@ornexus/neocortex 4.60.72 → 4.60.74

package/packages/shared/dist/yolo/change-evidence.js

@@ -1,7 +1,7 @@
 import { createHash } from 'node:crypto';
 import { posix } from 'node:path';
 const SHA = /^[a-f0-9]{40}(?:[a-f0-9]{24})?$/;
-const PATH = /^[A-Za-z0-9_.-][A-Za-z0-9_./ -]{0,239}$/;
+const PATH = /^[A-Za-z0-9_.\[\]-][A-Za-z0-9_./ \[\]-]{0,239}$/;
 const UNSAFE = /(^|\/)(?:\.env(?:\.|$)|secrets?|credentials?|private-prompts?|customer-data)(?:\/|$)|(?:token|password|license[_-]?key|secret)[=:]/i;
 function digest(paths) {
     return createHash('sha256').update(JSON.stringify(paths)).digest('hex');

package/packages/shared/dist/yolo/spec-envelope.js

@@ -1,8 +1,9 @@
 import { createHash } from 'node:crypto';
 import { posix } from 'node:path';
 import { inspectFrontmatterContext } from '../frontmatter-context-contract.js';
-export const YOLO_SPEC_ARTIFACT_LIMIT_BYTES = 64 * 1024;
-export const YOLO_SPEC_TOTAL_LIMIT_BYTES = 128 * 1024;
+// Artifact bytes are intentionally not capped here. The invoke transport owns
+// the request-level byte guardrail; this contract owns count, shape, content,
+// target, freshness and digest integrity without a smaller duplicate ceiling.
 export const YOLO_SPEC_MAX_ARTIFACTS = 12;
 export const YOLO_SPEC_MAX_AGE_MS = 120_000;
 export const YOLO_SPEC_FUTURE_SKEW_MS = 30_000;
@@ -59,8 +60,6 @@ function checkArtifact(value) {
     }
     const content = normalizeContent(value.content);
     const bytes = Buffer.byteLength(content, 'utf8');
-    if (bytes > YOLO_SPEC_ARTIFACT_LIMIT_BYTES)
-        deny('yolo-spec-envelope-too-large');
     if (content !== value.content || bytes !== value.byteLength || sha256(content) !== value.sha256) {
         deny('yolo-spec-envelope-digest-mismatch');
     }
@@ -126,8 +125,6 @@ export function assertYoloSpecEnvelopeV1(value, context) {
     for (const artifact of artifacts)
         checkArtifact(artifact);
     const typedArtifacts = artifacts;
-    if (typedArtifacts.reduce((sum, artifact) => sum + artifact.byteLength, 0) > YOLO_SPEC_TOTAL_LIMIT_BYTES)
-        deny('yolo-spec-envelope-too-large');
     const keys = typedArtifacts.map((artifact) => `${artifact.kind}:${artifact.path}`);
     if (new Set(keys).size !== keys.length || keys.some((key, index) => index > 0 && key < keys[index - 1]))
         deny('yolo-spec-envelope-unsafe');

package/packages/shared/dist/yoloop/epic-terminal-git.js

@@ -1,4 +1,17 @@
 /** Public contracts and pure safety decisions for epic-owned terminal Git. */
+import { createHash } from 'node:crypto';
+/**
+ * P205 complete-gate budgets are declared in config/release-gates.v2.json and
+ * mirrored here so installed clients keep the same closed runtime bounds.
+ * release-gates.test.mjs prevents either side from drifting independently.
+ */
+export const P205_RELEASE_GATE_BUDGETS = Object.freeze({
+    completeGateWorstCaseMs: 45 * 60 * 1000,
+    cancellationGraceMs: 5 * 60 * 1000,
+    aggregateValidityMs: 2 * 60 * 60 * 1000,
+    terminalWorkflowMaxDurationMs: 2 * 60 * 60 * 1000,
+});
+export const P205_ROOT_INVOKE_TIMEOUT_MS = P205_RELEASE_GATE_BUDGETS.completeGateWorstCaseMs + P205_RELEASE_GATE_BUDGETS.cancellationGraceMs;
 export const EPIC_TERMINAL_GIT_REASON_CODES = Object.freeze({
     READY: 'epic-terminal-git-ready',
     ALREADY_COMPLETE: 'epic-terminal-git-already-complete',
@@ -38,6 +51,96 @@ export const EPIC_TERMINAL_GIT_REASON_CODES = Object.freeze({
     PR_BASE_GUARD_UNVERIFIABLE: 'epic-terminal-pr-base-guard-unverifiable',
     PR_MERGE_QUEUE_LOCAL_GATE_REQUIRED: 'epic-terminal-pr-merge-queue-local-gate-required',
 });
+export function epicHeadReconciliationRangeDigest(lastAcceptedCheckpointHeadSha, executionHeadSha, reconciliationCommitShas) {
+    return createHash('sha256').update([
+        'epic-head-reconciliation-range-v1',
+        lastAcceptedCheckpointHeadSha,
+        executionHeadSha,
+        ...reconciliationCommitShas,
+    ].join('\0')).digest('hex');
+}
+export function epicHeadReconciliationPathsDigest(paths) {
+    return createHash('sha256').update(paths.join('\0')).digest('hex');
+}
+export function epicHeadReconciliationInputDigest(value) {
+    return createHash('sha256').update(JSON.stringify({
+        schemaVersion: value.schemaVersion,
+        kind: value.kind,
+        producer: value.producer,
+        epicId: value.epicId,
+        executionBranch: value.executionBranch,
+        originBranch: value.originBranch,
+        graphRevision: value.graphRevision,
+        originHeadSha: value.originHeadSha,
+        lastAcceptedCheckpointHeadSha: value.lastAcceptedCheckpointHeadSha,
+        executionHeadSha: value.executionHeadSha,
+        acceptedCheckpointIds: value.acceptedCheckpointIds,
+        acceptedCheckpointHeads: value.acceptedCheckpointHeads,
+        reconciliationCommitShas: value.reconciliationCommitShas,
+        commitRangeDigest: value.commitRangeDigest,
+        changedPaths: value.changedPaths,
+        changedPathsDigest: value.changedPathsDigest,
+        allowedWriteSet: value.allowedWriteSet,
+        allowedWriteSetDigest: value.allowedWriteSetDigest,
+        aggregateReceiptRef: value.aggregateReceiptRef,
+        aggregateManifestDigest: value.aggregateManifestDigest,
+        aggregateResultDigest: value.aggregateResultDigest,
+        producedAt: value.producedAt,
+        revalidatedAt: value.revalidatedAt,
+        publicSafe: value.publicSafe,
+    })).digest('hex');
+}
+export function validateEpicHeadReconciliationReceipt(value, expected) {
+    if (!value || value.schemaVersion !== 1 || value.kind !== 'epic_head_reconciliation'
+        || value.producer !== 'client-p205-head-reconciliation-v1' || value.publicSafe !== true
+        || !nonEmpty(value.epicId) || !nonEmpty(value.executionBranch) || !nonEmpty(value.originBranch)
+        || !Array.isArray(value.acceptedCheckpointIds) || !Array.isArray(value.acceptedCheckpointHeads)
+        || !Array.isArray(value.reconciliationCommitShas) || !Array.isArray(value.changedPaths)
+        || !Array.isArray(value.allowedWriteSet)
+        || value.epicId !== expected.epicId || value.executionBranch !== expected.executionBranch
+        || value.originBranch !== expected.originBranch || value.graphRevision !== expected.graphRevision
+        || value.originHeadSha !== expected.originHeadSha || value.executionHeadSha !== expected.executionHeadSha
+        || value.lastAcceptedCheckpointHeadSha !== expected.acceptedCheckpointHeads.at(-1)
+        || !sameOrdered(value.acceptedCheckpointIds, expected.acceptedCheckpointIds)
+        || !sameOrdered(value.acceptedCheckpointHeads, expected.acceptedCheckpointHeads)
+        || value.aggregateReceiptRef !== expected.aggregateQaReceipt.receiptRef
+        || value.aggregateManifestDigest !== expected.aggregateQaReceipt.manifestDigest
+        || value.aggregateResultDigest !== expected.aggregateQaReceipt.resultDigest
+        || !nonEmpty(value.aggregateReceiptRef) || !isHash(value.aggregateManifestDigest)
+        || !isHash(value.aggregateResultDigest) || !nonEmpty(value.producedAt) || !nonEmpty(value.revalidatedAt)
+        || value.acceptedCheckpointIds.length === 0 || value.acceptedCheckpointIds.length > 2_048
+        || value.acceptedCheckpointIds.some((id) => !nonEmpty(id) || id.length > 240)
+        || value.reconciliationCommitShas.length > 2_048
+        || value.changedPaths.length > 2_048
+        || value.allowedWriteSet.length === 0 || value.allowedWriteSet.length > 2_048
+        || (value.lastAcceptedCheckpointHeadSha !== value.executionHeadSha
+            && (value.reconciliationCommitShas.length === 0 || value.changedPaths.length === 0))
+        || (value.lastAcceptedCheckpointHeadSha === value.executionHeadSha
+            && (value.reconciliationCommitShas.length !== 0 || value.changedPaths.length !== 0))
+        || !isFullSha(value.originHeadSha) || !isFullSha(value.lastAcceptedCheckpointHeadSha)
+        || !isFullSha(value.executionHeadSha) || !isHash(value.graphRevision)
+        || value.acceptedCheckpointHeads.some((sha) => !isFullSha(sha))
+        || value.reconciliationCommitShas.some((sha) => !isFullSha(sha))
+        || !sameOrdered(value.changedPaths, [...new Set(value.changedPaths)].sort())
+        || !sameOrdered(value.allowedWriteSet, [...new Set(value.allowedWriteSet)].sort())
+        || value.changedPaths.some((path) => !safeRepositoryPath(path))
+        || value.allowedWriteSet.some((path) => !safeWriteScope(path))
+        || value.changedPaths.some((path) => !value.allowedWriteSet.some((scope) => writeScopeCovers(scope, path)))
+        || value.commitRangeDigest !== epicHeadReconciliationRangeDigest(value.lastAcceptedCheckpointHeadSha, value.executionHeadSha, value.reconciliationCommitShas)
+        || value.changedPathsDigest !== epicHeadReconciliationPathsDigest(value.changedPaths)
+        || value.allowedWriteSetDigest !== epicHeadReconciliationPathsDigest(value.allowedWriteSet)
+        || value.inputDigest !== epicHeadReconciliationInputDigest(value)
+        || !isHash(value.commitRangeDigest) || !isHash(value.changedPathsDigest)
+        || !isHash(value.allowedWriteSetDigest) || !isHash(value.inputDigest))
+        return false;
+    const producedAt = Date.parse(value.producedAt);
+    const revalidatedAt = Date.parse(value.revalidatedAt);
+    const now = Date.parse(expected.nowIso);
+    return Number.isFinite(producedAt) && Number.isFinite(revalidatedAt) && Number.isFinite(now)
+        && revalidatedAt >= producedAt
+        && now - revalidatedAt <= P205_RELEASE_GATE_BUDGETS.aggregateValidityMs
+        && revalidatedAt - now <= P205_RELEASE_GATE_BUDGETS.cancellationGraceMs;
+}
 export function validateEpicTerminalGitDirective(directive, actual) {
     const reasons = [];
     if (!nonEmpty(directive.originBranch))
@@ -76,8 +179,8 @@ export function validateEpicTerminalGitDirective(directive, actual) {
         || !directive.localGates.receiptRefs.includes(aggregate.receiptRef)) {
         reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.AGGREGATE_QA_REQUIRED);
     }
-    else if (!Number.isFinite(Date.parse(aggregate.checkedAt)) || actual.nowIso && (Date.parse(actual.nowIso) - Date.parse(aggregate.checkedAt) > 30 * 60 * 1000
-        || Date.parse(aggregate.checkedAt) - Date.parse(actual.nowIso) > 5 * 60 * 1000)) {
+    else if (!Number.isFinite(Date.parse(aggregate.checkedAt)) || actual.nowIso && (Date.parse(actual.nowIso) - Date.parse(aggregate.checkedAt) > P205_RELEASE_GATE_BUDGETS.aggregateValidityMs
+        || Date.parse(aggregate.checkedAt) - Date.parse(actual.nowIso) > P205_RELEASE_GATE_BUDGETS.cancellationGraceMs)) {
         reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.AGGREGATE_QA_STALE);
     }
     const originBinding = actual.originBinding;
@@ -90,6 +193,24 @@ export function validateEpicTerminalGitDirective(directive, actual) {
         || !Number.isFinite(Date.parse(originBinding.capturedAt))) {
         reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.ORIGIN_BINDING_REQUIRED);
     }
+    const directedReconciliation = directive.localGates?.headReconciliationReceipt;
+    const actualReconciliation = actual.headReconciliationReceipt;
+    if (directedReconciliation && (!actualReconciliation || !originBinding || !aggregate
+        || directedReconciliation.inputDigest !== actualReconciliation.inputDigest
+        || !validateEpicHeadReconciliationReceipt(actualReconciliation, {
+            epicId: directive.epicId,
+            executionBranch: directive.executionBranch,
+            originBranch: directive.originBranch,
+            graphRevision: directive.graphRevision,
+            originHeadSha: originBinding.originHeadSha,
+            executionHeadSha: actual.executionHeadSha,
+            acceptedCheckpointIds: actual.acceptedCheckpointIds,
+            acceptedCheckpointHeads: actualReconciliation.acceptedCheckpointHeads,
+            aggregateQaReceipt: aggregate,
+            nowIso: actual.nowIso ?? new Date(0).toISOString(),
+        }))) {
+        reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.AGGREGATE_QA_REQUIRED);
+    }
     if (actual.writerLeaseActive)
         reasons.push(EPIC_TERMINAL_GIT_REASON_CODES.LEASE_ACTIVE);
     if (!sameSet(directive.storyCheckpointIds, actual.acceptedCheckpointIds)) {
@@ -220,6 +341,9 @@ function nonEmpty(value) {
 function isSha(value) {
     return /^[a-f0-9]{7,64}$/i.test(value);
 }
+function isFullSha(value) {
+    return /^[a-f0-9]{40,64}$/i.test(value);
+}
 function isHash(value) {
     return typeof value === 'string' && /^[a-f0-9]{64}$/i.test(value);
 }
@@ -229,3 +353,21 @@ function unique(values) {
 function sameSet(left, right) {
     return left.length === right.length && [...left].sort().every((item, index) => item === [...right].sort()[index]);
 }
+function sameOrdered(left, right) {
+    return left.length === right.length && left.every((item, index) => item === right[index]);
+}
+function safeRepositoryPath(value) {
+    return safeWriteScope(value) && !value.endsWith('/');
+}
+function safeWriteScope(value) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > 512
+        || value.startsWith('/') || value.startsWith('-') || value.includes('\\')
+        || value.includes('\0') || value.includes('//'))
+        return false;
+    const parts = value.replace(/\/$/, '').split('/');
+    return parts.length > 0 && parts.every((part) => part.length > 0 && part !== '.' && part !== '..')
+        && parts[0] !== '.git';
+}
+function writeScopeCovers(scope, path) {
+    return scope === path || scope.endsWith('/') && path.startsWith(scope);
+}

package/targets-stubs/antigravity/gemini.md

@@ -1,4 +1,4 @@
-# 🧠 Neocortex v4.60.72 | OrNexus Team
+# 🧠 Neocortex v4.60.74 | OrNexus Team
 
 This project uses Neocortex, a Development Orchestrator.
 

package/targets-stubs/antigravity/skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex
-description: "🧠 Neocortex v4.60.72 | OrNexus Team"
+description: "🧠 Neocortex v4.60.74 | OrNexus Team"
 ---
 
 <!--

package/targets-stubs/claude-code/neocortex-root.agent.yaml

@@ -4,7 +4,7 @@ agent:
     name: 'Neocortex Root Agent'
     title: 'Development Orchestrator (Root)'
     icon: '>'
-    version: '4.60.72'
+    version: '4.60.74'
     architecture: 'thin-client'
     module: stand-alone
     hasSidecar: false

package/targets-stubs/claude-code/neocortex-root.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex-root
-description: "🧠 Neocortex Root Agent v4.60.72 | OrNexus Team"
+description: "🧠 Neocortex Root Agent v4.60.74 | OrNexus Team"
 model: opus
 color: blue
 tools:
@@ -108,7 +108,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.72                           │
+│      ###  ########      v4.60.74                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/claude-code/neocortex.agent.yaml

@@ -4,7 +4,7 @@ agent:
     name: 'Neocortex'
     title: 'Development Orchestrator'
     icon: '>'
-    version: '4.60.72'
+    version: '4.60.74'
     architecture: 'thin-client'
     module: stand-alone
     hasSidecar: false

package/targets-stubs/claude-code/neocortex.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex
-description: "🧠 Neocortex v4.60.72 | OrNexus Team"
+description: "🧠 Neocortex v4.60.74 | OrNexus Team"
 model: opus
 color: blue
 permissionMode: bypassPermissions
@@ -104,7 +104,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.72                           │
+│      ###  ########      v4.60.74                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/codex/AGENTS.md

@@ -28,7 +28,7 @@ Codex built-in commands or actions.
 
 <!-- END: Plugin Conflict Prevention -->
 
-# Neocortex v4.60.72 | OrNexus Team
+# Neocortex v4.60.74 | OrNexus Team
 
 You are a Development Orchestrator. All orchestration logic is delivered by the remote Neocortex server.
 

package/targets-stubs/cursor/agent.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex
-description: "🧠 Neocortex v4.60.72 | OrNexus Team"
+description: "🧠 Neocortex v4.60.74 | OrNexus Team"
 model: inherit
 readonly: false
 is_background: false
@@ -64,7 +64,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.72                           │
+│      ###  ########      v4.60.74                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/gemini-cli/agent.md

@@ -1,6 +1,6 @@
 ---
 name: neocortex-root
-description: "🧠 Neocortex v4.60.72 | OrNexus Team"
+description: "🧠 Neocortex v4.60.74 | OrNexus Team"
 kind: local
 tools:
   # File operations (Gemini CLI built-ins)
@@ -62,7 +62,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.72                           │
+│      ###  ########      v4.60.74                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/opencode/neocortex-root.md

@@ -58,7 +58,7 @@ explicit server opt-in rather than a local assumption.
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.72                           │
+│      ###  ########      v4.60.74                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │

package/targets-stubs/vscode/neocortex.agent.md

@@ -1,6 +1,6 @@
 ---
 name: "neocortex"
-description: "Neocortex v4.60.72 | OrNexus Team"
+description: "Neocortex v4.60.74 | OrNexus Team"
 tools:
   # Read / Edit (built-in tool sets)
   - read
@@ -68,7 +68,7 @@ SEMPRE que este agente for invocado, imprima o banner abaixo como PRIMEIRO outpu
 ┌────────────────────────────────────────────────────────────┐
 │                                                            │
 │       #######           N E O C O R T E X                  │
-│      ###  ########      v4.60.72                           │
+│      ###  ########      v4.60.74                           │
 │ #########      #####                                       │
 │ ##    ##############    Development Orchestrator           │
 │ ##   ###  ######  ##    OrNexus Team                       │