COMPLETE_COMMAND && isHash(item.manifestDigest)
+                && safeStringArray(item.gateIds, 32, true) && isHash(item.resultDigest))
+        && evidenceBindingMatches(item, checkpoint) && isHash(item.sourceEvidenceDigest)
+        && item.verdict === checkpoint.qaVerdict && (item.verdict === 'passed' || item.verdict === 'blocked')
+        && isIso(item.checkedAt) && safeReceiptRef(item.receiptRef)
+        && checkpoint.receiptRefs.includes(item.receiptRef);
+}
+function validateStoryReviewReceipt(value, checkpoint) {
+    const item = asRecord(value);
+    const qa = asRecord(checkpoint.qaReceipt);
+    if (!item || !qa)
+        return false;
+    assertExactKeys(item, [
+        'schemaVersion', 'kind', 'producer', 'storyId', 'epicId', 'baseSha', 'headSha', 'bundleDigest',
+        'graphRevision', 'sourceEvidenceDigest', 'reviewArtifactDigest', 'qaReceiptRef', 'verdict', 'reviewedAt', 'receiptRef',
+    ], 'git-lifecycle-runtime-story-review-unknown-field');
+    return item.schemaVersion === 1 && item.kind === 'story_review_evidence' && item.producer === 'root-commit-range-review'
+        && evidenceBindingMatches(item, checkpoint) && isHash(item.sourceEvidenceDigest)
+        && (item.reviewArtifactDigest === undefined || isHash(item.reviewArtifactDigest))
+        && item.qaReceiptRef === qa.receiptRef && item.receiptRef !== qa.receiptRef
+        && (item.verdict === 'approved' || item.verdict === 'changes-requested')
+        && (item.verdict === 'approved' ? checkpoint.reviewVerdict === 'approved' : checkpoint.reviewVerdict === 'changes-requested')
+        && isIso(item.reviewedAt) && Date.parse(String(item.reviewedAt)) >= Date.parse(String(qa.checkedAt))
+        && safeReceiptRef(item.receiptRef) && checkpoint.receiptRefs.includes(item.receiptRef);
+}
+function evidenceBindingMatches(item, checkpoint) {
+    return ['storyId', 'epicId', 'baseSha', 'headSha', 'bundleDigest', 'graphRevision']
+        .every((key) => item[key] === checkpoint[key]);
+}
+function validateReconciliationReceipts(value) {
+    if (!Array.isArray(value) || value.length > 1024)
+        return false;
+    return value.every((entry) => {
+        const item = asRecord(entry);
+        if (!item)
+            return false;
+        assertExactKeys(item, ['schemaVersion', 'resourceId', 'action', 'outcome', 'idempotencyKey', 'reasonCodes', 'recordedAt', 'publicSafe'], 'git-lifecycle-runtime-reconciliation-receipt-unknown-field');
+        return item.schemaVersion === 1 && safeToken(item.resourceId)
+            && ['no_op', 'delete_local_branch', 'delete_remote_branch', 'close_pull_request'].includes(String(item.action))
+            && ['applied', 'already_absent', 'dry_run', 'failed'].includes(String(item.outcome))
+            && safeToken(item.idempotencyKey) && safeStringArray(item.reasonCodes, 128) && isIso(item.recordedAt) && item.publicSafe === true;
+    });
+}
+function validateReconciliationDebt(value) {
+    if (!Array.isArray(value) || value.length > 1024)
+        return false;
+    return value.every((entry) => {
+        const item = asRecord(entry);
+        if (!item)
+            return false;
+        assertExactKeys(item, ['schemaVersion', 'resourceId', 'action', 'managed', 'reasonCodes', 'evidence', 'publicSafe'], 'git-lifecycle-runtime-reconciliation-debt-unknown-field');
+        return item.schemaVersion === 1 && safeToken(item.resourceId) && item.action === 'preserve'
+            && typeof item.managed === 'boolean' && safeStringArray(item.reasonCodes, 128)
+            && safeStringArray(item.evidence, 16) && item.publicSafe === true;
+    });
+}
+function assertExactKeys(record, allowed, reasonCode) {
+    const allow = new Set(allowed);
+    if (Object.keys(record).some((key) => !allow.has(key)))
+        throw new Error(reasonCode);
+}
+function isCanonicalLifecycleId(value) {
+    return typeof value === 'string' && /^P[1-9][0-9]*(?:\.[0-9]+)*$/.test(value);
+}
+function isGitLifecycleGraphAuthority(value) {
+    const item = asRecord(value);
+    if (!item)
+        return false;
+    return Object.keys(item).length === 10
+        && item.schemaVersion === 1
+        && item.kind === 'git_lifecycle_graph_authority'
+        && item.producer === 'server-continuous-yoloop-v1'
+        && (item.source === 'yolo' || item.source === 'yoloop')
+        && isCanonicalLifecycleId(item.epicId)
+        && isCanonicalLifecycleId(item.storyId)
+        && String(item.storyId).startsWith(`${String(item.epicId)}.`)
+        && safeGitRef(item.executionBranch)
+        && safeGitRef(item.originBranch)
+        && item.originBranch !== item.executionBranch
+        && typeof item.graphRevision === 'string'
+        && /^[a-f0-9]{64}$/.test(item.graphRevision)
+        && item.publicSafe === true;
+}
+function safeGitRef(value) {
+    return typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._/-]{0,239}$/.test(value)
+        && !value.includes('..') && !value.includes('//') && !value.includes('@{')
+        && !value.endsWith('/') && !value.endsWith('.') && !value.split('/').some((part) => !part || part.startsWith('.') || part.endsWith('.lock'));
+}
+function safeRepositoryPath(value) {
+    return value.length > 0 && value.length <= 1024 && !isAbsolute(value)
+        && !value.includes('\0') && !value.replaceAll('\\', '/').split('/').includes('..');
+}
+function safeToken(value) {
+    return typeof value === 'string' && value.length > 0 && value.length <= 240 && /^[A-Za-z0-9._:/#\-[\]]+$/.test(value) && !value.includes('..');
+}
+function safeReceiptRef(value) {
+    return safeToken(value);
+}
+function isSha(value) {
+    return typeof value === 'string' && /^[a-f0-9]{40,64}$/i.test(value);
+}
+function isHash(value) {
+    return typeof value === 'string' && /^[a-f0-9]{64}$/i.test(value);
+}
+function isIso(value) {
+    return typeof value === 'string' && value.length <= 64 && Number.isFinite(Date.parse(value));
+}
+function safeStringArray(value, max, nonEmpty = false) {
+    return Array.isArray(value) && value.length <= max && (!nonEmpty || value.length > 0) && value.every(safeToken);
+}
+function safeShaArray(value) {
+    return Array.isArray(value) && value.length > 0 && value.length <= 256 && value.every(isSha);
+}
+function emptyDocument() {
+    return { schemaVersion: 1, revision: 0, epics: {}, stories: {} };
+}
+async function acquireLock(lockPath) {
+    const parent = dirname(lockPath);
+    const requested = { pid: process.pid, nonce: randomBytes(16).toString('hex') };
+    const create = async () => {
+        await assertPrivateDirectory(parent);
+        await anchoredCreateOwnedDirectory(parent, basename(lockPath), JSON.stringify(requested));
+        try {
+            await assertGitLifecyclePrivateDirectory(lockPath, parent);
+            await assertSafePrivateFile(join(lockPath, 'owner.json'), lockPath);
+        }
+        catch (error) {
+            await removeGitLifecyclePrivateDirectory(lockPath, parent).catch(() => undefined);
+            throw error;
+        }
+    };
+    try {
+        await create();
+    }
+    catch (error) {
+        if (!isNodeError(error, 'EEXIST'))
+            throw error;
+        await assertSafeFilesystemEntry(lockPath, 'directory');
+        const owner = await readOwner(lockPath);
+        if (owner !== undefined && processExists(owner.pid))
+            throw new Error('git-lifecycle-runtime-lock-active');
+        if (owner === undefined && await recentlyCreated(lockPath))
+            throw new Error('git-lifecycle-runtime-lock-active');
+        const ownerFingerprint = await privateOwnerFingerprint(lockPath);
+        if (!ownerFingerprint)
+            throw new Error('git-lifecycle-runtime-lock-owner-invalid');
+        const quarantine = `${lockPath}.stale.${process.pid}.${Date.now()}`;
+        await anchoredRenameDirectory(parent, basename(lockPath), basename(quarantine));
+        try {
+            await assertGitLifecyclePrivateDirectory(quarantine, parent);
+            if (await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
+                await restoreQuarantinedPrivateDirectory(quarantine, lockPath, parent).catch(() => undefined);
+                throw new Error('git-lifecycle-runtime-lock-owner-replaced');
+            }
+            await create();
+        }
+        finally {
+            await removeGitLifecyclePrivateDirectory(quarantine, parent, async (renamed) => await privateOwnerFingerprint(renamed) === ownerFingerprint).catch(() => undefined);
+        }
+    }
+    return requested;
+}
+async function releaseRuntimeLock(lockPath, expected) {
+    const parent = dirname(lockPath);
+    try {
+        await assertGitLifecyclePrivateDirectory(lockPath, parent);
+        const current = await readOwner(lockPath);
+        if (!current || !sameRuntimeLockOwner(current, expected))
+            return false;
+        const ownerFingerprint = await privateOwnerFingerprint(lockPath);
+        if (!ownerFingerprint)
+            return false;
+        const quarantine = `${lockPath}.release.${process.pid}.${Date.now()}`;
+        await anchoredRenameDirectory(parent, basename(lockPath), basename(quarantine));
+        await assertGitLifecyclePrivateDirectory(quarantine, parent);
+        const renamed = await readOwner(quarantine);
+        if (!renamed || !sameRuntimeLockOwner(renamed, expected)
+            || await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
+            await restoreQuarantinedPrivateDirectory(quarantine, lockPath, parent).catch(() => undefined);
+            return false;
+        }
+        return removeGitLifecyclePrivateDirectory(quarantine, parent, async (renamedPath) => await privateOwnerFingerprint(renamedPath) === ownerFingerprint);
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return false;
+        throw error;
+    }
+}
+async function recentlyCreated(path) {
+    try {
+        return Date.now() - (await stat(path)).mtimeMs < 30_000;
+    }
+    catch {
+        return true;
+    }
+}
+async function readOwner(lockPath) {
+    try {
+        await assertGitLifecyclePrivateDirectory(lockPath, dirname(lockPath));
+        const ownerPath = join(lockPath, 'owner.json');
+        await assertSafePrivateFile(ownerPath, lockPath);
+        const value = JSON.parse(await readFile(ownerPath, 'utf8'));
+        return Number.isSafeInteger(value.pid) && Number(value.pid) > 0
+            && (value.nonce === undefined || typeof value.nonce === 'string' && /^[a-f0-9]{32}$/.test(value.nonce))
+            ? { pid: Number(value.pid), ...(typeof value.nonce === 'string' ? { nonce: value.nonce } : {}) }
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function sameRuntimeLockOwner(left, right) {
+    return left.pid === right.pid && left.nonce !== undefined && left.nonce === right.nonce;
+}
+function processExists(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return isNodeError(error, 'EPERM');
+    }
+}
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+}
+function isNodeError(error, code) {
+    return error instanceof Error && 'code' in error && error.code === code;
+}