@ornexus/neocortex 4.60.73 → 4.60.74

package/packages/client/dist/migrations/epic-lifecycle-backfill.js

@@ -1,1060 +1,3 @@
-import { execFileSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import { closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, writeFileSync, } from 'node:fs';
-import { isAbsolute, join, relative, resolve } from 'node:path';
-import { inspectEpicOperationalSqliteBinding, } from '../continuity/sqlite-store.js';
-import { GIT_LIFECYCLE_RUNTIME_DIRECTORY, GIT_LIFECYCLE_RUNTIME_FILE, mutateGitLifecycleRuntime, readGitLifecycleRuntimeSync, } from '../git/git-lifecycle-store.js';
-import { EPIC_OPERATIONAL_PAYLOAD_LIMIT_BYTES, EPIC_OPERATIONAL_RECEIPT_CAP, assertEpicOperationalState, createEpicOperationalIdentity, createInitialEpicOperationalState, epicOperationalCanonicalJson, epicOperationalHash, mutateEpicOperationalState, readEpicOperationalState, } from '../git/epic-operational-state.js';
-import { createDefaultCounters } from '../yoloop/yoloop-client-state-store.js';
-import { applyStateMigration, previewStateMigration, readStateMigrationSourceSnapshot, restoreStateMigrationPreimage, STATE_MIGRATION_INPUT_LIMIT_BYTES, } from './state-json.js';
-const CHECKOUT_CAP = 32;
-const PUBLIC_PATH_LIMIT = 1_024;
-const HASH = /^[a-f0-9]{64}$/;
-const SAFE_ID = /^[A-Za-z0-9._:-]{1,128}$/;
-const BACKUP_SCHEMA = 'EpicLifecycleBackfillBackup/1.0';
-const YOLOOP_CAPABILITIES = Object.freeze([
-    'rollover-session-v1',
-    'successor-transition-v1',
-    'continuation-replan-v1',
-    'cross-epic-continuation-reconcile-v1',
-]);
-const PRIVATE_PLANS = new WeakMap();
-const APPROVALS = new WeakMap();
-export async function previewEpicLifecycleBackfill(projectRoot, options) {
-    validateOptions(options);
-    const preview = await collectPreview(projectRoot, options);
-    const plan = buildPlan(preview);
-    if (Buffer.byteLength(epicOperationalCanonicalJson(plan), 'utf8') > EPIC_OPERATIONAL_PAYLOAD_LIMIT_BYTES) {
-        throw new Error('epic-operational-plan-oversized');
-    }
-    const frozen = deepFreeze(plan);
-    PRIVATE_PLANS.set(frozen, preview);
-    return frozen;
-}
-export function approveEpicLifecycleBackfill(plan) {
-    const preview = PRIVATE_PLANS.get(plan);
-    if (!preview || plan.blockers.length > 0 || plan.conflicts.length > 0
-        || computePlanDigest(plan) !== plan.planDigest) {
-        throw new Error('epic-operational-approval-invalid');
-    }
-    const authority = Object.freeze(Object.create(null));
-    APPROVALS.set(authority, { plan, preview });
-    return authority;
-}
-export async function applyEpicLifecycleBackfill(projectRoot, plan, approval, hooks = {}) {
-    assertPlan(plan);
-    const root = realpathSync(resolve(projectRoot));
-    const current = readGitLifecycleRuntimeSync(root);
-    if (current.schemaVersion === 2 && current.operational !== undefined) {
-        assertEpicOperationalState(current.operational);
-        const existing = current.operational.backfillReceipts.find((receipt) => receipt.operationId === plan.operationId || receipt.idempotencyKey === plan.idempotencyKey);
-        if (existing) {
-            if (existing.planDigest !== plan.planDigest || existing.sourceInventoryDigest !== plan.sourceInventoryDigest) {
-                throw new Error('epic-operational-replay-conflict');
-            }
-            return {
-                applied: false,
-                replay: true,
-                receipt: existing,
-                revision: current.revision,
-                writerEpoch: current.operational.writerEpoch,
-            };
-        }
-    }
-    let backup;
-    let document = current;
-    let operational = current.schemaVersion === 2 && current.operational !== undefined
-        ? current.operational
-        : null;
-    const active = operational?.activeJournal;
-    if (active) {
-        if (active.kind !== 'backfill' || active.operationId !== plan.operationId
-            || active.idempotencyKey !== plan.idempotencyKey || active.payloadHash !== plan.planDigest) {
-            throw new Error('epic-operational-journal-conflict');
-        }
-        if (active.phase === 'aborted-before-authority')
-            throw new Error('epic-operational-source-raced');
-        backup = readBackfillBackup(root, active.backupManifestRef, active.preimageDigest, plan);
-    }
-    else {
-        const binding = approval ? APPROVALS.get(approval) : undefined;
-        if (!binding || binding.plan !== plan || binding.preview.projectRoot !== root
-            || computePlanDigest(plan) !== plan.planDigest) {
-            throw new Error('epic-operational-approval-invalid');
-        }
-        if (document.schemaVersion !== plan.expectedRuntimeSchema && !(plan.expectedRuntimeSchema === 0 && document.revision === 0)) {
-            throw new Error('epic-operational-revision-conflict');
-        }
-        if (document.revision !== plan.expectedRevision)
-            throw new Error('epic-operational-revision-conflict');
-        verifyPrivateSources(binding.preview.sourceBindings, binding.preview.tracked.byteDigest);
-        verifyPhysicalBranch(root, binding.preview.physicalBranch);
-        backup = writeBackfillBackup(binding.preview, plan);
-        await hooks.afterBackup?.();
-        const journal = backfillJournal(plan, backup, 'prepared');
-        const preparedOperational = {
-            ...binding.preview.initialOperational,
-            activeJournal: journal,
-        };
-        const promoted = await mutateGitLifecycleRuntime(root, (mutable) => {
-            if (mutable.schemaVersion !== document.schemaVersion || mutable.revision !== plan.expectedRevision) {
-                throw new Error('epic-operational-revision-conflict');
-            }
-            mutable.operational = preparedOperational;
-        }, {
-            expectedRevision: plan.expectedRevision,
-            nextSchemaVersion: 2,
-            preCommit: async () => {
-                verifyPrivateSources(binding.preview.sourceBindings, binding.preview.tracked.byteDigest);
-                verifyPhysicalBranch(root, binding.preview.physicalBranch);
-            },
-        });
-        document = promoted.document;
-        operational = document.operational;
-        await hooks.afterPrepared?.();
-    }
-    if (!operational)
-        throw new Error('epic-operational-store-missing');
-    try {
-        if (operational.activeJournal?.phase === 'prepared') {
-            verifyBackupSources(backup, backup.plan.trackedStateMigration.sourceByteDigest);
-            verifyPhysicalBranch(root, backup.physicalBranch);
-            const transitioned = await mutateEpicOperationalState(root, {
-                identityHash: plan.identity.identityHash,
-                expectedRevision: document.revision,
-                expectedWriterEpoch: plan.nextWriterEpoch,
-            }, (state) => {
-                state.activeJournal = {
-                    ...state.activeJournal,
-                    phase: 'authority-applied',
-                };
-            });
-            document = transitioned.document;
-            operational = document.operational;
-            await hooks.afterAuthorityApplied?.();
-        }
-    }
-    catch (error) {
-        if (operational.activeJournal?.phase === 'prepared' && isSourceRace(error)) {
-            await markBackfillAborted(root, document, operational, plan);
-        }
-        throw error;
-    }
-    let trackedPostDigest = backup.plan.trackedStateMigration.targetByteDigest;
-    if (operational.activeJournal?.phase === 'authority-applied') {
-        verifyBackupSourcesOneOf(backup, backup.trackedMigration
-            ? [backup.plan.trackedStateMigration.sourceByteDigest, trackedPostDigest]
-            : [trackedPostDigest]);
-        if (backup.trackedMigration) {
-            const trackedBeforeApply = readStateMigrationSourceSnapshot(root).byteDigest;
-            applyStateMigration(root, {
-                operationId: backup.trackedMigration.operationId,
-                sourceCanonicalHash: backup.trackedMigration.sourceCanonicalHash,
-                targetCanonicalHash: backup.trackedMigration.targetCanonicalHash,
-                ...(trackedBeforeApply === backup.plan.trackedStateMigration.sourceByteDigest
-                    ? { sourceByteDigest: backup.plan.trackedStateMigration.sourceByteDigest }
-                    : {}),
-            });
-        }
-        const trackedReadback = readStateMigrationSourceSnapshot(root);
-        trackedPostDigest = trackedReadback.byteDigest;
-        if (trackedPostDigest !== backup.plan.trackedStateMigration.targetByteDigest) {
-            throw new Error('epic-operational-projection-conflict');
-        }
-        await hooks.afterTrackedProjection?.();
-        const sqlite = await inspectEpicOperationalSqliteBinding({
-            projectRoot: root,
-            authorityRevision: document.revision,
-            sourceDigest: plan.authorityPostimageDigest,
-        });
-        const transitioned = await mutateEpicOperationalState(root, {
-            identityHash: plan.identity.identityHash,
-            expectedRevision: document.revision,
-            expectedWriterEpoch: plan.nextWriterEpoch,
-        }, (state) => {
-            state.projectionBindings = {
-                ...state.projectionBindings,
-                trackedState: {
-                    status: 'bound',
-                    sourceDigest: trackedPostDigest,
-                    authorityRevision: document.revision,
-                    reasonCodes: ['epic-operational-tracked-state-bound'],
-                },
-                sqlite: {
-                    status: sqlite.status,
-                    sourceDigest: sqlite.sourceDigest,
-                    authorityRevision: document.revision,
-                    reasonCodes: sqlite.reasonCodes,
-                },
-            };
-            state.activeJournal = {
-                ...state.activeJournal,
-                phase: 'projections-applied',
-                projectionStatuses: {
-                    trackedState: 'applied',
-                    sqlite: sqlite.status === 'bound' ? 'applied' : 'unavailable',
-                },
-            };
-        });
-        document = transitioned.document;
-        operational = document.operational;
-        await hooks.afterProjectionsApplied?.();
-    }
-    if (operational.activeJournal?.phase !== 'projections-applied') {
-        throw new Error('epic-operational-journal-corrupt');
-    }
-    verifyBackupSources(backup, trackedPostDigest);
-    const receipt = backfillReceipt(plan, backup, trackedPostDigest, document.revision + 1);
-    const committed = await mutateEpicOperationalState(root, {
-        identityHash: plan.identity.identityHash,
-        expectedRevision: document.revision,
-        expectedWriterEpoch: plan.nextWriterEpoch,
-    }, (state) => {
-        if (state.backfillReceipts.length >= EPIC_OPERATIONAL_RECEIPT_CAP) {
-            throw new Error('epic-operational-receipt-capacity');
-        }
-        state.backfillReceipts = [...state.backfillReceipts, receipt];
-        state.activeJournal = null;
-    });
-    const finalState = committed.document.operational;
-    return {
-        applied: true,
-        replay: false,
-        receipt,
-        revision: committed.document.revision,
-        writerEpoch: finalState.writerEpoch,
-    };
-}
-export async function rollbackEpicLifecycleBackfill(input) {
-    const root = realpathSync(resolve(input.projectRoot));
-    let { document, operational } = readEpicOperationalState(root, {
-        expectedRevision: input.expectedRevision,
-        expectedWriterEpoch: input.expectedWriterEpoch,
-    });
-    if (operational.activeJournal)
-        throw new Error('epic-operational-journal-conflict');
-    const target = operational.backfillReceipts.find((receipt) => receipt.operationId === input.targetOperationId);
-    if (!target)
-        throw new Error('epic-operational-rollback-target-missing');
-    const existing = operational.rollbackReceipts.find((receipt) => receipt.targetOperationId === input.targetOperationId);
-    if (existing)
-        return { receipt: existing, revision: document.revision };
-    if (operational.rollbackReceipts.length >= EPIC_OPERATIONAL_RECEIPT_CAP) {
-        throw new Error('epic-operational-receipt-capacity');
-    }
-    const backupRef = `backups/${input.targetOperationId}.backfill.json`;
-    const backup = readBackfillBackup(root, backupRef, target.backupManifestDigest, undefined);
-    const tracked = readStateMigrationSourceSnapshot(root);
-    if (tracked.byteDigest !== target.postimageDigest)
-        throw new Error('epic-operational-rollback-postimage-conflict');
-    const operationId = `elrb_${epicOperationalHash('p224-backfill-rollback-id-v1', {
-        targetOperationId: input.targetOperationId,
-        expectedRevision: input.expectedRevision,
-        expectedWriterEpoch: input.expectedWriterEpoch,
-    }).slice(0, 32)}`;
-    const payloadHash = epicOperationalHash('p224-backfill-rollback-v1', {
-        operationId,
-        targetOperationId: input.targetOperationId,
-        expectedRevision: input.expectedRevision,
-        expectedWriterEpoch: input.expectedWriterEpoch,
-        postimageDigest: target.postimageDigest,
-        preimageDigest: target.preimageDigest,
-    });
-    const journal = {
-        schemaVersion: 'EpicOperationalJournal/1.0',
-        kind: 'rollback',
-        operationId,
-        idempotencyKey: operationId,
-        payloadHash,
-        identityHash: target.identityHash,
-        expectedRevision: input.expectedRevision,
-        expectedWriterEpoch: input.expectedWriterEpoch,
-        preimageDigest: target.postimageDigest,
-        backupManifestRef: backupRef,
-        phase: 'prepared',
-        projectionStatuses: { trackedState: 'pending', sqlite: 'not-applicable' },
-        reasonCodes: ['epic-operational-backup-verified'],
-    };
-    let transition = await mutateEpicOperationalState(root, {
-        identityHash: target.identityHash,
-        expectedRevision: document.revision,
-        expectedWriterEpoch: operational.writerEpoch,
-    }, (state) => {
-        state.activeJournal = journal;
-    });
-    document = transition.document;
-    operational = document.operational;
-    transition = await mutateEpicOperationalState(root, {
-        identityHash: target.identityHash,
-        expectedRevision: document.revision,
-        expectedWriterEpoch: operational.writerEpoch,
-    }, (state) => {
-        state.writerEpoch = state.writerEpoch + 1;
-        state.activeJournal = {
-            ...state.activeJournal,
-            phase: 'authority-applied',
-        };
-    });
-    document = transition.document;
-    operational = document.operational;
-    if (backup.trackedMigration) {
-        restoreStateMigrationPreimage({
-            projectRoot: root,
-            operationId: backup.trackedMigration.operationId,
-            expectedCurrentDigest: target.postimageDigest,
-            expectedBackupDigest: target.preimageDigest,
-        });
-    }
-    else if (target.preimageDigest !== target.postimageDigest) {
-        throw new Error('epic-operational-rollback-backup-invalid');
-    }
-    const restored = readStateMigrationSourceSnapshot(root);
-    if (restored.byteDigest !== target.preimageDigest)
-        throw new Error('epic-operational-rollback-readback-failed');
-    transition = await mutateEpicOperationalState(root, {
-        identityHash: target.identityHash,
-        expectedRevision: document.revision,
-        expectedWriterEpoch: operational.writerEpoch,
-    }, (state) => {
-        state.projectionBindings = {
-            ...state.projectionBindings,
-            trackedState: {
-                status: 'bound',
-                sourceDigest: restored.byteDigest,
-                authorityRevision: document.revision,
-                reasonCodes: ['epic-operational-rollback-projection-restored'],
-            },
-        };
-        state.activeJournal = {
-            ...state.activeJournal,
-            phase: 'projections-applied',
-            projectionStatuses: { trackedState: 'applied', sqlite: 'not-applicable' },
-        };
-    });
-    document = transition.document;
-    operational = document.operational;
-    const receipt = {
-        schemaVersion: 'EpicOperationalRollbackReceipt/1.0',
-        operationId,
-        targetOperationId: input.targetOperationId,
-        expectedPostimageDigest: target.postimageDigest,
-        restoredPreimageDigest: target.preimageDigest,
-        reasonCodes: ['epic-operational-rollback-verified'],
-        publicSafe: true,
-    };
-    const committed = await mutateEpicOperationalState(root, {
-        identityHash: target.identityHash,
-        expectedRevision: document.revision,
-        expectedWriterEpoch: operational.writerEpoch,
-    }, (state) => {
-        state.rollbackReceipts = [...state.rollbackReceipts, receipt];
-        state.activeJournal = null;
-    });
-    return { receipt, revision: committed.document.revision };
-}
-async function collectPreview(projectRoot, options) {
-    const root = realpathSync(resolve(projectRoot));
-    const commonDir = resolveCommonDir(root);
-    const runtimePath = resolveRuntimePath(commonDir);
-    const runtimeRaw = existsSync(runtimePath) ? readBoundedRaw(runtimePath).raw : null;
-    const runtime = readGitLifecycleRuntimeSync(root);
-    const tracked = readStateMigrationSourceSnapshot(root);
-    const trackedMigration = previewStateMigration(root);
-    const trackedTargetRaw = trackedMigration
-        ? `${JSON.stringify(trackedMigration.targetState, null, 2)}\n`
-        : tracked.raw;
-    const trackedTargetDigest = sha256(trackedTargetRaw);
-    const identity = createEpicOperationalIdentity(root, options);
-    const nowIso = options.nowIso ?? new Date().toISOString();
-    if (!Number.isFinite(Date.parse(nowIso)))
-        throw new Error('epic-operational-time-invalid');
-    const worktrees = listWorktrees(root, commonDir);
-    const sources = [];
-    const bindings = [];
-    sources.push(sourceFromRaw('common-runtime', commonDir, runtimeRaw, 'authority-candidate'));
-    sources.push(sourceFromRaw('tracked-state', root, tracked.raw, 'projection'));
-    bindings.push({ path: join(root, '.neocortex', 'state.json'), presence: 'present', digest: tracked.byteDigest, kind: 'tracked-state' });
-    const validStates = [];
-    let selectedLock = null;
-    const collectionBlockers = [];
-    for (const worktree of worktrees) {
-        const statePath = join(worktree.path, '.neocortex', 'yoloop-state.json');
-        const lockPath = join(worktree.path, '.neocortex', 'yoloop.lock');
-        const state = inspectLegacyJson(statePath, 'legacy-yoloop-state', worktree.fingerprint, strictCounters);
-        sources.push(state.source);
-        bindings.push(state.binding);
-        if (state.parsed)
-            validStates.push({ fingerprint: worktree.fingerprint, parsed: state.parsed, digest: state.source.canonicalDigest });
-        if (state.source.presence === 'corrupt' || state.source.presence === 'unsafe' || state.source.presence === 'unsupported') {
-            collectionBlockers.push(...state.source.reasonCodes);
-        }
-        const lock = inspectLegacyJson(lockPath, 'legacy-yoloop-lock', worktree.fingerprint, strictLock);
-        sources.push(lock.source);
-        bindings.push(lock.binding);
-        if (lock.parsed)
-            selectedLock = lock.parsed;
-        if (lock.source.presence !== 'missing') {
-            if (lock.parsed)
-                collectionBlockers.push('epic-operational-writer-active');
-            else
-                collectionBlockers.push(...lock.source.reasonCodes);
-        }
-    }
-    const stateDigests = [...new Set(validStates.map((entry) => entry.digest))];
-    if (stateDigests.length > 1)
-        collectionBlockers.push('epic-operational-source-conflict');
-    const selected = validStates[0];
-    if (!selected && hasTrackedProgress(tracked.state))
-        collectionBlockers.push('epic-operational-progress-source-missing');
-    const selectedYoloop = selected?.parsed ?? createDefaultCounters(nowIso);
-    const initialOperational = createInitialEpicOperationalState({
-        identity,
-        yoloop: {
-            lock: null,
-            state: selectedYoloop,
-            capabilities: YOLOOP_CAPABILITIES,
-        },
-        trackedStateDigest: tracked.byteDigest,
-        sqliteStatus: 'unavailable',
-        sqliteReasonCodes: ['epic-operational-projection-unavailable'],
-    });
-    const sqlite = await inspectEpicOperationalSqliteBinding({
-        projectRoot: root,
-        authorityRevision: runtime.revision,
-        sourceDigest: epicOperationalHash('p224-backfill-authority-v1', initialOperational),
-        ...(options.sqliteAdapter ? { adapter: options.sqliteAdapter } : {}),
-        ...(options.sqliteAdapterLoader ? { adapterLoader: options.sqliteAdapterLoader } : {}),
-    });
-    sources.push({
-        schemaVersion: 'EpicLifecycleBackfillSource/1.0',
-        kind: 'sqlite-projection',
-        sourceFingerprint: epicOperationalHash('p224-backfill-source-v1', { kind: 'sqlite-projection', repository: identity.repositoryFingerprint }),
-        presence: sqlite.status === 'unavailable' ? 'unavailable' : 'present',
-        byteLength: null,
-        byteDigest: sqlite.sourceDigest,
-        canonicalDigest: sqlite.sourceDigest,
-        sourceSchema: 'continuity-state_snapshots',
-        status: 'projection',
-        role: 'projection',
-        reasonCodes: sqlite.reasonCodes,
-        publicSafe: true,
-    });
-    const physicalBranch = execFileSync('git', ['branch', '--show-current'], { cwd: root, encoding: 'utf8' }).trim();
-    const privatePreview = {
-        projectRoot: root,
-        commonDir,
-        runtimePath,
-        runtimeRaw,
-        runtime,
-        tracked,
-        trackedMigration,
-        trackedTargetRaw,
-        trackedTargetDigest,
-        selectedYoloop,
-        selectedYoloopLock: selectedLock,
-        initialOperational,
-        sourceBindings: bindings,
-        publicSources: sources.sort(compareSources),
-        collectionBlockers,
-        physicalBranch,
-        options: {
-            epicId: options.epicId,
-            executionBranch: options.executionBranch,
-            graphRevision: options.graphRevision,
-            originBindingDigest: options.originBindingDigest,
-            managedClients: options.managedClients ?? [],
-            nowIso,
-            ...(options.sqliteAdapter ? { sqliteAdapter: options.sqliteAdapter } : {}),
-            ...(options.sqliteAdapterLoader ? { sqliteAdapterLoader: options.sqliteAdapterLoader } : {}),
-        },
-    };
-    return privatePreview;
-}
-function buildPlan(preview) {
-    const sourceInventory = preview.collectionBlockers;
-    const sources = collectPublicSources(preview);
-    const blockers = [...sourceInventory];
-    if (preview.physicalBranch !== preview.options.executionBranch)
-        blockers.push('epic-operational-branch-mismatch');
-    const trackedEpic = findTrackedEpic(preview.tracked.state, preview.options.epicId);
-    const runtimeEpic = record(preview.runtime.epics[preview.options.epicId]);
-    if (!trackedEpic)
-        blockers.push('epic-operational-epic-missing');
-    if (trackedEpic && trackedEpic.branch_mode !== undefined && trackedEpic.branch_mode !== 'epic') {
-        blockers.push('epic-operational-branch-mode-conflict');
-    }
-    if (trackedEpic && typeof trackedEpic.execution_branch === 'string'
-        && trackedEpic.execution_branch !== preview.options.executionBranch)
-        blockers.push('epic-operational-branch-mismatch');
-    if (trackedEpic && typeof trackedEpic.graph_revision === 'string'
-        && trackedEpic.graph_revision !== preview.options.graphRevision)
-        blockers.push('epic-operational-graph-mismatch');
-    if (runtimeEpic && typeof runtimeEpic.execution_branch === 'string'
-        && runtimeEpic.execution_branch !== preview.options.executionBranch)
-        blockers.push('epic-operational-branch-mismatch');
-    if (runtimeEpic && typeof runtimeEpic.graph_revision === 'string'
-        && runtimeEpic.graph_revision !== preview.options.graphRevision)
-        blockers.push('epic-operational-graph-mismatch');
-    if (isLiveLease(trackedEpic?.branch_lease, preview.options.nowIso)
-        || isLiveLease(runtimeEpic?.branch_lease, preview.options.nowIso)) {
-        blockers.push('epic-operational-writer-active');
-    }
-    const expectedWriterEpoch = preview.runtime.schemaVersion === 2 && preview.runtime.operational
-        ? Number(preview.runtime.operational.writerEpoch) : 0;
-    for (const client of preview.options.managedClients) {
-        if (client.activeWriter)
-            blockers.push('epic-operational-writer-active');
-        if (client.writerEpoch !== expectedWriterEpoch
-            || !client.capabilities.includes('epic-operational-state-v1')) {
-            blockers.push('epic-operational-legacy-writer-unfenced');
-        }
-    }
-    if (preview.runtime.schemaVersion === 2) {
-        try {
-            assertEpicOperationalState(preview.runtime.operational);
-            const state = preview.runtime.operational;
-            blockers.push('epic-operational-already-adopted');
-            if (state.activeJournal)
-                blockers.push('epic-operational-journal-conflict');
-            if (state.backfillReceipts.length >= EPIC_OPERATIONAL_RECEIPT_CAP)
-                blockers.push('epic-operational-receipt-capacity');
-        }
-        catch {
-            blockers.push('epic-operational-store-corrupt');
-        }
-    }
-    const requiredSources = sources.filter((source) => source.kind !== 'sqlite-projection');
-    const sourceInventoryDigest = epicOperationalHash('p224-backfill-source-inventory-v1', sources);
-    const requiredSourceDigest = epicOperationalHash('p224-backfill-required-sources-v1', requiredSources);
-    const checkoutFingerprints = [...new Set(sources
-            .filter((source) => source.kind === 'legacy-yoloop-state')
-            .map((source) => source.sourceFingerprint))].sort();
-    const managedClientFenceDigest = epicOperationalHash('p224-managed-client-fence-v1', preview.options.managedClients);
-    const migration = preview.trackedMigration;
-    const body = {
-        schemaVersion: 'EpicLifecycleBackfillPlan/1.0',
-        repositoryFingerprint: preview.initialOperational.repositoryFingerprint,
-        identity: Object.values(preview.initialOperational.identities)[0],
-        expectedRuntimeSchema: (preview.runtimeRaw === null ? 0 : preview.runtime.schemaVersion),
-        expectedRevision: preview.runtime.revision,
-        expectedWriterEpoch,
-        nextWriterEpoch: Math.max(1, expectedWriterEpoch + 1),
-        sourceInventory: sources,
-        sourceInventoryDigest,
-        requiredSourceDigest,
-        checkoutCount: checkoutFingerprints.length,
-        checkoutSetDigest: epicOperationalHash('p224-backfill-checkout-set-v1', checkoutFingerprints),
-        managedClientFenceDigest,
-        selectedYoloopSourceFingerprint: sources.find((source) => source.kind === 'legacy-yoloop-state' && source.presence === 'present')?.sourceFingerprint ?? null,
-        selectedYoloopCanonicalDigest: epicOperationalHash('p224-backfill-yoloop-v1', preview.selectedYoloop),
-        trackedStateMigration: {
-            outcome: migration ? 'migrate' : 'unchanged',
-            operationId: migration?.operationId ?? null,
-            sourceByteDigest: preview.tracked.byteDigest,
-            targetByteDigest: preview.trackedTargetDigest,
-            sourceCanonicalHash: migration?.sourceCanonicalHash ?? null,
-            targetCanonicalHash: migration?.targetCanonicalHash ?? null,
-        },
-        conflicts: [...new Set(blockers.filter((reason) => reason === 'epic-operational-source-conflict'))].sort(),
-        blockers: [...new Set(blockers)].sort(),
-        proposedEffects: [
-            'promote-common-runtime-v2',
-            'install-common-yoloop-authority',
-            ...(migration ? ['migrate-owned-tracked-state'] : []),
-            'record-explicit-sqlite-binding',
-            'append-backfill-receipt',
-        ],
-        rollbackPreconditions: [
-            'exact-runtime-revision-and-writer-epoch',
-            'exact-tracked-postimage',
-            'verified-private-backup',
-            'quiescent-writers',
-        ],
-        authorityPostimageDigest: epicOperationalHash('p224-backfill-authority-v1', preview.initialOperational),
-        publicSafe: true,
-    };
-    const operationId = `elbf_${epicOperationalHash('p224-backfill-operation-id-v1', body).slice(0, 32)}`;
-    const planWithoutDigest = { ...body, operationId, idempotencyKey: operationId };
-    return { ...planWithoutDigest, planDigest: epicOperationalHash('p224-backfill-plan-v1', planWithoutDigest) };
-}
-function collectPublicSources(preview) {
-    return preview.publicSources;
-}
-function writeBackfillBackup(preview, plan) {
-    const runtimeDir = join(preview.commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
-    ensurePrivateRuntimeDirectory(runtimeDir, preview.commonDir);
-    const backupsDir = join(runtimeDir, 'backups');
-    ensurePrivateRuntimeDirectory(backupsDir, runtimeDir);
-    const payload = {
-        schemaVersion: BACKUP_SCHEMA,
-        operationId: plan.operationId,
-        plan,
-        runtimeRaw: preview.runtimeRaw,
-        trackedSourceRaw: preview.tracked.raw,
-        trackedTargetRaw: preview.trackedTargetRaw,
-        trackedMigration: preview.trackedMigration,
-        initialOperational: preview.initialOperational,
-        sourceBindings: preview.sourceBindings,
-        physicalBranch: preview.physicalBranch,
-    };
-    const manifest = {
-        ...payload,
-        manifestDigest: epicOperationalHash('p224-backfill-backup-v1', payload),
-    };
-    const path = join(backupsDir, `${plan.operationId}.backfill.json`);
-    const raw = `${JSON.stringify(manifest, null, 2)}\n`;
-    if (existsSync(path)) {
-        const existing = parseBackup(readFileSync(path, 'utf8'));
-        if (existing.manifestDigest !== manifest.manifestDigest)
-            throw new Error('epic-operational-backup-failed');
-        return existing;
-    }
-    const fd = openSync(path, 'wx', 0o600);
-    try {
-        writeFileSync(fd, raw);
-        fsyncSync(fd);
-    }
-    finally {
-        closeSync(fd);
-    }
-    fsyncDirectory(backupsDir);
-    return manifest;
-}
-function readBackfillBackup(projectRoot, backupRef, expectedDigest, plan) {
-    if (!/^backups\/elbf_[a-f0-9]{32}\.backfill\.json$/.test(backupRef) || !HASH.test(expectedDigest)) {
-        throw new Error('epic-operational-backup-failed');
-    }
-    const commonDir = resolveCommonDir(projectRoot);
-    const runtimeDir = join(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
-    const path = join(runtimeDir, backupRef);
-    assertPrivateEntry(runtimeDir, 'directory');
-    assertPrivateEntry(path, 'file');
-    const backup = parseBackup(readFileSync(path, 'utf8'));
-    if (backup.manifestDigest !== expectedDigest
-        || (plan && (backup.plan.planDigest !== plan.planDigest || backup.operationId !== plan.operationId))) {
-        throw new Error('epic-operational-backup-failed');
-    }
-    return backup;
-}
-function parseBackup(raw) {
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        throw new Error('epic-operational-backup-failed');
-    }
-    const item = record(parsed);
-    if (!item || item.schemaVersion !== BACKUP_SCHEMA || !SAFE_ID.test(String(item.operationId))
-        || !record(item.plan) || !record(item.initialOperational) || !Array.isArray(item.sourceBindings)
-        || typeof item.trackedSourceRaw !== 'string' || typeof item.trackedTargetRaw !== 'string'
-        || typeof item.physicalBranch !== 'string' || !HASH.test(String(item.manifestDigest))) {
-        throw new Error('epic-operational-backup-failed');
-    }
-    const { manifestDigest, ...payload } = item;
-    if (manifestDigest !== epicOperationalHash('p224-backfill-backup-v1', payload)) {
-        throw new Error('epic-operational-backup-failed');
-    }
-    assertPlan(item.plan);
-    assertEpicOperationalState(item.initialOperational);
-    return item;
-}
-function backfillJournal(plan, backup, phase) {
-    return {
-        schemaVersion: 'EpicOperationalJournal/1.0',
-        kind: 'backfill',
-        operationId: plan.operationId,
-        idempotencyKey: plan.idempotencyKey,
-        payloadHash: plan.planDigest,
-        identityHash: plan.identity.identityHash,
-        expectedRevision: plan.expectedRevision,
-        expectedWriterEpoch: plan.expectedWriterEpoch,
-        preimageDigest: backup.manifestDigest,
-        backupManifestRef: `backups/${plan.operationId}.backfill.json`,
-        phase,
-        projectionStatuses: { trackedState: 'pending', sqlite: 'pending' },
-        reasonCodes: ['epic-operational-backup-verified'],
-    };
-}
-function backfillReceipt(plan, backup, trackedPostDigest, appliedRevision) {
-    return Object.freeze({
-        schemaVersion: 'EpicLifecycleBackfillReceipt/1.0',
-        operationId: plan.operationId,
-        idempotencyKey: plan.idempotencyKey,
-        payloadHash: plan.planDigest,
-        planDigest: plan.planDigest,
-        sourceInventoryDigest: plan.sourceInventoryDigest,
-        preimageDigest: plan.trackedStateMigration.sourceByteDigest,
-        postimageDigest: trackedPostDigest,
-        authorityPostimageDigest: plan.authorityPostimageDigest,
-        backupManifestDigest: backup.manifestDigest,
-        identityHash: plan.identity.identityHash,
-        appliedRevision,
-        writerEpoch: plan.nextWriterEpoch,
-        stateMigrationOperationId: plan.trackedStateMigration.operationId,
-        outcome: 'applied',
-        reasonCodes: ['epic-operational-backfill-applied', 'epic-operational-backup-verified'],
-        publicSafe: true,
-    });
-}
-function verifyBackupSources(backup, expectedTrackedDigest) {
-    verifyPrivateSources(backup.sourceBindings, expectedTrackedDigest);
-}
-function verifyBackupSourcesOneOf(backup, expectedTrackedDigests) {
-    for (const binding of backup.sourceBindings) {
-        if (binding.kind === 'tracked-state') {
-            const source = readBoundedRaw(binding.path);
-            if (!expectedTrackedDigests.includes(source.digest))
-                throw new Error('epic-operational-source-raced');
-            continue;
-        }
-        if (binding.presence === 'missing') {
-            if (existsSync(binding.path))
-                throw new Error('epic-operational-source-raced');
-            continue;
-        }
-        if (readBoundedRaw(binding.path).digest !== binding.digest) {
-            throw new Error('epic-operational-source-raced');
-        }
-    }
-}
-function verifyPrivateSources(bindings, expectedTrackedDigest) {
-    for (const binding of bindings) {
-        if (binding.kind === 'tracked-state') {
-            const source = readBoundedRaw(binding.path);
-            if (source.digest !== expectedTrackedDigest)
-                throw new Error('epic-operational-source-raced');
-            continue;
-        }
-        if (binding.presence === 'missing') {
-            if (existsSync(binding.path))
-                throw new Error('epic-operational-source-raced');
-            continue;
-        }
-        const source = readBoundedRaw(binding.path);
-        if (source.digest !== binding.digest)
-            throw new Error('epic-operational-source-raced');
-    }
-}
-async function markBackfillAborted(projectRoot, document, operational, plan) {
-    if (operational.activeJournal?.phase !== 'prepared')
-        return;
-    await mutateEpicOperationalState(projectRoot, {
-        identityHash: plan.identity.identityHash,
-        expectedRevision: document.revision,
-        expectedWriterEpoch: plan.nextWriterEpoch,
-    }, (state) => {
-        state.activeJournal = {
-            ...state.activeJournal,
-            phase: 'aborted-before-authority',
-            reasonCodes: [...state.activeJournal.reasonCodes, 'epic-operational-source-raced'],
-        };
-    });
-}
-function inspectLegacyJson(path, kind, worktreeFingerprint, validate) {
-    const fingerprint = epicOperationalHash('p224-backfill-source-v1', { kind, worktreeFingerprint });
-    if (!existsSync(path)) {
-        return {
-            source: missingSource(kind, fingerprint),
-            binding: { path, presence: 'missing', digest: null, kind },
-            parsed: null,
-        };
-    }
-    try {
-        const raw = readBoundedRaw(path);
-        const parsed = validate(JSON.parse(raw.raw));
-        return {
-            source: sourceFromParsed(kind, fingerprint, raw.raw, parsed),
-            binding: { path, presence: 'present', digest: raw.digest, kind },
-            parsed,
-        };
-    }
-    catch (error) {
-        const reason = error instanceof Error && error.message.startsWith('epic-operational-')
-            ? error.message : 'epic-operational-source-corrupt';
-        return {
-            source: blockedSource(kind, fingerprint, reason.endsWith('unsafe') ? 'unsafe' : 'corrupt', reason),
-            binding: { path, presence: 'present', digest: safeFileDigest(path), kind },
-            parsed: null,
-        };
-    }
-}
-function strictCounters(value) {
-    const item = record(value);
-    if (!item || !['1.1', '1.2'].includes(String(item.version))
-        || !Number.isFinite(item.storiesRunToday) || Number(item.storiesRunToday) < 0
-        || !Number.isFinite(item.iterationsToday) || Number(item.iterationsToday) < 0
-        || !Number.isFinite(item.tokensUsedToday) || Number(item.tokensUsedToday) < 0
-        || !Number.isFinite(item.totalRunsAllTime) || Number(item.totalRunsAllTime) < 0
-        || !Number.isFinite(item.totalStoriesAllTime) || Number(item.totalStoriesAllTime) < 0
-        || !(item.currentSession === null || record(item.currentSession))
-        || !Array.isArray(item.pendingContinuationAuthorities ?? [])) {
-        throw new Error('epic-operational-source-corrupt');
-    }
-    return item;
-}
-function strictLock(value) {
-    const item = record(value);
-    if (!item || !Number.isSafeInteger(item.pid) || Number(item.pid) < 0
-        || typeof item.hostname !== 'string' || typeof item.startedAt !== 'string'
-        || typeof item.sessionId !== 'string' || item.sessionId.length > 128
-        || !Array.isArray(item.epicQueue) || !item.epicQueue.every((entry) => typeof entry === 'string')
-        || typeof item.currentEpicId !== 'string' || typeof item.ttlExpiresAt !== 'string') {
-        throw new Error('epic-operational-source-corrupt');
-    }
-    return item;
-}
-function sourceFromRaw(kind, identityPath, raw, role) {
-    const fingerprint = sourceFingerprint(identityPath, kind);
-    if (raw === null)
-        return missingSource(kind, fingerprint);
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return blockedSource(kind, fingerprint, 'corrupt', 'epic-operational-source-corrupt');
-    }
-    const source = sourceFromParsed(kind, fingerprint, raw, parsed);
-    return { ...source, role, status: role === 'projection' ? 'projection' : 'candidate' };
-}
-function sourceFromParsed(kind, fingerprint, raw, parsed) {
-    const item = record(parsed);
-    return {
-        schemaVersion: 'EpicLifecycleBackfillSource/1.0',
-        kind,
-        sourceFingerprint: fingerprint,
-        presence: 'present',
-        byteLength: Buffer.byteLength(raw, 'utf8'),
-        byteDigest: sha256(raw),
-        canonicalDigest: epicOperationalHash('p224-backfill-source-canonical-v1', parsed),
-        sourceSchema: typeof item?.schemaVersion === 'string' || typeof item?.schemaVersion === 'number'
-            ? String(item.schemaVersion) : typeof item?.version === 'string' ? item.version : 'legacy',
-        status: kind.includes('lock') ? 'activity' : kind === 'tracked-state' || kind === 'sqlite-projection' ? 'projection' : 'candidate',
-        role: kind.includes('lock') ? 'activity-signal' : kind === 'tracked-state' || kind === 'sqlite-projection'
-            ? 'projection' : 'authority-candidate',
-        reasonCodes: ['epic-operational-source-complete'],
-        publicSafe: true,
-    };
-}
-function missingSource(kind, fingerprint) {
-    return {
-        schemaVersion: 'EpicLifecycleBackfillSource/1.0',
-        kind,
-        sourceFingerprint: fingerprint,
-        presence: 'missing',
-        byteLength: null,
-        byteDigest: null,
-        canonicalDigest: null,
-        sourceSchema: null,
-        status: 'absent',
-        role: kind.includes('lock') ? 'activity-signal' : kind === 'tracked-state' || kind === 'sqlite-projection'
-            ? 'projection' : 'authority-candidate',
-        reasonCodes: ['epic-operational-source-missing'],
-        publicSafe: true,
-    };
-}
-function blockedSource(kind, fingerprint, presence, reason) {
-    return {
-        schemaVersion: 'EpicLifecycleBackfillSource/1.0',
-        kind,
-        sourceFingerprint: fingerprint,
-        presence,
-        byteLength: null,
-        byteDigest: null,
-        canonicalDigest: null,
-        sourceSchema: null,
-        status: 'blocked',
-        role: kind.includes('lock') ? 'activity-signal' : kind === 'tracked-state' ? 'projection' : 'authority-candidate',
-        reasonCodes: [reason],
-        publicSafe: true,
-    };
-}
-function listWorktrees(projectRoot, expectedCommonDir) {
-    const raw = execFileSync('git', ['worktree', 'list', '--porcelain', '-z'], {
-        cwd: projectRoot,
-        encoding: 'utf8',
-        maxBuffer: 4 * 1024 * 1024,
-    });
-    const paths = raw.split('\0')
-        .filter((token) => token.startsWith('worktree '))
-        .map((token) => token.slice('worktree '.length));
-    if (paths.length === 0 || paths.length > CHECKOUT_CAP)
-        throw new Error('epic-operational-checkout-capacity');
-    return paths.map((path) => {
-        const canonical = realpathSync(path);
-        const common = resolveCommonDir(canonical);
-        if (common !== expectedCommonDir)
-            throw new Error('epic-operational-foreign-common-dir');
-        const info = lstatSync(canonical);
-        if (!info.isDirectory() || info.isSymbolicLink())
-            throw new Error('epic-operational-path-unsafe');
-        return {
-            path: canonical,
-            fingerprint: epicOperationalHash('p224-backfill-worktree-v1', {
-                repository: epicOperationalHash('p224-backfill-common-v1', expectedCommonDir),
-                dev: Number(info.dev),
-                ino: Number(info.ino),
-            }),
-        };
-    }).sort((left, right) => left.fingerprint.localeCompare(right.fingerprint));
-}
-function resolveCommonDir(projectRoot) {
-    const raw = execFileSync('git', ['rev-parse', '--git-common-dir'], {
-        cwd: projectRoot,
-        encoding: 'utf8',
-        stdio: ['ignore', 'pipe', 'ignore'],
-    }).trim();
-    const absolute = isAbsolute(raw) ? resolve(raw) : resolve(projectRoot, raw);
-    const canonical = realpathSync(absolute);
-    const info = lstatSync(canonical);
-    if (canonical !== absolute || !info.isDirectory() || info.isSymbolicLink()) {
-        throw new Error('epic-operational-path-unsafe');
-    }
-    return canonical;
-}
-function resolveRuntimePath(commonDir) {
-    const current = join(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY, GIT_LIFECYCLE_RUNTIME_FILE);
-    if (existsSync(current))
-        return current;
-    return join(commonDir, 'neocortex-yoloop-runtime.json');
-}
-function readBoundedRaw(path) {
-    const info = lstatSync(path);
-    if (!info.isFile() || info.isSymbolicLink())
-        throw new Error('epic-operational-path-unsafe');
-    if (typeof process.getuid === 'function' && info.uid !== process.getuid())
-        throw new Error('epic-operational-path-unsafe');
-    if (info.size > STATE_MIGRATION_INPUT_LIMIT_BYTES)
-        throw new Error('epic-operational-source-oversized');
-    const raw = readFileSync(path, 'utf8');
-    if (Buffer.byteLength(raw, 'utf8') !== info.size)
-        throw new Error('epic-operational-source-raced');
-    return { raw, digest: sha256(raw) };
-}
-function safeFileDigest(path) {
-    try {
-        return readBoundedRaw(path).digest;
-    }
-    catch {
-        return null;
-    }
-}
-function sourceFingerprint(path, kind) {
-    let physical = { presence: 'missing' };
-    if (existsSync(path)) {
-        const info = lstatSync(path);
-        physical = { dev: Number(info.dev), ino: Number(info.ino), type: info.isDirectory() ? 'directory' : 'file' };
-    }
-    return epicOperationalHash('p224-backfill-source-v1', { kind, physical });
-}
-function findTrackedEpic(state, epicId) {
-    const epics = state.epics;
-    if (Array.isArray(epics))
-        return epics.map(record).find((epic) => epic?.id === epicId);
-    return record(epics)?.[epicId];
-}
-function hasTrackedProgress(state) {
-    const stories = state.stories;
-    const values = Array.isArray(stories) ? stories : Object.values(record(stories) ?? {});
-    return values.some((value) => {
-        const story = record(value);
-        return Boolean(story && ((Array.isArray(story.steps_completed) && story.steps_completed.length > 0)
-            || story.checkpoint || story.branch_name || (typeof story.status === 'string' && !['backlog', 'planned'].includes(story.status))));
-    });
-}
-function isLiveLease(value, nowIso) {
-    const lease = record(value);
-    if (!lease)
-        return false;
-    const expires = Date.parse(String(lease.expiresAt ?? ''));
-    return !Number.isFinite(expires) || expires > Date.parse(nowIso);
-}
-function verifyPhysicalBranch(projectRoot, expected) {
-    const current = execFileSync('git', ['branch', '--show-current'], { cwd: projectRoot, encoding: 'utf8' }).trim();
-    if (current !== expected)
-        throw new Error('epic-operational-source-raced');
-}
-function ensurePrivateRuntimeDirectory(path, parent) {
-    if (!existsSync(path)) {
-        mkdirSync(path, { mode: 0o700 });
-        fsyncDirectory(parent);
-    }
-    assertPrivateEntry(path, 'directory');
-    if (realpathSync(path) !== resolve(path) || relative(resolve(parent), resolve(path)).startsWith('..')) {
-        throw new Error('epic-operational-path-unsafe');
-    }
-}
-function assertPrivateEntry(path, kind) {
-    const info = lstatSync(path);
-    if (info.isSymbolicLink() || (kind === 'file' ? !info.isFile() : !info.isDirectory())
-        || (typeof process.getuid === 'function' && info.uid !== process.getuid())
-        || (process.platform !== 'win32' && (info.mode & 0o077) !== 0)) {
-        throw new Error('epic-operational-path-unsafe');
-    }
-}
-function fsyncDirectory(path) {
-    if (process.platform === 'win32')
-        return;
-    const fd = openSync(path, 'r');
-    try {
-        fsyncSync(fd);
-    }
-    finally {
-        closeSync(fd);
-    }
-}
-function validateOptions(options) {
-    if (!/^P[1-9][0-9]*$/.test(options.epicId)
-        || !/^[A-Za-z0-9][A-Za-z0-9._/-]{0,239}$/.test(options.executionBranch)
-        || options.executionBranch.includes('..') || options.executionBranch.includes('//')
-        || !HASH.test(options.graphRevision) || !HASH.test(options.originBindingDigest)
-        || (options.managedClients?.length ?? 0) > 128
-        || options.managedClients?.some((client) => !SAFE_ID.test(client.clientId)
-            || !Number.isSafeInteger(client.writerEpoch) || client.writerEpoch < 0
-            || client.capabilities.length > 16)) {
-        throw new Error('epic-operational-preview-input-invalid');
-    }
-}
-function assertPlan(plan) {
-    if (plan.schemaVersion !== 'EpicLifecycleBackfillPlan/1.0'
-        || !/^elbf_[a-f0-9]{32}$/.test(plan.operationId)
-        || plan.idempotencyKey !== plan.operationId
-        || !HASH.test(plan.repositoryFingerprint) || !HASH.test(plan.planDigest)
-        || !HASH.test(plan.sourceInventoryDigest) || !HASH.test(plan.requiredSourceDigest)
-        || computePlanDigest(plan) !== plan.planDigest
-        || plan.sourceInventory.length > CHECKOUT_CAP * 2 + 3
-        || plan.blockers.some((reason) => !/^[a-z0-9][a-z0-9-]{0,79}$/.test(reason))) {
-        throw new Error('epic-operational-plan-invalid');
-    }
-}
-function computePlanDigest(plan) {
-    const { planDigest: _planDigest, ...body } = plan;
-    return epicOperationalHash('p224-backfill-plan-v1', body);
-}
-function compareSources(left, right) {
-    return `${left.kind}:${left.sourceFingerprint}`.localeCompare(`${right.kind}:${right.sourceFingerprint}`);
-}
-function isSourceRace(error) {
-    return error instanceof Error && [
-        'epic-operational-source-raced',
-        'epic-operational-branch-mismatch',
-        'epic-operational-writer-active',
-        'epic-operational-legacy-writer-unfenced',
-    ].includes(error.message);
-}
-function record(value) {
-    return value && typeof value === 'object' && !Array.isArray(value)
-        ? value : undefined;
-}
-function sha256(value) {
-    return createHash('sha256').update(value).digest('hex');
-}
-function deepFreeze(value) {
-    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
-        Object.freeze(value);
-        for (const child of Object.values(value))
-            deepFreeze(child);
-    }
-    return value;
-}
+import{execFileSync as P}from"node:child_process";import{createHash as we}from"node:crypto";import{closeSync as Y,existsSync as D,fsyncSync as U,lstatSync as j,mkdirSync as ve,openSync as G,readFileSync as _,realpathSync as O,writeFileSync as Ee}from"node:fs";import{isAbsolute as De,join as k,relative as Se,resolve as S}from"node:path";import{inspectEpicOperationalSqliteBinding as Z}from"../continuity/sqlite-store.js";import{GIT_LIFECYCLE_RUNTIME_DIRECTORY as H,GIT_LIFECYCLE_RUNTIME_FILE as Ie,mutateGitLifecycleRuntime as Re,readGitLifecycleRuntimeSync as Q}from"../git/git-lifecycle-store.js";import{EPIC_OPERATIONAL_PAYLOAD_LIMIT_BYTES as xe,EPIC_OPERATIONAL_RECEIPT_CAP as M,assertEpicOperationalState as T,createEpicOperationalIdentity as Be,createInitialEpicOperationalState as Ae,epicOperationalCanonicalJson as Oe,epicOperationalHash as f,mutateEpicOperationalState as I,readEpicOperationalState as je}from"../git/epic-operational-state.js";import{createDefaultCounters as Ce}from"../yoloop/yoloop-client-state-store.js";import{applyStateMigration as Le,previewStateMigration as Pe,readStateMigrationSourceSnapshot as C,restoreStateMigrationPreimage as _e,STATE_MIGRATION_INPUT_LIMIT_BYTES as He}from"./state-json.js";const X=32,gt=1024,R=/^[a-f0-9]{64}$/,ee=/^[A-Za-z0-9._:-]{1,128}$/,te="EpicLifecycleBackfillBackup/1.0",Me=Object.freeze(["rollover-session-v1","successor-transition-v1","continuation-replan-v1","cross-epic-continuation-reconcile-v1"]),ie=new WeakMap,re=new WeakMap;async function ht(e,t){et(t);const i=await Te(e,t),o=Fe(i);if(Buffer.byteLength(Oe(o),"utf8")>xe)throw new Error("epic-operational-plan-oversized");const r=ye(o);return ie.set(r,i),r}function yt(e){const t=ie.get(e);if(!t||e.blockers.length>0||e.conflicts.length>0||N(e)!==e.planDigest)throw new Error("epic-operational-approval-invalid");const i=Object.freeze(Object.create(null));return re.set(i,{plan:e,preview:t}),i}async function mt(e,t,i,o={}){he(t);const r=O(S(e)),n=Q(r);if(n.schemaVersion===2&&n.operational!==void 0){T(n.operational);const p=n.operational.backfillReceipts.find(l=>l.operationId===t.operationId||l.idempotencyKey===t.idempotencyKey);if(p){if(p.planDigest!==t.planDigest||p.sourceInventoryDigest!==t.sourceInventoryDigest)throw new Error("epic-operational-replay-conflict");return{applied:!1,replay:!0,receipt:p,revision:n.revision,writerEpoch:n.operational.writerEpoch}}}let a,s=n,u=n.schemaVersion===2&&n.operational!==void 0?n.operational:null;const d=u?.activeJournal;if(d){if(d.kind!=="backfill"||d.operationId!==t.operationId||d.idempotencyKey!==t.idempotencyKey||d.payloadHash!==t.planDigest)throw new Error("epic-operational-journal-conflict");if(d.phase==="aborted-before-authority")throw new Error("epic-operational-source-raced");a=oe(r,d.backupManifestRef,d.preimageDigest,t)}else{const p=i?re.get(i):void 0;if(!p||p.plan!==t||p.preview.projectRoot!==r||N(t)!==t.planDigest)throw new Error("epic-operational-approval-invalid");if(s.schemaVersion!==t.expectedRuntimeSchema&&!(t.expectedRuntimeSchema===0&&s.revision===0))throw new Error("epic-operational-revision-conflict");if(s.revision!==t.expectedRevision)throw new Error("epic-operational-revision-conflict");F(p.preview.sourceBindings,p.preview.tracked.byteDigest),J(r,p.preview.physicalBranch),a=Je(p.preview,t),await o.afterBackup?.();const l=qe(t,a,"prepared"),c={...p.preview.initialOperational,activeJournal:l};s=(await Re(r,b=>{if(b.schemaVersion!==s.schemaVersion||b.revision!==t.expectedRevision)throw new Error("epic-operational-revision-conflict");b.operational=c},{expectedRevision:t.expectedRevision,nextSchemaVersion:2,preCommit:async()=>{F(p.preview.sourceBindings,p.preview.tracked.byteDigest),J(r,p.preview.physicalBranch)}})).document,u=s.operational,await o.afterPrepared?.()}if(!u)throw new Error("epic-operational-store-missing");try{u.activeJournal?.phase==="prepared"&&(ae(a,a.plan.trackedStateMigration.sourceByteDigest),J(r,a.physicalBranch),s=(await I(r,{identityHash:t.identity.identityHash,expectedRevision:s.revision,expectedWriterEpoch:t.nextWriterEpoch},l=>{l.activeJournal={...l.activeJournal,phase:"authority-applied"}})).document,u=s.operational,await o.afterAuthorityApplied?.())}catch(p){throw u.activeJournal?.phase==="prepared"&&it(p)&&await $e(r,s,u,t),p}let h=a.plan.trackedStateMigration.targetByteDigest;if(u.activeJournal?.phase==="authority-applied"){if(Ve(a,a.trackedMigration?[a.plan.trackedStateMigration.sourceByteDigest,h]:[h]),a.trackedMigration){const m=C(r).byteDigest;Le(r,{operationId:a.trackedMigration.operationId,sourceCanonicalHash:a.trackedMigration.sourceCanonicalHash,targetCanonicalHash:a.trackedMigration.targetCanonicalHash,...m===a.plan.trackedStateMigration.sourceByteDigest?{sourceByteDigest:a.plan.trackedStateMigration.sourceByteDigest}:{}})}if(h=C(r).byteDigest,h!==a.plan.trackedStateMigration.targetByteDigest)throw new Error("epic-operational-projection-conflict");await o.afterTrackedProjection?.();const l=await Z({projectRoot:r,authorityRevision:s.revision,sourceDigest:t.authorityPostimageDigest});s=(await I(r,{identityHash:t.identity.identityHash,expectedRevision:s.revision,expectedWriterEpoch:t.nextWriterEpoch},m=>{m.projectionBindings={...m.projectionBindings,trackedState:{status:"bound",sourceDigest:h,authorityRevision:s.revision,reasonCodes:["epic-operational-tracked-state-bound"]},sqlite:{status:l.status,sourceDigest:l.sourceDigest,authorityRevision:s.revision,reasonCodes:l.reasonCodes}},m.activeJournal={...m.activeJournal,phase:"projections-applied",projectionStatuses:{trackedState:"applied",sqlite:l.status==="bound"?"applied":"unavailable"}}})).document,u=s.operational,await o.afterProjectionsApplied?.()}if(u.activeJournal?.phase!=="projections-applied")throw new Error("epic-operational-journal-corrupt");ae(a,h);const w=Ne(t,a,h,s.revision+1),g=await I(r,{identityHash:t.identity.identityHash,expectedRevision:s.revision,expectedWriterEpoch:t.nextWriterEpoch},p=>{if(p.backfillReceipts.length>=M)throw new Error("epic-operational-receipt-capacity");p.backfillReceipts=[...p.backfillReceipts,w],p.activeJournal=null}),v=g.document.operational;return{applied:!0,replay:!1,receipt:w,revision:g.document.revision,writerEpoch:v.writerEpoch}}async function bt(e){const t=O(S(e.projectRoot));let{document:i,operational:o}=je(t,{expectedRevision:e.expectedRevision,expectedWriterEpoch:e.expectedWriterEpoch});if(o.activeJournal)throw new Error("epic-operational-journal-conflict");const r=o.backfillReceipts.find(c=>c.operationId===e.targetOperationId);if(!r)throw new Error("epic-operational-rollback-target-missing");const n=o.rollbackReceipts.find(c=>c.targetOperationId===e.targetOperationId);if(n)return{receipt:n,revision:i.revision};if(o.rollbackReceipts.length>=M)throw new Error("epic-operational-receipt-capacity");const a=`backups/${e.targetOperationId}.backfill.json`,s=oe(t,a,r.backupManifestDigest,void 0);if(C(t).byteDigest!==r.postimageDigest)throw new Error("epic-operational-rollback-postimage-conflict");const d=`elrb_${f("p224-backfill-rollback-id-v1",{targetOperationId:e.targetOperationId,expectedRevision:e.expectedRevision,expectedWriterEpoch:e.expectedWriterEpoch}).slice(0,32)}`,h=f("p224-backfill-rollback-v1",{operationId:d,targetOperationId:e.targetOperationId,expectedRevision:e.expectedRevision,expectedWriterEpoch:e.expectedWriterEpoch,postimageDigest:r.postimageDigest,preimageDigest:r.preimageDigest}),w={schemaVersion:"EpicOperationalJournal/1.0",kind:"rollback",operationId:d,idempotencyKey:d,payloadHash:h,identityHash:r.identityHash,expectedRevision:e.expectedRevision,expectedWriterEpoch:e.expectedWriterEpoch,preimageDigest:r.postimageDigest,backupManifestRef:a,phase:"prepared",projectionStatuses:{trackedState:"pending",sqlite:"not-applicable"},reasonCodes:["epic-operational-backup-verified"]};let g=await I(t,{identityHash:r.identityHash,expectedRevision:i.revision,expectedWriterEpoch:o.writerEpoch},c=>{c.activeJournal=w});if(i=g.document,o=i.operational,g=await I(t,{identityHash:r.identityHash,expectedRevision:i.revision,expectedWriterEpoch:o.writerEpoch},c=>{c.writerEpoch=c.writerEpoch+1,c.activeJournal={...c.activeJournal,phase:"authority-applied"}}),i=g.document,o=i.operational,s.trackedMigration)_e({projectRoot:t,operationId:s.trackedMigration.operationId,expectedCurrentDigest:r.postimageDigest,expectedBackupDigest:r.preimageDigest});else if(r.preimageDigest!==r.postimageDigest)throw new Error("epic-operational-rollback-backup-invalid");const v=C(t);if(v.byteDigest!==r.preimageDigest)throw new Error("epic-operational-rollback-readback-failed");g=await I(t,{identityHash:r.identityHash,expectedRevision:i.revision,expectedWriterEpoch:o.writerEpoch},c=>{c.projectionBindings={...c.projectionBindings,trackedState:{status:"bound",sourceDigest:v.byteDigest,authorityRevision:i.revision,reasonCodes:["epic-operational-rollback-projection-restored"]}},c.activeJournal={...c.activeJournal,phase:"projections-applied",projectionStatuses:{trackedState:"applied",sqlite:"not-applicable"}}}),i=g.document,o=i.operational;const p={schemaVersion:"EpicOperationalRollbackReceipt/1.0",operationId:d,targetOperationId:e.targetOperationId,expectedPostimageDigest:r.postimageDigest,restoredPreimageDigest:r.preimageDigest,reasonCodes:["epic-operational-rollback-verified"],publicSafe:!0},l=await I(t,{identityHash:r.identityHash,expectedRevision:i.revision,expectedWriterEpoch:o.writerEpoch},c=>{c.rollbackReceipts=[...c.rollbackReceipts,p],c.activeJournal=null});return{receipt:p,revision:l.document.revision}}async function Te(e,t){const i=O(S(e)),o=W(i),r=Ue(o),n=D(r)?A(r).raw:null,a=Q(i),s=C(i),u=Pe(i),d=u?`${JSON.stringify(u.targetState,null,2)}
+`:s.raw,h=V(d),w=Be(i,t),g=t.nowIso??new Date().toISOString();if(!Number.isFinite(Date.parse(g)))throw new Error("epic-operational-time-invalid");const v=Ye(i,o),p=[],l=[];p.push(se("common-runtime",o,n,"authority-candidate")),p.push(se("tracked-state",i,s.raw,"projection")),l.push({path:k(i,".neocortex","state.json"),presence:"present",digest:s.byteDigest,kind:"tracked-state"});const c=[];let m=null;const b=[];for(const x of v){const be=k(x.path,".neocortex","yoloop-state.json"),ke=k(x.path,".neocortex","yoloop.lock"),E=ce(be,"legacy-yoloop-state",x.fingerprint,ze);p.push(E.source),l.push(E.binding),E.parsed&&c.push({fingerprint:x.fingerprint,parsed:E.parsed,digest:E.source.canonicalDigest}),(E.source.presence==="corrupt"||E.source.presence==="unsafe"||E.source.presence==="unsupported")&&b.push(...E.source.reasonCodes);const B=ce(ke,"legacy-yoloop-lock",x.fingerprint,Ke);p.push(B.source),l.push(B.binding),B.parsed&&(m=B.parsed),B.source.presence!=="missing"&&(B.parsed?b.push("epic-operational-writer-active"):b.push(...B.source.reasonCodes))}[...new Set(c.map(x=>x.digest))].length>1&&b.push("epic-operational-source-conflict");const $=c[0];!$&&Xe(s.state)&&b.push("epic-operational-progress-source-missing");const z=$?.parsed??Ce(g),K=Ae({identity:w,yoloop:{lock:null,state:z,capabilities:Me},trackedStateDigest:s.byteDigest,sqliteStatus:"unavailable",sqliteReasonCodes:["epic-operational-projection-unavailable"]}),L=await Z({projectRoot:i,authorityRevision:a.revision,sourceDigest:f("p224-backfill-authority-v1",K),...t.sqliteAdapter?{adapter:t.sqliteAdapter}:{},...t.sqliteAdapterLoader?{adapterLoader:t.sqliteAdapterLoader}:{}});p.push({schemaVersion:"EpicLifecycleBackfillSource/1.0",kind:"sqlite-projection",sourceFingerprint:f("p224-backfill-source-v1",{kind:"sqlite-projection",repository:w.repositoryFingerprint}),presence:L.status==="unavailable"?"unavailable":"present",byteLength:null,byteDigest:L.sourceDigest,canonicalDigest:L.sourceDigest,sourceSchema:"continuity-state_snapshots",status:"projection",role:"projection",reasonCodes:L.reasonCodes,publicSafe:!0});const me=P("git",["branch","--show-current"],{cwd:i,encoding:"utf8"}).trim();return{projectRoot:i,commonDir:o,runtimePath:r,runtimeRaw:n,runtime:a,tracked:s,trackedMigration:u,trackedTargetRaw:d,trackedTargetDigest:h,selectedYoloop:z,selectedYoloopLock:m,initialOperational:K,sourceBindings:l,publicSources:p.sort(tt),collectionBlockers:b,physicalBranch:me,options:{epicId:t.epicId,executionBranch:t.executionBranch,graphRevision:t.graphRevision,originBindingDigest:t.originBindingDigest,managedClients:t.managedClients??[],nowIso:g,...t.sqliteAdapter?{sqliteAdapter:t.sqliteAdapter}:{},...t.sqliteAdapterLoader?{sqliteAdapterLoader:t.sqliteAdapterLoader}:{}}}}function Fe(e){const t=e.collectionBlockers,i=We(e),o=[...t];e.physicalBranch!==e.options.executionBranch&&o.push("epic-operational-branch-mismatch");const r=Qe(e.tracked.state,e.options.epicId),n=y(e.runtime.epics[e.options.epicId]);r||o.push("epic-operational-epic-missing"),r&&r.branch_mode!==void 0&&r.branch_mode!=="epic"&&o.push("epic-operational-branch-mode-conflict"),r&&typeof r.execution_branch=="string"&&r.execution_branch!==e.options.executionBranch&&o.push("epic-operational-branch-mismatch"),r&&typeof r.graph_revision=="string"&&r.graph_revision!==e.options.graphRevision&&o.push("epic-operational-graph-mismatch"),n&&typeof n.execution_branch=="string"&&n.execution_branch!==e.options.executionBranch&&o.push("epic-operational-branch-mismatch"),n&&typeof n.graph_revision=="string"&&n.graph_revision!==e.options.graphRevision&&o.push("epic-operational-graph-mismatch"),(de(r?.branch_lease,e.options.nowIso)||de(n?.branch_lease,e.options.nowIso))&&o.push("epic-operational-writer-active");const a=e.runtime.schemaVersion===2&&e.runtime.operational?Number(e.runtime.operational.writerEpoch):0;for(const c of e.options.managedClients)c.activeWriter&&o.push("epic-operational-writer-active"),(c.writerEpoch!==a||!c.capabilities.includes("epic-operational-state-v1"))&&o.push("epic-operational-legacy-writer-unfenced");if(e.runtime.schemaVersion===2)try{T(e.runtime.operational);const c=e.runtime.operational;o.push("epic-operational-already-adopted"),c.activeJournal&&o.push("epic-operational-journal-conflict"),c.backfillReceipts.length>=M&&o.push("epic-operational-receipt-capacity")}catch{o.push("epic-operational-store-corrupt")}const s=i.filter(c=>c.kind!=="sqlite-projection"),u=f("p224-backfill-source-inventory-v1",i),d=f("p224-backfill-required-sources-v1",s),h=[...new Set(i.filter(c=>c.kind==="legacy-yoloop-state").map(c=>c.sourceFingerprint))].sort(),w=f("p224-managed-client-fence-v1",e.options.managedClients),g=e.trackedMigration,v={schemaVersion:"EpicLifecycleBackfillPlan/1.0",repositoryFingerprint:e.initialOperational.repositoryFingerprint,identity:Object.values(e.initialOperational.identities)[0],expectedRuntimeSchema:e.runtimeRaw===null?0:e.runtime.schemaVersion,expectedRevision:e.runtime.revision,expectedWriterEpoch:a,nextWriterEpoch:Math.max(1,a+1),sourceInventory:i,sourceInventoryDigest:u,requiredSourceDigest:d,checkoutCount:h.length,checkoutSetDigest:f("p224-backfill-checkout-set-v1",h),managedClientFenceDigest:w,selectedYoloopSourceFingerprint:i.find(c=>c.kind==="legacy-yoloop-state"&&c.presence==="present")?.sourceFingerprint??null,selectedYoloopCanonicalDigest:f("p224-backfill-yoloop-v1",e.selectedYoloop),trackedStateMigration:{outcome:g?"migrate":"unchanged",operationId:g?.operationId??null,sourceByteDigest:e.tracked.byteDigest,targetByteDigest:e.trackedTargetDigest,sourceCanonicalHash:g?.sourceCanonicalHash??null,targetCanonicalHash:g?.targetCanonicalHash??null},conflicts:[...new Set(o.filter(c=>c==="epic-operational-source-conflict"))].sort(),blockers:[...new Set(o)].sort(),proposedEffects:["promote-common-runtime-v2","install-common-yoloop-authority",...g?["migrate-owned-tracked-state"]:[],"record-explicit-sqlite-binding","append-backfill-receipt"],rollbackPreconditions:["exact-runtime-revision-and-writer-epoch","exact-tracked-postimage","verified-private-backup","quiescent-writers"],authorityPostimageDigest:f("p224-backfill-authority-v1",e.initialOperational),publicSafe:!0},p=`elbf_${f("p224-backfill-operation-id-v1",v).slice(0,32)}`,l={...v,operationId:p,idempotencyKey:p};return{...l,planDigest:f("p224-backfill-plan-v1",l)}}function We(e){return e.publicSources}function Je(e,t){const i=k(e.commonDir,H);fe(i,e.commonDir);const o=k(i,"backups");fe(o,i);const r={schemaVersion:te,operationId:t.operationId,plan:t,runtimeRaw:e.runtimeRaw,trackedSourceRaw:e.tracked.raw,trackedTargetRaw:e.trackedTargetRaw,trackedMigration:e.trackedMigration,initialOperational:e.initialOperational,sourceBindings:e.sourceBindings,physicalBranch:e.physicalBranch},n={...r,manifestDigest:f("p224-backfill-backup-v1",r)},a=k(o,`${t.operationId}.backfill.json`),s=`${JSON.stringify(n,null,2)}
+`;if(D(a)){const d=ne(_(a,"utf8"));if(d.manifestDigest!==n.manifestDigest)throw new Error("epic-operational-backup-failed");return d}const u=G(a,"wx",384);try{Ee(u,s),U(u)}finally{Y(u)}return ge(o),n}function oe(e,t,i,o){if(!/^backups\/elbf_[a-f0-9]{32}\.backfill\.json$/.test(t)||!R.test(i))throw new Error("epic-operational-backup-failed");const r=W(e),n=k(r,H),a=k(n,t);q(n,"directory"),q(a,"file");const s=ne(_(a,"utf8"));if(s.manifestDigest!==i||o&&(s.plan.planDigest!==o.planDigest||s.operationId!==o.operationId))throw new Error("epic-operational-backup-failed");return s}function ne(e){let t;try{t=JSON.parse(e)}catch{throw new Error("epic-operational-backup-failed")}const i=y(t);if(!i||i.schemaVersion!==te||!ee.test(String(i.operationId))||!y(i.plan)||!y(i.initialOperational)||!Array.isArray(i.sourceBindings)||typeof i.trackedSourceRaw!="string"||typeof i.trackedTargetRaw!="string"||typeof i.physicalBranch!="string"||!R.test(String(i.manifestDigest)))throw new Error("epic-operational-backup-failed");const{manifestDigest:o,...r}=i;if(o!==f("p224-backfill-backup-v1",r))throw new Error("epic-operational-backup-failed");return he(i.plan),T(i.initialOperational),i}function qe(e,t,i){return{schemaVersion:"EpicOperationalJournal/1.0",kind:"backfill",operationId:e.operationId,idempotencyKey:e.idempotencyKey,payloadHash:e.planDigest,identityHash:e.identity.identityHash,expectedRevision:e.expectedRevision,expectedWriterEpoch:e.expectedWriterEpoch,preimageDigest:t.manifestDigest,backupManifestRef:`backups/${e.operationId}.backfill.json`,phase:i,projectionStatuses:{trackedState:"pending",sqlite:"pending"},reasonCodes:["epic-operational-backup-verified"]}}function Ne(e,t,i,o){return Object.freeze({schemaVersion:"EpicLifecycleBackfillReceipt/1.0",operationId:e.operationId,idempotencyKey:e.idempotencyKey,payloadHash:e.planDigest,planDigest:e.planDigest,sourceInventoryDigest:e.sourceInventoryDigest,preimageDigest:e.trackedStateMigration.sourceByteDigest,postimageDigest:i,authorityPostimageDigest:e.authorityPostimageDigest,backupManifestDigest:t.manifestDigest,identityHash:e.identity.identityHash,appliedRevision:o,writerEpoch:e.nextWriterEpoch,stateMigrationOperationId:e.trackedStateMigration.operationId,outcome:"applied",reasonCodes:["epic-operational-backfill-applied","epic-operational-backup-verified"],publicSafe:!0})}function ae(e,t){F(e.sourceBindings,t)}function Ve(e,t){for(const i of e.sourceBindings){if(i.kind==="tracked-state"){const o=A(i.path);if(!t.includes(o.digest))throw new Error("epic-operational-source-raced");continue}if(i.presence==="missing"){if(D(i.path))throw new Error("epic-operational-source-raced");continue}if(A(i.path).digest!==i.digest)throw new Error("epic-operational-source-raced")}}function F(e,t){for(const i of e){if(i.kind==="tracked-state"){if(A(i.path).digest!==t)throw new Error("epic-operational-source-raced");continue}if(i.presence==="missing"){if(D(i.path))throw new Error("epic-operational-source-raced");continue}if(A(i.path).digest!==i.digest)throw new Error("epic-operational-source-raced")}}async function $e(e,t,i,o){i.activeJournal?.phase==="prepared"&&await I(e,{identityHash:o.identity.identityHash,expectedRevision:t.revision,expectedWriterEpoch:o.nextWriterEpoch},r=>{r.activeJournal={...r.activeJournal,phase:"aborted-before-authority",reasonCodes:[...r.activeJournal.reasonCodes,"epic-operational-source-raced"]}})}function ce(e,t,i,o){const r=f("p224-backfill-source-v1",{kind:t,worktreeFingerprint:i});if(!D(e))return{source:le(t,r),binding:{path:e,presence:"missing",digest:null,kind:t},parsed:null};try{const n=A(e),a=o(JSON.parse(n.raw));return{source:pe(t,r,n.raw,a),binding:{path:e,presence:"present",digest:n.digest,kind:t},parsed:a}}catch(n){const a=n instanceof Error&&n.message.startsWith("epic-operational-")?n.message:"epic-operational-source-corrupt";return{source:ue(t,r,a.endsWith("unsafe")?"unsafe":"corrupt",a),binding:{path:e,presence:"present",digest:Ge(e),kind:t},parsed:null}}}function ze(e){const t=y(e);if(!t||!["1.1","1.2"].includes(String(t.version))||!Number.isFinite(t.storiesRunToday)||Number(t.storiesRunToday)<0||!Number.isFinite(t.iterationsToday)||Number(t.iterationsToday)<0||!Number.isFinite(t.tokensUsedToday)||Number(t.tokensUsedToday)<0||!Number.isFinite(t.totalRunsAllTime)||Number(t.totalRunsAllTime)<0||!Number.isFinite(t.totalStoriesAllTime)||Number(t.totalStoriesAllTime)<0||!(t.currentSession===null||y(t.currentSession))||!Array.isArray(t.pendingContinuationAuthorities??[]))throw new Error("epic-operational-source-corrupt");return t}function Ke(e){const t=y(e);if(!t||!Number.isSafeInteger(t.pid)||Number(t.pid)<0||typeof t.hostname!="string"||typeof t.startedAt!="string"||typeof t.sessionId!="string"||t.sessionId.length>128||!Array.isArray(t.epicQueue)||!t.epicQueue.every(i=>typeof i=="string")||typeof t.currentEpicId!="string"||typeof t.ttlExpiresAt!="string")throw new Error("epic-operational-source-corrupt");return t}function se(e,t,i,o){const r=Ze(t,e);if(i===null)return le(e,r);let n;try{n=JSON.parse(i)}catch{return ue(e,r,"corrupt","epic-operational-source-corrupt")}return{...pe(e,r,i,n),role:o,status:o==="projection"?"projection":"candidate"}}function pe(e,t,i,o){const r=y(o);return{schemaVersion:"EpicLifecycleBackfillSource/1.0",kind:e,sourceFingerprint:t,presence:"present",byteLength:Buffer.byteLength(i,"utf8"),byteDigest:V(i),canonicalDigest:f("p224-backfill-source-canonical-v1",o),sourceSchema:typeof r?.schemaVersion=="string"||typeof r?.schemaVersion=="number"?String(r.schemaVersion):typeof r?.version=="string"?r.version:"legacy",status:e.includes("lock")?"activity":e==="tracked-state"||e==="sqlite-projection"?"projection":"candidate",role:e.includes("lock")?"activity-signal":e==="tracked-state"||e==="sqlite-projection"?"projection":"authority-candidate",reasonCodes:["epic-operational-source-complete"],publicSafe:!0}}function le(e,t){return{schemaVersion:"EpicLifecycleBackfillSource/1.0",kind:e,sourceFingerprint:t,presence:"missing",byteLength:null,byteDigest:null,canonicalDigest:null,sourceSchema:null,status:"absent",role:e.includes("lock")?"activity-signal":e==="tracked-state"||e==="sqlite-projection"?"projection":"authority-candidate",reasonCodes:["epic-operational-source-missing"],publicSafe:!0}}function ue(e,t,i,o){return{schemaVersion:"EpicLifecycleBackfillSource/1.0",kind:e,sourceFingerprint:t,presence:i,byteLength:null,byteDigest:null,canonicalDigest:null,sourceSchema:null,status:"blocked",role:e.includes("lock")?"activity-signal":e==="tracked-state"?"projection":"authority-candidate",reasonCodes:[o],publicSafe:!0}}function Ye(e,t){const o=P("git",["worktree","list","--porcelain","-z"],{cwd:e,encoding:"utf8",maxBuffer:4194304}).split("\0").filter(r=>r.startsWith("worktree ")).map(r=>r.slice(9));if(o.length===0||o.length>X)throw new Error("epic-operational-checkout-capacity");return o.map(r=>{const n=O(r);if(W(n)!==t)throw new Error("epic-operational-foreign-common-dir");const s=j(n);if(!s.isDirectory()||s.isSymbolicLink())throw new Error("epic-operational-path-unsafe");return{path:n,fingerprint:f("p224-backfill-worktree-v1",{repository:f("p224-backfill-common-v1",t),dev:Number(s.dev),ino:Number(s.ino)})}}).sort((r,n)=>r.fingerprint.localeCompare(n.fingerprint))}function W(e){const t=P("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),i=De(t)?S(t):S(e,t),o=O(i),r=j(o);if(o!==i||!r.isDirectory()||r.isSymbolicLink())throw new Error("epic-operational-path-unsafe");return o}function Ue(e){const t=k(e,H,Ie);return D(t)?t:k(e,"neocortex-yoloop-runtime.json")}function A(e){const t=j(e);if(!t.isFile()||t.isSymbolicLink())throw new Error("epic-operational-path-unsafe");if(typeof process.getuid=="function"&&t.uid!==process.getuid())throw new Error("epic-operational-path-unsafe");if(t.size>He)throw new Error("epic-operational-source-oversized");const i=_(e,"utf8");if(Buffer.byteLength(i,"utf8")!==t.size)throw new Error("epic-operational-source-raced");return{raw:i,digest:V(i)}}function Ge(e){try{return A(e).digest}catch{return null}}function Ze(e,t){let i={presence:"missing"};if(D(e)){const o=j(e);i={dev:Number(o.dev),ino:Number(o.ino),type:o.isDirectory()?"directory":"file"}}return f("p224-backfill-source-v1",{kind:t,physical:i})}function Qe(e,t){const i=e.epics;return Array.isArray(i)?i.map(y).find(o=>o?.id===t):y(i)?.[t]}function Xe(e){const t=e.stories;return(Array.isArray(t)?t:Object.values(y(t)??{})).some(o=>{const r=y(o);return!!(r&&(Array.isArray(r.steps_completed)&&r.steps_completed.length>0||r.checkpoint||r.branch_name||typeof r.status=="string"&&!["backlog","planned"].includes(r.status)))})}function de(e,t){const i=y(e);if(!i)return!1;const o=Date.parse(String(i.expiresAt??""));return!Number.isFinite(o)||o>Date.parse(t)}function J(e,t){if(P("git",["branch","--show-current"],{cwd:e,encoding:"utf8"}).trim()!==t)throw new Error("epic-operational-source-raced")}function fe(e,t){if(D(e)||(ve(e,{mode:448}),ge(t)),q(e,"directory"),O(e)!==S(e)||Se(S(t),S(e)).startsWith(".."))throw new Error("epic-operational-path-unsafe")}function q(e,t){const i=j(e);if(i.isSymbolicLink()||(t==="file"?!i.isFile():!i.isDirectory())||typeof process.getuid=="function"&&i.uid!==process.getuid()||process.platform!=="win32"&&(i.mode&63)!==0)throw new Error("epic-operational-path-unsafe")}function ge(e){if(process.platform==="win32")return;const t=G(e,"r");try{U(t)}finally{Y(t)}}function et(e){if(!/^P[1-9][0-9]*$/.test(e.epicId)||!/^[A-Za-z0-9][A-Za-z0-9._/-]{0,239}$/.test(e.executionBranch)||e.executionBranch.includes("..")||e.executionBranch.includes("//")||!R.test(e.graphRevision)||!R.test(e.originBindingDigest)||(e.managedClients?.length??0)>128||e.managedClients?.some(t=>!ee.test(t.clientId)||!Number.isSafeInteger(t.writerEpoch)||t.writerEpoch<0||t.capabilities.length>16))throw new Error("epic-operational-preview-input-invalid")}function he(e){if(e.schemaVersion!=="EpicLifecycleBackfillPlan/1.0"||!/^elbf_[a-f0-9]{32}$/.test(e.operationId)||e.idempotencyKey!==e.operationId||!R.test(e.repositoryFingerprint)||!R.test(e.planDigest)||!R.test(e.sourceInventoryDigest)||!R.test(e.requiredSourceDigest)||N(e)!==e.planDigest||e.sourceInventory.length>X*2+3||e.blockers.some(t=>!/^[a-z0-9][a-z0-9-]{0,79}$/.test(t)))throw new Error("epic-operational-plan-invalid")}function N(e){const{planDigest:t,...i}=e;return f("p224-backfill-plan-v1",i)}function tt(e,t){return`${e.kind}:${e.sourceFingerprint}`.localeCompare(`${t.kind}:${t.sourceFingerprint}`)}function it(e){return e instanceof Error&&["epic-operational-source-raced","epic-operational-branch-mismatch","epic-operational-writer-active","epic-operational-legacy-writer-unfenced"].includes(e.message)}function y(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function V(e){return we("sha256").update(e).digest("hex")}function ye(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(const t of Object.values(e))ye(t)}return e}export{mt as applyEpicLifecycleBackfill,yt as approveEpicLifecycleBackfill,ht as previewEpicLifecycleBackfill,bt as rollbackEpicLifecycleBackfill};