@ornexus/neocortex 4.60.73 → 4.60.74

package/packages/client/dist/git/legacy-story-pr.js

@@ -1,3538 +1,70 @@
-/** Root-only, provider-verified PR effect for a legacy story branch. */
-import { execFileSync } from 'node:child_process';
-import { createHash, randomBytes } from 'node:crypto';
-import { closeSync, constants, existsSync, fstatSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, realpathSync, rmdirSync, unlinkSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { isAbsolute, join } from 'node:path';
-import { parseDocument } from 'yaml';
-import { projectC12ScopedCiFollowUpDebt, summarizeC12RemoteRollup } from '../../../shared/dist/merge-readiness/c12-remote-observation.js';
-import { projectC12ScopedCiRegistryUpdate } from '../../../shared/dist/merge-readiness/c12-registry-projection.js';
-import { resolveBranchUnit } from '../../../shared/dist/yoloop/branch-unit.js';
-import { acquireGitLifecyclePhysicalIntegrationLock, assertGitLifecyclePrivateDirectory, assertGitLifecyclePrivateFile, ensureGitLifecyclePrivateChildDirectory, gitLifecycleRuntimeDirectory, releaseGitLifecyclePhysicalIntegrationLock } from './git-lifecycle-store.js';
-import { anchoredAtomicWriteFile, anchoredCompareAndSwapFile } from './secure-filesystem-boundary.js';
-import { GIT_LIFECYCLE_CREATE_PR_STEP_ID, GIT_LIFECYCLE_MERGE_PR_STEP_ID, GIT_LIFECYCLE_REVIEW_PR_STEP_ID, GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID, GIT_LIFECYCLE_SYNC_MAIN_STEP_ID, GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID } from './git-lifecycle-step-ids.js';
-import { executeP205TransientAuthority, projectP205TransientExecutionEvidence } from './git-lifecycle-store.js';
-import { readCompletedLegacyStoryBranchPlan } from './legacy-story-branch-setup.js';
-function fail(reasonCode) { return { ok: false, reasonCode }; }
-function record(value) {
-    return value && typeof value === 'object' && !Array.isArray(value) ? value : null;
-}
-function git(cwd, ...args) {
-    return execFileSync('git', args, { cwd, encoding: 'utf8', timeout: 15_000,
-        stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 2 * 1024 * 1024 }).trim();
-}
-function gitRaw(cwd, ...args) {
-    return execFileSync('git', args, { cwd, encoding: 'utf8', timeout: 15_000,
-        stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 2 * 1024 * 1024 });
-}
-function safeRead(path, limit) {
-    const fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
-    try {
-        const stat = fstatSync(fd);
-        if (!stat.isFile() || stat.size > limit)
-            throw new Error('legacy-story-pr-file-unsafe');
-        return readFileSync(fd, 'utf8');
-    }
-    finally {
-        closeSync(fd);
-    }
-}
-function singleRemoteSha(cwd, branch) {
-    const rows = git(cwd, 'ls-remote', '--heads', 'origin', `refs/heads/${branch}`).split('\n').filter(Boolean);
-    if (rows.length !== 1)
-        throw new Error('legacy-story-pr-remote-ref-missing');
-    const match = rows[0].match(/^([a-f0-9]{40})\s+refs\/heads\/(.+)$/);
-    if (!match || match[2] !== branch)
-        throw new Error('legacy-story-pr-remote-ref-invalid');
-    return match[1];
-}
-function repository(cwd) {
-    const remote = git(cwd, 'config', '--get', 'remote.origin.url');
-    const match = remote.match(/^(?:https:\/\/github\.com\/|git@github\.com:)([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+?)(?:\.git)?$/);
-    if (!match || match[1].includes('..') || match[2].includes('..')) {
-        throw new Error('legacy-story-pr-repository-invalid');
-    }
-    return `${match[1]}/${match[2]}`;
-}
-function gitCommonDirectory(cwd) {
-    const raw = git(cwd, 'rev-parse', '--git-common-dir');
-    return realpathSync(isAbsolute(raw) ? raw : join(cwd, raw));
-}
-function selectedPr(plan, items) {
-    if (!Array.isArray(items) || items.length >= 100)
-        throw new Error('legacy-story-pr-list-incomplete');
-    const relevant = items.filter((item) => item.headRefName === plan.branch);
-    if (relevant.length > 1 || relevant.some((item) => item.state !== 'OPEN'
-        || item.baseRefName !== plan.baseBranch || item.headRefOid !== plan.headSha)) {
-        throw new Error('legacy-story-pr-provider-conflict');
-    }
-    const item = relevant[0];
-    if (!item)
-        return null;
-    if (!Number.isSafeInteger(item.number) || item.number <= 0
-        || item.url.toLowerCase() !== `https://github.com/${plan.repository}/pull/${item.number}`.toLowerCase()) {
-        throw new Error('legacy-story-pr-provider-invalid');
-    }
-    return item;
-}
-async function recordCreateAttempt(projectRoot, plan) {
-    const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(projectRoot), 'legacy-story-pr-intents');
-    const name = `${createHash('sha256').update(plan.storyId).digest('hex')}.json`;
-    const path = join(directory, name);
-    const intent = { schemaVersion: 1, kind: 'legacy-story-pr-create-attempt',
-        storyId: plan.storyId, epicId: plan.epicId, repository: plan.repository,
-        branch: plan.branch, baseBranch: plan.baseBranch, headSha: plan.headSha };
-    if (existsSync(path)) {
-        await assertGitLifecyclePrivateFile(path, directory);
-        if (safeRead(path, 4096) !== `${JSON.stringify(intent)}\n`) {
-            throw new Error('legacy-story-pr-attempt-conflict');
-        }
-        return false;
-    }
-    await anchoredAtomicWriteFile(directory, name, `${JSON.stringify(intent)}\n`);
-    await assertGitLifecyclePrivateFile(path, directory);
-    return true;
-}
-/** Root-owned C08 basis. Only a cleanly staged, same-story write set may
- * cross into a future physical commit. This plan neither commits nor pushes. */
-export function planLegacyStoryCommitC08(options) {
-    if (!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-commit-target-invalid');
-    }
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd
-            || gitRaw(cwd, 'diff', '--name-only', '-z') !== ''
-            || gitRaw(cwd, 'ls-files', '--others', '--exclude-standard', '-z') !== '') {
-            return fail('legacy-story-commit-checkout-invalid');
-        }
-        const changedPaths = gitRaw(cwd, 'diff', '--cached', '--name-only', '-z').split('\0').filter(Boolean);
-        if (changedPaths.length === 0 || new Set(changedPaths).size !== changedPaths.length
-            || changedPaths.some((path) => path.length > 1024 || path.startsWith('/')
-                || path.includes('\\') || path.includes('\0') || path.split('/').includes('..')
-                || path === '.git' || path.startsWith('.git/'))) {
-            return fail('legacy-story-commit-write-set-invalid');
-        }
-        if (gitRaw(cwd, 'ls-files', '-u', '-z') !== '' || changedPaths.some((path) => {
-            const entries = gitRaw(cwd, 'ls-files', '-s', '-z', '--', path).split('\0').filter(Boolean);
-            return entries.length > 1 || entries.some((entry) => {
-                const match = entry.match(/^(100644|100755) [a-f0-9]{40} 0\t(.+)$/);
-                return !match || match[2] !== path;
-            });
-        }))
-            return fail('legacy-story-commit-index-unsafe');
-        git(cwd, 'diff', '--cached', '--check');
-        const stateRaw = gitRaw(cwd, 'show', ':.neocortex/state.json');
-        const storyPath = `docs/stories/${options.storyId}.story.md`;
-        const storyRaw = gitRaw(cwd, 'show', `:${storyPath}`);
-        if (safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024) !== stateRaw
-            || safeRead(join(cwd, storyPath), 2 * 1024 * 1024) !== storyRaw) {
-            return fail('legacy-story-commit-preimage-drift');
-        }
-        const state = record(JSON.parse(stateRaw));
-        const stories = record(state?.stories);
-        const story = record(stories?.[options.storyId]);
-        const epicId = story?.epic_id;
-        const epic = typeof epicId === 'string' ? record(record(state?.epics)?.[epicId]) : null;
-        const ids = epic?.stories;
-        if (!story || story.id !== options.storyId || typeof epicId !== 'string'
-            || !epic || epic.id !== epicId || epic.branch_mode === 'epic'
-            || story.status !== 'memory-updated' || story.last_step !== GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID
-            || !Array.isArray(story.steps_completed)
-            || !story.steps_completed.includes(GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID)
-            || story.steps_completed.includes(GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID)
-            || !Number.isSafeInteger(story.issue_number) || story.issue_number <= 0
-            || !Array.isArray(ids) || ids.length === 0 || new Set(ids).size !== ids.length
-            || !ids.includes(options.storyId)
-            || ids.some((id) => typeof id !== 'string' || record(stories?.[id])?.epic_id !== epicId)
-            || Object.entries(stories ?? {}).some(([id, value]) => record(value)?.epic_id === epicId && !ids.includes(id))) {
-            return fail('legacy-story-commit-state-invalid');
-        }
-        const unit = resolveBranchUnit(epic, ids.map((id) => ({ ...record(stories?.[id]), id })));
-        const branch = `story/${epicId}/${options.storyId}`;
-        const baseBranch = record(state?.config)?.default_branch;
-        if (unit.mode !== 'story' || story.branch_name !== branch
-            || git(cwd, 'branch', '--show-current') !== branch
-            || typeof baseBranch !== 'string' || baseBranch === branch
-            || git(cwd, 'check-ref-format', '--branch', baseBranch) !== baseBranch) {
-            return fail('legacy-story-commit-branch-invalid');
-        }
-        // The staged story is not an authority to widen its own write set. Pin it
-        // to the committed source specification before admitting staged paths.
-        const committedState = record(JSON.parse(gitRaw(cwd, 'show', 'HEAD:.neocortex/state.json')));
-        const committedStory = record(record(committedState?.stories)?.[options.storyId]);
-        const allowed = Array.isArray(committedStory?.files_to_modify)
-            ? committedStory.files_to_modify : null;
-        if (!allowed || allowed.length === 0 || new Set(allowed).size !== allowed.length
-            || committedStory?.epic_id !== epicId
-            || JSON.stringify(story.files_to_modify) !== JSON.stringify(allowed)
-            || allowed.some((path) => typeof path !== 'string' || path.length > 1024
-                || path.startsWith('/') || path.includes('\\') || path.split('/').includes('..')
-                || path === '.git' || path.startsWith('.git/'))
-            || !changedPaths.every((path) => allowed.includes(path))
-            || !changedPaths.includes('.neocortex/state.json') || !changedPaths.includes(storyPath)
-            || !allowed.includes('.neocortex/state.json') || !allowed.includes(storyPath)) {
-            return fail('legacy-story-commit-write-set-unauthorized');
-        }
-        const frontmatter = storyRaw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-        if (!frontmatter)
-            return fail('legacy-story-commit-frontmatter-invalid');
-        const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-        const fields = record(document.toJS());
-        const stepsKeys = ['stepsCompleted', 'steps_completed'].filter((key) => document.has(key));
-        const lastKeys = ['lastStep', 'last_step'].filter((key) => document.has(key));
-        const branchKeys = ['branchName', 'branch_name'].filter((key) => document.has(key));
-        const issueKeys = ['issueNumber', 'issue_number'].filter((key) => document.has(key));
-        if (document.errors.length > 0 || document.get('id') !== options.storyId
-            || (document.get('epic_id') ?? document.get('epic')) !== epicId
-            || document.get('status') !== 'memory-updated'
-            || document.has('currentStatus') && document.get('currentStatus') !== 'memory-updated'
-            || stepsKeys.length !== 1 || lastKeys.length !== 1 || branchKeys.length !== 1
-            || issueKeys.length !== 1
-            || JSON.stringify(fields?.[stepsKeys[0]]) !== JSON.stringify(story.steps_completed)
-            || fields?.[lastKeys[0]] !== GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID
-            || fields?.[branchKeys[0]] !== branch
-            || fields?.[issueKeys[0]] !== story.issue_number) {
-            return fail('legacy-story-commit-frontmatter-invalid');
-        }
-        const headSha = git(cwd, 'rev-parse', 'HEAD');
-        // C01 creates the story branch locally. C08 is its first remote push;
-        // an existing remote ref is ambiguous and cannot be silently adopted.
-        const remoteRows = git(cwd, 'ls-remote', '--heads', 'origin', `refs/heads/${branch}`)
-            .split('\n').filter(Boolean);
-        const baseSha = singleRemoteSha(cwd, baseBranch);
-        if (!/^[a-f0-9]{40}$/.test(headSha) || remoteRows.length !== 0
-            || git(cwd, 'rev-parse', `refs/remotes/origin/${baseBranch}`) !== baseSha) {
-            return fail('legacy-story-commit-remote-drift');
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c08-commit-plan', storyId: options.storyId, epicId,
-                repository: repository(cwd), branch, baseBranch, headSha, remoteHeadSha: null,
-                baseSha, indexDigestSha256: digest(gitRaw(cwd, 'ls-files', '-s', '-z')),
-                stagedPatchSha256: digest(gitRaw(cwd, 'diff', '--cached', '--binary', '--full-index')),
-                changedPaths: Object.freeze(changedPaths), stateSha256: digest(stateRaw),
-                storySha256: digest(storyRaw),
-                stateIndexBlobSha: git(cwd, 'rev-parse', ':.neocortex/state.json'),
-                storyIndexBlobSha: git(cwd, 'rev-parse', `:${storyPath}`),
-                physicalCommit: false,
-                checkpointAccepted: false, localOnly: true }) };
-    }
-    catch {
-        return fail('legacy-story-commit-physical-unavailable');
-    }
-}
-function projectLegacyStoryCommitC08(cwd, plan) {
-    const stateBefore = gitRaw(cwd, 'show', plan.stateIndexBlobSha);
-    const storyBefore = gitRaw(cwd, 'show', plan.storyIndexBlobSha);
-    if (git(cwd, 'cat-file', '-t', plan.stateIndexBlobSha) !== 'blob'
-        || git(cwd, 'cat-file', '-t', plan.storyIndexBlobSha) !== 'blob'
-        || digest(stateBefore) !== plan.stateSha256 || digest(storyBefore) !== plan.storySha256) {
-        throw new Error('legacy-story-commit-preimage-invalid');
-    }
-    const state = record(JSON.parse(stateBefore));
-    const story = record(record(state?.stories)?.[plan.storyId]);
-    if (!story || story.epic_id !== plan.epicId || story.status !== 'memory-updated'
-        || story.last_step !== GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID
-        || !Array.isArray(story.steps_completed)
-        || !story.steps_completed.includes(GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID)
-        || story.steps_completed.includes(GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID)) {
-        throw new Error('legacy-story-commit-projection-state-invalid');
-    }
-    const priorSteps = story.steps_completed;
-    story.status = 'committed';
-    story.last_step = GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID;
-    story.steps_completed = [...priorSteps, GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID];
-    const stateAfter = `${JSON.stringify(state, null, 2)}\n`;
-    const frontmatter = storyBefore.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-    if (!frontmatter)
-        throw new Error('legacy-story-commit-projection-frontmatter-invalid');
-    const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-    const fields = record(document.toJS());
-    const stepsKeys = ['stepsCompleted', 'steps_completed'].filter((key) => document.has(key));
-    const lastKeys = ['lastStep', 'last_step'].filter((key) => document.has(key));
-    if (document.errors.length > 0 || document.get('id') !== plan.storyId
-        || (document.get('epic_id') ?? document.get('epic')) !== plan.epicId
-        || document.get('status') !== 'memory-updated'
-        || stepsKeys.length !== 1 || lastKeys.length !== 1
-        || JSON.stringify(fields?.[stepsKeys[0]]) !== JSON.stringify(priorSteps)
-        || fields?.[lastKeys[0]] !== GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID) {
-        throw new Error('legacy-story-commit-projection-frontmatter-invalid');
-    }
-    document.set('status', 'committed');
-    if (document.has('currentStatus'))
-        document.set('currentStatus', 'committed');
-    document.set(stepsKeys[0], story.steps_completed);
-    document.set(lastKeys[0], GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID);
-    const storyAfter = `---\n${document.toString({ lineWidth: 0 })}---\n${storyBefore.slice(frontmatter[0].length)}`;
-    return { stateBefore, storyBefore, stateAfter, storyAfter };
-}
-async function verifyLegacyStoryC01BeforeCommit(cwd, plan, seam) {
-    if (seam)
-        return seam();
-    const completed = await readCompletedLegacyStoryBranchPlan({ projectRoot: cwd, storyId: plan.storyId });
-    if (!completed.ok || completed.value.epicId !== plan.epicId
-        || completed.value.branch !== plan.branch || completed.value.baseBranch !== plan.baseBranch
-        || completed.value.worktreePath !== cwd)
-        return false;
-    try {
-        git(cwd, 'merge-base', '--is-ancestor', completed.value.baseHeadSha, plan.headSha);
-    }
-    catch {
-        return false;
-    }
-    const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-branch-intents');
-    const path = join(directory, `${digest(plan.storyId)}.c01.accepted.json`);
-    if (!existsSync(path))
-        return false;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const marker = record(JSON.parse(safeRead(path, 4096)));
-    const state = record(JSON.parse(gitRaw(cwd, 'show', plan.stateIndexBlobSha)));
-    const story = record(record(state?.stories)?.[plan.storyId]);
-    return !!marker && marker.schemaVersion === 1
-        && marker.kind === 'legacy-story-c01-acceptance-intent'
-        && marker.storyId === plan.storyId
-        && marker.planDigest === digest(JSON.stringify(completed.value))
-        && marker.repository === plan.repository
-        && marker.issueNumber === story?.issue_number;
-}
-function c08OtherIndex(cwd, plan) {
-    return plan.changedPaths.filter((path) => path !== '.neocortex/state.json'
-        && path !== `docs/stories/${plan.storyId}.story.md`).map((path) => {
-        const entries = gitRaw(cwd, 'ls-files', '-s', '-z', '--', path).split('\0').filter(Boolean);
-        if (entries.length > 1)
-            throw new Error('legacy-story-commit-index-invalid');
-        return { path, entry: entries[0] ?? null };
-    });
-}
-/** Root-owned C08 effect: one locally committed story checkpoint, full P205 on
- * that immutable HEAD, then a first non-force remote push and exact readback. */
-export async function acceptLegacyStoryCommitC08(options) {
-    if (!options.authorize)
-        return fail('legacy-story-commit-authorization-required');
-    if (!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-commit-target-invalid');
-    }
-    const sessionId = `legacy-c08-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 60 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd) {
-            return fail('legacy-story-commit-checkout-invalid');
-        }
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const prefix = digest(options.storyId);
-        const intentName = `${prefix}.c08.commit.json`;
-        const acceptedName = `${prefix}.c08.commit.accepted.json`;
-        let intentRaw = await readC09PrivateJson(directory, intentName, 64 * 1024);
-        if (!intentRaw) {
-            const planned = planLegacyStoryCommitC08(options);
-            if (!planned.ok)
-                return planned;
-            const plan = planned.value;
-            if (!await verifyLegacyStoryC01BeforeCommit(cwd, plan, options.verifyC01)) {
-                return fail('legacy-story-commit-c01-unverified');
-            }
-            const projection = projectLegacyStoryCommitC08(cwd, plan);
-            const intent = { schemaVersion: 1, kind: 'legacy-story-c08-commit-intent',
-                plan, stateAfterSha256: digest(projection.stateAfter),
-                storyAfterSha256: digest(projection.storyAfter), otherIndex: c08OtherIndex(cwd, plan) };
-            await anchoredAtomicWriteFile(directory, intentName, `${JSON.stringify(intent)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, intentName), directory);
-            intentRaw = intent;
-        }
-        const planRaw = record(intentRaw.plan);
-        if (intentRaw.schemaVersion !== 1 || intentRaw.kind !== 'legacy-story-c08-commit-intent'
-            || !planRaw || planRaw.schemaVersion !== 1 || planRaw.kind !== 'legacy-story-c08-commit-plan'
-            || planRaw.storyId !== options.storyId || typeof planRaw.epicId !== 'string'
-            || planRaw.branch !== `story/${planRaw.epicId}/${options.storyId}`
-            || typeof planRaw.repository !== 'string' || typeof planRaw.baseBranch !== 'string'
-            || typeof planRaw.headSha !== 'string' || !/^[a-f0-9]{40}$/.test(planRaw.headSha)
-            || typeof planRaw.stateIndexBlobSha !== 'string' || !/^[a-f0-9]{40}$/.test(planRaw.stateIndexBlobSha)
-            || typeof planRaw.storyIndexBlobSha !== 'string' || !/^[a-f0-9]{40}$/.test(planRaw.storyIndexBlobSha)
-            || !Array.isArray(planRaw.changedPaths) || !planRaw.changedPaths.includes('.neocortex/state.json')
-            || !planRaw.changedPaths.includes(`docs/stories/${options.storyId}.story.md`)
-            || planRaw.remoteHeadSha !== null || planRaw.physicalCommit !== false
-            || planRaw.checkpointAccepted !== false
-            || typeof intentRaw.stateAfterSha256 !== 'string'
-            || !/^[a-f0-9]{64}$/.test(intentRaw.stateAfterSha256)
-            || typeof intentRaw.storyAfterSha256 !== 'string'
-            || !/^[a-f0-9]{64}$/.test(intentRaw.storyAfterSha256)
-            || !Array.isArray(intentRaw.otherIndex)
-            || intentRaw.otherIndex.length !== planRaw.changedPaths.length - 2
-            || intentRaw.otherIndex.some((item) => {
-                const value = record(item);
-                return !value || typeof value.path !== 'string'
-                    || !planRaw.changedPaths.includes(value.path)
-                    || value.path === '.neocortex/state.json'
-                    || value.path === `docs/stories/${options.storyId}.story.md`
-                    || value.entry !== null && (typeof value.entry !== 'string'
-                        || !/^(100644|100755) [a-f0-9]{40} 0\t/.test(value.entry)
-                        || !value.entry.endsWith(`\t${value.path}`));
-            })
-            || !/^[a-f0-9]{64}$/.test(String(planRaw.indexDigestSha256))
-            || !/^[a-f0-9]{64}$/.test(String(planRaw.stagedPatchSha256))
-            || !/^[a-f0-9]{64}$/.test(String(planRaw.stateSha256))
-            || !/^[a-f0-9]{64}$/.test(String(planRaw.storySha256))
-            || new Set(planRaw.changedPaths).size !== planRaw.changedPaths.length
-            || planRaw.changedPaths.some((path) => typeof path !== 'string'
-                || path.length > 1024 || path.startsWith('/') || path.includes('\\')
-                || path.split('/').includes('..') || path === '.git' || path.startsWith('.git/'))
-            || repository(cwd) !== planRaw.repository || git(cwd, 'branch', '--show-current') !== planRaw.branch) {
-            return fail('legacy-story-commit-intent-invalid');
-        }
-        const plan = planRaw;
-        if (!await verifyLegacyStoryC01BeforeCommit(cwd, plan, options.verifyC01)) {
-            return fail('legacy-story-commit-c01-unverified');
-        }
-        const projection = projectLegacyStoryCommitC08(cwd, plan);
-        if (digest(projection.stateAfter) !== intentRaw.stateAfterSha256
-            || digest(projection.storyAfter) !== intentRaw.storyAfterSha256
-            || JSON.stringify(c08OtherIndex(cwd, plan)) !== JSON.stringify(intentRaw.otherIndex)) {
-            return fail('legacy-story-commit-intent-drift');
-        }
-        const intentSha256 = digest(JSON.stringify(intentRaw));
-        const acceptedRaw = await readC09PrivateJson(directory, acceptedName, 4096);
-        const accepted = acceptedRaw;
-        if (accepted && (accepted.schemaVersion !== 1 || accepted.kind !== 'legacy-story-c08-commit-accepted'
-            || accepted.intentSha256 !== intentSha256
-            || !/^[a-f0-9]{40}$/.test(accepted.checkpointHeadSha)
-            || !/^[a-f0-9]{64}$/.test(accepted.qaSha256))) {
-            return fail('legacy-story-commit-accepted-invalid');
-        }
-        let headSha = git(cwd, 'rev-parse', 'HEAD');
-        if (headSha === plan.headSha) {
-            if (accepted)
-                return fail('legacy-story-commit-accepted-physical-drift');
-            const currentPaths = gitRaw(cwd, 'diff', '--cached', '--name-only', '-z').split('\0').filter(Boolean);
-            const unstaged = gitRaw(cwd, 'diff', '--name-only', '-z').split('\0').filter(Boolean);
-            if (JSON.stringify(currentPaths) !== JSON.stringify(plan.changedPaths)
-                || unstaged.some((path) => path !== '.neocortex/state.json'
-                    && path !== `docs/stories/${plan.storyId}.story.md`)
-                || gitRaw(cwd, 'ls-files', '--others', '--exclude-standard', '-z') !== ''
-                || git(cwd, 'ls-remote', '--heads', 'origin', `refs/heads/${plan.branch}`) !== ''
-                || singleRemoteSha(cwd, plan.baseBranch) !== plan.baseSha) {
-                return fail('legacy-story-commit-precommit-drift');
-            }
-            const stateCurrent = safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024);
-            const storyCurrent = safeRead(join(cwd, `docs/stories/${plan.storyId}.story.md`), 2 * 1024 * 1024);
-            const indexState = gitRaw(cwd, 'show', ':.neocortex/state.json');
-            const indexStory = gitRaw(cwd, 'show', `:docs/stories/${plan.storyId}.story.md`);
-            if (![projection.stateBefore, projection.stateAfter].includes(stateCurrent)
-                || ![projection.storyBefore, projection.storyAfter].includes(storyCurrent)
-                || ![projection.stateBefore, projection.stateAfter].includes(indexState)
-                || ![projection.storyBefore, projection.storyAfter].includes(indexStory)
-                || indexState === projection.stateAfter && stateCurrent !== projection.stateAfter
-                || indexStory === projection.storyAfter && storyCurrent !== projection.storyAfter) {
-                return fail('legacy-story-commit-preimage-drift');
-            }
-            if (stateCurrent === projection.stateBefore) {
-                await anchoredCompareAndSwapFile(join(cwd, '.neocortex'), 'state.json', projection.stateAfter, digest(projection.stateBefore));
-                await options.afterStateWrite?.();
-            }
-            if (storyCurrent === projection.storyBefore) {
-                await anchoredCompareAndSwapFile(join(cwd, 'docs/stories'), `${plan.storyId}.story.md`, projection.storyAfter, digest(projection.storyBefore));
-            }
-            if (safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024) !== projection.stateAfter
-                || safeRead(join(cwd, `docs/stories/${plan.storyId}.story.md`), 2 * 1024 * 1024)
-                    !== projection.storyAfter)
-                return fail('legacy-story-commit-projection-drift');
-            git(cwd, 'add', '--', '.neocortex/state.json', `docs/stories/${plan.storyId}.story.md`);
-            git(cwd, 'diff', '--cached', '--check');
-            if (gitRaw(cwd, 'diff', '--name-only', '-z') !== ''
-                || gitRaw(cwd, 'ls-files', '--others', '--exclude-standard', '-z') !== ''
-                || JSON.stringify(c08OtherIndex(cwd, plan)) !== JSON.stringify(intentRaw.otherIndex)
-                || digest(gitRaw(cwd, 'show', ':.neocortex/state.json')) !== intentRaw.stateAfterSha256
-                || digest(gitRaw(cwd, 'show', `:docs/stories/${plan.storyId}.story.md`))
-                    !== intentRaw.storyAfterSha256)
-                return fail('legacy-story-commit-index-drift');
-            git(cwd, 'commit', '-m', `chore(story): checkpoint ${plan.storyId} C08`, '-m', `Neocortex-Legacy-Commit: ${plan.storyId}`);
-            headSha = git(cwd, 'rev-parse', 'HEAD');
-            await options.afterCommit?.();
-        }
-        const parents = git(cwd, 'rev-list', '--parents', '-n', '1', headSha).split(' ');
-        const changed = gitRaw(cwd, 'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha)
-            .split('\0').filter(Boolean);
-        if (JSON.stringify(parents) !== JSON.stringify([headSha, plan.headSha])
-            || JSON.stringify(changed) !== JSON.stringify(plan.changedPaths)
-            || intentRaw.otherIndex.some(({ path, entry }) => {
-                const committed = gitRaw(cwd, 'ls-tree', '-z', headSha, '--', path)
-                    .split('\0').filter(Boolean);
-                return entry === null ? committed.length !== 0
-                    : committed.length !== 1
-                        || committed[0] !== entry.replace(/^(100644|100755) ([a-f0-9]{40}) 0\t/, '$1 blob $2\t');
-            })
-            || digest(gitRaw(cwd, 'show', `${headSha}:.neocortex/state.json`)) !== intentRaw.stateAfterSha256
-            || digest(gitRaw(cwd, 'show', `${headSha}:docs/stories/${plan.storyId}.story.md`))
-                !== intentRaw.storyAfterSha256
-            || !gitRaw(cwd, 'log', '-1', '--format=%B', headSha).split('\n').map((line) => line.trim())
-                .includes(`Neocortex-Legacy-Commit: ${plan.storyId}`)
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-commit-checkpoint-invalid');
-        }
-        const remoteNow = git(cwd, 'ls-remote', '--heads', 'origin', `refs/heads/${plan.branch}`);
-        if (remoteNow !== '' && remoteNow !== `${headSha}\trefs/heads/${plan.branch}`) {
-            return fail('legacy-story-commit-remote-drift');
-        }
-        let qaSha256 = accepted?.qaSha256;
-        if (!qaSha256) {
-            try {
-                qaSha256 = options.verifyQa ? await options.verifyQa(headSha) : await (async () => {
-                    const authority = await executeP205TransientAuthority(cwd, { headSha,
-                        graphRevision: digest(`legacy-story-c08\0${intentSha256}`) });
-                    const evidence = projectP205TransientExecutionEvidence(authority);
-                    if (!evidence || evidence.executionHeadSha !== headSha)
-                        throw new Error('qa-invalid');
-                    return evidence.executionEvidenceDigest;
-                })();
-            }
-            catch {
-                return fail('legacy-story-commit-qa-failed');
-            }
-            if (!/^[a-f0-9]{64}$/.test(qaSha256))
-                return fail('legacy-story-commit-qa-failed');
-        }
-        if (git(cwd, 'rev-parse', 'HEAD') !== headSha
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-commit-final-drift');
-        }
-        if (remoteNow === '')
-            git(cwd, 'push', '--porcelain', 'origin', `${headSha}:refs/heads/${plan.branch}`);
-        if (git(cwd, 'ls-remote', '--heads', 'origin', `refs/heads/${plan.branch}`)
-            !== `${headSha}\trefs/heads/${plan.branch}`)
-            return fail('legacy-story-commit-push-unverified');
-        await options.afterPush?.();
-        const next = { schemaVersion: 1, kind: 'legacy-story-c08-commit-accepted',
-            intentSha256, checkpointHeadSha: headSha, qaSha256 };
-        if (accepted && JSON.stringify(accepted) !== JSON.stringify(next)) {
-            return fail('legacy-story-commit-accepted-conflict');
-        }
-        if (!accepted) {
-            await anchoredAtomicWriteFile(directory, acceptedName, `${JSON.stringify(next)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, acceptedName), directory);
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c08-commit-accepted', storyId: plan.storyId, epicId: plan.epicId,
-                branch: plan.branch, checkpointHeadSha: headSha, qaSha256,
-                reused: Boolean(accepted), physicalCommit: true, checkpointAccepted: true, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-commit-') ? reason
-            : 'legacy-story-commit-effect-uncertain');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-/** Read-only C09 basis. A merge-base observation is not a synchronized story:
- * only a later root-owned Git/state checkpoint may turn C08 into C09. */
-export function planLegacyStorySyncC09(options) {
-    if (!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-sync-target-invalid');
-    }
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-sync-checkout-invalid');
-        }
-        const stateRaw = gitRaw(cwd, 'show', 'HEAD:.neocortex/state.json');
-        const storyPath = `docs/stories/${options.storyId}.story.md`;
-        const storyRaw = gitRaw(cwd, 'show', `HEAD:${storyPath}`);
-        if (safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024) !== stateRaw
-            || safeRead(join(cwd, storyPath), 2 * 1024 * 1024) !== storyRaw) {
-            return fail('legacy-story-sync-committed-content-drift');
-        }
-        const state = record(JSON.parse(stateRaw));
-        const stories = record(state?.stories);
-        const epics = record(state?.epics);
-        const story = record(stories?.[options.storyId]);
-        const epicId = story?.epic_id;
-        const epic = typeof epicId === 'string' ? record(epics?.[epicId]) : null;
-        if (!story || story.id !== options.storyId || typeof epicId !== 'string'
-            || !epic || epic.id !== epicId || epic.branch_mode === 'epic'
-            || story.status !== 'committed' || story.last_step !== GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID
-            || !Array.isArray(story.steps_completed)
-            || !story.steps_completed.includes(GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID)
-            || story.steps_completed.includes(GIT_LIFECYCLE_SYNC_MAIN_STEP_ID)
-            || !Number.isSafeInteger(story.issue_number) || story.issue_number <= 0) {
-            return fail('legacy-story-sync-state-invalid');
-        }
-        const ids = Array.isArray(epic.stories) ? epic.stories : null;
-        if (!ids || ids.length === 0 || new Set(ids).size !== ids.length
-            || !ids.includes(options.storyId)
-            || ids.some((id) => typeof id !== 'string' || record(stories?.[id])?.epic_id !== epicId)
-            || Object.entries(stories ?? {}).some(([id, value]) => record(value)?.epic_id === epicId && !ids.includes(id))) {
-            return fail('legacy-story-sync-topology-invalid');
-        }
-        const unit = resolveBranchUnit(epic, ids.map((id) => ({ ...record(stories?.[id]), id })));
-        const branch = `story/${epicId}/${options.storyId}`;
-        const config = record(state?.config);
-        const baseBranch = config?.default_branch;
-        if (unit.mode !== 'story' || story.branch_name !== branch
-            || git(cwd, 'branch', '--show-current') !== branch
-            || typeof baseBranch !== 'string' || baseBranch === branch
-            || git(cwd, 'check-ref-format', '--branch', baseBranch) !== baseBranch) {
-            return fail('legacy-story-sync-branch-invalid');
-        }
-        const frontmatter = storyRaw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-        if (!frontmatter)
-            return fail('legacy-story-sync-frontmatter-invalid');
-        const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-        const fields = record(document.toJS());
-        const stepsKey = ['stepsCompleted', 'steps_completed'].filter((key) => document.has(key));
-        const lastKey = ['lastStep', 'last_step'].filter((key) => document.has(key));
-        const branchKey = ['branchName', 'branch_name'].filter((key) => document.has(key));
-        if (document.errors.length > 0 || document.get('id') !== options.storyId
-            || (document.get('epic_id') ?? document.get('epic')) !== epicId
-            || document.get('status') !== 'committed'
-            || document.has('currentStatus') && document.get('currentStatus') !== 'committed'
-            || stepsKey.length > 1 || lastKey.length > 1 || branchKey.length > 1
-            || stepsKey.length === 1 && JSON.stringify(fields?.[stepsKey[0]]) !== JSON.stringify(story.steps_completed)
-            || lastKey.length === 1 && fields?.[lastKey[0]] !== GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID
-            || branchKey.length === 1 && fields?.[branchKey[0]] !== branch) {
-            return fail('legacy-story-sync-frontmatter-invalid');
-        }
-        const headSha = git(cwd, 'rev-parse', 'HEAD');
-        const baseSha = singleRemoteSha(cwd, baseBranch);
-        if (!/^[a-f0-9]{40}$/.test(headSha) || singleRemoteSha(cwd, branch) !== headSha
-            || git(cwd, 'rev-parse', `refs/remotes/origin/${baseBranch}`) !== baseSha) {
-            return fail('legacy-story-sync-remote-drift');
-        }
-        const mergeBaseSha = git(cwd, 'merge-base', headSha, baseSha);
-        if (!/^[a-f0-9]{40}$/.test(mergeBaseSha))
-            return fail('legacy-story-sync-ancestry-invalid');
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c09-sync-plan', storyId: options.storyId, epicId,
-                repository: repository(cwd), branch, baseBranch, headSha, baseSha,
-                mergeBaseSha, stateSha256: digest(stateRaw), storySha256: digest(storyRaw),
-                baseAlreadyAncestor: mergeBaseSha === baseSha,
-                physicalSync: false, checkpointAccepted: false, localOnly: true }) };
-    }
-    catch {
-        return fail('legacy-story-sync-physical-unavailable');
-    }
-}
-function projectLegacyStorySyncC09(cwd, plan) {
-    const stateBefore = safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024);
-    const storyPath = `docs/stories/${plan.storyId}.story.md`;
-    const storyBefore = safeRead(join(cwd, storyPath), 2 * 1024 * 1024);
-    const originalState = gitRaw(cwd, 'show', `${plan.headSha}:.neocortex/state.json`);
-    const originalStory = gitRaw(cwd, 'show', `${plan.headSha}:${storyPath}`);
-    if (digest(originalState) !== plan.stateSha256 || digest(originalStory) !== plan.storySha256
-        || storyBefore !== originalStory) {
-        throw new Error('legacy-story-sync-preimage-drift');
-    }
-    const state = record(JSON.parse(stateBefore));
-    const original = record(JSON.parse(originalState));
-    const stories = record(state?.stories);
-    const originalStoryState = record(record(original?.stories)?.[plan.storyId]);
-    const story = record(stories?.[plan.storyId]);
-    const epic = record(record(state?.epics)?.[plan.epicId]);
-    const ids = epic?.stories;
-    if (!story || !originalStoryState || JSON.stringify(story) !== JSON.stringify(originalStoryState)
-        || story.status !== 'committed' || story.last_step !== GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID
-        || story.branch_name !== plan.branch || !Array.isArray(story.steps_completed)
-        || !story.steps_completed.includes(GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID)
-        || story.steps_completed.includes(GIT_LIFECYCLE_SYNC_MAIN_STEP_ID)
-        || !epic || epic.id !== plan.epicId || epic.branch_mode === 'epic'
-        || !Array.isArray(ids) || !ids.includes(plan.storyId)
-        || new Set(ids).size !== ids.length
-        || ids.some((id) => typeof id !== 'string' || record(stories?.[id])?.epic_id !== plan.epicId)
-        || record(state?.config)?.default_branch !== plan.baseBranch) {
-        throw new Error('legacy-story-sync-merged-state-invalid');
-    }
-    story.status = 'synced';
-    story.last_step = GIT_LIFECYCLE_SYNC_MAIN_STEP_ID;
-    story.steps_completed = [...story.steps_completed, GIT_LIFECYCLE_SYNC_MAIN_STEP_ID];
-    story.sync_base_sha = plan.baseSha;
-    const stateAfter = `${JSON.stringify(state, null, 2)}\n`;
-    const frontmatter = storyBefore.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-    if (!frontmatter)
-        throw new Error('legacy-story-sync-frontmatter-invalid');
-    const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-    const fields = record(document.toJS());
-    const stepsKeys = ['stepsCompleted', 'steps_completed'].filter((key) => document.has(key));
-    const lastKeys = ['lastStep', 'last_step'].filter((key) => document.has(key));
-    if (document.errors.length > 0 || document.get('id') !== plan.storyId
-        || (document.get('epic_id') ?? document.get('epic')) !== plan.epicId
-        || document.get('status') !== 'committed'
-        || stepsKeys.length !== 1 || lastKeys.length !== 1
-        || JSON.stringify(fields?.[stepsKeys[0]]) !== JSON.stringify(originalStoryState.steps_completed)
-        || fields?.[lastKeys[0]] !== GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID) {
-        throw new Error('legacy-story-sync-frontmatter-invalid');
-    }
-    document.set('status', 'synced');
-    if (document.has('currentStatus'))
-        document.set('currentStatus', 'synced');
-    document.set(stepsKeys[0], [...originalStoryState.steps_completed, GIT_LIFECYCLE_SYNC_MAIN_STEP_ID]);
-    document.set(lastKeys[0], GIT_LIFECYCLE_SYNC_MAIN_STEP_ID);
-    document.set('syncBaseSha', plan.baseSha);
-    const storyAfter = `---\n${document.toString({ lineWidth: 0 })}---\n${storyBefore.slice(frontmatter[0].length)}`;
-    return { stateBefore, stateAfter, storyBefore, storyAfter };
-}
-async function readC09PrivateJson(directory, name, limit) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, limit)));
-    if (!value)
-        throw new Error('legacy-story-sync-journal-invalid');
-    return value;
-}
-/** Root-only C09 physical sync. The merge and checkpoint are prepared in a
- * detached private worktree; the live story branch moves only after candidate
- * QA and an exact non-force remote readback. An interrupted push is reconciled
- * from the private intent rather than replaying the merge. */
-export async function acceptLegacyStorySyncC09(options) {
-    if (!options.authorize)
-        return fail('legacy-story-sync-authorization-required');
-    if (!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-sync-target-invalid');
-    }
-    const sessionId = `legacy-c09-sync-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 60 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd) {
-            return fail('legacy-story-sync-checkout-invalid');
-        }
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const prefix = digest(options.storyId);
-        const intentName = `${prefix}.c09.sync.json`;
-        const preparedName = `${prefix}.c09.sync.prepared.json`;
-        const acceptedName = `${prefix}.c09.sync.accepted.json`;
-        let rawIntent = await readC09PrivateJson(directory, intentName, 8192);
-        if (!rawIntent) {
-            const planned = planLegacyStorySyncC09(options);
-            if (!planned.ok)
-                return planned;
-            const intent = { schemaVersion: 1, kind: 'legacy-story-c09-sync-intent',
-                plan: planned.value };
-            await anchoredAtomicWriteFile(directory, intentName, `${JSON.stringify(intent)}\n`);
-            rawIntent = intent;
-        }
-        const plan = record(rawIntent.plan);
-        if (rawIntent.schemaVersion !== 1 || rawIntent.kind !== 'legacy-story-c09-sync-intent'
-            || !plan || plan.schemaVersion !== 1 || plan.kind !== 'legacy-story-c09-sync-plan'
-            || plan.storyId !== options.storyId || typeof plan.epicId !== 'string'
-            || plan.branch !== `story/${plan.epicId}/${options.storyId}`
-            || typeof plan.baseBranch !== 'string' || typeof plan.repository !== 'string'
-            || typeof plan.headSha !== 'string' || !/^[a-f0-9]{40}$/.test(plan.headSha)
-            || typeof plan.baseSha !== 'string' || !/^[a-f0-9]{40}$/.test(plan.baseSha)
-            || typeof plan.stateSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(plan.stateSha256)
-            || typeof plan.storySha256 !== 'string' || !/^[a-f0-9]{64}$/.test(plan.storySha256)
-            || typeof plan.baseAlreadyAncestor !== 'boolean'
-            || plan.physicalSync !== false || plan.checkpointAccepted !== false
-            || git(cwd, 'branch', '--show-current') !== plan.branch
-            || repository(cwd) !== plan.repository) {
-            return fail('legacy-story-sync-intent-invalid');
-        }
-        const bound = plan;
-        const intentSha256 = digest(JSON.stringify(rawIntent));
-        const preparedRaw = await readC09PrivateJson(directory, preparedName, 4096);
-        let prepared = preparedRaw;
-        if (prepared && (prepared.schemaVersion !== 1 || prepared.kind !== 'legacy-story-c09-sync-prepared'
-            || prepared.intentSha256 !== intentSha256
-            || !/^[a-f0-9]{40}$/.test(prepared.treeSha)
-            || !/^[a-f0-9]{64}$/.test(prepared.stateSha256)
-            || !/^[a-f0-9]{64}$/.test(prepared.storySha256))) {
-            return fail('legacy-story-sync-prepared-invalid');
-        }
-        const acceptedRaw = await readC09PrivateJson(directory, acceptedName, 4096);
-        const accepted = acceptedRaw;
-        if (accepted && (accepted.schemaVersion !== 1 || accepted.kind !== 'legacy-story-c09-sync-accepted'
-            || accepted.intentSha256 !== intentSha256
-            || !/^[a-f0-9]{40}$/.test(accepted.checkpointHeadSha)
-            || !/^[a-f0-9]{64}$/.test(accepted.qaSha256))) {
-            return fail('legacy-story-sync-accepted-invalid');
-        }
-        const baseHeadSha = git(cwd, 'rev-parse', 'HEAD');
-        if (gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== ''
-            || singleRemoteSha(cwd, bound.baseBranch) !== bound.baseSha
-            || digest(gitRaw(cwd, 'show', `${bound.headSha}:.neocortex/state.json`)) !== bound.stateSha256
-            || digest(gitRaw(cwd, 'show', `${bound.headSha}:docs/stories/${bound.storyId}.story.md`)) !== bound.storySha256) {
-            return fail('legacy-story-sync-physical-drift');
-        }
-        const candidatePath = join(directory, `${prefix}.c09.sync.checkout`);
-        if (!existsSync(candidatePath)) {
-            execFileSync('git', ['worktree', 'add', '--detach', candidatePath,
-                accepted?.checkpointHeadSha ?? bound.headSha], { cwd, encoding: 'utf8', timeout: 60_000,
-                stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 32 * 1024 });
-        }
-        if (!lstatSync(candidatePath).isDirectory() || realpathSync(candidatePath) !== candidatePath
-            || realpathSync(git(candidatePath, 'rev-parse', '--show-toplevel')) !== candidatePath
-            || gitCommonDirectory(candidatePath) !== gitCommonDirectory(cwd)
-            || git(candidatePath, 'branch', '--show-current') !== '') {
-            return fail('legacy-story-sync-candidate-invalid');
-        }
-        let headSha = git(candidatePath, 'rev-parse', 'HEAD');
-        if (headSha === bound.headSha) {
-            if (prepared)
-                return fail('legacy-story-sync-prepared-uncommitted');
-            if (baseHeadSha !== bound.headSha || singleRemoteSha(cwd, bound.branch) !== bound.headSha
-                || gitRaw(candidatePath, 'status', '--porcelain=v1', '-uall') !== '') {
-                return fail('legacy-story-sync-preparation-drift');
-            }
-            if (!bound.baseAlreadyAncestor) {
-                try {
-                    git(candidatePath, 'merge', '--no-ff', '--no-commit', bound.baseSha);
-                }
-                catch {
-                    return fail('legacy-story-sync-merge-conflict');
-                }
-                if (gitRaw(candidatePath, 'ls-files', '-u') !== '') {
-                    return fail('legacy-story-sync-merge-conflict');
-                }
-            }
-            const projection = projectLegacyStorySyncC09(candidatePath, bound);
-            await anchoredCompareAndSwapFile(join(candidatePath, '.neocortex'), 'state.json', projection.stateAfter, digest(projection.stateBefore));
-            await anchoredCompareAndSwapFile(join(candidatePath, 'docs/stories'), `${bound.storyId}.story.md`, projection.storyAfter, digest(projection.storyBefore));
-            git(candidatePath, 'add', '--', '.neocortex/state.json', `docs/stories/${bound.storyId}.story.md`);
-            git(candidatePath, 'diff', '--cached', '--check');
-            prepared = { schemaVersion: 1, kind: 'legacy-story-c09-sync-prepared', intentSha256,
-                treeSha: git(candidatePath, 'write-tree'), stateSha256: digest(projection.stateAfter),
-                storySha256: digest(projection.storyAfter) };
-            await anchoredAtomicWriteFile(directory, preparedName, `${JSON.stringify(prepared)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, preparedName), directory);
-            git(candidatePath, 'commit', '-m', `chore(story): sync ${bound.storyId} with ${bound.baseBranch}`, '-m', `Neocortex-Legacy-Sync: ${bound.storyId}`);
-            headSha = git(candidatePath, 'rev-parse', 'HEAD');
-            await options.afterCommit?.();
-        }
-        const parents = git(candidatePath, 'rev-list', '--parents', '-n', '1', headSha).split(' ');
-        const expectedParents = bound.baseAlreadyAncestor
-            ? [headSha, bound.headSha] : [headSha, bound.headSha, bound.baseSha];
-        const stateAtHead = record(JSON.parse(gitRaw(candidatePath, 'show', `${headSha}:.neocortex/state.json`)));
-        const storyAtHead = record(record(stateAtHead?.stories)?.[bound.storyId]);
-        const frontmatterAtHead = gitRaw(candidatePath, 'show', `${headSha}:docs/stories/${bound.storyId}.story.md`);
-        if (!prepared || git(candidatePath, 'rev-parse', `${headSha}^{tree}`) !== prepared.treeSha
-            || digest(gitRaw(candidatePath, 'show', `${headSha}:.neocortex/state.json`)) !== prepared.stateSha256
-            || digest(frontmatterAtHead) !== prepared.storySha256
-            || JSON.stringify(parents) !== JSON.stringify(expectedParents)
-            || !storyAtHead || storyAtHead.status !== 'synced'
-            || storyAtHead.last_step !== GIT_LIFECYCLE_SYNC_MAIN_STEP_ID
-            || storyAtHead.sync_base_sha !== bound.baseSha
-            || !Array.isArray(storyAtHead.steps_completed)
-            || !storyAtHead.steps_completed.includes(GIT_LIFECYCLE_SYNC_MAIN_STEP_ID)
-            || !frontmatterAtHead.startsWith('---\n')
-            || !gitRaw(candidatePath, 'log', '-1', '--format=%B', headSha).split('\n').map((line) => line.trim())
-                .includes(`Neocortex-Legacy-Sync: ${bound.storyId}`)
-            || gitRaw(candidatePath, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-sync-checkpoint-invalid');
-        }
-        if (accepted && accepted.checkpointHeadSha !== headSha) {
-            return fail('legacy-story-sync-accepted-conflict');
-        }
-        const remoteStorySha = singleRemoteSha(cwd, bound.branch);
-        if (![bound.headSha, headSha].includes(baseHeadSha)
-            || ![bound.headSha, headSha].includes(remoteStorySha)
-            || accepted && (baseHeadSha !== headSha || remoteStorySha !== headSha)) {
-            return fail('legacy-story-sync-remote-drift');
-        }
-        let qaSha256 = accepted?.qaSha256;
-        if (!qaSha256) {
-            if (!options.verifyQa) {
-                try {
-                    installP205CandidateDependencies(candidatePath);
-                }
-                catch {
-                    return fail('legacy-story-sync-dependencies-failed');
-                }
-            }
-            const qaPlan = { schemaVersion: 1, kind: 'legacy-story-pr-plan',
-                storyId: bound.storyId, epicId: bound.epicId, repository: bound.repository,
-                branch: bound.branch, baseBranch: bound.baseBranch, headSha,
-                baseSha: bound.baseSha, qaAuthority: 'root-review-required', localOnly: true };
-            try {
-                qaSha256 = await verifyLocalQa(qaPlan, candidatePath, options.verifyQa);
-            }
-            catch {
-                return fail('legacy-story-sync-qa-failed');
-            }
-        }
-        if (git(candidatePath, 'rev-parse', 'HEAD') !== headSha
-            || gitRaw(candidatePath, 'status', '--porcelain=v1', '-uall') !== ''
-            || git(cwd, 'rev-parse', 'HEAD') !== baseHeadSha
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== ''
-            || singleRemoteSha(cwd, bound.baseBranch) !== bound.baseSha) {
-            return fail('legacy-story-sync-final-drift');
-        }
-        if (remoteStorySha === bound.headSha) {
-            git(cwd, 'push', '--porcelain', 'origin', `${headSha}:refs/heads/${bound.branch}`);
-        }
-        if (singleRemoteSha(cwd, bound.branch) !== headSha) {
-            return fail('legacy-story-sync-push-unverified');
-        }
-        await options.afterPush?.();
-        if (git(cwd, 'rev-parse', 'HEAD') === bound.headSha)
-            git(cwd, 'merge', '--ff-only', headSha);
-        if (git(cwd, 'rev-parse', 'HEAD') !== headSha
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== ''
-            || safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024)
-                !== gitRaw(cwd, 'show', `${headSha}:.neocortex/state.json`)
-            || safeRead(join(cwd, `docs/stories/${bound.storyId}.story.md`), 2 * 1024 * 1024)
-                !== frontmatterAtHead) {
-            return fail('legacy-story-sync-local-readback-invalid');
-        }
-        const next = { schemaVersion: 1, kind: 'legacy-story-c09-sync-accepted',
-            intentSha256, checkpointHeadSha: headSha, qaSha256 };
-        if (accepted && JSON.stringify(accepted) !== JSON.stringify(next)) {
-            return fail('legacy-story-sync-accepted-conflict');
-        }
-        if (!accepted) {
-            await anchoredAtomicWriteFile(directory, acceptedName, `${JSON.stringify(next)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, acceptedName), directory);
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c09-sync-accepted', storyId: bound.storyId,
-                epicId: bound.epicId, branch: bound.branch, baseSha: bound.baseSha,
-                checkpointHeadSha: headSha, qaSha256, reused: Boolean(accepted),
-                physicalSync: true, checkpointAccepted: true, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-sync-') ? reason
-            : 'legacy-story-sync-effect-uncertain');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-function inspectLegacyStoryPr(options, allowCheckpointPatch) {
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)
-            || realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd
-            || !allowCheckpointPatch && git(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-pr-checkout-invalid');
-        }
-        const stateRaw = gitRaw(cwd, 'show', 'HEAD:.neocortex/state.json');
-        if (!allowCheckpointPatch && stateRaw !== safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024)) {
-            return fail('legacy-story-pr-state-not-committed');
-        }
-        const state = record(JSON.parse(stateRaw));
-        const stories = record(state?.stories);
-        const epics = record(state?.epics);
-        const story = record(stories?.[options.storyId]);
-        const epicId = story?.epic_id;
-        const epic = typeof epicId === 'string' ? record(epics?.[epicId]) : null;
-        if (!story || story.id !== options.storyId || typeof epicId !== 'string'
-            || !epic || epic.id !== epicId || epic.branch_mode === 'epic'
-            || story.status !== 'synced' || story.last_step !== GIT_LIFECYCLE_SYNC_MAIN_STEP_ID
-            || !Array.isArray(story.steps_completed)
-            || !story.steps_completed.includes(GIT_LIFECYCLE_SYNC_MAIN_STEP_ID)
-            || story.steps_completed.includes(GIT_LIFECYCLE_CREATE_PR_STEP_ID))
-            return fail('legacy-story-pr-state-invalid');
-        const ids = Array.isArray(epic.stories) ? epic.stories : null;
-        if (!ids || ids.length === 0 || new Set(ids).size !== ids.length
-            || !ids.includes(options.storyId)
-            || ids.some((id) => typeof id !== 'string' || record(stories?.[id])?.epic_id !== epicId)
-            || Object.entries(stories ?? {}).some(([id, value]) => record(value)?.epic_id === epicId && !ids.includes(id))) {
-            return fail('legacy-story-pr-topology-invalid');
-        }
-        const unit = resolveBranchUnit(epic, ids.map((id) => ({ ...record(stories?.[id]), id })));
-        const branch = `story/${epicId}/${options.storyId}`;
-        const config = record(state?.config);
-        const baseBranch = config?.default_branch;
-        if (unit.mode !== 'story' || story.branch_name !== branch
-            || git(cwd, 'branch', '--show-current') !== branch
-            || typeof baseBranch !== 'string' || baseBranch === branch
-            || git(cwd, 'check-ref-format', '--branch', baseBranch) !== baseBranch) {
-            return fail('legacy-story-pr-branch-invalid');
-        }
-        const storyFile = git(cwd, 'show', `HEAD:docs/stories/${options.storyId}.story.md`);
-        const frontmatter = storyFile.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-        if (!frontmatter)
-            return fail('legacy-story-pr-frontmatter-invalid');
-        const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-        if (document.errors.length > 0 || document.get('id') !== options.storyId
-            || (document.get('epic_id') ?? document.get('epic')) !== epicId
-            || document.get('status') !== 'synced')
-            return fail('legacy-story-pr-frontmatter-invalid');
-        const headSha = git(cwd, 'rev-parse', 'HEAD');
-        const baseSha = singleRemoteSha(cwd, baseBranch);
-        if (!/^[a-f0-9]{40}$/.test(headSha) || singleRemoteSha(cwd, branch) !== headSha
-            || git(cwd, 'rev-parse', `refs/remotes/origin/${baseBranch}`) !== baseSha) {
-            return fail('legacy-story-pr-remote-drift');
-        }
-        git(cwd, 'merge-base', '--is-ancestor', baseSha, headSha);
-        return { ok: true, value: Object.freeze({ schemaVersion: 1, kind: 'legacy-story-pr-plan',
-                storyId: options.storyId, epicId, repository: repository(cwd), branch, baseBranch,
-                headSha, baseSha, qaAuthority: 'root-review-required', localOnly: true }) };
-    }
-    catch {
-        return fail('legacy-story-pr-physical-unavailable');
-    }
-}
-export function planLegacyStoryPr(options) {
-    return inspectLegacyStoryPr(options, false);
-}
-async function verifyLocalQa(plan, projectRoot, seam) {
-    const qaDigest = seam ? await seam(plan) : await (async () => {
-        const authority = await executeP205TransientAuthority(projectRoot, {
-            headSha: plan.headSha,
-            graphRevision: digest(`legacy-story-pr-c10\0${JSON.stringify(plan)}`),
-        });
-        const evidence = projectP205TransientExecutionEvidence(authority);
-        if (!evidence || evidence.executionHeadSha !== plan.headSha) {
-            throw new Error('legacy-story-pr-checkpoint-qa-invalid');
-        }
-        return evidence.executionEvidenceDigest;
-    })();
-    if (!/^[a-f0-9]{64}$/.test(qaDigest))
-        throw new Error('legacy-story-pr-checkpoint-qa-invalid');
-    return qaDigest;
-}
-/** Detached checkpoint worktrees do not inherit the operator's dependencies.
- * Keep every P205 package root inside the private candidate, never in the
- * operator's checkout. A missing or substituted manifest fails closed. */
-function installP205CandidateDependencies(candidatePath) {
-    for (const relativeRoot of ['.', 'packages/server', 'portal', 'admin', 'landing']) {
-        const dependencyRoot = join(candidatePath, relativeRoot);
-        const manifest = join(dependencyRoot, 'package.json');
-        const lockfile = join(dependencyRoot, 'package-lock.json');
-        if (!existsSync(dependencyRoot) || !lstatSync(dependencyRoot).isDirectory()
-            || realpathSync(dependencyRoot) !== dependencyRoot
-            || !existsSync(manifest) || !lstatSync(manifest).isFile()
-            || !existsSync(lockfile) || !lstatSync(lockfile).isFile()) {
-            throw new Error('legacy-story-pr-candidate-dependencies-missing');
-        }
-        try {
-            execFileSync('npm', ['ci', '--include=dev', '--no-audit', '--no-fund'], {
-                cwd: dependencyRoot, encoding: 'utf8', timeout: 10 * 60_000,
-                stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 1024 * 1024,
-            });
-        }
-        catch {
-            throw new Error('legacy-story-pr-candidate-dependencies-failed');
-        }
-    }
-}
-const defaultProvider = {
-    async list(repo, branch, _baseBranch) {
-        const raw = execFileSync('gh', ['pr', 'list', '--repo', repo, '--state', 'all', '--head', branch,
-            '--json', 'number,state,headRefName,headRefOid,baseRefName,url', '--limit', '100'], { encoding: 'utf8', timeout: 15_000, stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 256 * 1024 });
-        return JSON.parse(raw);
-    },
-    async create(repo, branch, baseBranch, title, bodyFile) {
-        execFileSync('gh', ['pr', 'create', '--repo', repo, '--head', branch, '--base', baseBranch,
-            '--title', title, '--body-file', bodyFile], { encoding: 'utf8', timeout: 30_000, stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 16 * 1024 });
-    },
-};
-const defaultMergeProvider = {
-    async view(repo, number) {
-        const raw = execFileSync('gh', ['pr', 'view', String(number), '--repo', repo, '--json',
-            'number,state,headRefName,headRefOid,baseRefName,baseRefOid,isDraft,mergeable,mergeCommit,statusCheckRollup,url'], { encoding: 'utf8', timeout: 15_000, stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 256 * 1024 });
-        return JSON.parse(raw);
-    },
-    async merge(repo, number, expectedHeadSha) {
-        execFileSync('gh', ['api', '--method', 'PUT', `repos/${repo}/pulls/${number}/merge`,
-            '-f', `sha=${expectedHeadSha}`, '-f', 'merge_method=merge'], { encoding: 'utf8', timeout: 30_000, stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 16 * 1024 });
-    },
-};
-export async function createLegacyStoryPr(options) {
-    if (!options.authorize)
-        return fail('legacy-story-pr-authorization-required');
-    let reviewedBody;
-    try {
-        if (lstatSync(options.bodyFile).isSymbolicLink())
-            return fail('legacy-story-pr-body-unsafe');
-        const body = safeRead(options.bodyFile, 32 * 1024);
-        if (!body.trim() || body.includes('\0'))
-            return fail('legacy-story-pr-body-unsafe');
-        reviewedBody = body;
-    }
-    catch {
-        return fail('legacy-story-pr-body-unsafe');
-    }
-    const before = planLegacyStoryPr(options);
-    if (!before.ok)
-        return before;
-    try {
-        await verifyLocalQa(before.value, options.projectRoot, options.verifyQa);
-    }
-    catch {
-        return fail('legacy-story-pr-checkpoint-qa-failed');
-    }
-    const provider = options.provider ?? defaultProvider;
-    const sessionId = `legacy-c10-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 5 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const underLock = planLegacyStoryPr(options);
-        if (!underLock.ok || JSON.stringify(underLock.value) !== JSON.stringify(before.value)) {
-            return fail('legacy-story-pr-pre-effect-race');
-        }
-        const listed = await provider.list(before.value.repository, before.value.branch, before.value.baseBranch);
-        let item = selectedPr(before.value, listed);
-        const reused = item !== null;
-        if (!item) {
-            const current = planLegacyStoryPr(options);
-            if (!current.ok || JSON.stringify(current.value) !== JSON.stringify(before.value)) {
-                return fail('legacy-story-pr-pre-effect-race');
-            }
-            if (!(await recordCreateAttempt(options.projectRoot, before.value))) {
-                return fail('legacy-story-pr-create-attempt-unresolved');
-            }
-            const stagingDirectory = mkdtempSync(join(tmpdir(), 'legacy-story-pr-body-'));
-            const pinnedBodyFile = join(stagingDirectory, 'body.md');
-            try {
-                writeFileSync(pinnedBodyFile, reviewedBody, { flag: 'wx', mode: 0o600 });
-                await provider.create(before.value.repository, before.value.branch, before.value.baseBranch, `[YOLO] Story ${before.value.storyId}`, pinnedBodyFile);
-            }
-            finally {
-                try {
-                    unlinkSync(pinnedBodyFile);
-                }
-                catch { /* The file may not have been created. */ }
-                rmdirSync(stagingDirectory);
-            }
-            const after = planLegacyStoryPr(options);
-            if (!after.ok || JSON.stringify(after.value) !== JSON.stringify(before.value)) {
-                return fail('legacy-story-pr-post-effect-race');
-            }
-            item = selectedPr(before.value, await provider.list(before.value.repository, before.value.branch, before.value.baseBranch));
-            if (!item)
-                return fail('legacy-story-pr-readback-unavailable');
-        }
-        const finalPlan = planLegacyStoryPr(options);
-        if (!finalPlan.ok || JSON.stringify(finalPlan.value) !== JSON.stringify(before.value)) {
-            return fail('legacy-story-pr-post-effect-race');
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-pr-provider-receipt', storyId: before.value.storyId,
-                epicId: before.value.epicId, repository: before.value.repository,
-                branch: before.value.branch, baseBranch: before.value.baseBranch,
-                headSha: before.value.headSha, number: item.number, url: item.url,
-                reused, checkpointAccepted: false, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-provider-unavailable');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-function digest(value) { return createHash('sha256').update(value).digest('hex'); }
-function projectC10(cwd, plan, number) {
-    const stateBefore = gitRaw(cwd, 'show', 'HEAD:.neocortex/state.json');
-    const state = record(JSON.parse(stateBefore));
-    const story = record(record(state?.stories)?.[plan.storyId]);
-    if (!story || story.status !== 'synced' || story.last_step !== GIT_LIFECYCLE_SYNC_MAIN_STEP_ID
-        || !Array.isArray(story.steps_completed) || !story.steps_completed.includes(GIT_LIFECYCLE_SYNC_MAIN_STEP_ID)
-        || story.steps_completed.includes(GIT_LIFECYCLE_CREATE_PR_STEP_ID)
-        || story.pr_number != null)
-        throw new Error('legacy-story-pr-checkpoint-state-conflict');
-    const completedSteps = story.steps_completed;
-    story.status = 'pr-created';
-    story.last_step = GIT_LIFECYCLE_CREATE_PR_STEP_ID;
-    story.steps_completed = [...completedSteps, GIT_LIFECYCLE_CREATE_PR_STEP_ID];
-    story.pr_number = number;
-    const stateAfter = `${JSON.stringify(state, null, 2)}\n`;
-    const storyPath = `docs/stories/${plan.storyId}.story.md`;
-    const storyBefore = gitRaw(cwd, 'show', `HEAD:${storyPath}`);
-    const frontmatter = storyBefore.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-    if (!frontmatter)
-        throw new Error('legacy-story-pr-checkpoint-frontmatter-invalid');
-    const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-    const fields = record(document.toJS());
-    const stepsKey = ['stepsCompleted', 'steps_completed'].filter((key) => document.has(key));
-    const lastKey = ['lastStep', 'last_step'].filter((key) => document.has(key));
-    const prKey = ['prNumber', 'pr_number'].filter((key) => document.has(key));
-    const branchKey = ['branchName', 'branch_name'].filter((key) => document.has(key));
-    if (document.errors.length > 0 || document.get('id') !== plan.storyId
-        || (document.get('epic_id') ?? document.get('epic')) !== plan.epicId
-        || document.get('status') !== 'synced' || stepsKey.length > 1 || lastKey.length > 1
-        || prKey.length > 1 || branchKey.length > 1
-        || document.has('currentStatus') && document.get('currentStatus') !== 'synced'
-        || stepsKey.length === 1 && (!Array.isArray(fields?.[stepsKey[0]])
-            || JSON.stringify(fields?.[stepsKey[0]]) !== JSON.stringify(completedSteps))
-        || lastKey.length === 1 && fields?.[lastKey[0]] !== GIT_LIFECYCLE_SYNC_MAIN_STEP_ID
-        || branchKey.length === 1 && fields?.[branchKey[0]] !== plan.branch
-        || prKey.length === 1 && fields?.[prKey[0]] != null) {
-        throw new Error('legacy-story-pr-checkpoint-frontmatter-conflict');
-    }
-    document.set('status', 'pr-created');
-    if (document.has('currentStatus'))
-        document.set('currentStatus', 'pr-created');
-    document.set(stepsKey[0] ?? 'stepsCompleted', [
-        ...(stepsKey.length === 1 ? fields[stepsKey[0]] : completedSteps),
-        GIT_LIFECYCLE_CREATE_PR_STEP_ID,
-    ]);
-    document.set(lastKey[0] ?? 'lastStep', GIT_LIFECYCLE_CREATE_PR_STEP_ID);
-    document.set(prKey[0] ?? 'prNumber', number);
-    const storyAfter = `---\n${document.toString({ lineWidth: 0 })}---\n${storyBefore.slice(frontmatter[0].length)}`;
-    return { stateBefore, stateAfter, storyBefore, storyAfter, storyPath };
-}
-function physicalC10(cwd, plan, projection) {
-    const current = inspectLegacyStoryPr({ projectRoot: cwd, storyId: plan.storyId }, true);
-    if (!current.ok || JSON.stringify(current.value) !== JSON.stringify(plan)) {
-        throw new Error('legacy-story-pr-checkpoint-physical-drift');
-    }
-    const stateCurrent = safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024);
-    const storyCurrent = safeRead(join(cwd, projection.storyPath), 2 * 1024 * 1024);
-    if (![projection.stateBefore, projection.stateAfter].includes(stateCurrent)
-        || ![projection.storyBefore, projection.storyAfter].includes(storyCurrent)) {
-        throw new Error('legacy-story-pr-checkpoint-preimage-conflict');
-    }
-    const changed = gitRaw(cwd, 'status', '--porcelain=v1', '-uall').split('\n').filter(Boolean);
-    if (changed.some((line) => !line.startsWith(' M ')
-        || !['.neocortex/state.json', projection.storyPath].includes(line.slice(3)))) {
-        throw new Error('legacy-story-pr-checkpoint-worktree-dirty');
-    }
-    return { stateCurrent, storyCurrent };
-}
-async function readC10Journal(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const raw = safeRead(path, 4096);
-    const value = record(JSON.parse(raw));
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c10-acceptance-intent'
-        || typeof value.qaDigest !== 'string' || !/^[a-f0-9]{64}$/.test(value.qaDigest)) {
-        throw new Error('legacy-story-pr-checkpoint-journal-invalid');
-    }
-    return value;
-}
-async function writeC10Journal(directory, name, journal) {
-    await anchoredAtomicWriteFile(directory, name, `${JSON.stringify(journal)}\n`);
-    await assertGitLifecyclePrivateFile(join(directory, name), directory);
-}
-/** Accepts only an exact, still-open provider PR after physical local QA. */
-export async function acceptLegacyStoryPrC10(options) {
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0) {
-        return fail('legacy-story-pr-checkpoint-number-invalid');
-    }
-    const clean = planLegacyStoryPr(options);
-    let qaDigest = null;
-    if (clean.ok) {
-        try {
-            qaDigest = await verifyLocalQa(clean.value, options.projectRoot, options.verifyQa);
-        }
-        catch {
-            return fail('legacy-story-pr-checkpoint-qa-failed');
-        }
-    }
-    const sessionId = `legacy-c10-accept-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 5 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        const current = inspectLegacyStoryPr(options, true);
-        if (!current.ok || clean.ok && JSON.stringify(current.value) !== JSON.stringify(clean.value)) {
-            return fail('legacy-story-pr-checkpoint-plan-drift');
-        }
-        const plan = current.value;
-        const projection = projectC10(cwd, plan, options.prNumber);
-        const before = physicalC10(cwd, plan, projection);
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const prefix = digest(plan.storyId);
-        const journalName = `${prefix}.c10.json`;
-        const acceptedName = `${prefix}.c10.accepted.json`;
-        const prior = await readC10Journal(directory, journalName);
-        const accepted = await readC10Journal(directory, acceptedName);
-        if (!prior && (!clean.ok || !qaDigest || before.stateCurrent !== projection.stateBefore
-            || before.storyCurrent !== projection.storyBefore)) {
-            return fail('legacy-story-pr-checkpoint-unjournaled-drift');
-        }
-        if (accepted && (!prior || JSON.stringify(accepted) !== JSON.stringify(prior))) {
-            return fail('legacy-story-pr-checkpoint-accepted-conflict');
-        }
-        const item = selectedPr(plan, await (options.provider ?? defaultProvider).list(plan.repository, plan.branch, plan.baseBranch));
-        if (!item || item.number !== options.prNumber)
-            return fail('legacy-story-pr-checkpoint-provider-mismatch');
-        const journal = {
-            schemaVersion: 1, kind: 'legacy-story-c10-acceptance-intent', storyId: plan.storyId,
-            planDigest: digest(JSON.stringify(plan)), repository: plan.repository,
-            number: item.number, url: item.url, qaDigest: prior?.qaDigest ?? qaDigest,
-            stateBefore: digest(projection.stateBefore), stateAfter: digest(projection.stateAfter),
-            storyBefore: digest(projection.storyBefore), storyAfter: digest(projection.storyAfter),
-        };
-        if (prior && JSON.stringify(prior) !== JSON.stringify(journal)) {
-            return fail('legacy-story-pr-checkpoint-journal-conflict');
-        }
-        if (!prior)
-            await writeC10Journal(directory, journalName, journal);
-        const prewrite = physicalC10(cwd, plan, projection);
-        if (accepted && (prewrite.stateCurrent !== projection.stateAfter
-            || prewrite.storyCurrent !== projection.storyAfter)) {
-            return fail('legacy-story-pr-checkpoint-accepted-physical-mismatch');
-        }
-        if (prewrite.stateCurrent === projection.stateBefore) {
-            await anchoredCompareAndSwapFile(join(cwd, '.neocortex'), 'state.json', projection.stateAfter, journal.stateBefore);
-            await options.afterStatePersist?.();
-        }
-        const middle = physicalC10(cwd, plan, projection);
-        if (middle.storyCurrent === projection.storyBefore) {
-            await anchoredCompareAndSwapFile(join(cwd, 'docs/stories'), `${plan.storyId}.story.md`, projection.storyAfter, journal.storyBefore);
-            await options.afterStoryPersist?.();
-        }
-        const after = physicalC10(cwd, plan, projection);
-        if (after.stateCurrent !== projection.stateAfter || after.storyCurrent !== projection.storyAfter) {
-            return fail('legacy-story-pr-checkpoint-post-write-mismatch');
-        }
-        if (!accepted)
-            await writeC10Journal(directory, acceptedName, journal);
-        return { ok: true, value: Object.freeze({
-                schemaVersion: 1, kind: 'legacy-story-c10-checkpoint', storyId: plan.storyId,
-                epicId: plan.epicId, branch: plan.branch, repository: plan.repository,
-                number: item.number, url: item.url, headSha: plan.headSha,
-                stateSha256: journal.stateAfter, storySha256: journal.storyAfter,
-                reused: Boolean(accepted), checkpointAccepted: true, localOnly: true,
-            }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason
-            : reason.includes('secure-filesystem-cas-conflict') ? 'legacy-story-pr-checkpoint-write-raced'
-                : 'legacy-story-pr-checkpoint-failed');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-/** Read-only C10 predecessor for the root-owned C11 review. */
-export async function readAcceptedLegacyStoryPrC10(options) {
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0) {
-        return fail('legacy-story-pr-checkpoint-number-invalid');
-    }
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        const current = inspectLegacyStoryPr(options, true);
-        if (!current.ok)
-            return current;
-        const plan = current.value;
-        const projection = projectC10(cwd, plan, options.prNumber);
-        const physical = physicalC10(cwd, plan, projection);
-        if (physical.stateCurrent !== projection.stateAfter
-            || physical.storyCurrent !== projection.storyAfter) {
-            return fail('legacy-story-pr-checkpoint-not-accepted');
-        }
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const prefix = digest(plan.storyId);
-        const prior = await readC10Journal(directory, `${prefix}.c10.json`);
-        const accepted = await readC10Journal(directory, `${prefix}.c10.accepted.json`);
-        if (!prior || !accepted || JSON.stringify(prior) !== JSON.stringify(accepted)) {
-            return fail('legacy-story-pr-checkpoint-not-accepted');
-        }
-        const item = selectedPr(plan, await (options.provider ?? defaultProvider).list(plan.repository, plan.branch, plan.baseBranch));
-        if (!item || item.number !== options.prNumber) {
-            return fail('legacy-story-pr-checkpoint-provider-mismatch');
-        }
-        const expected = {
-            schemaVersion: 1, kind: 'legacy-story-c10-acceptance-intent', storyId: plan.storyId,
-            planDigest: digest(JSON.stringify(plan)), repository: plan.repository,
-            number: item.number, url: item.url, qaDigest: accepted.qaDigest,
-            stateBefore: digest(projection.stateBefore), stateAfter: digest(projection.stateAfter),
-            storyBefore: digest(projection.storyBefore), storyAfter: digest(projection.storyAfter),
-        };
-        if (JSON.stringify(accepted) !== JSON.stringify(expected)) {
-            return fail('legacy-story-pr-checkpoint-journal-conflict');
-        }
-        return { ok: true, value: Object.freeze({ plan, receipt: Object.freeze({
-                    schemaVersion: 1, kind: 'legacy-story-c10-checkpoint', storyId: plan.storyId,
-                    epicId: plan.epicId, branch: plan.branch, repository: plan.repository,
-                    number: item.number, url: item.url, headSha: plan.headSha,
-                    stateSha256: accepted.stateAfter, storySha256: accepted.storyAfter,
-                    reused: true, checkpointAccepted: true, localOnly: true,
-                }) }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-checkpoint-read-failed');
-    }
-}
-function reviewDiff(cwd, plan) {
-    const raw = gitRaw(cwd, 'diff', '--raw', '-z', plan.baseSha, plan.headSha);
-    const paths = gitRaw(cwd, 'diff', '--name-only', '-z', plan.baseSha, plan.headSha)
-        .split('\0').filter(Boolean);
-    if (paths.length === 0 || paths.length > 256 || paths.some((path) => !safeReviewPath(path))) {
-        throw new Error('legacy-story-pr-review-diff-invalid');
-    }
-    return { diffSha256: digest(raw), changedPaths: Object.freeze(paths) };
-}
-function safeReviewPath(path) {
-    return path.length > 0 && path.length <= 240
-        && /^[A-Za-z0-9_.-]+(?:\/[A-Za-z0-9_.-]+)*$/.test(path)
-        && path.split('/').every((part) => part !== '.' && part !== '..');
-}
-function projectC11(plan, c10, prNumber, reviewSha256) {
-    const state = record(JSON.parse(c10.stateAfter));
-    const story = record(record(state?.stories)?.[plan.storyId]);
-    if (!story || story.status !== 'pr-created' || story.last_step !== GIT_LIFECYCLE_CREATE_PR_STEP_ID
-        || story.pr_number !== prNumber || story.review_request != null
-        || !Array.isArray(story.steps_completed)
-        || !story.steps_completed.includes(GIT_LIFECYCLE_CREATE_PR_STEP_ID)
-        || story.steps_completed.includes(GIT_LIFECYCLE_REVIEW_PR_STEP_ID)) {
-        throw new Error('legacy-story-pr-review-state-conflict');
-    }
-    story.status = 'pr-reviewed';
-    story.last_step = GIT_LIFECYCLE_REVIEW_PR_STEP_ID;
-    story.steps_completed = [...story.steps_completed, GIT_LIFECYCLE_REVIEW_PR_STEP_ID];
-    story.review_request = { schemaVersion: 1, kind: 'git-pull-request', gitPullRequest: true, prNumber,
-        headSha: plan.headSha, reviewEvidenceDigest: reviewSha256 };
-    const stateAfter = `${JSON.stringify(state, null, 2)}\n`;
-    const frontmatter = c10.storyAfter.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-    if (!frontmatter)
-        throw new Error('legacy-story-pr-review-frontmatter-invalid');
-    const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-    const fields = record(document.toJS());
-    const stepsKey = ['stepsCompleted', 'steps_completed'].filter((key) => document.has(key));
-    const lastKey = ['lastStep', 'last_step'].filter((key) => document.has(key));
-    const frontmatterSteps = fields?.[stepsKey[0]];
-    if (document.errors.length > 0 || document.get('id') !== plan.storyId
-        || (document.get('epic_id') ?? document.get('epic')) !== plan.epicId
-        || document.get('status') !== 'pr-created' || stepsKey.length !== 1 || lastKey.length !== 1
-        || document.has('currentStatus') && document.get('currentStatus') !== 'pr-created'
-        || fields?.[lastKey[0]] !== GIT_LIFECYCLE_CREATE_PR_STEP_ID
-        || !Array.isArray(frontmatterSteps)
-        || !frontmatterSteps.includes(GIT_LIFECYCLE_CREATE_PR_STEP_ID)) {
-        throw new Error('legacy-story-pr-review-frontmatter-conflict');
-    }
-    document.set('status', 'pr-reviewed');
-    if (document.has('currentStatus'))
-        document.set('currentStatus', 'pr-reviewed');
-    document.set(stepsKey[0], [...frontmatterSteps, GIT_LIFECYCLE_REVIEW_PR_STEP_ID]);
-    document.set(lastKey[0], GIT_LIFECYCLE_REVIEW_PR_STEP_ID);
-    const storyAfter = `---\n${document.toString({ lineWidth: 0 })}---\n${c10.storyAfter.slice(frontmatter[0].length)}`;
-    return { stateBefore: c10.stateAfter, stateAfter, storyBefore: c10.storyAfter,
-        storyAfter, storyPath: c10.storyPath };
-}
-async function inspectLegacyReviewBasis(options) {
-    const cwd = realpathSync(options.projectRoot);
-    const inspected = inspectLegacyStoryPr(options, true);
-    if (!inspected.ok)
-        throw new Error(inspected.reasonCode);
-    const plan = inspected.value;
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0) {
-        throw new Error('legacy-story-pr-review-number-invalid');
-    }
-    const c10 = projectC10(cwd, plan, options.prNumber);
-    const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-    const prefix = digest(plan.storyId);
-    const prior = await readC10Journal(directory, `${prefix}.c10.json`);
-    const accepted = await readC10Journal(directory, `${prefix}.c10.accepted.json`);
-    if (!prior || !accepted || JSON.stringify(prior) !== JSON.stringify(accepted)) {
-        throw new Error('legacy-story-pr-review-c10-unaccepted');
-    }
-    const item = selectedPr(plan, await (options.provider ?? defaultProvider).list(plan.repository, plan.branch, plan.baseBranch));
-    if (!item || item.number !== options.prNumber) {
-        throw new Error('legacy-story-pr-review-provider-mismatch');
-    }
-    const expected = {
-        schemaVersion: 1, kind: 'legacy-story-c10-acceptance-intent', storyId: plan.storyId,
-        planDigest: digest(JSON.stringify(plan)), repository: plan.repository,
-        number: item.number, url: item.url, qaDigest: accepted.qaDigest,
-        stateBefore: digest(c10.stateBefore), stateAfter: digest(c10.stateAfter),
-        storyBefore: digest(c10.storyBefore), storyAfter: digest(c10.storyAfter),
-    };
-    if (JSON.stringify(accepted) !== JSON.stringify(expected)) {
-        throw new Error('legacy-story-pr-review-c10-journal-conflict');
-    }
-    const diff = reviewDiff(cwd, plan);
-    const reviewPlan = Object.freeze({
-        schemaVersion: 1, kind: 'legacy-story-pr-review-plan', storyId: plan.storyId,
-        epicId: plan.epicId, repository: plan.repository, branch: plan.branch,
-        baseBranch: plan.baseBranch, baseSha: plan.baseSha, headSha: plan.headSha,
-        prNumber: options.prNumber, diffSha256: diff.diffSha256,
-        changedPaths: diff.changedPaths, checkpointAccepted: false, localOnly: true,
-    });
-    return { cwd, plan, c10, directory, reviewPlan };
-}
-function physicalC11(cwd, plan, projection) {
-    const inspected = inspectLegacyStoryPr({ projectRoot: cwd, storyId: plan.storyId }, true);
-    if (!inspected.ok || JSON.stringify(inspected.value) !== JSON.stringify(plan)) {
-        throw new Error('legacy-story-pr-review-physical-drift');
-    }
-    const stateCurrent = safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024);
-    const storyCurrent = safeRead(join(cwd, projection.storyPath), 2 * 1024 * 1024);
-    if (![projection.stateBefore, projection.stateAfter].includes(stateCurrent)
-        || ![projection.storyBefore, projection.storyAfter].includes(storyCurrent)) {
-        throw new Error('legacy-story-pr-review-preimage-conflict');
-    }
-    const changed = gitRaw(cwd, 'status', '--porcelain=v1', '-uall').split('\n').filter(Boolean);
-    if (changed.some((line) => !line.startsWith(' M ')
-        || !['.neocortex/state.json', projection.storyPath].includes(line.slice(3)))) {
-        throw new Error('legacy-story-pr-review-worktree-dirty');
-    }
-    return { stateCurrent, storyCurrent };
-}
-function validateReviewEvidence(cwd, headSha, items) {
-    if (!Array.isArray(items) || items.length < 1 || items.length > 64)
-        return false;
-    const ids = new Set();
-    return items.every((item) => {
-        const value = record(item);
-        if (!value || Object.keys(value).sort().join(',') !== 'disposition,id,path,sha256'
-            || typeof value.id !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_.-]{0,63}$/.test(value.id)
-            || ids.has(value.id) || typeof value.path !== 'string' || !safeReviewPath(value.path)
-            || typeof value.sha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.sha256)
-            || value.disposition !== 'passed' && value.disposition !== 'not-applicable')
-            return false;
-        ids.add(value.id);
-        try {
-            return digest(gitRaw(cwd, 'show', `${headSha}:${value.path}`)) === value.sha256;
-        }
-        catch {
-            return false;
-        }
-    });
-}
-/** Only bounded, HEAD-bound P3 follow-ups may accompany an approved root
- * verdict. They become tracked debt in C12's exact review artifact. */
-function validateNonBlockingReviewFindings(basis, items) {
-    if (!Array.isArray(items) || items.length > 16)
-        return false;
-    const actions = new Map([
-        ['documentation-gap', 'update-docs'],
-        ['test-gap', 'add-regression-test'],
-        ['minor-maintainability', 'simplify-code'],
-    ]);
-    const ids = new Set();
-    return items.every((item) => {
-        const finding = record(item);
-        if (!finding || Object.keys(finding).sort().join(',') !== 'actionCode,id,path,reasonCode,severity,sha256'
-            || typeof finding.id !== 'string' || !/^F[1-9][0-9]{0,2}$/.test(finding.id)
-            || ids.has(finding.id) || finding.severity !== 'P3'
-            || typeof finding.reasonCode !== 'string'
-            || finding.actionCode !== actions.get(finding.reasonCode)
-            || typeof finding.path !== 'string' || !basis.reviewPlan.changedPaths.includes(finding.path)
-            || typeof finding.sha256 !== 'string' || !/^[a-f0-9]{64}$/.test(finding.sha256))
-            return false;
-        ids.add(finding.id);
-        try {
-            return digest(gitRaw(basis.cwd, 'show', `${basis.reviewPlan.headSha}:${finding.path}`))
-                === finding.sha256;
-        }
-        catch {
-            return false;
-        }
-    });
-}
-function validateReviewReportRaw(raw, basis) {
-    if (Buffer.byteLength(raw) > 32 * 1024)
-        throw new Error('legacy-story-pr-review-report-unsafe');
-    const value = record(JSON.parse(raw));
-    const plan = basis.reviewPlan;
-    if (!value || Object.keys(value).sort().join(',') !== [
-        'acceptanceEvidence', 'baseSha', 'blockingFindings', 'diffSha256', 'epicId',
-        'headSha', 'kind', 'nonBlockingFindings', 'prNumber', 'remoteObservations',
-        'schemaVersion', 'sddEvidence', 'storyId', 'verdict',
-    ].sort().join(',') || value.schemaVersion !== 1 || value.kind !== 'legacy-story-pr-review'
-        || value.storyId !== plan.storyId || value.epicId !== plan.epicId
-        || value.prNumber !== plan.prNumber || value.headSha !== plan.headSha
-        || value.baseSha !== plan.baseSha || value.diffSha256 !== plan.diffSha256
-        || value.verdict !== 'approved'
-        || !Array.isArray(value.blockingFindings) || value.blockingFindings.length !== 0
-        || !validateNonBlockingReviewFindings(basis, value.nonBlockingFindings)
-        || !Array.isArray(value.remoteObservations) || value.remoteObservations.length > 1
-        || value.remoteObservations.some((observation) => {
-            const summary = record(observation);
-            return !summary || !Array.isArray(summary.reasonCodes) || summary.reasonCodes.length === 0
-                || projectC12ScopedCiFollowUpDebt(observation, plan.storyId, plan.prNumber) === null;
-        })
-        || !validateReviewEvidence(basis.cwd, plan.headSha, value.acceptanceEvidence)
-        || !validateReviewEvidence(basis.cwd, plan.headSha, value.sddEvidence)) {
-        throw new Error('legacy-story-pr-review-report-invalid');
-    }
-    return { report: value, raw, sha256: digest(raw) };
-}
-function readReviewReport(path, basis) {
-    if (lstatSync(path).isSymbolicLink())
-        throw new Error('legacy-story-pr-review-report-unsafe');
-    return validateReviewReportRaw(safeRead(path, 32 * 1024), basis);
-}
-/** Remote-only CI is observational at C11; C12 must reobserve and durably
- * record exact categorical debt before any non-green merge attempt. */
-async function inspectC11RemoteObservation(basis, provider) {
-    const observed = await provider.view(basis.plan.repository, basis.reviewPlan.prNumber);
-    const plan = basis.reviewPlan;
-    if (observed.number !== plan.prNumber || observed.state !== 'OPEN'
-        || observed.headRefName !== plan.branch || observed.headRefOid !== plan.headSha
-        || observed.baseRefName !== plan.baseBranch || observed.baseRefOid !== plan.baseSha
-        || observed.url.toLowerCase() !== `https://github.com/${plan.repository}/pull/${plan.prNumber}`.toLowerCase()) {
-        throw new Error('legacy-story-pr-review-remote-provider-mismatch');
-    }
-    const summary = summarizeC12RemoteRollup(observed.statusCheckRollup);
-    if (!summary.ok)
-        throw new Error('legacy-story-pr-review-remote-observation-unclassified');
-    return summary.value;
-}
-async function verifyC11RemoteObservation(basis, report, provider) {
-    if (report.remoteObservations.length === 0)
-        return;
-    const summary = await inspectC11RemoteObservation(basis, provider);
-    if (JSON.stringify(summary) !== JSON.stringify(report.remoteObservations[0])) {
-        throw new Error('legacy-story-pr-review-remote-observation-drift');
-    }
-}
-/** Read-only categorical PR observation for the root C11 report. No raw check
- * name, URL or provider text is returned, and C12 must reobserve independently. */
-export async function observeLegacyStoryPrReviewC11(options) {
-    try {
-        const basis = await inspectLegacyReviewBasis(options);
-        const current = physicalC11(basis.cwd, basis.plan, projectC11(basis.plan, basis.c10, options.prNumber, '0'.repeat(64)));
-        if (current.stateCurrent !== basis.c10.stateAfter || current.storyCurrent !== basis.c10.storyAfter) {
-            return fail('legacy-story-pr-review-already-transitioned');
-        }
-        const observation = await inspectC11RemoteObservation(basis, options.mergeProvider ?? defaultMergeProvider);
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c11-remote-observation', storyId: basis.plan.storyId,
-                prNumber: options.prNumber, observation, checkpointAccepted: false,
-                mergeAuthorized: false, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-review-remote-observe-failed');
-    }
-}
-async function readC11Journal(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 64 * 1024)));
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c11-acceptance-intent'
-        || typeof value.reviewSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.reviewSha256)
-        || typeof value.qaSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.qaSha256)
-        || typeof value.reviewRaw !== 'string' || digest(value.reviewRaw) !== value.reviewSha256) {
-        throw new Error('legacy-story-pr-review-journal-invalid');
-    }
-    return value;
-}
-async function writeC11Journal(directory, name, journal) {
-    await anchoredAtomicWriteFile(directory, name, `${JSON.stringify(journal)}\n`);
-    await assertGitLifecyclePrivateFile(join(directory, name), directory);
-}
-export async function planLegacyStoryPrReview(options) {
-    try {
-        const basis = await inspectLegacyReviewBasis(options);
-        const current = physicalC11(basis.cwd, basis.plan, projectC11(basis.plan, basis.c10, options.prNumber, '0'.repeat(64)));
-        if (current.stateCurrent !== basis.c10.stateAfter || current.storyCurrent !== basis.c10.storyAfter) {
-            return fail('legacy-story-pr-review-already-transitioned');
-        }
-        return { ok: true, value: basis.reviewPlan };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-review-plan-failed');
-    }
-}
-/** Root-only C11 acceptance. The caller supplies an independently reviewed,
- * public-safe report; neither the server selection nor a sandbox return can
- * approve this checkpoint. It never commits, pushes, or merges the PR. */
-export async function acceptLegacyStoryPrReviewC11(options) {
-    if (!options.authorize)
-        return fail('legacy-story-pr-review-authorization-required');
-    let initial;
-    let reviewed;
-    let freshQa = null;
-    try {
-        initial = await inspectLegacyReviewBasis(options);
-        reviewed = readReviewReport(options.reportFile, initial);
-        await verifyC11RemoteObservation(initial, reviewed.report, options.mergeProvider ?? defaultMergeProvider);
-        const c11 = projectC11(initial.plan, initial.c10, options.prNumber, reviewed.sha256);
-        const current = physicalC11(initial.cwd, initial.plan, c11);
-        if (current.stateCurrent === initial.c10.stateAfter
-            && current.storyCurrent === initial.c10.storyAfter) {
-            try {
-                freshQa = await verifyLocalQa(initial.plan, initial.cwd, options.verifyQa);
-            }
-            catch {
-                throw new Error('legacy-story-pr-review-qa-failed');
-            }
-        }
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-review-preflight-failed');
-    }
-    const sessionId = `legacy-c11-accept-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 5 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const basis = await inspectLegacyReviewBasis(options);
-        if (JSON.stringify(basis.reviewPlan) !== JSON.stringify(initial.reviewPlan)) {
-            return fail('legacy-story-pr-review-plan-drift');
-        }
-        const report = readReviewReport(options.reportFile, basis);
-        if (report.sha256 !== reviewed.sha256)
-            return fail('legacy-story-pr-review-report-drift');
-        await verifyC11RemoteObservation(basis, report.report, options.mergeProvider ?? defaultMergeProvider);
-        const c11 = projectC11(basis.plan, basis.c10, options.prNumber, report.sha256);
-        const before = physicalC11(basis.cwd, basis.plan, c11);
-        const prefix = digest(basis.plan.storyId);
-        const intentName = `${prefix}.c11.json`;
-        const acceptedName = `${prefix}.c11.accepted.json`;
-        const prior = await readC11Journal(basis.directory, intentName);
-        const accepted = await readC11Journal(basis.directory, acceptedName);
-        if (!prior && (!freshQa || before.stateCurrent !== c11.stateBefore
-            || before.storyCurrent !== c11.storyBefore)) {
-            return fail('legacy-story-pr-review-unjournaled-drift');
-        }
-        if (accepted && (!prior || JSON.stringify(accepted) !== JSON.stringify(prior))) {
-            return fail('legacy-story-pr-review-accepted-conflict');
-        }
-        const journal = {
-            schemaVersion: 1, kind: 'legacy-story-c11-acceptance-intent', storyId: basis.plan.storyId,
-            planDigest: digest(JSON.stringify(basis.reviewPlan)), prNumber: options.prNumber,
-            reviewSha256: report.sha256, qaSha256: prior?.qaSha256 ?? freshQa,
-            reviewRaw: report.raw,
-            stateBefore: digest(c11.stateBefore), stateAfter: digest(c11.stateAfter),
-            storyBefore: digest(c11.storyBefore), storyAfter: digest(c11.storyAfter),
-        };
-        if (prior && JSON.stringify(prior) !== JSON.stringify(journal)) {
-            return fail('legacy-story-pr-review-journal-conflict');
-        }
-        if (!prior)
-            await writeC11Journal(basis.directory, intentName, journal);
-        const prewrite = physicalC11(basis.cwd, basis.plan, c11);
-        if (accepted && (prewrite.stateCurrent !== c11.stateAfter
-            || prewrite.storyCurrent !== c11.storyAfter)) {
-            return fail('legacy-story-pr-review-accepted-physical-mismatch');
-        }
-        if (prewrite.stateCurrent === c11.stateBefore) {
-            await anchoredCompareAndSwapFile(join(basis.cwd, '.neocortex'), 'state.json', c11.stateAfter, journal.stateBefore);
-            await options.afterStatePersist?.();
-        }
-        const middle = physicalC11(basis.cwd, basis.plan, c11);
-        if (middle.storyCurrent === c11.storyBefore) {
-            await anchoredCompareAndSwapFile(join(basis.cwd, 'docs/stories'), `${basis.plan.storyId}.story.md`, c11.storyAfter, journal.storyBefore);
-            await options.afterStoryPersist?.();
-        }
-        const after = physicalC11(basis.cwd, basis.plan, c11);
-        if (after.stateCurrent !== c11.stateAfter || after.storyCurrent !== c11.storyAfter) {
-            return fail('legacy-story-pr-review-post-write-mismatch');
-        }
-        if (!accepted)
-            await writeC11Journal(basis.directory, acceptedName, journal);
-        return { ok: true, value: Object.freeze({
-                schemaVersion: 1, kind: 'legacy-story-c11-checkpoint', storyId: basis.plan.storyId,
-                epicId: basis.plan.epicId, branch: basis.plan.branch, prNumber: options.prNumber,
-                headSha: basis.plan.headSha, reviewSha256: journal.reviewSha256,
-                qaSha256: journal.qaSha256, stateSha256: journal.stateAfter,
-                storySha256: journal.storyAfter, reused: Boolean(accepted),
-                checkpointAccepted: true, localOnly: true,
-            }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason
-            : reason.includes('secure-filesystem-cas-conflict') ? 'legacy-story-pr-review-write-raced'
-                : 'legacy-story-pr-review-accept-failed');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-/** Independent readback for the eventual C12 integration boundary. A saved
- * status or provider PR alone is never a review verdict. */
-export async function readAcceptedLegacyStoryPrReviewC11(options) {
-    try {
-        const basis = await inspectLegacyReviewBasis(options);
-        const prefix = digest(basis.plan.storyId);
-        const prior = await readC11Journal(basis.directory, `${prefix}.c11.json`);
-        const accepted = await readC11Journal(basis.directory, `${prefix}.c11.accepted.json`);
-        if (!prior || !accepted || JSON.stringify(prior) !== JSON.stringify(accepted)) {
-            return fail('legacy-story-pr-review-not-accepted');
-        }
-        const reviewed = validateReviewReportRaw(accepted.reviewRaw, basis);
-        const projection = projectC11(basis.plan, basis.c10, options.prNumber, reviewed.sha256);
-        const expected = {
-            schemaVersion: 1, kind: 'legacy-story-c11-acceptance-intent', storyId: basis.plan.storyId,
-            planDigest: digest(JSON.stringify(basis.reviewPlan)), prNumber: options.prNumber,
-            reviewSha256: reviewed.sha256, qaSha256: accepted.qaSha256,
-            reviewRaw: reviewed.raw,
-            stateBefore: digest(projection.stateBefore), stateAfter: digest(projection.stateAfter),
-            storyBefore: digest(projection.storyBefore), storyAfter: digest(projection.storyAfter),
-        };
-        if (JSON.stringify(accepted) !== JSON.stringify(expected)) {
-            return fail('legacy-story-pr-review-journal-conflict');
-        }
-        const current = physicalC11(basis.cwd, basis.plan, projection);
-        if (current.stateCurrent !== projection.stateAfter
-            || current.storyCurrent !== projection.storyAfter) {
-            return fail('legacy-story-pr-review-physical-not-accepted');
-        }
-        return { ok: true, value: Object.freeze({ plan: basis.reviewPlan, receipt: Object.freeze({
-                    schemaVersion: 1, kind: 'legacy-story-c11-checkpoint', storyId: basis.plan.storyId,
-                    epicId: basis.plan.epicId, branch: basis.plan.branch, prNumber: options.prNumber,
-                    headSha: basis.plan.headSha, reviewSha256: accepted.reviewSha256,
-                    qaSha256: accepted.qaSha256, stateSha256: accepted.stateAfter,
-                    storySha256: accepted.storyAfter, reused: true,
-                    checkpointAccepted: true, localOnly: true,
-                }) }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-review-read-failed');
-    }
-}
-function renderLegacyStoryReviewArtifact(report, reviewSha256, qaSha256) {
-    const evidence = (items) => items
-        .map((item) => `- ${item.id}: ${item.disposition}; ${item.path}; sha256:${item.sha256}`)
-        .join('\n');
-    const debt = report.nonBlockingFindings.length === 0 ? 'None.'
-        : report.nonBlockingFindings.map((item) => `- ${item.id}: ${item.severity}; ${item.reasonCode}; ${item.actionCode}; ${item.path}; sha256:${item.sha256}`).join('\n');
-    return `# ${report.storyId} — PR review\n\nVerdict: approved\n\nPR: ${report.prNumber}\nReviewed HEAD: ${report.headSha}\nBase HEAD: ${report.baseSha}\nDiff SHA-256: ${report.diffSha256}\nRoot review SHA-256: ${reviewSha256}\nLocal QA SHA-256: ${qaSha256}\n\n## Acceptance evidence\n\n${evidence(report.acceptanceEvidence)}\n\n## SDD evidence\n\n${evidence(report.sddEvidence)}\n\n## Non-blocking review debt\n\n${debt}\n`;
-}
-/** Plan only: the old PR is not ready for physical merge while C10/C11 remain
- * uncommitted. This validates the exact review artifact to integrate next. */
-export async function planLegacyStoryPrMergeC12(options) {
-    try {
-        const accepted = await readAcceptedLegacyStoryPrReviewC11(options);
-        if (!accepted.ok)
-            return accepted;
-        const basis = await inspectLegacyReviewBasis(options);
-        const prefix = digest(basis.plan.storyId);
-        const journal = await readC11Journal(basis.directory, `${prefix}.c11.accepted.json`);
-        if (!journal || journal.reviewSha256 !== accepted.value.receipt.reviewSha256
-            || journal.qaSha256 !== accepted.value.receipt.qaSha256) {
-            return fail('legacy-story-pr-merge-review-drift');
-        }
-        const reviewed = validateReviewReportRaw(journal.reviewRaw, basis);
-        const reviewArtifactPath = `.neocortex/stories/${basis.plan.storyId}/review.md`;
-        if (existsSync(join(basis.cwd, reviewArtifactPath))) {
-            return fail('legacy-story-pr-merge-review-artifact-conflict');
-        }
-        try {
-            git(basis.cwd, 'cat-file', '-e', `${basis.plan.headSha}:${reviewArtifactPath}`);
-            return fail('legacy-story-pr-merge-review-artifact-conflict');
-        }
-        catch { /* The exact review artifact is not in the PR HEAD yet. */ }
-        const reviewArtifact = renderLegacyStoryReviewArtifact(reviewed.report, journal.reviewSha256, journal.qaSha256);
-        return { ok: true, value: Object.freeze({
-                schemaVersion: 1, kind: 'legacy-story-pr-merge-plan', storyId: basis.plan.storyId,
-                epicId: basis.plan.epicId, repository: basis.plan.repository,
-                branch: basis.plan.branch, baseBranch: basis.plan.baseBranch,
-                baseSha: basis.plan.baseSha, originalHeadSha: basis.plan.headSha,
-                prNumber: options.prNumber, reviewArtifactPath,
-                reviewArtifactSha256: digest(reviewArtifact),
-                reviewSha256: journal.reviewSha256, qaSha256: journal.qaSha256,
-                stateSha256: journal.stateAfter, storySha256: journal.storyAfter,
-                nextAuthority: 'root-review-commit-and-new-head-qa-required',
-                physicalMerge: false, localOnly: true,
-            }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-merge-plan-failed');
-    }
-}
-async function readC12Intent(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 64 * 1024)));
-    const plan = record(value?.plan);
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c12-review-commit-intent'
-        || !plan || plan.kind !== 'legacy-story-pr-merge-plan'
-        || typeof plan.reviewArtifactSha256 !== 'string'
-        || typeof value.reviewArtifact !== 'string'
-        || digest(value.reviewArtifact) !== plan.reviewArtifactSha256) {
-        throw new Error('legacy-story-pr-merge-intent-invalid');
-    }
-    if (value.remoteDebt !== undefined) {
-        const debt = record(value.remoteDebt);
-        const observation = record(debt?.observation);
-        if (!debt || Object.keys(debt).sort().join(',') !== [
-            'added', 'itemIds', 'observation', 'observedAt', 'registryAfterSha256',
-            'registryBeforeSha256', 'registryExisted',
-        ].sort().join(',') || !observation || debt.registryExisted !== true
-            || typeof debt.observedAt !== 'string' || !Number.isFinite(Date.parse(debt.observedAt))
-            || new Date(debt.observedAt).toISOString() !== debt.observedAt
-            || typeof debt.registryBeforeSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(debt.registryBeforeSha256)
-            || typeof debt.registryAfterSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(debt.registryAfterSha256)
-            || !Number.isSafeInteger(debt.added) || debt.added < 0
-            || !Array.isArray(debt.itemIds) || debt.itemIds.some((id) => typeof id !== 'string')) {
-            throw new Error('legacy-story-pr-merge-intent-invalid');
-        }
-    }
-    return value;
-}
-async function readC12Prepared(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 4096)));
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c12-prepared'
-        || typeof value.intentSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.intentSha256)
-        || typeof value.candidateHeadSha !== 'string' || !/^[a-f0-9]{40}$/.test(value.candidateHeadSha)
-        || typeof value.qaSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.qaSha256)) {
-        throw new Error('legacy-story-pr-merge-prepared-journal-invalid');
-    }
-    return value;
-}
-function reviewArtifactDirectory(cwd, storyId) {
-    const folders = [join(cwd, '.neocortex'), join(cwd, '.neocortex/stories'),
-        join(cwd, '.neocortex/stories', storyId)];
-    for (const folder of folders) {
-        if (!existsSync(folder))
-            mkdirSync(folder, { mode: 0o700 });
-        if (!lstatSync(folder).isDirectory() || realpathSync(folder) !== folder) {
-            throw new Error('legacy-story-pr-merge-review-directory-unsafe');
-        }
-    }
-    return folders[2];
-}
-const C12_REGISTRY_PATH = '.neocortex/tech-debt-registry.json';
-const C12_EMPTY_REGISTRY = '{"schema_version":2,"items":[]}';
-function c12RegistryAtOriginal(cwd, originalHeadSha) {
-    const entry = gitRaw(cwd, 'ls-tree', originalHeadSha, '--', C12_REGISTRY_PATH).trim();
-    if (!entry)
-        return { existed: false, raw: C12_EMPTY_REGISTRY };
-    if (!/^100644 blob [a-f0-9]{40}\t\.neocortex\/tech-debt-registry\.json$/.test(entry)) {
-        throw new Error('legacy-story-pr-merge-remote-debt-registry-unsafe');
-    }
-    return { existed: true, raw: gitRaw(cwd, 'show', `${originalHeadSha}:${C12_REGISTRY_PATH}`) };
-}
-function c12RegistryProjection(cwd, intent) {
-    const debt = intent.remoteDebt;
-    if (!debt)
-        return null;
-    const before = c12RegistryAtOriginal(cwd, intent.plan.originalHeadSha);
-    if (!before.existed || digest(before.raw) !== debt.registryBeforeSha256) {
-        throw new Error('legacy-story-pr-merge-remote-debt-registry-drift');
-    }
-    const projection = projectC12ScopedCiRegistryUpdate({ registryRaw: before.raw,
-        observation: debt.observation, storyId: intent.plan.storyId,
-        prNumber: intent.plan.prNumber, nowIso: debt.observedAt });
-    if (!projection || projection.registryAfterSha256 !== debt.registryAfterSha256
-        || projection.added !== debt.added
-        || JSON.stringify(projection.itemIds) !== JSON.stringify(debt.itemIds)
-        || debt.observation.reasonCodes.length === 0) {
-        throw new Error('legacy-story-pr-merge-remote-debt-intent-invalid');
-    }
-    return projection;
-}
-function exactC12Paths(intent) {
-    const plan = intent.plan;
-    return ['.neocortex/state.json', `docs/stories/${plan.storyId}.story.md`,
-        plan.reviewArtifactPath, ...(intent.remoteDebt?.added ? [C12_REGISTRY_PATH] : [])].sort();
-}
-function assertC12Candidate(cwd, intent, candidateHeadSha) {
-    const plan = intent.plan;
-    if (git(cwd, 'rev-parse', `${candidateHeadSha}^`) !== plan.originalHeadSha
-        || git(cwd, 'rev-list', '--count', `${plan.originalHeadSha}..${candidateHeadSha}`) !== '1') {
-        throw new Error('legacy-story-pr-merge-candidate-parent-invalid');
-    }
-    const changed = gitRaw(cwd, 'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', candidateHeadSha)
-        .split('\0').filter(Boolean).sort();
-    const projection = c12RegistryProjection(cwd, intent);
-    if (JSON.stringify(changed) !== JSON.stringify(exactC12Paths(intent))
-        || digest(gitRaw(cwd, 'show', `${candidateHeadSha}:.neocortex/state.json`)) !== plan.stateSha256
-        || digest(gitRaw(cwd, 'show', `${candidateHeadSha}:docs/stories/${plan.storyId}.story.md`)) !== plan.storySha256
-        || digest(gitRaw(cwd, 'show', `${candidateHeadSha}:${plan.reviewArtifactPath}`)) !== plan.reviewArtifactSha256
-        || (projection && digest(gitRaw(cwd, 'show', `${candidateHeadSha}:${C12_REGISTRY_PATH}`))
-            !== projection.registryAfterSha256)
-        || !gitRaw(cwd, 'log', '-1', '--format=%B', candidateHeadSha)
-            .split('\n').map((line) => line.trim()).includes(`Neocortex-Legacy-Review: ${plan.storyId}`)) {
-        throw new Error('legacy-story-pr-merge-candidate-invalid');
-    }
-}
-function inspectC12Intent(cwd, intent, journal, providerItems) {
-    const plan = intent.plan;
-    if (repository(cwd) !== plan.repository || git(cwd, 'branch', '--show-current') !== plan.branch
-        || singleRemoteSha(cwd, plan.baseBranch) !== plan.baseSha
-        || journal.storyId !== plan.storyId || journal.reviewSha256 !== plan.reviewSha256
-        || journal.qaSha256 !== plan.qaSha256 || journal.stateAfter !== plan.stateSha256
-        || journal.storyAfter !== plan.storySha256) {
-        throw new Error('legacy-story-pr-merge-intent-drift');
-    }
-    const headSha = git(cwd, 'rev-parse', 'HEAD');
-    const remoteSha = singleRemoteSha(cwd, plan.branch);
-    if (headSha !== plan.originalHeadSha)
-        assertC12Candidate(cwd, intent, headSha);
-    if (remoteSha !== plan.originalHeadSha && remoteSha !== headSha) {
-        throw new Error('legacy-story-pr-merge-remote-drift');
-    }
-    const providerPlan = { schemaVersion: 1, kind: 'legacy-story-pr-plan',
-        storyId: plan.storyId, epicId: plan.epicId, repository: plan.repository,
-        branch: plan.branch, baseBranch: plan.baseBranch, baseSha: plan.baseSha,
-        headSha: remoteSha, qaAuthority: 'root-review-required', localOnly: true };
-    const item = selectedPr(providerPlan, providerItems);
-    if (!item || item.number !== plan.prNumber) {
-        throw new Error('legacy-story-pr-merge-provider-drift');
-    }
-    const stateCurrent = safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024);
-    const storyCurrent = safeRead(join(cwd, `docs/stories/${plan.storyId}.story.md`), 2 * 1024 * 1024);
-    if (digest(stateCurrent) !== plan.stateSha256 || digest(storyCurrent) !== plan.storySha256) {
-        throw new Error('legacy-story-pr-merge-checkpoint-drift');
-    }
-    const projection = c12RegistryProjection(cwd, intent);
-    if (projection) {
-        const registryPath = join(cwd, C12_REGISTRY_PATH);
-        const registryExists = existsSync(registryPath);
-        const currentDigest = registryExists ? digest(safeRead(registryPath, 2 * 1024 * 1024)) : null;
-        if (headSha === plan.originalHeadSha
-            ? currentDigest !== projection.registryBeforeSha256
-                && currentDigest !== projection.registryAfterSha256
-            : currentDigest !== projection.registryAfterSha256) {
-            throw new Error('legacy-story-pr-merge-remote-debt-registry-drift');
-        }
-    }
-    const status = gitRaw(cwd, 'status', '--porcelain=v1', '-uall').split('\n').filter(Boolean);
-    if (headSha === plan.originalHeadSha) {
-        const allowed = new Set(exactC12Paths(intent));
-        if (status.some((line) => !allowed.has(line.slice(3))
-            || ![' M', 'M ', 'MM', '??', 'A '].includes(line.slice(0, 2)))) {
-            throw new Error('legacy-story-pr-merge-worktree-dirty');
-        }
-    }
-    else if (status.length > 0) {
-        throw new Error('legacy-story-pr-merge-worktree-dirty');
-    }
-    return { headSha, remoteSha };
-}
-/** Commit only the reviewed C10/C11 metadata and public review artifact to
- * the existing PR branch, then run P205 on that new immutable HEAD and push
- * without force. This prepares C12; it does not merge or close the story. */
-export async function prepareLegacyStoryPrMergeC12(options) {
-    if (!options.authorize)
-        return fail('legacy-story-pr-merge-authorization-required');
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0
-        || !/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-pr-merge-target-invalid');
-    }
-    const sessionId = `legacy-c12-prepare-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 60 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const prefix = digest(options.storyId);
-        const c11Prior = await readC11Journal(directory, `${prefix}.c11.json`);
-        const c11Accepted = await readC11Journal(directory, `${prefix}.c11.accepted.json`);
-        if (!c11Prior || !c11Accepted || JSON.stringify(c11Prior) !== JSON.stringify(c11Accepted)) {
-            return fail('legacy-story-pr-merge-review-unaccepted');
-        }
-        const intentName = `${prefix}.c12.json`;
-        const preparedName = `${prefix}.c12.prepared.json`;
-        let intent = await readC12Intent(directory, intentName);
-        if (!intent) {
-            const planned = await planLegacyStoryPrMergeC12(options);
-            if (!planned.ok)
-                return planned;
-            const basis = await inspectLegacyReviewBasis(options);
-            const reviewed = validateReviewReportRaw(c11Accepted.reviewRaw, basis);
-            const reviewArtifact = renderLegacyStoryReviewArtifact(reviewed.report, c11Accepted.reviewSha256, c11Accepted.qaSha256);
-            let remoteDebt;
-            if (options.recordRemoteDebt) {
-                const plan = planned.value;
-                const observed = await (options.mergeProvider ?? defaultMergeProvider)
-                    .view(plan.repository, plan.prNumber);
-                assertC12MergeObservation(plan, plan.originalHeadSha, observed, 'OPEN');
-                const summarized = summarizeC12RemoteRollup(observed.statusCheckRollup);
-                if (!summarized.ok)
-                    return fail('legacy-story-pr-merge-remote-observation-unclassified');
-                if (summarized.value.reasonCodes.length === 0) {
-                    return fail('legacy-story-pr-merge-remote-debt-not-required');
-                }
-                const before = c12RegistryAtOriginal(cwd, plan.originalHeadSha);
-                if (!before.existed)
-                    return fail('legacy-story-pr-merge-remote-debt-registry-missing');
-                const registryPath = join(cwd, C12_REGISTRY_PATH);
-                const worktreeRaw = existsSync(registryPath)
-                    ? safeRead(registryPath, 2 * 1024 * 1024) : null;
-                if (worktreeRaw !== before.raw) {
-                    return fail('legacy-story-pr-merge-remote-debt-registry-drift');
-                }
-                const observedAt = new Date().toISOString();
-                const projection = projectC12ScopedCiRegistryUpdate({ registryRaw: before.raw,
-                    observation: summarized.value, storyId: plan.storyId,
-                    prNumber: plan.prNumber, nowIso: observedAt });
-                if (!projection)
-                    return fail('legacy-story-pr-merge-remote-debt-registry-invalid');
-                remoteDebt = { observation: summarized.value, observedAt,
-                    registryExisted: before.existed,
-                    registryBeforeSha256: projection.registryBeforeSha256,
-                    registryAfterSha256: projection.registryAfterSha256,
-                    added: projection.added, itemIds: projection.itemIds };
-            }
-            intent = { schemaVersion: 1, kind: 'legacy-story-c12-review-commit-intent',
-                plan: planned.value, reviewArtifact, ...(remoteDebt ? { remoteDebt } : {}) };
-            await anchoredAtomicWriteFile(directory, intentName, `${JSON.stringify(intent)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, intentName), directory);
-        }
-        const plan = intent.plan;
-        if (plan.storyId !== options.storyId || plan.prNumber !== options.prNumber
-            || digest(intent.reviewArtifact) !== plan.reviewArtifactSha256
-            || Boolean(intent.remoteDebt) !== Boolean(options.recordRemoteDebt)) {
-            return fail('legacy-story-pr-merge-intent-conflict');
-        }
-        const provider = options.provider ?? defaultProvider;
-        const inspect = async () => inspectC12Intent(cwd, intent, c11Accepted, await provider.list(plan.repository, plan.branch, plan.baseBranch));
-        let current = await inspect();
-        const intentSha256 = digest(JSON.stringify(intent));
-        const accepted = await readC12Prepared(directory, preparedName);
-        if (accepted) {
-            if (accepted.intentSha256 !== intentSha256
-                || accepted.candidateHeadSha !== current.headSha
-                || current.remoteSha !== current.headSha) {
-                return fail('legacy-story-pr-merge-prepared-conflict');
-            }
-            return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                    kind: 'legacy-story-c12-prepared', storyId: plan.storyId, epicId: plan.epicId,
-                    branch: plan.branch,
-                    prNumber: plan.prNumber, originalHeadSha: plan.originalHeadSha,
-                    candidateHeadSha: accepted.candidateHeadSha, qaSha256: accepted.qaSha256,
-                    registryRecorded: Boolean(intent.remoteDebt),
-                    reused: true, physicalMerge: false, localOnly: true }) };
-        }
-        if (current.headSha === plan.originalHeadSha) {
-            if (current.remoteSha !== plan.originalHeadSha) {
-                return fail('legacy-story-pr-merge-remote-drift');
-            }
-            const projection = c12RegistryProjection(cwd, intent);
-            if (projection) {
-                const observed = await (options.mergeProvider ?? defaultMergeProvider)
-                    .view(plan.repository, plan.prNumber);
-                assertC12MergeObservation(plan, plan.originalHeadSha, observed, 'OPEN');
-                const summarized = summarizeC12RemoteRollup(observed.statusCheckRollup);
-                if (!summarized.ok || summarized.value.digest !== intent.remoteDebt.observation.digest
-                    || JSON.stringify(summarized.value) !== JSON.stringify(intent.remoteDebt.observation)) {
-                    return fail('legacy-story-pr-merge-remote-debt-observation-drift');
-                }
-                if (projection.added > 0) {
-                    const registryPath = join(cwd, C12_REGISTRY_PATH);
-                    const currentRaw = existsSync(registryPath)
-                        ? safeRead(registryPath, 2 * 1024 * 1024) : null;
-                    if (currentRaw === projection.registryAfterRaw) { /* recovered after interrupted write */ }
-                    else if (currentRaw === c12RegistryAtOriginal(cwd, plan.originalHeadSha).raw) {
-                        const registryDir = join(cwd, '.neocortex');
-                        if (!lstatSync(registryDir).isDirectory() || realpathSync(registryDir) !== registryDir) {
-                            return fail('legacy-story-pr-merge-remote-debt-registry-unsafe');
-                        }
-                        await anchoredCompareAndSwapFile(registryDir, 'tech-debt-registry.json', projection.registryAfterRaw, projection.registryBeforeSha256);
-                    }
-                    else
-                        return fail('legacy-story-pr-merge-remote-debt-registry-drift');
-                }
-            }
-            const artifactDir = reviewArtifactDirectory(cwd, plan.storyId);
-            const artifactPath = join(artifactDir, 'review.md');
-            if (existsSync(artifactPath)) {
-                if (lstatSync(artifactPath).isSymbolicLink()
-                    || safeRead(artifactPath, 32 * 1024) !== intent.reviewArtifact) {
-                    return fail('legacy-story-pr-merge-review-artifact-conflict');
-                }
-            }
-            else {
-                await anchoredAtomicWriteFile(artifactDir, 'review.md', intent.reviewArtifact);
-            }
-            current = await inspect();
-            git(cwd, 'add', '--', ...exactC12Paths(intent));
-            const staged = gitRaw(cwd, 'diff', '--cached', '--name-only', '-z').split('\0').filter(Boolean).sort();
-            if (JSON.stringify(staged) !== JSON.stringify(exactC12Paths(intent))
-                || digest(gitRaw(cwd, 'show', ':.neocortex/state.json')) !== plan.stateSha256
-                || digest(gitRaw(cwd, 'show', `:docs/stories/${plan.storyId}.story.md`)) !== plan.storySha256
-                || digest(gitRaw(cwd, 'show', `:${plan.reviewArtifactPath}`)) !== plan.reviewArtifactSha256
-                || (projection && digest(gitRaw(cwd, 'show', `:${C12_REGISTRY_PATH}`))
-                    !== projection.registryAfterSha256)
-                || gitRaw(cwd, 'diff', '--name-only', '-z') !== '') {
-                return fail('legacy-story-pr-merge-staged-scope-invalid');
-            }
-            git(cwd, 'diff', '--cached', '--check');
-            git(cwd, 'commit', '-m', `chore(story): record reviewed PR ${plan.storyId}`, '-m', `Neocortex-Legacy-Review: ${plan.storyId}`);
-            current = await inspect();
-            await options.afterCommit?.();
-        }
-        if (current.headSha === plan.originalHeadSha)
-            return fail('legacy-story-pr-merge-commit-missing');
-        const qaPlan = { schemaVersion: 1, kind: 'legacy-story-pr-plan',
-            storyId: plan.storyId, epicId: plan.epicId, repository: plan.repository,
-            branch: plan.branch, baseBranch: plan.baseBranch, headSha: current.headSha,
-            baseSha: plan.baseSha, qaAuthority: 'root-review-required', localOnly: true };
-        let qaSha256;
-        try {
-            qaSha256 = await verifyLocalQa(qaPlan, cwd, options.verifyQa);
-        }
-        catch {
-            return fail('legacy-story-pr-merge-new-head-qa-failed');
-        }
-        current = await inspect();
-        if (current.headSha === plan.originalHeadSha)
-            return fail('legacy-story-pr-merge-candidate-raced');
-        if (current.remoteSha === plan.originalHeadSha) {
-            git(cwd, 'push', '--porcelain', 'origin', `${current.headSha}:refs/heads/${plan.branch}`);
-        }
-        current = await inspect();
-        if (current.remoteSha !== current.headSha)
-            return fail('legacy-story-pr-merge-push-unverified');
-        await options.afterPush?.();
-        const prepared = { schemaVersion: 1, kind: 'legacy-story-c12-prepared',
-            intentSha256, candidateHeadSha: current.headSha, qaSha256 };
-        await anchoredAtomicWriteFile(directory, preparedName, `${JSON.stringify(prepared)}\n`);
-        await assertGitLifecyclePrivateFile(join(directory, preparedName), directory);
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c12-prepared', storyId: plan.storyId, epicId: plan.epicId,
-                branch: plan.branch,
-                prNumber: plan.prNumber, originalHeadSha: plan.originalHeadSha,
-                candidateHeadSha: current.headSha, qaSha256,
-                registryRecorded: Boolean(intent.remoteDebt),
-                reused: false, physicalMerge: false, localOnly: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-merge-prepare-failed');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-/** Read-only C12 observation before the reviewed metadata is committed. This
- * gives the root the canonical debt input at the only point where a future
- * tracked-registry write can join the reviewed PR candidate commit. */
-export async function planLegacyStoryPrRemoteDebtBeforePrepareC12(options) {
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0) {
-        return fail('legacy-story-pr-merge-target-invalid');
-    }
-    const planned = await planLegacyStoryPrMergeC12(options);
-    if (!planned.ok)
-        return planned;
-    try {
-        const plan = planned.value;
-        const observed = await (options.mergeProvider ?? defaultMergeProvider)
-            .view(plan.repository, plan.prNumber);
-        assertC12MergeObservation(plan, plan.originalHeadSha, observed, 'OPEN');
-        const summarized = summarizeC12RemoteRollup(observed.statusCheckRollup);
-        if (!summarized.ok)
-            return fail('legacy-story-pr-merge-remote-observation-unclassified');
-        const followUpDebt = projectC12ScopedCiFollowUpDebt(summarized.value, plan.storyId, plan.prNumber);
-        if (!followUpDebt)
-            return fail('legacy-story-pr-merge-remote-debt-projection-invalid');
-        if (followUpDebt.length === 0)
-            return fail('legacy-story-pr-merge-remote-debt-not-required');
-        const registryPath = join(realpathSync(options.projectRoot), '.neocortex/tech-debt-registry.json');
-        const registryExists = existsSync(registryPath);
-        const registryRaw = registryExists ? safeRead(registryPath, 2 * 1024 * 1024)
-            : '{"schema_version":2,"items":[]}';
-        const registryProjection = projectC12ScopedCiRegistryUpdate({
-            registryRaw, observation: summarized.value, storyId: plan.storyId,
-            prNumber: plan.prNumber, nowIso: new Date().toISOString(),
-        });
-        if (!registryProjection)
-            return fail('legacy-story-pr-merge-remote-debt-registry-invalid');
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c12-pre-prepare-debt-plan', storyId: plan.storyId,
-                epicId: plan.epicId, prNumber: plan.prNumber,
-                originalHeadSha: plan.originalHeadSha, baseSha: plan.baseSha,
-                remoteObservationDigest: summarized.value.digest,
-                reasonCodes: summarized.value.reasonCodes, followUpDebt,
-                registryExists, registryBeforeSha256: registryProjection.registryBeforeSha256,
-                registryProjectedItemIds: registryProjection.itemIds,
-                registryProjectedAdded: registryProjection.added,
-                registryProjectedExisting: registryProjection.existing,
-                registryMutationAuthorized: false, canMerge: false, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-merge-pre-prepare-debt-uncertain');
-    }
-}
-function recordedC12RootDecision(plan, candidateHeadSha, remote, registrySha256, registryItemIds) {
-    const followUpDebt = projectC12ScopedCiFollowUpDebt(remote, plan.storyId, plan.prNumber);
-    if (!followUpDebt || followUpDebt.length === 0)
-        return null;
-    return Object.freeze({ schemaVersion: 1, kind: 'legacy-story-c12-root-merge-decision',
-        storyId: plan.storyId, epicId: plan.epicId, prNumber: plan.prNumber,
-        candidateHeadSha, baseSha: plan.baseSha, reviewSha256: plan.reviewSha256,
-        remoteObservationDigest: remote.digest, canMerge: true,
-        blockingChecks: [],
-        nonBlockingChecks: Object.freeze(followUpDebt.map((debt) => Object.freeze({
-            checkName: debt.checkName, bucket: 'nonBlockingChecks',
-            reason: debt.reason, origin: 'remote_ci_cd', safeToContinueYoloop: true,
-        }))), followUpDebt,
-        registrySha256, registryItemIds, publicSafe: true });
-}
-function validC12RootDecision(value, intent, candidateHeadSha) {
-    const plan = intent.plan;
-    const decision = record(value);
-    if (decision?.registrySha256 !== undefined) {
-        const debt = intent.remoteDebt;
-        const expected = debt && recordedC12RootDecision(plan, candidateHeadSha, debt.observation, debt.registryAfterSha256, debt.itemIds);
-        return !!expected && JSON.stringify(decision) === JSON.stringify(expected);
-    }
-    if (!decision || JSON.stringify(Object.keys(decision).sort()) !== JSON.stringify([
-        'baseSha', 'blockingChecks', 'canMerge', 'candidateHeadSha', 'epicId', 'followUpDebt',
-        'kind', 'nonBlockingChecks', 'prNumber', 'remoteObservationDigest', 'reviewSha256', 'schemaVersion', 'storyId',
-    ].sort()))
-        return false;
-    return decision.schemaVersion === 1 && decision.kind === 'legacy-story-c12-root-merge-decision'
-        && decision.storyId === plan.storyId && decision.epicId === plan.epicId
-        && decision.prNumber === plan.prNumber && decision.candidateHeadSha === candidateHeadSha
-        && decision.baseSha === plan.baseSha && decision.reviewSha256 === plan.reviewSha256
-        && typeof decision.remoteObservationDigest === 'string'
-        && /^[a-f0-9]{64}$/.test(decision.remoteObservationDigest)
-        && decision.canMerge === true && Array.isArray(decision.blockingChecks)
-        && decision.blockingChecks.length === 0 && Array.isArray(decision.nonBlockingChecks)
-        && decision.nonBlockingChecks.length === 0 && Array.isArray(decision.followUpDebt)
-        && decision.followUpDebt.length === 0;
-}
-async function readC12MergeAttempt(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 4096)));
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c12-merge-attempt'
-        || typeof value.intentSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.intentSha256)
-        || typeof value.candidateHeadSha !== 'string' || !/^[a-f0-9]{40}$/.test(value.candidateHeadSha)
-        || typeof value.qaSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.qaSha256)
-        || typeof value.remoteObservationDigest !== 'string'
-        || !/^[a-f0-9]{64}$/.test(value.remoteObservationDigest)) {
-        throw new Error('legacy-story-pr-merge-attempt-invalid');
-    }
-    return value;
-}
-async function readC12Merged(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 4096)));
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c12-merged'
-        || typeof value.intentSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.intentSha256)
-        || typeof value.candidateHeadSha !== 'string' || !/^[a-f0-9]{40}$/.test(value.candidateHeadSha)
-        || typeof value.qaSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.qaSha256)
-        || typeof value.remoteObservationDigest !== 'string'
-        || !/^[a-f0-9]{64}$/.test(value.remoteObservationDigest)
-        || typeof value.mergeCommitSha !== 'string' || !/^[a-f0-9]{40}$/.test(value.mergeCommitSha)
-        || typeof value.baseHeadSha !== 'string' || !/^[a-f0-9]{40}$/.test(value.baseHeadSha)) {
-        throw new Error('legacy-story-pr-merge-journal-invalid');
-    }
-    return value;
-}
-function assertC12MergeObservation(plan, candidateHeadSha, observed, expectedState) {
-    if (observed.number !== plan.prNumber || observed.state !== expectedState
-        || observed.headRefName !== plan.branch || observed.headRefOid !== candidateHeadSha
-        || observed.baseRefName !== plan.baseBranch
-        || observed.url.toLowerCase() !== `https://github.com/${plan.repository}/pull/${plan.prNumber}`.toLowerCase()) {
-        throw new Error('legacy-story-pr-merge-provider-drift');
-    }
-    if (expectedState === 'OPEN' && (observed.baseRefOid !== plan.baseSha
-        || observed.isDraft !== false || observed.mergeable !== 'MERGEABLE')) {
-        throw new Error('legacy-story-pr-merge-provider-not-ready');
-    }
-}
-/** The root decision is an attempt authority, never a claim that GitHub will
- * merge. Every non-green categorical reason must already be committed as debt. */
-function assertC12DecisionRemoteRollup(observed, decision, intent) {
-    const summary = summarizeC12RemoteRollup(observed.statusCheckRollup);
-    if (!summary.ok) {
-        throw new Error('legacy-story-pr-merge-remote-observation-unclassified');
-    }
-    if (!('registrySha256' in decision) && summary.value.reasonCodes.length > 0) {
-        throw new Error('legacy-story-pr-merge-remote-observation-unclassified');
-    }
-    if (summary.value.digest !== decision.remoteObservationDigest) {
-        throw new Error('legacy-story-pr-merge-remote-observation-drift');
-    }
-    if ('registrySha256' in decision) {
-        if (!intent.remoteDebt
-            || JSON.stringify(summary.value) !== JSON.stringify(intent.remoteDebt.observation)) {
-            throw new Error('legacy-story-pr-merge-remote-debt-observation-drift');
-        }
-    }
-    return summary.value;
-}
-function assertC12MergedPhysical(cwd, intent, prepared, observed) {
-    const plan = intent.plan;
-    assertC12MergeObservation(plan, prepared.candidateHeadSha, observed, 'MERGED');
-    const mergeCommitSha = observed.mergeCommit?.oid;
-    if (!mergeCommitSha || !/^[a-f0-9]{40}$/.test(mergeCommitSha)
-        || git(cwd, 'rev-parse', 'HEAD') !== prepared.candidateHeadSha
-        || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-        throw new Error('legacy-story-pr-merge-physical-invalid');
-    }
-    assertC12Candidate(cwd, intent, prepared.candidateHeadSha);
-    git(cwd, 'fetch', '--no-tags', 'origin', `refs/heads/${plan.baseBranch}`);
-    const baseHeadSha = git(cwd, 'rev-parse', 'FETCH_HEAD');
-    if (singleRemoteSha(cwd, plan.baseBranch) !== baseHeadSha
-        || !/^[a-f0-9]{40}$/.test(baseHeadSha)) {
-        throw new Error('legacy-story-pr-merge-base-readback-drift');
-    }
-    const parents = git(cwd, 'rev-list', '--parents', '-n', '1', mergeCommitSha).split(' ');
-    if (parents.length !== 3 || parents[0] !== mergeCommitSha
-        || parents[1] !== plan.baseSha || parents[2] !== prepared.candidateHeadSha) {
-        throw new Error('legacy-story-pr-merge-commit-parent-invalid');
-    }
-    git(cwd, 'merge-base', '--is-ancestor', mergeCommitSha, baseHeadSha);
-    return { mergeCommitSha, baseHeadSha };
-}
-/** Root-only readback of the prepared PR candidate. Remote-only findings may
- * authorize an attempt only when the exact categorical debt is already in
- * the reviewed candidate registry; this does not guarantee provider merge. */
-export async function planLegacyStoryPrMergeDecisionC12(options) {
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0
-        || !/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-pr-merge-target-invalid');
-    }
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        const commonRaw = git(cwd, 'rev-parse', '--git-common-dir');
-        const commonDir = realpathSync(isAbsolute(commonRaw) ? commonRaw : join(cwd, commonRaw));
-        const runtimeDir = join(commonDir, 'neocortex-yoloop');
-        const directory = join(runtimeDir, 'legacy-story-pr-intents');
-        if (!existsSync(runtimeDir) || !existsSync(directory))
-            return fail('legacy-story-pr-merge-not-prepared');
-        if (!lstatSync(runtimeDir).isDirectory() || realpathSync(runtimeDir) !== runtimeDir) {
-            return fail('legacy-story-pr-merge-runtime-unsafe');
-        }
-        await assertGitLifecyclePrivateDirectory(directory, runtimeDir);
-        const prefix = digest(options.storyId);
-        const intent = await readC12Intent(directory, `${prefix}.c12.json`);
-        const prepared = await readC12Prepared(directory, `${prefix}.c12.prepared.json`);
-        const c11 = await readC11Journal(directory, `${prefix}.c11.accepted.json`);
-        if (!intent || !prepared || !c11)
-            return fail('legacy-story-pr-merge-not-prepared');
-        const plan = intent.plan;
-        if (plan.storyId !== options.storyId || plan.prNumber !== options.prNumber
-            || prepared.intentSha256 !== digest(JSON.stringify(intent))
-            || c11.reviewSha256 !== plan.reviewSha256 || c11.qaSha256 !== plan.qaSha256) {
-            return fail('legacy-story-pr-merge-prepared-drift');
-        }
-        const current = inspectC12Intent(cwd, intent, c11, await (options.provider ?? defaultProvider).list(plan.repository, plan.branch, plan.baseBranch));
-        if (current.headSha !== prepared.candidateHeadSha
-            || current.remoteSha !== prepared.candidateHeadSha) {
-            return fail('legacy-story-pr-merge-remote-drift');
-        }
-        assertC12Candidate(cwd, intent, prepared.candidateHeadSha);
-        const observation = await (options.mergeProvider ?? defaultMergeProvider).view(plan.repository, plan.prNumber);
-        assertC12MergeObservation(plan, prepared.candidateHeadSha, observation, 'OPEN');
-        const summarized = summarizeC12RemoteRollup(observation.statusCheckRollup);
-        if (!summarized.ok)
-            return fail('legacy-story-pr-merge-remote-observation-unclassified');
-        const remote = summarized.value;
-        if (remote.reasonCodes.length > 0) {
-            const debt = intent.remoteDebt;
-            if (debt && JSON.stringify(remote) === JSON.stringify(debt.observation)) {
-                const projection = c12RegistryProjection(cwd, intent);
-                if (!projection)
-                    return fail('legacy-story-pr-merge-remote-debt-registry-invalid');
-                const decision = recordedC12RootDecision(plan, prepared.candidateHeadSha, remote, projection.registryAfterSha256, projection.itemIds);
-                if (!decision)
-                    return fail('legacy-story-pr-merge-remote-debt-projection-invalid');
-                return { ok: true, value: decision };
-            }
-            return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                    kind: 'legacy-story-c12-remote-debt-required', storyId: plan.storyId,
-                    epicId: plan.epicId, prNumber: plan.prNumber,
-                    candidateHeadSha: prepared.candidateHeadSha, baseSha: plan.baseSha,
-                    reviewSha256: plan.reviewSha256, remoteObservationDigest: remote.digest,
-                    reasonCodes: remote.reasonCodes, reasonCounts: remote.reasonCounts,
-                    canMerge: false, publicSafe: true }) };
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c12-root-merge-decision', storyId: plan.storyId,
-                epicId: plan.epicId, prNumber: plan.prNumber,
-                candidateHeadSha: prepared.candidateHeadSha, baseSha: plan.baseSha,
-                reviewSha256: plan.reviewSha256, remoteObservationDigest: remote.digest,
-                canMerge: true, blockingChecks: [],
-                nonBlockingChecks: [], followUpDebt: [] }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-merge-decision-uncertain');
-    }
-}
-/** Persist an exact categorized remote observation before any C12 effect.
- * This is a private replay-safe evidence journal, not the canonical scoped-CI
- * registry writer and never merge authorization. */
-export async function recordLegacyStoryPrRemoteDebtC12(options) {
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0
-        || !/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-pr-merge-target-invalid');
-    }
-    const preflight = await planLegacyStoryPrMergeDecisionC12(options);
-    if (!preflight.ok)
-        return fail(preflight.reasonCode);
-    if (preflight.value.canMerge)
-        return fail('legacy-story-pr-merge-remote-debt-not-required');
-    const sessionId = `legacy-c12-remote-debt-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 5 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const planned = await planLegacyStoryPrMergeDecisionC12(options);
-        if (!planned.ok)
-            return fail(planned.reasonCode);
-        if (planned.value.canMerge)
-            return fail('legacy-story-pr-merge-remote-debt-not-required');
-        if (JSON.stringify(planned.value) !== JSON.stringify(preflight.value)) {
-            return fail('legacy-story-pr-merge-remote-debt-observation-drift');
-        }
-        const plan = planned.value;
-        const cwd = realpathSync(options.projectRoot);
-        const repositoryName = repository(cwd);
-        const currentObservation = await (options.mergeProvider ?? defaultMergeProvider)
-            .view(repositoryName, plan.prNumber);
-        if (currentObservation.number !== plan.prNumber || currentObservation.state !== 'OPEN'
-            || currentObservation.headRefOid !== plan.candidateHeadSha
-            || currentObservation.baseRefOid !== plan.baseSha
-            || currentObservation.headRefName !== `story/${plan.epicId}/${plan.storyId}`
-            || currentObservation.isDraft !== false || currentObservation.mergeable !== 'MERGEABLE'
-            || currentObservation.url.toLowerCase()
-                !== `https://github.com/${repositoryName}/pull/${plan.prNumber}`.toLowerCase()) {
-            return fail('legacy-story-pr-merge-remote-debt-observation-drift');
-        }
-        const currentRemote = summarizeC12RemoteRollup(currentObservation.statusCheckRollup);
-        if (!currentRemote.ok || currentRemote.value.digest !== plan.remoteObservationDigest) {
-            return fail('legacy-story-pr-merge-remote-debt-observation-drift');
-        }
-        const followUpDebt = projectC12ScopedCiFollowUpDebt(currentRemote.value, plan.storyId, plan.prNumber);
-        if (!followUpDebt || followUpDebt.length === 0) {
-            return fail('legacy-story-pr-merge-remote-debt-projection-invalid');
-        }
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const journal = { schemaVersion: 1,
-            kind: 'legacy-story-c12-remote-debt-observation',
-            planSha256: digest(JSON.stringify(plan)), storyId: plan.storyId,
-            epicId: plan.epicId, prNumber: plan.prNumber,
-            candidateHeadSha: plan.candidateHeadSha,
-            remoteObservationDigest: plan.remoteObservationDigest,
-            reasonCodes: plan.reasonCodes, reasonCounts: plan.reasonCounts };
-        const name = `${digest(plan.storyId)}.${plan.candidateHeadSha}.${plan.remoteObservationDigest}.c12.remote-debt.json`;
-        const path = join(directory, name);
-        const reused = existsSync(path);
-        if (reused) {
-            await assertGitLifecyclePrivateFile(path, directory);
-            const stored = record(JSON.parse(safeRead(path, 4096)));
-            if (!stored || JSON.stringify(stored) !== JSON.stringify(journal)) {
-                return fail('legacy-story-pr-merge-remote-debt-journal-conflict');
-            }
-        }
-        else {
-            await anchoredAtomicWriteFile(directory, name, `${JSON.stringify(journal)}\n`);
-            await assertGitLifecyclePrivateFile(path, directory);
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c12-remote-debt-journaled', storyId: plan.storyId,
-                epicId: plan.epicId, prNumber: plan.prNumber,
-                candidateHeadSha: plan.candidateHeadSha,
-                remoteObservationDigest: plan.remoteObservationDigest,
-                reasonCodes: plan.reasonCodes, reasonCounts: plan.reasonCounts,
-                followUpDebt,
-                reused, durableObservation: true,
-                registryRecorded: false, canMerge: false, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-merge-remote-debt-uncertain');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-/** One root-owned immediate provider merge attempt. An uncertain effect is
- * never retried automatically; later calls only reconcile physical truth. */
-export async function mergeLegacyStoryPrC12(options) {
-    if (!options.authorize)
-        return fail('legacy-story-pr-merge-authorization-required');
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0
-        || !/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-pr-merge-target-invalid');
-    }
-    const sessionId = `legacy-c12-merge-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 60 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const prefix = digest(options.storyId);
-        const intent = await readC12Intent(directory, `${prefix}.c12.json`);
-        const prepared = await readC12Prepared(directory, `${prefix}.c12.prepared.json`);
-        const c11 = await readC11Journal(directory, `${prefix}.c11.accepted.json`);
-        if (!intent || !prepared || !c11)
-            return fail('legacy-story-pr-merge-not-prepared');
-        const plan = intent.plan;
-        const intentSha256 = digest(JSON.stringify(intent));
-        if (plan.storyId !== options.storyId || plan.prNumber !== options.prNumber
-            || prepared.intentSha256 !== intentSha256
-            || repository(cwd) !== plan.repository
-            || git(cwd, 'branch', '--show-current') !== plan.branch
-            || git(cwd, 'rev-parse', 'HEAD') !== prepared.candidateHeadSha
-            || c11.reviewSha256 !== plan.reviewSha256 || c11.qaSha256 !== plan.qaSha256
-            || c11.stateAfter !== plan.stateSha256 || c11.storyAfter !== plan.storySha256
-            || digest(safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024)) !== plan.stateSha256
-            || digest(safeRead(join(cwd, `docs/stories/${plan.storyId}.story.md`), 2 * 1024 * 1024)) !== plan.storySha256
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-pr-merge-prepared-drift');
-        }
-        assertC12Candidate(cwd, intent, prepared.candidateHeadSha);
-        const attemptName = `${prefix}.c12.merge-attempt.json`;
-        const mergedName = `${prefix}.c12.merged.json`;
-        const attempt = await readC12MergeAttempt(directory, attemptName);
-        const merged = await readC12Merged(directory, mergedName);
-        const merger = options.mergeProvider ?? defaultMergeProvider;
-        const rootDecision = options.rootDecision;
-        if ((!attempt || rootDecision)
-            && !validC12RootDecision(rootDecision, intent, prepared.candidateHeadSha)) {
-            return fail('legacy-story-pr-merge-root-decision-required');
-        }
-        if (attempt && (attempt.intentSha256 !== intentSha256
-            || attempt.candidateHeadSha !== prepared.candidateHeadSha
-            || (rootDecision && attempt.remoteObservationDigest !== rootDecision.remoteObservationDigest))) {
-            return fail('legacy-story-pr-merge-attempt-conflict');
-        }
-        if (merged && (!attempt || merged.intentSha256 !== intentSha256
-            || merged.candidateHeadSha !== prepared.candidateHeadSha
-            || merged.qaSha256 !== attempt.qaSha256
-            || merged.remoteObservationDigest !== attempt.remoteObservationDigest)) {
-            return fail('legacy-story-pr-merge-journal-conflict');
-        }
-        if (!attempt) {
-            if (!rootDecision)
-                return fail('legacy-story-pr-merge-root-decision-required');
-            const provider = options.provider ?? defaultProvider;
-            const current = inspectC12Intent(cwd, intent, c11, await provider.list(plan.repository, plan.branch, plan.baseBranch));
-            if (current.headSha !== prepared.candidateHeadSha
-                || current.remoteSha !== prepared.candidateHeadSha) {
-                return fail('legacy-story-pr-merge-remote-drift');
-            }
-            const firstObservation = await merger.view(plan.repository, plan.prNumber);
-            assertC12MergeObservation(plan, prepared.candidateHeadSha, firstObservation, 'OPEN');
-            assertC12DecisionRemoteRollup(firstObservation, rootDecision, intent);
-            const qaPlan = { schemaVersion: 1, kind: 'legacy-story-pr-plan',
-                storyId: plan.storyId, epicId: plan.epicId, repository: plan.repository,
-                branch: plan.branch, baseBranch: plan.baseBranch, headSha: prepared.candidateHeadSha,
-                baseSha: plan.baseSha, qaAuthority: 'root-review-required', localOnly: true };
-            let qaSha256;
-            try {
-                qaSha256 = await verifyLocalQa(qaPlan, cwd, options.verifyQa);
-            }
-            catch {
-                return fail('legacy-story-pr-merge-final-qa-failed');
-            }
-            const refreshed = inspectC12Intent(cwd, intent, c11, await provider.list(plan.repository, plan.branch, plan.baseBranch));
-            if (refreshed.headSha !== prepared.candidateHeadSha
-                || refreshed.remoteSha !== prepared.candidateHeadSha) {
-                return fail('legacy-story-pr-merge-remote-drift');
-            }
-            const finalObservation = await merger.view(plan.repository, plan.prNumber);
-            assertC12MergeObservation(plan, prepared.candidateHeadSha, finalObservation, 'OPEN');
-            const finalRemote = assertC12DecisionRemoteRollup(finalObservation, rootDecision, intent);
-            const next = { schemaVersion: 1, kind: 'legacy-story-c12-merge-attempt',
-                intentSha256, candidateHeadSha: prepared.candidateHeadSha, qaSha256,
-                remoteObservationDigest: finalRemote.digest };
-            await anchoredAtomicWriteFile(directory, attemptName, `${JSON.stringify(next)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, attemptName), directory);
-            try {
-                await merger.merge(plan.repository, plan.prNumber, prepared.candidateHeadSha);
-            }
-            catch { /* An uncertain or provider-denied attempt is reconciled below; never repeated. */ }
-            await options.afterMerge?.();
-        }
-        const currentAttempt = attempt ?? await readC12MergeAttempt(directory, attemptName);
-        if (!currentAttempt)
-            return fail('legacy-story-pr-merge-attempt-missing');
-        const observed = await merger.view(plan.repository, plan.prNumber);
-        if (observed.state !== 'MERGED')
-            return fail('legacy-story-pr-merge-effect-not-confirmed');
-        const physical = assertC12MergedPhysical(cwd, intent, prepared, observed);
-        if (merged) {
-            if (merged.mergeCommitSha !== physical.mergeCommitSha) {
-                return fail('legacy-story-pr-merge-journal-conflict');
-            }
-            git(cwd, 'merge-base', '--is-ancestor', merged.baseHeadSha, physical.baseHeadSha);
-        }
-        else {
-            const journal = { ...currentAttempt, kind: 'legacy-story-c12-merged',
-                mergeCommitSha: physical.mergeCommitSha, baseHeadSha: physical.baseHeadSha };
-            await anchoredAtomicWriteFile(directory, mergedName, `${JSON.stringify(journal)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, mergedName), directory);
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1, kind: 'legacy-story-c12-merged',
-                storyId: plan.storyId, epicId: plan.epicId, prNumber: plan.prNumber, branch: plan.branch,
-                candidateHeadSha: prepared.candidateHeadSha, mergeCommitSha: physical.mergeCommitSha,
-                baseHeadSha: physical.baseHeadSha, qaSha256: currentAttempt.qaSha256,
-                remoteObservationDigest: currentAttempt.remoteObservationDigest,
-                reused: !!merged, physicalMerge: true, checkpointAccepted: false, localOnly: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason : 'legacy-story-pr-merge-effect-uncertain');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-const defaultIssueProvider = {
-    async view(repositoryName, issueNumber) {
-        const raw = execFileSync('gh', ['issue', 'view', String(issueNumber), '--repo', repositoryName,
-            '--json', 'number,title,state,url'], { encoding: 'utf8', timeout: 15_000,
-            stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 16 * 1024 });
-        return JSON.parse(raw);
-    },
-    async close(repositoryName, issueNumber) {
-        execFileSync('gh', ['issue', 'close', String(issueNumber), '--repo', repositoryName,
-            '--reason', 'completed'], { encoding: 'utf8', timeout: 30_000,
-            stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 16 * 1024 });
-    },
-};
-function projectC12PostMergeCheckpoint(cwd, plan, nowIso) {
-    const stateBefore = gitRaw(cwd, 'show', `${plan.mergeCommitSha}:.neocortex/state.json`);
-    const storyPath = `docs/stories/${plan.storyId}.story.md`;
-    const storyBefore = gitRaw(cwd, 'show', `${plan.mergeCommitSha}:${storyPath}`);
-    if (digest(stateBefore) !== plan.stateSha256 || digest(storyBefore) !== plan.storySha256) {
-        throw new Error('legacy-story-pr-post-merge-preimage-drift');
-    }
-    const state = record(JSON.parse(stateBefore));
-    const stories = record(state?.stories);
-    const epics = record(state?.epics);
-    const story = record(stories?.[plan.storyId]);
-    const epic = record(epics?.[plan.epicId]);
-    const steps = story?.steps_completed;
-    const epicIds = epic?.stories;
-    if (!story || !epic || epic.id !== plan.epicId
-        || story.id !== plan.storyId || story.epic_id !== plan.epicId
-        || story.status !== 'pr-reviewed' || story.last_step !== GIT_LIFECYCLE_REVIEW_PR_STEP_ID
-        || story.pr_number !== plan.prNumber || story.issue_number !== plan.issueNumber
-        || story.branch_name !== `story/${plan.epicId}/${plan.storyId}`
-        || !Array.isArray(steps) || !steps.includes(GIT_LIFECYCLE_REVIEW_PR_STEP_ID)
-        || steps.includes(GIT_LIFECYCLE_MERGE_PR_STEP_ID)
-        || !Array.isArray(epicIds) || !epicIds.includes(plan.storyId)
-        || new Set(epicIds).size !== epicIds.length
-        || epicIds.some((id) => typeof id !== 'string'
-            || record(stories?.[id])?.epic_id !== plan.epicId)) {
-        throw new Error('legacy-story-pr-post-merge-state-conflict');
-    }
-    story.status = 'done';
-    story.last_step = GIT_LIFECYCLE_MERGE_PR_STEP_ID;
-    story.steps_completed = [...steps, GIT_LIFECYCLE_MERGE_PR_STEP_ID];
-    story.merged = true;
-    story.physicalMergeStatus = 'merged';
-    story.merge_commit_sha = plan.mergeCommitSha;
-    story.issue_state = 'closed';
-    const completed = epicIds.filter((id) => record(stories?.[id])?.status === 'done').length;
-    epic.total_stories = epicIds.length;
-    epic.completed_stories = completed;
-    if (completed === epicIds.length) {
-        epic.status = 'done';
-        if (epic.completed_at == null)
-            epic.completed_at = nowIso;
-    }
-    else if (epic.status === 'done') {
-        throw new Error('legacy-story-pr-post-merge-epic-conflict');
-    }
-    const stateAfter = `${JSON.stringify(state, null, 2)}\n`;
-    const frontmatter = storyBefore.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-    if (!frontmatter)
-        throw new Error('legacy-story-pr-post-merge-frontmatter-invalid');
-    const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-    const fields = record(document.toJS());
-    const stepsKeys = ['stepsCompleted', 'steps_completed'].filter((key) => document.has(key));
-    const lastKeys = ['lastStep', 'last_step'].filter((key) => document.has(key));
-    const issueKeys = ['issueNumber', 'issue_number'].filter((key) => document.has(key));
-    const prKeys = ['prNumber', 'pr_number'].filter((key) => document.has(key));
-    if (document.errors.length > 0 || document.get('id') !== plan.storyId
-        || (document.get('epic_id') ?? document.get('epic')) !== plan.epicId
-        || document.get('status') !== 'pr-reviewed'
-        || document.has('currentStatus') && document.get('currentStatus') !== 'pr-reviewed'
-        || stepsKeys.length !== 1 || lastKeys.length !== 1
-        || issueKeys.length > 1 || prKeys.length > 1
-        || JSON.stringify(fields?.[stepsKeys[0]]) !== JSON.stringify(steps)
-        || fields?.[lastKeys[0]] !== GIT_LIFECYCLE_REVIEW_PR_STEP_ID
-        || issueKeys.length === 1 && fields?.[issueKeys[0]] !== plan.issueNumber
-        || prKeys.length === 1 && fields?.[prKeys[0]] !== plan.prNumber) {
-        throw new Error('legacy-story-pr-post-merge-frontmatter-conflict');
-    }
-    document.set('status', 'done');
-    if (document.has('currentStatus'))
-        document.set('currentStatus', 'done');
-    document.set(stepsKeys[0], [...steps, GIT_LIFECYCLE_MERGE_PR_STEP_ID]);
-    document.set(lastKeys[0], GIT_LIFECYCLE_MERGE_PR_STEP_ID);
-    document.set('mergeCommitSha', plan.mergeCommitSha);
-    document.set('issueState', 'closed');
-    const storyAfter = `---\n${document.toString({ lineWidth: 0 })}---\n${storyBefore.slice(frontmatter[0].length)}`;
-    return { stateBefore, stateAfter, storyBefore, storyAfter };
-}
-/** A provider's MERGED flag is not the C12 state checkpoint. This read-only
- * preflight requires the exact merge commit at the current base HEAD, the
- * accepted C11 bytes, and the still-open same-story issue before any write. */
-export async function planLegacyStoryPrPostMergeC12(options) {
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0
-        || !/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-pr-post-merge-target-invalid');
-    }
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-pr-post-merge-checkout-invalid');
-        }
-        const commonRaw = git(cwd, 'rev-parse', '--git-common-dir');
-        const commonDir = realpathSync(isAbsolute(commonRaw) ? commonRaw : join(cwd, commonRaw));
-        const runtimeDir = join(commonDir, 'neocortex-yoloop');
-        const directory = join(runtimeDir, 'legacy-story-pr-intents');
-        if (!existsSync(runtimeDir) || !existsSync(directory)) {
-            return fail('legacy-story-pr-post-merge-not-journaled');
-        }
-        if (!lstatSync(runtimeDir).isDirectory() || realpathSync(runtimeDir) !== runtimeDir) {
-            return fail('legacy-story-pr-post-merge-runtime-unsafe');
-        }
-        await assertGitLifecyclePrivateDirectory(directory, runtimeDir);
-        const prefix = digest(options.storyId);
-        const intent = await readC12Intent(directory, `${prefix}.c12.json`);
-        const prepared = await readC12Prepared(directory, `${prefix}.c12.prepared.json`);
-        const attempt = await readC12MergeAttempt(directory, `${prefix}.c12.merge-attempt.json`);
-        const merged = await readC12Merged(directory, `${prefix}.c12.merged.json`);
-        if (!intent || !prepared || !attempt || !merged) {
-            return fail('legacy-story-pr-post-merge-not-journaled');
-        }
-        const plan = intent.plan;
-        if (plan.storyId !== options.storyId || plan.prNumber !== options.prNumber
-            || prepared.intentSha256 !== digest(JSON.stringify(intent))
-            || attempt.intentSha256 !== prepared.intentSha256
-            || merged.intentSha256 !== attempt.intentSha256
-            || attempt.candidateHeadSha !== prepared.candidateHeadSha
-            || merged.candidateHeadSha !== attempt.candidateHeadSha
-            || merged.qaSha256 !== attempt.qaSha256
-            || merged.remoteObservationDigest !== attempt.remoteObservationDigest
-            || repository(cwd) !== plan.repository
-            || git(cwd, 'branch', '--show-current') !== plan.baseBranch) {
-            return fail('legacy-story-pr-post-merge-journal-drift');
-        }
-        const headSha = git(cwd, 'rev-parse', 'HEAD');
-        if (headSha !== merged.mergeCommitSha || singleRemoteSha(cwd, plan.baseBranch) !== headSha) {
-            return fail('legacy-story-pr-post-merge-base-drift');
-        }
-        const observed = await (options.mergeProvider ?? defaultMergeProvider).view(plan.repository, plan.prNumber);
-        assertC12MergeObservation(plan, prepared.candidateHeadSha, observed, 'MERGED');
-        if (observed.mergeCommit?.oid !== merged.mergeCommitSha) {
-            return fail('legacy-story-pr-post-merge-provider-drift');
-        }
-        const parents = git(cwd, 'rev-list', '--parents', '-n', '1', headSha).split(' ');
-        if (parents.length !== 3 || parents[0] !== headSha
-            || parents[1] !== plan.baseSha || parents[2] !== prepared.candidateHeadSha) {
-            return fail('legacy-story-pr-post-merge-parents-invalid');
-        }
-        const stateRaw = gitRaw(cwd, 'show', 'HEAD:.neocortex/state.json');
-        const storyPath = `docs/stories/${plan.storyId}.story.md`;
-        const storyRaw = gitRaw(cwd, 'show', `HEAD:${storyPath}`);
-        if (digest(stateRaw) !== plan.stateSha256 || digest(storyRaw) !== plan.storySha256
-            || safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024) !== stateRaw
-            || safeRead(join(cwd, storyPath), 2 * 1024 * 1024) !== storyRaw) {
-            return fail('legacy-story-pr-post-merge-content-drift');
-        }
-        const state = record(JSON.parse(stateRaw));
-        const story = record(record(state?.stories)?.[plan.storyId]);
-        const issueNumber = story?.issue_number;
-        if (!story || story.id !== plan.storyId || story.epic_id !== plan.epicId
-            || story.status !== 'pr-reviewed' || story.last_step !== GIT_LIFECYCLE_REVIEW_PR_STEP_ID
-            || story.pr_number !== plan.prNumber || story.branch_name !== plan.branch
-            || !Array.isArray(story.steps_completed)
-            || !story.steps_completed.includes(GIT_LIFECYCLE_REVIEW_PR_STEP_ID)
-            || !Number.isSafeInteger(issueNumber) || issueNumber <= 0) {
-            return fail('legacy-story-pr-post-merge-state-invalid');
-        }
-        const frontmatter = storyRaw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-        if (!frontmatter)
-            return fail('legacy-story-pr-post-merge-frontmatter-invalid');
-        const document = parseDocument(frontmatter[1], { strict: true, uniqueKeys: true });
-        if (document.errors.length > 0 || document.get('id') !== plan.storyId
-            || (document.get('epic_id') ?? document.get('epic')) !== plan.epicId
-            || document.get('status') !== 'pr-reviewed') {
-            return fail('legacy-story-pr-post-merge-frontmatter-invalid');
-        }
-        const issue = await (options.issueProvider ?? defaultIssueProvider).view(plan.repository, issueNumber);
-        if (issue.number !== issueNumber || issue.state !== 'OPEN'
-            || issue.title !== `[YOLO] Story ${plan.storyId} - Workflow Run`
-            || issue.url.toLowerCase() !== `https://github.com/${plan.repository}/issues/${issueNumber}`.toLowerCase()) {
-            return fail('legacy-story-pr-post-merge-issue-invalid');
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c12-post-merge-plan', storyId: plan.storyId, epicId: plan.epicId,
-                repository: plan.repository, baseBranch: plan.baseBranch, prNumber: plan.prNumber,
-                issueNumber: issueNumber, candidateHeadSha: prepared.candidateHeadSha,
-                mergeCommitSha: merged.mergeCommitSha, stateSha256: plan.stateSha256,
-                storySha256: plan.storySha256,
-                nextAuthority: 'root-state-checkpoint-and-issue-closure-required',
-                checkpointAccepted: false, localOnly: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason
-            : 'legacy-story-pr-post-merge-physical-unavailable');
-    }
-}
-async function readC12PostMergeIntent(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 8192)));
-    const plan = record(value?.plan);
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c12-post-merge-intent'
-        || !plan || plan.schemaVersion !== 1 || plan.kind !== 'legacy-story-c12-post-merge-plan'
-        || typeof value.nowIso !== 'string' || !Number.isFinite(Date.parse(value.nowIso))
-        || typeof value.stateAfterSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.stateAfterSha256)
-        || typeof value.storyAfterSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.storyAfterSha256)) {
-        throw new Error('legacy-story-pr-post-merge-intent-invalid');
-    }
-    return value;
-}
-async function readC12PostMergeAccepted(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 4096)));
-    if (!value || value.schemaVersion !== 1 || value.kind !== 'legacy-story-c12-post-merge-accepted'
-        || typeof value.intentSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.intentSha256)
-        || typeof value.checkpointHeadSha !== 'string' || !/^[a-f0-9]{40}$/.test(value.checkpointHeadSha)
-        || typeof value.qaSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.qaSha256)) {
-        throw new Error('legacy-story-pr-post-merge-accepted-invalid');
-    }
-    return value;
-}
-/** Root-owned C12 terminal checkpoint. The private intent precedes issue close,
- * which is re-read on replay. A story becomes done only after an exact two-file
- * base commit, fresh P205, non-force push and provider/issue readback. */
-export async function acceptLegacyStoryPrPostMergeC12(options) {
-    if (!options.authorize)
-        return fail('legacy-story-pr-post-merge-authorization-required');
-    if (!Number.isSafeInteger(options.prNumber) || options.prNumber <= 0
-        || !/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(options.storyId)) {
-        return fail('legacy-story-pr-post-merge-target-invalid');
-    }
-    const sessionId = `legacy-c12-post-merge-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 60 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd) {
-            return fail('legacy-story-pr-post-merge-checkout-invalid');
-        }
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-story-pr-intents');
-        const prefix = digest(options.storyId);
-        const intentName = `${prefix}.c12.post-merge.json`;
-        const acceptedName = `${prefix}.c12.post-merge.accepted.json`;
-        let intent = await readC12PostMergeIntent(directory, intentName);
-        if (!intent) {
-            const planned = await planLegacyStoryPrPostMergeC12(options);
-            if (!planned.ok)
-                return planned;
-            const nowIso = new Date().toISOString();
-            const stable = projectC12PostMergeCheckpoint(cwd, planned.value, nowIso);
-            intent = { schemaVersion: 1, kind: 'legacy-story-c12-post-merge-intent',
-                plan: planned.value, nowIso,
-                stateAfterSha256: digest(stable.stateAfter),
-                storyAfterSha256: digest(stable.storyAfter) };
-            await anchoredAtomicWriteFile(directory, intentName, `${JSON.stringify(intent)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, intentName), directory);
-        }
-        const plan = intent.plan;
-        const c12Intent = await readC12Intent(directory, `${prefix}.c12.json`);
-        const prepared = await readC12Prepared(directory, `${prefix}.c12.prepared.json`);
-        const attempt = await readC12MergeAttempt(directory, `${prefix}.c12.merge-attempt.json`);
-        const merged = await readC12Merged(directory, `${prefix}.c12.merged.json`);
-        if (!c12Intent || !prepared || !attempt || !merged
-            || plan.storyId !== options.storyId || plan.prNumber !== options.prNumber
-            || plan.repository !== c12Intent.plan.repository
-            || plan.epicId !== c12Intent.plan.epicId
-            || plan.baseBranch !== c12Intent.plan.baseBranch
-            || plan.candidateHeadSha !== prepared.candidateHeadSha
-            || plan.mergeCommitSha !== merged.mergeCommitSha
-            || plan.stateSha256 !== c12Intent.plan.stateSha256
-            || plan.storySha256 !== c12Intent.plan.storySha256
-            || prepared.intentSha256 !== digest(JSON.stringify(c12Intent))
-            || attempt.intentSha256 !== prepared.intentSha256
-            || merged.intentSha256 !== attempt.intentSha256
-            || merged.qaSha256 !== attempt.qaSha256
-            || merged.remoteObservationDigest !== attempt.remoteObservationDigest
-            || repository(cwd) !== plan.repository
-            || git(cwd, 'branch', '--show-current') !== plan.baseBranch) {
-            return fail('legacy-story-pr-post-merge-intent-drift');
-        }
-        const projection = projectC12PostMergeCheckpoint(cwd, plan, intent.nowIso);
-        if (digest(projection.stateAfter) !== intent.stateAfterSha256
-            || digest(projection.storyAfter) !== intent.storyAfterSha256) {
-            return fail('legacy-story-pr-post-merge-projection-drift');
-        }
-        const observed = await (options.mergeProvider ?? defaultMergeProvider).view(plan.repository, plan.prNumber);
-        assertC12MergeObservation(c12Intent.plan, prepared.candidateHeadSha, observed, 'MERGED');
-        if (observed.mergeCommit?.oid !== plan.mergeCommitSha) {
-            return fail('legacy-story-pr-post-merge-provider-drift');
-        }
-        const parents = git(cwd, 'rev-list', '--parents', '-n', '1', plan.mergeCommitSha).split(' ');
-        if (parents.length !== 3 || parents[0] !== plan.mergeCommitSha
-            || parents[1] !== c12Intent.plan.baseSha || parents[2] !== plan.candidateHeadSha) {
-            return fail('legacy-story-pr-post-merge-parents-invalid');
-        }
-        const accepted = await readC12PostMergeAccepted(directory, acceptedName);
-        const intentSha256 = digest(JSON.stringify(intent));
-        if (accepted && accepted.intentSha256 !== intentSha256) {
-            return fail('legacy-story-pr-post-merge-accepted-conflict');
-        }
-        const baseHeadSha = git(cwd, 'rev-parse', 'HEAD');
-        let remoteSha = singleRemoteSha(cwd, plan.baseBranch);
-        if (gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-pr-post-merge-base-worktree-dirty');
-        }
-        const candidatePath = join(directory, `${prefix}.c12.post-merge.checkout`);
-        if (!existsSync(candidatePath)) {
-            execFileSync('git', ['worktree', 'add', '--detach', candidatePath,
-                accepted?.checkpointHeadSha ?? plan.mergeCommitSha], { cwd, encoding: 'utf8',
-                timeout: 60_000, stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 32 * 1024 });
-        }
-        if (!lstatSync(candidatePath).isDirectory() || realpathSync(candidatePath) !== candidatePath
-            || realpathSync(git(candidatePath, 'rev-parse', '--show-toplevel')) !== candidatePath
-            || gitCommonDirectory(candidatePath) !== gitCommonDirectory(cwd)
-            || git(candidatePath, 'branch', '--show-current') !== '') {
-            return fail('legacy-story-pr-post-merge-candidate-checkout-invalid');
-        }
-        let headSha = git(candidatePath, 'rev-parse', 'HEAD');
-        if (headSha !== plan.mergeCommitSha && (git(candidatePath, 'rev-parse', `${headSha}^`) !== plan.mergeCommitSha
-            || JSON.stringify(gitRaw(candidatePath, 'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha)
-                .split('\0').filter(Boolean).sort()) !== JSON.stringify([
-                '.neocortex/state.json', `docs/stories/${plan.storyId}.story.md`
-            ].sort())
-            || digest(gitRaw(candidatePath, 'show', `${headSha}:.neocortex/state.json`)) !== intent.stateAfterSha256
-            || digest(gitRaw(candidatePath, 'show', `${headSha}:docs/stories/${plan.storyId}.story.md`)) !== intent.storyAfterSha256
-            || !gitRaw(candidatePath, 'log', '-1', '--format=%B', headSha).split('\n').map((line) => line.trim())
-                .includes(`Neocortex-Legacy-Merge: ${plan.storyId}`))) {
-            return fail('legacy-story-pr-post-merge-checkpoint-commit-invalid');
-        }
-        if (![plan.mergeCommitSha, headSha].includes(baseHeadSha)
-            || ![plan.mergeCommitSha, headSha].includes(remoteSha)
-            || accepted && (accepted.checkpointHeadSha !== headSha || remoteSha !== headSha)) {
-            return fail('legacy-story-pr-post-merge-base-drift');
-        }
-        const status = gitRaw(candidatePath, 'status', '--porcelain=v1', '-uall').split('\n').filter(Boolean);
-        const allowed = new Set(['.neocortex/state.json', `docs/stories/${plan.storyId}.story.md`]);
-        if (headSha !== plan.mergeCommitSha && status.length > 0
-            || status.some((line) => !allowed.has(line.slice(3))
-                || ![' M', 'M ', 'MM'].includes(line.slice(0, 2)))) {
-            return fail('legacy-story-pr-post-merge-worktree-dirty');
-        }
-        const currentState = safeRead(join(candidatePath, '.neocortex/state.json'), 2 * 1024 * 1024);
-        const currentStory = safeRead(join(candidatePath, `docs/stories/${plan.storyId}.story.md`), 2 * 1024 * 1024);
-        if (![projection.stateBefore, projection.stateAfter].includes(currentState)
-            || ![projection.storyBefore, projection.storyAfter].includes(currentStory)
-            || headSha !== plan.mergeCommitSha && (currentState !== projection.stateAfter
-                || currentStory !== projection.storyAfter)) {
-            return fail('legacy-story-pr-post-merge-content-drift');
-        }
-        const issueProvider = options.issueProvider ?? defaultIssueProvider;
-        const issueIdentity = async () => {
-            const issue = await issueProvider.view(plan.repository, plan.issueNumber);
-            if (issue.number !== plan.issueNumber
-                || issue.title !== `[YOLO] Story ${plan.storyId} - Workflow Run`
-                || issue.url.toLowerCase() !== `https://github.com/${plan.repository}/issues/${plan.issueNumber}`.toLowerCase()
-                || !['OPEN', 'CLOSED'].includes(issue.state)) {
-                throw new Error('legacy-story-pr-post-merge-issue-invalid');
-            }
-            return issue.state;
-        };
-        if (accepted && await issueIdentity() !== 'CLOSED') {
-            return fail('legacy-story-pr-post-merge-accepted-issue-drift');
-        }
-        if (!accepted && baseHeadSha === plan.mergeCommitSha && remoteSha === plan.mergeCommitSha) {
-            if (status.length > 0) {
-                return fail('legacy-story-pr-post-merge-pre-issue-drift');
-            }
-            const mergedQaPlan = { schemaVersion: 1,
-                kind: 'legacy-story-pr-plan', storyId: plan.storyId, epicId: plan.epicId,
-                repository: plan.repository, branch: plan.baseBranch,
-                baseBranch: plan.baseBranch, headSha: plan.mergeCommitSha,
-                baseSha: c12Intent.plan.baseSha, qaAuthority: 'root-review-required', localOnly: true };
-            try {
-                await verifyLocalQa(mergedQaPlan, cwd, options.verifyQa);
-            }
-            catch {
-                return fail('legacy-story-pr-post-merge-pre-issue-qa-failed');
-            }
-            if (git(cwd, 'rev-parse', 'HEAD') !== plan.mergeCommitSha
-                || singleRemoteSha(cwd, plan.baseBranch) !== plan.mergeCommitSha
-                || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-                return fail('legacy-story-pr-post-merge-pre-issue-drift');
-            }
-        }
-        if (headSha === plan.mergeCommitSha) {
-            if (currentState === projection.stateBefore) {
-                await anchoredCompareAndSwapFile(join(candidatePath, '.neocortex'), 'state.json', projection.stateAfter, digest(projection.stateBefore));
-            }
-            if (currentStory === projection.storyBefore) {
-                await anchoredCompareAndSwapFile(join(candidatePath, 'docs/stories'), `${plan.storyId}.story.md`, projection.storyAfter, digest(projection.storyBefore));
-            }
-            if (safeRead(join(candidatePath, '.neocortex/state.json'), 2 * 1024 * 1024) !== projection.stateAfter
-                || safeRead(join(candidatePath, `docs/stories/${plan.storyId}.story.md`), 2 * 1024 * 1024) !== projection.storyAfter) {
-                return fail('legacy-story-pr-post-merge-write-drift');
-            }
-            git(candidatePath, 'add', '--', '.neocortex/state.json', `docs/stories/${plan.storyId}.story.md`);
-            const staged = gitRaw(candidatePath, 'diff', '--cached', '--name-only', '-z').split('\0').filter(Boolean).sort();
-            if (JSON.stringify(staged) !== JSON.stringify([...allowed].sort())
-                || gitRaw(candidatePath, 'diff', '--name-only', '-z') !== '') {
-                return fail('legacy-story-pr-post-merge-staged-scope-invalid');
-            }
-            git(candidatePath, 'diff', '--cached', '--check');
-            git(candidatePath, 'commit', '-m', `chore(story): accept merged PR ${plan.storyId}`, '-m', `Neocortex-Legacy-Merge: ${plan.storyId}`);
-            headSha = git(candidatePath, 'rev-parse', 'HEAD');
-            await options.afterCommit?.();
-        }
-        if (gitRaw(candidatePath, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-pr-post-merge-worktree-dirty');
-        }
-        const qaPlan = { schemaVersion: 1, kind: 'legacy-story-pr-plan',
-            storyId: plan.storyId, epicId: plan.epicId, repository: plan.repository,
-            branch: plan.baseBranch, baseBranch: plan.baseBranch,
-            headSha, baseSha: plan.mergeCommitSha, qaAuthority: 'root-review-required', localOnly: true };
-        let qaSha256 = accepted?.qaSha256;
-        if (!qaSha256) {
-            // A detached Git worktree has no node_modules. P205 also runs commands
-            // from the server, portal, admin and landing package roots. Materialize
-            // their pinned dependencies inside this private candidate only; never
-            // replace the operator's base checkout dependencies for checkpoint QA.
-            if (!options.verifyQa) {
-                try {
-                    installP205CandidateDependencies(candidatePath);
-                }
-                catch (error) {
-                    return fail(error instanceof Error && error.message.endsWith('-missing')
-                        ? 'legacy-story-pr-post-merge-dependencies-missing'
-                        : 'legacy-story-pr-post-merge-dependencies-failed');
-                }
-            }
-            try {
-                qaSha256 = await verifyLocalQa(qaPlan, candidatePath, options.verifyQa);
-            }
-            catch {
-                return fail('legacy-story-pr-post-merge-qa-failed');
-            }
-        }
-        if (git(candidatePath, 'rev-parse', 'HEAD') !== headSha
-            || gitRaw(candidatePath, 'status', '--porcelain=v1', '-uall') !== ''
-            || git(cwd, 'rev-parse', 'HEAD') !== baseHeadSha
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-story-pr-post-merge-final-drift');
-        }
-        if (await issueIdentity() === 'OPEN') {
-            if (singleRemoteSha(cwd, plan.baseBranch) !== plan.mergeCommitSha) {
-                return fail('legacy-story-pr-post-merge-pre-issue-drift');
-            }
-            await issueProvider.close(plan.repository, plan.issueNumber);
-            await options.afterIssueClose?.();
-        }
-        if (await issueIdentity() !== 'CLOSED')
-            return fail('legacy-story-pr-post-merge-issue-not-closed');
-        const finalObserved = await (options.mergeProvider ?? defaultMergeProvider).view(plan.repository, plan.prNumber);
-        assertC12MergeObservation(c12Intent.plan, prepared.candidateHeadSha, finalObserved, 'MERGED');
-        if (finalObserved.mergeCommit?.oid !== plan.mergeCommitSha) {
-            return fail('legacy-story-pr-post-merge-provider-drift');
-        }
-        remoteSha = singleRemoteSha(cwd, plan.baseBranch);
-        if (remoteSha === plan.mergeCommitSha) {
-            git(cwd, 'push', '--porcelain', 'origin', `${headSha}:refs/heads/${plan.baseBranch}`);
-        }
-        if (singleRemoteSha(cwd, plan.baseBranch) !== headSha) {
-            return fail('legacy-story-pr-post-merge-push-unverified');
-        }
-        await options.afterPush?.();
-        if (git(cwd, 'rev-parse', 'HEAD') === plan.mergeCommitSha) {
-            git(cwd, 'merge', '--ff-only', headSha);
-        }
-        if (git(cwd, 'rev-parse', 'HEAD') !== headSha
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== ''
-            || safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024) !== projection.stateAfter
-            || safeRead(join(cwd, `docs/stories/${plan.storyId}.story.md`), 2 * 1024 * 1024) !== projection.storyAfter) {
-            return fail('legacy-story-pr-post-merge-base-readback-invalid');
-        }
-        const next = { schemaVersion: 1,
-            kind: 'legacy-story-c12-post-merge-accepted', intentSha256,
-            checkpointHeadSha: headSha, qaSha256 };
-        if (accepted && JSON.stringify(accepted) !== JSON.stringify(next)) {
-            return fail('legacy-story-pr-post-merge-accepted-conflict');
-        }
-        if (!accepted) {
-            await anchoredAtomicWriteFile(directory, acceptedName, `${JSON.stringify(next)}\n`);
-            await assertGitLifecyclePrivateFile(join(directory, acceptedName), directory);
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-story-c12-post-merge-accepted', storyId: plan.storyId,
-                epicId: plan.epicId, prNumber: plan.prNumber, issueNumber: plan.issueNumber,
-                mergeCommitSha: plan.mergeCommitSha, checkpointHeadSha: headSha, qaSha256,
-                reused: Boolean(accepted), physicalMerge: true, issueClosed: true,
-                checkpointAccepted: true, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-story-pr-') ? reason
-            : reason.includes('secure-filesystem-cas-conflict') ? 'legacy-story-pr-post-merge-write-raced'
-                : 'legacy-story-pr-post-merge-effect-uncertain');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
-async function verifyLegacyTerminalStory(options) {
-    const { cwd, directory, storyId, epicId, repository: repo, baseBranch } = options;
-    const prefix = digest(storyId);
-    const c12Intent = await readC12Intent(directory, `${prefix}.c12.json`);
-    const prepared = await readC12Prepared(directory, `${prefix}.c12.prepared.json`);
-    const attempt = await readC12MergeAttempt(directory, `${prefix}.c12.merge-attempt.json`);
-    const merged = await readC12Merged(directory, `${prefix}.c12.merged.json`);
-    const postIntent = await readC12PostMergeIntent(directory, `${prefix}.c12.post-merge.json`);
-    const accepted = await readC12PostMergeAccepted(directory, `${prefix}.c12.post-merge.accepted.json`);
-    if (!c12Intent || !prepared || !attempt || !merged || !postIntent || !accepted) {
-        return fail('legacy-epic-terminal-story-receipt-missing');
-    }
-    const plan = c12Intent.plan;
-    const postPlan = postIntent.plan;
-    if (plan.storyId !== storyId || plan.epicId !== epicId || plan.repository !== repo
-        || plan.baseBranch !== baseBranch || postPlan.storyId !== storyId
-        || postPlan.epicId !== epicId || postPlan.repository !== repo
-        || postPlan.baseBranch !== baseBranch || postPlan.prNumber !== plan.prNumber
-        || postPlan.candidateHeadSha !== prepared.candidateHeadSha
-        || postPlan.mergeCommitSha !== merged.mergeCommitSha
-        || postPlan.stateSha256 !== plan.stateSha256
-        || postPlan.storySha256 !== plan.storySha256
-        || prepared.intentSha256 !== digest(JSON.stringify(c12Intent))
-        || attempt.intentSha256 !== prepared.intentSha256
-        || merged.intentSha256 !== attempt.intentSha256
-        || attempt.candidateHeadSha !== prepared.candidateHeadSha
-        || merged.candidateHeadSha !== attempt.candidateHeadSha
-        || merged.qaSha256 !== attempt.qaSha256
-        || merged.remoteObservationDigest !== attempt.remoteObservationDigest
-        || accepted.intentSha256 !== digest(JSON.stringify(postIntent))) {
-        return fail('legacy-epic-terminal-story-receipt-drift');
-    }
-    const checkpointHeadSha = accepted.checkpointHeadSha;
-    const checkpointParent = git(cwd, 'rev-parse', `${checkpointHeadSha}^`);
-    const mergeParents = git(cwd, 'rev-list', '--parents', '-n', '1', merged.mergeCommitSha).split(' ');
-    const changed = gitRaw(cwd, 'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', checkpointHeadSha)
-        .split('\0').filter(Boolean).sort();
-    const storyPath = `docs/stories/${storyId}.story.md`;
-    if (checkpointParent !== merged.mergeCommitSha
-        || mergeParents.length !== 3 || mergeParents[0] !== merged.mergeCommitSha
-        || mergeParents[1] !== plan.baseSha || mergeParents[2] !== prepared.candidateHeadSha
-        || JSON.stringify(changed) !== JSON.stringify(['.neocortex/state.json', storyPath].sort())
-        || !gitRaw(cwd, 'log', '-1', '--format=%B', checkpointHeadSha).split('\n')
-            .map((line) => line.trim()).includes(`Neocortex-Legacy-Merge: ${storyId}`)) {
-        return fail('legacy-epic-terminal-story-git-drift');
-    }
-    if (!options.firstParentHeads.has(checkpointHeadSha)) {
-        return fail('legacy-epic-terminal-story-not-on-base');
-    }
-    const stateRaw = gitRaw(cwd, 'show', `${checkpointHeadSha}:.neocortex/state.json`);
-    const storyRaw = gitRaw(cwd, 'show', `${checkpointHeadSha}:${storyPath}`);
-    if (digest(stateRaw) !== postIntent.stateAfterSha256
-        || digest(storyRaw) !== postIntent.storyAfterSha256) {
-        return fail('legacy-epic-terminal-story-checkpoint-drift');
-    }
-    const state = record(JSON.parse(stateRaw));
-    const story = record(record(state?.stories)?.[storyId]);
-    const frontmatter = storyRaw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);
-    const document = frontmatter ? parseDocument(frontmatter[1], { strict: true, uniqueKeys: true }) : null;
-    const fields = document ? record(document.toJS()) : null;
-    const stepsKeys = ['stepsCompleted', 'steps_completed'].filter((key) => document?.has(key));
-    const lastKeys = ['lastStep', 'last_step'].filter((key) => document?.has(key));
-    if (!story || story.id !== storyId || story.epic_id !== epicId
-        || story.status !== 'done' || story.last_step !== GIT_LIFECYCLE_MERGE_PR_STEP_ID
-        || !Array.isArray(story.steps_completed)
-        || !story.steps_completed.includes(GIT_LIFECYCLE_MERGE_PR_STEP_ID)
-        || story.pr_number !== plan.prNumber || story.issue_number !== postPlan.issueNumber
-        || story.issue_state !== 'closed' || story.merged !== true
-        || story.physicalMergeStatus !== 'merged'
-        || story.merge_commit_sha !== merged.mergeCommitSha
-        || story.branch_name !== `story/${epicId}/${storyId}`
-        || !document || document.errors.length > 0 || document.get('id') !== storyId
-        || (document.get('epic_id') ?? document.get('epic')) !== epicId
-        || document.get('status') !== 'done'
-        || document.has('currentStatus') && document.get('currentStatus') !== 'done'
-        || stepsKeys.length !== 1 || lastKeys.length !== 1
-        || JSON.stringify(fields?.[stepsKeys[0]]) !== JSON.stringify(story.steps_completed)
-        || fields?.[lastKeys[0]] !== GIT_LIFECYCLE_MERGE_PR_STEP_ID
-        || fields?.mergeCommitSha !== merged.mergeCommitSha
-        || fields?.issueState !== 'closed') {
-        return fail('legacy-epic-terminal-story-state-drift');
-    }
-    const observed = await options.mergeProvider.view(repo, plan.prNumber);
-    assertC12MergeObservation(plan, prepared.candidateHeadSha, observed, 'MERGED');
-    if (observed.mergeCommit?.oid !== merged.mergeCommitSha) {
-        return fail('legacy-epic-terminal-story-provider-drift');
-    }
-    const issue = await options.issueProvider.view(repo, postPlan.issueNumber);
-    if (issue.number !== postPlan.issueNumber || issue.state !== 'CLOSED'
-        || issue.title !== `[YOLO] Story ${storyId} - Workflow Run`
-        || issue.url.toLowerCase() !== `https://github.com/${repo}/issues/${postPlan.issueNumber}`.toLowerCase()) {
-        return fail('legacy-epic-terminal-story-issue-drift');
-    }
-    return { ok: true, value: Object.freeze({ storyId, checkpointHeadSha,
-            storyRowSha256: digest(JSON.stringify(story)), storyDocumentSha256: digest(storyRaw),
-            qaSha256: accepted.qaSha256 }) };
-}
-/** Read-only, root-owned precursor for legacy epic accounting. It proves all
- * accepted C12 checkpoints at the exact pushed base HEAD but never frees quota
- * or declares the server workflow complete. A later accounting transaction must
- * independently revalidate this basis at its own effect boundary. */
-export async function planLegacyEpicFinalization(options) {
-    if (!/^P[0-9]+$/.test(options.epicId))
-        return fail('legacy-epic-terminal-target-invalid');
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        if (realpathSync(git(cwd, 'rev-parse', '--show-toplevel')) !== cwd
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-epic-terminal-checkout-invalid');
-        }
-        for (const directory of ['.neocortex', 'docs', 'docs/stories']) {
-            const path = join(cwd, directory);
-            if (!existsSync(path) || !lstatSync(path).isDirectory() || realpathSync(path) !== path) {
-                return fail('legacy-epic-terminal-checkout-unsafe');
-            }
-        }
-        const stateRaw = gitRaw(cwd, 'show', 'HEAD:.neocortex/state.json');
-        if (safeRead(join(cwd, '.neocortex/state.json'), 2 * 1024 * 1024) !== stateRaw) {
-            return fail('legacy-epic-terminal-state-drift');
-        }
-        const state = record(JSON.parse(stateRaw));
-        const epics = record(state?.epics);
-        const stories = record(state?.stories);
-        const epic = record(epics?.[options.epicId]);
-        const config = record(state?.config);
-        const storyIds = epic?.stories;
-        const baseBranch = config?.default_branch;
-        if (!epic || epic.id !== options.epicId || epic.branch_mode !== 'story'
-            || epic.status !== 'done' || !Array.isArray(storyIds)
-            || storyIds.length === 0 || storyIds.length > 128
-            || new Set(storyIds).size !== storyIds.length
-            || storyIds.some((id) => typeof id !== 'string' || !/^P[0-9]+\.[0-9]+(?:\.[0-9]+)*$/.test(id))
-            || !stories || Object.entries(stories).some(([id, value]) => record(value)?.epic_id === options.epicId && !storyIds.includes(id))
-            || epic.total_stories !== storyIds.length || epic.completed_stories !== storyIds.length
-            || typeof baseBranch !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(baseBranch)
-            || git(cwd, 'branch', '--show-current') !== baseBranch) {
-            return fail('legacy-epic-terminal-topology-invalid');
-        }
-        const repo = repository(cwd);
-        const baseHeadSha = git(cwd, 'rev-parse', 'HEAD');
-        if (singleRemoteSha(cwd, baseBranch) !== baseHeadSha) {
-            return fail('legacy-epic-terminal-base-not-pushed');
-        }
-        const runtimeDir = join(gitCommonDirectory(cwd), 'neocortex-yoloop');
-        const directory = join(runtimeDir, 'legacy-story-pr-intents');
-        if (!existsSync(runtimeDir) || !existsSync(directory)
-            || !lstatSync(runtimeDir).isDirectory() || realpathSync(runtimeDir) !== runtimeDir) {
-            return fail('legacy-epic-terminal-receipts-missing');
-        }
-        await assertGitLifecyclePrivateDirectory(directory, runtimeDir);
-        const firstParentHeads = new Set(git(cwd, 'rev-list', '--first-parent', '--max-count=4096', baseHeadSha)
-            .split('\n').filter(Boolean));
-        const verified = [];
-        for (const storyId of storyIds) {
-            const result = await verifyLegacyTerminalStory({ cwd, directory, storyId,
-                epicId: options.epicId, repository: repo, baseBranch, firstParentHeads,
-                mergeProvider: options.mergeProvider ?? defaultMergeProvider,
-                issueProvider: options.issueProvider ?? defaultIssueProvider });
-            if (!result.ok)
-                return result;
-            const current = record(stories[storyId]);
-            const currentDocument = safeRead(join(cwd, `docs/stories/${storyId}.story.md`), 2 * 1024 * 1024);
-            if (!current || digest(JSON.stringify(current)) !== result.value.storyRowSha256
-                || digest(currentDocument) !== result.value.storyDocumentSha256) {
-                return fail('legacy-epic-terminal-story-current-drift');
-            }
-            verified.push(result.value);
-        }
-        if (!verified.some((item) => item.checkpointHeadSha === baseHeadSha)
-            || git(cwd, 'rev-parse', 'HEAD') !== baseHeadSha
-            || singleRemoteSha(cwd, baseBranch) !== baseHeadSha
-            || gitRaw(cwd, 'status', '--porcelain=v1', '-uall') !== '') {
-            return fail('legacy-epic-terminal-base-final-drift');
-        }
-        return { ok: true, value: Object.freeze({ schemaVersion: 1,
-                kind: 'legacy-epic-terminal-plan', epicId: options.epicId,
-                repositorySha256: digest(repo), baseBranchSha256: digest(baseBranch),
-                baseHeadSha, storyCount: verified.length,
-                storyEvidenceSha256: digest(JSON.stringify(verified)),
-                physicalStoriesVerified: true, quotaReleaseAuthorized: false,
-                checkpointAccepted: false, localOnly: true, publicSafe: true }) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-epic-terminal-') ? reason
-            : 'legacy-epic-terminal-physical-unavailable');
-    }
-}
-async function readLegacyEpicTerminalJournal(directory, name) {
-    const path = join(directory, name);
-    if (!existsSync(path))
-        return null;
-    await assertGitLifecyclePrivateFile(path, directory);
-    const value = record(JSON.parse(safeRead(path, 4096)));
-    if (!value || Object.keys(value).sort().join(',') !== [
-        'schemaVersion', 'kind', 'epicId', 'planSha256', 'baseHeadSha', 'qaEvidenceDigest', 'acceptedAt',
-    ].sort().join(',') || value.schemaVersion !== 1 || value.kind !== 'legacy-epic-terminal-root-accepted'
-        || typeof value.epicId !== 'string' || !/^P[0-9]+$/.test(value.epicId)
-        || typeof value.planSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.planSha256)
-        || typeof value.baseHeadSha !== 'string' || !/^[a-f0-9]{40}$/.test(value.baseHeadSha)
-        || typeof value.qaEvidenceDigest !== 'string' || !/^[a-f0-9]{64}$/.test(value.qaEvidenceDigest)
-        || typeof value.acceptedAt !== 'string' || !Number.isFinite(Date.parse(value.acceptedAt))) {
-        throw new Error('legacy-epic-terminal-journal-invalid');
-    }
-    return value;
-}
-function projectLegacyEpicTerminalAcceptance(plan, journal, reused) {
-    return Object.freeze({ schemaVersion: 1, kind: 'legacy-epic-terminal-root-accepted',
-        epicId: plan.epicId, baseHeadSha: plan.baseHeadSha, storyCount: plan.storyCount,
-        planSha256: journal.planSha256, qaEvidenceDigest: journal.qaEvidenceDigest, reused,
-        rootAcceptanceRecorded: true, quotaReleaseAuthorized: false,
-        serverAccountingAccepted: false, localOnly: true, publicSafe: true });
-}
-/** Rechecks the physical C12 chain before projecting a private root QA record.
- * This is local evidence only; the server must independently bind a future
- * quota transaction to fresh physical truth at its own effect boundary. */
-export async function readLegacyEpicTerminalAcceptance(options) {
-    const planned = await planLegacyEpicFinalization(options);
-    if (!planned.ok)
-        return planned;
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        const runtimeDir = join(gitCommonDirectory(cwd), 'neocortex-yoloop');
-        const directory = join(runtimeDir, 'legacy-epic-terminal');
-        if (!existsSync(directory))
-            return fail('legacy-epic-terminal-acceptance-missing');
-        await assertGitLifecyclePrivateDirectory(directory, runtimeDir);
-        const journal = await readLegacyEpicTerminalJournal(directory, `${digest(options.epicId)}.accepted.json`);
-        if (!journal)
-            return fail('legacy-epic-terminal-acceptance-missing');
-        if (journal.epicId !== options.epicId || journal.baseHeadSha !== planned.value.baseHeadSha
-            || journal.planSha256 !== digest(JSON.stringify(planned.value))) {
-            return fail('legacy-epic-terminal-acceptance-drift');
-        }
-        const final = await planLegacyEpicFinalization(options);
-        if (!final.ok || digest(JSON.stringify(final.value)) !== journal.planSha256) {
-            return fail('legacy-epic-terminal-acceptance-drift');
-        }
-        return { ok: true, value: projectLegacyEpicTerminalAcceptance(final.value, journal, true) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-epic-terminal-') ? reason
-            : 'legacy-epic-terminal-acceptance-unavailable');
-    }
-}
-/** Explicit root acceptance runs fresh P205 on the exact pushed terminal HEAD
- * and persists only a private digest-bound local record. No server accounting
- * or quota effect is implied by this function or its public projection. */
-export async function acceptLegacyEpicFinalization(options) {
-    if (!options.authorize)
-        return fail('legacy-epic-terminal-authorization-required');
-    if (!/^P[0-9]+$/.test(options.epicId))
-        return fail('legacy-epic-terminal-target-invalid');
-    const sessionId = `legacy-epic-terminal-${randomBytes(16).toString('hex')}`;
-    const lock = await acquireGitLifecyclePhysicalIntegrationLock(options.projectRoot, {
-        kind: 'direct', storyId: options.epicId, sessionId, idempotencyKey: sessionId,
-        expiresAt: new Date(Date.now() + 60 * 60_000).toISOString(), persistent: false,
-    });
-    if (!lock.ok)
-        return fail(lock.reasonCode);
-    try {
-        const cwd = realpathSync(options.projectRoot);
-        const planned = await planLegacyEpicFinalization(options);
-        if (!planned.ok)
-            return planned;
-        const directory = await ensureGitLifecyclePrivateChildDirectory(await gitLifecycleRuntimeDirectory(cwd), 'legacy-epic-terminal');
-        const name = `${digest(options.epicId)}.accepted.json`;
-        const planSha256 = digest(JSON.stringify(planned.value));
-        const existing = await readLegacyEpicTerminalJournal(directory, name);
-        if (existing) {
-            if (existing.epicId !== options.epicId || existing.baseHeadSha !== planned.value.baseHeadSha
-                || existing.planSha256 !== planSha256)
-                return fail('legacy-epic-terminal-acceptance-conflict');
-            const final = await planLegacyEpicFinalization(options);
-            if (!final.ok || digest(JSON.stringify(final.value)) !== planSha256) {
-                return fail('legacy-epic-terminal-acceptance-drift');
-            }
-            return { ok: true, value: projectLegacyEpicTerminalAcceptance(final.value, existing, true) };
-        }
-        let qaEvidenceDigest;
-        try {
-            if (options.verifyQa)
-                qaEvidenceDigest = await options.verifyQa(planned.value);
-            else {
-                const authority = await executeP205TransientAuthority(cwd, {
-                    headSha: planned.value.baseHeadSha,
-                    graphRevision: digest(`legacy-epic-terminal\0${planSha256}`),
-                });
-                const evidence = projectP205TransientExecutionEvidence(authority);
-                if (!evidence || evidence.executionHeadSha !== planned.value.baseHeadSha) {
-                    return fail('legacy-epic-terminal-qa-invalid');
-                }
-                qaEvidenceDigest = evidence.executionEvidenceDigest;
-            }
-        }
-        catch {
-            return fail('legacy-epic-terminal-qa-failed');
-        }
-        if (!/^[a-f0-9]{64}$/.test(qaEvidenceDigest))
-            return fail('legacy-epic-terminal-qa-invalid');
-        const refreshed = await planLegacyEpicFinalization(options);
-        if (!refreshed.ok || digest(JSON.stringify(refreshed.value)) !== planSha256) {
-            return fail('legacy-epic-terminal-post-qa-drift');
-        }
-        const journal = { schemaVersion: 1,
-            kind: 'legacy-epic-terminal-root-accepted', epicId: options.epicId,
-            planSha256, baseHeadSha: planned.value.baseHeadSha, qaEvidenceDigest,
-            acceptedAt: new Date().toISOString() };
-        await anchoredAtomicWriteFile(directory, name, `${JSON.stringify(journal)}\n`);
-        const readback = await readLegacyEpicTerminalJournal(directory, name);
-        if (!readback || JSON.stringify(readback) !== JSON.stringify(journal)) {
-            return fail('legacy-epic-terminal-acceptance-write-raced');
-        }
-        const final = await planLegacyEpicFinalization(options);
-        if (!final.ok || digest(JSON.stringify(final.value)) !== planSha256) {
-            return fail('legacy-epic-terminal-post-accept-drift');
-        }
-        return { ok: true, value: projectLegacyEpicTerminalAcceptance(final.value, journal, false) };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : '';
-        return fail(reason.startsWith('legacy-epic-terminal-') ? reason
-            : 'legacy-epic-terminal-acceptance-unavailable');
-    }
-    finally {
-        await releaseGitLifecyclePhysicalIntegrationLock(lock.path, lock.owner).catch(() => undefined);
-    }
-}
+import{execFileSync as Q}from"node:child_process";import{createHash as Qe,randomBytes as re}from"node:crypto";import{closeSync as gt,constants as Ye,existsSync as H,fstatSync as mt,lstatSync as W,mkdirSync as St,mkdtempSync as wt,openSync as bt,readFileSync as vt,realpathSync as D,rmdirSync as It,unlinkSync as At,writeFileSync as Nt}from"node:fs";import{tmpdir as $t}from"node:os";import{isAbsolute as Pe,join as A}from"node:path";import{parseDocument as ae}from"yaml";import{projectC12ScopedCiFollowUpDebt as _e,summarizeC12RemoteRollup as fe}from"../../../shared/dist/merge-readiness/c12-remote-observation.js";import{projectC12ScopedCiRegistryUpdate as Re}from"../../../shared/dist/merge-readiness/c12-registry-projection.js";import{resolveBranchUnit as qe}from"../../../shared/dist/yoloop/branch-unit.js";import{acquireGitLifecyclePhysicalIntegrationLock as se,assertGitLifecyclePrivateDirectory as je,assertGitLifecyclePrivateFile as P,ensureGitLifecyclePrivateChildDirectory as T,gitLifecycleRuntimeDirectory as G,releaseGitLifecyclePhysicalIntegrationLock as oe}from"./git-lifecycle-store.js";import{anchoredAtomicWriteFile as L,anchoredCompareAndSwapFile as Y}from"./secure-filesystem-boundary.js";import{GIT_LIFECYCLE_CREATE_PR_STEP_ID as ie,GIT_LIFECYCLE_MERGE_PR_STEP_ID as ye,GIT_LIFECYCLE_REVIEW_PR_STEP_ID as ne,GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID as U,GIT_LIFECYCLE_SYNC_MAIN_STEP_ID as Z,GIT_LIFECYCLE_UPDATE_PROJECT_MEMORY_STEP_ID as ge}from"./git-lifecycle-step-ids.js";import{executeP205TransientAuthority as ze,projectP205TransientExecutionEvidence as Le}from"./git-lifecycle-store.js";import{readCompletedLegacyStoryBranchPlan as Ot}from"./legacy-story-branch-setup.js";function n(t){return{ok:!1,reasonCode:t}}function S(t){return t&&typeof t=="object"&&!Array.isArray(t)?t:null}function g(t,...r){return Q("git",r,{cwd:t,encoding:"utf8",timeout:15e3,stdio:["ignore","pipe","pipe"],maxBuffer:2*1024*1024}).trim()}function v(t,...r){return Q("git",r,{cwd:t,encoding:"utf8",timeout:15e3,stdio:["ignore","pipe","pipe"],maxBuffer:2*1024*1024})}function E(t,r){const a=bt(t,Ye.O_RDONLY|(Ye.O_NOFOLLOW??0));try{const e=mt(a);if(!e.isFile()||e.size>r)throw new Error("legacy-story-pr-file-unsafe");return vt(a,"utf8")}finally{gt(a)}}function z(t,r){const a=g(t,"ls-remote","--heads","origin",`refs/heads/${r}`).split(`
+`).filter(Boolean);if(a.length!==1)throw new Error("legacy-story-pr-remote-ref-missing");const e=a[0].match(/^([a-f0-9]{40})\s+refs\/heads\/(.+)$/);if(!e||e[2]!==r)throw new Error("legacy-story-pr-remote-ref-invalid");return e[1]}function X(t){const a=g(t,"config","--get","remote.origin.url").match(/^(?:https:\/\/github\.com\/|git@github\.com:)([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+?)(?:\.git)?$/);if(!a||a[1].includes("..")||a[2].includes(".."))throw new Error("legacy-story-pr-repository-invalid");return`${a[1]}/${a[2]}`}function me(t){const r=g(t,"rev-parse","--git-common-dir");return D(Pe(r)?r:A(t,r))}function Se(t,r){if(!Array.isArray(r)||r.length>=100)throw new Error("legacy-story-pr-list-incomplete");const a=r.filter(s=>s.headRefName===t.branch);if(a.length>1||a.some(s=>s.state!=="OPEN"||s.baseRefName!==t.baseBranch||s.headRefOid!==t.headSha))throw new Error("legacy-story-pr-provider-conflict");const e=a[0];if(!e)return null;if(!Number.isSafeInteger(e.number)||e.number<=0||e.url.toLowerCase()!==`https://github.com/${t.repository}/pull/${e.number}`.toLowerCase())throw new Error("legacy-story-pr-provider-invalid");return e}async function kt(t,r){const a=await T(await G(t),"legacy-story-pr-intents"),e=`${Qe("sha256").update(r.storyId).digest("hex")}.json`,s=A(a,e),o={schemaVersion:1,kind:"legacy-story-pr-create-attempt",storyId:r.storyId,epicId:r.epicId,repository:r.repository,branch:r.branch,baseBranch:r.baseBranch,headSha:r.headSha};if(H(s)){if(await P(s,a),E(s,4096)!==`${JSON.stringify(o)}
+`)throw new Error("legacy-story-pr-attempt-conflict");return!1}return await L(a,e,`${JSON.stringify(o)}
+`),await P(s,a),!0}function Ct(t){if(!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-commit-target-invalid");try{const r=D(t.projectRoot);if(D(g(r,"rev-parse","--show-toplevel"))!==r||v(r,"diff","--name-only","-z")!==""||v(r,"ls-files","--others","--exclude-standard","-z")!=="")return n("legacy-story-commit-checkout-invalid");const a=v(r,"diff","--cached","--name-only","-z").split("\0").filter(Boolean);if(a.length===0||new Set(a).size!==a.length||a.some(C=>C.length>1024||C.startsWith("/")||C.includes("\\")||C.includes("\0")||C.split("/").includes("..")||C===".git"||C.startsWith(".git/")))return n("legacy-story-commit-write-set-invalid");if(v(r,"ls-files","-u","-z")!==""||a.some(C=>{const V=v(r,"ls-files","-s","-z","--",C).split("\0").filter(Boolean);return V.length>1||V.some(te=>{const K=te.match(/^(100644|100755) [a-f0-9]{40} 0\t(.+)$/);return!K||K[2]!==C})}))return n("legacy-story-commit-index-unsafe");g(r,"diff","--cached","--check");const e=v(r,"show",":.neocortex/state.json"),s=`docs/stories/${t.storyId}.story.md`,o=v(r,"show",`:${s}`);if(E(A(r,".neocortex/state.json"),2*1024*1024)!==e||E(A(r,s),2*1024*1024)!==o)return n("legacy-story-commit-preimage-drift");const l=S(JSON.parse(e)),p=S(l?.stories),y=S(p?.[t.storyId]),i=y?.epic_id,d=typeof i=="string"?S(S(l?.epics)?.[i]):null,c=d?.stories;if(!y||y.id!==t.storyId||typeof i!="string"||!d||d.id!==i||d.branch_mode==="epic"||y.status!=="memory-updated"||y.last_step!==ge||!Array.isArray(y.steps_completed)||!y.steps_completed.includes(ge)||y.steps_completed.includes(U)||!Number.isSafeInteger(y.issue_number)||y.issue_number<=0||!Array.isArray(c)||c.length===0||new Set(c).size!==c.length||!c.includes(t.storyId)||c.some(C=>typeof C!="string"||S(p?.[C])?.epic_id!==i)||Object.entries(p??{}).some(([C,V])=>S(V)?.epic_id===i&&!c.includes(C)))return n("legacy-story-commit-state-invalid");const b=qe(d,c.map(C=>({...S(p?.[C]),id:C}))),w=`story/${i}/${t.storyId}`,f=S(l?.config)?.default_branch;if(b.mode!=="story"||y.branch_name!==w||g(r,"branch","--show-current")!==w||typeof f!="string"||f===w||g(r,"check-ref-format","--branch",f)!==f)return n("legacy-story-commit-branch-invalid");const m=S(JSON.parse(v(r,"show","HEAD:.neocortex/state.json"))),u=S(S(m?.stories)?.[t.storyId]),I=Array.isArray(u?.files_to_modify)?u.files_to_modify:null;if(!I||I.length===0||new Set(I).size!==I.length||u?.epic_id!==i||JSON.stringify(y.files_to_modify)!==JSON.stringify(I)||I.some(C=>typeof C!="string"||C.length>1024||C.startsWith("/")||C.includes("\\")||C.split("/").includes("..")||C===".git"||C.startsWith(".git/"))||!a.every(C=>I.includes(C))||!a.includes(".neocortex/state.json")||!a.includes(s)||!I.includes(".neocortex/state.json")||!I.includes(s))return n("legacy-story-commit-write-set-unauthorized");const N=o.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!N)return n("legacy-story-commit-frontmatter-invalid");const O=ae(N[1],{strict:!0,uniqueKeys:!0}),_=S(O.toJS()),$=["stepsCompleted","steps_completed"].filter(C=>O.has(C)),k=["lastStep","last_step"].filter(C=>O.has(C)),j=["branchName","branch_name"].filter(C=>O.has(C)),B=["issueNumber","issue_number"].filter(C=>O.has(C));if(O.errors.length>0||O.get("id")!==t.storyId||(O.get("epic_id")??O.get("epic"))!==i||O.get("status")!=="memory-updated"||O.has("currentStatus")&&O.get("currentStatus")!=="memory-updated"||$.length!==1||k.length!==1||j.length!==1||B.length!==1||JSON.stringify(_?.[$[0]])!==JSON.stringify(y.steps_completed)||_?.[k[0]]!==ge||_?.[j[0]]!==w||_?.[B[0]]!==y.issue_number)return n("legacy-story-commit-frontmatter-invalid");const x=g(r,"rev-parse","HEAD"),J=g(r,"ls-remote","--heads","origin",`refs/heads/${w}`).split(`
+`).filter(Boolean),R=z(r,f);return!/^[a-f0-9]{40}$/.test(x)||J.length!==0||g(r,"rev-parse",`refs/remotes/origin/${f}`)!==R?n("legacy-story-commit-remote-drift"):{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c08-commit-plan",storyId:t.storyId,epicId:i,repository:X(r),branch:w,baseBranch:f,headSha:x,remoteHeadSha:null,baseSha:R,indexDigestSha256:h(v(r,"ls-files","-s","-z")),stagedPatchSha256:h(v(r,"diff","--cached","--binary","--full-index")),changedPaths:Object.freeze(a),stateSha256:h(e),storySha256:h(o),stateIndexBlobSha:g(r,"rev-parse",":.neocortex/state.json"),storyIndexBlobSha:g(r,"rev-parse",`:${s}`),physicalCommit:!1,checkpointAccepted:!1,localOnly:!0})}}catch{return n("legacy-story-commit-physical-unavailable")}}function Ue(t,r){const a=v(t,"show",r.stateIndexBlobSha),e=v(t,"show",r.storyIndexBlobSha);if(g(t,"cat-file","-t",r.stateIndexBlobSha)!=="blob"||g(t,"cat-file","-t",r.storyIndexBlobSha)!=="blob"||h(a)!==r.stateSha256||h(e)!==r.storySha256)throw new Error("legacy-story-commit-preimage-invalid");const s=S(JSON.parse(a)),o=S(S(s?.stories)?.[r.storyId]);if(!o||o.epic_id!==r.epicId||o.status!=="memory-updated"||o.last_step!==ge||!Array.isArray(o.steps_completed)||!o.steps_completed.includes(ge)||o.steps_completed.includes(U))throw new Error("legacy-story-commit-projection-state-invalid");const l=o.steps_completed;o.status="committed",o.last_step=U,o.steps_completed=[...l,U];const p=`${JSON.stringify(s,null,2)}
+`,y=e.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!y)throw new Error("legacy-story-commit-projection-frontmatter-invalid");const i=ae(y[1],{strict:!0,uniqueKeys:!0}),d=S(i.toJS()),c=["stepsCompleted","steps_completed"].filter(f=>i.has(f)),b=["lastStep","last_step"].filter(f=>i.has(f));if(i.errors.length>0||i.get("id")!==r.storyId||(i.get("epic_id")??i.get("epic"))!==r.epicId||i.get("status")!=="memory-updated"||c.length!==1||b.length!==1||JSON.stringify(d?.[c[0]])!==JSON.stringify(l)||d?.[b[0]]!==ge)throw new Error("legacy-story-commit-projection-frontmatter-invalid");i.set("status","committed"),i.has("currentStatus")&&i.set("currentStatus","committed"),i.set(c[0],o.steps_completed),i.set(b[0],U);const w=`---
+${i.toString({lineWidth:0})}---
+${e.slice(y[0].length)}`;return{stateBefore:a,storyBefore:e,stateAfter:p,storyAfter:w}}async function Xe(t,r,a){if(a)return a();const e=await Ot({projectRoot:t,storyId:r.storyId});if(!e.ok||e.value.epicId!==r.epicId||e.value.branch!==r.branch||e.value.baseBranch!==r.baseBranch||e.value.worktreePath!==t)return!1;try{g(t,"merge-base","--is-ancestor",e.value.baseHeadSha,r.headSha)}catch{return!1}const s=await T(await G(t),"legacy-story-branch-intents"),o=A(s,`${h(r.storyId)}.c01.accepted.json`);if(!H(o))return!1;await P(o,s);const l=S(JSON.parse(E(o,4096))),p=S(JSON.parse(v(t,"show",r.stateIndexBlobSha))),y=S(S(p?.stories)?.[r.storyId]);return!!l&&l.schemaVersion===1&&l.kind==="legacy-story-c01-acceptance-intent"&&l.storyId===r.storyId&&l.planDigest===h(JSON.stringify(e.value))&&l.repository===r.repository&&l.issueNumber===y?.issue_number}function Ve(t,r){return r.changedPaths.filter(a=>a!==".neocortex/state.json"&&a!==`docs/stories/${r.storyId}.story.md`).map(a=>{const e=v(t,"ls-files","-s","-z","--",a).split("\0").filter(Boolean);if(e.length>1)throw new Error("legacy-story-commit-index-invalid");return{path:a,entry:e[0]??null}})}async function er(t){if(!t.authorize)return n("legacy-story-commit-authorization-required");if(!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-commit-target-invalid");const r=`legacy-c08-${re(16).toString("hex")}`,a=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:r,idempotencyKey:r,expiresAt:new Date(Date.now()+60*6e4).toISOString(),persistent:!1});if(!a.ok)return n(a.reasonCode);try{const e=D(t.projectRoot);if(D(g(e,"rev-parse","--show-toplevel"))!==e)return n("legacy-story-commit-checkout-invalid");const s=await T(await G(e),"legacy-story-pr-intents"),o=h(t.storyId),l=`${o}.c08.commit.json`,p=`${o}.c08.commit.accepted.json`;let y=await $e(s,l,64*1024);if(!y){const $=Ct(t);if(!$.ok)return $;const k=$.value;if(!await Xe(e,k,t.verifyC01))return n("legacy-story-commit-c01-unverified");const j=Ue(e,k),B={schemaVersion:1,kind:"legacy-story-c08-commit-intent",plan:k,stateAfterSha256:h(j.stateAfter),storyAfterSha256:h(j.storyAfter),otherIndex:Ve(e,k)};await L(s,l,`${JSON.stringify(B)}
+`),await P(A(s,l),s),y=B}const i=S(y.plan);if(y.schemaVersion!==1||y.kind!=="legacy-story-c08-commit-intent"||!i||i.schemaVersion!==1||i.kind!=="legacy-story-c08-commit-plan"||i.storyId!==t.storyId||typeof i.epicId!="string"||i.branch!==`story/${i.epicId}/${t.storyId}`||typeof i.repository!="string"||typeof i.baseBranch!="string"||typeof i.headSha!="string"||!/^[a-f0-9]{40}$/.test(i.headSha)||typeof i.stateIndexBlobSha!="string"||!/^[a-f0-9]{40}$/.test(i.stateIndexBlobSha)||typeof i.storyIndexBlobSha!="string"||!/^[a-f0-9]{40}$/.test(i.storyIndexBlobSha)||!Array.isArray(i.changedPaths)||!i.changedPaths.includes(".neocortex/state.json")||!i.changedPaths.includes(`docs/stories/${t.storyId}.story.md`)||i.remoteHeadSha!==null||i.physicalCommit!==!1||i.checkpointAccepted!==!1||typeof y.stateAfterSha256!="string"||!/^[a-f0-9]{64}$/.test(y.stateAfterSha256)||typeof y.storyAfterSha256!="string"||!/^[a-f0-9]{64}$/.test(y.storyAfterSha256)||!Array.isArray(y.otherIndex)||y.otherIndex.length!==i.changedPaths.length-2||y.otherIndex.some($=>{const k=S($);return!k||typeof k.path!="string"||!i.changedPaths.includes(k.path)||k.path===".neocortex/state.json"||k.path===`docs/stories/${t.storyId}.story.md`||k.entry!==null&&(typeof k.entry!="string"||!/^(100644|100755) [a-f0-9]{40} 0\t/.test(k.entry)||!k.entry.endsWith(`	${k.path}`))})||!/^[a-f0-9]{64}$/.test(String(i.indexDigestSha256))||!/^[a-f0-9]{64}$/.test(String(i.stagedPatchSha256))||!/^[a-f0-9]{64}$/.test(String(i.stateSha256))||!/^[a-f0-9]{64}$/.test(String(i.storySha256))||new Set(i.changedPaths).size!==i.changedPaths.length||i.changedPaths.some($=>typeof $!="string"||$.length>1024||$.startsWith("/")||$.includes("\\")||$.split("/").includes("..")||$===".git"||$.startsWith(".git/"))||X(e)!==i.repository||g(e,"branch","--show-current")!==i.branch)return n("legacy-story-commit-intent-invalid");const d=i;if(!await Xe(e,d,t.verifyC01))return n("legacy-story-commit-c01-unverified");const c=Ue(e,d);if(h(c.stateAfter)!==y.stateAfterSha256||h(c.storyAfter)!==y.storyAfterSha256||JSON.stringify(Ve(e,d))!==JSON.stringify(y.otherIndex))return n("legacy-story-commit-intent-drift");const b=h(JSON.stringify(y)),f=await $e(s,p,4096);if(f&&(f.schemaVersion!==1||f.kind!=="legacy-story-c08-commit-accepted"||f.intentSha256!==b||!/^[a-f0-9]{40}$/.test(f.checkpointHeadSha)||!/^[a-f0-9]{64}$/.test(f.qaSha256)))return n("legacy-story-commit-accepted-invalid");let m=g(e,"rev-parse","HEAD");if(m===d.headSha){if(f)return n("legacy-story-commit-accepted-physical-drift");const $=v(e,"diff","--cached","--name-only","-z").split("\0").filter(Boolean),k=v(e,"diff","--name-only","-z").split("\0").filter(Boolean);if(JSON.stringify($)!==JSON.stringify(d.changedPaths)||k.some(R=>R!==".neocortex/state.json"&&R!==`docs/stories/${d.storyId}.story.md`)||v(e,"ls-files","--others","--exclude-standard","-z")!==""||g(e,"ls-remote","--heads","origin",`refs/heads/${d.branch}`)!==""||z(e,d.baseBranch)!==d.baseSha)return n("legacy-story-commit-precommit-drift");const j=E(A(e,".neocortex/state.json"),2*1024*1024),B=E(A(e,`docs/stories/${d.storyId}.story.md`),2*1024*1024),x=v(e,"show",":.neocortex/state.json"),J=v(e,"show",`:docs/stories/${d.storyId}.story.md`);if(![c.stateBefore,c.stateAfter].includes(j)||![c.storyBefore,c.storyAfter].includes(B)||![c.stateBefore,c.stateAfter].includes(x)||![c.storyBefore,c.storyAfter].includes(J)||x===c.stateAfter&&j!==c.stateAfter||J===c.storyAfter&&B!==c.storyAfter)return n("legacy-story-commit-preimage-drift");if(j===c.stateBefore&&(await Y(A(e,".neocortex"),"state.json",c.stateAfter,h(c.stateBefore)),await t.afterStateWrite?.()),B===c.storyBefore&&await Y(A(e,"docs/stories"),`${d.storyId}.story.md`,c.storyAfter,h(c.storyBefore)),E(A(e,".neocortex/state.json"),2*1024*1024)!==c.stateAfter||E(A(e,`docs/stories/${d.storyId}.story.md`),2*1024*1024)!==c.storyAfter)return n("legacy-story-commit-projection-drift");if(g(e,"add","--",".neocortex/state.json",`docs/stories/${d.storyId}.story.md`),g(e,"diff","--cached","--check"),v(e,"diff","--name-only","-z")!==""||v(e,"ls-files","--others","--exclude-standard","-z")!==""||JSON.stringify(Ve(e,d))!==JSON.stringify(y.otherIndex)||h(v(e,"show",":.neocortex/state.json"))!==y.stateAfterSha256||h(v(e,"show",`:docs/stories/${d.storyId}.story.md`))!==y.storyAfterSha256)return n("legacy-story-commit-index-drift");g(e,"commit","-m",`chore(story): checkpoint ${d.storyId} C08`,"-m",`Neocortex-Legacy-Commit: ${d.storyId}`),m=g(e,"rev-parse","HEAD"),await t.afterCommit?.()}const u=g(e,"rev-list","--parents","-n","1",m).split(" "),I=v(e,"diff-tree","--no-commit-id","--name-only","-r","-z",m).split("\0").filter(Boolean);if(JSON.stringify(u)!==JSON.stringify([m,d.headSha])||JSON.stringify(I)!==JSON.stringify(d.changedPaths)||y.otherIndex.some(({path:$,entry:k})=>{const j=v(e,"ls-tree","-z",m,"--",$).split("\0").filter(Boolean);return k===null?j.length!==0:j.length!==1||j[0]!==k.replace(/^(100644|100755) ([a-f0-9]{40}) 0\t/,"$1 blob $2	")})||h(v(e,"show",`${m}:.neocortex/state.json`))!==y.stateAfterSha256||h(v(e,"show",`${m}:docs/stories/${d.storyId}.story.md`))!==y.storyAfterSha256||!v(e,"log","-1","--format=%B",m).split(`
+`).map($=>$.trim()).includes(`Neocortex-Legacy-Commit: ${d.storyId}`)||v(e,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-commit-checkpoint-invalid");const N=g(e,"ls-remote","--heads","origin",`refs/heads/${d.branch}`);if(N!==""&&N!==`${m}	refs/heads/${d.branch}`)return n("legacy-story-commit-remote-drift");let O=f?.qaSha256;if(!O){try{O=t.verifyQa?await t.verifyQa(m):await(async()=>{const $=await ze(e,{headSha:m,graphRevision:h(`legacy-story-c08\0${b}`)}),k=Le($);if(!k||k.executionHeadSha!==m)throw new Error("qa-invalid");return k.executionEvidenceDigest})()}catch{return n("legacy-story-commit-qa-failed")}if(!/^[a-f0-9]{64}$/.test(O))return n("legacy-story-commit-qa-failed")}if(g(e,"rev-parse","HEAD")!==m||v(e,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-commit-final-drift");if(N===""&&g(e,"push","--porcelain","origin",`${m}:refs/heads/${d.branch}`),g(e,"ls-remote","--heads","origin",`refs/heads/${d.branch}`)!==`${m}	refs/heads/${d.branch}`)return n("legacy-story-commit-push-unverified");await t.afterPush?.();const _={schemaVersion:1,kind:"legacy-story-c08-commit-accepted",intentSha256:b,checkpointHeadSha:m,qaSha256:O};return f&&JSON.stringify(f)!==JSON.stringify(_)?n("legacy-story-commit-accepted-conflict"):(f||(await L(s,p,`${JSON.stringify(_)}
+`),await P(A(s,p),s)),{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c08-commit-accepted",storyId:d.storyId,epicId:d.epicId,branch:d.branch,checkpointHeadSha:m,qaSha256:O,reused:!!f,physicalCommit:!0,checkpointAccepted:!0,publicSafe:!0})})}catch(e){const s=e instanceof Error?e.message:"";return n(s.startsWith("legacy-story-commit-")?s:"legacy-story-commit-effect-uncertain")}finally{await oe(a.path,a.owner).catch(()=>{})}}function _t(t){if(!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-sync-target-invalid");try{const r=D(t.projectRoot);if(D(g(r,"rev-parse","--show-toplevel"))!==r||v(r,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-sync-checkout-invalid");const a=v(r,"show","HEAD:.neocortex/state.json"),e=`docs/stories/${t.storyId}.story.md`,s=v(r,"show",`HEAD:${e}`);if(E(A(r,".neocortex/state.json"),2*1024*1024)!==a||E(A(r,e),2*1024*1024)!==s)return n("legacy-story-sync-committed-content-drift");const o=S(JSON.parse(a)),l=S(o?.stories),p=S(o?.epics),y=S(l?.[t.storyId]),i=y?.epic_id,d=typeof i=="string"?S(p?.[i]):null;if(!y||y.id!==t.storyId||typeof i!="string"||!d||d.id!==i||d.branch_mode==="epic"||y.status!=="committed"||y.last_step!==U||!Array.isArray(y.steps_completed)||!y.steps_completed.includes(U)||y.steps_completed.includes(Z)||!Number.isSafeInteger(y.issue_number)||y.issue_number<=0)return n("legacy-story-sync-state-invalid");const c=Array.isArray(d.stories)?d.stories:null;if(!c||c.length===0||new Set(c).size!==c.length||!c.includes(t.storyId)||c.some(x=>typeof x!="string"||S(l?.[x])?.epic_id!==i)||Object.entries(l??{}).some(([x,J])=>S(J)?.epic_id===i&&!c.includes(x)))return n("legacy-story-sync-topology-invalid");const b=qe(d,c.map(x=>({...S(l?.[x]),id:x}))),w=`story/${i}/${t.storyId}`,m=S(o?.config)?.default_branch;if(b.mode!=="story"||y.branch_name!==w||g(r,"branch","--show-current")!==w||typeof m!="string"||m===w||g(r,"check-ref-format","--branch",m)!==m)return n("legacy-story-sync-branch-invalid");const u=s.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!u)return n("legacy-story-sync-frontmatter-invalid");const I=ae(u[1],{strict:!0,uniqueKeys:!0}),N=S(I.toJS()),O=["stepsCompleted","steps_completed"].filter(x=>I.has(x)),_=["lastStep","last_step"].filter(x=>I.has(x)),$=["branchName","branch_name"].filter(x=>I.has(x));if(I.errors.length>0||I.get("id")!==t.storyId||(I.get("epic_id")??I.get("epic"))!==i||I.get("status")!=="committed"||I.has("currentStatus")&&I.get("currentStatus")!=="committed"||O.length>1||_.length>1||$.length>1||O.length===1&&JSON.stringify(N?.[O[0]])!==JSON.stringify(y.steps_completed)||_.length===1&&N?.[_[0]]!==U||$.length===1&&N?.[$[0]]!==w)return n("legacy-story-sync-frontmatter-invalid");const k=g(r,"rev-parse","HEAD"),j=z(r,m);if(!/^[a-f0-9]{40}$/.test(k)||z(r,w)!==k||g(r,"rev-parse",`refs/remotes/origin/${m}`)!==j)return n("legacy-story-sync-remote-drift");const B=g(r,"merge-base",k,j);return/^[a-f0-9]{40}$/.test(B)?{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c09-sync-plan",storyId:t.storyId,epicId:i,repository:X(r),branch:w,baseBranch:m,headSha:k,baseSha:j,mergeBaseSha:B,stateSha256:h(a),storySha256:h(s),baseAlreadyAncestor:B===j,physicalSync:!1,checkpointAccepted:!1,localOnly:!0})}:n("legacy-story-sync-ancestry-invalid")}catch{return n("legacy-story-sync-physical-unavailable")}}function jt(t,r){const a=E(A(t,".neocortex/state.json"),2097152),e=`docs/stories/${r.storyId}.story.md`,s=E(A(t,e),2*1024*1024),o=v(t,"show",`${r.headSha}:.neocortex/state.json`),l=v(t,"show",`${r.headSha}:${e}`);if(h(o)!==r.stateSha256||h(l)!==r.storySha256||s!==l)throw new Error("legacy-story-sync-preimage-drift");const p=S(JSON.parse(a)),y=S(JSON.parse(o)),i=S(p?.stories),d=S(S(y?.stories)?.[r.storyId]),c=S(i?.[r.storyId]),b=S(S(p?.epics)?.[r.epicId]),w=b?.stories;if(!c||!d||JSON.stringify(c)!==JSON.stringify(d)||c.status!=="committed"||c.last_step!==U||c.branch_name!==r.branch||!Array.isArray(c.steps_completed)||!c.steps_completed.includes(U)||c.steps_completed.includes(Z)||!b||b.id!==r.epicId||b.branch_mode==="epic"||!Array.isArray(w)||!w.includes(r.storyId)||new Set(w).size!==w.length||w.some($=>typeof $!="string"||S(i?.[$])?.epic_id!==r.epicId)||S(p?.config)?.default_branch!==r.baseBranch)throw new Error("legacy-story-sync-merged-state-invalid");c.status="synced",c.last_step=Z,c.steps_completed=[...c.steps_completed,Z],c.sync_base_sha=r.baseSha;const f=`${JSON.stringify(p,null,2)}
+`,m=s.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!m)throw new Error("legacy-story-sync-frontmatter-invalid");const u=ae(m[1],{strict:!0,uniqueKeys:!0}),I=S(u.toJS()),N=["stepsCompleted","steps_completed"].filter($=>u.has($)),O=["lastStep","last_step"].filter($=>u.has($));if(u.errors.length>0||u.get("id")!==r.storyId||(u.get("epic_id")??u.get("epic"))!==r.epicId||u.get("status")!=="committed"||N.length!==1||O.length!==1||JSON.stringify(I?.[N[0]])!==JSON.stringify(d.steps_completed)||I?.[O[0]]!==U)throw new Error("legacy-story-sync-frontmatter-invalid");u.set("status","synced"),u.has("currentStatus")&&u.set("currentStatus","synced"),u.set(N[0],[...d.steps_completed,Z]),u.set(O[0],Z),u.set("syncBaseSha",r.baseSha);const _=`---
+${u.toString({lineWidth:0})}---
+${s.slice(m[0].length)}`;return{stateBefore:a,stateAfter:f,storyBefore:s,storyAfter:_}}async function $e(t,r,a){const e=A(t,r);if(!H(e))return null;await P(e,t);const s=S(JSON.parse(E(e,a)));if(!s)throw new Error("legacy-story-sync-journal-invalid");return s}async function tr(t){if(!t.authorize)return n("legacy-story-sync-authorization-required");if(!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-sync-target-invalid");const r=`legacy-c09-sync-${re(16).toString("hex")}`,a=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:r,idempotencyKey:r,expiresAt:new Date(Date.now()+60*6e4).toISOString(),persistent:!1});if(!a.ok)return n(a.reasonCode);try{const e=D(t.projectRoot);if(D(g(e,"rev-parse","--show-toplevel"))!==e)return n("legacy-story-sync-checkout-invalid");const s=await T(await G(e),"legacy-story-pr-intents"),o=h(t.storyId),l=`${o}.c09.sync.json`,p=`${o}.c09.sync.prepared.json`,y=`${o}.c09.sync.accepted.json`;let i=await $e(s,l,8192);if(!i){const C=_t(t);if(!C.ok)return C;const V={schemaVersion:1,kind:"legacy-story-c09-sync-intent",plan:C.value};await L(s,l,`${JSON.stringify(V)}
+`),i=V}const d=S(i.plan);if(i.schemaVersion!==1||i.kind!=="legacy-story-c09-sync-intent"||!d||d.schemaVersion!==1||d.kind!=="legacy-story-c09-sync-plan"||d.storyId!==t.storyId||typeof d.epicId!="string"||d.branch!==`story/${d.epicId}/${t.storyId}`||typeof d.baseBranch!="string"||typeof d.repository!="string"||typeof d.headSha!="string"||!/^[a-f0-9]{40}$/.test(d.headSha)||typeof d.baseSha!="string"||!/^[a-f0-9]{40}$/.test(d.baseSha)||typeof d.stateSha256!="string"||!/^[a-f0-9]{64}$/.test(d.stateSha256)||typeof d.storySha256!="string"||!/^[a-f0-9]{64}$/.test(d.storySha256)||typeof d.baseAlreadyAncestor!="boolean"||d.physicalSync!==!1||d.checkpointAccepted!==!1||g(e,"branch","--show-current")!==d.branch||X(e)!==d.repository)return n("legacy-story-sync-intent-invalid");const c=d,b=h(JSON.stringify(i));let f=await $e(s,p,4096);if(f&&(f.schemaVersion!==1||f.kind!=="legacy-story-c09-sync-prepared"||f.intentSha256!==b||!/^[a-f0-9]{40}$/.test(f.treeSha)||!/^[a-f0-9]{64}$/.test(f.stateSha256)||!/^[a-f0-9]{64}$/.test(f.storySha256)))return n("legacy-story-sync-prepared-invalid");const u=await $e(s,y,4096);if(u&&(u.schemaVersion!==1||u.kind!=="legacy-story-c09-sync-accepted"||u.intentSha256!==b||!/^[a-f0-9]{40}$/.test(u.checkpointHeadSha)||!/^[a-f0-9]{64}$/.test(u.qaSha256)))return n("legacy-story-sync-accepted-invalid");const I=g(e,"rev-parse","HEAD");if(v(e,"status","--porcelain=v1","-uall")!==""||z(e,c.baseBranch)!==c.baseSha||h(v(e,"show",`${c.headSha}:.neocortex/state.json`))!==c.stateSha256||h(v(e,"show",`${c.headSha}:docs/stories/${c.storyId}.story.md`))!==c.storySha256)return n("legacy-story-sync-physical-drift");const N=A(s,`${o}.c09.sync.checkout`);if(H(N)||Q("git",["worktree","add","--detach",N,u?.checkpointHeadSha??c.headSha],{cwd:e,encoding:"utf8",timeout:6e4,stdio:["ignore","pipe","pipe"],maxBuffer:32*1024}),!W(N).isDirectory()||D(N)!==N||D(g(N,"rev-parse","--show-toplevel"))!==N||me(N)!==me(e)||g(N,"branch","--show-current")!=="")return n("legacy-story-sync-candidate-invalid");let O=g(N,"rev-parse","HEAD");if(O===c.headSha){if(f)return n("legacy-story-sync-prepared-uncommitted");if(I!==c.headSha||z(e,c.branch)!==c.headSha||v(N,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-sync-preparation-drift");if(!c.baseAlreadyAncestor){try{g(N,"merge","--no-ff","--no-commit",c.baseSha)}catch{return n("legacy-story-sync-merge-conflict")}if(v(N,"ls-files","-u")!=="")return n("legacy-story-sync-merge-conflict")}const C=jt(N,c);await Y(A(N,".neocortex"),"state.json",C.stateAfter,h(C.stateBefore)),await Y(A(N,"docs/stories"),`${c.storyId}.story.md`,C.storyAfter,h(C.storyBefore)),g(N,"add","--",".neocortex/state.json",`docs/stories/${c.storyId}.story.md`),g(N,"diff","--cached","--check"),f={schemaVersion:1,kind:"legacy-story-c09-sync-prepared",intentSha256:b,treeSha:g(N,"write-tree"),stateSha256:h(C.stateAfter),storySha256:h(C.storyAfter)},await L(s,p,`${JSON.stringify(f)}
+`),await P(A(s,p),s),g(N,"commit","-m",`chore(story): sync ${c.storyId} with ${c.baseBranch}`,"-m",`Neocortex-Legacy-Sync: ${c.storyId}`),O=g(N,"rev-parse","HEAD"),await t.afterCommit?.()}const _=g(N,"rev-list","--parents","-n","1",O).split(" "),$=c.baseAlreadyAncestor?[O,c.headSha]:[O,c.headSha,c.baseSha],k=S(JSON.parse(v(N,"show",`${O}:.neocortex/state.json`))),j=S(S(k?.stories)?.[c.storyId]),B=v(N,"show",`${O}:docs/stories/${c.storyId}.story.md`);if(!f||g(N,"rev-parse",`${O}^{tree}`)!==f.treeSha||h(v(N,"show",`${O}:.neocortex/state.json`))!==f.stateSha256||h(B)!==f.storySha256||JSON.stringify(_)!==JSON.stringify($)||!j||j.status!=="synced"||j.last_step!==Z||j.sync_base_sha!==c.baseSha||!Array.isArray(j.steps_completed)||!j.steps_completed.includes(Z)||!B.startsWith(`---
+`)||!v(N,"log","-1","--format=%B",O).split(`
+`).map(C=>C.trim()).includes(`Neocortex-Legacy-Sync: ${c.storyId}`)||v(N,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-sync-checkpoint-invalid");if(u&&u.checkpointHeadSha!==O)return n("legacy-story-sync-accepted-conflict");const x=z(e,c.branch);if(![c.headSha,O].includes(I)||![c.headSha,O].includes(x)||u&&(I!==O||x!==O))return n("legacy-story-sync-remote-drift");let J=u?.qaSha256;if(!J){if(!t.verifyQa)try{et(N)}catch{return n("legacy-story-sync-dependencies-failed")}const C={schemaVersion:1,kind:"legacy-story-pr-plan",storyId:c.storyId,epicId:c.epicId,repository:c.repository,branch:c.branch,baseBranch:c.baseBranch,headSha:O,baseSha:c.baseSha,qaAuthority:"root-review-required",localOnly:!0};try{J=await de(C,N,t.verifyQa)}catch{return n("legacy-story-sync-qa-failed")}}if(g(N,"rev-parse","HEAD")!==O||v(N,"status","--porcelain=v1","-uall")!==""||g(e,"rev-parse","HEAD")!==I||v(e,"status","--porcelain=v1","-uall")!==""||z(e,c.baseBranch)!==c.baseSha)return n("legacy-story-sync-final-drift");if(x===c.headSha&&g(e,"push","--porcelain","origin",`${O}:refs/heads/${c.branch}`),z(e,c.branch)!==O)return n("legacy-story-sync-push-unverified");if(await t.afterPush?.(),g(e,"rev-parse","HEAD")===c.headSha&&g(e,"merge","--ff-only",O),g(e,"rev-parse","HEAD")!==O||v(e,"status","--porcelain=v1","-uall")!==""||E(A(e,".neocortex/state.json"),2*1024*1024)!==v(e,"show",`${O}:.neocortex/state.json`)||E(A(e,`docs/stories/${c.storyId}.story.md`),2*1024*1024)!==B)return n("legacy-story-sync-local-readback-invalid");const R={schemaVersion:1,kind:"legacy-story-c09-sync-accepted",intentSha256:b,checkpointHeadSha:O,qaSha256:J};return u&&JSON.stringify(u)!==JSON.stringify(R)?n("legacy-story-sync-accepted-conflict"):(u||(await L(s,y,`${JSON.stringify(R)}
+`),await P(A(s,y),s)),{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c09-sync-accepted",storyId:c.storyId,epicId:c.epicId,branch:c.branch,baseSha:c.baseSha,checkpointHeadSha:O,qaSha256:J,reused:!!u,physicalSync:!0,checkpointAccepted:!0,publicSafe:!0})})}catch(e){const s=e instanceof Error?e.message:"";return n(s.startsWith("legacy-story-sync-")?s:"legacy-story-sync-effect-uncertain")}finally{await oe(a.path,a.owner).catch(()=>{})}}function we(t,r){try{const a=D(t.projectRoot);if(!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId)||D(g(a,"rev-parse","--show-toplevel"))!==a||!r&&g(a,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-pr-checkout-invalid");const e=v(a,"show","HEAD:.neocortex/state.json");if(!r&&e!==E(A(a,".neocortex/state.json"),2*1024*1024))return n("legacy-story-pr-state-not-committed");const s=S(JSON.parse(e)),o=S(s?.stories),l=S(s?.epics),p=S(o?.[t.storyId]),y=p?.epic_id,i=typeof y=="string"?S(l?.[y]):null;if(!p||p.id!==t.storyId||typeof y!="string"||!i||i.id!==y||i.branch_mode==="epic"||p.status!=="synced"||p.last_step!==Z||!Array.isArray(p.steps_completed)||!p.steps_completed.includes(Z)||p.steps_completed.includes(ie))return n("legacy-story-pr-state-invalid");const d=Array.isArray(i.stories)?i.stories:null;if(!d||d.length===0||new Set(d).size!==d.length||!d.includes(t.storyId)||d.some(_=>typeof _!="string"||S(o?.[_])?.epic_id!==y)||Object.entries(o??{}).some(([_,$])=>S($)?.epic_id===y&&!d.includes(_)))return n("legacy-story-pr-topology-invalid");const c=qe(i,d.map(_=>({...S(o?.[_]),id:_}))),b=`story/${y}/${t.storyId}`,f=S(s?.config)?.default_branch;if(c.mode!=="story"||p.branch_name!==b||g(a,"branch","--show-current")!==b||typeof f!="string"||f===b||g(a,"check-ref-format","--branch",f)!==f)return n("legacy-story-pr-branch-invalid");const u=g(a,"show",`HEAD:docs/stories/${t.storyId}.story.md`).match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!u)return n("legacy-story-pr-frontmatter-invalid");const I=ae(u[1],{strict:!0,uniqueKeys:!0});if(I.errors.length>0||I.get("id")!==t.storyId||(I.get("epic_id")??I.get("epic"))!==y||I.get("status")!=="synced")return n("legacy-story-pr-frontmatter-invalid");const N=g(a,"rev-parse","HEAD"),O=z(a,f);return!/^[a-f0-9]{40}$/.test(N)||z(a,b)!==N||g(a,"rev-parse",`refs/remotes/origin/${f}`)!==O?n("legacy-story-pr-remote-drift"):(g(a,"merge-base","--is-ancestor",O,N),{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-pr-plan",storyId:t.storyId,epicId:y,repository:X(a),branch:b,baseBranch:f,headSha:N,baseSha:O,qaAuthority:"root-review-required",localOnly:!0})})}catch{return n("legacy-story-pr-physical-unavailable")}}function be(t){return we(t,!1)}async function de(t,r,a){const e=a?await a(t):await(async()=>{const s=await ze(r,{headSha:t.headSha,graphRevision:h(`legacy-story-pr-c10\0${JSON.stringify(t)}`)}),o=Le(s);if(!o||o.executionHeadSha!==t.headSha)throw new Error("legacy-story-pr-checkpoint-qa-invalid");return o.executionEvidenceDigest})();if(!/^[a-f0-9]{64}$/.test(e))throw new Error("legacy-story-pr-checkpoint-qa-invalid");return e}function et(t){for(const r of[".","packages/server","portal","admin","landing"]){const a=A(t,r),e=A(a,"package.json"),s=A(a,"package-lock.json");if(!H(a)||!W(a).isDirectory()||D(a)!==a||!H(e)||!W(e).isFile()||!H(s)||!W(s).isFile())throw new Error("legacy-story-pr-candidate-dependencies-missing");try{Q("npm",["ci","--include=dev","--no-audit","--no-fund"],{cwd:a,encoding:"utf8",timeout:10*6e4,stdio:["ignore","pipe","pipe"],maxBuffer:1024*1024})}catch{throw new Error("legacy-story-pr-candidate-dependencies-failed")}}}const he={async list(t,r,a){const e=Q("gh",["pr","list","--repo",t,"--state","all","--head",r,"--json","number,state,headRefName,headRefOid,baseRefName,url","--limit","100"],{encoding:"utf8",timeout:15e3,stdio:["ignore","pipe","pipe"],maxBuffer:262144});return JSON.parse(e)},async create(t,r,a,e,s){Q("gh",["pr","create","--repo",t,"--head",r,"--base",a,"--title",e,"--body-file",s],{encoding:"utf8",timeout:3e4,stdio:["ignore","pipe","pipe"],maxBuffer:16*1024})}},F={async view(t,r){const a=Q("gh",["pr","view",String(r),"--repo",t,"--json","number,state,headRefName,headRefOid,baseRefName,baseRefOid,isDraft,mergeable,mergeCommit,statusCheckRollup,url"],{encoding:"utf8",timeout:15e3,stdio:["ignore","pipe","pipe"],maxBuffer:262144});return JSON.parse(a)},async merge(t,r,a){Q("gh",["api","--method","PUT",`repos/${t}/pulls/${r}/merge`,"-f",`sha=${a}`,"-f","merge_method=merge"],{encoding:"utf8",timeout:3e4,stdio:["ignore","pipe","pipe"],maxBuffer:16*1024})}};async function rr(t){if(!t.authorize)return n("legacy-story-pr-authorization-required");let r;try{if(W(t.bodyFile).isSymbolicLink())return n("legacy-story-pr-body-unsafe");const l=E(t.bodyFile,32*1024);if(!l.trim()||l.includes("\0"))return n("legacy-story-pr-body-unsafe");r=l}catch{return n("legacy-story-pr-body-unsafe")}const a=be(t);if(!a.ok)return a;try{await de(a.value,t.projectRoot,t.verifyQa)}catch{return n("legacy-story-pr-checkpoint-qa-failed")}const e=t.provider??he,s=`legacy-c10-${re(16).toString("hex")}`,o=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:s,idempotencyKey:s,expiresAt:new Date(Date.now()+5*6e4).toISOString(),persistent:!1});if(!o.ok)return n(o.reasonCode);try{const l=be(t);if(!l.ok||JSON.stringify(l.value)!==JSON.stringify(a.value))return n("legacy-story-pr-pre-effect-race");const p=await e.list(a.value.repository,a.value.branch,a.value.baseBranch);let y=Se(a.value,p);const i=y!==null;if(!y){const c=be(t);if(!c.ok||JSON.stringify(c.value)!==JSON.stringify(a.value))return n("legacy-story-pr-pre-effect-race");if(!await kt(t.projectRoot,a.value))return n("legacy-story-pr-create-attempt-unresolved");const b=wt(A($t(),"legacy-story-pr-body-")),w=A(b,"body.md");try{Nt(w,r,{flag:"wx",mode:384}),await e.create(a.value.repository,a.value.branch,a.value.baseBranch,`[YOLO] Story ${a.value.storyId}`,w)}finally{try{At(w)}catch{}It(b)}const f=be(t);if(!f.ok||JSON.stringify(f.value)!==JSON.stringify(a.value))return n("legacy-story-pr-post-effect-race");if(y=Se(a.value,await e.list(a.value.repository,a.value.branch,a.value.baseBranch)),!y)return n("legacy-story-pr-readback-unavailable")}const d=be(t);return!d.ok||JSON.stringify(d.value)!==JSON.stringify(a.value)?n("legacy-story-pr-post-effect-race"):{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-pr-provider-receipt",storyId:a.value.storyId,epicId:a.value.epicId,repository:a.value.repository,branch:a.value.branch,baseBranch:a.value.baseBranch,headSha:a.value.headSha,number:y.number,url:y.url,reused:i,checkpointAccepted:!1,publicSafe:!0})}}catch(l){const p=l instanceof Error?l.message:"";return n(p.startsWith("legacy-story-pr-")?p:"legacy-story-pr-provider-unavailable")}finally{await oe(o.path,o.owner).catch(()=>{})}}function h(t){return Qe("sha256").update(t).digest("hex")}function Me(t,r,a){const e=v(t,"show","HEAD:.neocortex/state.json"),s=S(JSON.parse(e)),o=S(S(s?.stories)?.[r.storyId]);if(!o||o.status!=="synced"||o.last_step!==Z||!Array.isArray(o.steps_completed)||!o.steps_completed.includes(Z)||o.steps_completed.includes(ie)||o.pr_number!=null)throw new Error("legacy-story-pr-checkpoint-state-conflict");const l=o.steps_completed;o.status="pr-created",o.last_step=ie,o.steps_completed=[...l,ie],o.pr_number=a;const p=`${JSON.stringify(s,null,2)}
+`,y=`docs/stories/${r.storyId}.story.md`,i=v(t,"show",`HEAD:${y}`),d=i.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!d)throw new Error("legacy-story-pr-checkpoint-frontmatter-invalid");const c=ae(d[1],{strict:!0,uniqueKeys:!0}),b=S(c.toJS()),w=["stepsCompleted","steps_completed"].filter(N=>c.has(N)),f=["lastStep","last_step"].filter(N=>c.has(N)),m=["prNumber","pr_number"].filter(N=>c.has(N)),u=["branchName","branch_name"].filter(N=>c.has(N));if(c.errors.length>0||c.get("id")!==r.storyId||(c.get("epic_id")??c.get("epic"))!==r.epicId||c.get("status")!=="synced"||w.length>1||f.length>1||m.length>1||u.length>1||c.has("currentStatus")&&c.get("currentStatus")!=="synced"||w.length===1&&(!Array.isArray(b?.[w[0]])||JSON.stringify(b?.[w[0]])!==JSON.stringify(l))||f.length===1&&b?.[f[0]]!==Z||u.length===1&&b?.[u[0]]!==r.branch||m.length===1&&b?.[m[0]]!=null)throw new Error("legacy-story-pr-checkpoint-frontmatter-conflict");c.set("status","pr-created"),c.has("currentStatus")&&c.set("currentStatus","pr-created"),c.set(w[0]??"stepsCompleted",[...w.length===1?b[w[0]]:l,ie]),c.set(f[0]??"lastStep",ie),c.set(m[0]??"prNumber",a);const I=`---
+${c.toString({lineWidth:0})}---
+${i.slice(d[0].length)}`;return{stateBefore:e,stateAfter:p,storyBefore:i,storyAfter:I,storyPath:y}}function Oe(t,r,a){const e=we({projectRoot:t,storyId:r.storyId},!0);if(!e.ok||JSON.stringify(e.value)!==JSON.stringify(r))throw new Error("legacy-story-pr-checkpoint-physical-drift");const s=E(A(t,".neocortex/state.json"),2*1024*1024),o=E(A(t,a.storyPath),2*1024*1024);if(![a.stateBefore,a.stateAfter].includes(s)||![a.storyBefore,a.storyAfter].includes(o))throw new Error("legacy-story-pr-checkpoint-preimage-conflict");if(v(t,"status","--porcelain=v1","-uall").split(`
+`).filter(Boolean).some(p=>!p.startsWith(" M ")||![".neocortex/state.json",a.storyPath].includes(p.slice(3))))throw new Error("legacy-story-pr-checkpoint-worktree-dirty");return{stateCurrent:s,storyCurrent:o}}async function ve(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=E(a,4096),s=S(JSON.parse(e));if(!s||s.schemaVersion!==1||s.kind!=="legacy-story-c10-acceptance-intent"||typeof s.qaDigest!="string"||!/^[a-f0-9]{64}$/.test(s.qaDigest))throw new Error("legacy-story-pr-checkpoint-journal-invalid");return s}async function tt(t,r,a){await L(t,r,`${JSON.stringify(a)}
+`),await P(A(t,r),t)}async function ar(t){if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0)return n("legacy-story-pr-checkpoint-number-invalid");const r=be(t);let a=null;if(r.ok)try{a=await de(r.value,t.projectRoot,t.verifyQa)}catch{return n("legacy-story-pr-checkpoint-qa-failed")}const e=`legacy-c10-accept-${re(16).toString("hex")}`,s=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:e,idempotencyKey:e,expiresAt:new Date(Date.now()+5*6e4).toISOString(),persistent:!1});if(!s.ok)return n(s.reasonCode);try{const o=D(t.projectRoot),l=we(t,!0);if(!l.ok||r.ok&&JSON.stringify(l.value)!==JSON.stringify(r.value))return n("legacy-story-pr-checkpoint-plan-drift");const p=l.value,y=Me(o,p,t.prNumber),i=Oe(o,p,y),d=await T(await G(o),"legacy-story-pr-intents"),c=h(p.storyId),b=`${c}.c10.json`,w=`${c}.c10.accepted.json`,f=await ve(d,b),m=await ve(d,w);if(!f&&(!r.ok||!a||i.stateCurrent!==y.stateBefore||i.storyCurrent!==y.storyBefore))return n("legacy-story-pr-checkpoint-unjournaled-drift");if(m&&(!f||JSON.stringify(m)!==JSON.stringify(f)))return n("legacy-story-pr-checkpoint-accepted-conflict");const u=Se(p,await(t.provider??he).list(p.repository,p.branch,p.baseBranch));if(!u||u.number!==t.prNumber)return n("legacy-story-pr-checkpoint-provider-mismatch");const I={schemaVersion:1,kind:"legacy-story-c10-acceptance-intent",storyId:p.storyId,planDigest:h(JSON.stringify(p)),repository:p.repository,number:u.number,url:u.url,qaDigest:f?.qaDigest??a,stateBefore:h(y.stateBefore),stateAfter:h(y.stateAfter),storyBefore:h(y.storyBefore),storyAfter:h(y.storyAfter)};if(f&&JSON.stringify(f)!==JSON.stringify(I))return n("legacy-story-pr-checkpoint-journal-conflict");f||await tt(d,b,I);const N=Oe(o,p,y);if(m&&(N.stateCurrent!==y.stateAfter||N.storyCurrent!==y.storyAfter))return n("legacy-story-pr-checkpoint-accepted-physical-mismatch");N.stateCurrent===y.stateBefore&&(await Y(A(o,".neocortex"),"state.json",y.stateAfter,I.stateBefore),await t.afterStatePersist?.()),Oe(o,p,y).storyCurrent===y.storyBefore&&(await Y(A(o,"docs/stories"),`${p.storyId}.story.md`,y.storyAfter,I.storyBefore),await t.afterStoryPersist?.());const _=Oe(o,p,y);return _.stateCurrent!==y.stateAfter||_.storyCurrent!==y.storyAfter?n("legacy-story-pr-checkpoint-post-write-mismatch"):(m||await tt(d,w,I),{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c10-checkpoint",storyId:p.storyId,epicId:p.epicId,branch:p.branch,repository:p.repository,number:u.number,url:u.url,headSha:p.headSha,stateSha256:I.stateAfter,storySha256:I.storyAfter,reused:!!m,checkpointAccepted:!0,localOnly:!0})})}catch(o){const l=o instanceof Error?o.message:"";return n(l.startsWith("legacy-story-pr-")?l:l.includes("secure-filesystem-cas-conflict")?"legacy-story-pr-checkpoint-write-raced":"legacy-story-pr-checkpoint-failed")}finally{await oe(s.path,s.owner).catch(()=>{})}}async function sr(t){if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0)return n("legacy-story-pr-checkpoint-number-invalid");try{const r=D(t.projectRoot),a=we(t,!0);if(!a.ok)return a;const e=a.value,s=Me(r,e,t.prNumber),o=Oe(r,e,s);if(o.stateCurrent!==s.stateAfter||o.storyCurrent!==s.storyAfter)return n("legacy-story-pr-checkpoint-not-accepted");const l=await T(await G(r),"legacy-story-pr-intents"),p=h(e.storyId),y=await ve(l,`${p}.c10.json`),i=await ve(l,`${p}.c10.accepted.json`);if(!y||!i||JSON.stringify(y)!==JSON.stringify(i))return n("legacy-story-pr-checkpoint-not-accepted");const d=Se(e,await(t.provider??he).list(e.repository,e.branch,e.baseBranch));if(!d||d.number!==t.prNumber)return n("legacy-story-pr-checkpoint-provider-mismatch");const c={schemaVersion:1,kind:"legacy-story-c10-acceptance-intent",storyId:e.storyId,planDigest:h(JSON.stringify(e)),repository:e.repository,number:d.number,url:d.url,qaDigest:i.qaDigest,stateBefore:h(s.stateBefore),stateAfter:h(s.stateAfter),storyBefore:h(s.storyBefore),storyAfter:h(s.storyAfter)};return JSON.stringify(i)!==JSON.stringify(c)?n("legacy-story-pr-checkpoint-journal-conflict"):{ok:!0,value:Object.freeze({plan:e,receipt:Object.freeze({schemaVersion:1,kind:"legacy-story-c10-checkpoint",storyId:e.storyId,epicId:e.epicId,branch:e.branch,repository:e.repository,number:d.number,url:d.url,headSha:e.headSha,stateSha256:i.stateAfter,storySha256:i.storyAfter,reused:!0,checkpointAccepted:!0,localOnly:!0})})}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-story-pr-")?a:"legacy-story-pr-checkpoint-read-failed")}}function Et(t,r){const a=v(t,"diff","--raw","-z",r.baseSha,r.headSha),e=v(t,"diff","--name-only","-z",r.baseSha,r.headSha).split("\0").filter(Boolean);if(e.length===0||e.length>256||e.some(s=>!rt(s)))throw new Error("legacy-story-pr-review-diff-invalid");return{diffSha256:h(a),changedPaths:Object.freeze(e)}}function rt(t){return t.length>0&&t.length<=240&&/^[A-Za-z0-9_.-]+(?:\/[A-Za-z0-9_.-]+)*$/.test(t)&&t.split("/").every(r=>r!=="."&&r!=="..")}function ke(t,r,a,e){const s=S(JSON.parse(r.stateAfter)),o=S(S(s?.stories)?.[t.storyId]);if(!o||o.status!=="pr-created"||o.last_step!==ie||o.pr_number!==a||o.review_request!=null||!Array.isArray(o.steps_completed)||!o.steps_completed.includes(ie)||o.steps_completed.includes(ne))throw new Error("legacy-story-pr-review-state-conflict");o.status="pr-reviewed",o.last_step=ne,o.steps_completed=[...o.steps_completed,ne],o.review_request={schemaVersion:1,kind:"git-pull-request",gitPullRequest:!0,prNumber:a,headSha:t.headSha,reviewEvidenceDigest:e};const l=`${JSON.stringify(s,null,2)}
+`,p=r.storyAfter.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!p)throw new Error("legacy-story-pr-review-frontmatter-invalid");const y=ae(p[1],{strict:!0,uniqueKeys:!0}),i=S(y.toJS()),d=["stepsCompleted","steps_completed"].filter(f=>y.has(f)),c=["lastStep","last_step"].filter(f=>y.has(f)),b=i?.[d[0]];if(y.errors.length>0||y.get("id")!==t.storyId||(y.get("epic_id")??y.get("epic"))!==t.epicId||y.get("status")!=="pr-created"||d.length!==1||c.length!==1||y.has("currentStatus")&&y.get("currentStatus")!=="pr-created"||i?.[c[0]]!==ie||!Array.isArray(b)||!b.includes(ie))throw new Error("legacy-story-pr-review-frontmatter-conflict");y.set("status","pr-reviewed"),y.has("currentStatus")&&y.set("currentStatus","pr-reviewed"),y.set(d[0],[...b,ne]),y.set(c[0],ne);const w=`---
+${y.toString({lineWidth:0})}---
+${r.storyAfter.slice(p[0].length)}`;return{stateBefore:r.stateAfter,stateAfter:l,storyBefore:r.storyAfter,storyAfter:w,storyPath:r.storyPath}}async function ue(t){const r=D(t.projectRoot),a=we(t,!0);if(!a.ok)throw new Error(a.reasonCode);const e=a.value;if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0)throw new Error("legacy-story-pr-review-number-invalid");const s=Me(r,e,t.prNumber),o=await T(await G(r),"legacy-story-pr-intents"),l=h(e.storyId),p=await ve(o,`${l}.c10.json`),y=await ve(o,`${l}.c10.accepted.json`);if(!p||!y||JSON.stringify(p)!==JSON.stringify(y))throw new Error("legacy-story-pr-review-c10-unaccepted");const i=Se(e,await(t.provider??he).list(e.repository,e.branch,e.baseBranch));if(!i||i.number!==t.prNumber)throw new Error("legacy-story-pr-review-provider-mismatch");const d={schemaVersion:1,kind:"legacy-story-c10-acceptance-intent",storyId:e.storyId,planDigest:h(JSON.stringify(e)),repository:e.repository,number:i.number,url:i.url,qaDigest:y.qaDigest,stateBefore:h(s.stateBefore),stateAfter:h(s.stateAfter),storyBefore:h(s.storyBefore),storyAfter:h(s.storyAfter)};if(JSON.stringify(y)!==JSON.stringify(d))throw new Error("legacy-story-pr-review-c10-journal-conflict");const c=Et(r,e),b=Object.freeze({schemaVersion:1,kind:"legacy-story-pr-review-plan",storyId:e.storyId,epicId:e.epicId,repository:e.repository,branch:e.branch,baseBranch:e.baseBranch,baseSha:e.baseSha,headSha:e.headSha,prNumber:t.prNumber,diffSha256:c.diffSha256,changedPaths:c.changedPaths,checkpointAccepted:!1,localOnly:!0});return{cwd:r,plan:e,c10:s,directory:o,reviewPlan:b}}function le(t,r,a){const e=we({projectRoot:t,storyId:r.storyId},!0);if(!e.ok||JSON.stringify(e.value)!==JSON.stringify(r))throw new Error("legacy-story-pr-review-physical-drift");const s=E(A(t,".neocortex/state.json"),2*1024*1024),o=E(A(t,a.storyPath),2*1024*1024);if(![a.stateBefore,a.stateAfter].includes(s)||![a.storyBefore,a.storyAfter].includes(o))throw new Error("legacy-story-pr-review-preimage-conflict");if(v(t,"status","--porcelain=v1","-uall").split(`
+`).filter(Boolean).some(p=>!p.startsWith(" M ")||![".neocortex/state.json",a.storyPath].includes(p.slice(3))))throw new Error("legacy-story-pr-review-worktree-dirty");return{stateCurrent:s,storyCurrent:o}}function at(t,r,a){if(!Array.isArray(a)||a.length<1||a.length>64)return!1;const e=new Set;return a.every(s=>{const o=S(s);if(!o||Object.keys(o).sort().join(",")!=="disposition,id,path,sha256"||typeof o.id!="string"||!/^[A-Za-z0-9][A-Za-z0-9_.-]{0,63}$/.test(o.id)||e.has(o.id)||typeof o.path!="string"||!rt(o.path)||typeof o.sha256!="string"||!/^[a-f0-9]{64}$/.test(o.sha256)||o.disposition!=="passed"&&o.disposition!=="not-applicable")return!1;e.add(o.id);try{return h(v(t,"show",`${r}:${o.path}`))===o.sha256}catch{return!1}})}function Bt(t,r){if(!Array.isArray(r)||r.length>16)return!1;const a=new Map([["documentation-gap","update-docs"],["test-gap","add-regression-test"],["minor-maintainability","simplify-code"]]),e=new Set;return r.every(s=>{const o=S(s);if(!o||Object.keys(o).sort().join(",")!=="actionCode,id,path,reasonCode,severity,sha256"||typeof o.id!="string"||!/^F[1-9][0-9]{0,2}$/.test(o.id)||e.has(o.id)||o.severity!=="P3"||typeof o.reasonCode!="string"||o.actionCode!==a.get(o.reasonCode)||typeof o.path!="string"||!t.reviewPlan.changedPaths.includes(o.path)||typeof o.sha256!="string"||!/^[a-f0-9]{64}$/.test(o.sha256))return!1;e.add(o.id);try{return h(v(t.cwd,"show",`${t.reviewPlan.headSha}:${o.path}`))===o.sha256}catch{return!1}})}function Ee(t,r){if(Buffer.byteLength(t)>32*1024)throw new Error("legacy-story-pr-review-report-unsafe");const a=S(JSON.parse(t)),e=r.reviewPlan;if(!a||Object.keys(a).sort().join(",")!==["acceptanceEvidence","baseSha","blockingFindings","diffSha256","epicId","headSha","kind","nonBlockingFindings","prNumber","remoteObservations","schemaVersion","sddEvidence","storyId","verdict"].sort().join(",")||a.schemaVersion!==1||a.kind!=="legacy-story-pr-review"||a.storyId!==e.storyId||a.epicId!==e.epicId||a.prNumber!==e.prNumber||a.headSha!==e.headSha||a.baseSha!==e.baseSha||a.diffSha256!==e.diffSha256||a.verdict!=="approved"||!Array.isArray(a.blockingFindings)||a.blockingFindings.length!==0||!Bt(r,a.nonBlockingFindings)||!Array.isArray(a.remoteObservations)||a.remoteObservations.length>1||a.remoteObservations.some(s=>{const o=S(s);return!o||!Array.isArray(o.reasonCodes)||o.reasonCodes.length===0||_e(s,e.storyId,e.prNumber)===null})||!at(r.cwd,e.headSha,a.acceptanceEvidence)||!at(r.cwd,e.headSha,a.sddEvidence))throw new Error("legacy-story-pr-review-report-invalid");return{report:a,raw:t,sha256:h(t)}}function st(t,r){if(W(t).isSymbolicLink())throw new Error("legacy-story-pr-review-report-unsafe");return Ee(E(t,32*1024),r)}async function ot(t,r){const a=await r.view(t.plan.repository,t.reviewPlan.prNumber),e=t.reviewPlan;if(a.number!==e.prNumber||a.state!=="OPEN"||a.headRefName!==e.branch||a.headRefOid!==e.headSha||a.baseRefName!==e.baseBranch||a.baseRefOid!==e.baseSha||a.url.toLowerCase()!==`https://github.com/${e.repository}/pull/${e.prNumber}`.toLowerCase())throw new Error("legacy-story-pr-review-remote-provider-mismatch");const s=fe(a.statusCheckRollup);if(!s.ok)throw new Error("legacy-story-pr-review-remote-observation-unclassified");return s.value}async function it(t,r,a){if(r.remoteObservations.length===0)return;const e=await ot(t,a);if(JSON.stringify(e)!==JSON.stringify(r.remoteObservations[0]))throw new Error("legacy-story-pr-review-remote-observation-drift")}async function or(t){try{const r=await ue(t),a=le(r.cwd,r.plan,ke(r.plan,r.c10,t.prNumber,"0".repeat(64)));if(a.stateCurrent!==r.c10.stateAfter||a.storyCurrent!==r.c10.storyAfter)return n("legacy-story-pr-review-already-transitioned");const e=await ot(r,t.mergeProvider??F);return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c11-remote-observation",storyId:r.plan.storyId,prNumber:t.prNumber,observation:e,checkpointAccepted:!1,mergeAuthorized:!1,publicSafe:!0})}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-story-pr-")?a:"legacy-story-pr-review-remote-observe-failed")}}async function ce(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,64*1024)));if(!e||e.schemaVersion!==1||e.kind!=="legacy-story-c11-acceptance-intent"||typeof e.reviewSha256!="string"||!/^[a-f0-9]{64}$/.test(e.reviewSha256)||typeof e.qaSha256!="string"||!/^[a-f0-9]{64}$/.test(e.qaSha256)||typeof e.reviewRaw!="string"||h(e.reviewRaw)!==e.reviewSha256)throw new Error("legacy-story-pr-review-journal-invalid");return e}async function nt(t,r,a){await L(t,r,`${JSON.stringify(a)}
+`),await P(A(t,r),t)}async function ir(t){try{const r=await ue(t),a=le(r.cwd,r.plan,ke(r.plan,r.c10,t.prNumber,"0".repeat(64)));return a.stateCurrent!==r.c10.stateAfter||a.storyCurrent!==r.c10.storyAfter?n("legacy-story-pr-review-already-transitioned"):{ok:!0,value:r.reviewPlan}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-story-pr-")?a:"legacy-story-pr-review-plan-failed")}}async function nr(t){if(!t.authorize)return n("legacy-story-pr-review-authorization-required");let r,a,e=null;try{r=await ue(t),a=st(t.reportFile,r),await it(r,a.report,t.mergeProvider??F);const l=ke(r.plan,r.c10,t.prNumber,a.sha256),p=le(r.cwd,r.plan,l);if(p.stateCurrent===r.c10.stateAfter&&p.storyCurrent===r.c10.storyAfter)try{e=await de(r.plan,r.cwd,t.verifyQa)}catch{throw new Error("legacy-story-pr-review-qa-failed")}}catch(l){const p=l instanceof Error?l.message:"";return n(p.startsWith("legacy-story-pr-")?p:"legacy-story-pr-review-preflight-failed")}const s=`legacy-c11-accept-${re(16).toString("hex")}`,o=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:s,idempotencyKey:s,expiresAt:new Date(Date.now()+5*6e4).toISOString(),persistent:!1});if(!o.ok)return n(o.reasonCode);try{const l=await ue(t);if(JSON.stringify(l.reviewPlan)!==JSON.stringify(r.reviewPlan))return n("legacy-story-pr-review-plan-drift");const p=st(t.reportFile,l);if(p.sha256!==a.sha256)return n("legacy-story-pr-review-report-drift");await it(l,p.report,t.mergeProvider??F);const y=ke(l.plan,l.c10,t.prNumber,p.sha256),i=le(l.cwd,l.plan,y),d=h(l.plan.storyId),c=`${d}.c11.json`,b=`${d}.c11.accepted.json`,w=await ce(l.directory,c),f=await ce(l.directory,b);if(!w&&(!e||i.stateCurrent!==y.stateBefore||i.storyCurrent!==y.storyBefore))return n("legacy-story-pr-review-unjournaled-drift");if(f&&(!w||JSON.stringify(f)!==JSON.stringify(w)))return n("legacy-story-pr-review-accepted-conflict");const m={schemaVersion:1,kind:"legacy-story-c11-acceptance-intent",storyId:l.plan.storyId,planDigest:h(JSON.stringify(l.reviewPlan)),prNumber:t.prNumber,reviewSha256:p.sha256,qaSha256:w?.qaSha256??e,reviewRaw:p.raw,stateBefore:h(y.stateBefore),stateAfter:h(y.stateAfter),storyBefore:h(y.storyBefore),storyAfter:h(y.storyAfter)};if(w&&JSON.stringify(w)!==JSON.stringify(m))return n("legacy-story-pr-review-journal-conflict");w||await nt(l.directory,c,m);const u=le(l.cwd,l.plan,y);if(f&&(u.stateCurrent!==y.stateAfter||u.storyCurrent!==y.storyAfter))return n("legacy-story-pr-review-accepted-physical-mismatch");u.stateCurrent===y.stateBefore&&(await Y(A(l.cwd,".neocortex"),"state.json",y.stateAfter,m.stateBefore),await t.afterStatePersist?.()),le(l.cwd,l.plan,y).storyCurrent===y.storyBefore&&(await Y(A(l.cwd,"docs/stories"),`${l.plan.storyId}.story.md`,y.storyAfter,m.storyBefore),await t.afterStoryPersist?.());const N=le(l.cwd,l.plan,y);return N.stateCurrent!==y.stateAfter||N.storyCurrent!==y.storyAfter?n("legacy-story-pr-review-post-write-mismatch"):(f||await nt(l.directory,b,m),{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c11-checkpoint",storyId:l.plan.storyId,epicId:l.plan.epicId,branch:l.plan.branch,prNumber:t.prNumber,headSha:l.plan.headSha,reviewSha256:m.reviewSha256,qaSha256:m.qaSha256,stateSha256:m.stateAfter,storySha256:m.storyAfter,reused:!!f,checkpointAccepted:!0,localOnly:!0})})}catch(l){const p=l instanceof Error?l.message:"";return n(p.startsWith("legacy-story-pr-")?p:p.includes("secure-filesystem-cas-conflict")?"legacy-story-pr-review-write-raced":"legacy-story-pr-review-accept-failed")}finally{await oe(o.path,o.owner).catch(()=>{})}}async function xt(t){try{const r=await ue(t),a=h(r.plan.storyId),e=await ce(r.directory,`${a}.c11.json`),s=await ce(r.directory,`${a}.c11.accepted.json`);if(!e||!s||JSON.stringify(e)!==JSON.stringify(s))return n("legacy-story-pr-review-not-accepted");const o=Ee(s.reviewRaw,r),l=ke(r.plan,r.c10,t.prNumber,o.sha256),p={schemaVersion:1,kind:"legacy-story-c11-acceptance-intent",storyId:r.plan.storyId,planDigest:h(JSON.stringify(r.reviewPlan)),prNumber:t.prNumber,reviewSha256:o.sha256,qaSha256:s.qaSha256,reviewRaw:o.raw,stateBefore:h(l.stateBefore),stateAfter:h(l.stateAfter),storyBefore:h(l.storyBefore),storyAfter:h(l.storyAfter)};if(JSON.stringify(s)!==JSON.stringify(p))return n("legacy-story-pr-review-journal-conflict");const y=le(r.cwd,r.plan,l);return y.stateCurrent!==l.stateAfter||y.storyCurrent!==l.storyAfter?n("legacy-story-pr-review-physical-not-accepted"):{ok:!0,value:Object.freeze({plan:r.reviewPlan,receipt:Object.freeze({schemaVersion:1,kind:"legacy-story-c11-checkpoint",storyId:r.plan.storyId,epicId:r.plan.epicId,branch:r.plan.branch,prNumber:t.prNumber,headSha:r.plan.headSha,reviewSha256:s.reviewSha256,qaSha256:s.qaSha256,stateSha256:s.stateAfter,storySha256:s.storyAfter,reused:!0,checkpointAccepted:!0,localOnly:!0})})}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-story-pr-")?a:"legacy-story-pr-review-read-failed")}}function ct(t,r,a){const e=o=>o.map(l=>`- ${l.id}: ${l.disposition}; ${l.path}; sha256:${l.sha256}`).join(`
+`),s=t.nonBlockingFindings.length===0?"None.":t.nonBlockingFindings.map(o=>`- ${o.id}: ${o.severity}; ${o.reasonCode}; ${o.actionCode}; ${o.path}; sha256:${o.sha256}`).join(`
+`);return`# ${t.storyId} \u2014 PR review
+
+Verdict: approved
+
+PR: ${t.prNumber}
+Reviewed HEAD: ${t.headSha}
+Base HEAD: ${t.baseSha}
+Diff SHA-256: ${t.diffSha256}
+Root review SHA-256: ${r}
+Local QA SHA-256: ${a}
+
+## Acceptance evidence
+
+${e(t.acceptanceEvidence)}
+
+## SDD evidence
+
+${e(t.sddEvidence)}
+
+## Non-blocking review debt
+
+${s}
+`}async function yt(t){try{const r=await xt(t);if(!r.ok)return r;const a=await ue(t),e=h(a.plan.storyId),s=await ce(a.directory,`${e}.c11.accepted.json`);if(!s||s.reviewSha256!==r.value.receipt.reviewSha256||s.qaSha256!==r.value.receipt.qaSha256)return n("legacy-story-pr-merge-review-drift");const o=Ee(s.reviewRaw,a),l=`.neocortex/stories/${a.plan.storyId}/review.md`;if(H(A(a.cwd,l)))return n("legacy-story-pr-merge-review-artifact-conflict");try{return g(a.cwd,"cat-file","-e",`${a.plan.headSha}:${l}`),n("legacy-story-pr-merge-review-artifact-conflict")}catch{}const p=ct(o.report,s.reviewSha256,s.qaSha256);return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-pr-merge-plan",storyId:a.plan.storyId,epicId:a.plan.epicId,repository:a.plan.repository,branch:a.plan.branch,baseBranch:a.plan.baseBranch,baseSha:a.plan.baseSha,originalHeadSha:a.plan.headSha,prNumber:t.prNumber,reviewArtifactPath:l,reviewArtifactSha256:h(p),reviewSha256:s.reviewSha256,qaSha256:s.qaSha256,stateSha256:s.stateAfter,storySha256:s.storyAfter,nextAuthority:"root-review-commit-and-new-head-qa-required",physicalMerge:!1,localOnly:!0})}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-story-pr-")?a:"legacy-story-pr-merge-plan-failed")}}async function Ie(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,64*1024))),s=S(e?.plan);if(!e||e.schemaVersion!==1||e.kind!=="legacy-story-c12-review-commit-intent"||!s||s.kind!=="legacy-story-pr-merge-plan"||typeof s.reviewArtifactSha256!="string"||typeof e.reviewArtifact!="string"||h(e.reviewArtifact)!==s.reviewArtifactSha256)throw new Error("legacy-story-pr-merge-intent-invalid");if(e.remoteDebt!==void 0){const o=S(e.remoteDebt),l=S(o?.observation);if(!o||Object.keys(o).sort().join(",")!==["added","itemIds","observation","observedAt","registryAfterSha256","registryBeforeSha256","registryExisted"].sort().join(",")||!l||o.registryExisted!==!0||typeof o.observedAt!="string"||!Number.isFinite(Date.parse(o.observedAt))||new Date(o.observedAt).toISOString()!==o.observedAt||typeof o.registryBeforeSha256!="string"||!/^[a-f0-9]{64}$/.test(o.registryBeforeSha256)||typeof o.registryAfterSha256!="string"||!/^[a-f0-9]{64}$/.test(o.registryAfterSha256)||!Number.isSafeInteger(o.added)||o.added<0||!Array.isArray(o.itemIds)||o.itemIds.some(p=>typeof p!="string"))throw new Error("legacy-story-pr-merge-intent-invalid")}return e}async function Ae(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,4096)));if(!e||e.schemaVersion!==1||e.kind!=="legacy-story-c12-prepared"||typeof e.intentSha256!="string"||!/^[a-f0-9]{64}$/.test(e.intentSha256)||typeof e.candidateHeadSha!="string"||!/^[a-f0-9]{40}$/.test(e.candidateHeadSha)||typeof e.qaSha256!="string"||!/^[a-f0-9]{64}$/.test(e.qaSha256))throw new Error("legacy-story-pr-merge-prepared-journal-invalid");return e}function Dt(t,r){const a=[A(t,".neocortex"),A(t,".neocortex/stories"),A(t,".neocortex/stories",r)];for(const e of a)if(H(e)||St(e,{mode:448}),!W(e).isDirectory()||D(e)!==e)throw new Error("legacy-story-pr-merge-review-directory-unsafe");return a[2]}const pe=".neocortex/tech-debt-registry.json",Jt='{"schema_version":2,"items":[]}';function We(t,r){const a=v(t,"ls-tree",r,"--",pe).trim();if(!a)return{existed:!1,raw:Jt};if(!/^100644 blob [a-f0-9]{40}\t\.neocortex\/tech-debt-registry\.json$/.test(a))throw new Error("legacy-story-pr-merge-remote-debt-registry-unsafe");return{existed:!0,raw:v(t,"show",`${r}:${pe}`)}}function Be(t,r){const a=r.remoteDebt;if(!a)return null;const e=We(t,r.plan.originalHeadSha);if(!e.existed||h(e.raw)!==a.registryBeforeSha256)throw new Error("legacy-story-pr-merge-remote-debt-registry-drift");const s=Re({registryRaw:e.raw,observation:a.observation,storyId:r.plan.storyId,prNumber:r.plan.prNumber,nowIso:a.observedAt});if(!s||s.registryAfterSha256!==a.registryAfterSha256||s.added!==a.added||JSON.stringify(s.itemIds)!==JSON.stringify(a.itemIds)||a.observation.reasonCodes.length===0)throw new Error("legacy-story-pr-merge-remote-debt-intent-invalid");return s}function xe(t){const r=t.plan;return[".neocortex/state.json",`docs/stories/${r.storyId}.story.md`,r.reviewArtifactPath,...t.remoteDebt?.added?[pe]:[]].sort()}function De(t,r,a){const e=r.plan;if(g(t,"rev-parse",`${a}^`)!==e.originalHeadSha||g(t,"rev-list","--count",`${e.originalHeadSha}..${a}`)!=="1")throw new Error("legacy-story-pr-merge-candidate-parent-invalid");const s=v(t,"diff-tree","--no-commit-id","--name-only","-r","-z",a).split("\0").filter(Boolean).sort(),o=Be(t,r);if(JSON.stringify(s)!==JSON.stringify(xe(r))||h(v(t,"show",`${a}:.neocortex/state.json`))!==e.stateSha256||h(v(t,"show",`${a}:docs/stories/${e.storyId}.story.md`))!==e.storySha256||h(v(t,"show",`${a}:${e.reviewArtifactPath}`))!==e.reviewArtifactSha256||o&&h(v(t,"show",`${a}:${pe}`))!==o.registryAfterSha256||!v(t,"log","-1","--format=%B",a).split(`
+`).map(l=>l.trim()).includes(`Neocortex-Legacy-Review: ${e.storyId}`))throw new Error("legacy-story-pr-merge-candidate-invalid")}function Je(t,r,a,e){const s=r.plan;if(X(t)!==s.repository||g(t,"branch","--show-current")!==s.branch||z(t,s.baseBranch)!==s.baseSha||a.storyId!==s.storyId||a.reviewSha256!==s.reviewSha256||a.qaSha256!==s.qaSha256||a.stateAfter!==s.stateSha256||a.storyAfter!==s.storySha256)throw new Error("legacy-story-pr-merge-intent-drift");const o=g(t,"rev-parse","HEAD"),l=z(t,s.branch);if(o!==s.originalHeadSha&&De(t,r,o),l!==s.originalHeadSha&&l!==o)throw new Error("legacy-story-pr-merge-remote-drift");const p={schemaVersion:1,kind:"legacy-story-pr-plan",storyId:s.storyId,epicId:s.epicId,repository:s.repository,branch:s.branch,baseBranch:s.baseBranch,baseSha:s.baseSha,headSha:l,qaAuthority:"root-review-required",localOnly:!0},y=Se(p,e);if(!y||y.number!==s.prNumber)throw new Error("legacy-story-pr-merge-provider-drift");const i=E(A(t,".neocortex/state.json"),2*1024*1024),d=E(A(t,`docs/stories/${s.storyId}.story.md`),2*1024*1024);if(h(i)!==s.stateSha256||h(d)!==s.storySha256)throw new Error("legacy-story-pr-merge-checkpoint-drift");const c=Be(t,r);if(c){const w=A(t,pe),m=H(w)?h(E(w,2*1024*1024)):null;if(o===s.originalHeadSha?m!==c.registryBeforeSha256&&m!==c.registryAfterSha256:m!==c.registryAfterSha256)throw new Error("legacy-story-pr-merge-remote-debt-registry-drift")}const b=v(t,"status","--porcelain=v1","-uall").split(`
+`).filter(Boolean);if(o===s.originalHeadSha){const w=new Set(xe(r));if(b.some(f=>!w.has(f.slice(3))||![" M","M ","MM","??","A "].includes(f.slice(0,2))))throw new Error("legacy-story-pr-merge-worktree-dirty")}else if(b.length>0)throw new Error("legacy-story-pr-merge-worktree-dirty");return{headSha:o,remoteSha:l}}async function cr(t){if(!t.authorize)return n("legacy-story-pr-merge-authorization-required");if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0||!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-pr-merge-target-invalid");const r=`legacy-c12-prepare-${re(16).toString("hex")}`,a=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:r,idempotencyKey:r,expiresAt:new Date(Date.now()+60*6e4).toISOString(),persistent:!1});if(!a.ok)return n(a.reasonCode);try{const e=D(t.projectRoot),s=await T(await G(e),"legacy-story-pr-intents"),o=h(t.storyId),l=await ce(s,`${o}.c11.json`),p=await ce(s,`${o}.c11.accepted.json`);if(!l||!p||JSON.stringify(l)!==JSON.stringify(p))return n("legacy-story-pr-merge-review-unaccepted");const y=`${o}.c12.json`,i=`${o}.c12.prepared.json`;let d=await Ie(s,y);if(!d){const _=await yt(t);if(!_.ok)return _;const $=await ue(t),k=Ee(p.reviewRaw,$),j=ct(k.report,p.reviewSha256,p.qaSha256);let B;if(t.recordRemoteDebt){const x=_.value,J=await(t.mergeProvider??F).view(x.repository,x.prNumber);ee(x,x.originalHeadSha,J,"OPEN");const R=fe(J.statusCheckRollup);if(!R.ok)return n("legacy-story-pr-merge-remote-observation-unclassified");if(R.value.reasonCodes.length===0)return n("legacy-story-pr-merge-remote-debt-not-required");const C=We(e,x.originalHeadSha);if(!C.existed)return n("legacy-story-pr-merge-remote-debt-registry-missing");const V=A(e,pe);if((H(V)?E(V,2*1024*1024):null)!==C.raw)return n("legacy-story-pr-merge-remote-debt-registry-drift");const K=new Date().toISOString(),M=Re({registryRaw:C.raw,observation:R.value,storyId:x.storyId,prNumber:x.prNumber,nowIso:K});if(!M)return n("legacy-story-pr-merge-remote-debt-registry-invalid");B={observation:R.value,observedAt:K,registryExisted:C.existed,registryBeforeSha256:M.registryBeforeSha256,registryAfterSha256:M.registryAfterSha256,added:M.added,itemIds:M.itemIds}}d={schemaVersion:1,kind:"legacy-story-c12-review-commit-intent",plan:_.value,reviewArtifact:j,...B?{remoteDebt:B}:{}},await L(s,y,`${JSON.stringify(d)}
+`),await P(A(s,y),s)}const c=d.plan;if(c.storyId!==t.storyId||c.prNumber!==t.prNumber||h(d.reviewArtifact)!==c.reviewArtifactSha256||!!d.remoteDebt!=!!t.recordRemoteDebt)return n("legacy-story-pr-merge-intent-conflict");const b=t.provider??he,w=async()=>Je(e,d,p,await b.list(c.repository,c.branch,c.baseBranch));let f=await w();const m=h(JSON.stringify(d)),u=await Ae(s,i);if(u)return u.intentSha256!==m||u.candidateHeadSha!==f.headSha||f.remoteSha!==f.headSha?n("legacy-story-pr-merge-prepared-conflict"):{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-prepared",storyId:c.storyId,epicId:c.epicId,branch:c.branch,prNumber:c.prNumber,originalHeadSha:c.originalHeadSha,candidateHeadSha:u.candidateHeadSha,qaSha256:u.qaSha256,registryRecorded:!!d.remoteDebt,reused:!0,physicalMerge:!1,localOnly:!0})};if(f.headSha===c.originalHeadSha){if(f.remoteSha!==c.originalHeadSha)return n("legacy-story-pr-merge-remote-drift");const _=Be(e,d);if(_){const B=await(t.mergeProvider??F).view(c.repository,c.prNumber);ee(c,c.originalHeadSha,B,"OPEN");const x=fe(B.statusCheckRollup);if(!x.ok||x.value.digest!==d.remoteDebt.observation.digest||JSON.stringify(x.value)!==JSON.stringify(d.remoteDebt.observation))return n("legacy-story-pr-merge-remote-debt-observation-drift");if(_.added>0){const J=A(e,pe),R=H(J)?E(J,2*1024*1024):null;if(R!==_.registryAfterRaw)if(R===We(e,c.originalHeadSha).raw){const C=A(e,".neocortex");if(!W(C).isDirectory()||D(C)!==C)return n("legacy-story-pr-merge-remote-debt-registry-unsafe");await Y(C,"tech-debt-registry.json",_.registryAfterRaw,_.registryBeforeSha256)}else return n("legacy-story-pr-merge-remote-debt-registry-drift")}}const $=Dt(e,c.storyId),k=A($,"review.md");if(H(k)){if(W(k).isSymbolicLink()||E(k,32*1024)!==d.reviewArtifact)return n("legacy-story-pr-merge-review-artifact-conflict")}else await L($,"review.md",d.reviewArtifact);f=await w(),g(e,"add","--",...xe(d));const j=v(e,"diff","--cached","--name-only","-z").split("\0").filter(Boolean).sort();if(JSON.stringify(j)!==JSON.stringify(xe(d))||h(v(e,"show",":.neocortex/state.json"))!==c.stateSha256||h(v(e,"show",`:docs/stories/${c.storyId}.story.md`))!==c.storySha256||h(v(e,"show",`:${c.reviewArtifactPath}`))!==c.reviewArtifactSha256||_&&h(v(e,"show",`:${pe}`))!==_.registryAfterSha256||v(e,"diff","--name-only","-z")!=="")return n("legacy-story-pr-merge-staged-scope-invalid");g(e,"diff","--cached","--check"),g(e,"commit","-m",`chore(story): record reviewed PR ${c.storyId}`,"-m",`Neocortex-Legacy-Review: ${c.storyId}`),f=await w(),await t.afterCommit?.()}if(f.headSha===c.originalHeadSha)return n("legacy-story-pr-merge-commit-missing");const I={schemaVersion:1,kind:"legacy-story-pr-plan",storyId:c.storyId,epicId:c.epicId,repository:c.repository,branch:c.branch,baseBranch:c.baseBranch,headSha:f.headSha,baseSha:c.baseSha,qaAuthority:"root-review-required",localOnly:!0};let N;try{N=await de(I,e,t.verifyQa)}catch{return n("legacy-story-pr-merge-new-head-qa-failed")}if(f=await w(),f.headSha===c.originalHeadSha)return n("legacy-story-pr-merge-candidate-raced");if(f.remoteSha===c.originalHeadSha&&g(e,"push","--porcelain","origin",`${f.headSha}:refs/heads/${c.branch}`),f=await w(),f.remoteSha!==f.headSha)return n("legacy-story-pr-merge-push-unverified");await t.afterPush?.();const O={schemaVersion:1,kind:"legacy-story-c12-prepared",intentSha256:m,candidateHeadSha:f.headSha,qaSha256:N};return await L(s,i,`${JSON.stringify(O)}
+`),await P(A(s,i),s),{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-prepared",storyId:c.storyId,epicId:c.epicId,branch:c.branch,prNumber:c.prNumber,originalHeadSha:c.originalHeadSha,candidateHeadSha:f.headSha,qaSha256:N,registryRecorded:!!d.remoteDebt,reused:!1,physicalMerge:!1,localOnly:!0})}}catch(e){const s=e instanceof Error?e.message:"";return n(s.startsWith("legacy-story-pr-")?s:"legacy-story-pr-merge-prepare-failed")}finally{await oe(a.path,a.owner).catch(()=>{})}}async function yr(t){if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0)return n("legacy-story-pr-merge-target-invalid");const r=await yt(t);if(!r.ok)return r;try{const a=r.value,e=await(t.mergeProvider??F).view(a.repository,a.prNumber);ee(a,a.originalHeadSha,e,"OPEN");const s=fe(e.statusCheckRollup);if(!s.ok)return n("legacy-story-pr-merge-remote-observation-unclassified");const o=_e(s.value,a.storyId,a.prNumber);if(!o)return n("legacy-story-pr-merge-remote-debt-projection-invalid");if(o.length===0)return n("legacy-story-pr-merge-remote-debt-not-required");const l=A(D(t.projectRoot),".neocortex/tech-debt-registry.json"),p=H(l),y=p?E(l,2*1024*1024):'{"schema_version":2,"items":[]}',i=Re({registryRaw:y,observation:s.value,storyId:a.storyId,prNumber:a.prNumber,nowIso:new Date().toISOString()});return i?{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-pre-prepare-debt-plan",storyId:a.storyId,epicId:a.epicId,prNumber:a.prNumber,originalHeadSha:a.originalHeadSha,baseSha:a.baseSha,remoteObservationDigest:s.value.digest,reasonCodes:s.value.reasonCodes,followUpDebt:o,registryExists:p,registryBeforeSha256:i.registryBeforeSha256,registryProjectedItemIds:i.itemIds,registryProjectedAdded:i.added,registryProjectedExisting:i.existing,registryMutationAuthorized:!1,canMerge:!1,publicSafe:!0})}:n("legacy-story-pr-merge-remote-debt-registry-invalid")}catch(a){const e=a instanceof Error?a.message:"";return n(e.startsWith("legacy-story-pr-")?e:"legacy-story-pr-merge-pre-prepare-debt-uncertain")}}function dt(t,r,a,e,s){const o=_e(a,t.storyId,t.prNumber);return!o||o.length===0?null:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-root-merge-decision",storyId:t.storyId,epicId:t.epicId,prNumber:t.prNumber,candidateHeadSha:r,baseSha:t.baseSha,reviewSha256:t.reviewSha256,remoteObservationDigest:a.digest,canMerge:!0,blockingChecks:[],nonBlockingChecks:Object.freeze(o.map(l=>Object.freeze({checkName:l.checkName,bucket:"nonBlockingChecks",reason:l.reason,origin:"remote_ci_cd",safeToContinueYoloop:!0}))),followUpDebt:o,registrySha256:e,registryItemIds:s,publicSafe:!0})}function Ht(t,r,a){const e=r.plan,s=S(t);if(s?.registrySha256!==void 0){const o=r.remoteDebt,l=o&&dt(e,a,o.observation,o.registryAfterSha256,o.itemIds);return!!l&&JSON.stringify(s)===JSON.stringify(l)}return!s||JSON.stringify(Object.keys(s).sort())!==JSON.stringify(["baseSha","blockingChecks","canMerge","candidateHeadSha","epicId","followUpDebt","kind","nonBlockingChecks","prNumber","remoteObservationDigest","reviewSha256","schemaVersion","storyId"].sort())?!1:s.schemaVersion===1&&s.kind==="legacy-story-c12-root-merge-decision"&&s.storyId===e.storyId&&s.epicId===e.epicId&&s.prNumber===e.prNumber&&s.candidateHeadSha===a&&s.baseSha===e.baseSha&&s.reviewSha256===e.reviewSha256&&typeof s.remoteObservationDigest=="string"&&/^[a-f0-9]{64}$/.test(s.remoteObservationDigest)&&s.canMerge===!0&&Array.isArray(s.blockingChecks)&&s.blockingChecks.length===0&&Array.isArray(s.nonBlockingChecks)&&s.nonBlockingChecks.length===0&&Array.isArray(s.followUpDebt)&&s.followUpDebt.length===0}async function Ce(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,4096)));if(!e||e.schemaVersion!==1||e.kind!=="legacy-story-c12-merge-attempt"||typeof e.intentSha256!="string"||!/^[a-f0-9]{64}$/.test(e.intentSha256)||typeof e.candidateHeadSha!="string"||!/^[a-f0-9]{40}$/.test(e.candidateHeadSha)||typeof e.qaSha256!="string"||!/^[a-f0-9]{64}$/.test(e.qaSha256)||typeof e.remoteObservationDigest!="string"||!/^[a-f0-9]{64}$/.test(e.remoteObservationDigest))throw new Error("legacy-story-pr-merge-attempt-invalid");return e}async function He(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,4096)));if(!e||e.schemaVersion!==1||e.kind!=="legacy-story-c12-merged"||typeof e.intentSha256!="string"||!/^[a-f0-9]{64}$/.test(e.intentSha256)||typeof e.candidateHeadSha!="string"||!/^[a-f0-9]{40}$/.test(e.candidateHeadSha)||typeof e.qaSha256!="string"||!/^[a-f0-9]{64}$/.test(e.qaSha256)||typeof e.remoteObservationDigest!="string"||!/^[a-f0-9]{64}$/.test(e.remoteObservationDigest)||typeof e.mergeCommitSha!="string"||!/^[a-f0-9]{40}$/.test(e.mergeCommitSha)||typeof e.baseHeadSha!="string"||!/^[a-f0-9]{40}$/.test(e.baseHeadSha))throw new Error("legacy-story-pr-merge-journal-invalid");return e}function ee(t,r,a,e){if(a.number!==t.prNumber||a.state!==e||a.headRefName!==t.branch||a.headRefOid!==r||a.baseRefName!==t.baseBranch||a.url.toLowerCase()!==`https://github.com/${t.repository}/pull/${t.prNumber}`.toLowerCase())throw new Error("legacy-story-pr-merge-provider-drift");if(e==="OPEN"&&(a.baseRefOid!==t.baseSha||a.isDraft!==!1||a.mergeable!=="MERGEABLE"))throw new Error("legacy-story-pr-merge-provider-not-ready")}function lt(t,r,a){const e=fe(t.statusCheckRollup);if(!e.ok)throw new Error("legacy-story-pr-merge-remote-observation-unclassified");if(!("registrySha256"in r)&&e.value.reasonCodes.length>0)throw new Error("legacy-story-pr-merge-remote-observation-unclassified");if(e.value.digest!==r.remoteObservationDigest)throw new Error("legacy-story-pr-merge-remote-observation-drift");if("registrySha256"in r&&(!a.remoteDebt||JSON.stringify(e.value)!==JSON.stringify(a.remoteDebt.observation)))throw new Error("legacy-story-pr-merge-remote-debt-observation-drift");return e.value}function Pt(t,r,a,e){const s=r.plan;ee(s,a.candidateHeadSha,e,"MERGED");const o=e.mergeCommit?.oid;if(!o||!/^[a-f0-9]{40}$/.test(o)||g(t,"rev-parse","HEAD")!==a.candidateHeadSha||v(t,"status","--porcelain=v1","-uall")!=="")throw new Error("legacy-story-pr-merge-physical-invalid");De(t,r,a.candidateHeadSha),g(t,"fetch","--no-tags","origin",`refs/heads/${s.baseBranch}`);const l=g(t,"rev-parse","FETCH_HEAD");if(z(t,s.baseBranch)!==l||!/^[a-f0-9]{40}$/.test(l))throw new Error("legacy-story-pr-merge-base-readback-drift");const p=g(t,"rev-list","--parents","-n","1",o).split(" ");if(p.length!==3||p[0]!==o||p[1]!==s.baseSha||p[2]!==a.candidateHeadSha)throw new Error("legacy-story-pr-merge-commit-parent-invalid");return g(t,"merge-base","--is-ancestor",o,l),{mergeCommitSha:o,baseHeadSha:l}}async function pt(t){if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0||!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-pr-merge-target-invalid");try{const r=D(t.projectRoot),a=g(r,"rev-parse","--git-common-dir"),e=D(Pe(a)?a:A(r,a)),s=A(e,"neocortex-yoloop"),o=A(s,"legacy-story-pr-intents");if(!H(s)||!H(o))return n("legacy-story-pr-merge-not-prepared");if(!W(s).isDirectory()||D(s)!==s)return n("legacy-story-pr-merge-runtime-unsafe");await je(o,s);const l=h(t.storyId),p=await Ie(o,`${l}.c12.json`),y=await Ae(o,`${l}.c12.prepared.json`),i=await ce(o,`${l}.c11.accepted.json`);if(!p||!y||!i)return n("legacy-story-pr-merge-not-prepared");const d=p.plan;if(d.storyId!==t.storyId||d.prNumber!==t.prNumber||y.intentSha256!==h(JSON.stringify(p))||i.reviewSha256!==d.reviewSha256||i.qaSha256!==d.qaSha256)return n("legacy-story-pr-merge-prepared-drift");const c=Je(r,p,i,await(t.provider??he).list(d.repository,d.branch,d.baseBranch));if(c.headSha!==y.candidateHeadSha||c.remoteSha!==y.candidateHeadSha)return n("legacy-story-pr-merge-remote-drift");De(r,p,y.candidateHeadSha);const b=await(t.mergeProvider??F).view(d.repository,d.prNumber);ee(d,y.candidateHeadSha,b,"OPEN");const w=fe(b.statusCheckRollup);if(!w.ok)return n("legacy-story-pr-merge-remote-observation-unclassified");const f=w.value;if(f.reasonCodes.length>0){const m=p.remoteDebt;if(m&&JSON.stringify(f)===JSON.stringify(m.observation)){const u=Be(r,p);if(!u)return n("legacy-story-pr-merge-remote-debt-registry-invalid");const I=dt(d,y.candidateHeadSha,f,u.registryAfterSha256,u.itemIds);return I?{ok:!0,value:I}:n("legacy-story-pr-merge-remote-debt-projection-invalid")}return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-remote-debt-required",storyId:d.storyId,epicId:d.epicId,prNumber:d.prNumber,candidateHeadSha:y.candidateHeadSha,baseSha:d.baseSha,reviewSha256:d.reviewSha256,remoteObservationDigest:f.digest,reasonCodes:f.reasonCodes,reasonCounts:f.reasonCounts,canMerge:!1,publicSafe:!0})}}return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-root-merge-decision",storyId:d.storyId,epicId:d.epicId,prNumber:d.prNumber,candidateHeadSha:y.candidateHeadSha,baseSha:d.baseSha,reviewSha256:d.reviewSha256,remoteObservationDigest:f.digest,canMerge:!0,blockingChecks:[],nonBlockingChecks:[],followUpDebt:[]})}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-story-pr-")?a:"legacy-story-pr-merge-decision-uncertain")}}async function dr(t){if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0||!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-pr-merge-target-invalid");const r=await pt(t);if(!r.ok)return n(r.reasonCode);if(r.value.canMerge)return n("legacy-story-pr-merge-remote-debt-not-required");const a=`legacy-c12-remote-debt-${re(16).toString("hex")}`,e=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:a,idempotencyKey:a,expiresAt:new Date(Date.now()+5*6e4).toISOString(),persistent:!1});if(!e.ok)return n(e.reasonCode);try{const s=await pt(t);if(!s.ok)return n(s.reasonCode);if(s.value.canMerge)return n("legacy-story-pr-merge-remote-debt-not-required");if(JSON.stringify(s.value)!==JSON.stringify(r.value))return n("legacy-story-pr-merge-remote-debt-observation-drift");const o=s.value,l=D(t.projectRoot),p=X(l),y=await(t.mergeProvider??F).view(p,o.prNumber);if(y.number!==o.prNumber||y.state!=="OPEN"||y.headRefOid!==o.candidateHeadSha||y.baseRefOid!==o.baseSha||y.headRefName!==`story/${o.epicId}/${o.storyId}`||y.isDraft!==!1||y.mergeable!=="MERGEABLE"||y.url.toLowerCase()!==`https://github.com/${p}/pull/${o.prNumber}`.toLowerCase())return n("legacy-story-pr-merge-remote-debt-observation-drift");const i=fe(y.statusCheckRollup);if(!i.ok||i.value.digest!==o.remoteObservationDigest)return n("legacy-story-pr-merge-remote-debt-observation-drift");const d=_e(i.value,o.storyId,o.prNumber);if(!d||d.length===0)return n("legacy-story-pr-merge-remote-debt-projection-invalid");const c=await T(await G(l),"legacy-story-pr-intents"),b={schemaVersion:1,kind:"legacy-story-c12-remote-debt-observation",planSha256:h(JSON.stringify(o)),storyId:o.storyId,epicId:o.epicId,prNumber:o.prNumber,candidateHeadSha:o.candidateHeadSha,remoteObservationDigest:o.remoteObservationDigest,reasonCodes:o.reasonCodes,reasonCounts:o.reasonCounts},w=`${h(o.storyId)}.${o.candidateHeadSha}.${o.remoteObservationDigest}.c12.remote-debt.json`,f=A(c,w),m=H(f);if(m){await P(f,c);const u=S(JSON.parse(E(f,4096)));if(!u||JSON.stringify(u)!==JSON.stringify(b))return n("legacy-story-pr-merge-remote-debt-journal-conflict")}else await L(c,w,`${JSON.stringify(b)}
+`),await P(f,c);return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-remote-debt-journaled",storyId:o.storyId,epicId:o.epicId,prNumber:o.prNumber,candidateHeadSha:o.candidateHeadSha,remoteObservationDigest:o.remoteObservationDigest,reasonCodes:o.reasonCodes,reasonCounts:o.reasonCounts,followUpDebt:d,reused:m,durableObservation:!0,registryRecorded:!1,canMerge:!1,publicSafe:!0})}}catch(s){const o=s instanceof Error?s.message:"";return n(o.startsWith("legacy-story-pr-")?o:"legacy-story-pr-merge-remote-debt-uncertain")}finally{await oe(e.path,e.owner).catch(()=>{})}}async function lr(t){if(!t.authorize)return n("legacy-story-pr-merge-authorization-required");if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0||!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-pr-merge-target-invalid");const r=`legacy-c12-merge-${re(16).toString("hex")}`,a=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:r,idempotencyKey:r,expiresAt:new Date(Date.now()+60*6e4).toISOString(),persistent:!1});if(!a.ok)return n(a.reasonCode);try{const e=D(t.projectRoot),s=await T(await G(e),"legacy-story-pr-intents"),o=h(t.storyId),l=await Ie(s,`${o}.c12.json`),p=await Ae(s,`${o}.c12.prepared.json`),y=await ce(s,`${o}.c11.accepted.json`);if(!l||!p||!y)return n("legacy-story-pr-merge-not-prepared");const i=l.plan,d=h(JSON.stringify(l));if(i.storyId!==t.storyId||i.prNumber!==t.prNumber||p.intentSha256!==d||X(e)!==i.repository||g(e,"branch","--show-current")!==i.branch||g(e,"rev-parse","HEAD")!==p.candidateHeadSha||y.reviewSha256!==i.reviewSha256||y.qaSha256!==i.qaSha256||y.stateAfter!==i.stateSha256||y.storyAfter!==i.storySha256||h(E(A(e,".neocortex/state.json"),2*1024*1024))!==i.stateSha256||h(E(A(e,`docs/stories/${i.storyId}.story.md`),2*1024*1024))!==i.storySha256||v(e,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-pr-merge-prepared-drift");De(e,l,p.candidateHeadSha);const c=`${o}.c12.merge-attempt.json`,b=`${o}.c12.merged.json`,w=await Ce(s,c),f=await He(s,b),m=t.mergeProvider??F,u=t.rootDecision;if((!w||u)&&!Ht(u,l,p.candidateHeadSha))return n("legacy-story-pr-merge-root-decision-required");if(w&&(w.intentSha256!==d||w.candidateHeadSha!==p.candidateHeadSha||u&&w.remoteObservationDigest!==u.remoteObservationDigest))return n("legacy-story-pr-merge-attempt-conflict");if(f&&(!w||f.intentSha256!==d||f.candidateHeadSha!==p.candidateHeadSha||f.qaSha256!==w.qaSha256||f.remoteObservationDigest!==w.remoteObservationDigest))return n("legacy-story-pr-merge-journal-conflict");if(!w){if(!u)return n("legacy-story-pr-merge-root-decision-required");const _=t.provider??he,$=Je(e,l,y,await _.list(i.repository,i.branch,i.baseBranch));if($.headSha!==p.candidateHeadSha||$.remoteSha!==p.candidateHeadSha)return n("legacy-story-pr-merge-remote-drift");const k=await m.view(i.repository,i.prNumber);ee(i,p.candidateHeadSha,k,"OPEN"),lt(k,u,l);const j={schemaVersion:1,kind:"legacy-story-pr-plan",storyId:i.storyId,epicId:i.epicId,repository:i.repository,branch:i.branch,baseBranch:i.baseBranch,headSha:p.candidateHeadSha,baseSha:i.baseSha,qaAuthority:"root-review-required",localOnly:!0};let B;try{B=await de(j,e,t.verifyQa)}catch{return n("legacy-story-pr-merge-final-qa-failed")}const x=Je(e,l,y,await _.list(i.repository,i.branch,i.baseBranch));if(x.headSha!==p.candidateHeadSha||x.remoteSha!==p.candidateHeadSha)return n("legacy-story-pr-merge-remote-drift");const J=await m.view(i.repository,i.prNumber);ee(i,p.candidateHeadSha,J,"OPEN");const R=lt(J,u,l),C={schemaVersion:1,kind:"legacy-story-c12-merge-attempt",intentSha256:d,candidateHeadSha:p.candidateHeadSha,qaSha256:B,remoteObservationDigest:R.digest};await L(s,c,`${JSON.stringify(C)}
+`),await P(A(s,c),s);try{await m.merge(i.repository,i.prNumber,p.candidateHeadSha)}catch{}await t.afterMerge?.()}const I=w??await Ce(s,c);if(!I)return n("legacy-story-pr-merge-attempt-missing");const N=await m.view(i.repository,i.prNumber);if(N.state!=="MERGED")return n("legacy-story-pr-merge-effect-not-confirmed");const O=Pt(e,l,p,N);if(f){if(f.mergeCommitSha!==O.mergeCommitSha)return n("legacy-story-pr-merge-journal-conflict");g(e,"merge-base","--is-ancestor",f.baseHeadSha,O.baseHeadSha)}else{const _={...I,kind:"legacy-story-c12-merged",mergeCommitSha:O.mergeCommitSha,baseHeadSha:O.baseHeadSha};await L(s,b,`${JSON.stringify(_)}
+`),await P(A(s,b),s)}return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-merged",storyId:i.storyId,epicId:i.epicId,prNumber:i.prNumber,branch:i.branch,candidateHeadSha:p.candidateHeadSha,mergeCommitSha:O.mergeCommitSha,baseHeadSha:O.baseHeadSha,qaSha256:I.qaSha256,remoteObservationDigest:I.remoteObservationDigest,reused:!!f,physicalMerge:!0,checkpointAccepted:!1,localOnly:!0})}}catch(e){const s=e instanceof Error?e.message:"";return n(s.startsWith("legacy-story-pr-")?s:"legacy-story-pr-merge-effect-uncertain")}finally{await oe(a.path,a.owner).catch(()=>{})}}const Ke={async view(t,r){const a=Q("gh",["issue","view",String(r),"--repo",t,"--json","number,title,state,url"],{encoding:"utf8",timeout:15e3,stdio:["ignore","pipe","pipe"],maxBuffer:16384});return JSON.parse(a)},async close(t,r){Q("gh",["issue","close",String(r),"--repo",t,"--reason","completed"],{encoding:"utf8",timeout:3e4,stdio:["ignore","pipe","pipe"],maxBuffer:16*1024})}};function ft(t,r,a){const e=v(t,"show",`${r.mergeCommitSha}:.neocortex/state.json`),s=`docs/stories/${r.storyId}.story.md`,o=v(t,"show",`${r.mergeCommitSha}:${s}`);if(h(e)!==r.stateSha256||h(o)!==r.storySha256)throw new Error("legacy-story-pr-post-merge-preimage-drift");const l=S(JSON.parse(e)),p=S(l?.stories),y=S(l?.epics),i=S(p?.[r.storyId]),d=S(y?.[r.epicId]),c=i?.steps_completed,b=d?.stories;if(!i||!d||d.id!==r.epicId||i.id!==r.storyId||i.epic_id!==r.epicId||i.status!=="pr-reviewed"||i.last_step!==ne||i.pr_number!==r.prNumber||i.issue_number!==r.issueNumber||i.branch_name!==`story/${r.epicId}/${r.storyId}`||!Array.isArray(c)||!c.includes(ne)||c.includes(ye)||!Array.isArray(b)||!b.includes(r.storyId)||new Set(b).size!==b.length||b.some(j=>typeof j!="string"||S(p?.[j])?.epic_id!==r.epicId))throw new Error("legacy-story-pr-post-merge-state-conflict");i.status="done",i.last_step=ye,i.steps_completed=[...c,ye],i.merged=!0,i.physicalMergeStatus="merged",i.merge_commit_sha=r.mergeCommitSha,i.issue_state="closed";const w=b.filter(j=>S(p?.[j])?.status==="done").length;if(d.total_stories=b.length,d.completed_stories=w,w===b.length)d.status="done",d.completed_at==null&&(d.completed_at=a);else if(d.status==="done")throw new Error("legacy-story-pr-post-merge-epic-conflict");const f=`${JSON.stringify(l,null,2)}
+`,m=o.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!m)throw new Error("legacy-story-pr-post-merge-frontmatter-invalid");const u=ae(m[1],{strict:!0,uniqueKeys:!0}),I=S(u.toJS()),N=["stepsCompleted","steps_completed"].filter(j=>u.has(j)),O=["lastStep","last_step"].filter(j=>u.has(j)),_=["issueNumber","issue_number"].filter(j=>u.has(j)),$=["prNumber","pr_number"].filter(j=>u.has(j));if(u.errors.length>0||u.get("id")!==r.storyId||(u.get("epic_id")??u.get("epic"))!==r.epicId||u.get("status")!=="pr-reviewed"||u.has("currentStatus")&&u.get("currentStatus")!=="pr-reviewed"||N.length!==1||O.length!==1||_.length>1||$.length>1||JSON.stringify(I?.[N[0]])!==JSON.stringify(c)||I?.[O[0]]!==ne||_.length===1&&I?.[_[0]]!==r.issueNumber||$.length===1&&I?.[$[0]]!==r.prNumber)throw new Error("legacy-story-pr-post-merge-frontmatter-conflict");u.set("status","done"),u.has("currentStatus")&&u.set("currentStatus","done"),u.set(N[0],[...c,ye]),u.set(O[0],ye),u.set("mergeCommitSha",r.mergeCommitSha),u.set("issueState","closed");const k=`---
+${u.toString({lineWidth:0})}---
+${o.slice(m[0].length)}`;return{stateBefore:e,stateAfter:f,storyBefore:o,storyAfter:k}}async function Rt(t){if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0||!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-pr-post-merge-target-invalid");try{const r=D(t.projectRoot);if(D(g(r,"rev-parse","--show-toplevel"))!==r||v(r,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-pr-post-merge-checkout-invalid");const a=g(r,"rev-parse","--git-common-dir"),e=D(Pe(a)?a:A(r,a)),s=A(e,"neocortex-yoloop"),o=A(s,"legacy-story-pr-intents");if(!H(s)||!H(o))return n("legacy-story-pr-post-merge-not-journaled");if(!W(s).isDirectory()||D(s)!==s)return n("legacy-story-pr-post-merge-runtime-unsafe");await je(o,s);const l=h(t.storyId),p=await Ie(o,`${l}.c12.json`),y=await Ae(o,`${l}.c12.prepared.json`),i=await Ce(o,`${l}.c12.merge-attempt.json`),d=await He(o,`${l}.c12.merged.json`);if(!p||!y||!i||!d)return n("legacy-story-pr-post-merge-not-journaled");const c=p.plan;if(c.storyId!==t.storyId||c.prNumber!==t.prNumber||y.intentSha256!==h(JSON.stringify(p))||i.intentSha256!==y.intentSha256||d.intentSha256!==i.intentSha256||i.candidateHeadSha!==y.candidateHeadSha||d.candidateHeadSha!==i.candidateHeadSha||d.qaSha256!==i.qaSha256||d.remoteObservationDigest!==i.remoteObservationDigest||X(r)!==c.repository||g(r,"branch","--show-current")!==c.baseBranch)return n("legacy-story-pr-post-merge-journal-drift");const b=g(r,"rev-parse","HEAD");if(b!==d.mergeCommitSha||z(r,c.baseBranch)!==b)return n("legacy-story-pr-post-merge-base-drift");const w=await(t.mergeProvider??F).view(c.repository,c.prNumber);if(ee(c,y.candidateHeadSha,w,"MERGED"),w.mergeCommit?.oid!==d.mergeCommitSha)return n("legacy-story-pr-post-merge-provider-drift");const f=g(r,"rev-list","--parents","-n","1",b).split(" ");if(f.length!==3||f[0]!==b||f[1]!==c.baseSha||f[2]!==y.candidateHeadSha)return n("legacy-story-pr-post-merge-parents-invalid");const m=v(r,"show","HEAD:.neocortex/state.json"),u=`docs/stories/${c.storyId}.story.md`,I=v(r,"show",`HEAD:${u}`);if(h(m)!==c.stateSha256||h(I)!==c.storySha256||E(A(r,".neocortex/state.json"),2*1024*1024)!==m||E(A(r,u),2*1024*1024)!==I)return n("legacy-story-pr-post-merge-content-drift");const N=S(JSON.parse(m)),O=S(S(N?.stories)?.[c.storyId]),_=O?.issue_number;if(!O||O.id!==c.storyId||O.epic_id!==c.epicId||O.status!=="pr-reviewed"||O.last_step!==ne||O.pr_number!==c.prNumber||O.branch_name!==c.branch||!Array.isArray(O.steps_completed)||!O.steps_completed.includes(ne)||!Number.isSafeInteger(_)||_<=0)return n("legacy-story-pr-post-merge-state-invalid");const $=I.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/);if(!$)return n("legacy-story-pr-post-merge-frontmatter-invalid");const k=ae($[1],{strict:!0,uniqueKeys:!0});if(k.errors.length>0||k.get("id")!==c.storyId||(k.get("epic_id")??k.get("epic"))!==c.epicId||k.get("status")!=="pr-reviewed")return n("legacy-story-pr-post-merge-frontmatter-invalid");const j=await(t.issueProvider??Ke).view(c.repository,_);return j.number!==_||j.state!=="OPEN"||j.title!==`[YOLO] Story ${c.storyId} - Workflow Run`||j.url.toLowerCase()!==`https://github.com/${c.repository}/issues/${_}`.toLowerCase()?n("legacy-story-pr-post-merge-issue-invalid"):{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-post-merge-plan",storyId:c.storyId,epicId:c.epicId,repository:c.repository,baseBranch:c.baseBranch,prNumber:c.prNumber,issueNumber:_,candidateHeadSha:y.candidateHeadSha,mergeCommitSha:d.mergeCommitSha,stateSha256:c.stateSha256,storySha256:c.storySha256,nextAuthority:"root-state-checkpoint-and-issue-closure-required",checkpointAccepted:!1,localOnly:!0})}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-story-pr-")?a:"legacy-story-pr-post-merge-physical-unavailable")}}async function ht(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,8192))),s=S(e?.plan);if(!e||e.schemaVersion!==1||e.kind!=="legacy-story-c12-post-merge-intent"||!s||s.schemaVersion!==1||s.kind!=="legacy-story-c12-post-merge-plan"||typeof e.nowIso!="string"||!Number.isFinite(Date.parse(e.nowIso))||typeof e.stateAfterSha256!="string"||!/^[a-f0-9]{64}$/.test(e.stateAfterSha256)||typeof e.storyAfterSha256!="string"||!/^[a-f0-9]{64}$/.test(e.storyAfterSha256))throw new Error("legacy-story-pr-post-merge-intent-invalid");return e}async function ut(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,4096)));if(!e||e.schemaVersion!==1||e.kind!=="legacy-story-c12-post-merge-accepted"||typeof e.intentSha256!="string"||!/^[a-f0-9]{64}$/.test(e.intentSha256)||typeof e.checkpointHeadSha!="string"||!/^[a-f0-9]{40}$/.test(e.checkpointHeadSha)||typeof e.qaSha256!="string"||!/^[a-f0-9]{64}$/.test(e.qaSha256))throw new Error("legacy-story-pr-post-merge-accepted-invalid");return e}async function pr(t){if(!t.authorize)return n("legacy-story-pr-post-merge-authorization-required");if(!Number.isSafeInteger(t.prNumber)||t.prNumber<=0||!/^[A-Za-z0-9][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t.storyId))return n("legacy-story-pr-post-merge-target-invalid");const r=`legacy-c12-post-merge-${re(16).toString("hex")}`,a=await se(t.projectRoot,{kind:"direct",storyId:t.storyId,sessionId:r,idempotencyKey:r,expiresAt:new Date(Date.now()+60*6e4).toISOString(),persistent:!1});if(!a.ok)return n(a.reasonCode);try{const e=D(t.projectRoot);if(D(g(e,"rev-parse","--show-toplevel"))!==e)return n("legacy-story-pr-post-merge-checkout-invalid");const s=await T(await G(e),"legacy-story-pr-intents"),o=h(t.storyId),l=`${o}.c12.post-merge.json`,p=`${o}.c12.post-merge.accepted.json`;let y=await ht(s,l);if(!y){const q=await Rt(t);if(!q.ok)return q;const Te=new Date().toISOString(),Ge=ft(e,q.value,Te);y={schemaVersion:1,kind:"legacy-story-c12-post-merge-intent",plan:q.value,nowIso:Te,stateAfterSha256:h(Ge.stateAfter),storyAfterSha256:h(Ge.storyAfter)},await L(s,l,`${JSON.stringify(y)}
+`),await P(A(s,l),s)}const i=y.plan,d=await Ie(s,`${o}.c12.json`),c=await Ae(s,`${o}.c12.prepared.json`),b=await Ce(s,`${o}.c12.merge-attempt.json`),w=await He(s,`${o}.c12.merged.json`);if(!d||!c||!b||!w||i.storyId!==t.storyId||i.prNumber!==t.prNumber||i.repository!==d.plan.repository||i.epicId!==d.plan.epicId||i.baseBranch!==d.plan.baseBranch||i.candidateHeadSha!==c.candidateHeadSha||i.mergeCommitSha!==w.mergeCommitSha||i.stateSha256!==d.plan.stateSha256||i.storySha256!==d.plan.storySha256||c.intentSha256!==h(JSON.stringify(d))||b.intentSha256!==c.intentSha256||w.intentSha256!==b.intentSha256||w.qaSha256!==b.qaSha256||w.remoteObservationDigest!==b.remoteObservationDigest||X(e)!==i.repository||g(e,"branch","--show-current")!==i.baseBranch)return n("legacy-story-pr-post-merge-intent-drift");const f=ft(e,i,y.nowIso);if(h(f.stateAfter)!==y.stateAfterSha256||h(f.storyAfter)!==y.storyAfterSha256)return n("legacy-story-pr-post-merge-projection-drift");const m=await(t.mergeProvider??F).view(i.repository,i.prNumber);if(ee(d.plan,c.candidateHeadSha,m,"MERGED"),m.mergeCommit?.oid!==i.mergeCommitSha)return n("legacy-story-pr-post-merge-provider-drift");const u=g(e,"rev-list","--parents","-n","1",i.mergeCommitSha).split(" ");if(u.length!==3||u[0]!==i.mergeCommitSha||u[1]!==d.plan.baseSha||u[2]!==i.candidateHeadSha)return n("legacy-story-pr-post-merge-parents-invalid");const I=await ut(s,p),N=h(JSON.stringify(y));if(I&&I.intentSha256!==N)return n("legacy-story-pr-post-merge-accepted-conflict");const O=g(e,"rev-parse","HEAD");let _=z(e,i.baseBranch);if(v(e,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-pr-post-merge-base-worktree-dirty");const $=A(s,`${o}.c12.post-merge.checkout`);if(H($)||Q("git",["worktree","add","--detach",$,I?.checkpointHeadSha??i.mergeCommitSha],{cwd:e,encoding:"utf8",timeout:6e4,stdio:["ignore","pipe","pipe"],maxBuffer:32*1024}),!W($).isDirectory()||D($)!==$||D(g($,"rev-parse","--show-toplevel"))!==$||me($)!==me(e)||g($,"branch","--show-current")!=="")return n("legacy-story-pr-post-merge-candidate-checkout-invalid");let k=g($,"rev-parse","HEAD");if(k!==i.mergeCommitSha&&(g($,"rev-parse",`${k}^`)!==i.mergeCommitSha||JSON.stringify(v($,"diff-tree","--no-commit-id","--name-only","-r","-z",k).split("\0").filter(Boolean).sort())!==JSON.stringify([".neocortex/state.json",`docs/stories/${i.storyId}.story.md`].sort())||h(v($,"show",`${k}:.neocortex/state.json`))!==y.stateAfterSha256||h(v($,"show",`${k}:docs/stories/${i.storyId}.story.md`))!==y.storyAfterSha256||!v($,"log","-1","--format=%B",k).split(`
+`).map(q=>q.trim()).includes(`Neocortex-Legacy-Merge: ${i.storyId}`)))return n("legacy-story-pr-post-merge-checkpoint-commit-invalid");if(![i.mergeCommitSha,k].includes(O)||![i.mergeCommitSha,k].includes(_)||I&&(I.checkpointHeadSha!==k||_!==k))return n("legacy-story-pr-post-merge-base-drift");const j=v($,"status","--porcelain=v1","-uall").split(`
+`).filter(Boolean),B=new Set([".neocortex/state.json",`docs/stories/${i.storyId}.story.md`]);if(k!==i.mergeCommitSha&&j.length>0||j.some(q=>!B.has(q.slice(3))||![" M","M ","MM"].includes(q.slice(0,2))))return n("legacy-story-pr-post-merge-worktree-dirty");const x=E(A($,".neocortex/state.json"),2*1024*1024),J=E(A($,`docs/stories/${i.storyId}.story.md`),2*1024*1024);if(![f.stateBefore,f.stateAfter].includes(x)||![f.storyBefore,f.storyAfter].includes(J)||k!==i.mergeCommitSha&&(x!==f.stateAfter||J!==f.storyAfter))return n("legacy-story-pr-post-merge-content-drift");const R=t.issueProvider??Ke,C=async()=>{const q=await R.view(i.repository,i.issueNumber);if(q.number!==i.issueNumber||q.title!==`[YOLO] Story ${i.storyId} - Workflow Run`||q.url.toLowerCase()!==`https://github.com/${i.repository}/issues/${i.issueNumber}`.toLowerCase()||!["OPEN","CLOSED"].includes(q.state))throw new Error("legacy-story-pr-post-merge-issue-invalid");return q.state};if(I&&await C()!=="CLOSED")return n("legacy-story-pr-post-merge-accepted-issue-drift");if(!I&&O===i.mergeCommitSha&&_===i.mergeCommitSha){if(j.length>0)return n("legacy-story-pr-post-merge-pre-issue-drift");const q={schemaVersion:1,kind:"legacy-story-pr-plan",storyId:i.storyId,epicId:i.epicId,repository:i.repository,branch:i.baseBranch,baseBranch:i.baseBranch,headSha:i.mergeCommitSha,baseSha:d.plan.baseSha,qaAuthority:"root-review-required",localOnly:!0};try{await de(q,e,t.verifyQa)}catch{return n("legacy-story-pr-post-merge-pre-issue-qa-failed")}if(g(e,"rev-parse","HEAD")!==i.mergeCommitSha||z(e,i.baseBranch)!==i.mergeCommitSha||v(e,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-pr-post-merge-pre-issue-drift")}if(k===i.mergeCommitSha){if(x===f.stateBefore&&await Y(A($,".neocortex"),"state.json",f.stateAfter,h(f.stateBefore)),J===f.storyBefore&&await Y(A($,"docs/stories"),`${i.storyId}.story.md`,f.storyAfter,h(f.storyBefore)),E(A($,".neocortex/state.json"),2*1024*1024)!==f.stateAfter||E(A($,`docs/stories/${i.storyId}.story.md`),2*1024*1024)!==f.storyAfter)return n("legacy-story-pr-post-merge-write-drift");g($,"add","--",".neocortex/state.json",`docs/stories/${i.storyId}.story.md`);const q=v($,"diff","--cached","--name-only","-z").split("\0").filter(Boolean).sort();if(JSON.stringify(q)!==JSON.stringify([...B].sort())||v($,"diff","--name-only","-z")!=="")return n("legacy-story-pr-post-merge-staged-scope-invalid");g($,"diff","--cached","--check"),g($,"commit","-m",`chore(story): accept merged PR ${i.storyId}`,"-m",`Neocortex-Legacy-Merge: ${i.storyId}`),k=g($,"rev-parse","HEAD"),await t.afterCommit?.()}if(v($,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-pr-post-merge-worktree-dirty");const V={schemaVersion:1,kind:"legacy-story-pr-plan",storyId:i.storyId,epicId:i.epicId,repository:i.repository,branch:i.baseBranch,baseBranch:i.baseBranch,headSha:k,baseSha:i.mergeCommitSha,qaAuthority:"root-review-required",localOnly:!0};let te=I?.qaSha256;if(!te){if(!t.verifyQa)try{et($)}catch(q){return n(q instanceof Error&&q.message.endsWith("-missing")?"legacy-story-pr-post-merge-dependencies-missing":"legacy-story-pr-post-merge-dependencies-failed")}try{te=await de(V,$,t.verifyQa)}catch{return n("legacy-story-pr-post-merge-qa-failed")}}if(g($,"rev-parse","HEAD")!==k||v($,"status","--porcelain=v1","-uall")!==""||g(e,"rev-parse","HEAD")!==O||v(e,"status","--porcelain=v1","-uall")!=="")return n("legacy-story-pr-post-merge-final-drift");if(await C()==="OPEN"){if(z(e,i.baseBranch)!==i.mergeCommitSha)return n("legacy-story-pr-post-merge-pre-issue-drift");await R.close(i.repository,i.issueNumber),await t.afterIssueClose?.()}if(await C()!=="CLOSED")return n("legacy-story-pr-post-merge-issue-not-closed");const K=await(t.mergeProvider??F).view(i.repository,i.prNumber);if(ee(d.plan,c.candidateHeadSha,K,"MERGED"),K.mergeCommit?.oid!==i.mergeCommitSha)return n("legacy-story-pr-post-merge-provider-drift");if(_=z(e,i.baseBranch),_===i.mergeCommitSha&&g(e,"push","--porcelain","origin",`${k}:refs/heads/${i.baseBranch}`),z(e,i.baseBranch)!==k)return n("legacy-story-pr-post-merge-push-unverified");if(await t.afterPush?.(),g(e,"rev-parse","HEAD")===i.mergeCommitSha&&g(e,"merge","--ff-only",k),g(e,"rev-parse","HEAD")!==k||v(e,"status","--porcelain=v1","-uall")!==""||E(A(e,".neocortex/state.json"),2*1024*1024)!==f.stateAfter||E(A(e,`docs/stories/${i.storyId}.story.md`),2*1024*1024)!==f.storyAfter)return n("legacy-story-pr-post-merge-base-readback-invalid");const M={schemaVersion:1,kind:"legacy-story-c12-post-merge-accepted",intentSha256:N,checkpointHeadSha:k,qaSha256:te};return I&&JSON.stringify(I)!==JSON.stringify(M)?n("legacy-story-pr-post-merge-accepted-conflict"):(I||(await L(s,p,`${JSON.stringify(M)}
+`),await P(A(s,p),s)),{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-story-c12-post-merge-accepted",storyId:i.storyId,epicId:i.epicId,prNumber:i.prNumber,issueNumber:i.issueNumber,mergeCommitSha:i.mergeCommitSha,checkpointHeadSha:k,qaSha256:te,reused:!!I,physicalMerge:!0,issueClosed:!0,checkpointAccepted:!0,publicSafe:!0})})}catch(e){const s=e instanceof Error?e.message:"";return n(s.startsWith("legacy-story-pr-")?s:s.includes("secure-filesystem-cas-conflict")?"legacy-story-pr-post-merge-write-raced":"legacy-story-pr-post-merge-effect-uncertain")}finally{await oe(a.path,a.owner).catch(()=>{})}}async function qt(t){const{cwd:r,directory:a,storyId:e,epicId:s,repository:o,baseBranch:l}=t,p=h(e),y=await Ie(a,`${p}.c12.json`),i=await Ae(a,`${p}.c12.prepared.json`),d=await Ce(a,`${p}.c12.merge-attempt.json`),c=await He(a,`${p}.c12.merged.json`),b=await ht(a,`${p}.c12.post-merge.json`),w=await ut(a,`${p}.c12.post-merge.accepted.json`);if(!y||!i||!d||!c||!b||!w)return n("legacy-epic-terminal-story-receipt-missing");const f=y.plan,m=b.plan;if(f.storyId!==e||f.epicId!==s||f.repository!==o||f.baseBranch!==l||m.storyId!==e||m.epicId!==s||m.repository!==o||m.baseBranch!==l||m.prNumber!==f.prNumber||m.candidateHeadSha!==i.candidateHeadSha||m.mergeCommitSha!==c.mergeCommitSha||m.stateSha256!==f.stateSha256||m.storySha256!==f.storySha256||i.intentSha256!==h(JSON.stringify(y))||d.intentSha256!==i.intentSha256||c.intentSha256!==d.intentSha256||d.candidateHeadSha!==i.candidateHeadSha||c.candidateHeadSha!==d.candidateHeadSha||c.qaSha256!==d.qaSha256||c.remoteObservationDigest!==d.remoteObservationDigest||w.intentSha256!==h(JSON.stringify(b)))return n("legacy-epic-terminal-story-receipt-drift");const u=w.checkpointHeadSha,I=g(r,"rev-parse",`${u}^`),N=g(r,"rev-list","--parents","-n","1",c.mergeCommitSha).split(" "),O=v(r,"diff-tree","--no-commit-id","--name-only","-r","-z",u).split("\0").filter(Boolean).sort(),_=`docs/stories/${e}.story.md`;if(I!==c.mergeCommitSha||N.length!==3||N[0]!==c.mergeCommitSha||N[1]!==f.baseSha||N[2]!==i.candidateHeadSha||JSON.stringify(O)!==JSON.stringify([".neocortex/state.json",_].sort())||!v(r,"log","-1","--format=%B",u).split(`
+`).map(M=>M.trim()).includes(`Neocortex-Legacy-Merge: ${e}`))return n("legacy-epic-terminal-story-git-drift");if(!t.firstParentHeads.has(u))return n("legacy-epic-terminal-story-not-on-base");const $=v(r,"show",`${u}:.neocortex/state.json`),k=v(r,"show",`${u}:${_}`);if(h($)!==b.stateAfterSha256||h(k)!==b.storyAfterSha256)return n("legacy-epic-terminal-story-checkpoint-drift");const j=S(JSON.parse($)),B=S(S(j?.stories)?.[e]),x=k.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n/),J=x?ae(x[1],{strict:!0,uniqueKeys:!0}):null,R=J?S(J.toJS()):null,C=["stepsCompleted","steps_completed"].filter(M=>J?.has(M)),V=["lastStep","last_step"].filter(M=>J?.has(M));if(!B||B.id!==e||B.epic_id!==s||B.status!=="done"||B.last_step!==ye||!Array.isArray(B.steps_completed)||!B.steps_completed.includes(ye)||B.pr_number!==f.prNumber||B.issue_number!==m.issueNumber||B.issue_state!=="closed"||B.merged!==!0||B.physicalMergeStatus!=="merged"||B.merge_commit_sha!==c.mergeCommitSha||B.branch_name!==`story/${s}/${e}`||!J||J.errors.length>0||J.get("id")!==e||(J.get("epic_id")??J.get("epic"))!==s||J.get("status")!=="done"||J.has("currentStatus")&&J.get("currentStatus")!=="done"||C.length!==1||V.length!==1||JSON.stringify(R?.[C[0]])!==JSON.stringify(B.steps_completed)||R?.[V[0]]!==ye||R?.mergeCommitSha!==c.mergeCommitSha||R?.issueState!=="closed")return n("legacy-epic-terminal-story-state-drift");const te=await t.mergeProvider.view(o,f.prNumber);if(ee(f,i.candidateHeadSha,te,"MERGED"),te.mergeCommit?.oid!==c.mergeCommitSha)return n("legacy-epic-terminal-story-provider-drift");const K=await t.issueProvider.view(o,m.issueNumber);return K.number!==m.issueNumber||K.state!=="CLOSED"||K.title!==`[YOLO] Story ${e} - Workflow Run`||K.url.toLowerCase()!==`https://github.com/${o}/issues/${m.issueNumber}`.toLowerCase()?n("legacy-epic-terminal-story-issue-drift"):{ok:!0,value:Object.freeze({storyId:e,checkpointHeadSha:u,storyRowSha256:h(JSON.stringify(B)),storyDocumentSha256:h(k),qaSha256:w.qaSha256})}}async function Ne(t){if(!/^P[0-9]+$/.test(t.epicId))return n("legacy-epic-terminal-target-invalid");try{const r=D(t.projectRoot);if(D(g(r,"rev-parse","--show-toplevel"))!==r||v(r,"status","--porcelain=v1","-uall")!=="")return n("legacy-epic-terminal-checkout-invalid");for(const u of[".neocortex","docs","docs/stories"]){const I=A(r,u);if(!H(I)||!W(I).isDirectory()||D(I)!==I)return n("legacy-epic-terminal-checkout-unsafe")}const a=v(r,"show","HEAD:.neocortex/state.json");if(E(A(r,".neocortex/state.json"),2*1024*1024)!==a)return n("legacy-epic-terminal-state-drift");const e=S(JSON.parse(a)),s=S(e?.epics),o=S(e?.stories),l=S(s?.[t.epicId]),p=S(e?.config),y=l?.stories,i=p?.default_branch;if(!l||l.id!==t.epicId||l.branch_mode!=="story"||l.status!=="done"||!Array.isArray(y)||y.length===0||y.length>128||new Set(y).size!==y.length||y.some(u=>typeof u!="string"||!/^P[0-9]+\.[0-9]+(?:\.[0-9]+)*$/.test(u))||!o||Object.entries(o).some(([u,I])=>S(I)?.epic_id===t.epicId&&!y.includes(u))||l.total_stories!==y.length||l.completed_stories!==y.length||typeof i!="string"||!/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(i)||g(r,"branch","--show-current")!==i)return n("legacy-epic-terminal-topology-invalid");const d=X(r),c=g(r,"rev-parse","HEAD");if(z(r,i)!==c)return n("legacy-epic-terminal-base-not-pushed");const b=A(me(r),"neocortex-yoloop"),w=A(b,"legacy-story-pr-intents");if(!H(b)||!H(w)||!W(b).isDirectory()||D(b)!==b)return n("legacy-epic-terminal-receipts-missing");await je(w,b);const f=new Set(g(r,"rev-list","--first-parent","--max-count=4096",c).split(`
+`).filter(Boolean)),m=[];for(const u of y){const I=await qt({cwd:r,directory:w,storyId:u,epicId:t.epicId,repository:d,baseBranch:i,firstParentHeads:f,mergeProvider:t.mergeProvider??F,issueProvider:t.issueProvider??Ke});if(!I.ok)return I;const N=S(o[u]),O=E(A(r,`docs/stories/${u}.story.md`),2*1024*1024);if(!N||h(JSON.stringify(N))!==I.value.storyRowSha256||h(O)!==I.value.storyDocumentSha256)return n("legacy-epic-terminal-story-current-drift");m.push(I.value)}return!m.some(u=>u.checkpointHeadSha===c)||g(r,"rev-parse","HEAD")!==c||z(r,i)!==c||v(r,"status","--porcelain=v1","-uall")!==""?n("legacy-epic-terminal-base-final-drift"):{ok:!0,value:Object.freeze({schemaVersion:1,kind:"legacy-epic-terminal-plan",epicId:t.epicId,repositorySha256:h(d),baseBranchSha256:h(i),baseHeadSha:c,storyCount:m.length,storyEvidenceSha256:h(JSON.stringify(m)),physicalStoriesVerified:!0,quotaReleaseAuthorized:!1,checkpointAccepted:!1,localOnly:!0,publicSafe:!0})}}catch(r){const a=r instanceof Error?r.message:"";return n(a.startsWith("legacy-epic-terminal-")?a:"legacy-epic-terminal-physical-unavailable")}}async function Ze(t,r){const a=A(t,r);if(!H(a))return null;await P(a,t);const e=S(JSON.parse(E(a,4096)));if(!e||Object.keys(e).sort().join(",")!==["schemaVersion","kind","epicId","planSha256","baseHeadSha","qaEvidenceDigest","acceptedAt"].sort().join(",")||e.schemaVersion!==1||e.kind!=="legacy-epic-terminal-root-accepted"||typeof e.epicId!="string"||!/^P[0-9]+$/.test(e.epicId)||typeof e.planSha256!="string"||!/^[a-f0-9]{64}$/.test(e.planSha256)||typeof e.baseHeadSha!="string"||!/^[a-f0-9]{40}$/.test(e.baseHeadSha)||typeof e.qaEvidenceDigest!="string"||!/^[a-f0-9]{64}$/.test(e.qaEvidenceDigest)||typeof e.acceptedAt!="string"||!Number.isFinite(Date.parse(e.acceptedAt)))throw new Error("legacy-epic-terminal-journal-invalid");return e}function Fe(t,r,a){return Object.freeze({schemaVersion:1,kind:"legacy-epic-terminal-root-accepted",epicId:t.epicId,baseHeadSha:t.baseHeadSha,storyCount:t.storyCount,planSha256:r.planSha256,qaEvidenceDigest:r.qaEvidenceDigest,reused:a,rootAcceptanceRecorded:!0,quotaReleaseAuthorized:!1,serverAccountingAccepted:!1,localOnly:!0,publicSafe:!0})}async function fr(t){const r=await Ne(t);if(!r.ok)return r;try{const a=D(t.projectRoot),e=A(me(a),"neocortex-yoloop"),s=A(e,"legacy-epic-terminal");if(!H(s))return n("legacy-epic-terminal-acceptance-missing");await je(s,e);const o=await Ze(s,`${h(t.epicId)}.accepted.json`);if(!o)return n("legacy-epic-terminal-acceptance-missing");if(o.epicId!==t.epicId||o.baseHeadSha!==r.value.baseHeadSha||o.planSha256!==h(JSON.stringify(r.value)))return n("legacy-epic-terminal-acceptance-drift");const l=await Ne(t);return!l.ok||h(JSON.stringify(l.value))!==o.planSha256?n("legacy-epic-terminal-acceptance-drift"):{ok:!0,value:Fe(l.value,o,!0)}}catch(a){const e=a instanceof Error?a.message:"";return n(e.startsWith("legacy-epic-terminal-")?e:"legacy-epic-terminal-acceptance-unavailable")}}async function hr(t){if(!t.authorize)return n("legacy-epic-terminal-authorization-required");if(!/^P[0-9]+$/.test(t.epicId))return n("legacy-epic-terminal-target-invalid");const r=`legacy-epic-terminal-${re(16).toString("hex")}`,a=await se(t.projectRoot,{kind:"direct",storyId:t.epicId,sessionId:r,idempotencyKey:r,expiresAt:new Date(Date.now()+60*6e4).toISOString(),persistent:!1});if(!a.ok)return n(a.reasonCode);try{const e=D(t.projectRoot),s=await Ne(t);if(!s.ok)return s;const o=await T(await G(e),"legacy-epic-terminal"),l=`${h(t.epicId)}.accepted.json`,p=h(JSON.stringify(s.value)),y=await Ze(o,l);if(y){if(y.epicId!==t.epicId||y.baseHeadSha!==s.value.baseHeadSha||y.planSha256!==p)return n("legacy-epic-terminal-acceptance-conflict");const f=await Ne(t);return!f.ok||h(JSON.stringify(f.value))!==p?n("legacy-epic-terminal-acceptance-drift"):{ok:!0,value:Fe(f.value,y,!0)}}let i;try{if(t.verifyQa)i=await t.verifyQa(s.value);else{const f=await ze(e,{headSha:s.value.baseHeadSha,graphRevision:h(`legacy-epic-terminal\0${p}`)}),m=Le(f);if(!m||m.executionHeadSha!==s.value.baseHeadSha)return n("legacy-epic-terminal-qa-invalid");i=m.executionEvidenceDigest}}catch{return n("legacy-epic-terminal-qa-failed")}if(!/^[a-f0-9]{64}$/.test(i))return n("legacy-epic-terminal-qa-invalid");const d=await Ne(t);if(!d.ok||h(JSON.stringify(d.value))!==p)return n("legacy-epic-terminal-post-qa-drift");const c={schemaVersion:1,kind:"legacy-epic-terminal-root-accepted",epicId:t.epicId,planSha256:p,baseHeadSha:s.value.baseHeadSha,qaEvidenceDigest:i,acceptedAt:new Date().toISOString()};await L(o,l,`${JSON.stringify(c)}
+`);const b=await Ze(o,l);if(!b||JSON.stringify(b)!==JSON.stringify(c))return n("legacy-epic-terminal-acceptance-write-raced");const w=await Ne(t);return!w.ok||h(JSON.stringify(w.value))!==p?n("legacy-epic-terminal-post-accept-drift"):{ok:!0,value:Fe(w.value,c,!1)}}catch(e){const s=e instanceof Error?e.message:"";return n(s.startsWith("legacy-epic-terminal-")?s:"legacy-epic-terminal-acceptance-unavailable")}finally{await oe(a.path,a.owner).catch(()=>{})}}export{hr as acceptLegacyEpicFinalization,er as acceptLegacyStoryCommitC08,ar as acceptLegacyStoryPrC10,pr as acceptLegacyStoryPrPostMergeC12,nr as acceptLegacyStoryPrReviewC11,tr as acceptLegacyStorySyncC09,rr as createLegacyStoryPr,lr as mergeLegacyStoryPrC12,or as observeLegacyStoryPrReviewC11,Ne as planLegacyEpicFinalization,Ct as planLegacyStoryCommitC08,be as planLegacyStoryPr,yt as planLegacyStoryPrMergeC12,pt as planLegacyStoryPrMergeDecisionC12,Rt as planLegacyStoryPrPostMergeC12,yr as planLegacyStoryPrRemoteDebtBeforePrepareC12,ir as planLegacyStoryPrReview,_t as planLegacyStorySyncC09,cr as prepareLegacyStoryPrMergeC12,sr as readAcceptedLegacyStoryPrC10,xt as readAcceptedLegacyStoryPrReviewC11,fr as readLegacyEpicTerminalAcceptance,dr as recordLegacyStoryPrRemoteDebtC12};