@ornexus/neocortex 4.60.72 → 4.60.73

package/packages/client/dist/private-execution/planning-generation-checkpoint.js

@@ -1,5 +1,462 @@
-import{execFileSync as lt,spawnSync as st}from"node:child_process";import{createHash as ht,randomUUID as mt}from"node:crypto";import{closeSync as U,fsyncSync as Z,lstatSync as X,mkdirSync as yt,openSync as W,readFileSync as ut,realpathSync as Y,renameSync as St,unlinkSync as it,writeFileSync as nt}from"node:fs";import{isAbsolute as It,join as N,resolve as K}from"node:path";import{isDeepStrictEqual as G}from"node:util";import{planningPendingSidecarDigest as ct,planningPhysicalPatchDigest as Dt}from"./planning-diagnosis-checkpoint.js";import{acceptedPlanningResearchPredecessor as rt}from"./planning-research-checkpoint.js";const _=/^[a-f0-9]{64}$/,ot=/^P[1-9][0-9]{0,11}$/,at=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/,pt="acd455ed0e39d98b90fb57391db75e366e4c5604db043e03a89a20e33d643c3c",dt="fa2194f89c01f07e225fd6f39e98e679f628e072239b6cd0af3ee527f0722518",gt="8636f22ec5950410902448ee1e9cb4947359ac98df518742bddbbb367468e3ae";function r(t){return t!==null&&typeof t=="object"&&!Array.isArray(t)}function l(t){return ht("sha256").update(t).digest("hex")}function V(t,e,s=128*1024){return lt("git",[...e],{cwd:t,encoding:"utf8",stdio:["ignore","pipe","ignore"],maxBuffer:s}).trim()}function q(t,e,s){const i=X(N(t,e));if(!i.isFile()||i.isSymbolicLink()||i.size<1||i.size>s)throw new Error("planning-generation-physical-artifact-invalid");return ut(N(t,e))}function J(t,e,s,i="HEAD"){const c=st("git",["show",`${i}:${e}`],{cwd:t,encoding:"buffer",maxBuffer:s});if(c.status!==0||!Buffer.isBuffer(c.stdout)||c.stdout.length<1||c.stdout.length>s)throw new Error("planning-generation-predecessor-uncommitted");return c.stdout}function v(t,e){for(const s of[".neocortex",".neocortex/planning",`.neocortex/planning/epic-${e}`,"docs","docs/epics","docs/stories"]){const i=X(N(t,s));if(!i.isDirectory()||i.isSymbolicLink()||i.uid!==process.getuid?.()||s===".neocortex"&&(i.mode&18)!==0)throw new Error("planning-generation-directory-boundary-invalid")}}function H(t,e){const i=/^---\n([\s\S]{1,8192}?)\n---\n/.exec(t.replace(/\r\n/g,`
-`))?.[1]?.split(`
-`).filter(c=>c.startsWith(`${e}:`))??[];return i.length===1?i[0].slice(e.length+1).trim().replace(/^(?:"(.*)"|'(.*)')$/,"$1$2"):void 0}function L(t,e){return typeof t=="string"&&t.length<=128&&l(t)===e}function Q(t,e){return Array.from({length:e},(s,i)=>`docs/stories/${t}.${String(i+1).padStart(2,"0")}.story.md`)}function bt(t){if(!r(t)||Object.keys(t).sort().join("|")!==["schemaVersion","verdict","claimId","epicId","diagnosisReceiptId","researchReceiptId","intakeRevision","sourceHead","sourceBranch","sourceStateSha256","admission","artifactDigests","qaEvidenceId","artifactSummary"].sort().join("|")||t.schemaVersion!=="PlanningGenerationRootReview/1"||t.verdict!=="accepted"||typeof t.claimId!="string"||!at.test(t.claimId)||typeof t.epicId!="string"||!ot.test(t.epicId)||typeof t.diagnosisReceiptId!="string"||!_.test(t.diagnosisReceiptId)||typeof t.researchReceiptId!="string"||!_.test(t.researchReceiptId)||typeof t.intakeRevision!="string"||!_.test(t.intakeRevision)||typeof t.sourceHead!="string"||!/^[a-f0-9]{40}$/.test(t.sourceHead)||typeof t.sourceBranch!="string"||!/^[a-zA-Z0-9][a-zA-Z0-9._/-]{0,127}$/.test(t.sourceBranch)||typeof t.sourceStateSha256!="string"||!_.test(t.sourceStateSha256)||!r(t.admission)||Object.keys(t.admission).sort().join("|")!==["schemaVersion","outcome","baseSha","executionBranch","changedPaths","patchSha256"].sort().join("|")||t.admission.schemaVersion!==1||t.admission.outcome!=="admitted-unverified"||t.admission.baseSha!==t.sourceHead||t.admission.executionBranch!==t.sourceBranch||typeof t.admission.patchSha256!="string"||!_.test(t.admission.patchSha256)||!r(t.artifactDigests)||Object.keys(t.artifactDigests).sort().join("|")!=="epic|index|stories"||typeof t.artifactDigests.epic!="string"||!_.test(t.artifactDigests.epic)||typeof t.artifactDigests.index!="string"||!_.test(t.artifactDigests.index)||!r(t.artifactDigests.stories)||Object.keys(t.artifactDigests.stories).length<1||Object.keys(t.artifactDigests.stories).length>24||Object.values(t.artifactDigests.stories).some(s=>typeof s!="string"||!_.test(s))||typeof t.qaEvidenceId!="string"||!/^qa-[a-z0-9-]{8,80}$/.test(t.qaEvidenceId)||typeof t.artifactSummary!="string"||t.artifactSummary.length<16||t.artifactSummary.length>2048)throw new Error("planning-generation-review-invalid");const e=Q(t.epicId,Object.keys(t.artifactDigests.stories).length);if(!G(Object.keys(t.artifactDigests.stories).sort(),[...e].sort()))throw new Error("planning-generation-review-invalid")}function Et(t){const e={schemaVersion:"PlanningGenerationPhysicalAcceptance/1",claimId:t.claimId,epicId:t.epicId,diagnosisReceiptId:t.diagnosisReceiptId,researchReceiptId:t.researchReceiptId,intakeRevision:t.intakeRevision,qaEvidenceId:t.qaEvidenceId,sourceHead:t.sourceHead,sourceStateSha256:t.sourceStateSha256,admissionPatchSha256:t.admission.patchSha256,artifactDigests:t.artifactDigests};return{...e,receiptId:l(JSON.stringify(e)),publicSafe:!0}}function tt(t,e,s,i,c){if(v(t,e.epicId),V(t,["rev-parse","HEAD"])!==e.sourceHead||V(t,["symbolic-ref","--quiet","--short","HEAD"])!==e.sourceBranch)throw new Error("planning-generation-head-conflict");const y=`.neocortex/planning/epic-${e.epicId}`,u=`docs/epics/epic-${e.epicId}.md`,o=".neocortex/planning/planning.json",h=Q(e.epicId,Object.keys(e.artifactDigests.stories).length),n={index:o,epic:u,...Object.fromEntries(h.map((m,f)=>[`story${f}`,m]))};if(!Array.isArray(e.admission.changedPaths)||!G([...e.admission.changedPaths].sort(),Object.values(n).sort())||s&&Dt(t,n,i,!0)!==e.admission.patchSha256)throw new Error("planning-generation-admission-patch-conflict");const B=q(t,o,128*1024),R=q(t,u,512*1024),S=h.map(m=>q(t,m,128*1024));if(l(B)!==e.artifactDigests.index||l(R)!==e.artifactDigests.epic||h.some((m,f)=>l(S[f])!==e.artifactDigests.stories[m]))throw new Error("planning-generation-artifact-conflict");const $=R.toString("utf8"),T=H($,"title");if(H($,"id")!==e.epicId||H($,"stories_count")!==String(h.length)||!T||T.length>200||!$.includes("## Stories"))throw new Error("planning-generation-epic-invalid");for(const[m,f]of S.entries()){const d=f.toString("utf8"),D=/^---\n([\s\S]{1,8192}?)\n---\n/.exec(d.replace(/\r\n/g,`
-`))?.[1]??"",C=H(d,"epic_id"),g=C===e.epicId&&!/^\s*epic\s*:/m.test(D)||!s&&C===void 0&&!/^\s*epic_id\s*:/m.test(D)&&H(d,"epic")===e.epicId;if(H(d,"id")!==`${e.epicId}.${String(m+1).padStart(2,"0")}`||!g||H(d,"status")!=="backlog"||!H(d,"title")||!d.includes("## Acceptance Criteria")||!/\bGiven\b[\s\S]*\bWhen\b[\s\S]*\bThen\b/.test(d))throw new Error("planning-generation-story-invalid")}const b=c??q(t,".neocortex/state.json",8*1024*1024),a=JSON.parse(b.toString("utf8"));if(!r(a)||!r(a.epics)||!r(a.stories))throw new Error("planning-generation-state-invalid");const E=rt(a,e.claimId,e.epicId);if(E.diagnosisReceiptId!==e.diagnosisReceiptId||E.researchReceiptId!==e.researchReceiptId||E.intakeRevision!==e.intakeRevision||s&&l(b)!==e.sourceStateSha256)throw new Error("planning-generation-state-conflict");const k=a.epics[e.epicId];if(!r(k)||h.some((m,f)=>Object.hasOwn(a.stories,`${e.epicId}.${String(f+1).padStart(2,"0")}`)))throw new Error("planning-generation-story-collision");const P=k.createEpicPlanningPhysical,x=k.createEpicPlanningResearchPhysical;if(!r(P)||!r(x)||!r(P.artifactDigests)||!r(x.artifactDigests))throw new Error("planning-generation-predecessor-invalid");for(const[m,f]of Object.entries({idea:`${y}/idea.json`,diagnosis:`${y}/diagnosis.md`,enrichment:`${y}/enriched-prompt.md`,research:`${y}/research.md`})){const d=m==="research"?x.artifactDigests.research:P.artifactDigests[m],D=q(t,f,m==="idea"?32*1024:256*1024);if(l(D)!==d||!D.equals(J(t,f,512*1024)))throw new Error("planning-generation-predecessor-artifact-drift")}const j=J(t,o,128*1024);if(l(j)!==x.artifactDigests.index)throw new Error("planning-generation-predecessor-index-drift");const A=JSON.parse(j.toString("utf8")),w=JSON.parse(B.toString("utf8"));if(!r(A)||!r(A.epics)||!r(w)||!r(w.epics))throw new Error("planning-generation-index-invalid");const p=A.epics[e.epicId],I=w.epics[e.epicId];if(!r(p)||p.id!==e.epicId||p.status!=="researched"||!Array.isArray(p.steps_completed)||p.steps_completed.length!==2||!L(p.steps_completed[0],pt)||!L(p.steps_completed[1],dt)||!G(p.output_files,{diagnosis:`${y}/diagnosis.md`,research:`${y}/research.md`})||!r(I)||!Array.isArray(I.steps_completed)||!L(I.steps_completed[2],gt))throw new Error("planning-generation-index-predecessor-invalid");const O={...A,last_scan:w.last_scan,epics:{...A.epics,[e.epicId]:{...p,status:"generated",steps_completed:[...p.steps_completed,I.steps_completed[2]],completed_at:I.completed_at,output_files:{...p.output_files,epic:u,stories:h}}}};if(typeof w.last_scan!="string"||!Number.isFinite(Date.parse(w.last_scan))||typeof I.completed_at!="string"||!Number.isFinite(Date.parse(I.completed_at))||!G(w,O))throw new Error("planning-generation-index-transition-invalid");return{stateRaw:b,state:a,title:T,stories:h,storyBytes:S,completedAt:I.completed_at}}function et(t,e,s){const i=t.state,c=t.stories.map(o=>o.slice(13,-9)),y=i.epics[e.epicId],u={...i.stories};for(const[o,h]of c.entries())u[h]={id:h,epic_id:e.epicId,title:H(t.storyBytes[o].toString("utf8"),"title"),status:"backlog"};return{...i,epics:{...i.epics,[e.epicId]:{...y,title:t.title,status:"generated",stories:c,total_stories:c.length,completed_stories:0,createEpicPlanningGenerationPhysical:s}},stories:u,last_updated:t.completedAt}}function kt(t,e,s){const i=()=>new Error("planning-generation-committed-evidence-invalid"),c=K(t);if(!at.test(e)||!ot.test(s)||Y(c)!==c||V(c,["rev-parse","--show-toplevel"])!==c)throw i();v(c,s);const y=V(c,["rev-parse","HEAD"]),u=q(c,".neocortex/state.json",8*1024*1024);if(!u.equals(J(c,".neocortex/state.json",8*1024*1024)))throw i();const o=JSON.parse(u.toString("utf8")),h=r(o)&&r(o.epics)?o.epics[s]:void 0,n=r(h)?h.createEpicPlanningGenerationPhysical:void 0;if(!r(n)||n.schemaVersion!=="PlanningGenerationPhysicalAcceptance/1"||n.claimId!==e||n.epicId!==s||typeof n.sourceHead!="string"||!/^[a-f0-9]{40}$/.test(n.sourceHead)||typeof n.qaEvidenceId!="string"||!/^qa-[a-z0-9-]{8,80}$/.test(n.qaEvidenceId)||["diagnosisReceiptId","researchReceiptId","intakeRevision","sourceStateSha256","admissionPatchSha256"].some(g=>typeof n[g]!="string"||!_.test(n[g]))||!r(n.artifactDigests)||Object.keys(n.artifactDigests).sort().join("|")!=="epic|index|stories"||typeof n.artifactDigests.epic!="string"||!_.test(n.artifactDigests.epic)||typeof n.artifactDigests.index!="string"||!_.test(n.artifactDigests.index)||!r(n.artifactDigests.stories))throw i();const B=Object.keys(n.artifactDigests.stories).length,R=Q(s,B);if(B<1||B>24||!G(Object.keys(n.artifactDigests.stories).sort(),[...R].sort())||Object.values(n.artifactDigests.stories).some(g=>typeof g!="string"||!_.test(g)))throw i();const S={schemaVersion:"PlanningGenerationPhysicalAcceptance/1",claimId:e,epicId:s,diagnosisReceiptId:n.diagnosisReceiptId,researchReceiptId:n.researchReceiptId,intakeRevision:n.intakeRevision,qaEvidenceId:n.qaEvidenceId,sourceHead:n.sourceHead,sourceStateSha256:n.sourceStateSha256,admissionPatchSha256:n.admissionPatchSha256,artifactDigests:n.artifactDigests},$={...S,receiptId:l(JSON.stringify(S)),publicSafe:!0};if(!G(n,$)||st("git",["merge-base","--is-ancestor",n.sourceHead,"HEAD"],{cwd:c,stdio:"ignore"}).status!==0)throw i();const b=J(c,".neocortex/state.json",8*1024*1024,n.sourceHead);if(l(b)!==n.sourceStateSha256)throw i();const a=JSON.parse(b.toString("utf8")),E=rt(a,e,s);if(E.diagnosisReceiptId!==n.diagnosisReceiptId||E.researchReceiptId!==n.researchReceiptId||E.intakeRevision!==n.intakeRevision||!r(a)||!r(a.epics)||!r(a.epics[s]))throw i();const k=a.epics[s],P=k.createEpicPlanningPhysical,x=k.createEpicPlanningResearchPhysical;if(!r(P)||!r(P.artifactDigests)||!r(x)||!r(x.artifactDigests))throw i();const j=`.neocortex/planning/epic-${s}`;for(const[g,M,z]of[["idea",`${j}/idea.json`,32*1024],["diagnosis",`${j}/diagnosis.md`,256*1024],["enrichment",`${j}/enriched-prompt.md`,256*1024],["research",`${j}/research.md`,256*1024]]){const F=q(c,M,z),ft=g==="research"?x.artifactDigests.research:P.artifactDigests[g];if(l(F)!==ft||!F.equals(J(c,M,z))||!F.equals(J(c,M,z,n.sourceHead)))throw i()}const A=(g,M,z)=>{const F=q(c,g,z);if(l(F)!==M||!F.equals(J(c,g,z)))throw i();return F},w=A(`docs/epics/epic-${s}.md`,S.artifactDigests.epic,512*1024),p=R.map(g=>A(g,S.artifactDigests.stories[g],128*1024)),I=".neocortex/planning/planning.json",O=JSON.parse(A(I,S.artifactDigests.index,128*1024).toString("utf8")),m=J(c,I,128*1024,n.sourceHead);if(l(m)!==x.artifactDigests.index)throw i();const f=JSON.parse(m.toString("utf8"));if(!r(O)||!r(O.epics)||!r(O.epics[s])||!r(f)||!r(f.epics)||!r(f.epics[s]))throw i();const d=O.epics[s],D=f.epics[s];if(!Array.isArray(D.steps_completed)||D.steps_completed.length!==2||!L(D.steps_completed[0],pt)||!L(D.steps_completed[1],dt)||!Array.isArray(d.steps_completed)||!L(d.steps_completed[2],gt)||typeof d.completed_at!="string"||!Number.isFinite(Date.parse(d.completed_at))||typeof O.last_scan!="string"||!Number.isFinite(Date.parse(O.last_scan))||!G(O,{...f,last_scan:O.last_scan,epics:{...f.epics,[s]:{...D,status:"generated",steps_completed:[...D.steps_completed,d.steps_completed[2]],completed_at:d.completed_at,output_files:{...D.output_files,epic:`docs/epics/epic-${s}.md`,stories:R}}}}))throw i();const C=H(w.toString("utf8"),"title");if(!C||!G(o,et({stateRaw:b,state:a,title:C,stories:R,storyBytes:p,completedAt:d.completed_at},{epicId:s},$))||V(c,["rev-parse","HEAD"])!==y||!q(c,".neocortex/state.json",8*1024*1024).equals(u))throw i();return{epicId:s,physicalAcceptanceReceiptId:$.receiptId,storyIds:R.map(g=>g.slice(13,-9)),verifiedHead:y,stateSha256:l(u),publicSafe:!0}}function At(t,e){bt(e);const s=e,i=K(t);if(Y(i)!==i||V(i,["rev-parse","--show-toplevel"])!==i)throw new Error("planning-generation-root-invalid");v(i,s.epicId);const c=N(i,".neocortex"),y=N(c,"state.json.planning.lock"),u=W(y,"wx",384);let o;try{const h=ct(i),n=Et(s),B=Q(s.epicId,Object.keys(s.artifactDigests.stories).length).map(p=>p.slice(13,-9)),R=q(i,".neocortex/state.json",8*1024*1024);if(l(R)!==s.sourceStateSha256){const p=J(i,".neocortex/state.json",8388608);if(l(p)!==s.sourceStateSha256)throw new Error("planning-generation-replay-conflict");const I=tt(i,s,!1,void 0,p);if(!G(JSON.parse(R.toString("utf8")),et(I,s,n)))throw new Error("planning-generation-replay-conflict");return{epicId:s.epicId,physicalAcceptanceReceiptId:n.receiptId,qaEvidenceId:s.qaEvidenceId,storyIds:B}}const S=tt(i,s,!0),$=et(S,s,n),T=V(i,["rev-parse","--git-common-dir"]),b=It(T)?K(T):K(i,T);if(Y(b)!==b||X(b).isSymbolicLink())throw new Error("planning-generation-backup-dir-invalid");const a=N(b,"neocortex-planning");yt(a,{recursive:!0,mode:448});const E=X(a);if(!E.isDirectory()||E.isSymbolicLink()||E.uid!==process.getuid?.()||(E.mode&63)!==0)throw new Error("planning-generation-backup-dir-invalid");const k=mt(),P=W(N(a,`state-backup-${k}.json`),"wx",384);try{nt(P,S.stateRaw),Z(P)}finally{U(P)}const x=W(a,"r");try{Z(x)}finally{U(x)}o=N(c,`state.json.planning-tmp-${k}`);const j=W(o,"wx",384);try{nt(j,`${JSON.stringify($,null,2)}
-`),Z(j)}finally{U(j)}if(!tt(i,s,!0,`.neocortex/state.json.planning-tmp-${k}`).stateRaw.equals(S.stateRaw))throw new Error("planning-generation-state-conflict");if(ct(i)!==h)throw new Error("planning-generation-pending-conflict");St(o,N(c,"state.json")),o=void 0;const w=W(c,"r");try{Z(w)}finally{U(w)}return{epicId:s.epicId,physicalAcceptanceReceiptId:n.receiptId,qaEvidenceId:s.qaEvidenceId,storyIds:B}}finally{if(o)try{it(o)}catch{}U(u),it(y)}}export{At as sealPlanningGeneration,kt as verifyCommittedPlanningGeneration};
+/** Root-owned P03 transition after review of an isolated, admitted generation candidate. */
+import { execFileSync, spawnSync } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { closeSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { planningPendingSidecarDigest, planningPhysicalPatchDigest } from './planning-diagnosis-checkpoint.js';
+import { acceptedPlanningResearchPredecessor } from './planning-research-checkpoint.js';
+const HEX = /^[a-f0-9]{64}$/;
+const EPIC = /^P[1-9][0-9]{0,11}$/;
+const CLAIM = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
+const P01_STEP_DIGEST = 'acd455ed0e39d98b90fb57391db75e366e4c5604db043e03a89a20e33d643c3c';
+const P02_STEP_DIGEST = 'fa2194f89c01f07e225fd6f39e98e679f628e072239b6cd0af3ee527f0722518';
+const P03_STEP_DIGEST = '8636f22ec5950410902448ee1e9cb4947359ac98df518742bddbbb367468e3ae';
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function digest(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function git(root, args, maxBuffer = 128 * 1024) {
+    return execFileSync('git', [...args], { cwd: root, encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'ignore'], maxBuffer }).trim();
+}
+function regularBytes(root, path, maxBytes) {
+    const entry = lstatSync(join(root, path));
+    if (!entry.isFile() || entry.isSymbolicLink() || entry.size < 1 || entry.size > maxBytes) {
+        throw new Error('planning-generation-physical-artifact-invalid');
+    }
+    return readFileSync(join(root, path));
+}
+function committedBytes(root, path, maxBytes, revision = 'HEAD') {
+    const result = spawnSync('git', ['show', `${revision}:${path}`], { cwd: root,
+        encoding: 'buffer', maxBuffer: maxBytes });
+    if (result.status !== 0 || !Buffer.isBuffer(result.stdout)
+        || result.stdout.length < 1 || result.stdout.length > maxBytes) {
+        throw new Error('planning-generation-predecessor-uncommitted');
+    }
+    return result.stdout;
+}
+function safeParents(root, epicId) {
+    for (const relativePath of ['.neocortex', '.neocortex/planning',
+        `.neocortex/planning/epic-${epicId}`, 'docs', 'docs/epics', 'docs/stories']) {
+        const entry = lstatSync(join(root, relativePath));
+        if (!entry.isDirectory() || entry.isSymbolicLink()
+            || entry.uid !== process.getuid?.()
+            || relativePath === '.neocortex' && (entry.mode & 0o022) !== 0) {
+            throw new Error('planning-generation-directory-boundary-invalid');
+        }
+    }
+}
+function scalar(content, key) {
+    const header = /^---\n([\s\S]{1,8192}?)\n---\n/.exec(content.replace(/\r\n/g, '\n'))?.[1];
+    const fields = header?.split('\n').filter((line) => line.startsWith(`${key}:`)) ?? [];
+    return fields.length === 1 ? fields[0].slice(key.length + 1).trim()
+        .replace(/^(?:"(.*)"|'(.*)')$/, '$1$2') : undefined;
+}
+function stepMatches(value, expected) {
+    return typeof value === 'string' && value.length <= 128 && digest(value) === expected;
+}
+function storyPaths(epicId, count) {
+    return Array.from({ length: count }, (_, index) => `docs/stories/${epicId}.${String(index + 1).padStart(2, '0')}.story.md`);
+}
+function validateReview(value) {
+    if (!record(value) || Object.keys(value).sort().join('|') !== [
+        'schemaVersion', 'verdict', 'claimId', 'epicId', 'diagnosisReceiptId',
+        'researchReceiptId', 'intakeRevision', 'sourceHead', 'sourceBranch',
+        'sourceStateSha256', 'admission', 'artifactDigests', 'qaEvidenceId', 'artifactSummary',
+    ].sort().join('|') || value.schemaVersion !== 'PlanningGenerationRootReview/1'
+        || value.verdict !== 'accepted' || typeof value.claimId !== 'string' || !CLAIM.test(value.claimId)
+        || typeof value.epicId !== 'string' || !EPIC.test(value.epicId)
+        || typeof value.diagnosisReceiptId !== 'string' || !HEX.test(value.diagnosisReceiptId)
+        || typeof value.researchReceiptId !== 'string' || !HEX.test(value.researchReceiptId)
+        || typeof value.intakeRevision !== 'string' || !HEX.test(value.intakeRevision)
+        || typeof value.sourceHead !== 'string' || !/^[a-f0-9]{40}$/.test(value.sourceHead)
+        || typeof value.sourceBranch !== 'string'
+        || !/^[a-zA-Z0-9][a-zA-Z0-9._/-]{0,127}$/.test(value.sourceBranch)
+        || typeof value.sourceStateSha256 !== 'string' || !HEX.test(value.sourceStateSha256)
+        || !record(value.admission) || Object.keys(value.admission).sort().join('|') !== [
+        'schemaVersion', 'outcome', 'baseSha', 'executionBranch', 'changedPaths', 'patchSha256',
+    ].sort().join('|') || value.admission.schemaVersion !== 1
+        || value.admission.outcome !== 'admitted-unverified'
+        || value.admission.baseSha !== value.sourceHead
+        || value.admission.executionBranch !== value.sourceBranch
+        || typeof value.admission.patchSha256 !== 'string' || !HEX.test(value.admission.patchSha256)
+        || !record(value.artifactDigests)
+        || Object.keys(value.artifactDigests).sort().join('|') !== 'epic|index|stories'
+        || typeof value.artifactDigests.epic !== 'string' || !HEX.test(value.artifactDigests.epic)
+        || typeof value.artifactDigests.index !== 'string' || !HEX.test(value.artifactDigests.index)
+        || !record(value.artifactDigests.stories)
+        || Object.keys(value.artifactDigests.stories).length < 1
+        || Object.keys(value.artifactDigests.stories).length > 24
+        || Object.values(value.artifactDigests.stories).some((entry) => typeof entry !== 'string' || !HEX.test(entry))
+        || typeof value.qaEvidenceId !== 'string' || !/^qa-[a-z0-9-]{8,80}$/.test(value.qaEvidenceId)
+        || typeof value.artifactSummary !== 'string' || value.artifactSummary.length < 16
+        || value.artifactSummary.length > 2048) {
+        throw new Error('planning-generation-review-invalid');
+    }
+    const stories = storyPaths(value.epicId, Object.keys(value.artifactDigests.stories).length);
+    if (!isDeepStrictEqual(Object.keys(value.artifactDigests.stories).sort(), [...stories].sort())) {
+        throw new Error('planning-generation-review-invalid');
+    }
+}
+function physicalAcceptance(review) {
+    const fields = { schemaVersion: 'PlanningGenerationPhysicalAcceptance/1',
+        claimId: review.claimId, epicId: review.epicId,
+        diagnosisReceiptId: review.diagnosisReceiptId, researchReceiptId: review.researchReceiptId,
+        intakeRevision: review.intakeRevision, qaEvidenceId: review.qaEvidenceId,
+        sourceHead: review.sourceHead, sourceStateSha256: review.sourceStateSha256,
+        admissionPatchSha256: review.admission.patchSha256,
+        artifactDigests: review.artifactDigests };
+    return { ...fields, receiptId: digest(JSON.stringify(fields)), publicSafe: true };
+}
+function evidence(root, review, checkPatch, ownTemporaryPath, sourceStateOverride) {
+    safeParents(root, review.epicId);
+    if (git(root, ['rev-parse', 'HEAD']) !== review.sourceHead
+        || git(root, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== review.sourceBranch) {
+        throw new Error('planning-generation-head-conflict');
+    }
+    const prefix = `.neocortex/planning/epic-${review.epicId}`;
+    const epicPath = `docs/epics/epic-${review.epicId}.md`;
+    const indexPath = '.neocortex/planning/planning.json';
+    const stories = storyPaths(review.epicId, Object.keys(review.artifactDigests.stories).length);
+    const allowed = { index: indexPath, epic: epicPath,
+        ...Object.fromEntries(stories.map((path, index) => [`story${index}`, path])) };
+    if (!Array.isArray(review.admission.changedPaths)
+        || !isDeepStrictEqual([...review.admission.changedPaths].sort(), Object.values(allowed).sort())
+        || checkPatch && planningPhysicalPatchDigest(root, allowed, ownTemporaryPath, true)
+            !== review.admission.patchSha256) {
+        throw new Error('planning-generation-admission-patch-conflict');
+    }
+    const indexBytes = regularBytes(root, indexPath, 128 * 1024);
+    const epicBytes = regularBytes(root, epicPath, 512 * 1024);
+    const storyBytes = stories.map((path) => regularBytes(root, path, 128 * 1024));
+    if (digest(indexBytes) !== review.artifactDigests.index
+        || digest(epicBytes) !== review.artifactDigests.epic
+        || stories.some((path, index) => digest(storyBytes[index]) !== review.artifactDigests.stories[path])) {
+        throw new Error('planning-generation-artifact-conflict');
+    }
+    const epicText = epicBytes.toString('utf8');
+    const epicTitle = scalar(epicText, 'title');
+    if (scalar(epicText, 'id') !== review.epicId
+        || scalar(epicText, 'stories_count') !== String(stories.length)
+        || !epicTitle || epicTitle.length > 200 || !epicText.includes('## Stories')) {
+        throw new Error('planning-generation-epic-invalid');
+    }
+    for (const [index, bytes] of storyBytes.entries()) {
+        const text = bytes.toString('utf8');
+        const header = /^---\n([\s\S]{1,8192}?)\n---\n/.exec(text.replace(/\r\n/g, '\n'))?.[1] ?? '';
+        const canonicalEpic = scalar(text, 'epic_id');
+        // Old accepted receipts keep their original bytes on replay. New seals
+        // require the canonical field consumed by story-context collection.
+        const epicMatches = canonicalEpic === review.epicId && !/^\s*epic\s*:/m.test(header)
+            || !checkPatch && canonicalEpic === undefined && !/^\s*epic_id\s*:/m.test(header)
+                && scalar(text, 'epic') === review.epicId;
+        if (scalar(text, 'id') !== `${review.epicId}.${String(index + 1).padStart(2, '0')}`
+            || !epicMatches || scalar(text, 'status') !== 'backlog'
+            || !scalar(text, 'title') || !text.includes('## Acceptance Criteria')
+            || !/\bGiven\b[\s\S]*\bWhen\b[\s\S]*\bThen\b/.test(text)) {
+            throw new Error('planning-generation-story-invalid');
+        }
+    }
+    const stateRaw = sourceStateOverride ?? regularBytes(root, '.neocortex/state.json', 8 * 1024 * 1024);
+    const state = JSON.parse(stateRaw.toString('utf8'));
+    if (!record(state) || !record(state.epics) || !record(state.stories)) {
+        throw new Error('planning-generation-state-invalid');
+    }
+    const predecessor = acceptedPlanningResearchPredecessor(state, review.claimId, review.epicId);
+    if (predecessor.diagnosisReceiptId !== review.diagnosisReceiptId
+        || predecessor.researchReceiptId !== review.researchReceiptId
+        || predecessor.intakeRevision !== review.intakeRevision
+        || checkPatch && digest(stateRaw) !== review.sourceStateSha256) {
+        throw new Error('planning-generation-state-conflict');
+    }
+    const priorEpic = state.epics[review.epicId];
+    if (!record(priorEpic) || stories.some((path, index) => Object.hasOwn(state.stories, `${review.epicId}.${String(index + 1).padStart(2, '0')}`))) {
+        throw new Error('planning-generation-story-collision');
+    }
+    const p01 = priorEpic.createEpicPlanningPhysical;
+    const p02 = priorEpic.createEpicPlanningResearchPhysical;
+    if (!record(p01) || !record(p02) || !record(p01.artifactDigests) || !record(p02.artifactDigests)) {
+        throw new Error('planning-generation-predecessor-invalid');
+    }
+    for (const [name, path] of Object.entries({ idea: `${prefix}/idea.json`,
+        diagnosis: `${prefix}/diagnosis.md`, enrichment: `${prefix}/enriched-prompt.md`,
+        research: `${prefix}/research.md` })) {
+        const expected = name === 'research' ? p02.artifactDigests.research
+            : p01.artifactDigests[name];
+        const current = regularBytes(root, path, name === 'idea' ? 32 * 1024 : 256 * 1024);
+        if (digest(current) !== expected || !current.equals(committedBytes(root, path, 512 * 1024))) {
+            throw new Error('planning-generation-predecessor-artifact-drift');
+        }
+    }
+    const baseline = committedBytes(root, indexPath, 128 * 1024);
+    if (digest(baseline) !== p02.artifactDigests.index) {
+        throw new Error('planning-generation-predecessor-index-drift');
+    }
+    const prior = JSON.parse(baseline.toString('utf8'));
+    const next = JSON.parse(indexBytes.toString('utf8'));
+    if (!record(prior) || !record(prior.epics) || !record(next) || !record(next.epics)) {
+        throw new Error('planning-generation-index-invalid');
+    }
+    const previous = prior.epics[review.epicId];
+    const generated = next.epics[review.epicId];
+    if (!record(previous) || previous.id !== review.epicId || previous.status !== 'researched'
+        || !Array.isArray(previous.steps_completed) || previous.steps_completed.length !== 2
+        || !stepMatches(previous.steps_completed[0], P01_STEP_DIGEST)
+        || !stepMatches(previous.steps_completed[1], P02_STEP_DIGEST)
+        || !isDeepStrictEqual(previous.output_files, { diagnosis: `${prefix}/diagnosis.md`,
+            research: `${prefix}/research.md` }) || !record(generated)
+        || !Array.isArray(generated.steps_completed)
+        || !stepMatches(generated.steps_completed[2], P03_STEP_DIGEST)) {
+        throw new Error('planning-generation-index-predecessor-invalid');
+    }
+    const expected = { ...prior, last_scan: next.last_scan, epics: { ...prior.epics,
+            [review.epicId]: { ...previous, status: 'generated',
+                steps_completed: [...previous.steps_completed, generated.steps_completed[2]],
+                completed_at: generated.completed_at,
+                output_files: { ...previous.output_files,
+                    epic: epicPath, stories } } } };
+    if (typeof next.last_scan !== 'string' || !Number.isFinite(Date.parse(next.last_scan))
+        || typeof generated.completed_at !== 'string'
+        || !Number.isFinite(Date.parse(generated.completed_at))
+        || !isDeepStrictEqual(next, expected)) {
+        throw new Error('planning-generation-index-transition-invalid');
+    }
+    return { stateRaw, state, title: epicTitle, stories, storyBytes,
+        completedAt: generated.completed_at };
+}
+function projectState(before, review, receipt) {
+    const state = before.state;
+    const storyIds = before.stories.map((path) => path.slice('docs/stories/'.length, -'.story.md'.length));
+    const epic = state.epics[review.epicId];
+    const stories = { ...state.stories };
+    for (const [index, id] of storyIds.entries()) {
+        stories[id] = { id, epic_id: review.epicId,
+            title: scalar(before.storyBytes[index].toString('utf8'), 'title'), status: 'backlog' };
+    }
+    return { ...state, epics: { ...state.epics, [review.epicId]: { ...epic,
+                title: before.title, status: 'generated', stories: storyIds,
+                total_stories: storyIds.length, completed_stories: 0,
+                createEpicPlanningGenerationPhysical: receipt } },
+        stories, last_updated: before.completedAt };
+}
+/**
+ * Reopen an already sealed and committed P03 before root memory work. This is
+ * physical consistency verification, not new QA, a claim or terminal authority.
+ * The sealer intentionally stays bound to its original pre-commit HEAD.
+ */
+export function verifyCommittedPlanningGeneration(projectRoot, claimId, epicId) {
+    const invalid = () => new Error('planning-generation-committed-evidence-invalid');
+    const root = resolve(projectRoot);
+    if (!CLAIM.test(claimId) || !EPIC.test(epicId) || realpathSync(root) !== root
+        || git(root, ['rev-parse', '--show-toplevel']) !== root)
+        throw invalid();
+    safeParents(root, epicId);
+    const verifiedHead = git(root, ['rev-parse', 'HEAD']);
+    const stateRaw = regularBytes(root, '.neocortex/state.json', 8 * 1024 * 1024);
+    if (!stateRaw.equals(committedBytes(root, '.neocortex/state.json', 8 * 1024 * 1024)))
+        throw invalid();
+    const current = JSON.parse(stateRaw.toString('utf8'));
+    const epic = record(current) && record(current.epics) ? current.epics[epicId] : undefined;
+    const stored = record(epic) ? epic.createEpicPlanningGenerationPhysical : undefined;
+    if (!record(stored) || stored.schemaVersion !== 'PlanningGenerationPhysicalAcceptance/1'
+        || stored.claimId !== claimId || stored.epicId !== epicId
+        || typeof stored.sourceHead !== 'string' || !/^[a-f0-9]{40}$/.test(stored.sourceHead)
+        || typeof stored.qaEvidenceId !== 'string' || !/^qa-[a-z0-9-]{8,80}$/.test(stored.qaEvidenceId)
+        || ['diagnosisReceiptId', 'researchReceiptId', 'intakeRevision', 'sourceStateSha256',
+            'admissionPatchSha256'].some(key => typeof stored[key] !== 'string' || !HEX.test(stored[key]))
+        || !record(stored.artifactDigests)
+        || Object.keys(stored.artifactDigests).sort().join('|') !== 'epic|index|stories'
+        || typeof stored.artifactDigests.epic !== 'string' || !HEX.test(stored.artifactDigests.epic)
+        || typeof stored.artifactDigests.index !== 'string' || !HEX.test(stored.artifactDigests.index)
+        || !record(stored.artifactDigests.stories))
+        throw invalid();
+    const count = Object.keys(stored.artifactDigests.stories).length;
+    const stories = storyPaths(epicId, count);
+    if (count < 1 || count > 24
+        || !isDeepStrictEqual(Object.keys(stored.artifactDigests.stories).sort(), [...stories].sort())
+        || Object.values(stored.artifactDigests.stories).some(value => typeof value !== 'string' || !HEX.test(value))) {
+        throw invalid();
+    }
+    const fields = { schemaVersion: 'PlanningGenerationPhysicalAcceptance/1',
+        claimId, epicId, diagnosisReceiptId: stored.diagnosisReceiptId,
+        researchReceiptId: stored.researchReceiptId, intakeRevision: stored.intakeRevision,
+        qaEvidenceId: stored.qaEvidenceId, sourceHead: stored.sourceHead,
+        sourceStateSha256: stored.sourceStateSha256,
+        admissionPatchSha256: stored.admissionPatchSha256,
+        // The original sealer hashes this closed object's reviewed insertion order.
+        artifactDigests: stored.artifactDigests };
+    const receipt = { ...fields, receiptId: digest(JSON.stringify(fields)), publicSafe: true };
+    if (!isDeepStrictEqual(stored, receipt))
+        throw invalid();
+    const ancestry = spawnSync('git', ['merge-base', '--is-ancestor', stored.sourceHead, 'HEAD'], { cwd: root, stdio: 'ignore' });
+    if (ancestry.status !== 0)
+        throw invalid();
+    const baselineRaw = committedBytes(root, '.neocortex/state.json', 8 * 1024 * 1024, stored.sourceHead);
+    if (digest(baselineRaw) !== stored.sourceStateSha256)
+        throw invalid();
+    const baseline = JSON.parse(baselineRaw.toString('utf8'));
+    const predecessor = acceptedPlanningResearchPredecessor(baseline, claimId, epicId);
+    if (predecessor.diagnosisReceiptId !== stored.diagnosisReceiptId
+        || predecessor.researchReceiptId !== stored.researchReceiptId
+        || predecessor.intakeRevision !== stored.intakeRevision || !record(baseline)
+        || !record(baseline.epics) || !record(baseline.epics[epicId]))
+        throw invalid();
+    const baselineEpic = baseline.epics[epicId];
+    const p01 = baselineEpic.createEpicPlanningPhysical;
+    const p02 = baselineEpic.createEpicPlanningResearchPhysical;
+    if (!record(p01) || !record(p01.artifactDigests) || !record(p02) || !record(p02.artifactDigests))
+        throw invalid();
+    const prefix = `.neocortex/planning/epic-${epicId}`;
+    for (const [name, path, limit] of [['idea', `${prefix}/idea.json`, 32 * 1024],
+        ['diagnosis', `${prefix}/diagnosis.md`, 256 * 1024],
+        ['enrichment', `${prefix}/enriched-prompt.md`, 256 * 1024],
+        ['research', `${prefix}/research.md`, 256 * 1024]]) {
+        const bytes = regularBytes(root, path, limit);
+        const expected = name === 'research' ? p02.artifactDigests.research : p01.artifactDigests[name];
+        if (digest(bytes) !== expected || !bytes.equals(committedBytes(root, path, limit))
+            || !bytes.equals(committedBytes(root, path, limit, stored.sourceHead)))
+            throw invalid();
+    }
+    const readAccepted = (path, expected, limit) => {
+        const bytes = regularBytes(root, path, limit);
+        if (digest(bytes) !== expected || !bytes.equals(committedBytes(root, path, limit)))
+            throw invalid();
+        return bytes;
+    };
+    const epicBytes = readAccepted(`docs/epics/epic-${epicId}.md`, fields.artifactDigests.epic, 512 * 1024);
+    const storyBytes = stories.map(path => readAccepted(path, fields.artifactDigests.stories[path], 128 * 1024));
+    const indexPath = '.neocortex/planning/planning.json';
+    const index = JSON.parse(readAccepted(indexPath, fields.artifactDigests.index, 128 * 1024).toString('utf8'));
+    const priorIndexRaw = committedBytes(root, indexPath, 128 * 1024, stored.sourceHead);
+    if (digest(priorIndexRaw) !== p02.artifactDigests.index)
+        throw invalid();
+    const priorIndex = JSON.parse(priorIndexRaw.toString('utf8'));
+    if (!record(index) || !record(index.epics) || !record(index.epics[epicId])
+        || !record(priorIndex) || !record(priorIndex.epics) || !record(priorIndex.epics[epicId]))
+        throw invalid();
+    const entry = index.epics[epicId];
+    const priorEntry = priorIndex.epics[epicId];
+    if (!Array.isArray(priorEntry.steps_completed) || priorEntry.steps_completed.length !== 2
+        || !stepMatches(priorEntry.steps_completed[0], P01_STEP_DIGEST)
+        || !stepMatches(priorEntry.steps_completed[1], P02_STEP_DIGEST)
+        || !Array.isArray(entry.steps_completed) || !stepMatches(entry.steps_completed[2], P03_STEP_DIGEST)
+        || typeof entry.completed_at !== 'string' || !Number.isFinite(Date.parse(entry.completed_at))
+        || typeof index.last_scan !== 'string' || !Number.isFinite(Date.parse(index.last_scan))
+        || !isDeepStrictEqual(index, { ...priorIndex, last_scan: index.last_scan, epics: { ...priorIndex.epics,
+                [epicId]: { ...priorEntry, status: 'generated',
+                    steps_completed: [...priorEntry.steps_completed, entry.steps_completed[2]], completed_at: entry.completed_at,
+                    output_files: { ...priorEntry.output_files,
+                        epic: `docs/epics/epic-${epicId}.md`, stories } } } }))
+        throw invalid();
+    const title = scalar(epicBytes.toString('utf8'), 'title');
+    if (!title || !isDeepStrictEqual(current, projectState({ stateRaw: baselineRaw, state: baseline,
+        title, stories, storyBytes, completedAt: entry.completed_at }, { epicId }, receipt)))
+        throw invalid();
+    if (git(root, ['rev-parse', 'HEAD']) !== verifiedHead
+        || !regularBytes(root, '.neocortex/state.json', 8 * 1024 * 1024).equals(stateRaw))
+        throw invalid();
+    return { epicId, physicalAcceptanceReceiptId: receipt.receiptId,
+        storyIds: stories.map(path => path.slice('docs/stories/'.length, -'.story.md'.length)),
+        verifiedHead, stateSha256: digest(stateRaw), publicSafe: true };
+}
+/** The root supplies independent QA; this CAS persists the accepted P03 checkpoint. */
+export function sealPlanningGeneration(projectRoot, reviewInput) {
+    validateReview(reviewInput);
+    const review = reviewInput;
+    const root = resolve(projectRoot);
+    if (realpathSync(root) !== root || git(root, ['rev-parse', '--show-toplevel']) !== root) {
+        throw new Error('planning-generation-root-invalid');
+    }
+    safeParents(root, review.epicId);
+    const stateDir = join(root, '.neocortex');
+    const lockPath = join(stateDir, 'state.json.planning.lock');
+    const lock = openSync(lockPath, 'wx', 0o600);
+    let temporaryPath;
+    try {
+        const pendingDigest = planningPendingSidecarDigest(root);
+        const receipt = physicalAcceptance(review);
+        const storyIds = storyPaths(review.epicId, Object.keys(review.artifactDigests.stories).length)
+            .map((path) => path.slice('docs/stories/'.length, -'.story.md'.length));
+        const currentRaw = regularBytes(root, '.neocortex/state.json', 8 * 1024 * 1024);
+        if (digest(currentRaw) !== review.sourceStateSha256) {
+            const sourceState = committedBytes(root, '.neocortex/state.json', 8 * 1024 * 1024);
+            if (digest(sourceState) !== review.sourceStateSha256) {
+                throw new Error('planning-generation-replay-conflict');
+            }
+            const baseline = evidence(root, review, false, undefined, sourceState);
+            if (!isDeepStrictEqual(JSON.parse(currentRaw.toString('utf8')), projectState(baseline, review, receipt))) {
+                throw new Error('planning-generation-replay-conflict');
+            }
+            return { epicId: review.epicId, physicalAcceptanceReceiptId: receipt.receiptId,
+                qaEvidenceId: review.qaEvidenceId, storyIds };
+        }
+        const before = evidence(root, review, true);
+        const next = projectState(before, review, receipt);
+        const commonRaw = git(root, ['rev-parse', '--git-common-dir']);
+        const commonDir = isAbsolute(commonRaw) ? resolve(commonRaw) : resolve(root, commonRaw);
+        if (realpathSync(commonDir) !== commonDir || lstatSync(commonDir).isSymbolicLink()) {
+            throw new Error('planning-generation-backup-dir-invalid');
+        }
+        const backupDir = join(commonDir, 'neocortex-planning');
+        mkdirSync(backupDir, { recursive: true, mode: 0o700 });
+        const backupEntry = lstatSync(backupDir);
+        if (!backupEntry.isDirectory() || backupEntry.isSymbolicLink()
+            || backupEntry.uid !== process.getuid?.() || (backupEntry.mode & 0o077) !== 0) {
+            throw new Error('planning-generation-backup-dir-invalid');
+        }
+        const suffix = randomUUID();
+        const backup = openSync(join(backupDir, `state-backup-${suffix}.json`), 'wx', 0o600);
+        try {
+            writeFileSync(backup, before.stateRaw);
+            fsyncSync(backup);
+        }
+        finally {
+            closeSync(backup);
+        }
+        const backupDirectory = openSync(backupDir, 'r');
+        try {
+            fsyncSync(backupDirectory);
+        }
+        finally {
+            closeSync(backupDirectory);
+        }
+        temporaryPath = join(stateDir, `state.json.planning-tmp-${suffix}`);
+        const temporary = openSync(temporaryPath, 'wx', 0o600);
+        try {
+            writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`);
+            fsyncSync(temporary);
+        }
+        finally {
+            closeSync(temporary);
+        }
+        const recheck = evidence(root, review, true, `.neocortex/state.json.planning-tmp-${suffix}`);
+        if (!recheck.stateRaw.equals(before.stateRaw))
+            throw new Error('planning-generation-state-conflict');
+        if (planningPendingSidecarDigest(root) !== pendingDigest) {
+            throw new Error('planning-generation-pending-conflict');
+        }
+        renameSync(temporaryPath, join(stateDir, 'state.json'));
+        temporaryPath = undefined;
+        const stateDirectory = openSync(stateDir, 'r');
+        try {
+            fsyncSync(stateDirectory);
+        }
+        finally {
+            closeSync(stateDirectory);
+        }
+        return { epicId: review.epicId, physicalAcceptanceReceiptId: receipt.receiptId,
+            qaEvidenceId: review.qaEvidenceId, storyIds };
+    }
+    finally {
+        if (temporaryPath)
+            try {
+                unlinkSync(temporaryPath);
+            }
+            catch { /* preserve primary failure */ }
+        closeSync(lock);
+        unlinkSync(lockPath);
+    }
+}