@ornexus/neocortex 4.60.73 → 4.60.74

package/packages/client/dist/git/direct-yolo-checkpoint.js

@@ -1,1234 +1,4 @@
-/** Root-owned two-phase commit/checkpoint boundary for direct `*yolo` runs. */
-import { execFile } from 'node:child_process';
-import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
-import { readFile } from 'node:fs/promises';
-import { join, resolve } from 'node:path';
-import { promisify } from 'node:util';
-import { readRootMemoryEffectForCheckpoint } from '../private-execution/root-memory-scope.js';
-import { rootMemoryEffectDigest, verifyRootMemoryPhysicalWriteSet } from '../private-execution/root-memory-git-evidence.js';
-import { acquireGitLifecyclePhysicalIntegrationLock, applyGitLifecycleRuntimeOverlay, computeImmutableStoryQaEvidenceDigest, computeGitLifecyclePhysicalIntegrationLockOwnerDigest, computeP205StoryQaEvidenceDigest, computeLegacyDirectYoloRecoveryReceiptRef, ensureRuntimeEpic, ensureRuntimeStory, ensureGitLifecyclePrivateChildDirectory, executeP205TransientAuthority, projectP205TransientExecutionEvidence, publicStoryReviewArtifactFromGit, LEGACY_DIRECT_YOLO_RECOVERY_COMMITS, mutateGitLifecycleRuntime, P205_COMPLETE_COMMAND, readGitLifecycleRuntime, gitLifecycleRuntimeDirectory, assertGitLifecyclePrivateFile, releaseGitLifecyclePhysicalIntegrationLock, releaseGitLifecyclePhysicalIntegrationLockForCheckpoint, verifyGitLifecyclePhysicalIntegrationLock, verifyAcceptedGitLifecycleStoryCheckpoint, } from './git-lifecycle-store.js';
-import { anchoredAtomicWriteFile } from './secure-filesystem-boundary.js';
-import { GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID, GIT_LIFECYCLE_REVIEW_PR_STEP_ID, GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID, } from './git-lifecycle-step-ids.js';
-const execFileAsync = promisify(execFile);
-/**
- * Productive P207 setup boundary. It owns only the current checkout and the
- * epic branch; it never creates, removes or repositions a worktree. Existing
- * staged and unstaged bytes must remain identical across the branch switch.
- */
-export async function prepareDirectYoloSetup(options) {
-    try {
-        const authority = await resolveLogicalAuthority(options.projectRoot, options.storyId);
-        const nowIso = normalizedTime(options.nowIso);
-        const nowMs = Date.parse(nowIso);
-        const currentBranch = await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-        const currentHead = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        const runtimeBefore = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const runtimeEpic = asRecord(runtimeBefore.epics[authority.epicId]);
-        const currentLease = asRecord(runtimeEpic?.branch_lease);
-        const liveLease = currentLease && Number.isFinite(Date.parse(String(currentLease.expiresAt)))
-            && Date.parse(String(currentLease.expiresAt)) > nowMs;
-        if (liveLease && currentLease?.ownerStoryId !== options.storyId) {
-            return failure('direct-yolo-writer-active');
-        }
-        let originBinding = validOriginBinding(runtimeEpic?.origin_binding, authority.executionBranch, authority.originBranch);
-        if (currentBranch === authority.executionBranch) {
-            if (!originBinding)
-                return failure('direct-yolo-origin-binding-invalid');
-        }
-        else {
-            if (currentBranch !== authority.originBranch)
-                return failure('direct-yolo-current-branch-mismatch');
-            if (originBinding && originBinding.originHeadSha !== currentHead) {
-                return failure('direct-yolo-origin-binding-conflict');
-            }
-            originBinding ??= {
-                schemaVersion: 1,
-                originBranch: authority.originBranch,
-                originHeadSha: currentHead,
-                executionBranch: authority.executionBranch,
-                capturedFromCurrentCheckout: true,
-                capturedAt: nowIso,
-            };
-            const occupiedElsewhere = (await worktreeBranches(authority.projectRoot)).some((item) => item.branch === authority.executionBranch && resolve(item.path) !== authority.projectRoot);
-            if (occupiedElsewhere)
-                return failure('direct-yolo-execution-branch-checked-out-elsewhere');
-            const checkoutBefore = await checkoutPayload(authority.projectRoot);
-            const executionRef = `refs/heads/${authority.executionBranch}`;
-            if (await gitExitOk(authority.projectRoot, ['show-ref', '--verify', '--quiet', executionRef])) {
-                const executionHead = await git(authority.projectRoot, ['rev-parse', executionRef]);
-                if (executionHead !== currentHead) {
-                    if (!(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', executionHead, currentHead]))) {
-                        return failure('direct-yolo-execution-branch-diverged');
-                    }
-                    await git(authority.projectRoot, ['update-ref', executionRef, currentHead, executionHead]);
-                }
-                await git(authority.projectRoot, ['switch', authority.executionBranch]);
-            }
-            else {
-                await git(authority.projectRoot, ['switch', '-c', authority.executionBranch]);
-            }
-            if (await checkoutPayload(authority.projectRoot) !== checkoutBefore) {
-                return failure('direct-yolo-checkout-payload-raced');
-            }
-        }
-        const branchAfter = await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-        const headAfter = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        if (branchAfter !== authority.executionBranch)
-            return failure('direct-yolo-current-branch-mismatch');
-        if (liveLease && currentLease?.ownerStoryId === options.storyId) {
-            if (currentLease.setupHeadSha !== headAfter)
-                return failure('direct-yolo-setup-lease-head-unbound');
-            return { ok: true, value: setupReceipt(authority, originBinding, String(currentLease.expiresAt), true) };
-        }
-        const acquiredAt = nowIso;
-        const expiresAt = new Date(nowMs + 60 * 60 * 1000).toISOString();
-        const sessionId = `setup-${randomBytes(32).toString('hex')}`;
-        const runtimeAtCas = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-            const epic = ensureRuntimeEpic(document, authority.epicId);
-            const lease = asRecord(epic.branch_lease);
-            if (lease && Date.parse(String(lease.expiresAt)) > nowMs && lease.ownerStoryId !== options.storyId) {
-                throw new Error('direct-yolo-writer-active');
-            }
-            const persistedBinding = validOriginBinding(epic.origin_binding, authority.executionBranch, authority.originBranch);
-            if (epic.origin_binding && !persistedBinding)
-                throw new Error('direct-yolo-origin-binding-conflict');
-            if (persistedBinding && JSON.stringify(persistedBinding) !== JSON.stringify(originBinding)) {
-                throw new Error('direct-yolo-origin-binding-conflict');
-            }
-            epic.branch_mode = 'epic';
-            epic.execution_branch = authority.executionBranch;
-            epic.origin_branch = authority.originBranch;
-            epic.graph_revision = authority.graphRevision;
-            epic.origin_binding = originBinding;
-            epic.branch_lease = {
-                schemaVersion: 1, ownerStoryId: options.storyId, sessionId, idempotencyKey: sessionId,
-                acquiredAt, expiresAt, setupHeadSha: headAfter,
-            };
-        }, {
-            expectedRevision: runtimeAtCas.revision,
-            preCommit: async () => {
-                if (await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== authority.executionBranch
-                    || await git(authority.projectRoot, ['rev-parse', 'HEAD']) !== headAfter) {
-                    throw new Error('direct-yolo-setup-physical-state-raced');
-                }
-            },
-        });
-        return { ok: true, value: setupReceipt(authority, originBinding, expiresAt, false) };
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-setup-failed'));
-    }
-}
-/** Accept C01 only from the root after its own physical setup and live lease. */
-export async function acceptDirectYoloSetupCheckpoint(options) {
-    let physicalLock;
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        const nowIso = normalizedTime(options.nowIso);
-        const statePath = join(authority.projectRoot, '.neocortex/state.json');
-        const trackedBefore = await readFile(statePath, 'utf8');
-        const payloadBefore = await checkoutPayload(authority.projectRoot);
-        const headSha = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        const executionRef = `refs/heads/${authority.executionBranch}`;
-        const runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const epic = asRecord(runtime.epics[authority.epicId]);
-        const binding = validOriginBinding(epic?.origin_binding, authority.executionBranch, authority.originBranch);
-        const lease = asRecord(epic?.branch_lease);
-        if (!binding)
-            return failure('direct-yolo-origin-binding-invalid');
-        if (!lease || !isLiveSameStorySetupLease(lease, options.storyId, nowIso)
-            || lease?.sessionId !== lease?.idempotencyKey)
-            return failure('direct-yolo-setup-lease-invalid');
-        const acquired = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId,
-            sessionId: String(lease.sessionId), idempotencyKey: String(lease.idempotencyKey),
-            expiresAt: new Date(Date.now() + 5 * 60 * 1000).toISOString(), persistent: false,
-        });
-        if (!acquired.ok)
-            return failure(acquired.reasonCode);
-        physicalLock = acquired;
-        if (headSha !== lease.setupHeadSha
-            || !(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', binding.originHeadSha, headSha]))
-            || await git(authority.projectRoot, ['rev-parse', executionRef]) !== headSha) {
-            return failure('direct-yolo-setup-head-mismatch');
-        }
-        const occupiedElsewhere = (await worktreeBranches(authority.projectRoot)).some((item) => item.branch === authority.executionBranch && resolve(item.path) !== authority.projectRoot);
-        if (occupiedElsewhere)
-            return failure('direct-yolo-execution-branch-checked-out-elsewhere');
-        const tracked = asRecord(JSON.parse(trackedBefore));
-        const trackedStory = asRecord(asRecord(tracked?.stories)?.[options.storyId]);
-        const runtimeStory = asRecord(runtime.stories[options.storyId]);
-        if (!trackedStory || !['backlog', 'ready_to_start'].includes(String(trackedStory.status))
-            || (trackedStory.steps_completed !== undefined
-                && (!Array.isArray(trackedStory.steps_completed) || trackedStory.steps_completed.length > 0))
-            || trackedStory.branch_name || trackedStory.checkpoint) {
-            return failure('direct-yolo-setup-story-progress-conflict');
-        }
-        const accepted = runtimeStory?.status === 'branch-ready'
-            && runtimeStory.last_step === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
-            && Array.isArray(runtimeStory.steps_completed)
-            && runtimeStory.steps_completed.length === 1
-            && runtimeStory.steps_completed[0] === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
-            && Object.keys(runtimeStory).sort().join(',') === 'last_step,status,steps_completed';
-        if (runtimeStory && Object.keys(runtimeStory).length > 0 && !accepted) {
-            return failure('direct-yolo-setup-story-progress-conflict');
-        }
-        const physicalGuard = async () => {
-            if (Date.parse(String(lease.expiresAt)) <= (options.nowIso ? Date.parse(nowIso) : Date.now())
-                || !physicalLock || !(await verifyGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner))
-                || await readFile(statePath, 'utf8') !== trackedBefore
-                || await checkoutPayload(authority.projectRoot) !== payloadBefore
-                || await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== authority.executionBranch
-                || await git(authority.projectRoot, ['rev-parse', 'HEAD']) !== headSha
-                || !(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', binding.originHeadSha, headSha]))
-                || await git(authority.projectRoot, ['rev-parse', executionRef]) !== headSha) {
-                throw new Error('direct-yolo-setup-physical-state-raced');
-            }
-        };
-        if (accepted) {
-            await physicalGuard();
-        }
-        else {
-            await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const currentEpic = asRecord(document.epics[authority.epicId]);
-                const currentStory = ensureRuntimeStory(document, options.storyId);
-                if (JSON.stringify(currentEpic?.branch_lease) !== JSON.stringify(lease)
-                    || JSON.stringify(currentEpic?.origin_binding) !== JSON.stringify(binding)
-                    || currentEpic?.graph_revision !== authority.graphRevision
-                    || Object.keys(currentStory).length > 0) {
-                    throw new Error('direct-yolo-setup-runtime-raced');
-                }
-                currentStory.status = 'branch-ready';
-                currentStory.last_step = GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID;
-                currentStory.steps_completed = [GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID];
-            }, { expectedRevision: runtime.revision, preCommit: physicalGuard });
-        }
-        return { ok: true, value: Object.freeze({
-                ...setupReceipt(authority, binding, String(lease.expiresAt), accepted),
-                checkpointAccepted: true, graphRevision: authority.graphRevision, headSha,
-            }) };
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-setup-acceptance-failed'));
-    }
-    finally {
-        if (physicalLock) {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-        }
-    }
-}
-/**
- * Productive setup-owner handoff emitter used immediately before C08. The
- * one-time token never crosses stdout; only a public receipt is returned.
- */
-export async function issueDirectYoloSetupLeaseHandoff(options) {
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--cached', '--name-only', '-z']));
-        const writeSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-        if (!writeSet.ok)
-            return failure(writeSet.reasonCode);
-        if (authority.rootMemoryEffect)
-            verifyRootMemoryPhysicalWriteSet(authority.projectRoot, authority.rootMemoryEffect, { storyId: options.storyId, executionBranch: authority.executionBranch,
-                baseSha: await git(authority.projectRoot, ['rev-parse', 'HEAD']), headRef: ':', childPaths: authority.authorizedWriteSet });
-        const stagedReview = publicStoryReviewArtifactFromGit(authority.projectRoot, options.storyId, ':');
-        if (stagedReview?.verdict !== 'approved')
-            return failure('direct-yolo-review-artifact-not-approved');
-        const unstagedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--name-only', '-z']));
-        if (unstagedPaths.some((path) => changedPaths.includes(path)))
-            return failure('direct-yolo-user-overlap');
-        const payload = await gitRaw(authority.projectRoot, ['diff', '--cached', '--binary', '--full-index']);
-        if (!payload)
-            return failure('direct-yolo-staged-diff-empty');
-        const bundleDigest = digest(payload);
-        const claimRevision = digest([...authority.authorizedWriteSet].sort().join('\0'));
-        const nowIso = normalizedTime(options.nowIso);
-        const runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const setupLease = asRecord(runtime.epics[authority.epicId]?.branch_lease);
-        if (!isLiveSameStorySetupLease(setupLease, options.storyId, nowIso)) {
-            return failure('direct-yolo-setup-handoff-owner-invalid');
-        }
-        const sessionId = String(setupLease.sessionId);
-        const leaseExpiresAt = String(setupLease.expiresAt);
-        const candidateExpiresAt = new Date(Math.min(Date.parse(leaseExpiresAt), Date.parse(nowIso) + 5 * 60 * 1000)).toISOString();
-        const prior = await readSetupHandoffTokenRecord(authority.projectRoot, options.storyId);
-        const reused = Boolean(prior?.state === 'issued'
-            && prior.fromSessionId === sessionId && prior.bundleDigest === bundleDigest
-            && prior.claimRevision === claimRevision
-            && Date.parse(prior.expiresAt) > Date.parse(nowIso));
-        const expiresAt = reused ? prior.expiresAt : candidateExpiresAt;
-        const token = reused ? prior.token : randomBytes(32).toString('base64url');
-        const tokenDigest = digest(token);
-        const grant = Object.freeze({
-            schemaVersion: 1,
-            kind: 'direct-yolo-setup-handoff',
-            storyId: options.storyId,
-            fromSessionId: sessionId,
-            tokenDigest,
-            bundleDigest,
-            claimRevision,
-            expiresAt,
-        });
-        const grantDigest = digest(JSON.stringify(grant));
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-            expiresAt, persistent: false, createdAt: nowIso,
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-integration-backpressure' : 'direct-yolo-integration-lock-failed');
-        try {
-            await writeSetupHandoffTokenRecord(authority.projectRoot, {
-                schemaVersion: 1, kind: 'direct-yolo-setup-handoff-token', state: 'issued',
-                storyId: options.storyId, fromSessionId: sessionId, token, tokenDigest,
-                bundleDigest, claimRevision, grantDigest, expiresAt,
-            });
-            await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const current = asRecord(ensureRuntimeEpic(document, authority.epicId).branch_lease);
-                if (!isLiveSameStorySetupLease(current, options.storyId, nowIso)
-                    || current?.sessionId !== sessionId || current.idempotencyKey !== sessionId) {
-                    throw new Error('direct-yolo-setup-handoff-owner-raced');
-                }
-                current.handoffGrant = grant;
-            }, {
-                expectedRevision: runtime.revision,
-                preCommit: async () => {
-                    if (!(await verifyGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner))) {
-                        throw new Error('direct-yolo-integration-lock-raced');
-                    }
-                    const persisted = await readSetupHandoffTokenRecord(authority.projectRoot, options.storyId);
-                    if (!persisted || persisted.state !== 'issued' || persisted.grantDigest !== grantDigest
-                        || persisted.tokenDigest !== tokenDigest)
-                        throw new Error('direct-yolo-setup-handoff-token-raced');
-                },
-            });
-        }
-        finally {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-        }
-        return { ok: true, value: Object.freeze({
-                schemaVersion: 1, kind: 'direct-yolo-setup-handoff-receipt', storyId: options.storyId,
-                sessionId, bundleDigest, claimRevision, grantDigest, expiresAt, reused, publicSafe: true,
-            }) };
-    }
-    catch (error) {
-        return failure(error instanceof Error && /^direct-yolo-/.test(error.message)
-            ? error.message : 'direct-yolo-setup-handoff-failed');
-    }
-}
-export async function beginDirectYoloStoryCommit(options) {
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        const baseSha = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--cached', '--name-only', '-z']));
-        const writeSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-        if (!writeSet.ok)
-            return failure(writeSet.reasonCode);
-        if (authority.rootMemoryEffect)
-            verifyRootMemoryPhysicalWriteSet(authority.projectRoot, authority.rootMemoryEffect, { storyId: options.storyId, executionBranch: authority.executionBranch, baseSha, headRef: ':', childPaths: authority.authorizedWriteSet });
-        const stagedReview = publicStoryReviewArtifactFromGit(authority.projectRoot, options.storyId, ':');
-        if (stagedReview?.verdict !== 'approved')
-            return failure('direct-yolo-review-artifact-not-approved');
-        const unstagedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--name-only', '-z']));
-        if (unstagedPaths.some((path) => changedPaths.includes(path)))
-            return failure('direct-yolo-user-overlap');
-        const payload = await gitRaw(authority.projectRoot, ['diff', '--cached', '--binary', '--full-index']);
-        if (!payload)
-            return failure('direct-yolo-staged-diff-empty');
-        const bundleDigest = digest(payload);
-        const claimRevision = digest([...authority.authorizedWriteSet].sort().join('\0'));
-        const idempotencyKey = digest([
-            'direct-yolo-commit-v1', options.storyId, authority.epicId, authority.executionBranch,
-            baseSha, bundleDigest, authority.graphRevision, claimRevision,
-        ].join('\0'));
-        const nowIso = normalizedTime(options.nowIso);
-        let issuedHandoff = options.setupLeaseHandoff
-            ?? await resolveIssuedSetupLeaseHandoff(authority.projectRoot, options.storyId, bundleDigest, claimRevision, nowIso);
-        const runtimeBeforeLock = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const priorDirectLease = asRecord(runtimeBeforeLock.epics[authority.epicId]?.branch_lease);
-        const reusableDirectLease = priorDirectLease?.ownerStoryId === options.storyId
-            && priorDirectLease.sessionId === idempotencyKey && priorDirectLease.idempotencyKey === idempotencyKey
-            && typeof priorDirectLease.expiresAt === 'string'
-            && Date.parse(priorDirectLease.expiresAt) > Date.parse(nowIso)
-            ? priorDirectLease : undefined;
-        if (reusableDirectLease && options.setupLeaseHandoff) {
-            return failure('direct-yolo-setup-handoff-replayed');
-        }
-        const priorConsumption = asRecord(reusableDirectLease?.handoffConsumption);
-        if (priorConsumption) {
-            const privateRecord = await readSetupHandoffTokenRecord(authority.projectRoot, options.storyId);
-            if (!privateRecord || !['consuming', 'consumed'].includes(privateRecord.state)
-                || privateRecord.fromSessionId !== priorConsumption.fromSessionId
-                || privateRecord.tokenDigest !== priorConsumption.tokenDigest
-                || privateRecord.bundleDigest !== bundleDigest || privateRecord.claimRevision !== claimRevision
-                || priorConsumption.bundleDigest !== bundleDigest || priorConsumption.claimRevision !== claimRevision
-                || privateRecord.consumedBySessionId !== idempotencyKey
-                || priorConsumption.consumedBySessionId !== idempotencyKey) {
-                return failure('direct-yolo-setup-handoff-consume-invalid');
-            }
-            // The runtime CAS already consumed this exact grant. Recovery may finish
-            // its private receipt after expiry; it never promotes a second writer.
-            if (privateRecord.state === 'consuming') {
-                if (!privateRecord.token || digest(privateRecord.token) !== privateRecord.tokenDigest) {
-                    return failure('direct-yolo-setup-handoff-consume-invalid');
-                }
-                issuedHandoff = { sessionId: privateRecord.fromSessionId, token: privateRecord.token };
-            }
-        }
-        const expiresAt = reusableDirectLease
-            ? String(reusableDirectLease.expiresAt)
-            : new Date(Date.parse(nowIso) + 30 * 60 * 1000).toISOString();
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId: idempotencyKey, idempotencyKey,
-            expiresAt, persistent: true,
-            createdAt: reusableDirectLease && typeof reusableDirectLease.acquiredAt === 'string'
-                ? reusableDirectLease.acquiredAt : nowIso,
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-integration-backpressure' : 'direct-yolo-integration-lock-failed');
-        try {
-            if (issuedHandoff && options.setupLeaseHandoff === undefined) {
-                await markSetupHandoffTokenConsuming(authority.projectRoot, options.storyId, issuedHandoff.sessionId, issuedHandoff.token, idempotencyKey, nowIso);
-                await options.setupHandoffFault?.('after-consuming-persisted');
-            }
-            await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const epic = ensureRuntimeEpic(document, authority.epicId);
-                const current = asRecord(epic.branch_lease);
-                const live = current && Date.parse(String(current.expiresAt)) > Date.parse(nowIso);
-                const alreadyPromoted = current?.ownerStoryId === options.storyId
-                    && current.sessionId === idempotencyKey && current.idempotencyKey === idempotencyKey;
-                const sameStorySetup = current?.ownerStoryId === options.storyId
-                    && current.sessionId === current.idempotencyKey
-                    && typeof current.idempotencyKey === 'string'
-                    && /^setup-[a-f0-9]{64}$/.test(current.idempotencyKey);
-                const setupHandoffAuthorized = live && sameStorySetup && validSetupLeaseHandoff({
-                    current,
-                    handoff: issuedHandoff,
-                    storyId: options.storyId,
-                    bundleDigest,
-                    claimRevision,
-                    nowIso,
-                });
-                if (issuedHandoff && live && !alreadyPromoted && !setupHandoffAuthorized) {
-                    throw new Error('direct-yolo-setup-handoff-invalid');
-                }
-                if (live && !alreadyPromoted && !setupHandoffAuthorized) {
-                    throw new Error('direct-yolo-writer-active');
-                }
-                const setupGrant = setupHandoffAuthorized ? asRecord(current?.handoffGrant) : undefined;
-                const handoffConsumption = setupGrant ? {
-                    schemaVersion: 1,
-                    kind: 'direct-yolo-setup-handoff-consumption',
-                    state: 'consumed',
-                    storyId: options.storyId,
-                    fromSessionId: String(current?.sessionId),
-                    tokenDigest: String(setupGrant.tokenDigest),
-                    bundleDigest,
-                    claimRevision,
-                    consumedBySessionId: idempotencyKey,
-                    consumedAt: nowIso,
-                } : undefined;
-                epic.branch_mode = 'epic';
-                epic.execution_branch = authority.executionBranch;
-                epic.origin_branch = authority.originBranch;
-                epic.graph_revision = authority.graphRevision;
-                epic.branch_lease = live && alreadyPromoted ? current : {
-                    schemaVersion: 1, ownerStoryId: options.storyId, sessionId: idempotencyKey,
-                    idempotencyKey, acquiredAt: nowIso, expiresAt,
-                    ...(handoffConsumption ? { handoffConsumption } : {}),
-                };
-            }, {
-                expectedRevision: runtimeBeforeLock.revision,
-                preCommit: async () => {
-                    if (!(await verifyGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner))) {
-                        throw new Error('direct-yolo-integration-lock-raced');
-                    }
-                },
-            });
-        }
-        catch (error) {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-            throw error;
-        }
-        if (issuedHandoff && options.setupLeaseHandoff === undefined) {
-            await options.setupHandoffFault?.('before-consumed-persist');
-            await markSetupHandoffTokenConsumed(authority.projectRoot, authority.epicId, options.storyId, issuedHandoff.sessionId, issuedHandoff.token, bundleDigest, claimRevision, idempotencyKey, nowIso);
-        }
-        const trailers = Object.freeze([
-            `Neocortex-Story: ${options.storyId}`,
-            `Neocortex-Epic: ${authority.epicId}`,
-            `Neocortex-Execution-Branch: ${authority.executionBranch}`,
-            `Neocortex-Prepared-Base: ${baseSha}`,
-            `Neocortex-Bundle-Digest: ${bundleDigest}`,
-            `Neocortex-Review-Artifact-Digest: ${stagedReview.digest}`,
-            `Neocortex-Graph-Revision: ${authority.graphRevision}`,
-            `Neocortex-Claim-Revision: ${claimRevision}`,
-            ...(authority.rootMemoryEffect ? [`Neocortex-Root-Memory-Effect: ${rootMemoryEffectDigest(authority.rootMemoryEffect)}`] : []),
-        ]);
-        return { ok: true, value: Object.freeze({
-                schemaVersion: 1, storyId: options.storyId, epicId: authority.epicId,
-                executionBranch: authority.executionBranch, baseSha, bundleDigest,
-                reviewArtifactDigest: stagedReview.digest,
-                graphRevision: authority.graphRevision, claimRevision, idempotencyKey,
-                changedPaths: Object.freeze(changedPaths), trailers,
-            }) };
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-begin-failed'));
-    }
-}
-export async function finalizeDirectYoloStoryCheckpoint(options) {
-    let cleanupAuthority;
-    let cleanupLease;
-    let cleanupPhysical;
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        cleanupAuthority = authority;
-        const aggregateHeadSha = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        let runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const existing = asRecord(runtime.stories[options.storyId]?.checkpoint);
-        if (existing) {
-            const checkpointHeadSha = typeof existing.headSha === 'string' ? existing.headSha : '';
-            const checkpointGraphRevision = typeof existing.graphRevision === 'string' ? existing.graphRevision : '';
-            const checkpointPaths = /^[a-f0-9]{40,64}$/.test(checkpointHeadSha)
-                ? splitNull(await gitRaw(authority.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', checkpointHeadSha]))
-                : [];
-            const replayWriteSet = validateDirectWriteSet(checkpointPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-            const ancestral = /^[a-f0-9]{40,64}$/.test(checkpointHeadSha)
-                && await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', checkpointHeadSha, aggregateHeadSha]);
-            if (!ancestral || !/^[a-f0-9]{64}$/.test(checkpointGraphRevision) || !replayWriteSet.ok) {
-                return failure('direct-yolo-replay-invalid');
-            }
-            const replayQa = await runQa(options, authority.projectRoot, aggregateHeadSha, checkpointGraphRevision);
-            if (!(await verifyAcceptedGitLifecycleStoryCheckpoint(authority.projectRoot, existing, options.storyId, authority.epicId, authority.executionBranch, replayQa.transientAuthority, authority.authorizedWriteSet)))
-                return failure('direct-yolo-replay-invalid');
-            if (!(await physicalCheckoutUnchanged(authority.projectRoot, authority.executionBranch, aggregateHeadSha, checkpointPaths)))
-                return failure('direct-yolo-replay-head-raced');
-            if (options.push && !(await remoteContainsHead(authority.projectRoot, options.remote ?? 'origin', authority.executionBranch, checkpointHeadSha)))
-                return failure('direct-yolo-remote-head-mismatch');
-            const physicalOwnerRef = Array.isArray(existing.receiptRefs)
-                ? existing.receiptRefs.find((item) => typeof item === 'string' && /^physical-lock-owner:[a-f0-9]{64}$/.test(item))
-                : undefined;
-            if (physicalOwnerRef && typeof existing.idempotencyKey === 'string') {
-                await releaseGitLifecyclePhysicalIntegrationLockForCheckpoint(authority.projectRoot, {
-                    storyId: options.storyId,
-                    idempotencyKey: existing.idempotencyKey,
-                    ownerDigest: physicalOwnerRef.slice('physical-lock-owner:'.length),
-                });
-            }
-            return { ok: true, value: existing };
-        }
-        const headSha = aggregateHeadSha;
-        const baseSha = await git(authority.projectRoot, ['rev-parse', `${headSha}^`]);
-        const commitBody = await gitRaw(authority.projectRoot, ['show', '--no-patch', '--format=%B', headSha]);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha]));
-        const writeSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-        if (!writeSet.ok)
-            return failure(writeSet.reasonCode);
-        if (authority.rootMemoryEffect)
-            verifyRootMemoryPhysicalWriteSet(authority.projectRoot, authority.rootMemoryEffect, { storyId: options.storyId, executionBranch: authority.executionBranch, baseSha, headRef: headSha, childPaths: authority.authorizedWriteSet });
-        const bundleDigest = trailer(commitBody, 'Neocortex-Bundle-Digest');
-        const graphRevision = trailer(commitBody, 'Neocortex-Graph-Revision');
-        const claimRevision = trailer(commitBody, 'Neocortex-Claim-Revision');
-        const required = new Map([
-            ['Neocortex-Story', options.storyId], ['Neocortex-Epic', authority.epicId],
-            ['Neocortex-Execution-Branch', authority.executionBranch], ['Neocortex-Prepared-Base', baseSha],
-            ['Neocortex-Graph-Revision', authority.graphRevision],
-            ['Neocortex-Claim-Revision', digest([...authority.authorizedWriteSet].sort().join('\0'))],
-        ]);
-        if (!bundleDigest || !/^[a-f0-9]{64}$/.test(bundleDigest) || !graphRevision || !claimRevision
-            || [...required].some(([key, value]) => trailer(commitBody, key) !== value)) {
-            return failure('direct-yolo-trailers-invalid');
-        }
-        const publicReview = publicStoryReviewArtifactFromGit(authority.projectRoot, options.storyId, headSha);
-        if (publicReview?.verdict !== 'approved')
-            return failure('direct-yolo-review-artifact-not-approved');
-        const reviewTrailer = trailer(commitBody, 'Neocortex-Review-Artifact-Digest');
-        if (reviewTrailer !== undefined && reviewTrailer !== publicReview.digest) {
-            return failure('direct-yolo-review-artifact-digest-mismatch');
-        }
-        const expectedPayloadDigest = digest(await gitRaw(authority.projectRoot, ['diff', '--binary', '--full-index', `${baseSha}..${headSha}`]));
-        if (bundleDigest !== expectedPayloadDigest)
-            return failure('direct-yolo-bundle-digest-mismatch');
-        const idempotencyKey = digest([
-            'direct-yolo-commit-v1', options.storyId, authority.epicId, authority.executionBranch,
-            baseSha, bundleDigest, graphRevision, claimRevision,
-        ].join('\0'));
-        const currentLease = asRecord(runtime.epics[authority.epicId]?.branch_lease);
-        const nowIso = normalizedTime(options.nowIso);
-        const matchingLease = currentLease?.ownerStoryId === options.storyId
-            && currentLease.idempotencyKey === idempotencyKey
-            && currentLease.sessionId === idempotencyKey
-            && Date.parse(String(currentLease.expiresAt)) > Date.now()
-            ? currentLease : undefined;
-        if (currentLease && Date.parse(String(currentLease.expiresAt)) > Date.now() && !matchingLease) {
-            return failure('direct-yolo-writer-active');
-        }
-        const requestedLease = matchingLease ?? {
-            schemaVersion: 1, ownerStoryId: options.storyId, sessionId: idempotencyKey,
-            idempotencyKey, acquiredAt: nowIso,
-            expiresAt: new Date(Date.parse(nowIso) + 30 * 60 * 1000).toISOString(),
-        };
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId: idempotencyKey, idempotencyKey,
-            expiresAt: String(requestedLease.expiresAt), persistent: true,
-            createdAt: String(requestedLease.acquiredAt),
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-integration-backpressure' : 'direct-yolo-integration-lock-failed');
-        cleanupPhysical = physicalLock;
-        if (!matchingLease) {
-            const leased = await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const epic = ensureRuntimeEpic(document, authority.epicId);
-                const current = asRecord(epic.branch_lease);
-                if (current && Date.parse(String(current.expiresAt)) > Date.parse(nowIso)) {
-                    throw new Error('direct-yolo-writer-active');
-                }
-                if (epic.graph_revision !== authority.graphRevision)
-                    throw new Error('direct-yolo-graph-revision-raced');
-                epic.branch_lease = requestedLease;
-            }, { expectedRevision: runtime.revision });
-            runtime = leased.document;
-        }
-        cleanupLease = requestedLease;
-        {
-            const qaExecution = await runQa(options, authority.projectRoot, headSha, authority.graphRevision);
-            if (!(await physicalCheckoutUnchanged(authority.projectRoot, authority.executionBranch, headSha, changedPaths))) {
-                return failure('direct-yolo-head-raced');
-            }
-            if (options.push) {
-                const remote = safeRemote(options.remote ?? 'origin');
-                await git(authority.projectRoot, ['push', remote, authority.executionBranch]);
-                if (!(await remoteHeadIsExact(authority.projectRoot, remote, authority.executionBranch, headSha))) {
-                    return failure('direct-yolo-remote-head-mismatch');
-                }
-            }
-            const checkpoint = await buildCheckpoint({
-                projectRoot: authority.projectRoot, storyId: options.storyId, epicId: authority.epicId,
-                executionBranch: authority.executionBranch, baseSha, headSha, bundleDigest,
-                graphRevision, claimRevision, idempotencyKey, qaExecution,
-                physicalLockOwnerDigest: computeGitLifecyclePhysicalIntegrationLockOwnerDigest(physicalLock.owner),
-                nowIso: normalizedTime(options.nowIso), legacyReceiptRef: undefined, rootMemoryEffect: authority.rootMemoryEffect,
-            });
-            await options.beforeCheckpointPersist?.();
-            const persisted = await persistCheckpoint({
-                projectRoot: authority.projectRoot, checkpoint,
-                remote: options.push ? options.remote ?? 'origin' : undefined,
-                expectedRevision: runtime.revision, expectedLease: requestedLease,
-                expectedGraphRevision: authority.graphRevision,
-                physicalLockPath: physicalLock.path, physicalLockOwner: physicalLock.owner,
-                transientAuthority: qaExecution.transientAuthority,
-                authorizedWriteSet: authority.authorizedWriteSet,
-            });
-            if (!persisted)
-                return failure('direct-yolo-checkpoint-persist-failed');
-            await options.afterCheckpointPersist?.();
-            return { ok: true, value: checkpoint };
-        }
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-finalize-failed'));
-    }
-    finally {
-        if (cleanupPhysical) {
-            await releaseGitLifecyclePhysicalIntegrationLock(cleanupPhysical.path, cleanupPhysical.owner).catch(() => undefined);
-        }
-        if (cleanupAuthority && cleanupLease) {
-            await releaseOwnedDirectLease(cleanupAuthority.projectRoot, cleanupAuthority.epicId, cleanupLease).catch(() => undefined);
-        }
-        else if (cleanupAuthority) {
-            await cleanupOwnedDirectAuthority(cleanupAuthority, options.storyId).catch(() => undefined);
-        }
-    }
-}
-export async function recoverLegacyDirectYoloStoryCheckpoint(options) {
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        if (!/^[a-f0-9]{40,64}$/.test(options.commitSha))
-            return failure('direct-yolo-recovery-commit-invalid');
-        const headSha = await git(authority.projectRoot, ['rev-parse', options.commitSha]);
-        if (LEGACY_DIRECT_YOLO_RECOVERY_COMMITS[options.storyId] !== headSha) {
-            return failure('direct-yolo-recovery-not-allowlisted');
-        }
-        if (await git(authority.projectRoot, ['rev-parse', 'HEAD']) !== headSha) {
-            return failure('direct-yolo-recovery-head-mismatch');
-        }
-        await git(authority.projectRoot, ['merge-base', '--is-ancestor', headSha, `refs/heads/${authority.executionBranch}`]);
-        const baseSha = await git(authority.projectRoot, ['rev-parse', `${headSha}^`]);
-        const payload = await gitRaw(authority.projectRoot, ['diff', '--binary', '--full-index', `${baseSha}..${headSha}`]);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha]));
-        const recoveryWriteSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet.length > 0 ? authority.authorizedWriteSet : changedPaths, options.storyId);
-        if (!recoveryWriteSet.ok)
-            return failure('direct-yolo-recovery-write-set-invalid');
-        const bundleDigest = digest(payload);
-        const claimRevision = digest([...changedPaths].sort().join('\0'));
-        const idempotencyKey = digest(['legacy-direct-yolo-recovery-v1', options.storyId, headSha].join('\0'));
-        const nowIso = normalizedTime(options.nowIso);
-        const expiresAt = new Date(Date.parse(nowIso) + 30 * 60 * 1000).toISOString();
-        const initialRuntime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId: idempotencyKey, idempotencyKey,
-            expiresAt, persistent: true, createdAt: nowIso,
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-recovery-integration-backpressure' : 'direct-yolo-recovery-integration-lock-failed');
-        const requestedLease = {
-            schemaVersion: 1, ownerStoryId: options.storyId, sessionId: idempotencyKey,
-            idempotencyKey, acquiredAt: nowIso, expiresAt,
-        };
-        let leaseAcquired = false;
-        try {
-            const leased = await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const epic = ensureRuntimeEpic(document, authority.epicId);
-                const current = asRecord(epic.branch_lease);
-                if (current && Date.parse(String(current.expiresAt)) > Date.parse(nowIso)
-                    && !sameLease(current, requestedLease))
-                    throw new Error('direct-yolo-recovery-writer-active');
-                if (epic.graph_revision !== authority.graphRevision)
-                    throw new Error('direct-yolo-recovery-graph-raced');
-                epic.branch_mode = 'epic';
-                epic.execution_branch = authority.executionBranch;
-                epic.origin_branch = authority.originBranch;
-                epic.branch_lease = requestedLease;
-            }, { expectedRevision: initialRuntime.revision });
-            leaseAcquired = true;
-            const qaExecution = await runQa(options, authority.projectRoot, headSha, authority.graphRevision);
-            if (!(await physicalCheckoutUnchanged(authority.projectRoot, authority.executionBranch, headSha, changedPaths))) {
-                return failure('direct-yolo-recovery-head-raced');
-            }
-            if (options.push) {
-                const remote = safeRemote(options.remote ?? 'origin');
-                const remoteHead = (await git(authority.projectRoot, ['ls-remote', '--heads', remote, `refs/heads/${authority.executionBranch}`])).split(/\s+/)[0];
-                if (!remoteHead || !(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', headSha, remoteHead]))) {
-                    return failure('direct-yolo-recovery-remote-proof-missing');
-                }
-            }
-            const provisional = await buildCheckpoint({
-                projectRoot: authority.projectRoot, storyId: options.storyId, epicId: authority.epicId,
-                executionBranch: authority.executionBranch, baseSha, headSha, bundleDigest,
-                graphRevision: authority.graphRevision, claimRevision, idempotencyKey,
-                qaExecution,
-                physicalLockOwnerDigest: computeGitLifecyclePhysicalIntegrationLockOwnerDigest(physicalLock.owner),
-                nowIso, legacyReceiptRef: undefined,
-            });
-            const legacyReceiptRef = await computeLegacyDirectYoloRecoveryReceiptRef(authority.projectRoot, {
-                storyId: options.storyId,
-                epicId: authority.epicId,
-                executionBranch: authority.executionBranch,
-                baseSha,
-                headSha,
-                bundleDigest,
-                graphRevision: authority.graphRevision,
-            });
-            if (!legacyReceiptRef)
-                return failure('direct-yolo-recovery-evidence-invalid');
-            const checkpoint = Object.freeze({
-                ...provisional,
-                receiptRefs: Object.freeze([...provisional.receiptRefs, legacyReceiptRef]),
-            });
-            const persisted = await persistCheckpoint({
-                projectRoot: authority.projectRoot, checkpoint,
-                remote: options.push ? options.remote ?? 'origin' : undefined,
-                remotePolicy: 'ancestor-recovery',
-                expectedRevision: leased.document.revision,
-                expectedLease: requestedLease,
-                expectedGraphRevision: authority.graphRevision,
-                physicalLockPath: physicalLock.path,
-                physicalLockOwner: physicalLock.owner,
-                transientAuthority: qaExecution.transientAuthority,
-                authorizedWriteSet: authority.authorizedWriteSet,
-            });
-            return persisted ? { ok: true, value: checkpoint } : failure('direct-yolo-recovery-persist-failed');
-        }
-        finally {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-            if (leaseAcquired)
-                await releaseOwnedDirectLease(authority.projectRoot, authority.epicId, requestedLease).catch(() => undefined);
-        }
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-recovery-failed'));
-    }
-}
-async function resolveLogicalAuthority(projectRootInput, storyId) {
-    if (!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(storyId))
-        throw new Error('direct-yolo-story-id-invalid');
-    const projectRoot = resolve(projectRootInput);
-    const tracked = asRecord(JSON.parse(await readFile(join(projectRoot, '.neocortex/state.json'), 'utf8')));
-    const runtime = await readGitLifecycleRuntime(projectRoot, { required: true });
-    const effective = applyGitLifecycleRuntimeOverlay(tracked, runtime);
-    const stories = asRecord(effective.stories);
-    const epics = asRecord(effective.epics);
-    const story = asRecord(stories?.[storyId]);
-    const epicId = String(story?.epic_id ?? storyId.split('.')[0]);
-    const epic = asRecord(epics?.[epicId]);
-    const executionBranch = String(epic?.execution_branch ?? '');
-    const originBranch = String(epic?.origin_branch ?? '');
-    const graphRevision = String(epic?.graph_revision ?? '');
-    const authorizedWriteSet = Array.isArray(story?.files_to_modify)
-        ? [...new Set(story.files_to_modify.filter((item) => typeof item === 'string' && safePath(item)))].sort()
-        : [];
-    if (!story)
-        throw new Error('direct-yolo-story-state-missing');
-    if (epic?.branch_mode !== 'epic')
-        throw new Error('direct-yolo-branch-mode-invalid');
-    if (!safeRef(executionBranch)
-        || !(await gitExitOk(projectRoot, ['check-ref-format', '--branch', executionBranch]))) {
-        throw new Error('direct-yolo-execution-branch-invalid');
-    }
-    if (!safeRef(originBranch)
-        || !(await gitExitOk(projectRoot, ['check-ref-format', '--branch', originBranch]))) {
-        throw new Error('direct-yolo-origin-branch-invalid');
-    }
-    if (!/^[a-f0-9]{64}$/.test(graphRevision))
-        throw new Error('direct-yolo-graph-revision-invalid');
-    const rootMemoryEffect = await readRootMemoryEffectForCheckpoint({ projectRoot, storyId, graphRevision,
-        executionBranch, childPaths: authorizedWriteSet });
-    return { projectRoot, storyId, story, epicId, executionBranch, originBranch, graphRevision, authorizedWriteSet, rootMemoryEffect };
-}
-async function resolveAuthority(projectRootInput, storyId) {
-    const authority = await resolveLogicalAuthority(projectRootInput, storyId);
-    const currentBranch = await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-    if (currentBranch !== authority.executionBranch)
-        throw new Error('direct-yolo-current-branch-mismatch');
-    return authority;
-}
-async function buildCheckpoint(input) {
-    const checkedAt = input.nowIso;
-    const commitBody = await gitRaw(input.projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', input.headSha]);
-    const changedPaths = splitNull(await gitRaw(input.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', input.headSha]));
-    const gitEvidenceDigest = computeImmutableStoryQaEvidenceDigest({
-        storyId: input.storyId, baseSha: input.baseSha, headSha: input.headSha,
-        bundleDigest: input.bundleDigest, graphRevision: input.graphRevision,
-        commitBody, changedPaths,
-    });
-    const qaDigest = computeP205StoryQaEvidenceDigest({
-        gitEvidenceDigest, headSha: input.headSha, graphRevision: input.graphRevision,
-        manifestDigest: input.qaExecution.manifestDigest, gateIds: input.qaExecution.gateIds,
-        resultDigest: input.qaExecution.resultDigest,
-    });
-    const qaReceiptRef = `story-qa:${qaDigest}`;
-    const qaReceipt = Object.freeze({
-        schemaVersion: 1, kind: 'story_qa_evidence', producer: 'local-yolo-tdd', evidenceVersion: 'p205-execution-v2',
-        storyId: input.storyId, epicId: input.epicId, baseSha: input.baseSha, headSha: input.headSha,
-        bundleDigest: input.bundleDigest, graphRevision: input.graphRevision,
-        contract: input.qaExecution.contract, command: input.qaExecution.command,
-        manifestDigest: input.qaExecution.manifestDigest, gateIds: input.qaExecution.gateIds,
-        resultDigest: input.qaExecution.resultDigest,
-        sourceEvidenceDigest: qaDigest, verdict: 'passed', checkedAt, receiptRef: qaReceiptRef,
-    });
-    const publicReview = publicStoryReviewArtifactFromGit(input.projectRoot, input.storyId, input.headSha);
-    if (publicReview?.verdict !== 'approved')
-        throw new Error('direct-yolo-review-artifact-not-approved');
-    const reviewDigest = digest([
-        'root-commit-range-review-v2', input.storyId, input.baseSha, input.headSha,
-        input.bundleDigest, input.graphRevision, qaReceiptRef, digest(commitBody), [...changedPaths].sort().join(','),
-        publicReview.digest,
-    ].join('\0'));
-    const reviewReceiptRef = `story-review:${reviewDigest}`;
-    const reviewReceipt = Object.freeze({
-        schemaVersion: 1, kind: 'story_review_evidence', producer: 'root-commit-range-review',
-        storyId: input.storyId, epicId: input.epicId, baseSha: input.baseSha, headSha: input.headSha,
-        bundleDigest: input.bundleDigest, graphRevision: input.graphRevision,
-        sourceEvidenceDigest: reviewDigest, reviewArtifactDigest: publicReview.digest,
-        qaReceiptRef, verdict: 'approved', reviewedAt: checkedAt,
-        receiptRef: reviewReceiptRef,
-    });
-    const evidenceRefs = [
-        `.neocortex/stories/${input.storyId}/qa-gate-result.json`,
-        `.neocortex/stories/${input.storyId}/validation-evidence.md`, qaReceiptRef, reviewReceiptRef,
-        ...(input.physicalLockOwnerDigest ? [`physical-lock-owner:${input.physicalLockOwnerDigest}`] : []),
-        ...(input.legacyReceiptRef ? [input.legacyReceiptRef] : []),
-    ];
-    return Object.freeze({
-        schemaVersion: 1, storyId: input.storyId, epicId: input.epicId, branch: input.executionBranch,
-        baseSha: input.baseSha, headSha: input.headSha, commits: Object.freeze([input.headSha]),
-        idempotencyKey: input.idempotencyKey, bundleDigest: input.bundleDigest,
-        graphRevision: input.graphRevision, claimRevision: input.claimRevision,
-        receiptRefs: Object.freeze(evidenceRefs), qaVerdict: 'passed', reviewVerdict: 'approved',
-        qaReceipt, reviewReceipt, recordedAt: checkedAt,
-        ...(input.rootMemoryEffect ? { rootMemoryEffect: input.rootMemoryEffect } : {}),
-    });
-}
-async function persistCheckpoint(input) {
-    const { projectRoot, checkpoint, remote } = input;
-    let conflict = false;
-    await mutateGitLifecycleRuntime(projectRoot, (document) => {
-        const epic = ensureRuntimeEpic(document, checkpoint.epicId);
-        if (input.expectedLease) {
-            const currentLease = asRecord(epic.branch_lease);
-            if (!sameLease(currentLease, input.expectedLease))
-                throw new Error('direct-yolo-runtime-revision-conflict');
-            if (Date.parse(String(currentLease?.expiresAt)) <= Date.now())
-                throw new Error('direct-yolo-writer-lease-expired');
-            if (epic.graph_revision !== input.expectedGraphRevision || checkpoint.graphRevision !== input.expectedGraphRevision) {
-                throw new Error('direct-yolo-graph-revision-raced');
-            }
-        }
-        const story = ensureRuntimeStory(document, checkpoint.storyId);
-        const existing = asRecord(story.checkpoint);
-        if (existing && existing.headSha !== checkpoint.headSha) {
-            conflict = true;
-            return;
-        }
-        story.checkpoint = checkpoint;
-        story.status = 'done';
-        story.last_step = GIT_LIFECYCLE_REVIEW_PR_STEP_ID;
-        const steps = Array.isArray(story.steps_completed) ? story.steps_completed.filter((item) => typeof item === 'string') : [];
-        story.steps_completed = [...new Set([...steps, GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID, GIT_LIFECYCLE_REVIEW_PR_STEP_ID])];
-        epic.branch_lease = null;
-    }, { expectedRevision: input.expectedRevision, preCommit: async () => {
-            if (conflict)
-                throw new Error('direct-yolo-checkpoint-conflict');
-            const currentBranch = await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-            if (currentBranch !== checkpoint.branch || await git(projectRoot, ['rev-parse', 'HEAD']) !== checkpoint.headSha) {
-                throw new Error('direct-yolo-checkpoint-head-raced');
-            }
-            if (!(await verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, checkpoint, checkpoint.storyId, checkpoint.epicId, checkpoint.branch, input.transientAuthority, input.authorizedWriteSet)))
-                throw new Error('direct-yolo-checkpoint-physical-invalid');
-            if (input.physicalLockPath && input.physicalLockOwner
-                && !(await verifyGitLifecyclePhysicalIntegrationLock(input.physicalLockPath, input.physicalLockOwner))) {
-                throw new Error('direct-yolo-integration-lock-raced');
-            }
-            if (remote) {
-                const accepted = input.remotePolicy === 'ancestor-recovery'
-                    ? await remoteContainsHead(projectRoot, remote, checkpoint.branch, checkpoint.headSha)
-                    : await remoteHeadIsExact(projectRoot, remote, checkpoint.branch, checkpoint.headSha);
-                if (!accepted) {
-                    throw new Error('direct-yolo-checkpoint-remote-raced');
-                }
-            }
-        } });
-    return !conflict;
-}
-async function remoteContainsHead(projectRoot, remoteInput, branch, headSha) {
-    const remote = safeRemote(remoteInput);
-    const remoteHead = (await git(projectRoot, ['ls-remote', '--heads', remote, `refs/heads/${branch}`])).split(/\s+/)[0];
-    return Boolean(remoteHead && await gitExitOk(projectRoot, ['merge-base', '--is-ancestor', headSha, remoteHead]));
-}
-function isLiveSameStorySetupLease(lease, storyId, nowIso) {
-    return Boolean(lease?.ownerStoryId === storyId
-        && lease.sessionId === lease.idempotencyKey
-        && typeof lease.idempotencyKey === 'string'
-        && /^setup-[a-f0-9]{64}$/.test(lease.idempotencyKey)
-        && typeof lease.expiresAt === 'string'
-        && Date.parse(lease.expiresAt) > Date.parse(nowIso));
-}
-async function setupHandoffTokenLocation(projectRoot, storyId) {
-    const runtimeDirectory = await gitLifecycleRuntimeDirectory(projectRoot);
-    const parent = await ensureGitLifecyclePrivateChildDirectory(runtimeDirectory, 'handoffs');
-    const name = `direct-${digest(storyId)}.json`;
-    return { parent, name, path: join(parent, name) };
-}
-async function writeSetupHandoffTokenRecord(projectRoot, record) {
-    const location = await setupHandoffTokenLocation(projectRoot, record.storyId);
-    await anchoredAtomicWriteFile(location.parent, location.name, `${JSON.stringify(record, null, 2)}\n`);
-    await assertGitLifecyclePrivateFile(location.path, location.parent);
-}
-async function readSetupHandoffTokenRecord(projectRoot, storyId) {
-    try {
-        const location = await setupHandoffTokenLocation(projectRoot, storyId);
-        await assertGitLifecyclePrivateFile(location.path, location.parent);
-        const item = JSON.parse(await readFile(location.path, 'utf8'));
-        const exactKeys = item.state === 'issued'
-            ? ['schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'token', 'tokenDigest', 'bundleDigest', 'claimRevision', 'grantDigest', 'expiresAt']
-            : item.state === 'consuming'
-                ? ['schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'token', 'tokenDigest', 'bundleDigest', 'claimRevision', 'grantDigest', 'expiresAt', 'consumedBySessionId', 'consumeStartedAt']
-                : ['schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'tokenDigest', 'bundleDigest', 'claimRevision', 'grantDigest', 'expiresAt', 'consumedBySessionId', 'consumedAt'];
-        if (Object.keys(item).sort().join('\0') !== [...exactKeys].sort().join('\0')
-            || item.schemaVersion !== 1 || item.kind !== 'direct-yolo-setup-handoff-token'
-            || (item.state !== 'issued' && item.state !== 'consuming' && item.state !== 'consumed') || item.storyId !== storyId
-            || typeof item.fromSessionId !== 'string' || !/^setup-[a-f0-9]{64}$/.test(item.fromSessionId)
-            || ![item.tokenDigest, item.bundleDigest, item.claimRevision, item.grantDigest].every((value) => typeof value === 'string' && /^[a-f0-9]{64}$/.test(value))
-            || typeof item.expiresAt !== 'string' || !Number.isFinite(Date.parse(item.expiresAt))
-            || (item.state === 'issued' || item.state === 'consuming')
-                && (typeof item.token !== 'string' || !/^[A-Za-z0-9_-]{32,256}$/.test(item.token))
-            || item.state === 'consuming' && (typeof item.consumedBySessionId !== 'string'
-                || !/^[a-f0-9]{64}$/.test(item.consumedBySessionId)
-                || typeof item.consumeStartedAt !== 'string' || !Number.isFinite(Date.parse(item.consumeStartedAt)))
-            || item.state === 'consumed' && (typeof item.consumedBySessionId !== 'string'
-                || !/^[a-f0-9]{64}$/.test(item.consumedBySessionId)
-                || typeof item.consumedAt !== 'string' || !Number.isFinite(Date.parse(item.consumedAt))))
-            return undefined;
-        return item;
-    }
-    catch {
-        return undefined;
-    }
-}
-async function resolveIssuedSetupLeaseHandoff(projectRoot, storyId, bundleDigest, claimRevision, nowIso) {
-    const record = await readSetupHandoffTokenRecord(projectRoot, storyId);
-    if (!record || record.state === 'consumed' || !record.token
-        || record.bundleDigest !== bundleDigest || record.claimRevision !== claimRevision
-        || Date.parse(record.expiresAt) <= Date.parse(nowIso)
-        || digest(record.token) !== record.tokenDigest)
-        return undefined;
-    return { sessionId: record.fromSessionId, token: record.token };
-}
-async function markSetupHandoffTokenConsuming(projectRoot, storyId, fromSessionId, token, consumedBySessionId, consumeStartedAt) {
-    const record = await readSetupHandoffTokenRecord(projectRoot, storyId);
-    if (!record || record.state === 'consumed' || record.fromSessionId !== fromSessionId
-        || record.token !== token || record.tokenDigest !== digest(token)) {
-        throw new Error('direct-yolo-setup-handoff-consume-invalid');
-    }
-    if (record.state === 'consuming') {
-        if (record.consumedBySessionId !== consumedBySessionId) {
-            throw new Error('direct-yolo-setup-handoff-consume-raced');
-        }
-        return;
-    }
-    await writeSetupHandoffTokenRecord(projectRoot, {
-        ...record,
-        state: 'consuming',
-        consumedBySessionId,
-        consumeStartedAt,
-    });
-}
-async function markSetupHandoffTokenConsumed(projectRoot, epicId, storyId, fromSessionId, token, bundleDigest, claimRevision, consumedBySessionId, consumedAt) {
-    const record = await readSetupHandoffTokenRecord(projectRoot, storyId);
-    if (record?.state === 'consumed' && record.fromSessionId === fromSessionId
-        && record.consumedBySessionId === consumedBySessionId)
-        return;
-    const runtime = await readGitLifecycleRuntime(projectRoot, { required: true });
-    const lease = asRecord(runtime.epics[epicId]?.branch_lease);
-    const consumption = asRecord(lease?.handoffConsumption);
-    if (!record || record.state !== 'consuming' || record.fromSessionId !== fromSessionId
-        || record.token !== token || record.tokenDigest !== digest(token)
-        || record.bundleDigest !== bundleDigest || record.claimRevision !== claimRevision
-        || record.consumedBySessionId !== consumedBySessionId
-        || lease?.ownerStoryId !== storyId || lease.sessionId !== consumedBySessionId
-        || consumption?.kind !== 'direct-yolo-setup-handoff-consumption'
-        || consumption.state !== 'consumed' || consumption.fromSessionId !== fromSessionId
-        || consumption.tokenDigest !== record.tokenDigest || consumption.bundleDigest !== bundleDigest
-        || consumption.claimRevision !== claimRevision || consumption.consumedBySessionId !== consumedBySessionId) {
-        throw new Error('direct-yolo-setup-handoff-consume-invalid');
-    }
-    try {
-        await writeSetupHandoffTokenRecord(projectRoot, {
-            schemaVersion: 1, kind: record.kind, state: 'consumed', storyId,
-            fromSessionId, tokenDigest: record.tokenDigest, bundleDigest: record.bundleDigest,
-            claimRevision: record.claimRevision, grantDigest: record.grantDigest, expiresAt: record.expiresAt,
-            consumedBySessionId, consumedAt,
-        });
-    }
-    catch {
-        throw new Error('direct-yolo-setup-handoff-consume-persist-failed');
-    }
-}
-function validSetupLeaseHandoff(input) {
-    const grant = asRecord(input.current?.handoffGrant);
-    const token = input.handoff?.token;
-    const tokenDigest = typeof token === 'string' && /^[A-Za-z0-9_-]{32,256}$/.test(token)
-        ? digest(token)
-        : undefined;
-    return Boolean(grant && tokenDigest && input.handoff
-        && input.handoff.sessionId === input.current?.sessionId
-        && grant.schemaVersion === 1
-        && grant.kind === 'direct-yolo-setup-handoff'
-        && grant.storyId === input.storyId
-        && grant.fromSessionId === input.current?.sessionId
-        && grant.bundleDigest === input.bundleDigest
-        && grant.claimRevision === input.claimRevision
-        && typeof grant.expiresAt === 'string'
-        && Date.parse(grant.expiresAt) > Date.parse(input.nowIso)
-        && typeof grant.tokenDigest === 'string'
-        && /^[a-f0-9]{64}$/.test(grant.tokenDigest)
-        && safeDigestEqual(grant.tokenDigest, tokenDigest));
-}
-function safeDigestEqual(left, right) {
-    const leftBytes = Buffer.from(left, 'hex');
-    const rightBytes = Buffer.from(right, 'hex');
-    return leftBytes.length === 32 && rightBytes.length === 32 && timingSafeEqual(leftBytes, rightBytes);
-}
-function sameLease(left, right) {
-    return Boolean(left && ['schemaVersion', 'ownerStoryId', 'sessionId', 'idempotencyKey', 'acquiredAt', 'expiresAt']
-        .every((key) => left[key] === right[key]));
-}
-async function releaseOwnedDirectLease(projectRoot, epicId, expected) {
-    await mutateGitLifecycleRuntime(projectRoot, (document) => {
-        const epic = ensureRuntimeEpic(document, epicId);
-        const current = asRecord(epic.branch_lease);
-        if (sameLease(current, expected))
-            epic.branch_lease = null;
-    });
-}
-async function cleanupOwnedDirectAuthority(authority, storyId) {
-    const runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-    const lease = asRecord(runtime.epics[authority.epicId]?.branch_lease);
-    if (!lease || lease.ownerStoryId !== storyId || !safeTokenValue(lease.sessionId)
-        || !safeTokenValue(lease.idempotencyKey) || !Number.isFinite(Date.parse(String(lease.acquiredAt)))
-        || !Number.isFinite(Date.parse(String(lease.expiresAt))))
-        return;
-    const physical = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-        kind: 'direct', storyId, sessionId: String(lease.sessionId), idempotencyKey: String(lease.idempotencyKey),
-        createdAt: String(lease.acquiredAt), expiresAt: String(lease.expiresAt), persistent: true,
-    });
-    if (!physical.ok)
-        return;
-    const released = await releaseGitLifecyclePhysicalIntegrationLock(physical.path, physical.owner);
-    if (released)
-        await releaseOwnedDirectLease(authority.projectRoot, authority.epicId, lease);
-}
-async function runQa(options, projectRoot, headSha, graphRevision) {
-    const transientAuthority = await executeP205TransientAuthority(projectRoot, {
-        headSha,
-        graphRevision,
-        nowIso: options.nowIso,
-    });
-    await options.qaRunner?.({ projectRoot, storyId: options.storyId, headSha });
-    const evidence = projectP205TransientExecutionEvidence(transientAuthority);
-    if (!evidence)
-        throw new Error('p205-transient-authority-invalid');
-    return {
-        contract: 'P205-CI-02', command: P205_COMPLETE_COMMAND,
-        manifestDigest: evidence.manifestDigest, gateIds: evidence.gateIds,
-        resultDigest: evidence.resultDigest, transientAuthority,
-    };
-}
-async function physicalCheckoutUnchanged(projectRoot, executionBranch, headSha, committedPaths) {
-    if (await git(projectRoot, ['rev-parse', 'HEAD']) !== headSha
-        || await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== executionBranch
-        || !(await gitExitOk(projectRoot, ['diff', '--cached', '--quiet'])))
-        return false;
-    return gitExitOk(projectRoot, ['diff', '--quiet', 'HEAD', '--', ...committedPaths]);
-}
-async function remoteHeadIsExact(projectRoot, remoteInput, branch, headSha) {
-    const remote = safeRemote(remoteInput);
-    const remoteHead = (await git(projectRoot, ['ls-remote', '--heads', remote, `refs/heads/${branch}`])).split(/\s+/)[0];
-    return remoteHead === headSha;
-}
-function validateDirectWriteSet(paths, authorizedWriteSet, storyId, rootMemoryEffect) {
-    if (paths.length === 0 || paths.some((path) => !safePath(path))) {
-        return { ok: false, reasonCode: 'direct-yolo-write-set-invalid' };
-    }
-    const required = [
-        '.neocortex/state.json', `docs/stories/${storyId}.story.md`,
-        `.neocortex/stories/${storyId}/qa-gate-result.json`,
-        `.neocortex/stories/${storyId}/validation-evidence.md`,
-        `.neocortex/stories/${storyId}/review.md`,
-    ];
-    if (!required.every((path) => paths.includes(path)) || !required.every((path) => authorizedWriteSet.includes(path))) {
-        return { ok: false, reasonCode: 'direct-yolo-write-set-invalid' };
-    }
-    if (rootMemoryEffect && (rootMemoryEffect.storyId !== storyId
-        || rootMemoryEffect.childClaimRevision !== digest([...authorizedWriteSet].sort().join('\0')))) {
-        return { ok: false, reasonCode: 'direct-yolo-root-memory-claim-mismatch' };
-    }
-    if (paths.some((path) => !authorizedWriteSet.includes(path) && !rootMemoryEffect?.files.some(file => file.path === path))) {
-        return { ok: false, reasonCode: 'direct-yolo-write-set-unauthorized' };
-    }
-    return { ok: true };
-}
-function safePath(value) {
-    return value.length > 0 && value.length <= 1024 && !value.startsWith('/') && !value.includes('\\')
-        && !value.split('/').includes('..') && !value.startsWith('.git/') && !value.includes('\0');
-}
-function safeTokenValue(value) {
-    return typeof value === 'string' && value.length > 0 && value.length <= 512
-        && /^[A-Za-z0-9._:@/+\-=]+$/.test(value);
-}
-function safeRef(value) {
-    return value.length > 0 && value.length <= 240 && !value.startsWith('-') && !/[\s~^:?*[\\]/.test(value) && !value.includes('..');
-}
-function safeRemote(value) {
-    if (!/^[A-Za-z0-9._-]{1,128}$/.test(value))
-        throw new Error('direct-yolo-remote-invalid');
-    return value;
-}
-function trailer(body, key) {
-    const prefix = `${key}: `;
-    const values = body.split('\n').map((line) => line.trim()).filter((line) => line.startsWith(prefix)).map((line) => line.slice(prefix.length));
-    return values.length === 1 ? values[0] : undefined;
-}
-function digest(value) { return createHash('sha256').update(value).digest('hex'); }
-function splitNull(value) { return value.split('\0').filter(Boolean); }
-function normalizedTime(value) {
-    return value && Number.isFinite(Date.parse(value)) ? new Date(Date.parse(value)).toISOString() : new Date().toISOString();
-}
-function asRecord(value) {
-    return value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
-}
-function validOriginBinding(value, executionBranch, originBranch) {
-    const item = asRecord(value);
-    if (!item || item.schemaVersion !== 1 || item.originBranch !== originBranch
-        || item.executionBranch !== executionBranch || item.capturedFromCurrentCheckout !== true
-        || typeof item.originHeadSha !== 'string' || !/^[a-f0-9]{40,64}$/.test(item.originHeadSha)
-        || typeof item.capturedAt !== 'string' || !Number.isFinite(Date.parse(item.capturedAt)))
-        return undefined;
-    return item;
-}
-function setupReceipt(authority, binding, leaseExpiresAt, reused) {
-    return Object.freeze({
-        schemaVersion: 1, kind: 'direct-yolo-setup-receipt', storyId: authority.storyId,
-        epicId: authority.epicId, executionBranch: authority.executionBranch, originBranch: authority.originBranch,
-        originHeadSha: binding.originHeadSha, leaseExpiresAt, reused, publicSafe: true,
-    });
-}
-async function checkoutPayload(projectRoot) {
-    const untrackedPaths = splitNull(await gitRaw(projectRoot, [
-        'ls-files', '--others', '--exclude-standard', '-z',
-    ])).sort();
-    const untrackedBlobs = await Promise.all(untrackedPaths.map(async (path) => {
-        if (!safePath(path))
-            throw new Error('direct-yolo-checkout-payload-invalid');
-        return `${path}\0${await git(projectRoot, ['hash-object', '--no-filters', '--', path])}`;
-    }));
-    return digest([
-        await gitRaw(projectRoot, ['diff', '--cached', '--binary', '--full-index']),
-        await gitRaw(projectRoot, ['diff', '--binary', '--full-index']),
-        await gitRaw(projectRoot, ['status', '--porcelain=v1', '-z', '--untracked-files=all']),
-        ...untrackedBlobs,
-    ].join('\0'));
-}
-/** Physical observation for a private YOLO agent step; this is not actor attribution. */
-export async function captureDirectYoloCheckoutEvidence(projectRootInput) {
-    const projectRoot = resolve(projectRootInput);
-    const headSha = await git(projectRoot, ['rev-parse', 'HEAD']);
-    const branch = await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-    const payloadDigest = await checkoutPayload(projectRoot);
-    if (await git(projectRoot, ['rev-parse', 'HEAD']) !== headSha
-        || await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== branch) {
-        throw new Error('direct-yolo-checkout-observation-raced');
-    }
-    return Object.freeze({ headSha, branch, payloadDigest });
-}
-async function worktreeBranches(projectRoot) {
-    const records = [];
-    let current;
-    for (const line of (await gitRaw(projectRoot, ['worktree', 'list', '--porcelain'])).split('\n')) {
-        if (line.startsWith('worktree ')) {
-            current = { path: line.slice('worktree '.length) };
-            records.push(current);
-        }
-        else if (current && line.startsWith('branch refs/heads/')) {
-            current.branch = line.slice('branch refs/heads/'.length);
-        }
-    }
-    return records;
-}
-function publicReason(error, fallback) {
-    if (error instanceof Error && error.message === 'git-lifecycle-runtime-revision-conflict') {
-        return 'direct-yolo-runtime-revision-conflict';
-    }
-    return error instanceof Error && /^direct-yolo-[a-z0-9-]+$/.test(error.message) ? error.message : fallback;
-}
-function failure(reasonCode) { return { ok: false, reasonCode }; }
-async function git(cwd, args) {
-    return String((await execFileAsync('git', [...args], { cwd, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 })).stdout).trim();
-}
-async function gitRaw(cwd, args) {
-    return String((await execFileAsync('git', [...args], { cwd, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 })).stdout);
-}
-async function gitExitOk(cwd, args) {
-    try {
-        await execFileAsync('git', [...args], { cwd, maxBuffer: 8 * 1024 * 1024 });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
+import{execFile as _e}from"node:child_process";import{createHash as Le,randomBytes as le,timingSafeEqual as He}from"node:crypto";import{readFile as J}from"node:fs/promises";import{join as te,resolve as Z}from"node:path";import{promisify as Ce}from"node:util";import{readRootMemoryEffectForCheckpoint as qe}from"../private-execution/root-memory-scope.js";import{rootMemoryEffectDigest as Oe,verifyRootMemoryPhysicalWriteSet as re}from"../private-execution/root-memory-git-evidence.js";import{acquireGitLifecyclePhysicalIntegrationLock as W,applyGitLifecycleRuntimeOverlay as $e,computeImmutableStoryQaEvidenceDigest as ze,computeGitLifecyclePhysicalIntegrationLockOwnerDigest as ge,computeP205StoryQaEvidenceDigest as Pe,computeLegacyDirectYoloRecoveryReceiptRef as Ne,ensureRuntimeEpic as P,ensureRuntimeStory as me,ensureGitLifecyclePrivateChildDirectory as We,executeP205TransientAuthority as Ge,projectP205TransientExecutionEvidence as Me,publicStoryReviewArtifactFromGit as Q,LEGACY_DIRECT_YOLO_RECOVERY_COMMITS as Ke,mutateGitLifecycleRuntime as $,P205_COMPLETE_COMMAND as Ve,readGitLifecycleRuntime as C,gitLifecycleRuntimeDirectory as Fe,assertGitLifecyclePrivateFile as we,releaseGitLifecyclePhysicalIntegrationLock as G,releaseGitLifecyclePhysicalIntegrationLockForCheckpoint as Te,verifyGitLifecyclePhysicalIntegrationLock as U,verifyAcceptedGitLifecycleStoryCheckpoint as Ie}from"./git-lifecycle-store.js";import{anchoredAtomicWriteFile as Ye}from"./secure-filesystem-boundary.js";import{GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID as Je,GIT_LIFECYCLE_REVIEW_PR_STEP_ID as Re,GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID as X}from"./git-lifecycle-step-ids.js";const oe=Ce(_e);async function yt(e){try{const t=await ve(e.projectRoot,e.storyId),r=N(e.nowIso),o=Date.parse(r),i=await l(t.projectRoot,["symbolic-ref","--quiet","--short","HEAD"]),n=await l(t.projectRoot,["rev-parse","HEAD"]),y=await C(t.projectRoot,{required:!0}),h=m(y.epics[t.epicId]),d=m(h?.branch_lease),a=d&&Number.isFinite(Date.parse(String(d.expiresAt)))&&Date.parse(String(d.expiresAt))>o;if(a&&d?.ownerStoryId!==e.storyId)return c("direct-yolo-writer-active");let s=he(h?.origin_binding,t.executionBranch,t.originBranch);if(i===t.executionBranch){if(!s)return c("direct-yolo-origin-binding-invalid")}else{if(i!==t.originBranch)return c("direct-yolo-current-branch-mismatch");if(s&&s.originHeadSha!==n)return c("direct-yolo-origin-binding-conflict");if(s??={schemaVersion:1,originBranch:t.originBranch,originHeadSha:n,executionBranch:t.executionBranch,capturedFromCurrentCheckout:!0,capturedAt:r},(await Ee(t.projectRoot)).some(u=>u.branch===t.executionBranch&&Z(u.path)!==t.projectRoot))return c("direct-yolo-execution-branch-checked-out-elsewhere");const w=await T(t.projectRoot),j=`refs/heads/${t.executionBranch}`;if(await L(t.projectRoot,["show-ref","--verify","--quiet",j])){const u=await l(t.projectRoot,["rev-parse",j]);if(u!==n){if(!await L(t.projectRoot,["merge-base","--is-ancestor",u,n]))return c("direct-yolo-execution-branch-diverged");await l(t.projectRoot,["update-ref",j,n,u])}await l(t.projectRoot,["switch",t.executionBranch])}else await l(t.projectRoot,["switch","-c",t.executionBranch]);if(await T(t.projectRoot)!==w)return c("direct-yolo-checkout-payload-raced")}const p=await l(t.projectRoot,["symbolic-ref","--quiet","--short","HEAD"]),f=await l(t.projectRoot,["rev-parse","HEAD"]);if(p!==t.executionBranch)return c("direct-yolo-current-branch-mismatch");if(a&&d?.ownerStoryId===e.storyId)return d.setupHeadSha!==f?c("direct-yolo-setup-lease-head-unbound"):{ok:!0,value:ue(t,s,String(d.expiresAt),!0)};const R=r,k=new Date(o+3600*1e3).toISOString(),I=`setup-${le(32).toString("hex")}`,v=await C(t.projectRoot,{required:!0});return await $(t.projectRoot,x=>{const w=P(x,t.epicId),j=m(w.branch_lease);if(j&&Date.parse(String(j.expiresAt))>o&&j.ownerStoryId!==e.storyId)throw new Error("direct-yolo-writer-active");const u=he(w.origin_binding,t.executionBranch,t.originBranch);if(w.origin_binding&&!u)throw new Error("direct-yolo-origin-binding-conflict");if(u&&JSON.stringify(u)!==JSON.stringify(s))throw new Error("direct-yolo-origin-binding-conflict");w.branch_mode="epic",w.execution_branch=t.executionBranch,w.origin_branch=t.originBranch,w.graph_revision=t.graphRevision,w.origin_binding=s,w.branch_lease={schemaVersion:1,ownerStoryId:e.storyId,sessionId:I,idempotencyKey:I,acquiredAt:R,expiresAt:k,setupHeadSha:f}},{expectedRevision:v.revision,preCommit:async()=>{if(await l(t.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==t.executionBranch||await l(t.projectRoot,["rev-parse","HEAD"])!==f)throw new Error("direct-yolo-setup-physical-state-raced")}}),{ok:!0,value:ue(t,s,k,!1)}}catch(t){return c(Y(t,"direct-yolo-setup-failed"))}}async function pt(e){let t;try{const r=await K(e.projectRoot,e.storyId),o=N(e.nowIso),i=te(r.projectRoot,".neocortex/state.json"),n=await J(i,"utf8"),y=await T(r.projectRoot),h=await l(r.projectRoot,["rev-parse","HEAD"]),d=`refs/heads/${r.executionBranch}`,a=await C(r.projectRoot,{required:!0}),s=m(a.epics[r.epicId]),p=he(s?.origin_binding,r.executionBranch,r.originBranch),f=m(s?.branch_lease);if(!p)return c("direct-yolo-origin-binding-invalid");if(!f||!ie(f,e.storyId,o)||f?.sessionId!==f?.idempotencyKey)return c("direct-yolo-setup-lease-invalid");const R=await W(r.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:String(f.sessionId),idempotencyKey:String(f.idempotencyKey),expiresAt:new Date(Date.now()+300*1e3).toISOString(),persistent:!1});if(!R.ok)return c(R.reasonCode);if(t=R,h!==f.setupHeadSha||!await L(r.projectRoot,["merge-base","--is-ancestor",p.originHeadSha,h])||await l(r.projectRoot,["rev-parse",d])!==h)return c("direct-yolo-setup-head-mismatch");if((await Ee(r.projectRoot)).some(u=>u.branch===r.executionBranch&&Z(u.path)!==r.projectRoot))return c("direct-yolo-execution-branch-checked-out-elsewhere");const I=m(JSON.parse(n)),v=m(m(I?.stories)?.[e.storyId]),x=m(a.stories[e.storyId]);if(!v||!["backlog","ready_to_start"].includes(String(v.status))||v.steps_completed!==void 0&&(!Array.isArray(v.steps_completed)||v.steps_completed.length>0)||v.branch_name||v.checkpoint)return c("direct-yolo-setup-story-progress-conflict");const w=x?.status==="branch-ready"&&x.last_step===X&&Array.isArray(x.steps_completed)&&x.steps_completed.length===1&&x.steps_completed[0]===X&&Object.keys(x).sort().join(",")==="last_step,status,steps_completed";if(x&&Object.keys(x).length>0&&!w)return c("direct-yolo-setup-story-progress-conflict");const j=async()=>{if(Date.parse(String(f.expiresAt))<=(e.nowIso?Date.parse(o):Date.now())||!t||!await U(t.path,t.owner)||await J(i,"utf8")!==n||await T(r.projectRoot)!==y||await l(r.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==r.executionBranch||await l(r.projectRoot,["rev-parse","HEAD"])!==h||!await L(r.projectRoot,["merge-base","--is-ancestor",p.originHeadSha,h])||await l(r.projectRoot,["rev-parse",d])!==h)throw new Error("direct-yolo-setup-physical-state-raced")};return w?await j():await $(r.projectRoot,u=>{const b=m(u.epics[r.epicId]),g=me(u,e.storyId);if(JSON.stringify(b?.branch_lease)!==JSON.stringify(f)||JSON.stringify(b?.origin_binding)!==JSON.stringify(p)||b?.graph_revision!==r.graphRevision||Object.keys(g).length>0)throw new Error("direct-yolo-setup-runtime-raced");g.status="branch-ready",g.last_step=X,g.steps_completed=[X]},{expectedRevision:a.revision,preCommit:j}),{ok:!0,value:Object.freeze({...ue(r,p,String(f.expiresAt),w),checkpointAccepted:!0,graphRevision:r.graphRevision,headSha:h})}}catch(r){return c(Y(r,"direct-yolo-setup-acceptance-failed"))}finally{t&&await G(t.path,t.owner).catch(()=>{})}}async function lt(e){try{const t=await K(e.projectRoot,e.storyId),r=q(await A(t.projectRoot,["diff","--cached","--name-only","-z"])),o=V(r,t.authorizedWriteSet,e.storyId,t.rootMemoryEffect);if(!o.ok)return c(o.reasonCode);if(t.rootMemoryEffect&&re(t.projectRoot,t.rootMemoryEffect,{storyId:e.storyId,executionBranch:t.executionBranch,baseSha:await l(t.projectRoot,["rev-parse","HEAD"]),headRef:":",childPaths:t.authorizedWriteSet}),Q(t.projectRoot,e.storyId,":")?.verdict!=="approved")return c("direct-yolo-review-artifact-not-approved");if(q(await A(t.projectRoot,["diff","--name-only","-z"])).some(S=>r.includes(S)))return c("direct-yolo-user-overlap");const y=await A(t.projectRoot,["diff","--cached","--binary","--full-index"]);if(!y)return c("direct-yolo-staged-diff-empty");const h=D(y),d=D([...t.authorizedWriteSet].sort().join("\0")),a=N(e.nowIso),s=await C(t.projectRoot,{required:!0}),p=m(s.epics[t.epicId]?.branch_lease);if(!ie(p,e.storyId,a))return c("direct-yolo-setup-handoff-owner-invalid");const f=String(p.sessionId),R=String(p.expiresAt),k=new Date(Math.min(Date.parse(R),Date.parse(a)+300*1e3)).toISOString(),I=await M(t.projectRoot,e.storyId),v=I?.state==="issued"&&I.fromSessionId===f&&I.bundleDigest===h&&I.claimRevision===d&&Date.parse(I.expiresAt)>Date.parse(a),x=v?I.expiresAt:k,w=v?I.token:le(32).toString("base64url"),j=D(w),u=Object.freeze({schemaVersion:1,kind:"direct-yolo-setup-handoff",storyId:e.storyId,fromSessionId:f,tokenDigest:j,bundleDigest:h,claimRevision:d,expiresAt:x}),b=D(JSON.stringify(u)),g=await W(t.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:f,idempotencyKey:f,expiresAt:x,persistent:!1,createdAt:a});if(!g.ok)return c(g.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-integration-backpressure":"direct-yolo-integration-lock-failed");try{await ne(t.projectRoot,{schemaVersion:1,kind:"direct-yolo-setup-handoff-token",state:"issued",storyId:e.storyId,fromSessionId:f,token:w,tokenDigest:j,bundleDigest:h,claimRevision:d,grantDigest:b,expiresAt:x}),await $(t.projectRoot,S=>{const E=m(P(S,t.epicId).branch_lease);if(!ie(E,e.storyId,a)||E?.sessionId!==f||E.idempotencyKey!==f)throw new Error("direct-yolo-setup-handoff-owner-raced");E.handoffGrant=u},{expectedRevision:s.revision,preCommit:async()=>{if(!await U(g.path,g.owner))throw new Error("direct-yolo-integration-lock-raced");const S=await M(t.projectRoot,e.storyId);if(!S||S.state!=="issued"||S.grantDigest!==b||S.tokenDigest!==j)throw new Error("direct-yolo-setup-handoff-token-raced")}})}finally{await G(g.path,g.owner).catch(()=>{})}return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"direct-yolo-setup-handoff-receipt",storyId:e.storyId,sessionId:f,bundleDigest:h,claimRevision:d,grantDigest:b,expiresAt:x,reused:v,publicSafe:!0})}}catch(t){return c(t instanceof Error&&/^direct-yolo-/.test(t.message)?t.message:"direct-yolo-setup-handoff-failed")}}async function gt(e){try{const t=await K(e.projectRoot,e.storyId),r=await l(t.projectRoot,["rev-parse","HEAD"]),o=q(await A(t.projectRoot,["diff","--cached","--name-only","-z"])),i=V(o,t.authorizedWriteSet,e.storyId,t.rootMemoryEffect);if(!i.ok)return c(i.reasonCode);t.rootMemoryEffect&&re(t.projectRoot,t.rootMemoryEffect,{storyId:e.storyId,executionBranch:t.executionBranch,baseSha:r,headRef:":",childPaths:t.authorizedWriteSet});const n=Q(t.projectRoot,e.storyId,":");if(n?.verdict!=="approved")return c("direct-yolo-review-artifact-not-approved");if(q(await A(t.projectRoot,["diff","--name-only","-z"])).some(u=>o.includes(u)))return c("direct-yolo-user-overlap");const h=await A(t.projectRoot,["diff","--cached","--binary","--full-index"]);if(!h)return c("direct-yolo-staged-diff-empty");const d=D(h),a=D([...t.authorizedWriteSet].sort().join("\0")),s=D(["direct-yolo-commit-v1",e.storyId,t.epicId,t.executionBranch,r,d,t.graphRevision,a].join("\0")),p=N(e.nowIso);let f=e.setupLeaseHandoff??await Ze(t.projectRoot,e.storyId,d,a,p);const R=await C(t.projectRoot,{required:!0}),k=m(R.epics[t.epicId]?.branch_lease),I=k?.ownerStoryId===e.storyId&&k.sessionId===s&&k.idempotencyKey===s&&typeof k.expiresAt=="string"&&Date.parse(k.expiresAt)>Date.parse(p)?k:void 0;if(I&&e.setupLeaseHandoff)return c("direct-yolo-setup-handoff-replayed");const v=m(I?.handoffConsumption);if(v){const u=await M(t.projectRoot,e.storyId);if(!u||!["consuming","consumed"].includes(u.state)||u.fromSessionId!==v.fromSessionId||u.tokenDigest!==v.tokenDigest||u.bundleDigest!==d||u.claimRevision!==a||v.bundleDigest!==d||v.claimRevision!==a||u.consumedBySessionId!==s||v.consumedBySessionId!==s)return c("direct-yolo-setup-handoff-consume-invalid");if(u.state==="consuming"){if(!u.token||D(u.token)!==u.tokenDigest)return c("direct-yolo-setup-handoff-consume-invalid");f={sessionId:u.fromSessionId,token:u.token}}}const x=I?String(I.expiresAt):new Date(Date.parse(p)+1800*1e3).toISOString(),w=await W(t.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:s,idempotencyKey:s,expiresAt:x,persistent:!0,createdAt:I&&typeof I.acquiredAt=="string"?I.acquiredAt:p});if(!w.ok)return c(w.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-integration-backpressure":"direct-yolo-integration-lock-failed");try{f&&e.setupLeaseHandoff===void 0&&(await Qe(t.projectRoot,e.storyId,f.sessionId,f.token,s,p),await e.setupHandoffFault?.("after-consuming-persisted")),await $(t.projectRoot,u=>{const b=P(u,t.epicId),g=m(b.branch_lease),S=g&&Date.parse(String(g.expiresAt))>Date.parse(p),E=g?.ownerStoryId===e.storyId&&g.sessionId===s&&g.idempotencyKey===s,O=g?.ownerStoryId===e.storyId&&g.sessionId===g.idempotencyKey&&typeof g.idempotencyKey=="string"&&/^setup-[a-f0-9]{64}$/.test(g.idempotencyKey),B=S&&O&&Xe({current:g,handoff:f,storyId:e.storyId,bundleDigest:d,claimRevision:a,nowIso:p});if(f&&S&&!E&&!B)throw new Error("direct-yolo-setup-handoff-invalid");if(S&&!E&&!B)throw new Error("direct-yolo-writer-active");const _=B?m(g?.handoffGrant):void 0,H=_?{schemaVersion:1,kind:"direct-yolo-setup-handoff-consumption",state:"consumed",storyId:e.storyId,fromSessionId:String(g?.sessionId),tokenDigest:String(_.tokenDigest),bundleDigest:d,claimRevision:a,consumedBySessionId:s,consumedAt:p}:void 0;b.branch_mode="epic",b.execution_branch=t.executionBranch,b.origin_branch=t.originBranch,b.graph_revision=t.graphRevision,b.branch_lease=S&&E?g:{schemaVersion:1,ownerStoryId:e.storyId,sessionId:s,idempotencyKey:s,acquiredAt:p,expiresAt:x,...H?{handoffConsumption:H}:{}}},{expectedRevision:R.revision,preCommit:async()=>{if(!await U(w.path,w.owner))throw new Error("direct-yolo-integration-lock-raced")}})}catch(u){throw await G(w.path,w.owner).catch(()=>{}),u}f&&e.setupLeaseHandoff===void 0&&(await e.setupHandoffFault?.("before-consumed-persist"),await Ue(t.projectRoot,t.epicId,e.storyId,f.sessionId,f.token,d,a,s,p));const j=Object.freeze([`Neocortex-Story: ${e.storyId}`,`Neocortex-Epic: ${t.epicId}`,`Neocortex-Execution-Branch: ${t.executionBranch}`,`Neocortex-Prepared-Base: ${r}`,`Neocortex-Bundle-Digest: ${d}`,`Neocortex-Review-Artifact-Digest: ${n.digest}`,`Neocortex-Graph-Revision: ${t.graphRevision}`,`Neocortex-Claim-Revision: ${a}`,...t.rootMemoryEffect?[`Neocortex-Root-Memory-Effect: ${Oe(t.rootMemoryEffect)}`]:[]]);return{ok:!0,value:Object.freeze({schemaVersion:1,storyId:e.storyId,epicId:t.epicId,executionBranch:t.executionBranch,baseSha:r,bundleDigest:d,reviewArtifactDigest:n.digest,graphRevision:t.graphRevision,claimRevision:a,idempotencyKey:s,changedPaths:Object.freeze(o),trailers:j})}}catch(t){return c(Y(t,"direct-yolo-begin-failed"))}}async function mt(e){let t,r,o;try{const i=await K(e.projectRoot,e.storyId);t=i;const n=await l(i.projectRoot,["rev-parse","HEAD"]);let y=await C(i.projectRoot,{required:!0});const h=m(y.stories[e.storyId]?.checkpoint);if(h){const B=typeof h.headSha=="string"?h.headSha:"",_=typeof h.graphRevision=="string"?h.graphRevision:"",H=/^[a-f0-9]{40,64}$/.test(B)?q(await A(i.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",B])):[],z=V(H,i.authorizedWriteSet,e.storyId,i.rootMemoryEffect);if(!(/^[a-f0-9]{40,64}$/.test(B)&&await L(i.projectRoot,["merge-base","--is-ancestor",B,n]))||!/^[a-f0-9]{64}$/.test(_)||!z.ok)return c("direct-yolo-replay-invalid");const Be=await se(e,i.projectRoot,n,_);if(!await Ie(i.projectRoot,h,e.storyId,i.epicId,i.executionBranch,Be.transientAuthority,i.authorizedWriteSet))return c("direct-yolo-replay-invalid");if(!await de(i.projectRoot,i.executionBranch,n,H))return c("direct-yolo-replay-head-raced");if(e.push&&!await ke(i.projectRoot,e.remote??"origin",i.executionBranch,B))return c("direct-yolo-remote-head-mismatch");const ye=Array.isArray(h.receiptRefs)?h.receiptRefs.find(pe=>typeof pe=="string"&&/^physical-lock-owner:[a-f0-9]{64}$/.test(pe)):void 0;return ye&&typeof h.idempotencyKey=="string"&&await Te(i.projectRoot,{storyId:e.storyId,idempotencyKey:h.idempotencyKey,ownerDigest:ye.slice(20)}),{ok:!0,value:h}}const d=n,a=await l(i.projectRoot,["rev-parse",`${d}^`]),s=await A(i.projectRoot,["show","--no-patch","--format=%B",d]),p=q(await A(i.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",d])),f=V(p,i.authorizedWriteSet,e.storyId,i.rootMemoryEffect);if(!f.ok)return c(f.reasonCode);i.rootMemoryEffect&&re(i.projectRoot,i.rootMemoryEffect,{storyId:e.storyId,executionBranch:i.executionBranch,baseSha:a,headRef:d,childPaths:i.authorizedWriteSet});const R=F(s,"Neocortex-Bundle-Digest"),k=F(s,"Neocortex-Graph-Revision"),I=F(s,"Neocortex-Claim-Revision"),v=new Map([["Neocortex-Story",e.storyId],["Neocortex-Epic",i.epicId],["Neocortex-Execution-Branch",i.executionBranch],["Neocortex-Prepared-Base",a],["Neocortex-Graph-Revision",i.graphRevision],["Neocortex-Claim-Revision",D([...i.authorizedWriteSet].sort().join("\0"))]]);if(!R||!/^[a-f0-9]{64}$/.test(R)||!k||!I||[...v].some(([B,_])=>F(s,B)!==_))return c("direct-yolo-trailers-invalid");const x=Q(i.projectRoot,e.storyId,d);if(x?.verdict!=="approved")return c("direct-yolo-review-artifact-not-approved");const w=F(s,"Neocortex-Review-Artifact-Digest");if(w!==void 0&&w!==x.digest)return c("direct-yolo-review-artifact-digest-mismatch");const j=D(await A(i.projectRoot,["diff","--binary","--full-index",`${a}..${d}`]));if(R!==j)return c("direct-yolo-bundle-digest-mismatch");const u=D(["direct-yolo-commit-v1",e.storyId,i.epicId,i.executionBranch,a,R,k,I].join("\0")),b=m(y.epics[i.epicId]?.branch_lease),g=N(e.nowIso),S=b?.ownerStoryId===e.storyId&&b.idempotencyKey===u&&b.sessionId===u&&Date.parse(String(b.expiresAt))>Date.now()?b:void 0;if(b&&Date.parse(String(b.expiresAt))>Date.now()&&!S)return c("direct-yolo-writer-active");const E=S??{schemaVersion:1,ownerStoryId:e.storyId,sessionId:u,idempotencyKey:u,acquiredAt:g,expiresAt:new Date(Date.parse(g)+1800*1e3).toISOString()},O=await W(i.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:u,idempotencyKey:u,expiresAt:String(E.expiresAt),persistent:!0,createdAt:String(E.acquiredAt)});if(!O.ok)return c(O.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-integration-backpressure":"direct-yolo-integration-lock-failed");o=O,S||(y=(await $(i.projectRoot,_=>{const H=P(_,i.epicId),z=m(H.branch_lease);if(z&&Date.parse(String(z.expiresAt))>Date.parse(g))throw new Error("direct-yolo-writer-active");if(H.graph_revision!==i.graphRevision)throw new Error("direct-yolo-graph-revision-raced");H.branch_lease=E},{expectedRevision:y.revision})).document),r=E;{const B=await se(e,i.projectRoot,d,i.graphRevision);if(!await de(i.projectRoot,i.executionBranch,d,p))return c("direct-yolo-head-raced");if(e.push){const z=ee(e.remote??"origin");if(await l(i.projectRoot,["push",z,i.executionBranch]),!await De(i.projectRoot,z,i.executionBranch,d))return c("direct-yolo-remote-head-mismatch")}const _=await Se({projectRoot:i.projectRoot,storyId:e.storyId,epicId:i.epicId,executionBranch:i.executionBranch,baseSha:a,headSha:d,bundleDigest:R,graphRevision:k,claimRevision:I,idempotencyKey:u,qaExecution:B,physicalLockOwnerDigest:ge(O.owner),nowIso:N(e.nowIso),legacyReceiptRef:void 0,rootMemoryEffect:i.rootMemoryEffect});return await e.beforeCheckpointPersist?.(),await xe({projectRoot:i.projectRoot,checkpoint:_,remote:e.push?e.remote??"origin":void 0,expectedRevision:y.revision,expectedLease:E,expectedGraphRevision:i.graphRevision,physicalLockPath:O.path,physicalLockOwner:O.owner,transientAuthority:B.transientAuthority,authorizedWriteSet:i.authorizedWriteSet})?(await e.afterCheckpointPersist?.(),{ok:!0,value:_}):c("direct-yolo-checkpoint-persist-failed")}}catch(i){return c(Y(i,"direct-yolo-finalize-failed"))}finally{o&&await G(o.path,o.owner).catch(()=>{}),t&&r?await ce(t.projectRoot,t.epicId,r).catch(()=>{}):t&&await tt(t,e.storyId).catch(()=>{})}}async function wt(e){try{const t=await K(e.projectRoot,e.storyId);if(!/^[a-f0-9]{40,64}$/.test(e.commitSha))return c("direct-yolo-recovery-commit-invalid");const r=await l(t.projectRoot,["rev-parse",e.commitSha]);if(Ke[e.storyId]!==r)return c("direct-yolo-recovery-not-allowlisted");if(await l(t.projectRoot,["rev-parse","HEAD"])!==r)return c("direct-yolo-recovery-head-mismatch");await l(t.projectRoot,["merge-base","--is-ancestor",r,`refs/heads/${t.executionBranch}`]);const o=await l(t.projectRoot,["rev-parse",`${r}^`]),i=await A(t.projectRoot,["diff","--binary","--full-index",`${o}..${r}`]),n=q(await A(t.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",r]));if(!V(n,t.authorizedWriteSet.length>0?t.authorizedWriteSet:n,e.storyId).ok)return c("direct-yolo-recovery-write-set-invalid");const h=D(i),d=D([...n].sort().join("\0")),a=D(["legacy-direct-yolo-recovery-v1",e.storyId,r].join("\0")),s=N(e.nowIso),p=new Date(Date.parse(s)+1800*1e3).toISOString(),f=await C(t.projectRoot,{required:!0}),R=await W(t.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:a,idempotencyKey:a,expiresAt:p,persistent:!0,createdAt:s});if(!R.ok)return c(R.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-recovery-integration-backpressure":"direct-yolo-recovery-integration-lock-failed");const k={schemaVersion:1,ownerStoryId:e.storyId,sessionId:a,idempotencyKey:a,acquiredAt:s,expiresAt:p};let I=!1;try{const v=await $(t.projectRoot,g=>{const S=P(g,t.epicId),E=m(S.branch_lease);if(E&&Date.parse(String(E.expiresAt))>Date.parse(s)&&!ae(E,k))throw new Error("direct-yolo-recovery-writer-active");if(S.graph_revision!==t.graphRevision)throw new Error("direct-yolo-recovery-graph-raced");S.branch_mode="epic",S.execution_branch=t.executionBranch,S.origin_branch=t.originBranch,S.branch_lease=k},{expectedRevision:f.revision});I=!0;const x=await se(e,t.projectRoot,r,t.graphRevision);if(!await de(t.projectRoot,t.executionBranch,r,n))return c("direct-yolo-recovery-head-raced");if(e.push){const g=ee(e.remote??"origin"),S=(await l(t.projectRoot,["ls-remote","--heads",g,`refs/heads/${t.executionBranch}`])).split(/\s+/)[0];if(!S||!await L(t.projectRoot,["merge-base","--is-ancestor",r,S]))return c("direct-yolo-recovery-remote-proof-missing")}const w=await Se({projectRoot:t.projectRoot,storyId:e.storyId,epicId:t.epicId,executionBranch:t.executionBranch,baseSha:o,headSha:r,bundleDigest:h,graphRevision:t.graphRevision,claimRevision:d,idempotencyKey:a,qaExecution:x,physicalLockOwnerDigest:ge(R.owner),nowIso:s,legacyReceiptRef:void 0}),j=await Ne(t.projectRoot,{storyId:e.storyId,epicId:t.epicId,executionBranch:t.executionBranch,baseSha:o,headSha:r,bundleDigest:h,graphRevision:t.graphRevision});if(!j)return c("direct-yolo-recovery-evidence-invalid");const u=Object.freeze({...w,receiptRefs:Object.freeze([...w.receiptRefs,j])});return await xe({projectRoot:t.projectRoot,checkpoint:u,remote:e.push?e.remote??"origin":void 0,remotePolicy:"ancestor-recovery",expectedRevision:v.document.revision,expectedLease:k,expectedGraphRevision:t.graphRevision,physicalLockPath:R.path,physicalLockOwner:R.owner,transientAuthority:x.transientAuthority,authorizedWriteSet:t.authorizedWriteSet})?{ok:!0,value:u}:c("direct-yolo-recovery-persist-failed")}finally{await G(R.path,R.owner).catch(()=>{}),I&&await ce(t.projectRoot,t.epicId,k).catch(()=>{})}}catch(t){return c(Y(t,"direct-yolo-recovery-failed"))}}async function ve(e,t){if(!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t))throw new Error("direct-yolo-story-id-invalid");const r=Z(e),o=m(JSON.parse(await J(te(r,".neocortex/state.json"),"utf8"))),i=await C(r,{required:!0}),n=$e(o,i),y=m(n.stories),h=m(n.epics),d=m(y?.[t]),a=String(d?.epic_id??t.split(".")[0]),s=m(h?.[a]),p=String(s?.execution_branch??""),f=String(s?.origin_branch??""),R=String(s?.graph_revision??""),k=Array.isArray(d?.files_to_modify)?[...new Set(d.files_to_modify.filter(v=>typeof v=="string"&&fe(v)))].sort():[];if(!d)throw new Error("direct-yolo-story-state-missing");if(s?.branch_mode!=="epic")throw new Error("direct-yolo-branch-mode-invalid");if(!Ae(p)||!await L(r,["check-ref-format","--branch",p]))throw new Error("direct-yolo-execution-branch-invalid");if(!Ae(f)||!await L(r,["check-ref-format","--branch",f]))throw new Error("direct-yolo-origin-branch-invalid");if(!/^[a-f0-9]{64}$/.test(R))throw new Error("direct-yolo-graph-revision-invalid");const I=await qe({projectRoot:r,storyId:t,graphRevision:R,executionBranch:p,childPaths:k});return{projectRoot:r,storyId:t,story:d,epicId:a,executionBranch:p,originBranch:f,graphRevision:R,authorizedWriteSet:k,rootMemoryEffect:I}}async function K(e,t){const r=await ve(e,t);if(await l(r.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==r.executionBranch)throw new Error("direct-yolo-current-branch-mismatch");return r}async function Se(e){const t=e.nowIso,r=await A(e.projectRoot,["show","--no-patch","--format=%H%n%P%n%B",e.headSha]),o=q(await A(e.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",e.headSha])),i=ze({storyId:e.storyId,baseSha:e.baseSha,headSha:e.headSha,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,commitBody:r,changedPaths:o}),n=Pe({gitEvidenceDigest:i,headSha:e.headSha,graphRevision:e.graphRevision,manifestDigest:e.qaExecution.manifestDigest,gateIds:e.qaExecution.gateIds,resultDigest:e.qaExecution.resultDigest}),y=`story-qa:${n}`,h=Object.freeze({schemaVersion:1,kind:"story_qa_evidence",producer:"local-yolo-tdd",evidenceVersion:"p205-execution-v2",storyId:e.storyId,epicId:e.epicId,baseSha:e.baseSha,headSha:e.headSha,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,contract:e.qaExecution.contract,command:e.qaExecution.command,manifestDigest:e.qaExecution.manifestDigest,gateIds:e.qaExecution.gateIds,resultDigest:e.qaExecution.resultDigest,sourceEvidenceDigest:n,verdict:"passed",checkedAt:t,receiptRef:y}),d=Q(e.projectRoot,e.storyId,e.headSha);if(d?.verdict!=="approved")throw new Error("direct-yolo-review-artifact-not-approved");const a=D(["root-commit-range-review-v2",e.storyId,e.baseSha,e.headSha,e.bundleDigest,e.graphRevision,y,D(r),[...o].sort().join(","),d.digest].join("\0")),s=`story-review:${a}`,p=Object.freeze({schemaVersion:1,kind:"story_review_evidence",producer:"root-commit-range-review",storyId:e.storyId,epicId:e.epicId,baseSha:e.baseSha,headSha:e.headSha,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,sourceEvidenceDigest:a,reviewArtifactDigest:d.digest,qaReceiptRef:y,verdict:"approved",reviewedAt:t,receiptRef:s}),f=[`.neocortex/stories/${e.storyId}/qa-gate-result.json`,`.neocortex/stories/${e.storyId}/validation-evidence.md`,y,s,...e.physicalLockOwnerDigest?[`physical-lock-owner:${e.physicalLockOwnerDigest}`]:[],...e.legacyReceiptRef?[e.legacyReceiptRef]:[]];return Object.freeze({schemaVersion:1,storyId:e.storyId,epicId:e.epicId,branch:e.executionBranch,baseSha:e.baseSha,headSha:e.headSha,commits:Object.freeze([e.headSha]),idempotencyKey:e.idempotencyKey,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,claimRevision:e.claimRevision,receiptRefs:Object.freeze(f),qaVerdict:"passed",reviewVerdict:"approved",qaReceipt:h,reviewReceipt:p,recordedAt:t,...e.rootMemoryEffect?{rootMemoryEffect:e.rootMemoryEffect}:{}})}async function xe(e){const{projectRoot:t,checkpoint:r,remote:o}=e;let i=!1;return await $(t,n=>{const y=P(n,r.epicId);if(e.expectedLease){const s=m(y.branch_lease);if(!ae(s,e.expectedLease))throw new Error("direct-yolo-runtime-revision-conflict");if(Date.parse(String(s?.expiresAt))<=Date.now())throw new Error("direct-yolo-writer-lease-expired");if(y.graph_revision!==e.expectedGraphRevision||r.graphRevision!==e.expectedGraphRevision)throw new Error("direct-yolo-graph-revision-raced")}const h=me(n,r.storyId),d=m(h.checkpoint);if(d&&d.headSha!==r.headSha){i=!0;return}h.checkpoint=r,h.status="done",h.last_step=Re;const a=Array.isArray(h.steps_completed)?h.steps_completed.filter(s=>typeof s=="string"):[];h.steps_completed=[...new Set([...a,Je,Re])],y.branch_lease=null},{expectedRevision:e.expectedRevision,preCommit:async()=>{if(i)throw new Error("direct-yolo-checkpoint-conflict");if(await l(t,["symbolic-ref","--quiet","--short","HEAD"])!==r.branch||await l(t,["rev-parse","HEAD"])!==r.headSha)throw new Error("direct-yolo-checkpoint-head-raced");if(!await Ie(t,r,r.storyId,r.epicId,r.branch,e.transientAuthority,e.authorizedWriteSet))throw new Error("direct-yolo-checkpoint-physical-invalid");if(e.physicalLockPath&&e.physicalLockOwner&&!await U(e.physicalLockPath,e.physicalLockOwner))throw new Error("direct-yolo-integration-lock-raced");if(o&&!(e.remotePolicy==="ancestor-recovery"?await ke(t,o,r.branch,r.headSha):await De(t,o,r.branch,r.headSha)))throw new Error("direct-yolo-checkpoint-remote-raced")}}),!i}async function ke(e,t,r,o){const i=ee(t),n=(await l(e,["ls-remote","--heads",i,`refs/heads/${r}`])).split(/\s+/)[0];return!!(n&&await L(e,["merge-base","--is-ancestor",o,n]))}function ie(e,t,r){return!!(e?.ownerStoryId===t&&e.sessionId===e.idempotencyKey&&typeof e.idempotencyKey=="string"&&/^setup-[a-f0-9]{64}$/.test(e.idempotencyKey)&&typeof e.expiresAt=="string"&&Date.parse(e.expiresAt)>Date.parse(r))}async function be(e,t){const r=await Fe(e),o=await We(r,"handoffs"),i=`direct-${D(t)}.json`;return{parent:o,name:i,path:te(o,i)}}async function ne(e,t){const r=await be(e,t.storyId);await Ye(r.parent,r.name,`${JSON.stringify(t,null,2)}
+`),await we(r.path,r.parent)}async function M(e,t){try{const r=await be(e,t);await we(r.path,r.parent);const o=JSON.parse(await J(r.path,"utf8")),i=o.state==="issued"?["schemaVersion","kind","state","storyId","fromSessionId","token","tokenDigest","bundleDigest","claimRevision","grantDigest","expiresAt"]:o.state==="consuming"?["schemaVersion","kind","state","storyId","fromSessionId","token","tokenDigest","bundleDigest","claimRevision","grantDigest","expiresAt","consumedBySessionId","consumeStartedAt"]:["schemaVersion","kind","state","storyId","fromSessionId","tokenDigest","bundleDigest","claimRevision","grantDigest","expiresAt","consumedBySessionId","consumedAt"];return Object.keys(o).sort().join("\0")!==[...i].sort().join("\0")||o.schemaVersion!==1||o.kind!=="direct-yolo-setup-handoff-token"||o.state!=="issued"&&o.state!=="consuming"&&o.state!=="consumed"||o.storyId!==t||typeof o.fromSessionId!="string"||!/^setup-[a-f0-9]{64}$/.test(o.fromSessionId)||![o.tokenDigest,o.bundleDigest,o.claimRevision,o.grantDigest].every(n=>typeof n=="string"&&/^[a-f0-9]{64}$/.test(n))||typeof o.expiresAt!="string"||!Number.isFinite(Date.parse(o.expiresAt))||(o.state==="issued"||o.state==="consuming")&&(typeof o.token!="string"||!/^[A-Za-z0-9_-]{32,256}$/.test(o.token))||o.state==="consuming"&&(typeof o.consumedBySessionId!="string"||!/^[a-f0-9]{64}$/.test(o.consumedBySessionId)||typeof o.consumeStartedAt!="string"||!Number.isFinite(Date.parse(o.consumeStartedAt)))||o.state==="consumed"&&(typeof o.consumedBySessionId!="string"||!/^[a-f0-9]{64}$/.test(o.consumedBySessionId)||typeof o.consumedAt!="string"||!Number.isFinite(Date.parse(o.consumedAt)))?void 0:o}catch{return}}async function Ze(e,t,r,o,i){const n=await M(e,t);if(!(!n||n.state==="consumed"||!n.token||n.bundleDigest!==r||n.claimRevision!==o||Date.parse(n.expiresAt)<=Date.parse(i)||D(n.token)!==n.tokenDigest))return{sessionId:n.fromSessionId,token:n.token}}async function Qe(e,t,r,o,i,n){const y=await M(e,t);if(!y||y.state==="consumed"||y.fromSessionId!==r||y.token!==o||y.tokenDigest!==D(o))throw new Error("direct-yolo-setup-handoff-consume-invalid");if(y.state==="consuming"){if(y.consumedBySessionId!==i)throw new Error("direct-yolo-setup-handoff-consume-raced");return}await ne(e,{...y,state:"consuming",consumedBySessionId:i,consumeStartedAt:n})}async function Ue(e,t,r,o,i,n,y,h,d){const a=await M(e,r);if(a?.state==="consumed"&&a.fromSessionId===o&&a.consumedBySessionId===h)return;const s=await C(e,{required:!0}),p=m(s.epics[t]?.branch_lease),f=m(p?.handoffConsumption);if(!a||a.state!=="consuming"||a.fromSessionId!==o||a.token!==i||a.tokenDigest!==D(i)||a.bundleDigest!==n||a.claimRevision!==y||a.consumedBySessionId!==h||p?.ownerStoryId!==r||p.sessionId!==h||f?.kind!=="direct-yolo-setup-handoff-consumption"||f.state!=="consumed"||f.fromSessionId!==o||f.tokenDigest!==a.tokenDigest||f.bundleDigest!==n||f.claimRevision!==y||f.consumedBySessionId!==h)throw new Error("direct-yolo-setup-handoff-consume-invalid");try{await ne(e,{schemaVersion:1,kind:a.kind,state:"consumed",storyId:r,fromSessionId:o,tokenDigest:a.tokenDigest,bundleDigest:a.bundleDigest,claimRevision:a.claimRevision,grantDigest:a.grantDigest,expiresAt:a.expiresAt,consumedBySessionId:h,consumedAt:d})}catch{throw new Error("direct-yolo-setup-handoff-consume-persist-failed")}}function Xe(e){const t=m(e.current?.handoffGrant),r=e.handoff?.token,o=typeof r=="string"&&/^[A-Za-z0-9_-]{32,256}$/.test(r)?D(r):void 0;return!!(t&&o&&e.handoff&&e.handoff.sessionId===e.current?.sessionId&&t.schemaVersion===1&&t.kind==="direct-yolo-setup-handoff"&&t.storyId===e.storyId&&t.fromSessionId===e.current?.sessionId&&t.bundleDigest===e.bundleDigest&&t.claimRevision===e.claimRevision&&typeof t.expiresAt=="string"&&Date.parse(t.expiresAt)>Date.parse(e.nowIso)&&typeof t.tokenDigest=="string"&&/^[a-f0-9]{64}$/.test(t.tokenDigest)&&et(t.tokenDigest,o))}function et(e,t){const r=Buffer.from(e,"hex"),o=Buffer.from(t,"hex");return r.length===32&&o.length===32&&He(r,o)}function ae(e,t){return!!(e&&["schemaVersion","ownerStoryId","sessionId","idempotencyKey","acquiredAt","expiresAt"].every(r=>e[r]===t[r]))}async function ce(e,t,r){await $(e,o=>{const i=P(o,t),n=m(i.branch_lease);ae(n,r)&&(i.branch_lease=null)})}async function tt(e,t){const r=await C(e.projectRoot,{required:!0}),o=m(r.epics[e.epicId]?.branch_lease);if(!o||o.ownerStoryId!==t||!je(o.sessionId)||!je(o.idempotencyKey)||!Number.isFinite(Date.parse(String(o.acquiredAt)))||!Number.isFinite(Date.parse(String(o.expiresAt))))return;const i=await W(e.projectRoot,{kind:"direct",storyId:t,sessionId:String(o.sessionId),idempotencyKey:String(o.idempotencyKey),createdAt:String(o.acquiredAt),expiresAt:String(o.expiresAt),persistent:!0});if(!i.ok)return;await G(i.path,i.owner)&&await ce(e.projectRoot,e.epicId,o)}async function se(e,t,r,o){const i=await Ge(t,{headSha:r,graphRevision:o,nowIso:e.nowIso});await e.qaRunner?.({projectRoot:t,storyId:e.storyId,headSha:r});const n=Me(i);if(!n)throw new Error("p205-transient-authority-invalid");return{contract:"P205-CI-02",command:Ve,manifestDigest:n.manifestDigest,gateIds:n.gateIds,resultDigest:n.resultDigest,transientAuthority:i}}async function de(e,t,r,o){return await l(e,["rev-parse","HEAD"])!==r||await l(e,["symbolic-ref","--quiet","--short","HEAD"])!==t||!await L(e,["diff","--cached","--quiet"])?!1:L(e,["diff","--quiet","HEAD","--",...o])}async function De(e,t,r,o){const i=ee(t);return(await l(e,["ls-remote","--heads",i,`refs/heads/${r}`])).split(/\s+/)[0]===o}function V(e,t,r,o){if(e.length===0||e.some(n=>!fe(n)))return{ok:!1,reasonCode:"direct-yolo-write-set-invalid"};const i=[".neocortex/state.json",`docs/stories/${r}.story.md`,`.neocortex/stories/${r}/qa-gate-result.json`,`.neocortex/stories/${r}/validation-evidence.md`,`.neocortex/stories/${r}/review.md`];return!i.every(n=>e.includes(n))||!i.every(n=>t.includes(n))?{ok:!1,reasonCode:"direct-yolo-write-set-invalid"}:o&&(o.storyId!==r||o.childClaimRevision!==D([...t].sort().join("\0")))?{ok:!1,reasonCode:"direct-yolo-root-memory-claim-mismatch"}:e.some(n=>!t.includes(n)&&!o?.files.some(y=>y.path===n))?{ok:!1,reasonCode:"direct-yolo-write-set-unauthorized"}:{ok:!0}}function fe(e){return e.length>0&&e.length<=1024&&!e.startsWith("/")&&!e.includes("\\")&&!e.split("/").includes("..")&&!e.startsWith(".git/")&&!e.includes("\0")}function je(e){return typeof e=="string"&&e.length>0&&e.length<=512&&/^[A-Za-z0-9._:@/+\-=]+$/.test(e)}function Ae(e){return e.length>0&&e.length<=240&&!e.startsWith("-")&&!/[\s~^:?*[\\]/.test(e)&&!e.includes("..")}function ee(e){if(!/^[A-Za-z0-9._-]{1,128}$/.test(e))throw new Error("direct-yolo-remote-invalid");return e}function F(e,t){const r=`${t}: `,o=e.split(`
+`).map(i=>i.trim()).filter(i=>i.startsWith(r)).map(i=>i.slice(r.length));return o.length===1?o[0]:void 0}function D(e){return Le("sha256").update(e).digest("hex")}function q(e){return e.split("\0").filter(Boolean)}function N(e){return e&&Number.isFinite(Date.parse(e))?new Date(Date.parse(e)).toISOString():new Date().toISOString()}function m(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function he(e,t,r){const o=m(e);if(!(!o||o.schemaVersion!==1||o.originBranch!==r||o.executionBranch!==t||o.capturedFromCurrentCheckout!==!0||typeof o.originHeadSha!="string"||!/^[a-f0-9]{40,64}$/.test(o.originHeadSha)||typeof o.capturedAt!="string"||!Number.isFinite(Date.parse(o.capturedAt))))return o}function ue(e,t,r,o){return Object.freeze({schemaVersion:1,kind:"direct-yolo-setup-receipt",storyId:e.storyId,epicId:e.epicId,executionBranch:e.executionBranch,originBranch:e.originBranch,originHeadSha:t.originHeadSha,leaseExpiresAt:r,reused:o,publicSafe:!0})}async function T(e){const t=q(await A(e,["ls-files","--others","--exclude-standard","-z"])).sort(),r=await Promise.all(t.map(async o=>{if(!fe(o))throw new Error("direct-yolo-checkout-payload-invalid");return`${o}\0${await l(e,["hash-object","--no-filters","--",o])}`}));return D([await A(e,["diff","--cached","--binary","--full-index"]),await A(e,["diff","--binary","--full-index"]),await A(e,["status","--porcelain=v1","-z","--untracked-files=all"]),...r].join("\0"))}async function It(e){const t=Z(e),r=await l(t,["rev-parse","HEAD"]),o=await l(t,["symbolic-ref","--quiet","--short","HEAD"]),i=await T(t);if(await l(t,["rev-parse","HEAD"])!==r||await l(t,["symbolic-ref","--quiet","--short","HEAD"])!==o)throw new Error("direct-yolo-checkout-observation-raced");return Object.freeze({headSha:r,branch:o,payloadDigest:i})}async function Ee(e){const t=[];let r;for(const o of(await A(e,["worktree","list","--porcelain"])).split(`
+`))o.startsWith("worktree ")?(r={path:o.slice(9)},t.push(r)):r&&o.startsWith("branch refs/heads/")&&(r.branch=o.slice(18));return t}function Y(e,t){return e instanceof Error&&e.message==="git-lifecycle-runtime-revision-conflict"?"direct-yolo-runtime-revision-conflict":e instanceof Error&&/^direct-yolo-[a-z0-9-]+$/.test(e.message)?e.message:t}function c(e){return{ok:!1,reasonCode:e}}async function l(e,t){return String((await oe("git",[...t],{cwd:e,encoding:"utf8",maxBuffer:32*1024*1024})).stdout).trim()}async function A(e,t){return String((await oe("git",[...t],{cwd:e,encoding:"utf8",maxBuffer:32*1024*1024})).stdout)}async function L(e,t){try{return await oe("git",[...t],{cwd:e,maxBuffer:8*1024*1024}),!0}catch{return!1}}export{pt as acceptDirectYoloSetupCheckpoint,gt as beginDirectYoloStoryCommit,It as captureDirectYoloCheckoutEvidence,mt as finalizeDirectYoloStoryCheckpoint,lt as issueDirectYoloSetupLeaseHandoff,yt as prepareDirectYoloSetup,wt as recoverLegacyDirectYoloStoryCheckpoint};