@ornexus/neocortex 4.60.72 → 4.60.73

package/packages/client/dist/runner/headless/run-yoloop.js

@@ -1,4 +1,146 @@
-import{createHash as je,randomBytes as Ke}from"node:crypto";import{spawn as Ue}from"node:child_process";import{existsSync as ze}from"node:fs";import*as Ae from"node:os";import{dirname as $e,join as ke}from"node:path";import{fileURLToPath as Ye}from"node:url";import{AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG as Fe,AUTONOMOUS_GOVERNANCE_REASON_CODES as Oe,autonomousGovernanceMetadata as Ee,buildAutonomousGovernanceEnvelope as Ve,readAutonomousGovernanceEnvelopeFromMetadata as Re,recordAutonomousGovernance as qe}from"../../continuity/autonomous-governance.js";import{createDefaultHeadlessAdapterRegistry as We}from"./adapters.js";import{loadHeadlessRuntimeDefaults as Ge,resolveHeadlessRuntime as Xe}from"./resolver.js";import{DEFAULT_HEADLESS_EXECUTION_BACKOFF_MS as Ze,DEFAULT_HEADLESS_EXECUTION_LEASE_MS as Je,DEFAULT_HEADLESS_EXECUTION_LIMIT as Qe,DEFAULT_HEADLESS_EXECUTION_MAX_ATTEMPTS as et,DEFAULT_HEADLESS_EXECUTION_STALE_LEASE_AFTER_MS as tt,DEFAULT_HEADLESS_EXECUTION_TIMEOUT_MS as rt,headlessExecutionEntityId as q,runYoloExecutionPhase as ot}from"./run-yolo.js";import{HEADLESS_REASON_CODES as p,boundPublicSummary as pe,hashPublicValue as x,redaction as h}from"./types.js";import{validatePhasedYoloopPlan as at}from"./prepared-story-bundle.js";import{createAnchoredContinuousStoryCommandRunner as nt,createBranchlessContinuousStoryWorkspaceManager as st}from"./continuous-story-workspace.js";import{executeEpicGitReconciliation as it,executeEpicTerminalGit as dt}from"./epic-terminal-git-runner.js";import{createCliEpicTerminalGitAdapter as ct}from"./epic-terminal-git-cli-adapter.js";import{acquireGitLifecyclePhysicalIntegrationLock as lt,releaseGitLifecyclePhysicalIntegrationLock as ut}from"../../git/git-lifecycle-store.js";import{normalizeContinuousWriteRef as pt}from"../../../../shared/dist/yoloop/wave-decision-receipt.js";import{parseReleaseBlockedResult as mt}from"../../../../shared/dist/yoloop/release-blocked.js";const ft=20,yt=1800*1e3,me=1,ve=10;function Pe(e={}){let r=e.availableParallelism;if(r===void 0){const t=Ae.availableParallelism;if(typeof t=="function")try{r=t()}catch{r=void 0}}if(!Number.isFinite(r)||(r??0)<1){const t=e.cpuCount??(()=>{try{return Ae.cpus().length}catch{return me}})();r=Number.isFinite(t)&&t>0?t:me}return F(r??me,1,ve)}const Ar=Object.freeze(["start","lifecycle_evidence","metadata_parse","child_story_delegation","reinvoke","git_reconciliation","terminal_git","complete","aborted","release_blocked","backoff"]),fe=/^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/,ht=/^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/,ye=/^\*yolo @docs\/stories\/[A-Za-z0-9._-]+\.story\.md(?: branchless-preparation)?$/,_t=/^\*yolo @docs\/stories\/[A-Za-z0-9._-]+\.story\.md branchless-preparation$/,Ct=/^(?:\uFEFF)?---(?:\r?\n)/,It=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/,W=/(?:[;&|`$<>]|\$\(|\n|\r|\0)/,oe=/(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i,D=/(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY))/i,bt=new Set(["no_private_prompt_or_history","no_raw_vendor_corpus","no_unrelated_story_context"]);function Te(e){return Ct.test(e)||e.includes("@neocortex")||e.includes("*yoloop")||W.test(e)||D.test(e)}function kr(e){return!Te(e)&&ye.test(e)}const St=new Set(["schemaVersion","contractVersion","kind","commandClass","jobId","operationId","idempotencyKey","targetKind","targetRef","commandRef","epicId","runtime","publicSummary","reasonCode","attempts","metadata","redactionSummary","publicSafe"]),gt=new Set(["runtimeId","modelId","source","reasonCode","publicSafe"]),At="job-aborted",kt="max-iterations-reached",Ot="max-duration-reached",Et=new Set(["git-lifecycle-integration-backpressure","git-lifecycle-integration-lock-failed","git-lifecycle-integration-lock-release-failed"]),we=new Set(["yoloop-per-run-cap-resumable","yoloop-session-timeout-resumable"]);async function Rt(e,r){const t=$e(Ye(import.meta.url)),a=ke(t,"../../commands/invoke.js"),o=ze(a)?a:ke(t,"../../../dist/commands/invoke.js");return new Promise(s=>{const n=Ue(process.execPath,["--input-type=module","-e",`
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P190.06 -- runner root-owned execution plane for run_yoloop directives.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import * as os from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG, AUTONOMOUS_GOVERNANCE_REASON_CODES, autonomousGovernanceMetadata, buildAutonomousGovernanceEnvelope, readAutonomousGovernanceEnvelopeFromMetadata, recordAutonomousGovernance, } from '../../continuity/autonomous-governance.js';
+import { createDefaultHeadlessAdapterRegistry } from './adapters.js';
+import { loadHeadlessRuntimeDefaults, resolveHeadlessRuntime } from './resolver.js';
+import { DEFAULT_HEADLESS_EXECUTION_BACKOFF_MS, DEFAULT_HEADLESS_EXECUTION_LEASE_MS, DEFAULT_HEADLESS_EXECUTION_LIMIT, DEFAULT_HEADLESS_EXECUTION_MAX_ATTEMPTS, DEFAULT_HEADLESS_EXECUTION_STALE_LEASE_AFTER_MS, DEFAULT_HEADLESS_EXECUTION_TIMEOUT_MS, headlessExecutionEntityId, runYoloExecutionPhase, } from './run-yolo.js';
+import { HEADLESS_REASON_CODES, boundPublicSummary, hashPublicValue, redaction, } from './types.js';
+import { validatePhasedYoloopPlan } from './prepared-story-bundle.js';
+import { createAnchoredContinuousStoryCommandRunner, createBranchlessContinuousStoryWorkspaceManager, } from './continuous-story-workspace.js';
+import { executeEpicGitReconciliation, executeEpicTerminalGit } from './epic-terminal-git-runner.js';
+import { createCliEpicTerminalGitAdapter } from './epic-terminal-git-cli-adapter.js';
+import { acquireGitLifecyclePhysicalIntegrationLock, releaseGitLifecyclePhysicalIntegrationLock, } from '../../git/git-lifecycle-store.js';
+import { normalizeContinuousWriteRef } from '../../../../shared/dist/yoloop/wave-decision-receipt.js';
+import { parseReleaseBlockedResult, } from '../../../../shared/dist/yoloop/release-blocked.js';
+export const DEFAULT_HEADLESS_YOLOOP_MAX_ITERATIONS = 20;
+export const DEFAULT_HEADLESS_YOLOOP_MAX_DURATION_MS = 30 * 60 * 1000;
+export const DEFAULT_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP = 1;
+export const MAX_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP = 10;
+/**
+ * Resolve the absent-override default from physical capacity. The explicit CLI
+ * option remains authoritative; this resolver is injectable for deterministic
+ * Node 18 fallback tests.
+ */
+export function resolveDefaultHeadlessYoloopLocalConcurrencyCap(input = {}) {
+    let reported = input.availableParallelism;
+    if (reported === undefined) {
+        const available = os.availableParallelism;
+        if (typeof available === 'function') {
+            try {
+                reported = available();
+            }
+            catch {
+                reported = undefined;
+            }
+        }
+    }
+    if (!Number.isFinite(reported) || (reported ?? 0) < 1) {
+        const cpuCount = input.cpuCount ?? (() => {
+            try {
+                return os.cpus().length;
+            }
+            catch {
+                return DEFAULT_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP;
+            }
+        })();
+        reported = Number.isFinite(cpuCount) && cpuCount > 0
+            ? cpuCount
+            : DEFAULT_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP;
+    }
+    return boundedInteger(reported ?? DEFAULT_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP, 1, MAX_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP);
+}
+export const RUN_YOLOOP_DRIVER_STATES = Object.freeze([
+    'start',
+    'lifecycle_evidence',
+    'metadata_parse',
+    'child_story_delegation',
+    'reinvoke',
+    'git_reconciliation',
+    'terminal_git',
+    'complete',
+    'aborted',
+    'release_blocked',
+    'backoff',
+]);
+const EPIC_TARGET_PATTERN = /^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/;
+const CHILD_STORY_TARGET_PATTERN = /^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/;
+const CHILD_PROMPT_PATTERN = /^\*yolo @docs\/stories\/[A-Za-z0-9._-]+\.story\.md(?: branchless-preparation)?$/;
+const BRANCHLESS_PREPARATION_PROMPT_PATTERN = /^\*yolo @docs\/stories\/[A-Za-z0-9._-]+\.story\.md branchless-preparation$/;
+const FRONTMATTER_ENVELOPE_PATTERN = /^(?:\uFEFF)?---(?:\r?\n)/;
+const SAFE_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/;
+const SHELL_FRAGMENT_PATTERN = /(?:[;&|`$<>]|\$\(|\n|\r|\0)/;
+const UNSAFE_KEY_PATTERN = /(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i;
+const UNSAFE_VALUE_PATTERN = /(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY))/i;
+const PUBLIC_CHILD_DEBT_CONSTRAINTS = new Set([
+    'no_private_prompt_or_history',
+    'no_raw_vendor_corpus',
+    'no_unrelated_story_context',
+]);
+function hasDelegatedPromptIsolationViolation(prompt) {
+    return FRONTMATTER_ENVELOPE_PATTERN.test(prompt) ||
+        prompt.includes('@neocortex') ||
+        prompt.includes('*yoloop') ||
+        SHELL_FRAGMENT_PATTERN.test(prompt) ||
+        UNSAFE_VALUE_PATTERN.test(prompt);
+}
+export function isCanonicalDelegatedStoryPrompt(prompt) {
+    return !hasDelegatedPromptIsolationViolation(prompt) && CHILD_PROMPT_PATTERN.test(prompt);
+}
+const EXECUTION_DIRECTIVE_ALLOWED_KEYS = new Set([
+    'schemaVersion',
+    'contractVersion',
+    'kind',
+    'commandClass',
+    'jobId',
+    'operationId',
+    'idempotencyKey',
+    'targetKind',
+    'targetRef',
+    'commandRef',
+    'epicId',
+    'runtime',
+    'publicSummary',
+    'reasonCode',
+    'attempts',
+    'metadata',
+    'redactionSummary',
+    'publicSafe',
+]);
+const RUNTIME_ALLOWED_KEYS = new Set(['runtimeId', 'modelId', 'source', 'reasonCode', 'publicSafe']);
+const JOB_ABORTED_REASON_CODE = 'job-aborted';
+const MAX_ITERATIONS_REASON_CODE = 'max-iterations-reached';
+const MAX_DURATION_REASON_CODE = 'max-duration-reached';
+const PUBLIC_TERMINAL_LOCK_RETRY_REASONS = new Set([
+    'git-lifecycle-integration-backpressure',
+    'git-lifecycle-integration-lock-failed',
+    'git-lifecycle-integration-lock-release-failed',
+]);
+const RESUMABLE_YOLOOP_BOUNDARY_REASONS = new Set([
+    'yoloop-per-run-cap-resumable',
+    'yoloop-session-timeout-resumable',
+]);
+async function defaultIsolatedYoloopRootInvokeTransport(options, boundary) {
+    // The thin client's lock belongs to its invocation PID. Keeping invoke in
+    // the long-lived runner made the next iteration see its own PID as another
+    // live owner forever. Use the normal short-lived client lifetime; only the
+    // existing local liveness reconciler may recover its lock after process exit.
+    // Loop scheduling and all Git effects remain in this root, not in the child.
+    const moduleDirectory = dirname(fileURLToPath(import.meta.url));
+    const installedModule = join(moduleDirectory, '../../commands/invoke.js');
+    const modulePath = existsSync(installedModule) ? installedModule
+        : join(moduleDirectory, '../../../dist/commands/invoke.js');
+    return new Promise((resolveResult) => {
+        const child = spawn(process.execPath, ['--input-type=module', '-e', `
       import { pathToFileURL } from 'node:url';
       process.once('message', async ({ modulePath, options }) => {
         try {
@@ -7,4 +149,2434 @@ import{createHash as je,randomBytes as Ke}from"node:crypto";import{spawn as Ue}f
           process.send(result, () => process.exit(0));
         } catch { process.exit(1); }
       });
-    `],{cwd:r.projectRoot,stdio:["ignore","pipe","pipe","ipc"],windowsHide:!0});let c,d=0,l=!1;const y=setTimeout(()=>{l=!0,n.kill()},r.timeoutMs),f=m=>{d+=m.length,d>32*1024*1024&&(l=!0,n.kill())};n.stdout?.on("data",f),n.stderr?.on("data",f),n.on("message",m=>{if(c||!_(m)||typeof m.success!="boolean"||Buffer.byteLength(JSON.stringify(m))>32*1024*1024){l=!0,n.kill();return}c=m});const u={success:!1,errorCode:"headless-root-invoke-failed",error:"The isolated root metadata invocation did not complete.",exitCode:1};n.on("error",()=>{l=!0}),n.on("close",m=>{clearTimeout(y),s(m===0&&!l&&c?c:u)}),n.send({modulePath:o,options:e},m=>{m&&(l=!0,n.kill())})})}async function vt(e,r=Rt){const t=Date.now(),a={args:e.args,projectRoot:e.projectRoot,format:"json",platformTarget:"runner",serverUrl:e.serverUrl,strictReadOnly:e.strictReadOnly},o=await r(a,{projectRoot:e.projectRoot,timeoutMs:e.timeoutMs});return{success:o.success,instructions:o.instructions,metadata:o.metadata,error:o.error,errorCode:o.errorCode,exitCode:o.exitCode,durationMs:Date.now()-t,publicSafe:!0}}async function Or(e){const r=e.adapterRegistry??We(),t=F(e.limit??Qe,1,10),a=F(e.leaseMs??Je,1e3,3600*1e3),o=F(e.staleLeaseAfterMs??tt,0,1440*60*1e3),s=F(e.maxAttempts??et,1,10),n=F(e.localConcurrencyCap??Pe(),1,ve),c=[],d=[],l=e.now(),y=Pt({store:e.store,metadata:e.metadata,nowIso:l,maxAttempts:s,queueCap:e.queueCap});c.push(...y.reasonCodes);const f=e.store.recoverStaleHeadlessExecutionAttempts({nowIso:l,staleAfterMs:o,limit:t*2});f.recoveredAttemptIds.length>0&&(c.push(p.EXECUTION_BACKOFF),f.failedAttemptIds.length>0&&c.push(p.EXECUTION_TIMEOUT));const u=e.store.listDueHeadlessExecutionAttempts({nowIso:e.now(),limit:Math.max(t*5,10)}).filter(m=>m.directive_kind==="run_yoloop").slice(0,t);for(const m of u){const k=await Tt({store:e.store,projectRoot:e.projectRoot,runnerId:e.runnerId,attempt:m,registry:r,now:e.now,leaseMs:a,timeoutMs:F(e.timeoutMs??rt,1e3,18e5),backoffMs:F(e.backoffMs??Ze,1e3,36e5),maxAttempts:s,maxIterations:F(e.maxIterations??ft,1,100),maxDurationMs:F(e.maxDurationMs??yt,1e3,72e5),localConcurrencyCap:n,queueCap:e.queueCap,adapterOptions:e.adapterOptions,runtimeDefaults:e.runtimeDefaults,runtimeFallback:e.runtimeFallback,yoloopInvoker:e.yoloopInvoker??vt,serverUrl:e.serverUrl,idFactory:e.idFactory??ar,continuousWorkspaceManager:e.continuousWorkspaceManager??st(),terminalGitAdapter:e.terminalGitAdapter??ct(e.projectRoot)});d.push(k),c.push(k.reasonCode,...k.workerPoolSummary.reasonCodes)}return{ok:d.every(m=>m.outcome!=="failed")&&y.rejectedCount===0,enqueuedAttemptCount:y.enqueuedCount,dueAttemptCount:u.length,processedAttemptCount:d.filter(m=>m.outcome!=="ignored").length,recoveredAttemptIds:f.recoveredAttemptIds,receipts:d,reasonCodes:V(c.length>0?c:[p.OK]),publicSafe:!0}}function Pt(e){let r=0,t=0;const a=[];for(const o of Xt(e.metadata)){if(!_(o)||o.kind!=="run_yoloop")continue;const s=Mt(o);if(!s.ok){t+=1,a.push(s.reasonCode);continue}const n=s.directive;if(!e.store.jobExists(n.jobId)){t+=1,a.push(Oe.BYPASS_BLOCKED);continue}const c=Zt(n);if(e.store.hasCompletedHeadlessExecutionDirectiveHash(c)){a.push(p.EXECUTION_COMPLETED);continue}const d=Ve({autonomousKind:"run_yoloop",source:"headless-run-yoloop",targetKind:"epic",targetRef:n.targetRef,epicId:n.epicId??ne(n.targetRef),jobId:n.jobId,operationSeed:n.operationId,commandHash:x(n.commandRef)}),l=qe(e.store,d,e.nowIso,{requireExistingJob:!0});if(!l.ok){t+=1,a.push(l.reasonCode);continue}const y=q("attempt",n.idempotencyKey),f=q("exec",n.operationId),u=e.store.enqueueHeadlessExecutionAttempt({attemptId:y,executionId:f,jobId:n.jobId,directiveHash:c,directiveKind:"run_yoloop",commandClass:n.commandClass,targetKind:"epic",targetRef:n.targetRef,epicId:n.epicId??ne(n.targetRef),runtimeId:n.runtime?.runtimeId,modelId:n.runtime?.modelId,runtimeSource:or(n.runtime?.source),reasonCode:n.reasonCode,publicSummary:n.publicSummary,enqueuedAt:e.nowIso,notBeforeAt:e.nowIso,maxAttempts:e.maxAttempts,queueCap:e.queueCap,operationId:`${n.operationId}:enqueue`,idempotencyKey:n.idempotencyKey,counts:{directives:1},hashes:{directive:c},redactionSummary:n.redactionSummary,relativePaths:[n.targetRef],metadata:Ee(d,{schemaVersion:1,contractVersion:"continuity-v1",jobId:n.jobId,operationId:n.operationId,reasonCode:n.reasonCode??p.OK,targetRef:n.targetRef,directiveHash:c})});if(!u.accepted){t+=1,a.push(u.reasonCode??"queue-cap-reached");continue}u.inserted&&(r+=1),a.push(p.OK)}return{enqueuedCount:r,rejectedCount:t,reasonCodes:V(a)}}async function Tt(e){const r=e.now(),t=e.idFactory("lease",e.attempt.attempt_id),a=Se(r,e.leaseMs);if(!e.store.claimHeadlessExecutionAttempt({attemptId:e.attempt.attempt_id,leaseId:t,runnerId:e.runnerId,claimedAt:r,leaseExpiresAt:a,reasonCode:p.OK}).inserted)return qt(e.attempt,{status:e.attempt.status,receiptStatus:"ignored",reasonCode:"lease-conflict",timestamp:r});if(e.store.hasCompletedHeadlessExecutionDirectiveHash(e.attempt.directive_hash,e.attempt.attempt_id))return _e(e.store,e.attempt,{leaseId:t,runnerId:e.runnerId,status:"skipped",receiptStatus:"ignored",reasonCode:p.EXECUTION_COMPLETED,publicSummary:"Skipped duplicate run_yoloop directive because the directive hash is already completed.",completedAt:e.now(),counts:Ie(),hashes:{directive:e.attempt.directive_hash},redactionSummary:[],relativePaths:[e.attempt.target_ref],childStoryIds:[],stateTransitions:["start","complete"]});const n=xt(e);if(!n.ok)return _e(e.store,e.attempt,{leaseId:t,runnerId:e.runnerId,status:n.status,receiptStatus:n.receiptStatus,reasonCode:n.reasonCode,publicSummary:n.publicSummary,completedAt:e.now(),counts:Ie(),hashes:{directive:e.attempt.directive_hash},redactionSummary:n.redactionSummary,relativePaths:er(e.attempt),childStoryIds:[],stateTransitions:["start"]});const c=await wt({...e,prepared:n.input}),d=Wt(e.attempt,c,e.maxAttempts,e.backoffMs,e.now()),l=d.retry?"backoff":c.status,y=d.retry?"deferred":c.receiptStatus,f=d.retry?Et.has(c.reasonCode)||we.has(c.reasonCode)?c.reasonCode:p.EXECUTION_BACKOFF:c.reasonCode,u=d.retry?"Headless run_yoloop execution scheduled bounded retry after transient metadata/runtime outcome.":c.publicSummary;return _e(e.store,e.attempt,{leaseId:t,runnerId:e.runnerId,status:l,receiptStatus:y,reasonCode:f,publicSummary:u,completedAt:e.now(),durationMs:c.durationMs,notBeforeAt:d.notBeforeAt,retryCount:d.retryCount,counts:c.counts,workerPoolSummary:c.workerPoolSummary,hashes:{...c.hashes,directive:e.attempt.directive_hash},redactionSummary:c.redactionSummary,relativePaths:c.relativePaths,childStoryIds:c.childStoryIds,runtimeId:n.input.runtimeId,modelId:n.input.modelId,runtimeSource:n.input.runtimeSource,stateTransitions:c.stateTransitions,terminalClass:c.terminalClass,releaseBlocked:c.releaseBlocked})}async function wt(e){const r=Date.now(),t=["start"],a=new Set,o=[],s=[],n={root:x(e.prepared.rootPrompt)},c=[h("rootPrompt","prompt_body",n.root)];let d=0,l=0,y=0,f=0,u=0,m=0,k,T=!1;const i=De(e.localConcurrencyCap),E=new Map;let j=!1;const K=new Map,z=new Map,se=P=>{const b=P.child;n[`child-${b.storyId.replace(/[^A-Za-z0-9_.:-]/g,"-")}`]=P.commandHash,c.push(P.promptRedaction);const M=P.receipt;if(P.terminalFailure){if(P.deferredFailure){K.set(b.storyId,P.terminalFailure),i.backpressurePauseCount+=1;return}K.delete(b.storyId),z.set(b.storyId,P.terminalFailure),a.has(b.storyId)||(a.add(b.storyId),o.push(b.storyId),s.push(b.targetRef),y+=1);return}if(!M||M.outcome==="deferred"){K.set(b.storyId,P.reasonCodes.includes("queue-cap-reached")?p.WORKER_POOL_BACKPRESSURE_PAUSED:M?.reasonCode||p.EXECUTION_BACKOFF),P.reasonCodes.includes("queue-cap-reached")&&(i.backpressurePauseCount+=1);return}K.delete(b.storyId),!a.has(b.storyId)&&(a.add(b.storyId),o.push(b.storyId),s.push(b.targetRef),M.outcome==="failed"?(y+=1,z.set(b.storyId,M.reasonCode||p.EXECUTION_FAILED)):M.outcome==="ignored"?f+=1:l+=1)},X=async()=>{const P=await Promise.race([...E.entries()].map(([b,M])=>M.promise.then(S=>({storyId:b,result:S}))));E.delete(P.storyId),i.completedChildCount+=1,i.pendingChildCount=E.size,se(P.result)};for(;;){if(d>=e.maxIterations)return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:kt,publicSummary:"Headless yoloop reached the bounded iteration limit before completion metadata.",retryable:!1,startedAt:r,counts:A(d,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(Date.now()-r>e.maxDurationMs)return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:Ot,publicSummary:"Headless yoloop reached the bounded duration limit before completion metadata.",retryable:!1,startedAt:r,counts:A(d,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});t.push("metadata_parse");const P=await e.yoloopInvoker({projectRoot:e.projectRoot,args:e.prepared.rootPrompt,attemptId:e.attempt.attempt_id,executionId:e.attempt.execution_id,jobId:e.attempt.job_id,runnerId:e.runnerId,iteration:d,runtimeId:e.prepared.runtimeId,...e.prepared.modelId?{modelId:e.prepared.modelId}:{},timeoutMs:e.timeoutMs,serverUrl:e.serverUrl});P.durationMs!==void 0&&(n[`iter-${d}`]=x(String(P.durationMs)));const b=P.metadata,M=P.errorCode==="YOLOOP_RELEASE_BLOCKED"||b?.yoloopReleaseBlocked===!0||b?.terminalClass==="release-blocked"||b?.releaseBlocked!==void 0;if(!P.success&&!M)return t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:p.EXECUTION_FAILED,publicSummary:"Headless yoloop root metadata invocation failed with bounded public evidence.",retryable:!0,startedAt:r,counts:A(d,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});const S=Yt(b);if(!S.ok)return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:S.reasonCode,publicSummary:S.publicSummary,retryable:!1,startedAt:r,counts:A(d,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:[...c,...S.redactionSummary],relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});const C=Ft(b);if(S.aborted&&C){for(;E.size>0;)await X();return m+=1,t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:C.reason==="YOLOOP_SESSION_TIMEOUT"?"yoloop-session-timeout-resumable":"yoloop-per-run-cap-resumable",publicSummary:"Headless yoloop reached a finite run boundary and scheduled the same queue after cool-down.",retryable:!0,retryNotBeforeAt:C.coolDownUntil,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t})}if((S.releaseBlocked||S.aborted||S.complete||S.replay||S.outcome&&S.outcome!=="selected"&&S.outcome!=="queue_exhausted")&&j&&E.size>0){await X(),d+=1,t.push("reinvoke");continue}if(S.releaseBlocked)return t.push("release_blocked"),O({status:"failed",receiptStatus:"failed",reasonCode:"yoloop-release-blocked",publicSummary:"Headless yoloop stopped at a terminal release-blocked boundary without declaring success.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:{...n,releaseBlocked:x(S.releaseBlocked.resultId)},redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t,terminalClass:"release-blocked",releaseBlocked:S.releaseBlocked});const $=_(b?.epicIntegration)?b.epicIntegration:void 0,ee=Array.isArray($?.reasonCodes)?$.reasonCodes.filter(I=>typeof I=="string"):[];if(S.aborted&&b?.abortReason==="epic-integration-checkpoints-incomplete"&&$?.required===!0&&$.ready===!1&&ee.length>0&&ee.every(I=>I==="epic-aggregate-qa-receipt-required"||I==="epic-origin-binding-required")&&e.terminalGitAdapter.prepareLifecycleEvidence){t.push("lifecycle_evidence");const I=await e.terminalGitAdapter.prepareLifecycleEvidence({epicId:e.prepared.epicId,nowIso:e.now()});if(!I.ok)return t.push("backoff"),O({status:I.retryEligible?"backoff":"failed",receiptStatus:I.retryEligible?"deferred":"failed",reasonCode:I.reasonCode,publicSummary:"Headless yoloop stopped because physical Git lifecycle evidence could not be produced safely.",retryable:I.retryEligible,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});k=I.p205Authority,T=!0,d+=1,t.push("reinvoke");continue}if(S.aborted)return m+=1,t.push("aborted"),O({status:"failed",receiptStatus:"failed",reasonCode:At,publicSummary:"Headless yoloop stopped because public metadata reported an aborted loop.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(S.outcome&&S.outcome!=="selected"&&S.outcome!=="queue_exhausted")return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:`yoloop-${S.outcome}`,publicSummary:"Headless yoloop stopped on a non-executable graph-first continuation outcome.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(S.replay)return t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:"yoloop-replay-pending",publicSummary:"Headless yoloop observed pending replay authority and did not delegate a second child.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(S.complete&&j&&K.size>0&&z.size===0)return t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:[...K.values()].sort()[0],publicSummary:"Headless yoloop rejected terminal completion while previously runnable work remained undispatched.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(S.complete&&j&&z.size>0)return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:[...z.values()].sort()[0],publicSummary:"Headless yoloop rejected terminal completion because runnable work failed before an accepted dispatch receipt.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});const de=zt(b);if(de){if(!T&&e.terminalGitAdapter.prepareLifecycleEvidence){t.push("lifecycle_evidence");const v=await e.terminalGitAdapter.prepareLifecycleEvidence({epicId:e.prepared.epicId,nowIso:e.now()});if(!v.ok)return t.push("backoff"),O({status:v.retryEligible?"backoff":"failed",receiptStatus:v.retryEligible?"deferred":"failed",reasonCode:v.reasonCode,publicSummary:"Headless yoloop stopped because physical Git lifecycle evidence could not be produced safely.",retryable:v.retryEligible,startedAt:r,counts:A(d,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});k=v.p205Authority,T=!0}t.push("terminal_git");const I=new Date,L=await lt(e.projectRoot,{kind:"continuous",storyId:de.epicId,sessionId:`${e.runnerId}:${e.attempt.attempt_id}`,idempotencyKey:de.idempotencyKey,persistent:!1,expiresAt:new Date(I.getTime()+Math.max(e.timeoutMs,e.maxDurationMs)+6e4).toISOString()});if(!L.ok)return t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:L.reasonCode,publicSummary:"Headless yoloop deferred terminal Git while another physical writer retained authority.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});let U,H=!1;try{U=await dt(de,e.terminalGitAdapter,e.now,k)}finally{H=await ut(L.path,L.owner).catch(()=>!1)}if(!H)return t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:"git-lifecycle-integration-lock-release-failed",publicSummary:"Headless yoloop stopped because terminal Git writer ownership could not be released safely.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(n[`terminal-git-${d}`]=x(`${U.receipt.idempotencyKey}:${U.receipt.physicalStatus}`),!U.ok){const v=U.receipt.retryEligible;return t.push("backoff"),O({status:v?"backoff":"failed",receiptStatus:v?"deferred":"failed",reasonCode:U.reasonCodes[0]??"epic-terminal-git-failed",publicSummary:"Headless yoloop stopped at the epic terminal Git boundary with public-safe retry evidence.",retryable:v,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t})}if(S.complete)return u+=1,t.push("complete"),O({status:"completed",receiptStatus:"applied",reasonCode:p.EXECUTION_COMPLETED,publicSummary:"Headless yoloop completed only after fresh root-owned physical Git verification.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});d+=1,t.push("reinvoke");continue}if(S.complete)return u+=1,t.push("complete"),O({status:"completed",receiptStatus:"applied",reasonCode:p.EXECUTION_COMPLETED,publicSummary:"Headless yoloop completed after public metadata reported yoloopComplete.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});const ue=$t(b);if(ue){t.push("git_reconciliation");const I=await it(ue,e.terminalGitAdapter,e.now);if(n[`git-reconciliation-${d}`]=x(`${ue.idempotencyKey}:${I.reasonCodes.join(",")}`),!I.ok)return t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:I.reasonCodes[0]??"git-reconciliation-failed",publicSummary:"Headless yoloop paused at a fail-closed Git reconciliation boundary.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t})}const N=Nt(b,e.prepared.epicId);if(!N.ok)return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:N.reasonCode,publicSummary:N.publicSummary,retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:[...c,...N.redactionSummary],relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});const ge=N.continuous?void 0:N.prompts.find(I=>a.has(I.storyId));if(ge)return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:p.YOLOOP_ISOLATION_VIOLATION,publicSummary:"Headless yoloop rejected cyclic child story delegation evidence.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:[...c,h("storyId","prompt_body",x(ge.storyId))],relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(i.mode=N.mode==="continuous_dag"?"continuous_dag":N.parallelAuthorized?"parallel_wave":"serial",i.serverMaxConcurrency=N.serverMaxConcurrency,N.continuous){j=!0;const I=N.prompts.filter(L=>!a.has(L.storyId)&&!E.has(L.storyId));if(i.pendingChildCount=I.length+E.size,I.length>0){const L=Le({store:e.store,nowIso:e.now(),localCap:e.localConcurrencyCap,serverMaxConcurrency:N.serverMaxConcurrency,parallelAuthorized:!0,continuous:!0,eligibleCount:I.length});if(i.queueCap=L.queueCap,i.availableLeases=L.availableLeases,i.effectiveConcurrency=L.effectiveConcurrency,i.reasonCodes.push(L.reasonCode),L.effectiveConcurrency===0&&E.size===0)return i.backpressurePauseCount+=1,t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:p.WORKER_POOL_BACKPRESSURE_PAUSED,publicSummary:"Headless yoloop retained its eligible frontier while physical worker capacity was unavailable.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});const U=I.slice(0,L.effectiveConcurrency);t.push("child_story_delegation");for(const H of U)E.set(H.storyId,{child:H,promise:xe({...e,child:H,iteration:d})});i.startedChildCount+=U.length,i.peakConcurrency=Math.max(i.peakConcurrency,E.size),i.pendingChildCount=I.length-U.length+E.size}if(E.size>0)await X();else{if(K.size>0)return t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:[...K.values()].sort()[0],publicSummary:"Headless yoloop retained deferred continuous work for a bounded retry.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});if(z.size>0)return t.push("backoff"),O({status:"failed",receiptStatus:"failed",reasonCode:[...z.values()].sort()[0],publicSummary:"Headless yoloop completed independent work and stopped on the remaining failed dependency closure.",retryable:!1,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t})}d+=1,t.push("reinvoke");continue}i.pendingChildCount=N.prompts.length;const te=[...N.prompts];for(;te.length>0;){const I=Le({store:e.store,nowIso:e.now(),localCap:e.localConcurrencyCap,serverMaxConcurrency:N.serverMaxConcurrency,parallelAuthorized:N.parallelAuthorized,continuous:!1,eligibleCount:te.length});if(i.queueCap=I.queueCap,i.availableLeases=I.availableLeases,i.effectiveConcurrency=I.effectiveConcurrency,i.reasonCodes.push(I.reasonCode),I.effectiveConcurrency===0)return i.backpressurePauseCount+=1,i.pendingChildCount=te.length,t.push("backoff"),O({status:"backoff",receiptStatus:"deferred",reasonCode:p.WORKER_POOL_BACKPRESSURE_PAUSED,publicSummary:"Headless yoloop paused child workers because bounded queue or lease capacity was unavailable.",retryable:!0,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t});const L=te.splice(0,I.effectiveConcurrency);i.startedChildCount+=L.length,i.peakConcurrency=Math.max(i.peakConcurrency,L.length),i.pendingChildCount=te.length,t.push("child_story_delegation");const U=await Promise.all(L.map(v=>xe({...e,child:v,iteration:d})));i.completedChildCount+=U.length;let H;for(const v of U){const ce=v.child;n[`child-${ce.storyId.replace(/[^A-Za-z0-9_.:-]/g,"-")}`]=v.commandHash,c.push(v.promptRedaction),o.push(ce.storyId),s.push(ce.targetRef),a.add(ce.storyId);const re=v.receipt;if(!re){v.reasonCodes.includes("queue-cap-reached")?(i.backpressurePauseCount+=1,i.pendingChildCount+=1,i.reasonCodes.push(p.WORKER_POOL_BACKPRESSURE_PAUSED),H??={kind:"deferred",reasonCode:p.WORKER_POOL_BACKPRESSURE_PAUSED}):(y+=1,H??={kind:"missing",reasonCode:p.EXECUTION_FAILED});continue}if(re.outcome==="deferred"){H??={kind:"deferred",reasonCode:p.EXECUTION_BACKOFF};continue}if(re.outcome==="failed"){y+=1,H??={kind:"failed",reasonCode:re.reasonCode||p.EXECUTION_FAILED};continue}re.outcome==="ignored"?f+=1:l+=1}if(H){const v=H.kind==="deferred";return O({status:v?"backoff":"failed",receiptStatus:v?"deferred":"failed",reasonCode:H.reasonCode,publicSummary:H.kind==="missing"?"Headless yoloop child story delegation did not produce a public receipt.":v?"Headless yoloop child story delegated bounded backoff to the root attempt.":"Headless yoloop child story execution failed with public receipt evidence.",retryable:v,startedAt:r,counts:A(d+1,o.length,l,y,f,u,m),workerPoolSummary:g(i),hashes:n,redactions:c,relativePaths:[e.prepared.targetRef,...s],childStoryIds:o,stateTransitions:t})}}d+=1,t.push("reinvoke")}}async function xe(e){const r=e.child.dispatchId?await e.continuousWorkspaceManager.prepare({projectRoot:e.projectRoot,epicId:e.prepared.epicId,storyId:e.child.storyId,targetRef:e.child.targetRef,dispatchId:e.child.dispatchId,executionBranch:e.child.executionBranch??"",graphRevision:e.child.graphRevision??"",authorizedWriteSet:e.child.writeSet??[]}):void 0;if(r&&!r.ok)return{child:e.child,reasonCodes:[r.reasonCode],commandHash:x(e.child.commandRef),promptRedaction:h(`child.${e.child.storyId}`,"prompt_body",x(e.child.commandRef)),terminalFailure:r.reasonCode,deferredFailure:/backpressure|lease-active/.test(r.reasonCode)};const t=e.projectRoot,a=r?.ok?nt(r.value):e.adapterOptions?.commandRunner,o=Vt({rootAttempt:e.attempt,child:e.child,iteration:e.iteration,runtimeId:e.prepared.runtimeId,modelId:e.prepared.modelId,runtimeSource:e.prepared.runtimeSource}),s=q("attempt",o.idempotencyKey);let n=!!r;try{const c=await ot({store:e.store,projectRoot:t,runnerId:e.runnerId,now:e.now,metadata:{continuityExecutionDirectives:[o]},adapterRegistry:e.registry,adapterOptions:{...e.adapterOptions,cwd:t,env:{...e.adapterOptions?.env,...r?.ok?{NEOCORTEX_BRANCHLESS_PROJECT_ROOT:r.value.workspacePath,NEOCORTEX_BRANCHLESS_ROOT_AUTHORITY:JSON.stringify(e.child.rootAuthority)}:{}},...a?{commandRunner:a,versionRunner:a}:{}},runtimeDefaults:e.runtimeDefaults,runtimeFallback:e.runtimeFallback,timeoutMs:e.timeoutMs,maxAttempts:1,limit:1,queueCap:e.queueCap,attemptIds:[s],idFactory:e.idFactory}),d=c.receipts.find(l=>l.attemptId===s)??c.receipts[0];if(r?.ok&&d&&d.outcome!=="failed"&&d.outcome!=="deferred"){const l=await e.continuousWorkspaceManager.integrate(r.value,{receiptRefs:[`continuity:${d.attemptId}`],nowIso:d.timestamp});if(!l.ok)return{child:e.child,receipt:d,reasonCodes:[...c.reasonCodes,l.reasonCode],commandHash:x(e.child.commandRef),promptRedaction:h(`child.${e.child.storyId}`,"prompt_body",x(e.child.commandRef)),terminalFailure:l.reasonCode,deferredFailure:/backpressure|graph-revision-stale/.test(l.reasonCode)};n=!1}return{child:e.child,receipt:d,reasonCodes:c.reasonCodes,commandHash:x(e.child.commandRef),promptRedaction:h(`child.${e.child.storyId}`,"prompt_body",x(e.child.commandRef))}}finally{r?.ok&&await e.continuousWorkspaceManager.release(r.value,n)}}function Le(e){const r=e.store.collectSnapshotRows({nowIso:e.nowIso,jobLimit:1,staleLeaseLimit:1,receiptLimit:1,eventLimit:1,snapshotLimit:1}),t=Math.max(1,Math.floor(r.queue.capacity)),a=Math.max(0,Math.floor(r.queue.running)-1),o=e.continuous?Math.max(0,Math.floor(r.queue.available)):Math.max(0,Math.min(Math.max(0,e.localCap-a),Math.floor(r.queue.available))),s=e.parallelAuthorized?Math.max(1,Math.floor(e.serverMaxConcurrency)):1,n=Math.max(0,Math.min(e.eligibleCount,s,e.localCap,t,o));return{queueCap:t,availableLeases:o,effectiveConcurrency:n,reasonCode:n===0?p.WORKER_POOL_BACKPRESSURE_PAUSED:(e.parallelAuthorized||e.continuous)&&n>1?p.WORKER_POOL_PARALLEL_ACTIVE:p.WORKER_POOL_SERIAL_FALLBACK}}function De(e){return{mode:"serial",serverMaxConcurrency:1,localCap:e,queueCap:1,availableLeases:1,effectiveConcurrency:1,peakConcurrency:0,pendingChildCount:0,startedChildCount:0,completedChildCount:0,backpressurePauseCount:0,reasonCodes:[]}}function g(e){return{mode:e.mode,serverMaxConcurrency:Y(e.serverMaxConcurrency),localCap:Y(e.localCap),queueCap:Y(e.queueCap),availableLeases:Y(e.availableLeases),effectiveConcurrency:Y(e.effectiveConcurrency),peakConcurrency:Y(e.peakConcurrency),pendingChildCount:Y(e.pendingChildCount),startedChildCount:Y(e.startedChildCount),completedChildCount:Y(e.completedChildCount),backpressurePauseCount:Y(e.backpressurePauseCount),reasonCodes:V(e.reasonCodes.length>0?e.reasonCodes:[p.WORKER_POOL_SERIAL_FALLBACK]).slice(0,10),publicSafe:!0}}function he(e=Pe()){return g(De(e))}function Y(e){return Number.isFinite(e)?Math.max(0,Math.min(1e4,Math.floor(e))):0}function xt(e){const r=Re(e.attempt.metadata_json,{autonomousKind:"run_yoloop",jobId:e.attempt.job_id,targetKind:"epic",targetRef:e.attempt.target_ref});if(!r.ok)return{ok:!1,status:"failed",receiptStatus:"failed",reasonCode:r.reasonCode,publicSummary:r.publicSummary,redactionSummary:r.redactionSummary};const t=Lt(e.attempt);if(!t.ok)return t;const a=Dt(e);if(!a.ok)return{ok:!1,status:"failed",receiptStatus:"failed",reasonCode:a.reasonCode,publicSummary:a.publicSummary,redactionSummary:a.redactionSummary};const o=e.attempt.epic_id??ne(e.attempt.target_ref);return{ok:!0,input:{rootPrompt:`*yoloop @${e.attempt.target_ref}`,targetRef:e.attempt.target_ref,epicId:o,runtimeId:a.runtimeId,...a.modelId?{modelId:a.modelId}:{},runtimeSource:a.runtimeSource,publicSafe:!0}}}function Lt(e){const r=[];e.directive_kind!=="run_yoloop"&&r.push(h("directiveKind","unsafe_key","value-denied")),e.target_kind!=="epic"&&r.push(h("targetKind","prompt_body","value-denied")),(!fe.test(e.target_ref)||W.test(e.target_ref)||D.test(e.target_ref))&&r.push(h("targetRef","prompt_body","value-denied"));const t=ne(e.target_ref);return e.epic_id&&e.epic_id!==t&&r.push(h("epicId","prompt_body","value-denied")),r.length>0?{ok:!1,status:"failed",receiptStatus:"failed",reasonCode:p.PROMPT_REJECTED,publicSummary:"Headless run_yoloop attempt did not match the canonical public epic prompt shape.",redactionSummary:r}:{ok:!0,input:{rootPrompt:`*yoloop @${e.target_ref}`,targetRef:e.target_ref,epicId:t,runtimeId:"fake",publicSafe:!0}}}function Dt(e){const r=e.runtimeDefaults!==void 0?e.runtimeDefaults:Ge({projectRoot:e.projectRoot});if(_(r)&&r.ok===!1)return{ok:!1,reasonCode:p.RUNTIME_UNTRUSTED,publicSummary:typeof r.publicSummary=="string"?r.publicSummary:"Headless runtime defaults failed public-safety validation.",redactionSummary:Array.isArray(r.redactionSummary)?r.redactionSummary:[]};const t=rr(e.attempt.runtime_source)??"explicit",a=e.attempt.runtime_id||e.attempt.model_id?{...e.attempt.runtime_id?{runtimeId:e.attempt.runtime_id}:{},...e.attempt.model_id?{modelId:e.attempt.model_id}:{},source:t,publicSafe:!0}:void 0,o={registry:e.registry,defaults:r,fallback:e.runtimeFallback};a&&(t==="origin"?o.origin=a:t==="default"?o.projectDefault=a:t==="fallback"?o.fallback=a:o.explicit=a);const s=Xe(o);return s.ok?{ok:!0,runtimeId:s.runtimeId,...s.modelId?{modelId:s.modelId}:{},runtimeSource:s.runtimeSource}:{ok:!1,reasonCode:s.reasonCode,publicSummary:s.publicSummary,redactionSummary:s.redactionSummary}}function Mt(e){const r=[];for(const i of Object.keys(e))(!St.has(i)||oe.test(i))&&r.push(h(i,Q(i),"key-denied"));e.publicSafe!==!0&&r.push(h("publicSafe","unsafe_key","value-denied"));const t=B(e,"kind"),a=B(e,"commandClass"),o=B(e,"jobId"),s=B(e,"operationId"),n=B(e,"idempotencyKey"),c=B(e,"targetKind"),d=B(e,"targetRef"),l=B(e,"commandRef"),y=B(e,"publicSummary"),f=B(e,"epicId");t!=="run_yoloop"&&r.push(h("kind","unsafe_key","value-denied")),a!=="goal-tick"&&a!=="loop-tick"&&r.push(h("commandClass","unsafe_key","value-denied")),be(o)||r.push(h("jobId","unsafe_key","value-denied")),be(s)||r.push(h("operationId","unsafe_key","value-denied")),be(n)||r.push(h("idempotencyKey","unsafe_key","value-denied")),(c!=="epic"||!d||!fe.test(d)||D.test(d))&&r.push(h("targetRef","prompt_body","value-denied"));const u=d?`*yoloop @${d}`:void 0;(!l||l!==u||l.includes("@neocortex")||W.test(l)||D.test(l))&&r.push(h("commandRef","prompt_body","value-denied")),f&&d&&f!==ne(d)&&r.push(h("epicId","prompt_body","value-denied")),(!y||y.length>240||D.test(y))&&r.push(h("publicSummary","unbounded_text","value-denied")),e.reasonCode!==void 0&&(typeof e.reasonCode!="string"||D.test(e.reasonCode))&&r.push(h("reasonCode","unsafe_key","value-denied"));const m=Gt(e.runtime,r);e.attempts!==void 0&&le(e.attempts,"attempts",r),e.metadata!==void 0&&le(e.metadata,"metadata",r);const k=_(e.metadata)?e.metadata:void 0,T=Jt(e.redactionSummary,r);return r.length>0||t!=="run_yoloop"||!a||!o||!s||!n||!d||!l||!y?{ok:!1,reasonCode:r.some(E=>E.reason==="prompt_body")?p.PROMPT_REJECTED:p.DIRECTIVE_REJECTED,redactionSummary:r}:{ok:!0,directive:{kind:"run_yoloop",commandClass:a,jobId:o,operationId:s,idempotencyKey:n,targetKind:"epic",targetRef:d,commandRef:l,...f?{epicId:f}:{},...m?{runtime:m}:{},publicSummary:y,...typeof e.reasonCode=="string"?{reasonCode:e.reasonCode}:{},...k?{metadata:k}:{},...T.length>0?{redactionSummary:T}:{},publicSafe:!0}}}function Nt(e,r){if(!e)return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop metadata was missing.",[]);const t=Bt(e);if(!t.ok)return t;const a=[],o=_(e.yoloopExecutionPlan)?e.yoloopExecutionPlan:void 0,s=o?w(o.storyIds).filter(G):[],n=o?.version===3&&_(o.scheduler)&&Array.isArray(o.scheduler.nodes)?new Map(o.scheduler.nodes.filter(_).map(u=>[String(u.storyId??""),u])):new Map,c=o?.version===3&&_(o.scheduler)&&typeof o.scheduler.graphRevision=="string"?o.scheduler.graphRevision:void 0,d=o?.version===3&&typeof o.executionBranch=="string"?o.executionBranch:void 0;let l;if(o){const u=jt(o);if(!u.ok)return u;l=u;for(const k of Ut(o)){const T=J(k,r,"execution-plan");if(!T.ok)return T;a.push(Me(T.prompt,n.get(T.prompt.storyId),c,d))}if(a.length===0)for(const k of s){const T=J(`*yolo @docs/stories/${k}.story.md`,r,"execution-plan");if(!T.ok)return T;a.push(Me(T.prompt,n.get(T.prompt.storyId),c,d))}const m=Ht(e.skillDirectives,a);if(!m.ok)return m}const y=typeof e.nextStoryId=="string"&&G(e.nextStoryId)?e.nextStoryId:void 0;for(const u of o?[]:Array.isArray(e.skillDirectives)?e.skillDirectives:[]){if(!_(u)||u.kind!=="task")continue;const m=w(u.promptTemplates);if(m.length>0){for(const E of m){const j=J(E,r,"task-directive");if(!j.ok)return j;a.push(j.prompt)}continue}const k=typeof u.promptTemplate=="string"?u.promptTemplate:void 0;if(!k)continue;const T=w(u.storyIds).filter(G),i=T.length>0?T:y?[y]:[];if(i.length===0&&ye.test(k)){const E=J(k,r,"task-directive");if(!E.ok)return E;a.push(E.prompt);continue}for(const E of i){const j=k.includes("{storyId}")?k.replaceAll("{storyId}",E):k,K=J(j,r,"task-directive");if(!K.ok)return K;a.push(K.prompt)}}if(a.length===0&&y){const u=J(`*yolo @docs/stories/${y}.story.md`,r,"next-story");if(!u.ok)return u;a.push(u.prompt)}const f=nr(a,u=>u.commandRef);if(l?.continuous){if(f.length!==s.length||f.some(u=>u.preparationOnly!==!0||u.source!=="execution-plan"))return R(p.YOLOOP_ISOLATION_VIOLATION,"Headless continuous yoloop rejected an ambiguous or non-preparation child prompt.",[h("promptTemplates","prompt_body","operation-denied")])}else if(f.some(u=>u.preparationOnly===!0))return R(p.YOLOOP_ISOLATION_VIOLATION,"Headless yoloop rejected branchless preparation outside a validated continuous plan.",[h("promptTemplates","prompt_body","operation-denied")]);if(s.length>0){const u=new Set(s);for(const m of f)if(!u.has(m.storyId))return R(p.YOLOOP_ISOLATION_VIOLATION,"Headless yoloop rejected a child prompt outside the server-authorized execution plan.",[h("storyId","prompt_body",x(m.storyId))])}return l?.parallelAuthorized&&!Z(f.map(u=>u.storyId),s)?R(p.YOLOOP_METADATA_INVALID,"Headless yoloop rejected a parallel plan whose executable prompts did not match the selected wave.",[]):f.length===0&&!l?.continuous?R(p.YOLOOP_METADATA_INVALID,"Headless yoloop metadata did not include an authorized per-story child prompt.",[]):{ok:!0,prompts:f,mode:l?.mode??"legacy",serverMaxConcurrency:l?.serverMaxConcurrency??1,parallelAuthorized:l?.parallelAuthorized??!1,continuous:l?.continuous??!1,reasonCodes:[p.OK,l?.parallelAuthorized?p.WORKER_POOL_PARALLEL_ACTIVE:p.WORKER_POOL_SERIAL_FALLBACK]}}function Me(e,r,t,a){if(!r||!t||!a)return e;const o=Array.isArray(r.writeSet)?w(r.writeSet):[],s=Ne(r.childExecutionAuthority,{storyId:e.storyId,invocationPrompt:e.commandRef,authorizedWriteSet:o});return{...e,...typeof r.dispatchId=="string"?{dispatchId:r.dispatchId}:{},...typeof r.idempotencyKey=="string"?{idempotencyKey:r.idempotencyKey}:{},graphRevision:t,executionBranch:a,...o.length>0?{writeSet:o}:{},...s?{rootAuthority:s}:{}}}function Bt(e){const r=[];return e.nextStoryId!==void 0&&ae(e.nextStoryId,"nextStoryId",r),e.yoloopExecutionPlan!==void 0&&ae(e.yoloopExecutionPlan,"yoloopExecutionPlan",r),Array.isArray(e.skillDirectives)&&e.skillDirectives.forEach((t,a)=>{_(t)&&t.kind==="task"&&ae(t,`skillDirectives.${a}`,r)}),r.length>0?R(p.YOLOOP_METADATA_INVALID,"Headless yoloop rejected unsafe public metadata before child delegation.",r):{ok:!0}}function Ht(e,r){if(!Array.isArray(e))return{ok:!0};const t=new Set(r.map(a=>a.commandRef));for(const[a,o]of e.entries()){if(!_(o)||o.kind!=="task")continue;const s=typeof o.promptTemplate=="string"?o.promptTemplate:void 0,n=w(o.promptTemplates);if(s==="[REDACTED]"&&o.subagentType==="neocortex"&&typeof o.reasonCode=="string"&&o.reasonCode.startsWith("directive-prompt-")&&n.length===0)continue;const d=[...s?[s]:[],...n];if(o.subagentType!=="neocortex"||d.length===0||d.some(l=>!t.has(l)))return R(p.YOLOOP_ISOLATION_VIOLATION,"Headless yoloop rejected a task directive that conflicted with the server-authorized execution plan.",[h(`skillDirectives.${a}`,"prompt_body","operation-denied")])}return{ok:!0}}function ae(e,r,t){if(typeof e=="string"){if(/\.allowedDebt\.constraints\.\d+$/.test(r)&&bt.has(e))return;(D.test(e)||/\0/.test(e))&&t.push(h(r,Q(r),"value-denied"));return}if(!(e==null||typeof e=="number"||typeof e=="boolean")){if(Array.isArray(e)){e.forEach((a,o)=>ae(a,`${r}.${o}`,t));return}if(_(e)){for(const[a,o]of Object.entries(e)){const s=`${r}.${a}`;!(a==="promptTemplate"||a==="promptTemplates"||a==="invocationPrompt"||a==="childPromptKind"||a==="allowMetaTaskPromptInChild"||a==="authorization")&&oe.test(a)&&t.push(h(s,Q(a),"key-denied")),ae(o,s,t)}return}t.push(h(r,"unsafe_key","value-denied"))}}function jt(e){const r=typeof e.mode=="string"?e.mode:"",t=_(e.isolationPolicy)?e.isolationPolicy:void 0,a=w(e.storyIds);if(e.authorization!=="server_authorized")return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop execution plan was not server-authorized.",[]);if(e.executor!=="root_agent"&&e.executor!=="root_agent_with_child_tasks")return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop execution plan executor was not root-owned.",[]);if(r!=="serial"&&r!=="parallel_wave"&&r!=="continuous_dag"&&r!=="manual")return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop execution plan mode was invalid.",[]);const o=e.version===3&&r==="continuous_dag";if(!Array.isArray(e.storyIds)||!o&&a.length===0||a.length!==e.storyIds.length||a.some(i=>!G(i))||new Set(a).size!==a.length)return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop execution plan story selection was invalid or ambiguous.",[]);if(!t||t.rootOwnsLoop!==!0||t.childPromptKind==="per_story_branchless_preparation_only"&&!o||Object.prototype.hasOwnProperty.call(t,"childExecutionBoundary")&&!o||t.childPromptKind!=="per_story_yolo_only"&&t.childPromptKind!=="per_story_branchless_preparation_only"&&!(t.childPromptKind==="none"&&(r==="serial"&&t.childTaskDelegation==="not_required"||r==="parallel_wave"&&e.executor==="root_agent"&&t.childTaskDelegation==="forbidden"))||t.allowOuterYoloopInChild!==!1||t.allowMetaTaskPromptInChild!==!1)return R(p.YOLOOP_ISOLATION_VIOLATION,"Headless yoloop rejected an execution plan that did not preserve root-owned child isolation.",[h("isolationPolicy","prompt_body","value-denied")]);const s=Array.isArray(e.skippedStories)?e.skippedStories:[];for(const i of s){if(!_(i)||typeof i.storyId!="string"||!G(i.storyId)||typeof i.reason!="string")return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop skipped-story evidence was malformed.",[]);if(a.includes(i.storyId))return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop selected a story that server evidence marked skipped.",[])}if(o){const i=_(e.scheduler)?e.scheduler:void 0,E=Array.isArray(i?.nodes)?i.nodes.filter(_):[],j=w(i?.readyStoryIds),K=w(i?.runningStoryIds),z=w(e.promptTemplates),se=_(e.dependencyBasis)?e.dependencyBasis:void 0,X=_(e.readinessBasis)?e.readinessBasis:void 0,P=typeof i?.graphRevision=="string"?i.graphRevision:"",b=typeof e.executionBranch=="string"?e.executionBranch:"",M=E.map(C=>typeof C.storyId=="string"?C.storyId:""),S=E.find(C=>{const $=typeof C.storyId=="string"?C.storyId:"",ee=typeof C.promptTemplate=="string"?C.promptTemplate:"",ie=Array.isArray(C.writeSet)?w(C.writeSet):[];return!G($)||ee!==`*yolo @docs/stories/${$}.story.md branchless-preparation`||typeof C.dispatchId!="string"||!/^[a-f0-9]{64}$/.test(C.dispatchId)||typeof C.idempotencyKey!="string"||!/^[a-f0-9]{64}$/.test(C.idempotencyKey)||C.dependencyBasis!=="verified"||!Array.isArray(C.dependencies)||w(C.dependencies).length!==C.dependencies.length||!Array.isArray(C.writeSet)||ie.length===0||ie.length!==C.writeSet.length||!Ne(C.childExecutionAuthority,{storyId:$,invocationPrompt:ee,authorizedWriteSet:ie})});return e.executor!=="root_agent_with_child_tasks"||e.legacyConcurrencyIgnored!==!0||Object.prototype.hasOwnProperty.call(e,"maxConcurrency")||Object.prototype.hasOwnProperty.call(e,"maxParallel")||t?.rootOwnedScheduling!=="continuous_dag_allowed"||t?.childPromptKind!=="per_story_branchless_preparation_only"||t?.childExecutionBoundary!=="filesystem_only"||t?.childTaskDelegation!=="allowed"||t?.maxDepth!==1||t?.childWorkspace!=="branchless_sandbox"||t?.epicCheckout!=="current_checkout"||t?.workspaceLifecycle!=="user_managed"||t?.integrationOwner!=="root_agent"||!i||i.schemaVersion!==1||i.strategy!=="continuous-event-driven-dag"||i.logicalConcurrency!=="ready-set"||i.capacityPolicy!=="backpressure-only"||i.rootOwnsLoop!==!0||i.maxDepth!==1||!/^[a-f0-9]{64}$/.test(P)||!Qt(b)||new Set(M).size!==M.length||M.some(C=>!G(C))||j.some(C=>!M.includes(C))||K.some(C=>!M.includes(C)||j.includes(C))||!Z(a,j)||z.length!==a.length||z.some((C,$)=>C!==`*yolo @docs/stories/${a[$]}.story.md branchless-preparation`)||!se||se.source!=="state_snapshot"||!X||X.source!=="ready_wave"||!Z(w(X.selectedStoryIds),a)||S?R(p.YOLOOP_METADATA_INVALID,"Headless yoloop rejected an invalid continuous DAG execution plan.",[]):{ok:!0,mode:"continuous_dag",serverMaxConcurrency:a.length,parallelAuthorized:!0,continuous:!0}}if(e.version===2){const i=at(e);return i.ok?{ok:!0,mode:"parallel_wave",serverMaxConcurrency:i.childExecutionConcurrency,parallelAuthorized:!1,continuous:!1}:R(p.YOLOOP_METADATA_INVALID,"Headless yoloop rejected an unsafe phased execution plan.",[])}if(r!=="parallel_wave")return{ok:!0,mode:r,serverMaxConcurrency:1,parallelAuthorized:!1,continuous:!1};const n=e.maxConcurrency,c=e.maxParallel,d=_(e.dependencyBasis)?e.dependencyBasis:void 0,l=_(e.readinessBasis)?e.readinessBasis:void 0,y=Array.isArray(e.parallelWaves)?e.parallelWaves:[],f=y.length===1&&_(y[0])?y[0]:void 0;if(t.rootOwnedScheduling!=="parallel_wave_allowed"||!Number.isInteger(n)||typeof n!="number"||n<2||n>a.length||!Number.isInteger(c)||c!==n||!d||d.source!=="state_snapshot"||!Z(w(d.storyIds),a)||!l||l.source!=="ready_wave"||!Z(w(l.selectedStoryIds),a)||!f||!Z(w(f.storyIds),a)||f.maxConcurrency!==n)return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop parallel plan lacked consistent bounded authorization and readiness evidence.",[]);const u=w(f.promptTemplates);if(u.length!==a.length||new Set(u).size!==u.length)return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop parallel wave prompts were incomplete or ambiguous.",[]);const k=(Array.isArray(f.proofSummaries)?f.proofSummaries:Array.isArray(e.proofSummaries)?e.proofSummaries:[]).find(i=>_(i)&&Z(w(i.storyIds),a));return!_(k)||k.dependencyClosure!=="resolved"||k.contractOwnership!=="non_overlapping"||k.validationSurfaces!=="compatible"?R(p.YOLOOP_METADATA_INVALID,"Headless yoloop parallel plan lacked resolved independence proof.",[]):s.find(i=>_(i)&&typeof i.reason=="string"&&/(cycle|unresolved|ambiguous)/i.test(i.reason))?R(p.YOLOOP_METADATA_INVALID,"Headless yoloop parallel plan contained unresolved dependency evidence.",[]):{ok:!0,mode:"parallel_wave",serverMaxConcurrency:n,parallelAuthorized:!0,continuous:!1}}function Ne(e,r){if(!_(e)||!_(e.artifact))return;const t=e.artifact,a=Array.isArray(e.authorizedWriteSet)?w(e.authorizedWriteSet):[];if(Object.keys(e).sort().join("\0")!==["artifact","authorizedWriteSet","effectScope","invocationPrompt","kind","lifecycleAuthority","publicSafe","schemaVersion","storyId"].sort().join("\0")||Object.keys(t).sort().join("\0")!==["content","contentBinding","kind","path","schemaVersion"].sort().join("\0")||e.schemaVersion!==1||e.kind!=="branchless_story_preparation"||e.storyId!==r.storyId||e.invocationPrompt!==r.invocationPrompt||!Array.isArray(e.authorizedWriteSet)||a.length!==e.authorizedWriteSet.length||a.some(s=>pt(s)!==s)||!Kt(a,r.authorizedWriteSet)||e.effectScope!=="filesystem_only"||e.lifecycleAuthority!=="root_only"||e.publicSafe!==!0||t.schemaVersion!==1||t.kind!=="branchless_root_bound_artifact"||typeof t.path!="string"||!a.includes(t.path)||typeof t.content!="string"||t.content.length===0||t.content.length>4096||typeof t.contentBinding!="string"||!/^[a-f0-9]{64}$/.test(t.contentBinding))return;const o=je("sha256").update(["branchless-root-bound-artifact-v1",r.storyId,r.invocationPrompt,...a,"filesystem_only","root_only",t.path,t.content].join("\0")).digest("hex");if(t.contentBinding===o)return e}function Kt(e,r){return e.length===r.length&&e.every((t,a)=>t===r[a])}function Ut(e){const r=[];r.push(...w(e.promptTemplates));for(const t of Array.isArray(e.serialSteps)?e.serialSteps:[])_(t)&&typeof t.promptTemplate=="string"&&r.push(t.promptTemplate);for(const t of Array.isArray(e.parallelWaves)?e.parallelWaves:[])_(t)&&r.push(...w(t.promptTemplates));return r}function J(e,r,t){if(Te(e))return R(p.YOLOOP_ISOLATION_VIOLATION,"Headless yoloop rejected an unsafe child prompt shape.",[h("promptTemplate","prompt_body",x(e))]);if(!ye.test(e))return R(p.YOLOOP_METADATA_INVALID,"Headless yoloop child prompt did not match the canonical per-story yolo shape.",[h("promptTemplate","prompt_body",x(e))]);const a=_t.test(e),o=e.replace(/^\*yolo @/,"").replace(/ branchless-preparation$/,""),s=tr(o);return!ht.test(o)||!G(s)||!s.startsWith(`${r}.`)?R(p.YOLOOP_ISOLATION_VIOLATION,"Headless yoloop rejected a child prompt outside the targeted public epic.",[h("storyId","prompt_body",x(s))]):{ok:!0,prompt:{storyId:s,targetRef:o,commandRef:e,source:t,...a?{preparationOnly:!0}:{}}}}function zt(e){const r=e?.epicTerminalGitDirective;if(!(!_(r)||r.schemaVersion!==1||r.kind!=="epic_terminal_git"||typeof r.epicId!="string"||typeof r.executionBranch!="string"||typeof r.originBranch!="string"||typeof r.expectedExecutionHeadSha!="string"||!Array.isArray(r.storyCheckpointIds)||!_(r.localGates)||r.localGates.passed!==!0||!Array.isArray(r.localGates.receiptRefs)||!_(r.reconcile)||typeof r.idempotencyKey!="string"||r.publicSafe!==!0))return r}function $t(e){const r=e?.epicGitReconciliationDirective;if(!(!_(r)||r.schemaVersion!==1||r.kind!=="epic_git_reconciliation"||typeof r.epicId!="string"||typeof r.executionBranch!="string"||typeof r.originBranch!="string"||!["start","resume","audit"].includes(String(r.lifecycleBoundary))||typeof r.dryRun!="boolean"||typeof r.idempotencyKey!="string"||r.publicSafe!==!0))return r}function Yt(e){if(!e||!_(e))return{ok:!1,reasonCode:p.YOLOOP_METADATA_INVALID,publicSummary:"Headless yoloop root invocation did not return public metadata.",redactionSummary:[]};const r=_(e.yoloopContinuationDecision)?e.yoloopContinuationDecision:void 0,t=typeof r?.outcome=="string"?r.outcome:void 0,a=t==="queue_exhausted"||e.yoloopComplete===!0,o=e.yoloopAborted===!0,s=mt(e.releaseBlocked),n=t==="selected"&&r?.replay===!0;return t&&!["selected","queue_exhausted","blocked","cycle","invalid","no_progress"].includes(t)?{ok:!1,reasonCode:p.YOLOOP_METADATA_INVALID,publicSummary:"Headless yoloop rejected an unknown continuation outcome.",redactionSummary:[]}:t==="queue_exhausted"&&r?.terminalSuccess!==!0?{ok:!1,reasonCode:p.YOLOOP_METADATA_INVALID,publicSummary:"Headless yoloop rejected inconsistent queue exhaustion metadata.",redactionSummary:[]}:a&&o?{ok:!1,reasonCode:p.YOLOOP_METADATA_INVALID,publicSummary:"Headless yoloop metadata reported mutually exclusive terminal states.",redactionSummary:[h("yoloopTerminal","unsafe_key","value-denied")]}:(e.yoloopReleaseBlocked===!0||e.terminalClass==="release-blocked"||e.releaseBlocked!==void 0)&&(!s||e.yoloopReleaseBlocked!==!0||e.terminalClass!=="release-blocked"||a||o||t!==void 0)?{ok:!1,reasonCode:p.YOLOOP_METADATA_INVALID,publicSummary:"Headless yoloop rejected inconsistent release-blocked terminal metadata.",redactionSummary:[]}:{ok:!0,complete:a,aborted:o,...s?{releaseBlocked:s}:{},outcome:t,replay:n}}function Ft(e){if(!e)return;const r=e.abortReason;if(r!=="YOLOOP_PER_RUN_CAP_REACHED"&&r!=="YOLOOP_SESSION_TIMEOUT")return;const t=e.yoloopResumableBoundary,a=/^[A-Za-z0-9._:-]{1,128}$/;if(!(!_(t)||t.schemaVersion!=="YoloopResumableBoundary/1.0"||t.resumable!==!0||t.reason!==r||t.publicSafe!==!0||typeof t.coolDownUntil!="string"||!Number.isFinite(Date.parse(t.coolDownUntil))||!Number.isSafeInteger(t.retryAfterMs)||t.retryAfterMs<0||typeof t.operationId!="string"||!a.test(t.operationId)||!_(t.receipt)||t.receipt.schemaVersion!=="YoloopSessionRolloverReceipt/1.0"||typeof t.receipt.runId!="string"||!a.test(t.receipt.runId)||t.receipt.operationId!==t.operationId||typeof t.receipt.idempotencyKey!="string"||!a.test(t.receipt.idempotencyKey)||typeof t.receipt.payloadHash!="string"||!/^[a-f0-9]{64}$/.test(t.receipt.payloadHash)||t.receipt.coolDownUntil!==t.coolDownUntil||!Number.isSafeInteger(t.receipt.revision)||t.receipt.revision<0||t.receipt.snapshotHash!==null&&(typeof t.receipt.snapshotHash!="string"||!/^[a-f0-9]{64}$/.test(t.receipt.snapshotHash))||t.receipt.status!=="exhausted"||t.receipt.publicSafe!==!0))return{coolDownUntil:t.coolDownUntil,reason:r}}function Vt(e){const r=`${e.rootAttempt.execution_id}:${e.child.graphRevision??"legacy"}:${e.child.storyId}`,t=e.child.dispatchId??q("child-op",`${r}:${e.iteration}`),a=e.child.idempotencyKey??q("child-idem",`${r}:${e.iteration}`);return{schemaVersion:1,contractVersion:"continuity-v1",kind:"run_yolo",commandClass:e.rootAttempt.command_class==="goal-tick"?"goal-tick":"loop-tick",jobId:e.rootAttempt.job_id,operationId:t,idempotencyKey:a,targetKind:"story",targetRef:e.child.targetRef,commandRef:e.child.commandRef,...e.child.preparationOnly?{executionMode:"branchless_child_preparation"}:{},storyId:e.child.storyId,runtime:{runtimeId:e.runtimeId,...e.modelId?{modelId:e.modelId}:{},source:e.runtimeSource??"explicit",reasonCode:e.runtimeSource==="fallback"?p.RUNTIME_FALLBACK:p.RUNTIME_EXPLICIT,publicSafe:!0},publicSummary:`Root-owned yoloop delegated public story ${e.child.storyId}.`,reasonCode:p.OK,metadata:{governanceSource:"delegated-subagent",parentAttemptId:e.rootAttempt.attempt_id,parentExecutionId:e.rootAttempt.execution_id,iteration:e.iteration,...e.child.dispatchId?{dispatchId:e.child.dispatchId}:{},...e.child.graphRevision?{graphRevision:e.child.graphRevision}:{},...e.child.writeSet?{writeSet:e.child.writeSet}:{},...e.child.executionBranch?{executionBranch:e.child.executionBranch}:{},...e.child.graphRevision?{childWorkspace:"branchless_sandbox",epicCheckout:"current_checkout",workspaceLifecycle:"user_managed",integrationOwner:"root_agent",maxDepth:1}:{},publicSafe:!0},attempts:[],redactionSummary:[h("prompt","prompt_body",x(e.child.commandRef))],publicSafe:!0}}function _e(e,r,t){const a=Be(t.hashes),o=t.workerPoolSummary??he(),s=Be({iterations:t.counts.iterations,childCount:t.counts.childCount,succeededChildCount:t.counts.succeededChildCount,failedChildCount:t.counts.failedChildCount,skippedChildCount:t.counts.skippedChildCount,metadataCompleteCount:t.counts.metadataCompleteCount,metadataAbortedCount:t.counts.metadataAbortedCount,serverMaxConcurrency:o.serverMaxConcurrency,localCap:o.localCap,queueCap:o.queueCap,availableLeases:o.availableLeases,effectiveConcurrency:o.effectiveConcurrency,peakConcurrency:o.peakConcurrency,pendingChildCount:o.pendingChildCount,startedChildCount:o.startedChildCount,completedChildCount:o.completedChildCount,backpressurePauseCount:o.backpressurePauseCount}),n={schemaVersion:1,contractVersion:"continuity-v1",attemptId:r.attempt_id,executionId:r.execution_id,jobId:r.job_id,directiveHash:r.directive_hash,status:t.status,reasonCode:t.reasonCode,storyIds:t.childStoryIds.slice(0,50),counts:s,hashes:a,...t.reasonCode===Oe.BYPASS_BLOCKED?{governanceEvidence:Fe}:{},reasonCodes:V([t.reasonCode,...o.reasonCodes,...t.stateTransitions]),publicSummary:pe(t.publicSummary),...t.terminalClass?{terminalClass:t.terminalClass}:{},...t.releaseBlocked?{releaseBlocked:t.releaseBlocked}:{}},c=Re(r.metadata_json,{autonomousKind:"run_yoloop",jobId:r.job_id,targetKind:"epic",targetRef:r.target_ref}),d=c.ok?Ee(c.envelope,n):n;return e.completeHeadlessExecutionAttempt({attemptId:r.attempt_id,executionId:r.execution_id,jobId:r.job_id,leaseId:t.leaseId,runnerId:t.runnerId,status:t.status,completedAt:t.completedAt,durationMs:t.durationMs,reasonCode:t.reasonCode,publicSummary:pe(t.publicSummary),notBeforeAt:t.notBeforeAt,retryCount:t.retryCount,counts:s,hashes:a,redactionSummary:t.redactionSummary,relativePaths:V([r.target_ref,...t.relativePaths]),metadata:d}),e.recordHeadlessExecutionReceipt({receiptId:`receipt-${q("headless-yoloop",`${r.attempt_id}-${t.status}`)}`,attemptId:r.attempt_id,executionId:r.execution_id,jobId:r.job_id,status:t.receiptStatus,reasonCode:t.reasonCode,createdAt:t.completedAt,operationId:`${r.execution_id}:${t.status}:receipt`,idempotencyKey:`${r.directive_hash}:${t.status}:receipt`,counts:s,hashes:a,redactionSummary:t.redactionSummary,relativePaths:V([r.target_ref,...t.relativePaths]),metadata:d}),e.recordHeadlessExecutionSummary({eventId:`event-${q("headless-yoloop-summary",`${r.attempt_id}-${t.status}`)}`,attemptId:r.attempt_id,executionId:r.execution_id,jobId:r.job_id,status:t.status,runtimeId:t.runtimeId,modelId:t.modelId,publicSummary:pe(t.publicSummary),reasonCode:t.reasonCode,createdAt:t.completedAt,durationMs:t.durationMs,counts:s,hashes:a,redactionSummary:t.redactionSummary,relativePaths:V([r.target_ref,...t.relativePaths]),metadata:d}),{attemptId:r.attempt_id,executionId:r.execution_id,jobId:r.job_id,status:t.status,outcome:t.receiptStatus,reasonCode:t.reasonCode,timestamp:t.completedAt,childStoryIds:t.childStoryIds,aggregateCounts:t.counts,workerPoolSummary:o,redactionSummary:t.redactionSummary,...t.terminalClass?{terminalClass:t.terminalClass}:{},...t.releaseBlocked?{releaseBlocked:t.releaseBlocked}:{},publicSafe:!0}}function qt(e,r){return{attemptId:e.attempt_id,executionId:e.execution_id,jobId:e.job_id,status:r.status,outcome:r.receiptStatus,reasonCode:r.reasonCode,timestamp:r.timestamp,childStoryIds:[],aggregateCounts:Ie(),workerPoolSummary:he(),redactionSummary:[],publicSafe:!0}}function Wt(e,r,t,a,o){if(!r.retryable)return{retry:!1};if(we.has(r.reasonCode))return{retry:!0,retryCount:e.retry_count,notBeforeAt:He(Se(o,a),r.retryNotBeforeAt)};const s=e.retry_count+1;if(s>=Math.max(1,e.max_attempts||t))return{retry:!1,retryCount:s};const n=Math.min(8,2**Math.max(0,e.retry_count));return{retry:!0,retryCount:s,notBeforeAt:He(Se(o,a*n),r.retryNotBeforeAt)}}function O(e){return{status:e.status,receiptStatus:e.receiptStatus,reasonCode:e.reasonCode,publicSummary:e.publicSummary,retryable:e.retryable,...e.retryNotBeforeAt?{retryNotBeforeAt:e.retryNotBeforeAt}:{},durationMs:Math.max(0,Date.now()-e.startedAt),counts:e.counts,workerPoolSummary:e.workerPoolSummary??he(),hashes:e.hashes,redactionSummary:e.redactions.slice(0,50),relativePaths:V(e.relativePaths).slice(0,50),childStoryIds:V(e.childStoryIds).slice(0,50),stateTransitions:V(e.stateTransitions),...e.terminalClass?{terminalClass:e.terminalClass}:{},...e.releaseBlocked?{releaseBlocked:e.releaseBlocked}:{}}}function Gt(e,r){if(e===void 0)return;if(!_(e)){r.push(h("runtime","unsafe_key","value-denied"));return}for(const s of Object.keys(e))(!gt.has(s)||oe.test(s))&&r.push(h(`runtime.${s}`,Q(s),"key-denied"));e.publicSafe!==!0&&r.push(h("runtime.publicSafe","unsafe_key","value-denied"));const t=B(e,"runtimeId"),a=B(e,"modelId"),o=B(e,"source");if(t&&(!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,79}$/.test(t)||D.test(t)||W.test(t))&&r.push(h("runtime.runtimeId","unsafe_key","value-denied")),a&&(!/^[A-Za-z0-9][A-Za-z0-9._:+/-]{0,119}$/.test(a)||D.test(a)||W.test(a))&&r.push(h("runtime.modelId","unsafe_key","value-denied")),o!==void 0&&o!=="explicit"&&o!=="origin"&&o!=="default"&&o!=="fallback"&&o!=="unspecified"&&r.push(h("runtime.source","unsafe_key","value-denied")),e.reasonCode!==void 0&&(typeof e.reasonCode!="string"||D.test(e.reasonCode))&&r.push(h("runtime.reasonCode","unsafe_key","value-denied")),e.publicSafe===!0)return{...t?{runtimeId:t}:{},...a?{modelId:a}:{},...o==="explicit"||o==="origin"||o==="default"||o==="fallback"||o==="unspecified"?{source:o}:{},...typeof e.reasonCode=="string"?{reasonCode:e.reasonCode}:{},publicSafe:!0}}function Xt(e){const r=Array.isArray(e)?e:e?[e]:[],t=[];for(const a of r){const o=a.continuityExecutionDirectives;Array.isArray(o)&&t.push(...o)}return t}function Zt(e){return x(Ce({kind:e.kind,commandClass:e.commandClass,jobId:e.jobId,targetRef:e.targetRef,commandRef:e.commandRef,epicId:e.epicId,runtime:e.runtime}))}function Ce(e){return Array.isArray(e)?`[${e.map(Ce).join(",")}]`:_(e)?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${Ce(e[r])}`).join(",")}}`:JSON.stringify(e)}function le(e,r,t){if(typeof e=="string"){(D.test(e)||W.test(e))&&t.push(h(r,Q(r),"value-denied"));return}if(!(e==null||typeof e=="number"||typeof e=="boolean")){if(Array.isArray(e)){e.forEach((a,o)=>le(a,`${r}.${o}`,t));return}if(_(e)){for(const[a,o]of Object.entries(e)){const s=`${r}.${a}`;oe.test(a)&&t.push(h(s,Q(a),"key-denied")),le(o,s,t)}return}t.push(h(r,"unsafe_key","value-denied"))}}function Jt(e,r){if(e===void 0)return[];if(!Array.isArray(e))return r.push(h("redactionSummary","unsafe_key","value-denied")),[];const t=[];for(const[a,o]of e.entries()){if(!_(o)||o.publicSafe!==!0){r.push(h(`redactionSummary.${a}`,"unsafe_key","value-denied"));continue}const s=B(o,"field"),n=B(o,"reason"),c=B(o,"evidence");if(!s||!n||!c||D.test(s)||D.test(n)||D.test(c)){r.push(h(`redactionSummary.${a}`,"unsafe_key","value-denied"));continue}t.push({field:s,reason:n,evidence:c,publicSafe:!0})}return t}function R(e,r,t){return{ok:!1,reasonCode:e,publicSummary:r,redactionSummary:t}}function w(e){return Array.isArray(e)?e.filter(r=>typeof r=="string"):[]}function Qt(e){return e.length>0&&e.length<=240&&!e.startsWith("-")&&!e.includes("..")&&!e.includes("\\")&&/^[A-Za-z0-9._/-]+$/.test(e)}function Z(e,r){return e.length===r.length&&new Set(e).size===e.length&&e.every(t=>r.includes(t))}function er(e){return fe.test(e.target_ref)?[e.target_ref]:[]}function Be(e){if(!e)return;const r={};for(const[t,a]of Object.entries(e))!/^[A-Za-z0-9_.:-]{1,80}$/.test(t)||oe.test(t)||D.test(t)||typeof a=="string"&&D.test(a)||(r[t]=a);return Object.keys(r).length>0?r:void 0}function Ie(){return A(0,0,0,0,0,0,0)}function A(e,r,t,a,o,s,n){return{iterations:e,childCount:r,succeededChildCount:t,failedChildCount:a,skippedChildCount:o,metadataCompleteCount:s,metadataAbortedCount:n}}function tr(e){return e.replace(/^docs\/stories\//,"").replace(/\.story\.md$/,"")}function ne(e){return e.replace(/^docs\/epics\/epic-/,"").replace(/\.md$/,"")}function G(e){return/^[A-Za-z0-9][A-Za-z0-9_-]*\.\d+[A-Za-z0-9_-]*$/.test(e)&&!D.test(e)&&!W.test(e)}function rr(e){if(e==="explicit"||e==="origin"||e==="default"||e==="fallback")return e}function or(e){if(e==="explicit"||e==="origin"||e==="default"||e==="fallback"||e==="unspecified")return e}function Q(e){return/prompt|commandRef/i.test(e)?"prompt_body":/std(?:out|err)|raw|log|transcript|stack/i.test(e)?"raw_log":/url/i.test(e)?"private_url":/path|cwd|argv|args|shell|command|binary|executable/i.test(e)?"executable_path":/secret|token|password|authorization|api[_-]?key|license/i.test(e)?"secret_or_pii":"unsafe_key"}function B(e,r){return typeof e[r]=="string"?e[r]:void 0}function be(e){return!!(e&&It.test(e)&&!D.test(e)&&!W.test(e))}function _(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function ar(e,r){return q(e,`${r}-${Date.now()}-${Ke(4).toString("hex")}`)}function Se(e,r){const t=Date.parse(e);return new Date((Number.isFinite(t)?t:Date.now())+r).toISOString()}function He(e,r){const t=Date.parse(e),a=r?Date.parse(r):Number.NaN;return Number.isFinite(a)?Number.isFinite(t)?a>t?r:e:r:e}function F(e,r,t){return Number.isFinite(e)?Math.max(r,Math.min(t,Math.floor(e))):r}function V(e){return Array.from(new Set(e))}function nr(e,r){const t=new Set,a=[];for(const o of e){const s=r(o);t.has(s)||(t.add(s),a.push(o))}return a}export{me as DEFAULT_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP,yt as DEFAULT_HEADLESS_YOLOOP_MAX_DURATION_MS,ft as DEFAULT_HEADLESS_YOLOOP_MAX_ITERATIONS,ve as MAX_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP,Ar as RUN_YOLOOP_DRIVER_STATES,vt as defaultYoloopRootInvoker,kr as isCanonicalDelegatedStoryPrompt,Pe as resolveDefaultHeadlessYoloopLocalConcurrencyCap,Or as runYoloopExecutionPhase};
+    `], { cwd: boundary.projectRoot, stdio: ['ignore', 'pipe', 'pipe', 'ipc'], windowsHide: true });
+        let received;
+        let bytes = 0;
+        let invalid = false;
+        const timer = setTimeout(() => { invalid = true; child.kill(); }, boundary.timeoutMs);
+        const countOutput = (chunk) => {
+            bytes += chunk.length;
+            if (bytes > 32 * 1024 * 1024) {
+                invalid = true;
+                child.kill();
+            }
+        };
+        child.stdout?.on('data', countOutput);
+        child.stderr?.on('data', countOutput);
+        child.on('message', (value) => {
+            if (received || !isRecord(value) || typeof value.success !== 'boolean'
+                || Buffer.byteLength(JSON.stringify(value)) > 32 * 1024 * 1024) {
+                invalid = true;
+                child.kill();
+                return;
+            }
+            received = value;
+        });
+        const failed = { success: false, errorCode: 'headless-root-invoke-failed',
+            error: 'The isolated root metadata invocation did not complete.', exitCode: 1 };
+        child.on('error', () => { invalid = true; });
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            resolveResult(code === 0 && !invalid && received ? received : failed);
+        });
+        child.send({ modulePath, options }, (error) => { if (error) {
+            invalid = true;
+            child.kill();
+        } });
+    });
+}
+export async function defaultYoloopRootInvoker(input, invokeTransport = defaultIsolatedYoloopRootInvokeTransport) {
+    const startedAt = Date.now();
+    const options = {
+        args: input.args,
+        projectRoot: input.projectRoot,
+        format: 'json',
+        platformTarget: 'runner',
+        serverUrl: input.serverUrl,
+        strictReadOnly: input.strictReadOnly,
+    };
+    const result = await invokeTransport(options, {
+        projectRoot: input.projectRoot,
+        timeoutMs: input.timeoutMs,
+    });
+    return {
+        success: result.success,
+        instructions: result.instructions,
+        metadata: result.metadata,
+        error: result.error,
+        errorCode: result.errorCode,
+        exitCode: result.exitCode,
+        durationMs: Date.now() - startedAt,
+        publicSafe: true,
+    };
+}
+export async function runYoloopExecutionPhase(options) {
+    const registry = options.adapterRegistry ?? createDefaultHeadlessAdapterRegistry();
+    const limit = boundedInteger(options.limit ?? DEFAULT_HEADLESS_EXECUTION_LIMIT, 1, 10);
+    const leaseMs = boundedInteger(options.leaseMs ?? DEFAULT_HEADLESS_EXECUTION_LEASE_MS, 1_000, 60 * 60 * 1000);
+    const staleLeaseAfterMs = boundedInteger(options.staleLeaseAfterMs ?? DEFAULT_HEADLESS_EXECUTION_STALE_LEASE_AFTER_MS, 0, 24 * 60 * 60 * 1000);
+    const maxAttempts = boundedInteger(options.maxAttempts ?? DEFAULT_HEADLESS_EXECUTION_MAX_ATTEMPTS, 1, 10);
+    const localConcurrencyCap = boundedInteger(options.localConcurrencyCap ?? resolveDefaultHeadlessYoloopLocalConcurrencyCap(), 1, MAX_HEADLESS_YOLOOP_LOCAL_CONCURRENCY_CAP);
+    const reasonCodes = [];
+    const receipts = [];
+    const nowIso = options.now();
+    const enqueueResult = enqueueRunYoloopExecutionDirectives({
+        store: options.store,
+        metadata: options.metadata,
+        nowIso,
+        maxAttempts,
+        queueCap: options.queueCap,
+    });
+    reasonCodes.push(...enqueueResult.reasonCodes);
+    const recovered = options.store.recoverStaleHeadlessExecutionAttempts({
+        nowIso,
+        staleAfterMs: staleLeaseAfterMs,
+        limit: limit * 2,
+    });
+    if (recovered.recoveredAttemptIds.length > 0) {
+        reasonCodes.push(HEADLESS_REASON_CODES.EXECUTION_BACKOFF);
+        if (recovered.failedAttemptIds.length > 0)
+            reasonCodes.push(HEADLESS_REASON_CODES.EXECUTION_TIMEOUT);
+    }
+    const dueAttempts = options.store
+        .listDueHeadlessExecutionAttempts({ nowIso: options.now(), limit: Math.max(limit * 5, 10) })
+        .filter((attempt) => attempt.directive_kind === 'run_yoloop')
+        .slice(0, limit);
+    for (const attempt of dueAttempts) {
+        const receipt = await processRunYoloopAttempt({
+            store: options.store,
+            projectRoot: options.projectRoot,
+            runnerId: options.runnerId,
+            attempt,
+            registry,
+            now: options.now,
+            leaseMs,
+            timeoutMs: boundedInteger(options.timeoutMs ?? DEFAULT_HEADLESS_EXECUTION_TIMEOUT_MS, 1_000, 30 * 60 * 1000),
+            backoffMs: boundedInteger(options.backoffMs ?? DEFAULT_HEADLESS_EXECUTION_BACKOFF_MS, 1_000, 60 * 60 * 1000),
+            maxAttempts,
+            maxIterations: boundedInteger(options.maxIterations ?? DEFAULT_HEADLESS_YOLOOP_MAX_ITERATIONS, 1, 100),
+            maxDurationMs: boundedInteger(options.maxDurationMs ?? DEFAULT_HEADLESS_YOLOOP_MAX_DURATION_MS, 1_000, 2 * 60 * 60 * 1000),
+            localConcurrencyCap,
+            queueCap: options.queueCap,
+            adapterOptions: options.adapterOptions,
+            runtimeDefaults: options.runtimeDefaults,
+            runtimeFallback: options.runtimeFallback,
+            yoloopInvoker: options.yoloopInvoker ?? defaultYoloopRootInvoker,
+            serverUrl: options.serverUrl,
+            idFactory: options.idFactory ?? defaultHeadlessIdFactory,
+            continuousWorkspaceManager: options.continuousWorkspaceManager ?? createBranchlessContinuousStoryWorkspaceManager(),
+            terminalGitAdapter: options.terminalGitAdapter ?? createCliEpicTerminalGitAdapter(options.projectRoot),
+        });
+        receipts.push(receipt);
+        reasonCodes.push(receipt.reasonCode, ...receipt.workerPoolSummary.reasonCodes);
+    }
+    return {
+        ok: receipts.every((receipt) => receipt.outcome !== 'failed') && enqueueResult.rejectedCount === 0,
+        enqueuedAttemptCount: enqueueResult.enqueuedCount,
+        dueAttemptCount: dueAttempts.length,
+        processedAttemptCount: receipts.filter((receipt) => receipt.outcome !== 'ignored').length,
+        recoveredAttemptIds: recovered.recoveredAttemptIds,
+        receipts,
+        reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [HEADLESS_REASON_CODES.OK]),
+        publicSafe: true,
+    };
+}
+function enqueueRunYoloopExecutionDirectives(input) {
+    let enqueuedCount = 0;
+    let rejectedCount = 0;
+    const reasonCodes = [];
+    for (const candidate of extractExecutionDirectiveCandidates(input.metadata)) {
+        if (!isRecord(candidate) || candidate.kind !== 'run_yoloop')
+            continue;
+        const validation = validateRunYoloopExecutionDirective(candidate);
+        if (!validation.ok) {
+            rejectedCount += 1;
+            reasonCodes.push(validation.reasonCode);
+            continue;
+        }
+        const directive = validation.directive;
+        if (!input.store.jobExists(directive.jobId)) {
+            rejectedCount += 1;
+            reasonCodes.push(AUTONOMOUS_GOVERNANCE_REASON_CODES.BYPASS_BLOCKED);
+            continue;
+        }
+        const directiveHash = hashDirective(directive);
+        if (input.store.hasCompletedHeadlessExecutionDirectiveHash(directiveHash)) {
+            reasonCodes.push(HEADLESS_REASON_CODES.EXECUTION_COMPLETED);
+            continue;
+        }
+        const governanceEnvelope = buildAutonomousGovernanceEnvelope({
+            autonomousKind: 'run_yoloop',
+            source: 'headless-run-yoloop',
+            targetKind: 'epic',
+            targetRef: directive.targetRef,
+            epicId: directive.epicId ?? epicIdFromTargetRef(directive.targetRef),
+            jobId: directive.jobId,
+            operationSeed: directive.operationId,
+            commandHash: hashPublicValue(directive.commandRef),
+        });
+        const governance = recordAutonomousGovernance(input.store, governanceEnvelope, input.nowIso, { requireExistingJob: true });
+        if (!governance.ok) {
+            rejectedCount += 1;
+            reasonCodes.push(governance.reasonCode);
+            continue;
+        }
+        const attemptId = headlessExecutionEntityId('attempt', directive.idempotencyKey);
+        const executionId = headlessExecutionEntityId('exec', directive.operationId);
+        const result = input.store.enqueueHeadlessExecutionAttempt({
+            attemptId,
+            executionId,
+            jobId: directive.jobId,
+            directiveHash,
+            directiveKind: 'run_yoloop',
+            commandClass: directive.commandClass,
+            targetKind: 'epic',
+            targetRef: directive.targetRef,
+            epicId: directive.epicId ?? epicIdFromTargetRef(directive.targetRef),
+            runtimeId: directive.runtime?.runtimeId,
+            modelId: directive.runtime?.modelId,
+            runtimeSource: normalizeStoredRuntimeSource(directive.runtime?.source),
+            reasonCode: directive.reasonCode,
+            publicSummary: directive.publicSummary,
+            enqueuedAt: input.nowIso,
+            notBeforeAt: input.nowIso,
+            maxAttempts: input.maxAttempts,
+            queueCap: input.queueCap,
+            operationId: `${directive.operationId}:enqueue`,
+            idempotencyKey: directive.idempotencyKey,
+            counts: { directives: 1 },
+            hashes: { directive: directiveHash },
+            redactionSummary: directive.redactionSummary,
+            relativePaths: [directive.targetRef],
+            metadata: autonomousGovernanceMetadata(governanceEnvelope, {
+                schemaVersion: 1,
+                contractVersion: 'continuity-v1',
+                jobId: directive.jobId,
+                operationId: directive.operationId,
+                reasonCode: directive.reasonCode ?? HEADLESS_REASON_CODES.OK,
+                targetRef: directive.targetRef,
+                directiveHash,
+            }),
+        });
+        if (!result.accepted) {
+            rejectedCount += 1;
+            reasonCodes.push(result.reasonCode ?? 'queue-cap-reached');
+            continue;
+        }
+        if (result.inserted)
+            enqueuedCount += 1;
+        reasonCodes.push(HEADLESS_REASON_CODES.OK);
+    }
+    return { enqueuedCount, rejectedCount, reasonCodes: unique(reasonCodes) };
+}
+async function processRunYoloopAttempt(input) {
+    const claimedAt = input.now();
+    const leaseId = input.idFactory('lease', input.attempt.attempt_id);
+    const leaseExpiresAt = addMilliseconds(claimedAt, input.leaseMs);
+    const claim = input.store.claimHeadlessExecutionAttempt({
+        attemptId: input.attempt.attempt_id,
+        leaseId,
+        runnerId: input.runnerId,
+        claimedAt,
+        leaseExpiresAt,
+        reasonCode: HEADLESS_REASON_CODES.OK,
+    });
+    if (!claim.inserted) {
+        return emptyYoloopReceipt(input.attempt, {
+            status: input.attempt.status,
+            receiptStatus: 'ignored',
+            reasonCode: 'lease-conflict',
+            timestamp: claimedAt,
+        });
+    }
+    const duplicateCompletion = input.store.hasCompletedHeadlessExecutionDirectiveHash(input.attempt.directive_hash, input.attempt.attempt_id);
+    if (duplicateCompletion) {
+        return persistYoloopAttemptOutcome(input.store, input.attempt, {
+            leaseId,
+            runnerId: input.runnerId,
+            status: 'skipped',
+            receiptStatus: 'ignored',
+            reasonCode: HEADLESS_REASON_CODES.EXECUTION_COMPLETED,
+            publicSummary: 'Skipped duplicate run_yoloop directive because the directive hash is already completed.',
+            completedAt: input.now(),
+            counts: emptyAggregateCounts(),
+            hashes: { directive: input.attempt.directive_hash },
+            redactionSummary: [],
+            relativePaths: [input.attempt.target_ref],
+            childStoryIds: [],
+            stateTransitions: ['start', 'complete'],
+        });
+    }
+    const preparation = prepareYoloopAttemptInput(input);
+    if (!preparation.ok) {
+        return persistYoloopAttemptOutcome(input.store, input.attempt, {
+            leaseId,
+            runnerId: input.runnerId,
+            status: preparation.status,
+            receiptStatus: preparation.receiptStatus,
+            reasonCode: preparation.reasonCode,
+            publicSummary: preparation.publicSummary,
+            completedAt: input.now(),
+            counts: emptyAggregateCounts(),
+            hashes: { directive: input.attempt.directive_hash },
+            redactionSummary: preparation.redactionSummary,
+            relativePaths: safeAttemptRelativePaths(input.attempt),
+            childStoryIds: [],
+            stateTransitions: ['start'],
+        });
+    }
+    const driverResult = await executeRootOwnedYoloop({
+        ...input,
+        prepared: preparation.input,
+    });
+    const retry = retryDecision(input.attempt, driverResult, input.maxAttempts, input.backoffMs, input.now());
+    const status = retry.retry ? 'backoff' : driverResult.status;
+    const receiptStatus = retry.retry ? 'deferred' : driverResult.receiptStatus;
+    const reasonCode = retry.retry
+        ? (PUBLIC_TERMINAL_LOCK_RETRY_REASONS.has(driverResult.reasonCode)
+            || RESUMABLE_YOLOOP_BOUNDARY_REASONS.has(driverResult.reasonCode)
+            ? driverResult.reasonCode : HEADLESS_REASON_CODES.EXECUTION_BACKOFF)
+        : driverResult.reasonCode;
+    const publicSummary = retry.retry
+        ? 'Headless run_yoloop execution scheduled bounded retry after transient metadata/runtime outcome.'
+        : driverResult.publicSummary;
+    return persistYoloopAttemptOutcome(input.store, input.attempt, {
+        leaseId,
+        runnerId: input.runnerId,
+        status,
+        receiptStatus,
+        reasonCode,
+        publicSummary,
+        completedAt: input.now(),
+        durationMs: driverResult.durationMs,
+        notBeforeAt: retry.notBeforeAt,
+        retryCount: retry.retryCount,
+        counts: driverResult.counts,
+        workerPoolSummary: driverResult.workerPoolSummary,
+        hashes: { ...driverResult.hashes, directive: input.attempt.directive_hash },
+        redactionSummary: driverResult.redactionSummary,
+        relativePaths: driverResult.relativePaths,
+        childStoryIds: driverResult.childStoryIds,
+        runtimeId: preparation.input.runtimeId,
+        modelId: preparation.input.modelId,
+        runtimeSource: preparation.input.runtimeSource,
+        stateTransitions: driverResult.stateTransitions,
+        terminalClass: driverResult.terminalClass,
+        releaseBlocked: driverResult.releaseBlocked,
+    });
+}
+async function executeRootOwnedYoloop(input) {
+    const startedAt = Date.now();
+    const stateTransitions = ['start'];
+    const processedStoryIds = new Set();
+    const childStoryIds = [];
+    const childTargetRefs = [];
+    const hashes = { root: hashPublicValue(input.prepared.rootPrompt) };
+    const redactions = [redaction('rootPrompt', 'prompt_body', hashes.root)];
+    let iterations = 0;
+    let succeededChildCount = 0;
+    let failedChildCount = 0;
+    let skippedChildCount = 0;
+    let metadataCompleteCount = 0;
+    let metadataAbortedCount = 0;
+    let terminalP205Authority;
+    let lifecycleEvidencePrepared = false;
+    const workerPool = createMutableWorkerPoolSummary(input.localConcurrencyCap);
+    const continuousInFlight = new Map();
+    let continuousModeObserved = false;
+    const continuousDeferredReasons = new Map();
+    const continuousFailureReasons = new Map();
+    const recordContinuousChild = (result) => {
+        const child = result.child;
+        hashes[`child-${child.storyId.replace(/[^A-Za-z0-9_.:-]/g, '-')}`] = result.commandHash;
+        redactions.push(result.promptRedaction);
+        const receipt = result.receipt;
+        if (result.terminalFailure) {
+            if (result.deferredFailure) {
+                continuousDeferredReasons.set(child.storyId, result.terminalFailure);
+                workerPool.backpressurePauseCount += 1;
+                return;
+            }
+            continuousDeferredReasons.delete(child.storyId);
+            continuousFailureReasons.set(child.storyId, result.terminalFailure);
+            if (!processedStoryIds.has(child.storyId)) {
+                processedStoryIds.add(child.storyId);
+                childStoryIds.push(child.storyId);
+                childTargetRefs.push(child.targetRef);
+                failedChildCount += 1;
+            }
+            return;
+        }
+        if (!receipt || receipt.outcome === 'deferred') {
+            continuousDeferredReasons.set(child.storyId, result.reasonCodes.includes('queue-cap-reached')
+                ? HEADLESS_REASON_CODES.WORKER_POOL_BACKPRESSURE_PAUSED
+                : receipt?.reasonCode || HEADLESS_REASON_CODES.EXECUTION_BACKOFF);
+            if (result.reasonCodes.includes('queue-cap-reached'))
+                workerPool.backpressurePauseCount += 1;
+            return;
+        }
+        continuousDeferredReasons.delete(child.storyId);
+        if (processedStoryIds.has(child.storyId))
+            return;
+        processedStoryIds.add(child.storyId);
+        childStoryIds.push(child.storyId);
+        childTargetRefs.push(child.targetRef);
+        if (receipt.outcome === 'failed') {
+            failedChildCount += 1;
+            continuousFailureReasons.set(child.storyId, receipt.reasonCode || HEADLESS_REASON_CODES.EXECUTION_FAILED);
+        }
+        else if (receipt.outcome === 'ignored')
+            skippedChildCount += 1;
+        else
+            succeededChildCount += 1;
+    };
+    const settleOneContinuousChild = async () => {
+        const settled = await Promise.race([...continuousInFlight.entries()].map(([storyId, entry]) => entry.promise.then((result) => ({ storyId, result }))));
+        continuousInFlight.delete(settled.storyId);
+        workerPool.completedChildCount += 1;
+        workerPool.pendingChildCount = continuousInFlight.size;
+        recordContinuousChild(settled.result);
+    };
+    while (true) {
+        if (iterations >= input.maxIterations) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'failed',
+                receiptStatus: 'failed',
+                reasonCode: MAX_ITERATIONS_REASON_CODE,
+                publicSummary: 'Headless yoloop reached the bounded iteration limit before completion metadata.',
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        if (Date.now() - startedAt > input.maxDurationMs) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'failed',
+                receiptStatus: 'failed',
+                reasonCode: MAX_DURATION_REASON_CODE,
+                publicSummary: 'Headless yoloop reached the bounded duration limit before completion metadata.',
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        stateTransitions.push('metadata_parse');
+        const rootResult = await input.yoloopInvoker({
+            projectRoot: input.projectRoot,
+            args: input.prepared.rootPrompt,
+            attemptId: input.attempt.attempt_id,
+            executionId: input.attempt.execution_id,
+            jobId: input.attempt.job_id,
+            runnerId: input.runnerId,
+            iteration: iterations,
+            runtimeId: input.prepared.runtimeId,
+            ...(input.prepared.modelId ? { modelId: input.prepared.modelId } : {}),
+            timeoutMs: input.timeoutMs,
+            serverUrl: input.serverUrl,
+        });
+        if (rootResult.durationMs !== undefined)
+            hashes[`iter-${iterations}`] = hashPublicValue(String(rootResult.durationMs));
+        const metadata = rootResult.metadata;
+        const releaseBlockedTransport = rootResult.errorCode === 'YOLOOP_RELEASE_BLOCKED'
+            || metadata?.yoloopReleaseBlocked === true
+            || metadata?.terminalClass === 'release-blocked'
+            || metadata?.releaseBlocked !== undefined;
+        if (!rootResult.success && !releaseBlockedTransport) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'backoff',
+                receiptStatus: 'deferred',
+                reasonCode: HEADLESS_REASON_CODES.EXECUTION_FAILED,
+                publicSummary: 'Headless yoloop root metadata invocation failed with bounded public evidence.',
+                retryable: true,
+                startedAt,
+                counts: aggregateCounts(iterations, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        const terminal = classifyYoloopTerminalMetadata(metadata);
+        if (!terminal.ok) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'failed',
+                receiptStatus: 'failed',
+                reasonCode: terminal.reasonCode,
+                publicSummary: terminal.publicSummary,
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions: [...redactions, ...terminal.redactionSummary],
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        const resumableBoundary = extractResumableExhaustionBoundary(metadata);
+        if (terminal.aborted && resumableBoundary) {
+            while (continuousInFlight.size > 0)
+                await settleOneContinuousChild();
+            metadataAbortedCount += 1;
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'backoff',
+                receiptStatus: 'deferred',
+                reasonCode: resumableBoundary.reason === 'YOLOOP_SESSION_TIMEOUT'
+                    ? 'yoloop-session-timeout-resumable'
+                    : 'yoloop-per-run-cap-resumable',
+                publicSummary: 'Headless yoloop reached a finite run boundary and scheduled the same queue after cool-down.',
+                retryable: true,
+                retryNotBeforeAt: resumableBoundary.coolDownUntil,
+                startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        if ((terminal.releaseBlocked || terminal.aborted || terminal.complete || terminal.replay || (terminal.outcome && terminal.outcome !== 'selected' && terminal.outcome !== 'queue_exhausted'))
+            && continuousModeObserved && continuousInFlight.size > 0) {
+            await settleOneContinuousChild();
+            iterations += 1;
+            stateTransitions.push('reinvoke');
+            continue;
+        }
+        if (terminal.releaseBlocked) {
+            stateTransitions.push('release_blocked');
+            return driverResult({
+                status: 'failed',
+                receiptStatus: 'failed',
+                reasonCode: 'yoloop-release-blocked',
+                publicSummary: 'Headless yoloop stopped at a terminal release-blocked boundary without declaring success.',
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes: { ...hashes, releaseBlocked: hashPublicValue(terminal.releaseBlocked.resultId) },
+                redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+                terminalClass: 'release-blocked',
+                releaseBlocked: terminal.releaseBlocked,
+            });
+        }
+        const epicIntegration = isRecord(metadata?.epicIntegration) ? metadata.epicIntegration : undefined;
+        const integrationReasonCodes = Array.isArray(epicIntegration?.reasonCodes)
+            ? epicIntegration.reasonCodes.filter((value) => typeof value === 'string')
+            : [];
+        const lifecycleEvidenceCanRepair = terminal.aborted
+            && metadata?.abortReason === 'epic-integration-checkpoints-incomplete'
+            && epicIntegration?.required === true
+            && epicIntegration.ready === false
+            && integrationReasonCodes.length > 0
+            && integrationReasonCodes.every((reasonCode) => reasonCode === 'epic-aggregate-qa-receipt-required'
+                || reasonCode === 'epic-origin-binding-required');
+        // P223 release admission has already completed for this root invocation.
+        // Only now may the client produce the physical aggregate/origin evidence
+        // needed for the server to emit the terminal Git directive. This avoids a
+        // release-blocked request causing Git effects while preserving the
+        // pre-P223 terminal-integration convergence path.
+        if (lifecycleEvidenceCanRepair && input.terminalGitAdapter.prepareLifecycleEvidence) {
+            stateTransitions.push('lifecycle_evidence');
+            const evidence = await input.terminalGitAdapter.prepareLifecycleEvidence({
+                epicId: input.prepared.epicId,
+                nowIso: input.now(),
+            });
+            if (!evidence.ok) {
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: evidence.retryEligible ? 'backoff' : 'failed',
+                    receiptStatus: evidence.retryEligible ? 'deferred' : 'failed',
+                    reasonCode: evidence.reasonCode,
+                    publicSummary: 'Headless yoloop stopped because physical Git lifecycle evidence could not be produced safely.',
+                    retryable: evidence.retryEligible,
+                    startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                    hashes,
+                    redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                    childStoryIds,
+                    stateTransitions,
+                });
+            }
+            terminalP205Authority = evidence.p205Authority;
+            lifecycleEvidencePrepared = true;
+            iterations += 1;
+            stateTransitions.push('reinvoke');
+            continue;
+        }
+        if (terminal.aborted) {
+            metadataAbortedCount += 1;
+            stateTransitions.push('aborted');
+            return driverResult({
+                status: 'failed',
+                receiptStatus: 'failed',
+                reasonCode: JOB_ABORTED_REASON_CODE,
+                publicSummary: 'Headless yoloop stopped because public metadata reported an aborted loop.',
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        if (terminal.outcome && terminal.outcome !== 'selected' && terminal.outcome !== 'queue_exhausted') {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'failed', receiptStatus: 'failed', reasonCode: `yoloop-${terminal.outcome}`,
+                publicSummary: 'Headless yoloop stopped on a non-executable graph-first continuation outcome.',
+                retryable: false, startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+            });
+        }
+        if (terminal.replay) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'backoff', receiptStatus: 'deferred', reasonCode: 'yoloop-replay-pending',
+                publicSummary: 'Headless yoloop observed pending replay authority and did not delegate a second child.',
+                retryable: true, startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+            });
+        }
+        if (terminal.complete && continuousModeObserved
+            && continuousDeferredReasons.size > 0 && continuousFailureReasons.size === 0) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'backoff', receiptStatus: 'deferred',
+                reasonCode: [...continuousDeferredReasons.values()].sort()[0],
+                publicSummary: 'Headless yoloop rejected terminal completion while previously runnable work remained undispatched.',
+                retryable: true, startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+            });
+        }
+        if (terminal.complete && continuousModeObserved && continuousFailureReasons.size > 0) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'failed', receiptStatus: 'failed',
+                reasonCode: [...continuousFailureReasons.values()].sort()[0],
+                publicSummary: 'Headless yoloop rejected terminal completion because runnable work failed before an accepted dispatch receipt.',
+                retryable: false, startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+            });
+        }
+        // A terminal response can truthfully report queue exhaustion while also
+        // carrying the still-required physical Git integration directive. The
+        // effect must run before accepting yoloopComplete; the persisted receipt
+        // makes the next invocation converge to terminal success.
+        const terminalGitDirective = extractEpicTerminalGitDirective(metadata);
+        if (terminalGitDirective) {
+            if (!lifecycleEvidencePrepared && input.terminalGitAdapter.prepareLifecycleEvidence) {
+                stateTransitions.push('lifecycle_evidence');
+                const evidence = await input.terminalGitAdapter.prepareLifecycleEvidence({
+                    epicId: input.prepared.epicId,
+                    nowIso: input.now(),
+                });
+                if (!evidence.ok) {
+                    stateTransitions.push('backoff');
+                    return driverResult({
+                        status: evidence.retryEligible ? 'backoff' : 'failed',
+                        receiptStatus: evidence.retryEligible ? 'deferred' : 'failed',
+                        reasonCode: evidence.reasonCode,
+                        publicSummary: 'Headless yoloop stopped because physical Git lifecycle evidence could not be produced safely.',
+                        retryable: evidence.retryEligible,
+                        startedAt,
+                        counts: aggregateCounts(iterations, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                        workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                        hashes,
+                        redactions,
+                        relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                        childStoryIds,
+                        stateTransitions,
+                    });
+                }
+                terminalP205Authority = evidence.p205Authority;
+                lifecycleEvidencePrepared = true;
+            }
+            stateTransitions.push('terminal_git');
+            const lockStartedAt = new Date();
+            const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(input.projectRoot, {
+                kind: 'continuous', storyId: terminalGitDirective.epicId,
+                sessionId: `${input.runnerId}:${input.attempt.attempt_id}`,
+                idempotencyKey: terminalGitDirective.idempotencyKey,
+                persistent: false,
+                expiresAt: new Date(lockStartedAt.getTime() + Math.max(input.timeoutMs, input.maxDurationMs) + 60_000).toISOString(),
+            });
+            if (!physicalLock.ok) {
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: 'backoff', receiptStatus: 'deferred', reasonCode: physicalLock.reasonCode,
+                    publicSummary: 'Headless yoloop deferred terminal Git while another physical writer retained authority.',
+                    retryable: true, startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                });
+            }
+            let integration;
+            let released = false;
+            try {
+                integration = await executeEpicTerminalGit(terminalGitDirective, input.terminalGitAdapter, input.now, terminalP205Authority);
+            }
+            finally {
+                released = await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner)
+                    .catch(() => false);
+            }
+            if (!released) {
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: 'backoff', receiptStatus: 'deferred', reasonCode: 'git-lifecycle-integration-lock-release-failed',
+                    publicSummary: 'Headless yoloop stopped because terminal Git writer ownership could not be released safely.',
+                    retryable: true, startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                });
+            }
+            hashes[`terminal-git-${iterations}`] = hashPublicValue(`${integration.receipt.idempotencyKey}:${integration.receipt.physicalStatus}`);
+            if (!integration.ok) {
+                const retryable = integration.receipt.retryEligible;
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: retryable ? 'backoff' : 'failed',
+                    receiptStatus: retryable ? 'deferred' : 'failed',
+                    reasonCode: integration.reasonCodes[0] ?? 'epic-terminal-git-failed',
+                    publicSummary: 'Headless yoloop stopped at the epic terminal Git boundary with public-safe retry evidence.',
+                    retryable,
+                    startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                });
+            }
+            // A persisted pushed receipt may let the server render queue exhaustion,
+            // but it never lets the root accept completion without this invocation's
+            // fresh physical ancestry/provider verification. The same directive is
+            // therefore emitted on replay and this successful verification is the
+            // terminal authority for the current root run.
+            if (terminal.complete) {
+                metadataCompleteCount += 1;
+                stateTransitions.push('complete');
+                return driverResult({
+                    status: 'completed', receiptStatus: 'applied',
+                    reasonCode: HEADLESS_REASON_CODES.EXECUTION_COMPLETED,
+                    publicSummary: 'Headless yoloop completed only after fresh root-owned physical Git verification.',
+                    retryable: false, startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                });
+            }
+            iterations += 1;
+            stateTransitions.push('reinvoke');
+            continue;
+        }
+        if (terminal.complete) {
+            metadataCompleteCount += 1;
+            stateTransitions.push('complete');
+            return driverResult({
+                status: 'completed',
+                receiptStatus: 'applied',
+                reasonCode: HEADLESS_REASON_CODES.EXECUTION_COMPLETED,
+                publicSummary: 'Headless yoloop completed after public metadata reported yoloopComplete.',
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions,
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        const reconciliationDirective = extractEpicGitReconciliationDirective(metadata);
+        if (reconciliationDirective) {
+            stateTransitions.push('git_reconciliation');
+            const reconciliation = await executeEpicGitReconciliation(reconciliationDirective, input.terminalGitAdapter, input.now);
+            hashes[`git-reconciliation-${iterations}`] = hashPublicValue(`${reconciliationDirective.idempotencyKey}:${reconciliation.reasonCodes.join(',')}`);
+            if (!reconciliation.ok) {
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: 'backoff', receiptStatus: 'deferred',
+                    reasonCode: reconciliation.reasonCodes[0] ?? 'git-reconciliation-failed',
+                    publicSummary: 'Headless yoloop paused at a fail-closed Git reconciliation boundary.',
+                    retryable: true, startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                });
+            }
+        }
+        const extraction = extractAuthorizedChildPrompts(metadata, input.prepared.epicId);
+        if (!extraction.ok) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'failed',
+                receiptStatus: 'failed',
+                reasonCode: extraction.reasonCode,
+                publicSummary: extraction.publicSummary,
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions: [...redactions, ...extraction.redactionSummary],
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        const repeatedChild = extraction.continuous
+            ? undefined
+            : extraction.prompts.find((child) => processedStoryIds.has(child.storyId));
+        if (repeatedChild) {
+            stateTransitions.push('backoff');
+            return driverResult({
+                status: 'failed',
+                receiptStatus: 'failed',
+                reasonCode: HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION,
+                publicSummary: 'Headless yoloop rejected cyclic child story delegation evidence.',
+                retryable: false,
+                startedAt,
+                counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                hashes,
+                redactions: [...redactions, redaction('storyId', 'prompt_body', hashPublicValue(repeatedChild.storyId))],
+                relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                childStoryIds,
+                stateTransitions,
+            });
+        }
+        workerPool.mode = extraction.mode === 'continuous_dag'
+            ? 'continuous_dag'
+            : extraction.parallelAuthorized ? 'parallel_wave' : 'serial';
+        workerPool.serverMaxConcurrency = extraction.serverMaxConcurrency;
+        if (extraction.continuous) {
+            continuousModeObserved = true;
+            const eligible = extraction.prompts.filter((child) => !processedStoryIds.has(child.storyId) && !continuousInFlight.has(child.storyId));
+            workerPool.pendingChildCount = eligible.length + continuousInFlight.size;
+            if (eligible.length > 0) {
+                const capacity = resolveWorkerPoolCapacity({
+                    store: input.store,
+                    nowIso: input.now(),
+                    localCap: input.localConcurrencyCap,
+                    serverMaxConcurrency: extraction.serverMaxConcurrency,
+                    parallelAuthorized: true,
+                    continuous: true,
+                    eligibleCount: eligible.length,
+                });
+                workerPool.queueCap = capacity.queueCap;
+                workerPool.availableLeases = capacity.availableLeases;
+                workerPool.effectiveConcurrency = capacity.effectiveConcurrency;
+                workerPool.reasonCodes.push(capacity.reasonCode);
+                if (capacity.effectiveConcurrency === 0 && continuousInFlight.size === 0) {
+                    workerPool.backpressurePauseCount += 1;
+                    stateTransitions.push('backoff');
+                    return driverResult({
+                        status: 'backoff', receiptStatus: 'deferred', reasonCode: HEADLESS_REASON_CODES.WORKER_POOL_BACKPRESSURE_PAUSED,
+                        publicSummary: 'Headless yoloop retained its eligible frontier while physical worker capacity was unavailable.',
+                        retryable: true, startedAt,
+                        counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                        workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                        relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                    });
+                }
+                const launchable = eligible.slice(0, capacity.effectiveConcurrency);
+                stateTransitions.push('child_story_delegation');
+                for (const child of launchable) {
+                    continuousInFlight.set(child.storyId, {
+                        child,
+                        promise: executeYoloopChild({ ...input, child, iteration: iterations }),
+                    });
+                }
+                workerPool.startedChildCount += launchable.length;
+                workerPool.peakConcurrency = Math.max(workerPool.peakConcurrency, continuousInFlight.size);
+                workerPool.pendingChildCount = eligible.length - launchable.length + continuousInFlight.size;
+            }
+            if (continuousInFlight.size > 0) {
+                await settleOneContinuousChild();
+            }
+            else if (continuousDeferredReasons.size > 0) {
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: 'backoff', receiptStatus: 'deferred', reasonCode: [...continuousDeferredReasons.values()].sort()[0],
+                    publicSummary: 'Headless yoloop retained deferred continuous work for a bounded retry.',
+                    retryable: true, startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                });
+            }
+            else if (continuousFailureReasons.size > 0) {
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: 'failed', receiptStatus: 'failed', reasonCode: [...continuousFailureReasons.values()].sort()[0],
+                    publicSummary: 'Headless yoloop completed independent work and stopped on the remaining failed dependency closure.',
+                    retryable: false, startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool), hashes, redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs], childStoryIds, stateTransitions,
+                });
+            }
+            iterations += 1;
+            stateTransitions.push('reinvoke');
+            continue;
+        }
+        workerPool.pendingChildCount = extraction.prompts.length;
+        const pending = [...extraction.prompts];
+        while (pending.length > 0) {
+            const capacity = resolveWorkerPoolCapacity({
+                store: input.store,
+                nowIso: input.now(),
+                localCap: input.localConcurrencyCap,
+                serverMaxConcurrency: extraction.serverMaxConcurrency,
+                parallelAuthorized: extraction.parallelAuthorized,
+                continuous: false,
+                eligibleCount: pending.length,
+            });
+            workerPool.queueCap = capacity.queueCap;
+            workerPool.availableLeases = capacity.availableLeases;
+            workerPool.effectiveConcurrency = capacity.effectiveConcurrency;
+            workerPool.reasonCodes.push(capacity.reasonCode);
+            if (capacity.effectiveConcurrency === 0) {
+                workerPool.backpressurePauseCount += 1;
+                workerPool.pendingChildCount = pending.length;
+                stateTransitions.push('backoff');
+                return driverResult({
+                    status: 'backoff',
+                    receiptStatus: 'deferred',
+                    reasonCode: HEADLESS_REASON_CODES.WORKER_POOL_BACKPRESSURE_PAUSED,
+                    publicSummary: 'Headless yoloop paused child workers because bounded queue or lease capacity was unavailable.',
+                    retryable: true,
+                    startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                    hashes,
+                    redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                    childStoryIds,
+                    stateTransitions,
+                });
+            }
+            const batch = pending.splice(0, capacity.effectiveConcurrency);
+            workerPool.startedChildCount += batch.length;
+            workerPool.peakConcurrency = Math.max(workerPool.peakConcurrency, batch.length);
+            workerPool.pendingChildCount = pending.length;
+            stateTransitions.push('child_story_delegation');
+            const settled = await Promise.all(batch.map((child) => executeYoloopChild({
+                ...input,
+                child,
+                iteration: iterations,
+            })));
+            workerPool.completedChildCount += settled.length;
+            let terminalChild;
+            for (const result of settled) {
+                const child = result.child;
+                hashes[`child-${child.storyId.replace(/[^A-Za-z0-9_.:-]/g, '-')}`] = result.commandHash;
+                redactions.push(result.promptRedaction);
+                childStoryIds.push(child.storyId);
+                childTargetRefs.push(child.targetRef);
+                processedStoryIds.add(child.storyId);
+                const receipt = result.receipt;
+                if (!receipt) {
+                    if (result.reasonCodes.includes('queue-cap-reached')) {
+                        workerPool.backpressurePauseCount += 1;
+                        workerPool.pendingChildCount += 1;
+                        workerPool.reasonCodes.push(HEADLESS_REASON_CODES.WORKER_POOL_BACKPRESSURE_PAUSED);
+                        terminalChild ??= { kind: 'deferred', reasonCode: HEADLESS_REASON_CODES.WORKER_POOL_BACKPRESSURE_PAUSED };
+                    }
+                    else {
+                        failedChildCount += 1;
+                        terminalChild ??= { kind: 'missing', reasonCode: HEADLESS_REASON_CODES.EXECUTION_FAILED };
+                    }
+                    continue;
+                }
+                if (receipt.outcome === 'deferred') {
+                    terminalChild ??= { kind: 'deferred', reasonCode: HEADLESS_REASON_CODES.EXECUTION_BACKOFF };
+                    continue;
+                }
+                if (receipt.outcome === 'failed') {
+                    failedChildCount += 1;
+                    terminalChild ??= { kind: 'failed', reasonCode: receipt.reasonCode || HEADLESS_REASON_CODES.EXECUTION_FAILED };
+                    continue;
+                }
+                if (receipt.outcome === 'ignored')
+                    skippedChildCount += 1;
+                else
+                    succeededChildCount += 1;
+            }
+            if (terminalChild) {
+                const deferred = terminalChild.kind === 'deferred';
+                return driverResult({
+                    status: deferred ? 'backoff' : 'failed',
+                    receiptStatus: deferred ? 'deferred' : 'failed',
+                    reasonCode: terminalChild.reasonCode,
+                    publicSummary: terminalChild.kind === 'missing'
+                        ? 'Headless yoloop child story delegation did not produce a public receipt.'
+                        : deferred
+                            ? 'Headless yoloop child story delegated bounded backoff to the root attempt.'
+                            : 'Headless yoloop child story execution failed with public receipt evidence.',
+                    retryable: deferred,
+                    startedAt,
+                    counts: aggregateCounts(iterations + 1, childStoryIds.length, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount),
+                    workerPoolSummary: publicWorkerPoolSummary(workerPool),
+                    hashes,
+                    redactions,
+                    relativePaths: [input.prepared.targetRef, ...childTargetRefs],
+                    childStoryIds,
+                    stateTransitions,
+                });
+            }
+        }
+        iterations += 1;
+        stateTransitions.push('reinvoke');
+    }
+}
+async function executeYoloopChild(input) {
+    const workspace = input.child.dispatchId
+        ? await input.continuousWorkspaceManager.prepare({
+            projectRoot: input.projectRoot,
+            epicId: input.prepared.epicId,
+            storyId: input.child.storyId,
+            targetRef: input.child.targetRef,
+            dispatchId: input.child.dispatchId,
+            executionBranch: input.child.executionBranch ?? '',
+            graphRevision: input.child.graphRevision ?? '',
+            authorizedWriteSet: input.child.writeSet ?? [],
+        })
+        : undefined;
+    if (workspace && !workspace.ok) {
+        return {
+            child: input.child,
+            reasonCodes: [workspace.reasonCode],
+            commandHash: hashPublicValue(input.child.commandRef),
+            promptRedaction: redaction(`child.${input.child.storyId}`, 'prompt_body', hashPublicValue(input.child.commandRef)),
+            terminalFailure: workspace.reasonCode,
+            deferredFailure: /backpressure|lease-active/.test(workspace.reasonCode),
+        };
+    }
+    const childProjectRoot = input.projectRoot;
+    const childCommandRunner = workspace?.ok
+        ? createAnchoredContinuousStoryCommandRunner(workspace.value)
+        : input.adapterOptions?.commandRunner;
+    const childDirective = buildChildRunYoloDirective({
+        rootAttempt: input.attempt,
+        child: input.child,
+        iteration: input.iteration,
+        runtimeId: input.prepared.runtimeId,
+        modelId: input.prepared.modelId,
+        runtimeSource: input.prepared.runtimeSource,
+    });
+    const childAttemptId = headlessExecutionEntityId('attempt', childDirective.idempotencyKey);
+    let preserveWorkspace = Boolean(workspace);
+    try {
+        const childResult = await runYoloExecutionPhase({
+            store: input.store,
+            projectRoot: childProjectRoot,
+            runnerId: input.runnerId,
+            now: input.now,
+            metadata: { continuityExecutionDirectives: [childDirective] },
+            adapterRegistry: input.registry,
+            adapterOptions: {
+                ...input.adapterOptions,
+                cwd: childProjectRoot,
+                env: {
+                    ...input.adapterOptions?.env,
+                    ...(workspace?.ok ? {
+                        NEOCORTEX_BRANCHLESS_PROJECT_ROOT: workspace.value.workspacePath,
+                        NEOCORTEX_BRANCHLESS_ROOT_AUTHORITY: JSON.stringify(input.child.rootAuthority),
+                    } : {}),
+                },
+                ...(childCommandRunner ? { commandRunner: childCommandRunner, versionRunner: childCommandRunner } : {}),
+            },
+            runtimeDefaults: input.runtimeDefaults,
+            runtimeFallback: input.runtimeFallback,
+            timeoutMs: input.timeoutMs,
+            maxAttempts: 1,
+            limit: 1,
+            queueCap: input.queueCap,
+            attemptIds: [childAttemptId],
+            idFactory: input.idFactory,
+        });
+        const receipt = childResult.receipts.find((item) => item.attemptId === childAttemptId) ?? childResult.receipts[0];
+        if (workspace?.ok && receipt && receipt.outcome !== 'failed' && receipt.outcome !== 'deferred') {
+            const integration = await input.continuousWorkspaceManager.integrate(workspace.value, {
+                receiptRefs: [`continuity:${receipt.attemptId}`],
+                nowIso: receipt.timestamp,
+            });
+            if (!integration.ok) {
+                return {
+                    child: input.child,
+                    receipt,
+                    reasonCodes: [...childResult.reasonCodes, integration.reasonCode],
+                    commandHash: hashPublicValue(input.child.commandRef),
+                    promptRedaction: redaction(`child.${input.child.storyId}`, 'prompt_body', hashPublicValue(input.child.commandRef)),
+                    terminalFailure: integration.reasonCode,
+                    deferredFailure: /backpressure|graph-revision-stale/.test(integration.reasonCode),
+                };
+            }
+            preserveWorkspace = false;
+        }
+        return {
+            child: input.child,
+            receipt,
+            reasonCodes: childResult.reasonCodes,
+            commandHash: hashPublicValue(input.child.commandRef),
+            promptRedaction: redaction(`child.${input.child.storyId}`, 'prompt_body', hashPublicValue(input.child.commandRef)),
+        };
+    }
+    finally {
+        if (workspace?.ok)
+            await input.continuousWorkspaceManager.release(workspace.value, preserveWorkspace);
+    }
+}
+function resolveWorkerPoolCapacity(input) {
+    const snapshot = input.store.collectSnapshotRows({
+        nowIso: input.nowIso,
+        jobLimit: 1,
+        staleLeaseLimit: 1,
+        receiptLimit: 1,
+        eventLimit: 1,
+        snapshotLimit: 1,
+    });
+    const queueCap = Math.max(1, Math.floor(snapshot.queue.capacity));
+    // The current run_yoloop parent owns one active queue lease. Only other active
+    // headless workers reduce the local child-lease budget.
+    const activeOtherLeases = Math.max(0, Math.floor(snapshot.queue.running) - 1);
+    const availableLeases = input.continuous
+        ? Math.max(0, Math.floor(snapshot.queue.available))
+        : Math.max(0, Math.min(Math.max(0, input.localCap - activeOtherLeases), Math.floor(snapshot.queue.available)));
+    const serverMaxConcurrency = input.parallelAuthorized
+        ? Math.max(1, Math.floor(input.serverMaxConcurrency))
+        : 1;
+    const effectiveConcurrency = Math.max(0, Math.min(input.eligibleCount, serverMaxConcurrency, input.localCap, queueCap, availableLeases));
+    return {
+        queueCap,
+        availableLeases,
+        effectiveConcurrency,
+        reasonCode: effectiveConcurrency === 0
+            ? HEADLESS_REASON_CODES.WORKER_POOL_BACKPRESSURE_PAUSED
+            : (input.parallelAuthorized || input.continuous) && effectiveConcurrency > 1
+                ? HEADLESS_REASON_CODES.WORKER_POOL_PARALLEL_ACTIVE
+                : HEADLESS_REASON_CODES.WORKER_POOL_SERIAL_FALLBACK,
+    };
+}
+function createMutableWorkerPoolSummary(localCap) {
+    return {
+        mode: 'serial',
+        serverMaxConcurrency: 1,
+        localCap,
+        queueCap: 1,
+        availableLeases: 1,
+        effectiveConcurrency: 1,
+        peakConcurrency: 0,
+        pendingChildCount: 0,
+        startedChildCount: 0,
+        completedChildCount: 0,
+        backpressurePauseCount: 0,
+        reasonCodes: [],
+    };
+}
+function publicWorkerPoolSummary(summary) {
+    return {
+        mode: summary.mode,
+        serverMaxConcurrency: boundedCount(summary.serverMaxConcurrency),
+        localCap: boundedCount(summary.localCap),
+        queueCap: boundedCount(summary.queueCap),
+        availableLeases: boundedCount(summary.availableLeases),
+        effectiveConcurrency: boundedCount(summary.effectiveConcurrency),
+        peakConcurrency: boundedCount(summary.peakConcurrency),
+        pendingChildCount: boundedCount(summary.pendingChildCount),
+        startedChildCount: boundedCount(summary.startedChildCount),
+        completedChildCount: boundedCount(summary.completedChildCount),
+        backpressurePauseCount: boundedCount(summary.backpressurePauseCount),
+        reasonCodes: unique(summary.reasonCodes.length > 0
+            ? summary.reasonCodes
+            : [HEADLESS_REASON_CODES.WORKER_POOL_SERIAL_FALLBACK]).slice(0, 10),
+        publicSafe: true,
+    };
+}
+function defaultWorkerPoolSummary(localCap = resolveDefaultHeadlessYoloopLocalConcurrencyCap()) {
+    return publicWorkerPoolSummary(createMutableWorkerPoolSummary(localCap));
+}
+function boundedCount(value) {
+    if (!Number.isFinite(value))
+        return 0;
+    return Math.max(0, Math.min(10_000, Math.floor(value)));
+}
+function prepareYoloopAttemptInput(input) {
+    const governance = readAutonomousGovernanceEnvelopeFromMetadata(input.attempt.metadata_json, {
+        autonomousKind: 'run_yoloop',
+        jobId: input.attempt.job_id,
+        targetKind: 'epic',
+        targetRef: input.attempt.target_ref,
+    });
+    if (!governance.ok) {
+        return {
+            ok: false,
+            status: 'failed',
+            receiptStatus: 'failed',
+            reasonCode: governance.reasonCode,
+            publicSummary: governance.publicSummary,
+            redactionSummary: governance.redactionSummary,
+        };
+    }
+    const promptValidation = validateRunYoloopAttemptShape(input.attempt);
+    if (!promptValidation.ok)
+        return promptValidation;
+    const runtime = resolveAttemptRuntime(input);
+    if (!runtime.ok) {
+        return {
+            ok: false,
+            status: 'failed',
+            receiptStatus: 'failed',
+            reasonCode: runtime.reasonCode,
+            publicSummary: runtime.publicSummary,
+            redactionSummary: runtime.redactionSummary,
+        };
+    }
+    const epicId = input.attempt.epic_id ?? epicIdFromTargetRef(input.attempt.target_ref);
+    return {
+        ok: true,
+        input: {
+            rootPrompt: `*yoloop @${input.attempt.target_ref}`,
+            targetRef: input.attempt.target_ref,
+            epicId,
+            runtimeId: runtime.runtimeId,
+            ...(runtime.modelId ? { modelId: runtime.modelId } : {}),
+            runtimeSource: runtime.runtimeSource,
+            publicSafe: true,
+        },
+    };
+}
+function validateRunYoloopAttemptShape(attempt) {
+    const redactions = [];
+    if (attempt.directive_kind !== 'run_yoloop')
+        redactions.push(redaction('directiveKind', 'unsafe_key', 'value-denied'));
+    if (attempt.target_kind !== 'epic')
+        redactions.push(redaction('targetKind', 'prompt_body', 'value-denied'));
+    if (!EPIC_TARGET_PATTERN.test(attempt.target_ref) || SHELL_FRAGMENT_PATTERN.test(attempt.target_ref) || UNSAFE_VALUE_PATTERN.test(attempt.target_ref)) {
+        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
+    }
+    const epicId = epicIdFromTargetRef(attempt.target_ref);
+    if (attempt.epic_id && attempt.epic_id !== epicId)
+        redactions.push(redaction('epicId', 'prompt_body', 'value-denied'));
+    if (redactions.length > 0) {
+        return {
+            ok: false,
+            status: 'failed',
+            receiptStatus: 'failed',
+            reasonCode: HEADLESS_REASON_CODES.PROMPT_REJECTED,
+            publicSummary: 'Headless run_yoloop attempt did not match the canonical public epic prompt shape.',
+            redactionSummary: redactions,
+        };
+    }
+    return {
+        ok: true,
+        input: {
+            rootPrompt: `*yoloop @${attempt.target_ref}`,
+            targetRef: attempt.target_ref,
+            epicId,
+            runtimeId: 'fake',
+            publicSafe: true,
+        },
+    };
+}
+function resolveAttemptRuntime(input) {
+    const defaults = input.runtimeDefaults !== undefined
+        ? input.runtimeDefaults
+        : loadHeadlessRuntimeDefaults({ projectRoot: input.projectRoot });
+    if (isRecord(defaults) && defaults.ok === false) {
+        return {
+            ok: false,
+            reasonCode: HEADLESS_REASON_CODES.RUNTIME_UNTRUSTED,
+            publicSummary: typeof defaults.publicSummary === 'string' ? defaults.publicSummary : 'Headless runtime defaults failed public-safety validation.',
+            redactionSummary: Array.isArray(defaults.redactionSummary) ? defaults.redactionSummary : [],
+        };
+    }
+    const source = normalizeRuntimeSource(input.attempt.runtime_source) ?? 'explicit';
+    const hint = (input.attempt.runtime_id || input.attempt.model_id)
+        ? {
+            ...(input.attempt.runtime_id ? { runtimeId: input.attempt.runtime_id } : {}),
+            ...(input.attempt.model_id ? { modelId: input.attempt.model_id } : {}),
+            source,
+            publicSafe: true,
+        }
+        : undefined;
+    const resolutionInput = {
+        registry: input.registry,
+        defaults,
+        fallback: input.runtimeFallback,
+    };
+    if (hint) {
+        if (source === 'origin')
+            resolutionInput.origin = hint;
+        else if (source === 'default')
+            resolutionInput.projectDefault = hint;
+        else if (source === 'fallback')
+            resolutionInput.fallback = hint;
+        else
+            resolutionInput.explicit = hint;
+    }
+    const resolution = resolveHeadlessRuntime(resolutionInput);
+    if (!resolution.ok) {
+        return {
+            ok: false,
+            reasonCode: resolution.reasonCode,
+            publicSummary: resolution.publicSummary,
+            redactionSummary: resolution.redactionSummary,
+        };
+    }
+    return {
+        ok: true,
+        runtimeId: resolution.runtimeId,
+        ...(resolution.modelId ? { modelId: resolution.modelId } : {}),
+        runtimeSource: resolution.runtimeSource,
+    };
+}
+function validateRunYoloopExecutionDirective(input) {
+    const redactions = [];
+    for (const key of Object.keys(input)) {
+        if (!EXECUTION_DIRECTIVE_ALLOWED_KEYS.has(key) || UNSAFE_KEY_PATTERN.test(key)) {
+            redactions.push(redaction(key, unsafeKeyReason(key), 'key-denied'));
+        }
+    }
+    if (input.publicSafe !== true)
+        redactions.push(redaction('publicSafe', 'unsafe_key', 'value-denied'));
+    const kind = stringField(input, 'kind');
+    const commandClass = stringField(input, 'commandClass');
+    const jobId = stringField(input, 'jobId');
+    const operationId = stringField(input, 'operationId');
+    const idempotencyKey = stringField(input, 'idempotencyKey');
+    const targetKind = stringField(input, 'targetKind');
+    const targetRef = stringField(input, 'targetRef');
+    const commandRef = stringField(input, 'commandRef');
+    const publicSummary = stringField(input, 'publicSummary');
+    const epicId = stringField(input, 'epicId');
+    if (kind !== 'run_yoloop')
+        redactions.push(redaction('kind', 'unsafe_key', 'value-denied'));
+    if (commandClass !== 'goal-tick' && commandClass !== 'loop-tick')
+        redactions.push(redaction('commandClass', 'unsafe_key', 'value-denied'));
+    if (!isSafeIdentifier(jobId))
+        redactions.push(redaction('jobId', 'unsafe_key', 'value-denied'));
+    if (!isSafeIdentifier(operationId))
+        redactions.push(redaction('operationId', 'unsafe_key', 'value-denied'));
+    if (!isSafeIdentifier(idempotencyKey))
+        redactions.push(redaction('idempotencyKey', 'unsafe_key', 'value-denied'));
+    if (targetKind !== 'epic' || !targetRef || !EPIC_TARGET_PATTERN.test(targetRef) || UNSAFE_VALUE_PATTERN.test(targetRef)) {
+        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
+    }
+    const expectedCommandRef = targetRef ? `*yoloop @${targetRef}` : undefined;
+    if (!commandRef || commandRef !== expectedCommandRef || commandRef.includes('@neocortex') || SHELL_FRAGMENT_PATTERN.test(commandRef) || UNSAFE_VALUE_PATTERN.test(commandRef)) {
+        redactions.push(redaction('commandRef', 'prompt_body', 'value-denied'));
+    }
+    if (epicId && targetRef && epicId !== epicIdFromTargetRef(targetRef))
+        redactions.push(redaction('epicId', 'prompt_body', 'value-denied'));
+    if (!publicSummary || publicSummary.length > 240 || UNSAFE_VALUE_PATTERN.test(publicSummary)) {
+        redactions.push(redaction('publicSummary', 'unbounded_text', 'value-denied'));
+    }
+    if (input.reasonCode !== undefined && (typeof input.reasonCode !== 'string' || UNSAFE_VALUE_PATTERN.test(input.reasonCode))) {
+        redactions.push(redaction('reasonCode', 'unsafe_key', 'value-denied'));
+    }
+    const runtime = validateDirectiveRuntime(input.runtime, redactions);
+    if (input.attempts !== undefined)
+        assertPublicSafeCandidate(input.attempts, 'attempts', redactions);
+    if (input.metadata !== undefined)
+        assertPublicSafeCandidate(input.metadata, 'metadata', redactions);
+    const metadata = isRecord(input.metadata) ? input.metadata : undefined;
+    const redactionSummary = validateDirectiveRedactions(input.redactionSummary, redactions);
+    if (redactions.length > 0 || kind !== 'run_yoloop' || !commandClass || !jobId || !operationId || !idempotencyKey || !targetRef || !commandRef || !publicSummary) {
+        const promptRejected = redactions.some((item) => item.reason === 'prompt_body');
+        return {
+            ok: false,
+            reasonCode: promptRejected ? HEADLESS_REASON_CODES.PROMPT_REJECTED : HEADLESS_REASON_CODES.DIRECTIVE_REJECTED,
+            redactionSummary: redactions,
+        };
+    }
+    return {
+        ok: true,
+        directive: {
+            kind: 'run_yoloop',
+            commandClass: commandClass,
+            jobId: jobId,
+            operationId: operationId,
+            idempotencyKey: idempotencyKey,
+            targetKind: 'epic',
+            targetRef: targetRef,
+            commandRef: commandRef,
+            ...(epicId ? { epicId } : {}),
+            ...(runtime ? { runtime } : {}),
+            publicSummary: publicSummary,
+            ...(typeof input.reasonCode === 'string' ? { reasonCode: input.reasonCode } : {}),
+            ...(metadata ? { metadata } : {}),
+            ...(redactionSummary.length > 0 ? { redactionSummary } : {}),
+            publicSafe: true,
+        },
+    };
+}
+function extractAuthorizedChildPrompts(metadata, epicId) {
+    if (!metadata) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop metadata was missing.', []);
+    }
+    const publicSafety = validateYoloopMetadataPublicSubset(metadata);
+    if (!publicSafety.ok)
+        return publicSafety;
+    const prompts = [];
+    const plan = isRecord(metadata.yoloopExecutionPlan) ? metadata.yoloopExecutionPlan : undefined;
+    const planStoryIds = plan ? safeStringArray(plan.storyIds).filter(isStoryId) : [];
+    const continuousNodes = plan?.version === 3 && isRecord(plan.scheduler) && Array.isArray(plan.scheduler.nodes)
+        ? new Map(plan.scheduler.nodes.filter(isRecord).map((node) => [String(node.storyId ?? ''), node]))
+        : new Map();
+    const continuousGraphRevision = plan?.version === 3 && isRecord(plan.scheduler) && typeof plan.scheduler.graphRevision === 'string'
+        ? plan.scheduler.graphRevision
+        : undefined;
+    const continuousExecutionBranch = plan?.version === 3 && typeof plan.executionBranch === 'string'
+        ? plan.executionBranch
+        : undefined;
+    let planValidation;
+    if (plan) {
+        const validation = validateExecutionPlan(plan);
+        if (!validation.ok)
+            return validation;
+        planValidation = validation;
+        for (const prompt of extractPlanPrompts(plan)) {
+            const normalized = normalizeChildPrompt(prompt, epicId, 'execution-plan');
+            if (!normalized.ok)
+                return normalized;
+            prompts.push(enrichContinuousPrompt(normalized.prompt, continuousNodes.get(normalized.prompt.storyId), continuousGraphRevision, continuousExecutionBranch));
+        }
+        if (prompts.length === 0) {
+            for (const storyId of planStoryIds) {
+                const normalized = normalizeChildPrompt(`*yolo @docs/stories/${storyId}.story.md`, epicId, 'execution-plan');
+                if (!normalized.ok)
+                    return normalized;
+                prompts.push(enrichContinuousPrompt(normalized.prompt, continuousNodes.get(normalized.prompt.storyId), continuousGraphRevision, continuousExecutionBranch));
+            }
+        }
+        const directiveCompatibility = validatePlanTaskDirectives(metadata.skillDirectives, prompts);
+        if (!directiveCompatibility.ok)
+            return directiveCompatibility;
+    }
+    const nextStoryId = typeof metadata.nextStoryId === 'string' && isStoryId(metadata.nextStoryId)
+        ? metadata.nextStoryId
+        : undefined;
+    // A validated execution plan is the sole child-dispatch authority. Compatible
+    // duplicate task directives were checked above but never become a second
+    // dispatch source.
+    for (const directive of plan ? [] : Array.isArray(metadata.skillDirectives) ? metadata.skillDirectives : []) {
+        if (!isRecord(directive) || directive.kind !== 'task')
+            continue;
+        const explicitPrompts = safeStringArray(directive.promptTemplates);
+        if (explicitPrompts.length > 0) {
+            for (const prompt of explicitPrompts) {
+                const normalized = normalizeChildPrompt(prompt, epicId, 'task-directive');
+                if (!normalized.ok)
+                    return normalized;
+                prompts.push(normalized.prompt);
+            }
+            continue;
+        }
+        const template = typeof directive.promptTemplate === 'string' ? directive.promptTemplate : undefined;
+        if (!template)
+            continue;
+        const storyIds = safeStringArray(directive.storyIds).filter(isStoryId);
+        const ids = storyIds.length > 0 ? storyIds : nextStoryId ? [nextStoryId] : [];
+        if (ids.length === 0 && CHILD_PROMPT_PATTERN.test(template)) {
+            const normalized = normalizeChildPrompt(template, epicId, 'task-directive');
+            if (!normalized.ok)
+                return normalized;
+            prompts.push(normalized.prompt);
+            continue;
+        }
+        for (const storyId of ids) {
+            const prompt = template.includes('{storyId}') ? template.replaceAll('{storyId}', storyId) : template;
+            const normalized = normalizeChildPrompt(prompt, epicId, 'task-directive');
+            if (!normalized.ok)
+                return normalized;
+            prompts.push(normalized.prompt);
+        }
+    }
+    if (prompts.length === 0 && nextStoryId) {
+        const normalized = normalizeChildPrompt(`*yolo @docs/stories/${nextStoryId}.story.md`, epicId, 'next-story');
+        if (!normalized.ok)
+            return normalized;
+        prompts.push(normalized.prompt);
+    }
+    const uniquePrompts = uniqueBy(prompts, (item) => item.commandRef);
+    if (planValidation?.continuous) {
+        if (uniquePrompts.length !== planStoryIds.length
+            || uniquePrompts.some((prompt) => prompt.preparationOnly !== true || prompt.source !== 'execution-plan')) {
+            return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION, 'Headless continuous yoloop rejected an ambiguous or non-preparation child prompt.', [redaction('promptTemplates', 'prompt_body', 'operation-denied')]);
+        }
+    }
+    else if (uniquePrompts.some((prompt) => prompt.preparationOnly === true)) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION, 'Headless yoloop rejected branchless preparation outside a validated continuous plan.', [redaction('promptTemplates', 'prompt_body', 'operation-denied')]);
+    }
+    if (planStoryIds.length > 0) {
+        const authorized = new Set(planStoryIds);
+        for (const prompt of uniquePrompts) {
+            if (!authorized.has(prompt.storyId)) {
+                return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION, 'Headless yoloop rejected a child prompt outside the server-authorized execution plan.', [redaction('storyId', 'prompt_body', hashPublicValue(prompt.storyId))]);
+            }
+        }
+    }
+    if (planValidation?.parallelAuthorized && !sameStringSet(uniquePrompts.map((item) => item.storyId), planStoryIds)) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop rejected a parallel plan whose executable prompts did not match the selected wave.', []);
+    }
+    if (uniquePrompts.length === 0 && !planValidation?.continuous) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop metadata did not include an authorized per-story child prompt.', []);
+    }
+    return {
+        ok: true,
+        prompts: uniquePrompts,
+        mode: planValidation?.mode ?? 'legacy',
+        serverMaxConcurrency: planValidation?.serverMaxConcurrency ?? 1,
+        parallelAuthorized: planValidation?.parallelAuthorized ?? false,
+        continuous: planValidation?.continuous ?? false,
+        reasonCodes: [
+            HEADLESS_REASON_CODES.OK,
+            planValidation?.parallelAuthorized
+                ? HEADLESS_REASON_CODES.WORKER_POOL_PARALLEL_ACTIVE
+                : HEADLESS_REASON_CODES.WORKER_POOL_SERIAL_FALLBACK,
+        ],
+    };
+}
+function enrichContinuousPrompt(prompt, node, graphRevision, executionBranch) {
+    if (!node || !graphRevision || !executionBranch)
+        return prompt;
+    const writeSet = Array.isArray(node.writeSet) ? safeStringArray(node.writeSet) : [];
+    const rootAuthority = parseBranchlessRootAuthority(node.childExecutionAuthority, {
+        storyId: prompt.storyId,
+        invocationPrompt: prompt.commandRef,
+        authorizedWriteSet: writeSet,
+    });
+    return {
+        ...prompt,
+        ...(typeof node.dispatchId === 'string' ? { dispatchId: node.dispatchId } : {}),
+        ...(typeof node.idempotencyKey === 'string' ? { idempotencyKey: node.idempotencyKey } : {}),
+        graphRevision,
+        executionBranch,
+        ...(writeSet.length > 0 ? { writeSet } : {}),
+        ...(rootAuthority ? { rootAuthority } : {}),
+    };
+}
+function validateYoloopMetadataPublicSubset(metadata) {
+    const redactions = [];
+    if (metadata.nextStoryId !== undefined)
+        validatePublicMetadataValue(metadata.nextStoryId, 'nextStoryId', redactions);
+    if (metadata.yoloopExecutionPlan !== undefined)
+        validatePublicMetadataValue(metadata.yoloopExecutionPlan, 'yoloopExecutionPlan', redactions);
+    if (Array.isArray(metadata.skillDirectives)) {
+        metadata.skillDirectives.forEach((directive, index) => {
+            if (isRecord(directive) && directive.kind === 'task')
+                validatePublicMetadataValue(directive, `skillDirectives.${index}`, redactions);
+        });
+    }
+    if (redactions.length > 0) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop rejected unsafe public metadata before child delegation.', redactions);
+    }
+    return { ok: true };
+}
+function validatePlanTaskDirectives(value, planPrompts) {
+    if (!Array.isArray(value))
+        return { ok: true };
+    const authorized = new Set(planPrompts.map((prompt) => prompt.commandRef));
+    for (const [index, directive] of value.entries()) {
+        if (!isRecord(directive) || directive.kind !== 'task')
+            continue;
+        const promptTemplate = typeof directive.promptTemplate === 'string' ? directive.promptTemplate : undefined;
+        const promptTemplates = safeStringArray(directive.promptTemplates);
+        const redactedDuplicate = promptTemplate === '[REDACTED]'
+            && directive.subagentType === 'neocortex'
+            && typeof directive.reasonCode === 'string'
+            && directive.reasonCode.startsWith('directive-prompt-')
+            && promptTemplates.length === 0;
+        if (redactedDuplicate)
+            continue;
+        const candidates = [...(promptTemplate ? [promptTemplate] : []), ...promptTemplates];
+        if (directive.subagentType !== 'neocortex'
+            || candidates.length === 0
+            || candidates.some((candidate) => !authorized.has(candidate))) {
+            return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION, 'Headless yoloop rejected a task directive that conflicted with the server-authorized execution plan.', [redaction(`skillDirectives.${index}`, 'prompt_body', 'operation-denied')]);
+        }
+    }
+    return { ok: true };
+}
+function validatePublicMetadataValue(value, path, redactions) {
+    if (typeof value === 'string') {
+        if (/\.allowedDebt\.constraints\.\d+$/.test(path) && PUBLIC_CHILD_DEBT_CONSTRAINTS.has(value))
+            return;
+        if (UNSAFE_VALUE_PATTERN.test(value) || /\0/.test(value))
+            redactions.push(redaction(path, unsafeKeyReason(path), 'value-denied'));
+        return;
+    }
+    if (value === undefined || value === null || typeof value === 'number' || typeof value === 'boolean')
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => validatePublicMetadataValue(item, `${path}.${index}`, redactions));
+        return;
+    }
+    if (isRecord(value)) {
+        for (const [key, child] of Object.entries(value)) {
+            const childPath = `${path}.${key}`;
+            const promptTemplateKey = key === 'promptTemplate'
+                || key === 'promptTemplates'
+                || key === 'invocationPrompt'
+                || key === 'childPromptKind'
+                || key === 'allowMetaTaskPromptInChild'
+                || key === 'authorization';
+            if (!promptTemplateKey && UNSAFE_KEY_PATTERN.test(key))
+                redactions.push(redaction(childPath, unsafeKeyReason(key), 'key-denied'));
+            validatePublicMetadataValue(child, childPath, redactions);
+        }
+        return;
+    }
+    redactions.push(redaction(path, 'unsafe_key', 'value-denied'));
+}
+function validateExecutionPlan(plan) {
+    const mode = typeof plan.mode === 'string' ? plan.mode : '';
+    const isolationPolicy = isRecord(plan.isolationPolicy) ? plan.isolationPolicy : undefined;
+    const storyIds = safeStringArray(plan.storyIds);
+    if (plan.authorization !== 'server_authorized') {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop execution plan was not server-authorized.', []);
+    }
+    if (plan.executor !== 'root_agent' && plan.executor !== 'root_agent_with_child_tasks') {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop execution plan executor was not root-owned.', []);
+    }
+    if (mode !== 'serial' && mode !== 'parallel_wave' && mode !== 'continuous_dag' && mode !== 'manual') {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop execution plan mode was invalid.', []);
+    }
+    const continuousMode = plan.version === 3 && mode === 'continuous_dag';
+    if (!Array.isArray(plan.storyIds) ||
+        (!continuousMode && storyIds.length === 0) ||
+        storyIds.length !== plan.storyIds.length ||
+        storyIds.some((storyId) => !isStoryId(storyId)) ||
+        new Set(storyIds).size !== storyIds.length) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop execution plan story selection was invalid or ambiguous.', []);
+    }
+    if (!isolationPolicy ||
+        isolationPolicy.rootOwnsLoop !== true ||
+        (isolationPolicy.childPromptKind === 'per_story_branchless_preparation_only' && !continuousMode) ||
+        (Object.prototype.hasOwnProperty.call(isolationPolicy, 'childExecutionBoundary') && !continuousMode) ||
+        (isolationPolicy.childPromptKind !== 'per_story_yolo_only' &&
+            isolationPolicy.childPromptKind !== 'per_story_branchless_preparation_only' &&
+            !(isolationPolicy.childPromptKind === 'none' &&
+                ((mode === 'serial' && isolationPolicy.childTaskDelegation === 'not_required') ||
+                    (mode === 'parallel_wave' && plan.executor === 'root_agent' && isolationPolicy.childTaskDelegation === 'forbidden')))) ||
+        isolationPolicy.allowOuterYoloopInChild !== false ||
+        isolationPolicy.allowMetaTaskPromptInChild !== false) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION, 'Headless yoloop rejected an execution plan that did not preserve root-owned child isolation.', [redaction('isolationPolicy', 'prompt_body', 'value-denied')]);
+    }
+    const skippedStories = Array.isArray(plan.skippedStories) ? plan.skippedStories : [];
+    for (const skipped of skippedStories) {
+        if (!isRecord(skipped) || typeof skipped.storyId !== 'string' || !isStoryId(skipped.storyId) || typeof skipped.reason !== 'string') {
+            return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop skipped-story evidence was malformed.', []);
+        }
+        if (storyIds.includes(skipped.storyId)) {
+            return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop selected a story that server evidence marked skipped.', []);
+        }
+    }
+    if (continuousMode) {
+        const scheduler = isRecord(plan.scheduler) ? plan.scheduler : undefined;
+        const nodes = Array.isArray(scheduler?.nodes) ? scheduler.nodes.filter(isRecord) : [];
+        const schedulerReady = safeStringArray(scheduler?.readyStoryIds);
+        const schedulerRunning = safeStringArray(scheduler?.runningStoryIds);
+        const promptTemplates = safeStringArray(plan.promptTemplates);
+        const dependencyBasis = isRecord(plan.dependencyBasis) ? plan.dependencyBasis : undefined;
+        const readinessBasis = isRecord(plan.readinessBasis) ? plan.readinessBasis : undefined;
+        const graphRevision = typeof scheduler?.graphRevision === 'string' ? scheduler.graphRevision : '';
+        const executionBranch = typeof plan.executionBranch === 'string' ? plan.executionBranch : '';
+        const nodeIds = nodes.map((node) => typeof node.storyId === 'string' ? node.storyId : '');
+        const unsafeNode = nodes.find((node) => {
+            const storyId = typeof node.storyId === 'string' ? node.storyId : '';
+            const prompt = typeof node.promptTemplate === 'string' ? node.promptTemplate : '';
+            const writeSet = Array.isArray(node.writeSet) ? safeStringArray(node.writeSet) : [];
+            return !isStoryId(storyId) || prompt !== `*yolo @docs/stories/${storyId}.story.md branchless-preparation`
+                || typeof node.dispatchId !== 'string' || !/^[a-f0-9]{64}$/.test(node.dispatchId)
+                || typeof node.idempotencyKey !== 'string' || !/^[a-f0-9]{64}$/.test(node.idempotencyKey)
+                || node.dependencyBasis !== 'verified'
+                || !Array.isArray(node.dependencies) || safeStringArray(node.dependencies).length !== node.dependencies.length
+                || !Array.isArray(node.writeSet) || writeSet.length === 0 || writeSet.length !== node.writeSet.length
+                || !parseBranchlessRootAuthority(node.childExecutionAuthority, {
+                    storyId, invocationPrompt: prompt, authorizedWriteSet: writeSet,
+                });
+        });
+        if (plan.executor !== 'root_agent_with_child_tasks'
+            || plan.legacyConcurrencyIgnored !== true
+            || Object.prototype.hasOwnProperty.call(plan, 'maxConcurrency')
+            || Object.prototype.hasOwnProperty.call(plan, 'maxParallel')
+            || isolationPolicy?.rootOwnedScheduling !== 'continuous_dag_allowed'
+            || isolationPolicy?.childPromptKind !== 'per_story_branchless_preparation_only'
+            || isolationPolicy?.childExecutionBoundary !== 'filesystem_only'
+            || isolationPolicy?.childTaskDelegation !== 'allowed'
+            || isolationPolicy?.maxDepth !== 1
+            || isolationPolicy?.childWorkspace !== 'branchless_sandbox'
+            || isolationPolicy?.epicCheckout !== 'current_checkout'
+            || isolationPolicy?.workspaceLifecycle !== 'user_managed'
+            || isolationPolicy?.integrationOwner !== 'root_agent'
+            || !scheduler
+            || scheduler.schemaVersion !== 1
+            || scheduler.strategy !== 'continuous-event-driven-dag'
+            || scheduler.logicalConcurrency !== 'ready-set'
+            || scheduler.capacityPolicy !== 'backpressure-only'
+            || scheduler.rootOwnsLoop !== true
+            || scheduler.maxDepth !== 1
+            || !/^[a-f0-9]{64}$/.test(graphRevision)
+            || !isSafeExecutionBranch(executionBranch)
+            || new Set(nodeIds).size !== nodeIds.length
+            || nodeIds.some((storyId) => !isStoryId(storyId))
+            || schedulerReady.some((storyId) => !nodeIds.includes(storyId))
+            || schedulerRunning.some((storyId) => !nodeIds.includes(storyId) || schedulerReady.includes(storyId))
+            || !sameStringSet(storyIds, schedulerReady)
+            || promptTemplates.length !== storyIds.length
+            || promptTemplates.some((prompt, index) => prompt !== `*yolo @docs/stories/${storyIds[index]}.story.md branchless-preparation`)
+            || !dependencyBasis || dependencyBasis.source !== 'state_snapshot'
+            || !readinessBasis || readinessBasis.source !== 'ready_wave'
+            || !sameStringSet(safeStringArray(readinessBasis.selectedStoryIds), storyIds)
+            || unsafeNode) {
+            return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop rejected an invalid continuous DAG execution plan.', []);
+        }
+        return {
+            ok: true,
+            mode: 'continuous_dag',
+            serverMaxConcurrency: storyIds.length,
+            parallelAuthorized: true,
+            continuous: true,
+        };
+    }
+    if (plan.version === 2) {
+        const phased = validatePhasedYoloopPlan(plan);
+        if (!phased.ok) {
+            return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop rejected an unsafe phased execution plan.', []);
+        }
+        // A child *yolo performs the complete story lifecycle and may write. Until
+        // preparation-only child directives exist, full child execution is pinned
+        // to the P207 single writer even when preparation phases allow parallelism.
+        return { ok: true, mode: 'parallel_wave', serverMaxConcurrency: phased.childExecutionConcurrency, parallelAuthorized: false, continuous: false };
+    }
+    if (mode !== 'parallel_wave') {
+        return {
+            ok: true,
+            mode: mode,
+            serverMaxConcurrency: 1,
+            parallelAuthorized: false,
+            continuous: false,
+        };
+    }
+    const maxConcurrency = plan.maxConcurrency;
+    const maxParallel = plan.maxParallel;
+    const dependencyBasis = isRecord(plan.dependencyBasis) ? plan.dependencyBasis : undefined;
+    const readinessBasis = isRecord(plan.readinessBasis) ? plan.readinessBasis : undefined;
+    const parallelWaves = Array.isArray(plan.parallelWaves) ? plan.parallelWaves : [];
+    const wave = parallelWaves.length === 1 && isRecord(parallelWaves[0]) ? parallelWaves[0] : undefined;
+    if (isolationPolicy.rootOwnedScheduling !== 'parallel_wave_allowed' ||
+        !Number.isInteger(maxConcurrency) || typeof maxConcurrency !== 'number' || maxConcurrency < 2 || maxConcurrency > storyIds.length ||
+        !Number.isInteger(maxParallel) || maxParallel !== maxConcurrency ||
+        !dependencyBasis || dependencyBasis.source !== 'state_snapshot' || !sameStringSet(safeStringArray(dependencyBasis.storyIds), storyIds) ||
+        !readinessBasis || readinessBasis.source !== 'ready_wave' || !sameStringSet(safeStringArray(readinessBasis.selectedStoryIds), storyIds) ||
+        !wave || !sameStringSet(safeStringArray(wave.storyIds), storyIds) || wave.maxConcurrency !== maxConcurrency) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop parallel plan lacked consistent bounded authorization and readiness evidence.', []);
+    }
+    const wavePrompts = safeStringArray(wave.promptTemplates);
+    if (wavePrompts.length !== storyIds.length || new Set(wavePrompts).size !== wavePrompts.length) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop parallel wave prompts were incomplete or ambiguous.', []);
+    }
+    const proofs = Array.isArray(wave.proofSummaries)
+        ? wave.proofSummaries
+        : Array.isArray(plan.proofSummaries) ? plan.proofSummaries : [];
+    const waveProof = proofs.find((proof) => isRecord(proof) && sameStringSet(safeStringArray(proof.storyIds), storyIds));
+    if (!isRecord(waveProof) ||
+        waveProof.dependencyClosure !== 'resolved' ||
+        waveProof.contractOwnership !== 'non_overlapping' ||
+        waveProof.validationSurfaces !== 'compatible') {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop parallel plan lacked resolved independence proof.', []);
+    }
+    const unsafeSkipped = skippedStories.find((skipped) => isRecord(skipped) && typeof skipped.reason === 'string' && /(cycle|unresolved|ambiguous)/i.test(skipped.reason));
+    if (unsafeSkipped) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop parallel plan contained unresolved dependency evidence.', []);
+    }
+    return {
+        ok: true,
+        mode: 'parallel_wave',
+        serverMaxConcurrency: maxConcurrency,
+        parallelAuthorized: true,
+        continuous: false,
+    };
+}
+function parseBranchlessRootAuthority(value, expected) {
+    if (!isRecord(value) || !isRecord(value.artifact))
+        return undefined;
+    const artifact = value.artifact;
+    const writeSet = Array.isArray(value.authorizedWriteSet) ? safeStringArray(value.authorizedWriteSet) : [];
+    if (Object.keys(value).sort().join('\0') !== [
+        'artifact', 'authorizedWriteSet', 'effectScope', 'invocationPrompt', 'kind',
+        'lifecycleAuthority', 'publicSafe', 'schemaVersion', 'storyId',
+    ].sort().join('\0')
+        || Object.keys(artifact).sort().join('\0') !== [
+            'content', 'contentBinding', 'kind', 'path', 'schemaVersion',
+        ].sort().join('\0')
+        || value.schemaVersion !== 1 || value.kind !== 'branchless_story_preparation'
+        || value.storyId !== expected.storyId || value.invocationPrompt !== expected.invocationPrompt
+        || !Array.isArray(value.authorizedWriteSet)
+        || writeSet.length !== value.authorizedWriteSet.length
+        || writeSet.some((ref) => normalizeContinuousWriteRef(ref) !== ref)
+        || !sameOrderedStrings(writeSet, expected.authorizedWriteSet)
+        || value.effectScope !== 'filesystem_only' || value.lifecycleAuthority !== 'root_only'
+        || value.publicSafe !== true || artifact.schemaVersion !== 1
+        || artifact.kind !== 'branchless_root_bound_artifact'
+        || typeof artifact.path !== 'string' || !writeSet.includes(artifact.path)
+        || typeof artifact.content !== 'string' || artifact.content.length === 0 || artifact.content.length > 4096
+        || typeof artifact.contentBinding !== 'string' || !/^[a-f0-9]{64}$/.test(artifact.contentBinding)) {
+        return undefined;
+    }
+    const expectedBinding = createHash('sha256').update([
+        'branchless-root-bound-artifact-v1', expected.storyId, expected.invocationPrompt,
+        ...writeSet, 'filesystem_only', 'root_only', artifact.path, artifact.content,
+    ].join('\0')).digest('hex');
+    if (artifact.contentBinding !== expectedBinding)
+        return undefined;
+    return value;
+}
+function sameOrderedStrings(left, right) {
+    return left.length === right.length && left.every((value, index) => value === right[index]);
+}
+function extractPlanPrompts(plan) {
+    const prompts = [];
+    prompts.push(...safeStringArray(plan.promptTemplates));
+    for (const step of Array.isArray(plan.serialSteps) ? plan.serialSteps : []) {
+        if (isRecord(step) && typeof step.promptTemplate === 'string')
+            prompts.push(step.promptTemplate);
+    }
+    for (const wave of Array.isArray(plan.parallelWaves) ? plan.parallelWaves : []) {
+        if (isRecord(wave))
+            prompts.push(...safeStringArray(wave.promptTemplates));
+    }
+    return prompts;
+}
+function normalizeChildPrompt(prompt, epicId, source) {
+    if (hasDelegatedPromptIsolationViolation(prompt)) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION, 'Headless yoloop rejected an unsafe child prompt shape.', [redaction('promptTemplate', 'prompt_body', hashPublicValue(prompt))]);
+    }
+    if (!CHILD_PROMPT_PATTERN.test(prompt)) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, 'Headless yoloop child prompt did not match the canonical per-story yolo shape.', [redaction('promptTemplate', 'prompt_body', hashPublicValue(prompt))]);
+    }
+    const preparationOnly = BRANCHLESS_PREPARATION_PROMPT_PATTERN.test(prompt);
+    const targetRef = prompt.replace(/^\*yolo @/, '').replace(/ branchless-preparation$/, '');
+    const storyId = storyIdFromTargetRef(targetRef);
+    if (!CHILD_STORY_TARGET_PATTERN.test(targetRef) || !isStoryId(storyId) || !storyId.startsWith(`${epicId}.`)) {
+        return rejectPromptExtraction(HEADLESS_REASON_CODES.YOLOOP_ISOLATION_VIOLATION, 'Headless yoloop rejected a child prompt outside the targeted public epic.', [redaction('storyId', 'prompt_body', hashPublicValue(storyId))]);
+    }
+    return {
+        ok: true,
+        prompt: { storyId, targetRef, commandRef: prompt, source, ...(preparationOnly ? { preparationOnly: true } : {}) },
+    };
+}
+function extractEpicTerminalGitDirective(metadata) {
+    const value = metadata?.epicTerminalGitDirective;
+    if (!isRecord(value)
+        || value.schemaVersion !== 1
+        || value.kind !== 'epic_terminal_git'
+        || typeof value.epicId !== 'string'
+        || typeof value.executionBranch !== 'string'
+        || typeof value.originBranch !== 'string'
+        || typeof value.expectedExecutionHeadSha !== 'string'
+        || !Array.isArray(value.storyCheckpointIds)
+        || !isRecord(value.localGates)
+        || value.localGates.passed !== true
+        || !Array.isArray(value.localGates.receiptRefs)
+        || !isRecord(value.reconcile)
+        || typeof value.idempotencyKey !== 'string'
+        || value.publicSafe !== true)
+        return undefined;
+    return value;
+}
+function extractEpicGitReconciliationDirective(metadata) {
+    const value = metadata?.epicGitReconciliationDirective;
+    if (!isRecord(value)
+        || value.schemaVersion !== 1
+        || value.kind !== 'epic_git_reconciliation'
+        || typeof value.epicId !== 'string'
+        || typeof value.executionBranch !== 'string'
+        || typeof value.originBranch !== 'string'
+        || !['start', 'resume', 'audit'].includes(String(value.lifecycleBoundary))
+        || typeof value.dryRun !== 'boolean'
+        || typeof value.idempotencyKey !== 'string'
+        || value.publicSafe !== true)
+        return undefined;
+    return value;
+}
+function classifyYoloopTerminalMetadata(metadata) {
+    if (!metadata || !isRecord(metadata)) {
+        return {
+            ok: false,
+            reasonCode: HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID,
+            publicSummary: 'Headless yoloop root invocation did not return public metadata.',
+            redactionSummary: [],
+        };
+    }
+    const decision = isRecord(metadata.yoloopContinuationDecision) ? metadata.yoloopContinuationDecision : undefined;
+    const outcome = typeof decision?.outcome === 'string' ? decision.outcome : undefined;
+    const complete = outcome === 'queue_exhausted' || metadata.yoloopComplete === true;
+    const aborted = metadata.yoloopAborted === true;
+    const releaseBlocked = parseReleaseBlockedResult(metadata.releaseBlocked);
+    const replay = outcome === 'selected' && decision?.replay === true;
+    if (outcome && !['selected', 'queue_exhausted', 'blocked', 'cycle', 'invalid', 'no_progress'].includes(outcome)) {
+        return { ok: false, reasonCode: HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, publicSummary: 'Headless yoloop rejected an unknown continuation outcome.', redactionSummary: [] };
+    }
+    if (outcome === 'queue_exhausted' && decision?.terminalSuccess !== true) {
+        return { ok: false, reasonCode: HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID, publicSummary: 'Headless yoloop rejected inconsistent queue exhaustion metadata.', redactionSummary: [] };
+    }
+    if (complete && aborted) {
+        return {
+            ok: false,
+            reasonCode: HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID,
+            publicSummary: 'Headless yoloop metadata reported mutually exclusive terminal states.',
+            redactionSummary: [redaction('yoloopTerminal', 'unsafe_key', 'value-denied')],
+        };
+    }
+    const releaseBlockedSignalled = metadata.yoloopReleaseBlocked === true
+        || metadata.terminalClass === 'release-blocked'
+        || metadata.releaseBlocked !== undefined;
+    if (releaseBlockedSignalled && (!releaseBlocked || metadata.yoloopReleaseBlocked !== true
+        || metadata.terminalClass !== 'release-blocked' || complete || aborted || outcome !== undefined)) {
+        return {
+            ok: false,
+            reasonCode: HEADLESS_REASON_CODES.YOLOOP_METADATA_INVALID,
+            publicSummary: 'Headless yoloop rejected inconsistent release-blocked terminal metadata.',
+            redactionSummary: [],
+        };
+    }
+    return { ok: true, complete, aborted, ...(releaseBlocked ? { releaseBlocked } : {}), outcome, replay };
+}
+function extractResumableExhaustionBoundary(metadata) {
+    if (!metadata)
+        return undefined;
+    const reason = metadata.abortReason;
+    if (reason !== 'YOLOOP_PER_RUN_CAP_REACHED' && reason !== 'YOLOOP_SESSION_TIMEOUT')
+        return undefined;
+    const boundary = metadata.yoloopResumableBoundary;
+    const boundedId = /^[A-Za-z0-9._:-]{1,128}$/;
+    if (!isRecord(boundary)
+        || boundary.schemaVersion !== 'YoloopResumableBoundary/1.0'
+        || boundary.resumable !== true
+        || boundary.reason !== reason
+        || boundary.publicSafe !== true
+        || typeof boundary.coolDownUntil !== 'string'
+        || !Number.isFinite(Date.parse(boundary.coolDownUntil))
+        || !Number.isSafeInteger(boundary.retryAfterMs)
+        || boundary.retryAfterMs < 0
+        || typeof boundary.operationId !== 'string'
+        || !boundedId.test(boundary.operationId)
+        || !isRecord(boundary.receipt)
+        || boundary.receipt.schemaVersion !== 'YoloopSessionRolloverReceipt/1.0'
+        || typeof boundary.receipt.runId !== 'string'
+        || !boundedId.test(boundary.receipt.runId)
+        || boundary.receipt.operationId !== boundary.operationId
+        || typeof boundary.receipt.idempotencyKey !== 'string'
+        || !boundedId.test(boundary.receipt.idempotencyKey)
+        || typeof boundary.receipt.payloadHash !== 'string'
+        || !/^[a-f0-9]{64}$/.test(boundary.receipt.payloadHash)
+        || boundary.receipt.coolDownUntil !== boundary.coolDownUntil
+        || !Number.isSafeInteger(boundary.receipt.revision)
+        || boundary.receipt.revision < 0
+        || (boundary.receipt.snapshotHash !== null
+            && (typeof boundary.receipt.snapshotHash !== 'string'
+                || !/^[a-f0-9]{64}$/.test(boundary.receipt.snapshotHash)))
+        || boundary.receipt.status !== 'exhausted'
+        || boundary.receipt.publicSafe !== true)
+        return undefined;
+    return { coolDownUntil: boundary.coolDownUntil, reason };
+}
+function buildChildRunYoloDirective(input) {
+    const stableBasis = `${input.rootAttempt.execution_id}:${input.child.graphRevision ?? 'legacy'}:${input.child.storyId}`;
+    const operationId = input.child.dispatchId ?? headlessExecutionEntityId('child-op', `${stableBasis}:${input.iteration}`);
+    const idempotencyKey = input.child.idempotencyKey ?? headlessExecutionEntityId('child-idem', `${stableBasis}:${input.iteration}`);
+    return {
+        schemaVersion: 1,
+        contractVersion: 'continuity-v1',
+        kind: 'run_yolo',
+        commandClass: input.rootAttempt.command_class === 'goal-tick' ? 'goal-tick' : 'loop-tick',
+        jobId: input.rootAttempt.job_id,
+        operationId,
+        idempotencyKey,
+        targetKind: 'story',
+        targetRef: input.child.targetRef,
+        commandRef: input.child.commandRef,
+        ...(input.child.preparationOnly ? { executionMode: 'branchless_child_preparation' } : {}),
+        storyId: input.child.storyId,
+        runtime: {
+            runtimeId: input.runtimeId,
+            ...(input.modelId ? { modelId: input.modelId } : {}),
+            source: input.runtimeSource ?? 'explicit',
+            reasonCode: input.runtimeSource === 'fallback' ? HEADLESS_REASON_CODES.RUNTIME_FALLBACK : HEADLESS_REASON_CODES.RUNTIME_EXPLICIT,
+            publicSafe: true,
+        },
+        publicSummary: `Root-owned yoloop delegated public story ${input.child.storyId}.`,
+        reasonCode: HEADLESS_REASON_CODES.OK,
+        metadata: {
+            governanceSource: 'delegated-subagent',
+            parentAttemptId: input.rootAttempt.attempt_id,
+            parentExecutionId: input.rootAttempt.execution_id,
+            iteration: input.iteration,
+            ...(input.child.dispatchId ? { dispatchId: input.child.dispatchId } : {}),
+            ...(input.child.graphRevision ? { graphRevision: input.child.graphRevision } : {}),
+            ...(input.child.writeSet ? { writeSet: input.child.writeSet } : {}),
+            ...(input.child.executionBranch ? { executionBranch: input.child.executionBranch } : {}),
+            ...(input.child.graphRevision ? {
+                childWorkspace: 'branchless_sandbox',
+                epicCheckout: 'current_checkout',
+                workspaceLifecycle: 'user_managed',
+                integrationOwner: 'root_agent',
+                maxDepth: 1,
+            } : {}),
+            publicSafe: true,
+        },
+        attempts: [],
+        redactionSummary: [redaction('prompt', 'prompt_body', hashPublicValue(input.child.commandRef))],
+        publicSafe: true,
+    };
+}
+function persistYoloopAttemptOutcome(store, attempt, outcome) {
+    const hashes = sanitizePublicRecord(outcome.hashes);
+    const workerPoolSummary = outcome.workerPoolSummary ?? defaultWorkerPoolSummary();
+    const counts = sanitizePublicRecord({
+        iterations: outcome.counts.iterations,
+        childCount: outcome.counts.childCount,
+        succeededChildCount: outcome.counts.succeededChildCount,
+        failedChildCount: outcome.counts.failedChildCount,
+        skippedChildCount: outcome.counts.skippedChildCount,
+        metadataCompleteCount: outcome.counts.metadataCompleteCount,
+        metadataAbortedCount: outcome.counts.metadataAbortedCount,
+        serverMaxConcurrency: workerPoolSummary.serverMaxConcurrency,
+        localCap: workerPoolSummary.localCap,
+        queueCap: workerPoolSummary.queueCap,
+        availableLeases: workerPoolSummary.availableLeases,
+        effectiveConcurrency: workerPoolSummary.effectiveConcurrency,
+        peakConcurrency: workerPoolSummary.peakConcurrency,
+        pendingChildCount: workerPoolSummary.pendingChildCount,
+        startedChildCount: workerPoolSummary.startedChildCount,
+        completedChildCount: workerPoolSummary.completedChildCount,
+        backpressurePauseCount: workerPoolSummary.backpressurePauseCount,
+    });
+    const outcomeMetadata = {
+        schemaVersion: 1,
+        contractVersion: 'continuity-v1',
+        attemptId: attempt.attempt_id,
+        executionId: attempt.execution_id,
+        jobId: attempt.job_id,
+        directiveHash: attempt.directive_hash,
+        status: outcome.status,
+        reasonCode: outcome.reasonCode,
+        storyIds: outcome.childStoryIds.slice(0, 50),
+        counts,
+        hashes,
+        ...(outcome.reasonCode === AUTONOMOUS_GOVERNANCE_REASON_CODES.BYPASS_BLOCKED ? { governanceEvidence: AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG } : {}),
+        reasonCodes: unique([outcome.reasonCode, ...workerPoolSummary.reasonCodes, ...outcome.stateTransitions]),
+        publicSummary: boundPublicSummary(outcome.publicSummary),
+        ...(outcome.terminalClass ? { terminalClass: outcome.terminalClass } : {}),
+        ...(outcome.releaseBlocked ? { releaseBlocked: outcome.releaseBlocked } : {}),
+    };
+    const governance = readAutonomousGovernanceEnvelopeFromMetadata(attempt.metadata_json, {
+        autonomousKind: 'run_yoloop',
+        jobId: attempt.job_id,
+        targetKind: 'epic',
+        targetRef: attempt.target_ref,
+    });
+    // Backoff reuses the same attempt row. Preserve only its already-validated,
+    // public-safe authority envelope so the next tick cannot lose authorization
+    // when completion metadata replaces the queued metadata.
+    const metadata = governance.ok
+        ? autonomousGovernanceMetadata(governance.envelope, outcomeMetadata)
+        : outcomeMetadata;
+    store.completeHeadlessExecutionAttempt({
+        attemptId: attempt.attempt_id,
+        executionId: attempt.execution_id,
+        jobId: attempt.job_id,
+        leaseId: outcome.leaseId,
+        runnerId: outcome.runnerId,
+        status: outcome.status,
+        completedAt: outcome.completedAt,
+        durationMs: outcome.durationMs,
+        reasonCode: outcome.reasonCode,
+        publicSummary: boundPublicSummary(outcome.publicSummary),
+        notBeforeAt: outcome.notBeforeAt,
+        retryCount: outcome.retryCount,
+        counts,
+        hashes,
+        redactionSummary: outcome.redactionSummary,
+        relativePaths: unique([attempt.target_ref, ...outcome.relativePaths]),
+        metadata,
+    });
+    store.recordHeadlessExecutionReceipt({
+        receiptId: `receipt-${headlessExecutionEntityId('headless-yoloop', `${attempt.attempt_id}-${outcome.status}`)}`,
+        attemptId: attempt.attempt_id,
+        executionId: attempt.execution_id,
+        jobId: attempt.job_id,
+        status: outcome.receiptStatus,
+        reasonCode: outcome.reasonCode,
+        createdAt: outcome.completedAt,
+        operationId: `${attempt.execution_id}:${outcome.status}:receipt`,
+        idempotencyKey: `${attempt.directive_hash}:${outcome.status}:receipt`,
+        counts,
+        hashes,
+        redactionSummary: outcome.redactionSummary,
+        relativePaths: unique([attempt.target_ref, ...outcome.relativePaths]),
+        metadata,
+    });
+    store.recordHeadlessExecutionSummary({
+        eventId: `event-${headlessExecutionEntityId('headless-yoloop-summary', `${attempt.attempt_id}-${outcome.status}`)}`,
+        attemptId: attempt.attempt_id,
+        executionId: attempt.execution_id,
+        jobId: attempt.job_id,
+        status: outcome.status,
+        runtimeId: outcome.runtimeId,
+        modelId: outcome.modelId,
+        publicSummary: boundPublicSummary(outcome.publicSummary),
+        reasonCode: outcome.reasonCode,
+        createdAt: outcome.completedAt,
+        durationMs: outcome.durationMs,
+        counts,
+        hashes,
+        redactionSummary: outcome.redactionSummary,
+        relativePaths: unique([attempt.target_ref, ...outcome.relativePaths]),
+        metadata,
+    });
+    return {
+        attemptId: attempt.attempt_id,
+        executionId: attempt.execution_id,
+        jobId: attempt.job_id,
+        status: outcome.status,
+        outcome: outcome.receiptStatus,
+        reasonCode: outcome.reasonCode,
+        timestamp: outcome.completedAt,
+        childStoryIds: outcome.childStoryIds,
+        aggregateCounts: outcome.counts,
+        workerPoolSummary,
+        redactionSummary: outcome.redactionSummary,
+        ...(outcome.terminalClass ? { terminalClass: outcome.terminalClass } : {}),
+        ...(outcome.releaseBlocked ? { releaseBlocked: outcome.releaseBlocked } : {}),
+        publicSafe: true,
+    };
+}
+function emptyYoloopReceipt(attempt, input) {
+    return {
+        attemptId: attempt.attempt_id,
+        executionId: attempt.execution_id,
+        jobId: attempt.job_id,
+        status: input.status,
+        outcome: input.receiptStatus,
+        reasonCode: input.reasonCode,
+        timestamp: input.timestamp,
+        childStoryIds: [],
+        aggregateCounts: emptyAggregateCounts(),
+        workerPoolSummary: defaultWorkerPoolSummary(),
+        redactionSummary: [],
+        publicSafe: true,
+    };
+}
+function retryDecision(attempt, result, maxAttempts, backoffMs, nowIso) {
+    if (!result.retryable)
+        return { retry: false };
+    if (RESUMABLE_YOLOOP_BOUNDARY_REASONS.has(result.reasonCode)) {
+        return {
+            retry: true,
+            // A valid operational boundary is a resumable checkpoint, not a failed
+            // attempt. Preserve the generic failure budget across any number of
+            // server-authorized timeout/per-run successor boundaries.
+            retryCount: attempt.retry_count,
+            notBeforeAt: laterIsoTimestamp(addMilliseconds(nowIso, backoffMs), result.retryNotBeforeAt),
+        };
+    }
+    const retryCount = attempt.retry_count + 1;
+    if (retryCount >= Math.max(1, attempt.max_attempts || maxAttempts))
+        return { retry: false, retryCount };
+    const multiplier = Math.min(8, 2 ** Math.max(0, attempt.retry_count));
+    return {
+        retry: true,
+        retryCount,
+        notBeforeAt: laterIsoTimestamp(addMilliseconds(nowIso, backoffMs * multiplier), result.retryNotBeforeAt),
+    };
+}
+function driverResult(input) {
+    return {
+        status: input.status,
+        receiptStatus: input.receiptStatus,
+        reasonCode: input.reasonCode,
+        publicSummary: input.publicSummary,
+        retryable: input.retryable,
+        ...(input.retryNotBeforeAt ? { retryNotBeforeAt: input.retryNotBeforeAt } : {}),
+        durationMs: Math.max(0, Date.now() - input.startedAt),
+        counts: input.counts,
+        workerPoolSummary: input.workerPoolSummary ?? defaultWorkerPoolSummary(),
+        hashes: input.hashes,
+        redactionSummary: input.redactions.slice(0, 50),
+        relativePaths: unique(input.relativePaths).slice(0, 50),
+        childStoryIds: unique(input.childStoryIds).slice(0, 50),
+        stateTransitions: unique(input.stateTransitions),
+        ...(input.terminalClass ? { terminalClass: input.terminalClass } : {}),
+        ...(input.releaseBlocked ? { releaseBlocked: input.releaseBlocked } : {}),
+    };
+}
+function validateDirectiveRuntime(value, redactions) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value)) {
+        redactions.push(redaction('runtime', 'unsafe_key', 'value-denied'));
+        return undefined;
+    }
+    for (const key of Object.keys(value)) {
+        if (!RUNTIME_ALLOWED_KEYS.has(key) || UNSAFE_KEY_PATTERN.test(key))
+            redactions.push(redaction(`runtime.${key}`, unsafeKeyReason(key), 'key-denied'));
+    }
+    if (value.publicSafe !== true)
+        redactions.push(redaction('runtime.publicSafe', 'unsafe_key', 'value-denied'));
+    const runtimeId = stringField(value, 'runtimeId');
+    const modelId = stringField(value, 'modelId');
+    const source = stringField(value, 'source');
+    if (runtimeId && (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,79}$/.test(runtimeId) || UNSAFE_VALUE_PATTERN.test(runtimeId) || SHELL_FRAGMENT_PATTERN.test(runtimeId))) {
+        redactions.push(redaction('runtime.runtimeId', 'unsafe_key', 'value-denied'));
+    }
+    if (modelId && (!/^[A-Za-z0-9][A-Za-z0-9._:+/-]{0,119}$/.test(modelId) || UNSAFE_VALUE_PATTERN.test(modelId) || SHELL_FRAGMENT_PATTERN.test(modelId))) {
+        redactions.push(redaction('runtime.modelId', 'unsafe_key', 'value-denied'));
+    }
+    if (source !== undefined && source !== 'explicit' && source !== 'origin' && source !== 'default' && source !== 'fallback' && source !== 'unspecified') {
+        redactions.push(redaction('runtime.source', 'unsafe_key', 'value-denied'));
+    }
+    if (value.reasonCode !== undefined && (typeof value.reasonCode !== 'string' || UNSAFE_VALUE_PATTERN.test(value.reasonCode))) {
+        redactions.push(redaction('runtime.reasonCode', 'unsafe_key', 'value-denied'));
+    }
+    if (value.publicSafe !== true)
+        return undefined;
+    return {
+        ...(runtimeId ? { runtimeId } : {}),
+        ...(modelId ? { modelId } : {}),
+        ...(source === 'explicit' || source === 'origin' || source === 'default' || source === 'fallback' || source === 'unspecified' ? { source } : {}),
+        ...(typeof value.reasonCode === 'string' ? { reasonCode: value.reasonCode } : {}),
+        publicSafe: true,
+    };
+}
+function extractExecutionDirectiveCandidates(metadata) {
+    const records = Array.isArray(metadata) ? metadata : metadata ? [metadata] : [];
+    const directives = [];
+    for (const record of records) {
+        const value = record.continuityExecutionDirectives;
+        if (Array.isArray(value))
+            directives.push(...value);
+    }
+    return directives;
+}
+function hashDirective(directive) {
+    return hashPublicValue(stableJson({
+        kind: directive.kind,
+        commandClass: directive.commandClass,
+        jobId: directive.jobId,
+        targetRef: directive.targetRef,
+        commandRef: directive.commandRef,
+        epicId: directive.epicId,
+        runtime: directive.runtime,
+    }));
+}
+function stableJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableJson).join(',')}]`;
+    if (isRecord(value)) {
+        return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${stableJson(value[key])}`).join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+function assertPublicSafeCandidate(value, path, redactions) {
+    if (typeof value === 'string') {
+        if (UNSAFE_VALUE_PATTERN.test(value) || SHELL_FRAGMENT_PATTERN.test(value))
+            redactions.push(redaction(path, unsafeKeyReason(path), 'value-denied'));
+        return;
+    }
+    if (value === undefined || value === null || typeof value === 'number' || typeof value === 'boolean')
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertPublicSafeCandidate(item, `${path}.${index}`, redactions));
+        return;
+    }
+    if (isRecord(value)) {
+        for (const [key, child] of Object.entries(value)) {
+            const field = `${path}.${key}`;
+            if (UNSAFE_KEY_PATTERN.test(key))
+                redactions.push(redaction(field, unsafeKeyReason(key), 'key-denied'));
+            assertPublicSafeCandidate(child, field, redactions);
+        }
+        return;
+    }
+    redactions.push(redaction(path, 'unsafe_key', 'value-denied'));
+}
+function validateDirectiveRedactions(value, redactions) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value)) {
+        redactions.push(redaction('redactionSummary', 'unsafe_key', 'value-denied'));
+        return [];
+    }
+    const safe = [];
+    for (const [index, item] of value.entries()) {
+        if (!isRecord(item) || item.publicSafe !== true) {
+            redactions.push(redaction(`redactionSummary.${index}`, 'unsafe_key', 'value-denied'));
+            continue;
+        }
+        const field = stringField(item, 'field');
+        const reason = stringField(item, 'reason');
+        const evidence = stringField(item, 'evidence');
+        if (!field || !reason || !evidence || UNSAFE_VALUE_PATTERN.test(field) || UNSAFE_VALUE_PATTERN.test(reason) || UNSAFE_VALUE_PATTERN.test(evidence)) {
+            redactions.push(redaction(`redactionSummary.${index}`, 'unsafe_key', 'value-denied'));
+            continue;
+        }
+        safe.push({ field, reason, evidence, publicSafe: true });
+    }
+    return safe;
+}
+function rejectPromptExtraction(reasonCode, publicSummary, redactionSummary) {
+    return { ok: false, reasonCode, publicSummary, redactionSummary };
+}
+function safeStringArray(value) {
+    return Array.isArray(value) ? value.filter((item) => typeof item === 'string') : [];
+}
+function isSafeExecutionBranch(value) {
+    return value.length > 0 && value.length <= 240 && !value.startsWith('-') && !value.includes('..')
+        && !value.includes('\\') && /^[A-Za-z0-9._/-]+$/.test(value);
+}
+function sameStringSet(left, right) {
+    return left.length === right.length && new Set(left).size === left.length && left.every((item) => right.includes(item));
+}
+function safeAttemptRelativePaths(attempt) {
+    return EPIC_TARGET_PATTERN.test(attempt.target_ref) ? [attempt.target_ref] : [];
+}
+function sanitizePublicRecord(record) {
+    if (!record)
+        return undefined;
+    const output = {};
+    for (const [key, value] of Object.entries(record)) {
+        if (!/^[A-Za-z0-9_.:-]{1,80}$/.test(key) || UNSAFE_KEY_PATTERN.test(key) || UNSAFE_VALUE_PATTERN.test(key))
+            continue;
+        if (typeof value === 'string' && UNSAFE_VALUE_PATTERN.test(value))
+            continue;
+        output[key] = value;
+    }
+    return Object.keys(output).length > 0 ? output : undefined;
+}
+function emptyAggregateCounts() {
+    return aggregateCounts(0, 0, 0, 0, 0, 0, 0);
+}
+function aggregateCounts(iterations, childCount, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount) {
+    return { iterations, childCount, succeededChildCount, failedChildCount, skippedChildCount, metadataCompleteCount, metadataAbortedCount };
+}
+function storyIdFromTargetRef(targetRef) {
+    return targetRef.replace(/^docs\/stories\//, '').replace(/\.story\.md$/, '');
+}
+function epicIdFromTargetRef(targetRef) {
+    return targetRef.replace(/^docs\/epics\/epic-/, '').replace(/\.md$/, '');
+}
+function isStoryId(value) {
+    return /^[A-Za-z0-9][A-Za-z0-9_-]*\.\d+[A-Za-z0-9_-]*$/.test(value) && !UNSAFE_VALUE_PATTERN.test(value) && !SHELL_FRAGMENT_PATTERN.test(value);
+}
+function normalizeRuntimeSource(value) {
+    if (value === 'explicit' || value === 'origin' || value === 'default' || value === 'fallback')
+        return value;
+    return undefined;
+}
+function normalizeStoredRuntimeSource(value) {
+    if (value === 'explicit' || value === 'origin' || value === 'default' || value === 'fallback' || value === 'unspecified')
+        return value;
+    return undefined;
+}
+function unsafeKeyReason(key) {
+    if (/prompt|commandRef/i.test(key))
+        return 'prompt_body';
+    if (/std(?:out|err)|raw|log|transcript|stack/i.test(key))
+        return 'raw_log';
+    if (/url/i.test(key))
+        return 'private_url';
+    if (/path|cwd|argv|args|shell|command|binary|executable/i.test(key))
+        return 'executable_path';
+    if (/secret|token|password|authorization|api[_-]?key|license/i.test(key))
+        return 'secret_or_pii';
+    return 'unsafe_key';
+}
+function stringField(record, key) {
+    return typeof record[key] === 'string' ? record[key] : undefined;
+}
+function isSafeIdentifier(value) {
+    return Boolean(value && SAFE_ID_PATTERN.test(value) && !UNSAFE_VALUE_PATTERN.test(value) && !SHELL_FRAGMENT_PATTERN.test(value));
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function defaultHeadlessIdFactory(prefix, attemptId) {
+    return headlessExecutionEntityId(prefix, `${attemptId}-${Date.now()}-${randomBytes(4).toString('hex')}`);
+}
+function addMilliseconds(iso, ms) {
+    const base = Date.parse(iso);
+    return new Date((Number.isFinite(base) ? base : Date.now()) + ms).toISOString();
+}
+function laterIsoTimestamp(left, right) {
+    const leftMs = Date.parse(left);
+    const rightMs = right ? Date.parse(right) : Number.NaN;
+    if (!Number.isFinite(rightMs))
+        return left;
+    if (!Number.isFinite(leftMs))
+        return right;
+    return rightMs > leftMs ? right : left;
+}
+function boundedInteger(value, min, max) {
+    if (!Number.isFinite(value))
+        return min;
+    return Math.max(min, Math.min(max, Math.floor(value)));
+}
+function unique(values) {
+    return Array.from(new Set(values));
+}
+function uniqueBy(values, key) {
+    const seen = new Set();
+    const output = [];
+    for (const value of values) {
+        const itemKey = key(value);
+        if (seen.has(itemKey))
+            continue;
+        seen.add(itemKey);
+        output.push(value);
+    }
+    return output;
+}