@ornexus/neocortex 4.60.72 → 4.60.74

package/packages/client/dist/git/epic-operational-state.d.ts

@@ -0,0 +1,198 @@
+import type { YoloopPersistedCounters, YoloopPersistedLock, YoloopPersistenceCapability, YoloopStateOperation } from '../yoloop/shared-yoloop-types.js';
+import { type GitLifecycleRuntimeDocument } from './git-lifecycle-store.js';
+export declare const EPIC_OPERATIONAL_SOURCE_LIMIT_BYTES: number;
+export declare const EPIC_OPERATIONAL_PAYLOAD_LIMIT_BYTES: number;
+export declare const EPIC_OPERATIONAL_RECEIPT_CAP = 64;
+export declare const EPIC_OPERATIONAL_IDENTITY_CAP = 2048;
+export type EpicOperationalJournalKind = 'backfill' | 'cross-epic-reconcile' | 'rollback';
+export type EpicOperationalJournalPhase = 'prepared' | 'authority-applied' | 'projections-applied' | 'committed' | 'aborted-before-authority';
+export interface EpicOperationalIdentityV1 {
+    readonly schemaVersion: 'EpicOperationalIdentity/1.0';
+    readonly epicId: string;
+    readonly executionBranch: string;
+    readonly graphRevision: string;
+    readonly originBindingDigest: string;
+    readonly repositoryFingerprint: string;
+    readonly identityHash: string;
+}
+export interface CommonYoloopAuthorityV1 {
+    readonly schemaVersion: 'CommonYoloopAuthority/1.0';
+    readonly lock: YoloopPersistedLock | null;
+    readonly state: YoloopPersistedCounters;
+    readonly capabilities: readonly YoloopPersistenceCapability[];
+}
+export interface EpicOperationalProjectionBindingV1 {
+    readonly status: 'bound' | 'unbound' | 'unavailable';
+    readonly sourceDigest: string | null;
+    readonly authorityRevision: number;
+    readonly reasonCodes: readonly string[];
+}
+export interface EpicOperationalProjectionBindingsV1 {
+    readonly schemaVersion: 'EpicOperationalProjectionBindings/1.0';
+    readonly trackedState: EpicOperationalProjectionBindingV1;
+    readonly sqlite: EpicOperationalProjectionBindingV1;
+}
+export interface EpicOperationalJournalV1 {
+    readonly schemaVersion: 'EpicOperationalJournal/1.0';
+    readonly kind: EpicOperationalJournalKind;
+    readonly operationId: string;
+    readonly idempotencyKey: string;
+    readonly payloadHash: string;
+    readonly identityHash: string;
+    readonly expectedRevision: number;
+    readonly expectedWriterEpoch: number;
+    readonly preimageDigest: string;
+    readonly backupManifestRef: string;
+    readonly phase: EpicOperationalJournalPhase;
+    readonly projectionStatuses: {
+        readonly trackedState: 'pending' | 'applied' | 'not-applicable';
+        readonly sqlite: 'pending' | 'applied' | 'unavailable' | 'not-applicable';
+    };
+    readonly reasonCodes: readonly string[];
+}
+export interface YoloopCrossEpicReconciliationReceiptV1 {
+    readonly schemaVersion: 'YoloopCrossEpicReconciliationReceipt/1.0';
+    readonly operationId: string;
+    readonly idempotencyKey: string;
+    readonly payloadHash: string;
+    readonly sourceEpicId: string;
+    readonly sourceGraphRevision: string;
+    readonly targetEpicId: string;
+    readonly targetGraphRevision: string;
+    readonly runId: string;
+    readonly previousSessionHash: string;
+    readonly nextSessionHash: string;
+    readonly retiredAuthorityHash: string;
+    readonly retiredAuthorityCount: 0 | 1;
+    readonly outcome: 'cross-epic-reconciled';
+    readonly publicSafe: true;
+}
+export interface EpicLifecycleBackfillReceiptV1 {
+    readonly schemaVersion: 'EpicLifecycleBackfillReceipt/1.0';
+    readonly operationId: string;
+    readonly idempotencyKey: string;
+    readonly payloadHash: string;
+    readonly planDigest: string;
+    readonly sourceInventoryDigest: string;
+    readonly preimageDigest: string;
+    readonly postimageDigest: string;
+    readonly authorityPostimageDigest: string;
+    readonly backupManifestDigest: string;
+    readonly identityHash: string;
+    readonly appliedRevision: number;
+    readonly writerEpoch: number;
+    readonly stateMigrationOperationId: string | null;
+    readonly outcome: 'applied' | 'already-applied';
+    readonly reasonCodes: readonly string[];
+    readonly publicSafe: true;
+}
+export interface EpicOperationalRollbackReceiptV1 {
+    readonly schemaVersion: 'EpicOperationalRollbackReceipt/1.0';
+    readonly operationId: string;
+    readonly targetOperationId: string;
+    readonly expectedPostimageDigest: string;
+    readonly restoredPreimageDigest: string;
+    readonly reasonCodes: readonly string[];
+    readonly publicSafe: true;
+}
+export interface EpicOperationalStateV1 {
+    readonly schemaVersion: 'EpicOperationalState/1.0';
+    readonly repositoryFingerprint: string;
+    readonly writerEpoch: number;
+    readonly capabilities: readonly ('epic-operational-state-v1' | 'epic-lifecycle-backfill-v1')[];
+    readonly identities: Readonly<Record<string, EpicOperationalIdentityV1>>;
+    readonly yoloop: CommonYoloopAuthorityV1;
+    readonly projectionBindings: EpicOperationalProjectionBindingsV1;
+    readonly activeJournal: EpicOperationalJournalV1 | null;
+    readonly backfillReceipts: readonly EpicLifecycleBackfillReceiptV1[];
+    readonly reconciliationReceipts: readonly YoloopCrossEpicReconciliationReceiptV1[];
+    readonly rollbackReceipts: readonly EpicOperationalRollbackReceiptV1[];
+}
+export interface EpicOperationalPublicProjectionV1 {
+    readonly schemaVersion: 'EpicOperationalPublicProjection/1.0';
+    readonly repositoryFingerprint: string;
+    readonly identityHash: string;
+    readonly epicId: string;
+    readonly executionBranch: string;
+    readonly graphRevision: string;
+    readonly storeRevision: number;
+    readonly writerEpoch: number;
+    readonly runId: string | null;
+    readonly runStatus: string | null;
+    readonly runRevision: number | null;
+    readonly snapshotHash: string | null;
+    readonly continuationSessionHash: string;
+    readonly pendingAuthorityHash: string;
+    readonly pendingAuthorityCount: number;
+    readonly lockActive: boolean;
+    readonly currentSessionActive: boolean;
+    readonly journalActive: boolean;
+    readonly reasonCodes: readonly string[];
+    readonly publicSafe: true;
+}
+export interface YoloopCrossEpicReconciliationEvidenceV1 extends Omit<EpicOperationalPublicProjectionV1, 'schemaVersion'> {
+    readonly schemaVersion: 'YoloopCrossEpicReconciliationEvidence/1.0';
+    readonly sourceEpicId: string;
+    readonly sourceGraphRevision: string;
+    readonly targetEpicId: string;
+    readonly targetGraphRevision: string;
+    readonly decision: 'eligible';
+}
+export type CrossEpicReconciliationDecisionV1 = {
+    readonly kind: 'eligible';
+    readonly evidence: YoloopCrossEpicReconciliationEvidenceV1;
+} | {
+    readonly kind: 'blocked';
+    readonly reasonCodes: readonly string[];
+} | {
+    readonly kind: 'not-applicable';
+    readonly reasonCodes: readonly string[];
+};
+export interface EpicOperationalMutationContext {
+    readonly identityHash: string;
+    readonly expectedRevision: number;
+    readonly expectedWriterEpoch: number;
+}
+export declare function epicOperationalCanonicalJson(value: unknown): string;
+export declare function epicOperationalHash(domain: string, value: unknown): string;
+export declare function deriveEpicOperationalRepositoryFingerprint(projectRoot: string): string;
+export declare function createEpicOperationalIdentity(projectRoot: string, input: {
+    readonly epicId: string;
+    readonly executionBranch: string;
+    readonly graphRevision: string;
+    readonly originBindingDigest: string;
+}): EpicOperationalIdentityV1;
+export declare function createInitialEpicOperationalState(input: {
+    readonly identity: EpicOperationalIdentityV1;
+    readonly yoloop: Omit<CommonYoloopAuthorityV1, 'schemaVersion'>;
+    readonly trackedStateDigest: string;
+    readonly sqliteStatus?: 'unbound' | 'unavailable';
+    readonly sqliteReasonCodes?: readonly string[];
+}): EpicOperationalStateV1;
+export declare function assertEpicOperationalState(value: unknown): asserts value is EpicOperationalStateV1;
+export declare function readEpicOperationalState(projectRoot: string, context?: Partial<EpicOperationalMutationContext>): {
+    readonly document: GitLifecycleRuntimeDocument;
+    readonly operational: EpicOperationalStateV1;
+};
+export declare function mutateEpicOperationalState<T>(projectRoot: string, context: EpicOperationalMutationContext, mutate: (state: EpicOperationalStateV1, document: GitLifecycleRuntimeDocument) => T): Promise<{
+    readonly document: GitLifecycleRuntimeDocument;
+    readonly value: T;
+}>;
+export declare function projectEpicOperationalState(document: GitLifecycleRuntimeDocument, identityHash: string): EpicOperationalPublicProjectionV1;
+export declare function classifyCrossEpicContinuationReconciliation(input: {
+    readonly document: GitLifecycleRuntimeDocument;
+    readonly targetIdentityHash: string;
+    readonly targetEpicId: string;
+    readonly targetGraphRevision: string;
+    readonly legacyActivity: 'inactive' | 'active' | 'unknown';
+}): CrossEpicReconciliationDecisionV1;
+export declare function buildCrossEpicContinuationPayloadHash(payload: Omit<Extract<YoloopStateOperation, {
+    readonly type: 'reconcile_cross_epic_continuation';
+}>, 'type' | 'payloadHash' | 'receipt'>): string;
+export declare function applyCrossEpicContinuationReconciliation(projectRoot: string, operation: Extract<YoloopStateOperation, {
+    readonly type: 'reconcile_cross_epic_continuation';
+}>): Promise<{
+    readonly applied: boolean;
+    readonly replay: boolean;
+    readonly receipt: YoloopCrossEpicReconciliationReceiptV1;
+}>;

package/packages/client/dist/git/epic-operational-state.js

@@ -0,0 +1,2 @@
+import{execFileSync as O}from"node:child_process";import{createHash as S}from"node:crypto";import{existsSync as B,fsyncSync as V,lstatSync as w,mkdirSync as Y,openSync as _,closeSync as J,readFileSync as N,realpathSync as E,writeFileSync as q}from"node:fs";import{isAbsolute as x,join as R,relative as Z,resolve as y}from"node:path";import{GIT_LIFECYCLE_RUNTIME_DIRECTORY as F,mutateGitLifecycleRuntime as U,readGitLifecycleRuntime as Q,readGitLifecycleRuntimeSync as X}from"./git-lifecycle-store.js";const ee=4*1024*1024,ie=1024*1024,C=64,te=2048,oe=/^[a-f0-9]{64}$/,A=/^P[1-9][0-9]*(?:\.[0-9]+)*$/,ne=/^[A-Za-z0-9._:/#\-[\]]{1,240}$/;function m(i){return i===null||typeof i!="object"?JSON.stringify(i):Array.isArray(i)?`[${i.map(m).join(",")}]`:`{${Object.entries(i).filter(([,e])=>e!==void 0).sort(([e],[t])=>e.localeCompare(t)).map(([e,t])=>`${JSON.stringify(e)}:${m(t)}`).join(",")}}`}function g(i,e){return S("sha256").update(`${i}\0${m(e)}`).digest("hex")}function re(i){const e=E(y(i)),t=O("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),o=x(t)?y(t):y(e,t),n=E(o);if(n!==o)throw new Error("epic-operational-path-unsafe");const r=w(n);if(!r.isDirectory()||r.isSymbolicLink())throw new Error("epic-operational-path-unsafe");return g("p224-epic-operational-repository-v1",{commonDir:n,dev:Number(r.dev),ino:Number(r.ino)})}function we(i,e){const t=re(i),o={schemaVersion:"EpicOperationalIdentity/1.0",epicId:e.epicId,executionBranch:e.executionBranch,graphRevision:e.graphRevision,originBindingDigest:e.originBindingDigest,repositoryFingerprint:t},n=Object.freeze({...o,identityHash:g("p224-epic-operational-identity-v1",o)});return W(n),n}function xe(i){const e={schemaVersion:"EpicOperationalState/1.0",repositoryFingerprint:i.identity.repositoryFingerprint,writerEpoch:1,capabilities:["epic-operational-state-v1","epic-lifecycle-backfill-v1"],identities:{[i.identity.identityHash]:i.identity},yoloop:{schemaVersion:"CommonYoloopAuthority/1.0",...i.yoloop},projectionBindings:{schemaVersion:"EpicOperationalProjectionBindings/1.0",trackedState:{status:"bound",sourceDigest:i.trackedStateDigest,authorityRevision:0,reasonCodes:["epic-operational-tracked-state-bound"]},sqlite:{status:i.sqliteStatus??"unbound",sourceDigest:null,authorityRevision:0,reasonCodes:i.sqliteReasonCodes??["epic-operational-projection-unbound"]}},activeJournal:null,backfillReceipts:[],reconciliationReceipts:[],rollbackReceipts:[]};return I(e),Object.freeze(e)}function I(i){const e=p(i);if(!e)throw new Error("epic-operational-store-corrupt");z(e,["schemaVersion","repositoryFingerprint","writerEpoch","capabilities","identities","yoloop","projectionBindings","activeJournal","backfillReceipts","reconciliationReceipts","rollbackReceipts"]);const t=p(e.identities),o=p(e.yoloop),n=p(e.projectionBindings);if(e.schemaVersion!=="EpicOperationalState/1.0"||!l(e.repositoryFingerprint)||!Number.isSafeInteger(e.writerEpoch)||Number(e.writerEpoch)<1||!Array.isArray(e.capabilities)||!ge(e.capabilities,["epic-operational-state-v1","epic-lifecycle-backfill-v1"])||!t||Object.keys(t).length>te||!o||!v(o,["schemaVersion","lock","state","capabilities"])||o.schemaVersion!=="CommonYoloopAuthority/1.0"||!p(o.state)||!(o.lock===null||p(o.lock))||!Array.isArray(o.capabilities)||o.capabilities.length>16||new Set(o.capabilities).size!==o.capabilities.length||o.capabilities.some(r=>!["rollover-session-v1","successor-transition-v1","continuation-replan-v1","cross-epic-continuation-reconcile-v1"].includes(String(r)))||!n||!v(n,["schemaVersion","trackedState","sqlite"])||n.schemaVersion!=="EpicOperationalProjectionBindings/1.0"||!T(n.trackedState)||!T(n.sqlite)||!(e.activeJournal===null||ue(e.activeJournal))||!P(e.backfillReceipts,"EpicLifecycleBackfillReceipt/1.0")||!P(e.reconciliationReceipts,"YoloopCrossEpicReconciliationReceipt/1.0")||!P(e.rollbackReceipts,"EpicOperationalRollbackReceipt/1.0"))throw new Error("epic-operational-store-corrupt");for(const[r,c]of Object.entries(t))if(W(c),r!==c.identityHash||c.repositoryFingerprint!==e.repositoryFingerprint)throw new Error("epic-operational-identity-mismatch");if(Buffer.byteLength(m(e),"utf8")>ee)throw new Error("epic-operational-source-oversized")}function Ce(i,e){const t=X(i,{required:!0});if(t.schemaVersion!==2||t.operational===void 0)throw new Error("epic-operational-store-missing");return I(t.operational),K(t,t.operational,e),{document:t,operational:t.operational}}async function k(i,e,t){try{return await U(i,o=>{if(o.schemaVersion!==2||o.operational===void 0)throw new Error("epic-operational-store-missing");return I(o.operational),K(o,o.operational,e),t(o.operational,o)},{expectedRevision:e.expectedRevision})}catch(o){throw o instanceof Error&&o.message==="git-lifecycle-runtime-revision-conflict"?new Error("epic-operational-revision-conflict"):o}}function se(i,e){if(i.schemaVersion!==2||i.operational===void 0)throw new Error("epic-operational-store-missing");I(i.operational);const t=i.operational,o=t.identities[e];if(!o)throw new Error("epic-operational-identity-mismatch");const n=p(t.yoloop.state.runControl),r=t.yoloop.state.pendingContinuationAuthorities??[];return Object.freeze({schemaVersion:"EpicOperationalPublicProjection/1.0",repositoryFingerprint:t.repositoryFingerprint,identityHash:e,epicId:o.epicId,executionBranch:o.executionBranch,graphRevision:o.graphRevision,storeRevision:i.revision,writerEpoch:t.writerEpoch,runId:typeof n?.runId=="string"?n.runId:null,runStatus:typeof n?.status=="string"?n.status:null,runRevision:Number.isSafeInteger(n?.revision)?Number(n.revision):null,snapshotHash:n?.latestSnapshotHash===null||l(n?.latestSnapshotHash)?n?.latestSnapshotHash:null,continuationSessionHash:g("p224-common-continuation-session-v1",t.yoloop.state.continuationSession??null),pendingAuthorityHash:g("p224-common-pending-authorities-v1",r),pendingAuthorityCount:r.length,lockActive:t.yoloop.lock!==null,currentSessionActive:t.yoloop.state.currentSession!==null,journalActive:t.activeJournal!==null,reasonCodes:["epic-operational-projection-bounded"],publicSafe:!0})}function ke(i){let e;try{e=se(i.document,i.targetIdentityHash)}catch(d){return{kind:"blocked",reasonCodes:[Ee(d)]}}const t=i.document.operational,o=t.identities[i.targetIdentityHash],n=p(t.yoloop.state.continuationSession);if(!n)return{kind:"not-applicable",reasonCodes:["yoloop-cross-epic-session-missing"]};const r=typeof n.epicId=="string"?n.epicId:"",c=typeof n.graphFingerprint=="string"?n.graphFingerprint:"";if(r===i.targetEpicId&&c===i.targetGraphRevision)return{kind:"not-applicable",reasonCodes:["yoloop-cross-epic-target-unchanged"]};const s=[],u=p(t.yoloop.state.runControl),a=t.yoloop.state.pendingContinuationAuthorities??[];if((!o||o.epicId!==i.targetEpicId||o.graphRevision!==i.targetGraphRevision)&&s.push("epic-operational-identity-mismatch"),t.yoloop.capabilities.includes("cross-epic-continuation-reconcile-v1")||s.push("yoloop-cross-epic-capability-missing"),(!u||!["success","exhausted"].includes(String(u.status)))&&s.push("yoloop-cross-epic-predecessor-active"),(t.yoloop.lock!==null||t.yoloop.state.currentSession!==null||i.legacyActivity!=="inactive")&&s.push("yoloop-cross-epic-lock-active"),t.activeJournal!==null&&s.push("epic-operational-journal-conflict"),t.reconciliationReceipts.length>=C&&s.push("yoloop-cross-epic-receipt-capacity"),a.length>1&&s.push("yoloop-cross-epic-authority-ambiguous"),a.length===1){const d=p(a[0]),h=p(d?.certificate);!d||!h||d.sessionId!==n.sessionId||h.sessionId!==n.sessionId?s.push("yoloop-cross-epic-authority-ambiguous"):d.delegated!==!1&&s.push("yoloop-cross-epic-authority-delegated")}return(!l(c)||!l(n.sessionId)||e.runId===null||e.runRevision===null)&&s.push("yoloop-cross-epic-state-corrupt"),s.length>0?{kind:"blocked",reasonCodes:[...new Set(s)]}:{kind:"eligible",evidence:Object.freeze({...e,schemaVersion:"YoloopCrossEpicReconciliationEvidence/1.0",sourceEpicId:r,sourceGraphRevision:c,targetEpicId:i.targetEpicId,targetGraphRevision:i.targetGraphRevision,decision:"eligible"})}}function ce(i){return g("p224-cross-epic-continuation-reconcile-v1",i)}async function He(i,e){pe(e);let t=await Q(i,{required:!0});if(t.schemaVersion!==2||t.operational===void 0)throw new Error("epic-operational-store-missing");I(t.operational);let o=t.operational;const n=L(e),r=o.reconciliationReceipts.find(a=>a.operationId===e.operationId||a.idempotencyKey===e.idempotencyKey);if(r){if(m(r)!==m(n)||g("p224-common-continuation-session-v1",o.yoloop.state.continuationSession??null)!==e.nextSessionHash||(o.yoloop.state.pendingContinuationAuthorities?.length??0)!==0)throw new Error("yoloop-cross-epic-replay-conflict");return{applied:!1,replay:!0,receipt:r}}if(o.reconciliationReceipts.length>=C)throw new Error("yoloop-cross-epic-receipt-capacity");const c=o.activeJournal;if(c&&(c.operationId!==e.operationId||c.idempotencyKey!==e.idempotencyKey||c.payloadHash!==e.payloadHash))throw new Error("epic-operational-journal-conflict");c||G(t,o,e);const s=c?de(i,c.backupManifestRef,c.preimageDigest):le(i,e.operationId,o);if(!c){const a=ae(e,s.digest,s.ref,"prepared");t=(await k(i,{identityHash:e.expectedIdentityHash,expectedRevision:t.revision,expectedWriterEpoch:e.expectedWriterEpoch},h=>{h.activeJournal=a})).document,o=t.operational}if(o.activeJournal?.phase==="prepared"){G(t,o,e,!0);const a={...o.yoloop.state,continuationSession:e.nextSession,pendingContinuationAuthorities:[]};t=(await k(i,{identityHash:e.expectedIdentityHash,expectedRevision:t.revision,expectedWriterEpoch:e.expectedWriterEpoch},h=>{h.yoloop={...h.yoloop,state:a},h.activeJournal={...h.activeJournal,phase:"authority-applied"}})).document,o=t.operational}if(o.activeJournal?.phase==="authority-applied"&&(t=(await k(i,{identityHash:e.expectedIdentityHash,expectedRevision:t.revision,expectedWriterEpoch:e.expectedWriterEpoch},d=>{d.activeJournal={...d.activeJournal,phase:"projections-applied",projectionStatuses:{trackedState:"not-applicable",sqlite:"not-applicable"}}})).document,o=t.operational),o.activeJournal?.phase!=="projections-applied")throw new Error("epic-operational-journal-corrupt");const u=await k(i,{identityHash:e.expectedIdentityHash,expectedRevision:t.revision,expectedWriterEpoch:e.expectedWriterEpoch},a=>{if(a.reconciliationReceipts.length>=C)throw new Error("yoloop-cross-epic-receipt-capacity");a.reconciliationReceipts=[...a.reconciliationReceipts,n],a.activeJournal=null});return I(u.document.operational),{applied:!0,replay:!1,receipt:n}}function G(i,e,t,o=!1){const n=p(e.yoloop.state.runControl),r=e.yoloop.state.pendingContinuationAuthorities??[],c=e.identities[t.expectedIdentityHash],s=p(e.yoloop.state.continuationSession);if(i.revision!==t.expectedCommonRevision&&!o||e.writerEpoch!==t.expectedWriterEpoch||!c||c.epicId!==t.targetEpicId||c.graphRevision!==t.targetGraphRevision||!e.yoloop.capabilities.includes("cross-epic-continuation-reconcile-v1")||e.yoloop.lock!==null||e.yoloop.state.currentSession!==null||!n||n.runId!==t.expectedRunId||n.status!==t.expectedRunStatus||n.revision!==t.expectedRunRevision||(n.latestSnapshotHash??null)!==t.expectedSnapshotHash||!s||s.epicId!==t.sourceEpicId||s.graphFingerprint!==t.sourceGraphRevision||s.sessionId!==t.sourceSessionId||g("p224-common-continuation-session-v1",e.yoloop.state.continuationSession??null)!==t.expectedSessionHash||g("p224-common-pending-authorities-v1",r)!==t.expectedPendingHash||r.length!==t.expectedPendingCount)throw new Error("yoloop-cross-epic-revision-conflict");if(r.length>1||r.some(u=>{const a=p(u),d=p(a?.certificate);return!a||a.delegated!==!1||!d||a.sessionId!==t.sourceSessionId||d.sessionId!==t.sourceSessionId}))throw new Error("yoloop-cross-epic-authority-ambiguous")}function L(i){return Object.freeze({schemaVersion:"YoloopCrossEpicReconciliationReceipt/1.0",operationId:i.operationId,idempotencyKey:i.idempotencyKey,payloadHash:i.payloadHash,sourceEpicId:i.sourceEpicId,sourceGraphRevision:i.sourceGraphRevision,targetEpicId:i.targetEpicId,targetGraphRevision:i.targetGraphRevision,runId:i.expectedRunId,previousSessionHash:i.expectedSessionHash,nextSessionHash:i.nextSessionHash,retiredAuthorityHash:i.expectedPendingHash,retiredAuthorityCount:i.expectedPendingCount,outcome:"cross-epic-reconciled",publicSafe:!0})}function ae(i,e,t,o){return{schemaVersion:"EpicOperationalJournal/1.0",kind:"cross-epic-reconcile",operationId:i.operationId,idempotencyKey:i.idempotencyKey,payloadHash:i.payloadHash,identityHash:i.expectedIdentityHash,expectedRevision:i.expectedCommonRevision,expectedWriterEpoch:i.expectedWriterEpoch,preimageDigest:e,backupManifestRef:t,phase:o,projectionStatuses:{trackedState:"not-applicable",sqlite:"not-applicable"},reasonCodes:["epic-operational-backup-verified"]}}function pe(i){const{type:e,payloadHash:t,receipt:o,...n}=i,r=p(i.nextSession);if(!f(i.operationId)||!f(i.idempotencyKey)||ce(n)!==i.payloadHash||Buffer.byteLength(m(n),"utf8")>ie||i.expectedPendingCount<0||i.expectedPendingCount>1||!r||r.epicId!==i.targetEpicId||r.graphFingerprint!==i.targetGraphRevision||!l(r.sessionId)||i.nextSessionHash!==g("p224-common-continuation-session-v1",i.nextSession)||m(i.receipt)!==m(L(i)))throw new Error("yoloop-cross-epic-replay-conflict")}function le(i,e,t){if(!f(e))throw new Error("epic-operational-backup-failed");const o=E(y(i)),n=O("git",["rev-parse","--git-common-dir"],{cwd:o,encoding:"utf8"}).trim(),r=E(x(n)?y(n):y(o,n)),c=R(r,F),s=R(c,"backups");D(c,r),B(s)||Y(s,{mode:448}),D(s,c);const u=`${e}.operational.json`,a=R(s,u),d=`${JSON.stringify(t,null,2)}
+`,h=S("sha256").update(d).digest("hex");if(B(a)){const b=w(a);if(!b.isFile()||b.isSymbolicLink()||S("sha256").update(N(a)).digest("hex")!==h)throw new Error("epic-operational-backup-failed")}else{const b=_(a,"wx",384);try{q(b,d),V(b)}finally{J(b)}const j=_(s,"r");try{V(j)}finally{J(j)}}return{ref:`backups/${u}`,digest:h}}function de(i,e,t){if(!/^backups\/[A-Za-z0-9._-]{1,240}$/.test(e)||!l(t))throw new Error("epic-operational-backup-failed");const o=E(y(i)),n=O("git",["rev-parse","--git-common-dir"],{cwd:o,encoding:"utf8"}).trim(),r=E(x(n)?y(n):y(o,n)),c=R(r,F),s=R(c,e);D(c,r);const u=w(s);if(!u.isFile()||u.isSymbolicLink()||S("sha256").update(N(s)).digest("hex")!==t)throw new Error("epic-operational-backup-failed");return{ref:e,digest:t}}function D(i,e){const t=E(e);if(Z(t,y(i)).startsWith(".."))throw new Error("epic-operational-path-unsafe");const o=w(i);if(!o.isDirectory()||o.isSymbolicLink()||E(i)!==y(i)||typeof process.getuid=="function"&&(o.uid!==process.getuid()||(o.mode&63)!==0))throw new Error("epic-operational-path-unsafe")}function K(i,e,t){if(t?.expectedRevision!==void 0&&i.revision!==t.expectedRevision)throw new Error("epic-operational-revision-conflict");if(t?.expectedWriterEpoch!==void 0&&e.writerEpoch!==t.expectedWriterEpoch)throw new Error("epic-operational-epoch-conflict");if(t?.identityHash!==void 0&&!e.identities[t.identityHash])throw new Error("epic-operational-identity-mismatch")}function W(i){const e=p(i);if(!e)throw new Error("epic-operational-identity-mismatch");z(e,["schemaVersion","epicId","executionBranch","graphRevision","originBindingDigest","repositoryFingerprint","identityHash"]);const{identityHash:t,...o}=e;if(e.schemaVersion!=="EpicOperationalIdentity/1.0"||!A.test(String(e.epicId))||!me(e.executionBranch)||!l(e.graphRevision)||!l(e.originBindingDigest)||!l(e.repositoryFingerprint)||t!==g("p224-epic-operational-identity-v1",o))throw new Error("epic-operational-identity-mismatch")}function T(i){const e=p(i);return!!(e&&v(e,["status","sourceDigest","authorityRevision","reasonCodes"])&&["bound","unbound","unavailable"].includes(String(e.status))&&(e.sourceDigest===null||l(e.sourceDigest))&&Number.isSafeInteger(e.authorityRevision)&&Number(e.authorityRevision)>=0&&Array.isArray(e.reasonCodes)&&e.reasonCodes.length<=16&&e.reasonCodes.every(H))}function ue(i){const e=p(i),t=p(e?.projectionStatuses);return!!(e&&v(e,["schemaVersion","kind","operationId","idempotencyKey","payloadHash","identityHash","expectedRevision","expectedWriterEpoch","preimageDigest","backupManifestRef","phase","projectionStatuses","reasonCodes"])&&e.schemaVersion==="EpicOperationalJournal/1.0"&&["backfill","cross-epic-reconcile","rollback"].includes(String(e.kind))&&M(e.operationId)&&M(e.idempotencyKey)&&l(e.payloadHash)&&l(e.identityHash)&&Number.isSafeInteger(e.expectedRevision)&&Number.isSafeInteger(e.expectedWriterEpoch)&&l(e.preimageDigest)&&typeof e.backupManifestRef=="string"&&e.backupManifestRef.length<=1024&&!x(e.backupManifestRef)&&!e.backupManifestRef.includes("..")&&["prepared","authority-applied","projections-applied","committed","aborted-before-authority"].includes(String(e.phase))&&t&&v(t,["trackedState","sqlite"])&&["pending","applied","not-applicable"].includes(String(t.trackedState))&&["pending","applied","unavailable","not-applicable"].includes(String(t.sqlite))&&Array.isArray(e.reasonCodes)&&e.reasonCodes.length<=16&&e.reasonCodes.every(H))}function P(i,e){return Array.isArray(i)&&i.length<=C&&i.every(t=>e==="EpicLifecycleBackfillReceipt/1.0"?he(t):e==="YoloopCrossEpicReconciliationReceipt/1.0"?ye(t):fe(t))}function he(i){const e=p(i);return!!(e&&v(e,["schemaVersion","operationId","idempotencyKey","payloadHash","planDigest","sourceInventoryDigest","preimageDigest","postimageDigest","authorityPostimageDigest","backupManifestDigest","identityHash","appliedRevision","writerEpoch","stateMigrationOperationId","outcome","reasonCodes","publicSafe"])&&e.schemaVersion==="EpicLifecycleBackfillReceipt/1.0"&&f(e.operationId)&&f(e.idempotencyKey)&&e.operationId===e.idempotencyKey&&[e.payloadHash,e.planDigest,e.sourceInventoryDigest,e.preimageDigest,e.postimageDigest,e.authorityPostimageDigest,e.backupManifestDigest,e.identityHash].every(l)&&Number.isSafeInteger(e.appliedRevision)&&Number(e.appliedRevision)>=1&&Number.isSafeInteger(e.writerEpoch)&&Number(e.writerEpoch)>=1&&(e.stateMigrationOperationId===null||f(e.stateMigrationOperationId))&&["applied","already-applied"].includes(String(e.outcome))&&$(e.reasonCodes)&&e.publicSafe===!0)}function ye(i){const e=p(i);return!!(e&&v(e,["schemaVersion","operationId","idempotencyKey","payloadHash","sourceEpicId","sourceGraphRevision","targetEpicId","targetGraphRevision","runId","previousSessionHash","nextSessionHash","retiredAuthorityHash","retiredAuthorityCount","outcome","publicSafe"])&&e.schemaVersion==="YoloopCrossEpicReconciliationReceipt/1.0"&&f(e.operationId)&&f(e.idempotencyKey)&&l(e.payloadHash)&&A.test(String(e.sourceEpicId))&&A.test(String(e.targetEpicId))&&l(e.sourceGraphRevision)&&l(e.targetGraphRevision)&&f(e.runId)&&l(e.previousSessionHash)&&l(e.nextSessionHash)&&l(e.retiredAuthorityHash)&&[0,1].includes(Number(e.retiredAuthorityCount))&&e.outcome==="cross-epic-reconciled"&&e.publicSafe===!0)}function fe(i){const e=p(i);return!!(e&&v(e,["schemaVersion","operationId","targetOperationId","expectedPostimageDigest","restoredPreimageDigest","reasonCodes","publicSafe"])&&e.schemaVersion==="EpicOperationalRollbackReceipt/1.0"&&f(e.operationId)&&f(e.targetOperationId)&&l(e.expectedPostimageDigest)&&l(e.restoredPreimageDigest)&&$(e.reasonCodes)&&e.publicSafe===!0)}function $(i){return Array.isArray(i)&&i.length<=16&&i.every(H)}function ge(i,e){return i.length===e.length&&e.every(t=>i.includes(t))}function z(i,e){const t=new Set(e);if(Object.keys(i).some(o=>!t.has(o)))throw new Error("epic-operational-store-corrupt")}function v(i,e){const t=Object.keys(i).sort(),o=[...e].sort();return t.length===o.length&&t.every((n,r)=>n===o[r])}function p(i){return i&&typeof i=="object"&&!Array.isArray(i)?i:void 0}function l(i){return typeof i=="string"&&oe.test(i)}function M(i){return typeof i=="string"&&ne.test(i)&&!i.includes("..")}function f(i){return typeof i=="string"&&/^[A-Za-z0-9._:-]{1,128}$/.test(i)}function H(i){return typeof i=="string"&&/^[a-z0-9][a-z0-9-]{0,79}$/.test(i)}function me(i){return typeof i=="string"&&/^[A-Za-z0-9][A-Za-z0-9._/-]{0,239}$/.test(i)&&!i.includes("..")&&!i.includes("//")&&!i.includes("@{")&&!i.endsWith("/")&&!i.endsWith(".")}function Ee(i){const e=i instanceof Error?i.message:"";return H(e)?e:"epic-operational-store-corrupt"}export{te as EPIC_OPERATIONAL_IDENTITY_CAP,ie as EPIC_OPERATIONAL_PAYLOAD_LIMIT_BYTES,C as EPIC_OPERATIONAL_RECEIPT_CAP,ee as EPIC_OPERATIONAL_SOURCE_LIMIT_BYTES,He as applyCrossEpicContinuationReconciliation,I as assertEpicOperationalState,ce as buildCrossEpicContinuationPayloadHash,ke as classifyCrossEpicContinuationReconciliation,we as createEpicOperationalIdentity,xe as createInitialEpicOperationalState,re as deriveEpicOperationalRepositoryFingerprint,m as epicOperationalCanonicalJson,g as epicOperationalHash,k as mutateEpicOperationalState,se as projectEpicOperationalState,Ce as readEpicOperationalState};

package/packages/client/dist/git/git-lifecycle-store.d.ts

@@ -1,3 +1,4 @@
+import { type EpicAggregateQaReceipt, type EpicHeadReconciliationReceiptV1 } from '../../../shared/dist/yoloop/epic-terminal-git.js';
 import { type AnchoredDirectoryIdentity } from './secure-filesystem-boundary.js';
 export declare const GIT_LIFECYCLE_RUNTIME_DIRECTORY = "neocortex-yoloop";
 export declare const GIT_LIFECYCLE_RUNTIME_FILE = "runtime.json";
@@ -20,10 +21,16 @@ interface LegacyCheckpointMigrationBinding {
  */
 export declare const LEGACY_P174_CHECKPOINT_MIGRATIONS: Readonly<Record<string, Readonly<LegacyCheckpointMigrationBinding>>>;
 export interface GitLifecycleRuntimeDocument {
-    readonly schemaVersion: 1;
+    readonly schemaVersion: 1 | 2;
     readonly revision: number;
     readonly epics: Record<string, Record<string, unknown>>;
     readonly stories: Record<string, Record<string, unknown>>;
+    /**
+     * P224.01 common operational authority. It is absent from readable v1
+     * documents and mandatory for v2. Domain consumers perform the stronger
+     * closed-schema validation in `epic-operational-state.ts` before use.
+     */
+    readonly operational?: Record<string, unknown>;
 }
 export interface GitLifecycleMutationResult<T> {
     readonly document: GitLifecycleRuntimeDocument;
@@ -34,6 +41,8 @@ export interface GitLifecycleMutationOptions {
     readonly expectedRevision?: number;
     /** Final async physical guard executed while the lifecycle lock is held. */
     readonly preCommit?: (document: GitLifecycleRuntimeDocument) => Promise<void>;
+    /** Explicit migration-only promotion. Normal lifecycle writes preserve schema. */
+    readonly nextSchemaVersion?: 2;
 }
 export interface GitLifecycleReadOptions {
     /** Epic-aware calls require the initialized sidecar; projectless calls opt out explicitly. */
@@ -109,6 +118,11 @@ export type StoryCheckpointProjectionDecision = {
 export interface P205TransientExecutionAuthority {
     readonly __p205OpaqueAuthority: never;
 }
+/** One-shot terminal capability minted only after fresh physical receipt revalidation. */
+export interface EpicHeadReconciliationAuthority {
+    readonly __epicHeadReconciliationOpaqueAuthority: never;
+}
+export type EpicTerminalReleaseAuthority = P205TransientExecutionAuthority | EpicHeadReconciliationAuthority;
 export declare function executeP205TransientAuthority(projectRoot: string, input: {
     readonly headSha: string;
     readonly graphRevision: string;
@@ -190,6 +204,23 @@ export declare function projectP205TransientExecutionEvidence(authority: P205Tra
     readonly executionEvidenceDigest: string;
 }> | undefined;
 export declare function p205TransientAuthorityMatchesAggregate(authority: P205TransientExecutionAuthority | null | undefined, headSha: string, graphRevision: string): boolean;
+/**
+ * Reopen a persisted reconciliation receipt from physical Git and mint a
+ * process-local, one-shot terminal capability. This path never runs P205 and
+ * never creates an aggregate PASS; it only renews admissibility for identical
+ * immutable inputs.
+ */
+export declare function revalidateEpicHeadReconciliationAuthority(projectRoot: string, receipt: EpicHeadReconciliationReceiptV1, aggregateQaReceipt: EpicAggregateQaReceipt, nowIso?: string): Promise<Readonly<{
+    authority: EpicHeadReconciliationAuthority;
+    receipt: EpicHeadReconciliationReceiptV1;
+}>>;
+/** Consume one exact terminal authority. Serialized objects and replays fail. */
+export declare function consumeEpicTerminalReleaseAuthority(authority: EpicTerminalReleaseAuthority | null | undefined, input: {
+    readonly executionHeadSha: string;
+    readonly graphRevision: string;
+    readonly aggregateQaReceipt: EpicAggregateQaReceipt;
+    readonly headReconciliationReceipt?: EpicHeadReconciliationReceiptV1 | null;
+}): boolean;
 /** Reconstruct the same closed claim used by the direct or continuous planner. */
 export declare function gitLifecycleStoryWriteSet(storyId: string, story: Record<string, unknown> | undefined, checkpoint: Record<string, unknown> | undefined): readonly string[];
 /** Pre-P205 admission for only the exact seven immutable P174 migrations. */