@ornexus/neocortex 4.60.73 → 4.60.75

package/packages/client/dist/git/direct-yolo-checkpoint.js

@@ -1,1234 +1,4 @@
-/** Root-owned two-phase commit/checkpoint boundary for direct `*yolo` runs. */
-import { execFile } from 'node:child_process';
-import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
-import { readFile } from 'node:fs/promises';
-import { join, resolve } from 'node:path';
-import { promisify } from 'node:util';
-import { readRootMemoryEffectForCheckpoint } from '../private-execution/root-memory-scope.js';
-import { rootMemoryEffectDigest, verifyRootMemoryPhysicalWriteSet } from '../private-execution/root-memory-git-evidence.js';
-import { acquireGitLifecyclePhysicalIntegrationLock, applyGitLifecycleRuntimeOverlay, computeImmutableStoryQaEvidenceDigest, computeGitLifecyclePhysicalIntegrationLockOwnerDigest, computeP205StoryQaEvidenceDigest, computeLegacyDirectYoloRecoveryReceiptRef, ensureRuntimeEpic, ensureRuntimeStory, ensureGitLifecyclePrivateChildDirectory, executeP205TransientAuthority, projectP205TransientExecutionEvidence, publicStoryReviewArtifactFromGit, LEGACY_DIRECT_YOLO_RECOVERY_COMMITS, mutateGitLifecycleRuntime, P205_COMPLETE_COMMAND, readGitLifecycleRuntime, gitLifecycleRuntimeDirectory, assertGitLifecyclePrivateFile, releaseGitLifecyclePhysicalIntegrationLock, releaseGitLifecyclePhysicalIntegrationLockForCheckpoint, verifyGitLifecyclePhysicalIntegrationLock, verifyAcceptedGitLifecycleStoryCheckpoint, } from './git-lifecycle-store.js';
-import { anchoredAtomicWriteFile } from './secure-filesystem-boundary.js';
-import { GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID, GIT_LIFECYCLE_REVIEW_PR_STEP_ID, GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID, } from './git-lifecycle-step-ids.js';
-const execFileAsync = promisify(execFile);
-/**
- * Productive P207 setup boundary. It owns only the current checkout and the
- * epic branch; it never creates, removes or repositions a worktree. Existing
- * staged and unstaged bytes must remain identical across the branch switch.
- */
-export async function prepareDirectYoloSetup(options) {
-    try {
-        const authority = await resolveLogicalAuthority(options.projectRoot, options.storyId);
-        const nowIso = normalizedTime(options.nowIso);
-        const nowMs = Date.parse(nowIso);
-        const currentBranch = await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-        const currentHead = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        const runtimeBefore = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const runtimeEpic = asRecord(runtimeBefore.epics[authority.epicId]);
-        const currentLease = asRecord(runtimeEpic?.branch_lease);
-        const liveLease = currentLease && Number.isFinite(Date.parse(String(currentLease.expiresAt)))
-            && Date.parse(String(currentLease.expiresAt)) > nowMs;
-        if (liveLease && currentLease?.ownerStoryId !== options.storyId) {
-            return failure('direct-yolo-writer-active');
-        }
-        let originBinding = validOriginBinding(runtimeEpic?.origin_binding, authority.executionBranch, authority.originBranch);
-        if (currentBranch === authority.executionBranch) {
-            if (!originBinding)
-                return failure('direct-yolo-origin-binding-invalid');
-        }
-        else {
-            if (currentBranch !== authority.originBranch)
-                return failure('direct-yolo-current-branch-mismatch');
-            if (originBinding && originBinding.originHeadSha !== currentHead) {
-                return failure('direct-yolo-origin-binding-conflict');
-            }
-            originBinding ??= {
-                schemaVersion: 1,
-                originBranch: authority.originBranch,
-                originHeadSha: currentHead,
-                executionBranch: authority.executionBranch,
-                capturedFromCurrentCheckout: true,
-                capturedAt: nowIso,
-            };
-            const occupiedElsewhere = (await worktreeBranches(authority.projectRoot)).some((item) => item.branch === authority.executionBranch && resolve(item.path) !== authority.projectRoot);
-            if (occupiedElsewhere)
-                return failure('direct-yolo-execution-branch-checked-out-elsewhere');
-            const checkoutBefore = await checkoutPayload(authority.projectRoot);
-            const executionRef = `refs/heads/${authority.executionBranch}`;
-            if (await gitExitOk(authority.projectRoot, ['show-ref', '--verify', '--quiet', executionRef])) {
-                const executionHead = await git(authority.projectRoot, ['rev-parse', executionRef]);
-                if (executionHead !== currentHead) {
-                    if (!(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', executionHead, currentHead]))) {
-                        return failure('direct-yolo-execution-branch-diverged');
-                    }
-                    await git(authority.projectRoot, ['update-ref', executionRef, currentHead, executionHead]);
-                }
-                await git(authority.projectRoot, ['switch', authority.executionBranch]);
-            }
-            else {
-                await git(authority.projectRoot, ['switch', '-c', authority.executionBranch]);
-            }
-            if (await checkoutPayload(authority.projectRoot) !== checkoutBefore) {
-                return failure('direct-yolo-checkout-payload-raced');
-            }
-        }
-        const branchAfter = await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-        const headAfter = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        if (branchAfter !== authority.executionBranch)
-            return failure('direct-yolo-current-branch-mismatch');
-        if (liveLease && currentLease?.ownerStoryId === options.storyId) {
-            if (currentLease.setupHeadSha !== headAfter)
-                return failure('direct-yolo-setup-lease-head-unbound');
-            return { ok: true, value: setupReceipt(authority, originBinding, String(currentLease.expiresAt), true) };
-        }
-        const acquiredAt = nowIso;
-        const expiresAt = new Date(nowMs + 60 * 60 * 1000).toISOString();
-        const sessionId = `setup-${randomBytes(32).toString('hex')}`;
-        const runtimeAtCas = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-            const epic = ensureRuntimeEpic(document, authority.epicId);
-            const lease = asRecord(epic.branch_lease);
-            if (lease && Date.parse(String(lease.expiresAt)) > nowMs && lease.ownerStoryId !== options.storyId) {
-                throw new Error('direct-yolo-writer-active');
-            }
-            const persistedBinding = validOriginBinding(epic.origin_binding, authority.executionBranch, authority.originBranch);
-            if (epic.origin_binding && !persistedBinding)
-                throw new Error('direct-yolo-origin-binding-conflict');
-            if (persistedBinding && JSON.stringify(persistedBinding) !== JSON.stringify(originBinding)) {
-                throw new Error('direct-yolo-origin-binding-conflict');
-            }
-            epic.branch_mode = 'epic';
-            epic.execution_branch = authority.executionBranch;
-            epic.origin_branch = authority.originBranch;
-            epic.graph_revision = authority.graphRevision;
-            epic.origin_binding = originBinding;
-            epic.branch_lease = {
-                schemaVersion: 1, ownerStoryId: options.storyId, sessionId, idempotencyKey: sessionId,
-                acquiredAt, expiresAt, setupHeadSha: headAfter,
-            };
-        }, {
-            expectedRevision: runtimeAtCas.revision,
-            preCommit: async () => {
-                if (await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== authority.executionBranch
-                    || await git(authority.projectRoot, ['rev-parse', 'HEAD']) !== headAfter) {
-                    throw new Error('direct-yolo-setup-physical-state-raced');
-                }
-            },
-        });
-        return { ok: true, value: setupReceipt(authority, originBinding, expiresAt, false) };
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-setup-failed'));
-    }
-}
-/** Accept C01 only from the root after its own physical setup and live lease. */
-export async function acceptDirectYoloSetupCheckpoint(options) {
-    let physicalLock;
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        const nowIso = normalizedTime(options.nowIso);
-        const statePath = join(authority.projectRoot, '.neocortex/state.json');
-        const trackedBefore = await readFile(statePath, 'utf8');
-        const payloadBefore = await checkoutPayload(authority.projectRoot);
-        const headSha = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        const executionRef = `refs/heads/${authority.executionBranch}`;
-        const runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const epic = asRecord(runtime.epics[authority.epicId]);
-        const binding = validOriginBinding(epic?.origin_binding, authority.executionBranch, authority.originBranch);
-        const lease = asRecord(epic?.branch_lease);
-        if (!binding)
-            return failure('direct-yolo-origin-binding-invalid');
-        if (!lease || !isLiveSameStorySetupLease(lease, options.storyId, nowIso)
-            || lease?.sessionId !== lease?.idempotencyKey)
-            return failure('direct-yolo-setup-lease-invalid');
-        const acquired = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId,
-            sessionId: String(lease.sessionId), idempotencyKey: String(lease.idempotencyKey),
-            expiresAt: new Date(Date.now() + 5 * 60 * 1000).toISOString(), persistent: false,
-        });
-        if (!acquired.ok)
-            return failure(acquired.reasonCode);
-        physicalLock = acquired;
-        if (headSha !== lease.setupHeadSha
-            || !(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', binding.originHeadSha, headSha]))
-            || await git(authority.projectRoot, ['rev-parse', executionRef]) !== headSha) {
-            return failure('direct-yolo-setup-head-mismatch');
-        }
-        const occupiedElsewhere = (await worktreeBranches(authority.projectRoot)).some((item) => item.branch === authority.executionBranch && resolve(item.path) !== authority.projectRoot);
-        if (occupiedElsewhere)
-            return failure('direct-yolo-execution-branch-checked-out-elsewhere');
-        const tracked = asRecord(JSON.parse(trackedBefore));
-        const trackedStory = asRecord(asRecord(tracked?.stories)?.[options.storyId]);
-        const runtimeStory = asRecord(runtime.stories[options.storyId]);
-        if (!trackedStory || !['backlog', 'ready_to_start'].includes(String(trackedStory.status))
-            || (trackedStory.steps_completed !== undefined
-                && (!Array.isArray(trackedStory.steps_completed) || trackedStory.steps_completed.length > 0))
-            || trackedStory.branch_name || trackedStory.checkpoint) {
-            return failure('direct-yolo-setup-story-progress-conflict');
-        }
-        const accepted = runtimeStory?.status === 'branch-ready'
-            && runtimeStory.last_step === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
-            && Array.isArray(runtimeStory.steps_completed)
-            && runtimeStory.steps_completed.length === 1
-            && runtimeStory.steps_completed[0] === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
-            && Object.keys(runtimeStory).sort().join(',') === 'last_step,status,steps_completed';
-        if (runtimeStory && Object.keys(runtimeStory).length > 0 && !accepted) {
-            return failure('direct-yolo-setup-story-progress-conflict');
-        }
-        const physicalGuard = async () => {
-            if (Date.parse(String(lease.expiresAt)) <= (options.nowIso ? Date.parse(nowIso) : Date.now())
-                || !physicalLock || !(await verifyGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner))
-                || await readFile(statePath, 'utf8') !== trackedBefore
-                || await checkoutPayload(authority.projectRoot) !== payloadBefore
-                || await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== authority.executionBranch
-                || await git(authority.projectRoot, ['rev-parse', 'HEAD']) !== headSha
-                || !(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', binding.originHeadSha, headSha]))
-                || await git(authority.projectRoot, ['rev-parse', executionRef]) !== headSha) {
-                throw new Error('direct-yolo-setup-physical-state-raced');
-            }
-        };
-        if (accepted) {
-            await physicalGuard();
-        }
-        else {
-            await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const currentEpic = asRecord(document.epics[authority.epicId]);
-                const currentStory = ensureRuntimeStory(document, options.storyId);
-                if (JSON.stringify(currentEpic?.branch_lease) !== JSON.stringify(lease)
-                    || JSON.stringify(currentEpic?.origin_binding) !== JSON.stringify(binding)
-                    || currentEpic?.graph_revision !== authority.graphRevision
-                    || Object.keys(currentStory).length > 0) {
-                    throw new Error('direct-yolo-setup-runtime-raced');
-                }
-                currentStory.status = 'branch-ready';
-                currentStory.last_step = GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID;
-                currentStory.steps_completed = [GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID];
-            }, { expectedRevision: runtime.revision, preCommit: physicalGuard });
-        }
-        return { ok: true, value: Object.freeze({
-                ...setupReceipt(authority, binding, String(lease.expiresAt), accepted),
-                checkpointAccepted: true, graphRevision: authority.graphRevision, headSha,
-            }) };
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-setup-acceptance-failed'));
-    }
-    finally {
-        if (physicalLock) {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-        }
-    }
-}
-/**
- * Productive setup-owner handoff emitter used immediately before C08. The
- * one-time token never crosses stdout; only a public receipt is returned.
- */
-export async function issueDirectYoloSetupLeaseHandoff(options) {
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--cached', '--name-only', '-z']));
-        const writeSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-        if (!writeSet.ok)
-            return failure(writeSet.reasonCode);
-        if (authority.rootMemoryEffect)
-            verifyRootMemoryPhysicalWriteSet(authority.projectRoot, authority.rootMemoryEffect, { storyId: options.storyId, executionBranch: authority.executionBranch,
-                baseSha: await git(authority.projectRoot, ['rev-parse', 'HEAD']), headRef: ':', childPaths: authority.authorizedWriteSet });
-        const stagedReview = publicStoryReviewArtifactFromGit(authority.projectRoot, options.storyId, ':');
-        if (stagedReview?.verdict !== 'approved')
-            return failure('direct-yolo-review-artifact-not-approved');
-        const unstagedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--name-only', '-z']));
-        if (unstagedPaths.some((path) => changedPaths.includes(path)))
-            return failure('direct-yolo-user-overlap');
-        const payload = await gitRaw(authority.projectRoot, ['diff', '--cached', '--binary', '--full-index']);
-        if (!payload)
-            return failure('direct-yolo-staged-diff-empty');
-        const bundleDigest = digest(payload);
-        const claimRevision = digest([...authority.authorizedWriteSet].sort().join('\0'));
-        const nowIso = normalizedTime(options.nowIso);
-        const runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const setupLease = asRecord(runtime.epics[authority.epicId]?.branch_lease);
-        if (!isLiveSameStorySetupLease(setupLease, options.storyId, nowIso)) {
-            return failure('direct-yolo-setup-handoff-owner-invalid');
-        }
-        const sessionId = String(setupLease.sessionId);
-        const leaseExpiresAt = String(setupLease.expiresAt);
-        const candidateExpiresAt = new Date(Math.min(Date.parse(leaseExpiresAt), Date.parse(nowIso) + 5 * 60 * 1000)).toISOString();
-        const prior = await readSetupHandoffTokenRecord(authority.projectRoot, options.storyId);
-        const reused = Boolean(prior?.state === 'issued'
-            && prior.fromSessionId === sessionId && prior.bundleDigest === bundleDigest
-            && prior.claimRevision === claimRevision
-            && Date.parse(prior.expiresAt) > Date.parse(nowIso));
-        const expiresAt = reused ? prior.expiresAt : candidateExpiresAt;
-        const token = reused ? prior.token : randomBytes(32).toString('base64url');
-        const tokenDigest = digest(token);
-        const grant = Object.freeze({
-            schemaVersion: 1,
-            kind: 'direct-yolo-setup-handoff',
-            storyId: options.storyId,
-            fromSessionId: sessionId,
-            tokenDigest,
-            bundleDigest,
-            claimRevision,
-            expiresAt,
-        });
-        const grantDigest = digest(JSON.stringify(grant));
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId, idempotencyKey: sessionId,
-            expiresAt, persistent: false, createdAt: nowIso,
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-integration-backpressure' : 'direct-yolo-integration-lock-failed');
-        try {
-            await writeSetupHandoffTokenRecord(authority.projectRoot, {
-                schemaVersion: 1, kind: 'direct-yolo-setup-handoff-token', state: 'issued',
-                storyId: options.storyId, fromSessionId: sessionId, token, tokenDigest,
-                bundleDigest, claimRevision, grantDigest, expiresAt,
-            });
-            await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const current = asRecord(ensureRuntimeEpic(document, authority.epicId).branch_lease);
-                if (!isLiveSameStorySetupLease(current, options.storyId, nowIso)
-                    || current?.sessionId !== sessionId || current.idempotencyKey !== sessionId) {
-                    throw new Error('direct-yolo-setup-handoff-owner-raced');
-                }
-                current.handoffGrant = grant;
-            }, {
-                expectedRevision: runtime.revision,
-                preCommit: async () => {
-                    if (!(await verifyGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner))) {
-                        throw new Error('direct-yolo-integration-lock-raced');
-                    }
-                    const persisted = await readSetupHandoffTokenRecord(authority.projectRoot, options.storyId);
-                    if (!persisted || persisted.state !== 'issued' || persisted.grantDigest !== grantDigest
-                        || persisted.tokenDigest !== tokenDigest)
-                        throw new Error('direct-yolo-setup-handoff-token-raced');
-                },
-            });
-        }
-        finally {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-        }
-        return { ok: true, value: Object.freeze({
-                schemaVersion: 1, kind: 'direct-yolo-setup-handoff-receipt', storyId: options.storyId,
-                sessionId, bundleDigest, claimRevision, grantDigest, expiresAt, reused, publicSafe: true,
-            }) };
-    }
-    catch (error) {
-        return failure(error instanceof Error && /^direct-yolo-/.test(error.message)
-            ? error.message : 'direct-yolo-setup-handoff-failed');
-    }
-}
-export async function beginDirectYoloStoryCommit(options) {
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        const baseSha = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--cached', '--name-only', '-z']));
-        const writeSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-        if (!writeSet.ok)
-            return failure(writeSet.reasonCode);
-        if (authority.rootMemoryEffect)
-            verifyRootMemoryPhysicalWriteSet(authority.projectRoot, authority.rootMemoryEffect, { storyId: options.storyId, executionBranch: authority.executionBranch, baseSha, headRef: ':', childPaths: authority.authorizedWriteSet });
-        const stagedReview = publicStoryReviewArtifactFromGit(authority.projectRoot, options.storyId, ':');
-        if (stagedReview?.verdict !== 'approved')
-            return failure('direct-yolo-review-artifact-not-approved');
-        const unstagedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff', '--name-only', '-z']));
-        if (unstagedPaths.some((path) => changedPaths.includes(path)))
-            return failure('direct-yolo-user-overlap');
-        const payload = await gitRaw(authority.projectRoot, ['diff', '--cached', '--binary', '--full-index']);
-        if (!payload)
-            return failure('direct-yolo-staged-diff-empty');
-        const bundleDigest = digest(payload);
-        const claimRevision = digest([...authority.authorizedWriteSet].sort().join('\0'));
-        const idempotencyKey = digest([
-            'direct-yolo-commit-v1', options.storyId, authority.epicId, authority.executionBranch,
-            baseSha, bundleDigest, authority.graphRevision, claimRevision,
-        ].join('\0'));
-        const nowIso = normalizedTime(options.nowIso);
-        let issuedHandoff = options.setupLeaseHandoff
-            ?? await resolveIssuedSetupLeaseHandoff(authority.projectRoot, options.storyId, bundleDigest, claimRevision, nowIso);
-        const runtimeBeforeLock = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const priorDirectLease = asRecord(runtimeBeforeLock.epics[authority.epicId]?.branch_lease);
-        const reusableDirectLease = priorDirectLease?.ownerStoryId === options.storyId
-            && priorDirectLease.sessionId === idempotencyKey && priorDirectLease.idempotencyKey === idempotencyKey
-            && typeof priorDirectLease.expiresAt === 'string'
-            && Date.parse(priorDirectLease.expiresAt) > Date.parse(nowIso)
-            ? priorDirectLease : undefined;
-        if (reusableDirectLease && options.setupLeaseHandoff) {
-            return failure('direct-yolo-setup-handoff-replayed');
-        }
-        const priorConsumption = asRecord(reusableDirectLease?.handoffConsumption);
-        if (priorConsumption) {
-            const privateRecord = await readSetupHandoffTokenRecord(authority.projectRoot, options.storyId);
-            if (!privateRecord || !['consuming', 'consumed'].includes(privateRecord.state)
-                || privateRecord.fromSessionId !== priorConsumption.fromSessionId
-                || privateRecord.tokenDigest !== priorConsumption.tokenDigest
-                || privateRecord.bundleDigest !== bundleDigest || privateRecord.claimRevision !== claimRevision
-                || priorConsumption.bundleDigest !== bundleDigest || priorConsumption.claimRevision !== claimRevision
-                || privateRecord.consumedBySessionId !== idempotencyKey
-                || priorConsumption.consumedBySessionId !== idempotencyKey) {
-                return failure('direct-yolo-setup-handoff-consume-invalid');
-            }
-            // The runtime CAS already consumed this exact grant. Recovery may finish
-            // its private receipt after expiry; it never promotes a second writer.
-            if (privateRecord.state === 'consuming') {
-                if (!privateRecord.token || digest(privateRecord.token) !== privateRecord.tokenDigest) {
-                    return failure('direct-yolo-setup-handoff-consume-invalid');
-                }
-                issuedHandoff = { sessionId: privateRecord.fromSessionId, token: privateRecord.token };
-            }
-        }
-        const expiresAt = reusableDirectLease
-            ? String(reusableDirectLease.expiresAt)
-            : new Date(Date.parse(nowIso) + 30 * 60 * 1000).toISOString();
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId: idempotencyKey, idempotencyKey,
-            expiresAt, persistent: true,
-            createdAt: reusableDirectLease && typeof reusableDirectLease.acquiredAt === 'string'
-                ? reusableDirectLease.acquiredAt : nowIso,
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-integration-backpressure' : 'direct-yolo-integration-lock-failed');
-        try {
-            if (issuedHandoff && options.setupLeaseHandoff === undefined) {
-                await markSetupHandoffTokenConsuming(authority.projectRoot, options.storyId, issuedHandoff.sessionId, issuedHandoff.token, idempotencyKey, nowIso);
-                await options.setupHandoffFault?.('after-consuming-persisted');
-            }
-            await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const epic = ensureRuntimeEpic(document, authority.epicId);
-                const current = asRecord(epic.branch_lease);
-                const live = current && Date.parse(String(current.expiresAt)) > Date.parse(nowIso);
-                const alreadyPromoted = current?.ownerStoryId === options.storyId
-                    && current.sessionId === idempotencyKey && current.idempotencyKey === idempotencyKey;
-                const sameStorySetup = current?.ownerStoryId === options.storyId
-                    && current.sessionId === current.idempotencyKey
-                    && typeof current.idempotencyKey === 'string'
-                    && /^setup-[a-f0-9]{64}$/.test(current.idempotencyKey);
-                const setupHandoffAuthorized = live && sameStorySetup && validSetupLeaseHandoff({
-                    current,
-                    handoff: issuedHandoff,
-                    storyId: options.storyId,
-                    bundleDigest,
-                    claimRevision,
-                    nowIso,
-                });
-                if (issuedHandoff && live && !alreadyPromoted && !setupHandoffAuthorized) {
-                    throw new Error('direct-yolo-setup-handoff-invalid');
-                }
-                if (live && !alreadyPromoted && !setupHandoffAuthorized) {
-                    throw new Error('direct-yolo-writer-active');
-                }
-                const setupGrant = setupHandoffAuthorized ? asRecord(current?.handoffGrant) : undefined;
-                const handoffConsumption = setupGrant ? {
-                    schemaVersion: 1,
-                    kind: 'direct-yolo-setup-handoff-consumption',
-                    state: 'consumed',
-                    storyId: options.storyId,
-                    fromSessionId: String(current?.sessionId),
-                    tokenDigest: String(setupGrant.tokenDigest),
-                    bundleDigest,
-                    claimRevision,
-                    consumedBySessionId: idempotencyKey,
-                    consumedAt: nowIso,
-                } : undefined;
-                epic.branch_mode = 'epic';
-                epic.execution_branch = authority.executionBranch;
-                epic.origin_branch = authority.originBranch;
-                epic.graph_revision = authority.graphRevision;
-                epic.branch_lease = live && alreadyPromoted ? current : {
-                    schemaVersion: 1, ownerStoryId: options.storyId, sessionId: idempotencyKey,
-                    idempotencyKey, acquiredAt: nowIso, expiresAt,
-                    ...(handoffConsumption ? { handoffConsumption } : {}),
-                };
-            }, {
-                expectedRevision: runtimeBeforeLock.revision,
-                preCommit: async () => {
-                    if (!(await verifyGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner))) {
-                        throw new Error('direct-yolo-integration-lock-raced');
-                    }
-                },
-            });
-        }
-        catch (error) {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-            throw error;
-        }
-        if (issuedHandoff && options.setupLeaseHandoff === undefined) {
-            await options.setupHandoffFault?.('before-consumed-persist');
-            await markSetupHandoffTokenConsumed(authority.projectRoot, authority.epicId, options.storyId, issuedHandoff.sessionId, issuedHandoff.token, bundleDigest, claimRevision, idempotencyKey, nowIso);
-        }
-        const trailers = Object.freeze([
-            `Neocortex-Story: ${options.storyId}`,
-            `Neocortex-Epic: ${authority.epicId}`,
-            `Neocortex-Execution-Branch: ${authority.executionBranch}`,
-            `Neocortex-Prepared-Base: ${baseSha}`,
-            `Neocortex-Bundle-Digest: ${bundleDigest}`,
-            `Neocortex-Review-Artifact-Digest: ${stagedReview.digest}`,
-            `Neocortex-Graph-Revision: ${authority.graphRevision}`,
-            `Neocortex-Claim-Revision: ${claimRevision}`,
-            ...(authority.rootMemoryEffect ? [`Neocortex-Root-Memory-Effect: ${rootMemoryEffectDigest(authority.rootMemoryEffect)}`] : []),
-        ]);
-        return { ok: true, value: Object.freeze({
-                schemaVersion: 1, storyId: options.storyId, epicId: authority.epicId,
-                executionBranch: authority.executionBranch, baseSha, bundleDigest,
-                reviewArtifactDigest: stagedReview.digest,
-                graphRevision: authority.graphRevision, claimRevision, idempotencyKey,
-                changedPaths: Object.freeze(changedPaths), trailers,
-            }) };
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-begin-failed'));
-    }
-}
-export async function finalizeDirectYoloStoryCheckpoint(options) {
-    let cleanupAuthority;
-    let cleanupLease;
-    let cleanupPhysical;
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        cleanupAuthority = authority;
-        const aggregateHeadSha = await git(authority.projectRoot, ['rev-parse', 'HEAD']);
-        let runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const existing = asRecord(runtime.stories[options.storyId]?.checkpoint);
-        if (existing) {
-            const checkpointHeadSha = typeof existing.headSha === 'string' ? existing.headSha : '';
-            const checkpointGraphRevision = typeof existing.graphRevision === 'string' ? existing.graphRevision : '';
-            const checkpointPaths = /^[a-f0-9]{40,64}$/.test(checkpointHeadSha)
-                ? splitNull(await gitRaw(authority.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', checkpointHeadSha]))
-                : [];
-            const replayWriteSet = validateDirectWriteSet(checkpointPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-            const ancestral = /^[a-f0-9]{40,64}$/.test(checkpointHeadSha)
-                && await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', checkpointHeadSha, aggregateHeadSha]);
-            if (!ancestral || !/^[a-f0-9]{64}$/.test(checkpointGraphRevision) || !replayWriteSet.ok) {
-                return failure('direct-yolo-replay-invalid');
-            }
-            const replayQa = await runQa(options, authority.projectRoot, aggregateHeadSha, checkpointGraphRevision);
-            if (!(await verifyAcceptedGitLifecycleStoryCheckpoint(authority.projectRoot, existing, options.storyId, authority.epicId, authority.executionBranch, replayQa.transientAuthority, authority.authorizedWriteSet)))
-                return failure('direct-yolo-replay-invalid');
-            if (!(await physicalCheckoutUnchanged(authority.projectRoot, authority.executionBranch, aggregateHeadSha, checkpointPaths)))
-                return failure('direct-yolo-replay-head-raced');
-            if (options.push && !(await remoteContainsHead(authority.projectRoot, options.remote ?? 'origin', authority.executionBranch, checkpointHeadSha)))
-                return failure('direct-yolo-remote-head-mismatch');
-            const physicalOwnerRef = Array.isArray(existing.receiptRefs)
-                ? existing.receiptRefs.find((item) => typeof item === 'string' && /^physical-lock-owner:[a-f0-9]{64}$/.test(item))
-                : undefined;
-            if (physicalOwnerRef && typeof existing.idempotencyKey === 'string') {
-                await releaseGitLifecyclePhysicalIntegrationLockForCheckpoint(authority.projectRoot, {
-                    storyId: options.storyId,
-                    idempotencyKey: existing.idempotencyKey,
-                    ownerDigest: physicalOwnerRef.slice('physical-lock-owner:'.length),
-                });
-            }
-            return { ok: true, value: existing };
-        }
-        const headSha = aggregateHeadSha;
-        const baseSha = await git(authority.projectRoot, ['rev-parse', `${headSha}^`]);
-        const commitBody = await gitRaw(authority.projectRoot, ['show', '--no-patch', '--format=%B', headSha]);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha]));
-        const writeSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet, options.storyId, authority.rootMemoryEffect);
-        if (!writeSet.ok)
-            return failure(writeSet.reasonCode);
-        if (authority.rootMemoryEffect)
-            verifyRootMemoryPhysicalWriteSet(authority.projectRoot, authority.rootMemoryEffect, { storyId: options.storyId, executionBranch: authority.executionBranch, baseSha, headRef: headSha, childPaths: authority.authorizedWriteSet });
-        const bundleDigest = trailer(commitBody, 'Neocortex-Bundle-Digest');
-        const graphRevision = trailer(commitBody, 'Neocortex-Graph-Revision');
-        const claimRevision = trailer(commitBody, 'Neocortex-Claim-Revision');
-        const required = new Map([
-            ['Neocortex-Story', options.storyId], ['Neocortex-Epic', authority.epicId],
-            ['Neocortex-Execution-Branch', authority.executionBranch], ['Neocortex-Prepared-Base', baseSha],
-            ['Neocortex-Graph-Revision', authority.graphRevision],
-            ['Neocortex-Claim-Revision', digest([...authority.authorizedWriteSet].sort().join('\0'))],
-        ]);
-        if (!bundleDigest || !/^[a-f0-9]{64}$/.test(bundleDigest) || !graphRevision || !claimRevision
-            || [...required].some(([key, value]) => trailer(commitBody, key) !== value)) {
-            return failure('direct-yolo-trailers-invalid');
-        }
-        const publicReview = publicStoryReviewArtifactFromGit(authority.projectRoot, options.storyId, headSha);
-        if (publicReview?.verdict !== 'approved')
-            return failure('direct-yolo-review-artifact-not-approved');
-        const reviewTrailer = trailer(commitBody, 'Neocortex-Review-Artifact-Digest');
-        if (reviewTrailer !== undefined && reviewTrailer !== publicReview.digest) {
-            return failure('direct-yolo-review-artifact-digest-mismatch');
-        }
-        const expectedPayloadDigest = digest(await gitRaw(authority.projectRoot, ['diff', '--binary', '--full-index', `${baseSha}..${headSha}`]));
-        if (bundleDigest !== expectedPayloadDigest)
-            return failure('direct-yolo-bundle-digest-mismatch');
-        const idempotencyKey = digest([
-            'direct-yolo-commit-v1', options.storyId, authority.epicId, authority.executionBranch,
-            baseSha, bundleDigest, graphRevision, claimRevision,
-        ].join('\0'));
-        const currentLease = asRecord(runtime.epics[authority.epicId]?.branch_lease);
-        const nowIso = normalizedTime(options.nowIso);
-        const matchingLease = currentLease?.ownerStoryId === options.storyId
-            && currentLease.idempotencyKey === idempotencyKey
-            && currentLease.sessionId === idempotencyKey
-            && Date.parse(String(currentLease.expiresAt)) > Date.now()
-            ? currentLease : undefined;
-        if (currentLease && Date.parse(String(currentLease.expiresAt)) > Date.now() && !matchingLease) {
-            return failure('direct-yolo-writer-active');
-        }
-        const requestedLease = matchingLease ?? {
-            schemaVersion: 1, ownerStoryId: options.storyId, sessionId: idempotencyKey,
-            idempotencyKey, acquiredAt: nowIso,
-            expiresAt: new Date(Date.parse(nowIso) + 30 * 60 * 1000).toISOString(),
-        };
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId: idempotencyKey, idempotencyKey,
-            expiresAt: String(requestedLease.expiresAt), persistent: true,
-            createdAt: String(requestedLease.acquiredAt),
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-integration-backpressure' : 'direct-yolo-integration-lock-failed');
-        cleanupPhysical = physicalLock;
-        if (!matchingLease) {
-            const leased = await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const epic = ensureRuntimeEpic(document, authority.epicId);
-                const current = asRecord(epic.branch_lease);
-                if (current && Date.parse(String(current.expiresAt)) > Date.parse(nowIso)) {
-                    throw new Error('direct-yolo-writer-active');
-                }
-                if (epic.graph_revision !== authority.graphRevision)
-                    throw new Error('direct-yolo-graph-revision-raced');
-                epic.branch_lease = requestedLease;
-            }, { expectedRevision: runtime.revision });
-            runtime = leased.document;
-        }
-        cleanupLease = requestedLease;
-        {
-            const qaExecution = await runQa(options, authority.projectRoot, headSha, authority.graphRevision);
-            if (!(await physicalCheckoutUnchanged(authority.projectRoot, authority.executionBranch, headSha, changedPaths))) {
-                return failure('direct-yolo-head-raced');
-            }
-            if (options.push) {
-                const remote = safeRemote(options.remote ?? 'origin');
-                await git(authority.projectRoot, ['push', remote, authority.executionBranch]);
-                if (!(await remoteHeadIsExact(authority.projectRoot, remote, authority.executionBranch, headSha))) {
-                    return failure('direct-yolo-remote-head-mismatch');
-                }
-            }
-            const checkpoint = await buildCheckpoint({
-                projectRoot: authority.projectRoot, storyId: options.storyId, epicId: authority.epicId,
-                executionBranch: authority.executionBranch, baseSha, headSha, bundleDigest,
-                graphRevision, claimRevision, idempotencyKey, qaExecution,
-                physicalLockOwnerDigest: computeGitLifecyclePhysicalIntegrationLockOwnerDigest(physicalLock.owner),
-                nowIso: normalizedTime(options.nowIso), legacyReceiptRef: undefined, rootMemoryEffect: authority.rootMemoryEffect,
-            });
-            await options.beforeCheckpointPersist?.();
-            const persisted = await persistCheckpoint({
-                projectRoot: authority.projectRoot, checkpoint,
-                remote: options.push ? options.remote ?? 'origin' : undefined,
-                expectedRevision: runtime.revision, expectedLease: requestedLease,
-                expectedGraphRevision: authority.graphRevision,
-                physicalLockPath: physicalLock.path, physicalLockOwner: physicalLock.owner,
-                transientAuthority: qaExecution.transientAuthority,
-                authorizedWriteSet: authority.authorizedWriteSet,
-            });
-            if (!persisted)
-                return failure('direct-yolo-checkpoint-persist-failed');
-            await options.afterCheckpointPersist?.();
-            return { ok: true, value: checkpoint };
-        }
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-finalize-failed'));
-    }
-    finally {
-        if (cleanupPhysical) {
-            await releaseGitLifecyclePhysicalIntegrationLock(cleanupPhysical.path, cleanupPhysical.owner).catch(() => undefined);
-        }
-        if (cleanupAuthority && cleanupLease) {
-            await releaseOwnedDirectLease(cleanupAuthority.projectRoot, cleanupAuthority.epicId, cleanupLease).catch(() => undefined);
-        }
-        else if (cleanupAuthority) {
-            await cleanupOwnedDirectAuthority(cleanupAuthority, options.storyId).catch(() => undefined);
-        }
-    }
-}
-export async function recoverLegacyDirectYoloStoryCheckpoint(options) {
-    try {
-        const authority = await resolveAuthority(options.projectRoot, options.storyId);
-        if (!/^[a-f0-9]{40,64}$/.test(options.commitSha))
-            return failure('direct-yolo-recovery-commit-invalid');
-        const headSha = await git(authority.projectRoot, ['rev-parse', options.commitSha]);
-        if (LEGACY_DIRECT_YOLO_RECOVERY_COMMITS[options.storyId] !== headSha) {
-            return failure('direct-yolo-recovery-not-allowlisted');
-        }
-        if (await git(authority.projectRoot, ['rev-parse', 'HEAD']) !== headSha) {
-            return failure('direct-yolo-recovery-head-mismatch');
-        }
-        await git(authority.projectRoot, ['merge-base', '--is-ancestor', headSha, `refs/heads/${authority.executionBranch}`]);
-        const baseSha = await git(authority.projectRoot, ['rev-parse', `${headSha}^`]);
-        const payload = await gitRaw(authority.projectRoot, ['diff', '--binary', '--full-index', `${baseSha}..${headSha}`]);
-        const changedPaths = splitNull(await gitRaw(authority.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha]));
-        const recoveryWriteSet = validateDirectWriteSet(changedPaths, authority.authorizedWriteSet.length > 0 ? authority.authorizedWriteSet : changedPaths, options.storyId);
-        if (!recoveryWriteSet.ok)
-            return failure('direct-yolo-recovery-write-set-invalid');
-        const bundleDigest = digest(payload);
-        const claimRevision = digest([...changedPaths].sort().join('\0'));
-        const idempotencyKey = digest(['legacy-direct-yolo-recovery-v1', options.storyId, headSha].join('\0'));
-        const nowIso = normalizedTime(options.nowIso);
-        const expiresAt = new Date(Date.parse(nowIso) + 30 * 60 * 1000).toISOString();
-        const initialRuntime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-        const physicalLock = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-            kind: 'direct', storyId: options.storyId, sessionId: idempotencyKey, idempotencyKey,
-            expiresAt, persistent: true, createdAt: nowIso,
-        });
-        if (!physicalLock.ok)
-            return failure(physicalLock.reasonCode === 'git-lifecycle-integration-backpressure'
-                ? 'direct-yolo-recovery-integration-backpressure' : 'direct-yolo-recovery-integration-lock-failed');
-        const requestedLease = {
-            schemaVersion: 1, ownerStoryId: options.storyId, sessionId: idempotencyKey,
-            idempotencyKey, acquiredAt: nowIso, expiresAt,
-        };
-        let leaseAcquired = false;
-        try {
-            const leased = await mutateGitLifecycleRuntime(authority.projectRoot, (document) => {
-                const epic = ensureRuntimeEpic(document, authority.epicId);
-                const current = asRecord(epic.branch_lease);
-                if (current && Date.parse(String(current.expiresAt)) > Date.parse(nowIso)
-                    && !sameLease(current, requestedLease))
-                    throw new Error('direct-yolo-recovery-writer-active');
-                if (epic.graph_revision !== authority.graphRevision)
-                    throw new Error('direct-yolo-recovery-graph-raced');
-                epic.branch_mode = 'epic';
-                epic.execution_branch = authority.executionBranch;
-                epic.origin_branch = authority.originBranch;
-                epic.branch_lease = requestedLease;
-            }, { expectedRevision: initialRuntime.revision });
-            leaseAcquired = true;
-            const qaExecution = await runQa(options, authority.projectRoot, headSha, authority.graphRevision);
-            if (!(await physicalCheckoutUnchanged(authority.projectRoot, authority.executionBranch, headSha, changedPaths))) {
-                return failure('direct-yolo-recovery-head-raced');
-            }
-            if (options.push) {
-                const remote = safeRemote(options.remote ?? 'origin');
-                const remoteHead = (await git(authority.projectRoot, ['ls-remote', '--heads', remote, `refs/heads/${authority.executionBranch}`])).split(/\s+/)[0];
-                if (!remoteHead || !(await gitExitOk(authority.projectRoot, ['merge-base', '--is-ancestor', headSha, remoteHead]))) {
-                    return failure('direct-yolo-recovery-remote-proof-missing');
-                }
-            }
-            const provisional = await buildCheckpoint({
-                projectRoot: authority.projectRoot, storyId: options.storyId, epicId: authority.epicId,
-                executionBranch: authority.executionBranch, baseSha, headSha, bundleDigest,
-                graphRevision: authority.graphRevision, claimRevision, idempotencyKey,
-                qaExecution,
-                physicalLockOwnerDigest: computeGitLifecyclePhysicalIntegrationLockOwnerDigest(physicalLock.owner),
-                nowIso, legacyReceiptRef: undefined,
-            });
-            const legacyReceiptRef = await computeLegacyDirectYoloRecoveryReceiptRef(authority.projectRoot, {
-                storyId: options.storyId,
-                epicId: authority.epicId,
-                executionBranch: authority.executionBranch,
-                baseSha,
-                headSha,
-                bundleDigest,
-                graphRevision: authority.graphRevision,
-            });
-            if (!legacyReceiptRef)
-                return failure('direct-yolo-recovery-evidence-invalid');
-            const checkpoint = Object.freeze({
-                ...provisional,
-                receiptRefs: Object.freeze([...provisional.receiptRefs, legacyReceiptRef]),
-            });
-            const persisted = await persistCheckpoint({
-                projectRoot: authority.projectRoot, checkpoint,
-                remote: options.push ? options.remote ?? 'origin' : undefined,
-                remotePolicy: 'ancestor-recovery',
-                expectedRevision: leased.document.revision,
-                expectedLease: requestedLease,
-                expectedGraphRevision: authority.graphRevision,
-                physicalLockPath: physicalLock.path,
-                physicalLockOwner: physicalLock.owner,
-                transientAuthority: qaExecution.transientAuthority,
-                authorizedWriteSet: authority.authorizedWriteSet,
-            });
-            return persisted ? { ok: true, value: checkpoint } : failure('direct-yolo-recovery-persist-failed');
-        }
-        finally {
-            await releaseGitLifecyclePhysicalIntegrationLock(physicalLock.path, physicalLock.owner).catch(() => undefined);
-            if (leaseAcquired)
-                await releaseOwnedDirectLease(authority.projectRoot, authority.epicId, requestedLease).catch(() => undefined);
-        }
-    }
-    catch (error) {
-        return failure(publicReason(error, 'direct-yolo-recovery-failed'));
-    }
-}
-async function resolveLogicalAuthority(projectRootInput, storyId) {
-    if (!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(storyId))
-        throw new Error('direct-yolo-story-id-invalid');
-    const projectRoot = resolve(projectRootInput);
-    const tracked = asRecord(JSON.parse(await readFile(join(projectRoot, '.neocortex/state.json'), 'utf8')));
-    const runtime = await readGitLifecycleRuntime(projectRoot, { required: true });
-    const effective = applyGitLifecycleRuntimeOverlay(tracked, runtime);
-    const stories = asRecord(effective.stories);
-    const epics = asRecord(effective.epics);
-    const story = asRecord(stories?.[storyId]);
-    const epicId = String(story?.epic_id ?? storyId.split('.')[0]);
-    const epic = asRecord(epics?.[epicId]);
-    const executionBranch = String(epic?.execution_branch ?? '');
-    const originBranch = String(epic?.origin_branch ?? '');
-    const graphRevision = String(epic?.graph_revision ?? '');
-    const authorizedWriteSet = Array.isArray(story?.files_to_modify)
-        ? [...new Set(story.files_to_modify.filter((item) => typeof item === 'string' && safePath(item)))].sort()
-        : [];
-    if (!story)
-        throw new Error('direct-yolo-story-state-missing');
-    if (epic?.branch_mode !== 'epic')
-        throw new Error('direct-yolo-branch-mode-invalid');
-    if (!safeRef(executionBranch)
-        || !(await gitExitOk(projectRoot, ['check-ref-format', '--branch', executionBranch]))) {
-        throw new Error('direct-yolo-execution-branch-invalid');
-    }
-    if (!safeRef(originBranch)
-        || !(await gitExitOk(projectRoot, ['check-ref-format', '--branch', originBranch]))) {
-        throw new Error('direct-yolo-origin-branch-invalid');
-    }
-    if (!/^[a-f0-9]{64}$/.test(graphRevision))
-        throw new Error('direct-yolo-graph-revision-invalid');
-    const rootMemoryEffect = await readRootMemoryEffectForCheckpoint({ projectRoot, storyId, graphRevision,
-        executionBranch, childPaths: authorizedWriteSet });
-    return { projectRoot, storyId, story, epicId, executionBranch, originBranch, graphRevision, authorizedWriteSet, rootMemoryEffect };
-}
-async function resolveAuthority(projectRootInput, storyId) {
-    const authority = await resolveLogicalAuthority(projectRootInput, storyId);
-    const currentBranch = await git(authority.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-    if (currentBranch !== authority.executionBranch)
-        throw new Error('direct-yolo-current-branch-mismatch');
-    return authority;
-}
-async function buildCheckpoint(input) {
-    const checkedAt = input.nowIso;
-    const commitBody = await gitRaw(input.projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', input.headSha]);
-    const changedPaths = splitNull(await gitRaw(input.projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', input.headSha]));
-    const gitEvidenceDigest = computeImmutableStoryQaEvidenceDigest({
-        storyId: input.storyId, baseSha: input.baseSha, headSha: input.headSha,
-        bundleDigest: input.bundleDigest, graphRevision: input.graphRevision,
-        commitBody, changedPaths,
-    });
-    const qaDigest = computeP205StoryQaEvidenceDigest({
-        gitEvidenceDigest, headSha: input.headSha, graphRevision: input.graphRevision,
-        manifestDigest: input.qaExecution.manifestDigest, gateIds: input.qaExecution.gateIds,
-        resultDigest: input.qaExecution.resultDigest,
-    });
-    const qaReceiptRef = `story-qa:${qaDigest}`;
-    const qaReceipt = Object.freeze({
-        schemaVersion: 1, kind: 'story_qa_evidence', producer: 'local-yolo-tdd', evidenceVersion: 'p205-execution-v2',
-        storyId: input.storyId, epicId: input.epicId, baseSha: input.baseSha, headSha: input.headSha,
-        bundleDigest: input.bundleDigest, graphRevision: input.graphRevision,
-        contract: input.qaExecution.contract, command: input.qaExecution.command,
-        manifestDigest: input.qaExecution.manifestDigest, gateIds: input.qaExecution.gateIds,
-        resultDigest: input.qaExecution.resultDigest,
-        sourceEvidenceDigest: qaDigest, verdict: 'passed', checkedAt, receiptRef: qaReceiptRef,
-    });
-    const publicReview = publicStoryReviewArtifactFromGit(input.projectRoot, input.storyId, input.headSha);
-    if (publicReview?.verdict !== 'approved')
-        throw new Error('direct-yolo-review-artifact-not-approved');
-    const reviewDigest = digest([
-        'root-commit-range-review-v2', input.storyId, input.baseSha, input.headSha,
-        input.bundleDigest, input.graphRevision, qaReceiptRef, digest(commitBody), [...changedPaths].sort().join(','),
-        publicReview.digest,
-    ].join('\0'));
-    const reviewReceiptRef = `story-review:${reviewDigest}`;
-    const reviewReceipt = Object.freeze({
-        schemaVersion: 1, kind: 'story_review_evidence', producer: 'root-commit-range-review',
-        storyId: input.storyId, epicId: input.epicId, baseSha: input.baseSha, headSha: input.headSha,
-        bundleDigest: input.bundleDigest, graphRevision: input.graphRevision,
-        sourceEvidenceDigest: reviewDigest, reviewArtifactDigest: publicReview.digest,
-        qaReceiptRef, verdict: 'approved', reviewedAt: checkedAt,
-        receiptRef: reviewReceiptRef,
-    });
-    const evidenceRefs = [
-        `.neocortex/stories/${input.storyId}/qa-gate-result.json`,
-        `.neocortex/stories/${input.storyId}/validation-evidence.md`, qaReceiptRef, reviewReceiptRef,
-        ...(input.physicalLockOwnerDigest ? [`physical-lock-owner:${input.physicalLockOwnerDigest}`] : []),
-        ...(input.legacyReceiptRef ? [input.legacyReceiptRef] : []),
-    ];
-    return Object.freeze({
-        schemaVersion: 1, storyId: input.storyId, epicId: input.epicId, branch: input.executionBranch,
-        baseSha: input.baseSha, headSha: input.headSha, commits: Object.freeze([input.headSha]),
-        idempotencyKey: input.idempotencyKey, bundleDigest: input.bundleDigest,
-        graphRevision: input.graphRevision, claimRevision: input.claimRevision,
-        receiptRefs: Object.freeze(evidenceRefs), qaVerdict: 'passed', reviewVerdict: 'approved',
-        qaReceipt, reviewReceipt, recordedAt: checkedAt,
-        ...(input.rootMemoryEffect ? { rootMemoryEffect: input.rootMemoryEffect } : {}),
-    });
-}
-async function persistCheckpoint(input) {
-    const { projectRoot, checkpoint, remote } = input;
-    let conflict = false;
-    await mutateGitLifecycleRuntime(projectRoot, (document) => {
-        const epic = ensureRuntimeEpic(document, checkpoint.epicId);
-        if (input.expectedLease) {
-            const currentLease = asRecord(epic.branch_lease);
-            if (!sameLease(currentLease, input.expectedLease))
-                throw new Error('direct-yolo-runtime-revision-conflict');
-            if (Date.parse(String(currentLease?.expiresAt)) <= Date.now())
-                throw new Error('direct-yolo-writer-lease-expired');
-            if (epic.graph_revision !== input.expectedGraphRevision || checkpoint.graphRevision !== input.expectedGraphRevision) {
-                throw new Error('direct-yolo-graph-revision-raced');
-            }
-        }
-        const story = ensureRuntimeStory(document, checkpoint.storyId);
-        const existing = asRecord(story.checkpoint);
-        if (existing && existing.headSha !== checkpoint.headSha) {
-            conflict = true;
-            return;
-        }
-        story.checkpoint = checkpoint;
-        story.status = 'done';
-        story.last_step = GIT_LIFECYCLE_REVIEW_PR_STEP_ID;
-        const steps = Array.isArray(story.steps_completed) ? story.steps_completed.filter((item) => typeof item === 'string') : [];
-        story.steps_completed = [...new Set([...steps, GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID, GIT_LIFECYCLE_REVIEW_PR_STEP_ID])];
-        epic.branch_lease = null;
-    }, { expectedRevision: input.expectedRevision, preCommit: async () => {
-            if (conflict)
-                throw new Error('direct-yolo-checkpoint-conflict');
-            const currentBranch = await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-            if (currentBranch !== checkpoint.branch || await git(projectRoot, ['rev-parse', 'HEAD']) !== checkpoint.headSha) {
-                throw new Error('direct-yolo-checkpoint-head-raced');
-            }
-            if (!(await verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, checkpoint, checkpoint.storyId, checkpoint.epicId, checkpoint.branch, input.transientAuthority, input.authorizedWriteSet)))
-                throw new Error('direct-yolo-checkpoint-physical-invalid');
-            if (input.physicalLockPath && input.physicalLockOwner
-                && !(await verifyGitLifecyclePhysicalIntegrationLock(input.physicalLockPath, input.physicalLockOwner))) {
-                throw new Error('direct-yolo-integration-lock-raced');
-            }
-            if (remote) {
-                const accepted = input.remotePolicy === 'ancestor-recovery'
-                    ? await remoteContainsHead(projectRoot, remote, checkpoint.branch, checkpoint.headSha)
-                    : await remoteHeadIsExact(projectRoot, remote, checkpoint.branch, checkpoint.headSha);
-                if (!accepted) {
-                    throw new Error('direct-yolo-checkpoint-remote-raced');
-                }
-            }
-        } });
-    return !conflict;
-}
-async function remoteContainsHead(projectRoot, remoteInput, branch, headSha) {
-    const remote = safeRemote(remoteInput);
-    const remoteHead = (await git(projectRoot, ['ls-remote', '--heads', remote, `refs/heads/${branch}`])).split(/\s+/)[0];
-    return Boolean(remoteHead && await gitExitOk(projectRoot, ['merge-base', '--is-ancestor', headSha, remoteHead]));
-}
-function isLiveSameStorySetupLease(lease, storyId, nowIso) {
-    return Boolean(lease?.ownerStoryId === storyId
-        && lease.sessionId === lease.idempotencyKey
-        && typeof lease.idempotencyKey === 'string'
-        && /^setup-[a-f0-9]{64}$/.test(lease.idempotencyKey)
-        && typeof lease.expiresAt === 'string'
-        && Date.parse(lease.expiresAt) > Date.parse(nowIso));
-}
-async function setupHandoffTokenLocation(projectRoot, storyId) {
-    const runtimeDirectory = await gitLifecycleRuntimeDirectory(projectRoot);
-    const parent = await ensureGitLifecyclePrivateChildDirectory(runtimeDirectory, 'handoffs');
-    const name = `direct-${digest(storyId)}.json`;
-    return { parent, name, path: join(parent, name) };
-}
-async function writeSetupHandoffTokenRecord(projectRoot, record) {
-    const location = await setupHandoffTokenLocation(projectRoot, record.storyId);
-    await anchoredAtomicWriteFile(location.parent, location.name, `${JSON.stringify(record, null, 2)}\n`);
-    await assertGitLifecyclePrivateFile(location.path, location.parent);
-}
-async function readSetupHandoffTokenRecord(projectRoot, storyId) {
-    try {
-        const location = await setupHandoffTokenLocation(projectRoot, storyId);
-        await assertGitLifecyclePrivateFile(location.path, location.parent);
-        const item = JSON.parse(await readFile(location.path, 'utf8'));
-        const exactKeys = item.state === 'issued'
-            ? ['schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'token', 'tokenDigest', 'bundleDigest', 'claimRevision', 'grantDigest', 'expiresAt']
-            : item.state === 'consuming'
-                ? ['schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'token', 'tokenDigest', 'bundleDigest', 'claimRevision', 'grantDigest', 'expiresAt', 'consumedBySessionId', 'consumeStartedAt']
-                : ['schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'tokenDigest', 'bundleDigest', 'claimRevision', 'grantDigest', 'expiresAt', 'consumedBySessionId', 'consumedAt'];
-        if (Object.keys(item).sort().join('\0') !== [...exactKeys].sort().join('\0')
-            || item.schemaVersion !== 1 || item.kind !== 'direct-yolo-setup-handoff-token'
-            || (item.state !== 'issued' && item.state !== 'consuming' && item.state !== 'consumed') || item.storyId !== storyId
-            || typeof item.fromSessionId !== 'string' || !/^setup-[a-f0-9]{64}$/.test(item.fromSessionId)
-            || ![item.tokenDigest, item.bundleDigest, item.claimRevision, item.grantDigest].every((value) => typeof value === 'string' && /^[a-f0-9]{64}$/.test(value))
-            || typeof item.expiresAt !== 'string' || !Number.isFinite(Date.parse(item.expiresAt))
-            || (item.state === 'issued' || item.state === 'consuming')
-                && (typeof item.token !== 'string' || !/^[A-Za-z0-9_-]{32,256}$/.test(item.token))
-            || item.state === 'consuming' && (typeof item.consumedBySessionId !== 'string'
-                || !/^[a-f0-9]{64}$/.test(item.consumedBySessionId)
-                || typeof item.consumeStartedAt !== 'string' || !Number.isFinite(Date.parse(item.consumeStartedAt)))
-            || item.state === 'consumed' && (typeof item.consumedBySessionId !== 'string'
-                || !/^[a-f0-9]{64}$/.test(item.consumedBySessionId)
-                || typeof item.consumedAt !== 'string' || !Number.isFinite(Date.parse(item.consumedAt))))
-            return undefined;
-        return item;
-    }
-    catch {
-        return undefined;
-    }
-}
-async function resolveIssuedSetupLeaseHandoff(projectRoot, storyId, bundleDigest, claimRevision, nowIso) {
-    const record = await readSetupHandoffTokenRecord(projectRoot, storyId);
-    if (!record || record.state === 'consumed' || !record.token
-        || record.bundleDigest !== bundleDigest || record.claimRevision !== claimRevision
-        || Date.parse(record.expiresAt) <= Date.parse(nowIso)
-        || digest(record.token) !== record.tokenDigest)
-        return undefined;
-    return { sessionId: record.fromSessionId, token: record.token };
-}
-async function markSetupHandoffTokenConsuming(projectRoot, storyId, fromSessionId, token, consumedBySessionId, consumeStartedAt) {
-    const record = await readSetupHandoffTokenRecord(projectRoot, storyId);
-    if (!record || record.state === 'consumed' || record.fromSessionId !== fromSessionId
-        || record.token !== token || record.tokenDigest !== digest(token)) {
-        throw new Error('direct-yolo-setup-handoff-consume-invalid');
-    }
-    if (record.state === 'consuming') {
-        if (record.consumedBySessionId !== consumedBySessionId) {
-            throw new Error('direct-yolo-setup-handoff-consume-raced');
-        }
-        return;
-    }
-    await writeSetupHandoffTokenRecord(projectRoot, {
-        ...record,
-        state: 'consuming',
-        consumedBySessionId,
-        consumeStartedAt,
-    });
-}
-async function markSetupHandoffTokenConsumed(projectRoot, epicId, storyId, fromSessionId, token, bundleDigest, claimRevision, consumedBySessionId, consumedAt) {
-    const record = await readSetupHandoffTokenRecord(projectRoot, storyId);
-    if (record?.state === 'consumed' && record.fromSessionId === fromSessionId
-        && record.consumedBySessionId === consumedBySessionId)
-        return;
-    const runtime = await readGitLifecycleRuntime(projectRoot, { required: true });
-    const lease = asRecord(runtime.epics[epicId]?.branch_lease);
-    const consumption = asRecord(lease?.handoffConsumption);
-    if (!record || record.state !== 'consuming' || record.fromSessionId !== fromSessionId
-        || record.token !== token || record.tokenDigest !== digest(token)
-        || record.bundleDigest !== bundleDigest || record.claimRevision !== claimRevision
-        || record.consumedBySessionId !== consumedBySessionId
-        || lease?.ownerStoryId !== storyId || lease.sessionId !== consumedBySessionId
-        || consumption?.kind !== 'direct-yolo-setup-handoff-consumption'
-        || consumption.state !== 'consumed' || consumption.fromSessionId !== fromSessionId
-        || consumption.tokenDigest !== record.tokenDigest || consumption.bundleDigest !== bundleDigest
-        || consumption.claimRevision !== claimRevision || consumption.consumedBySessionId !== consumedBySessionId) {
-        throw new Error('direct-yolo-setup-handoff-consume-invalid');
-    }
-    try {
-        await writeSetupHandoffTokenRecord(projectRoot, {
-            schemaVersion: 1, kind: record.kind, state: 'consumed', storyId,
-            fromSessionId, tokenDigest: record.tokenDigest, bundleDigest: record.bundleDigest,
-            claimRevision: record.claimRevision, grantDigest: record.grantDigest, expiresAt: record.expiresAt,
-            consumedBySessionId, consumedAt,
-        });
-    }
-    catch {
-        throw new Error('direct-yolo-setup-handoff-consume-persist-failed');
-    }
-}
-function validSetupLeaseHandoff(input) {
-    const grant = asRecord(input.current?.handoffGrant);
-    const token = input.handoff?.token;
-    const tokenDigest = typeof token === 'string' && /^[A-Za-z0-9_-]{32,256}$/.test(token)
-        ? digest(token)
-        : undefined;
-    return Boolean(grant && tokenDigest && input.handoff
-        && input.handoff.sessionId === input.current?.sessionId
-        && grant.schemaVersion === 1
-        && grant.kind === 'direct-yolo-setup-handoff'
-        && grant.storyId === input.storyId
-        && grant.fromSessionId === input.current?.sessionId
-        && grant.bundleDigest === input.bundleDigest
-        && grant.claimRevision === input.claimRevision
-        && typeof grant.expiresAt === 'string'
-        && Date.parse(grant.expiresAt) > Date.parse(input.nowIso)
-        && typeof grant.tokenDigest === 'string'
-        && /^[a-f0-9]{64}$/.test(grant.tokenDigest)
-        && safeDigestEqual(grant.tokenDigest, tokenDigest));
-}
-function safeDigestEqual(left, right) {
-    const leftBytes = Buffer.from(left, 'hex');
-    const rightBytes = Buffer.from(right, 'hex');
-    return leftBytes.length === 32 && rightBytes.length === 32 && timingSafeEqual(leftBytes, rightBytes);
-}
-function sameLease(left, right) {
-    return Boolean(left && ['schemaVersion', 'ownerStoryId', 'sessionId', 'idempotencyKey', 'acquiredAt', 'expiresAt']
-        .every((key) => left[key] === right[key]));
-}
-async function releaseOwnedDirectLease(projectRoot, epicId, expected) {
-    await mutateGitLifecycleRuntime(projectRoot, (document) => {
-        const epic = ensureRuntimeEpic(document, epicId);
-        const current = asRecord(epic.branch_lease);
-        if (sameLease(current, expected))
-            epic.branch_lease = null;
-    });
-}
-async function cleanupOwnedDirectAuthority(authority, storyId) {
-    const runtime = await readGitLifecycleRuntime(authority.projectRoot, { required: true });
-    const lease = asRecord(runtime.epics[authority.epicId]?.branch_lease);
-    if (!lease || lease.ownerStoryId !== storyId || !safeTokenValue(lease.sessionId)
-        || !safeTokenValue(lease.idempotencyKey) || !Number.isFinite(Date.parse(String(lease.acquiredAt)))
-        || !Number.isFinite(Date.parse(String(lease.expiresAt))))
-        return;
-    const physical = await acquireGitLifecyclePhysicalIntegrationLock(authority.projectRoot, {
-        kind: 'direct', storyId, sessionId: String(lease.sessionId), idempotencyKey: String(lease.idempotencyKey),
-        createdAt: String(lease.acquiredAt), expiresAt: String(lease.expiresAt), persistent: true,
-    });
-    if (!physical.ok)
-        return;
-    const released = await releaseGitLifecyclePhysicalIntegrationLock(physical.path, physical.owner);
-    if (released)
-        await releaseOwnedDirectLease(authority.projectRoot, authority.epicId, lease);
-}
-async function runQa(options, projectRoot, headSha, graphRevision) {
-    const transientAuthority = await executeP205TransientAuthority(projectRoot, {
-        headSha,
-        graphRevision,
-        nowIso: options.nowIso,
-    });
-    await options.qaRunner?.({ projectRoot, storyId: options.storyId, headSha });
-    const evidence = projectP205TransientExecutionEvidence(transientAuthority);
-    if (!evidence)
-        throw new Error('p205-transient-authority-invalid');
-    return {
-        contract: 'P205-CI-02', command: P205_COMPLETE_COMMAND,
-        manifestDigest: evidence.manifestDigest, gateIds: evidence.gateIds,
-        resultDigest: evidence.resultDigest, transientAuthority,
-    };
-}
-async function physicalCheckoutUnchanged(projectRoot, executionBranch, headSha, committedPaths) {
-    if (await git(projectRoot, ['rev-parse', 'HEAD']) !== headSha
-        || await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== executionBranch
-        || !(await gitExitOk(projectRoot, ['diff', '--cached', '--quiet'])))
-        return false;
-    return gitExitOk(projectRoot, ['diff', '--quiet', 'HEAD', '--', ...committedPaths]);
-}
-async function remoteHeadIsExact(projectRoot, remoteInput, branch, headSha) {
-    const remote = safeRemote(remoteInput);
-    const remoteHead = (await git(projectRoot, ['ls-remote', '--heads', remote, `refs/heads/${branch}`])).split(/\s+/)[0];
-    return remoteHead === headSha;
-}
-function validateDirectWriteSet(paths, authorizedWriteSet, storyId, rootMemoryEffect) {
-    if (paths.length === 0 || paths.some((path) => !safePath(path))) {
-        return { ok: false, reasonCode: 'direct-yolo-write-set-invalid' };
-    }
-    const required = [
-        '.neocortex/state.json', `docs/stories/${storyId}.story.md`,
-        `.neocortex/stories/${storyId}/qa-gate-result.json`,
-        `.neocortex/stories/${storyId}/validation-evidence.md`,
-        `.neocortex/stories/${storyId}/review.md`,
-    ];
-    if (!required.every((path) => paths.includes(path)) || !required.every((path) => authorizedWriteSet.includes(path))) {
-        return { ok: false, reasonCode: 'direct-yolo-write-set-invalid' };
-    }
-    if (rootMemoryEffect && (rootMemoryEffect.storyId !== storyId
-        || rootMemoryEffect.childClaimRevision !== digest([...authorizedWriteSet].sort().join('\0')))) {
-        return { ok: false, reasonCode: 'direct-yolo-root-memory-claim-mismatch' };
-    }
-    if (paths.some((path) => !authorizedWriteSet.includes(path) && !rootMemoryEffect?.files.some(file => file.path === path))) {
-        return { ok: false, reasonCode: 'direct-yolo-write-set-unauthorized' };
-    }
-    return { ok: true };
-}
-function safePath(value) {
-    return value.length > 0 && value.length <= 1024 && !value.startsWith('/') && !value.includes('\\')
-        && !value.split('/').includes('..') && !value.startsWith('.git/') && !value.includes('\0');
-}
-function safeTokenValue(value) {
-    return typeof value === 'string' && value.length > 0 && value.length <= 512
-        && /^[A-Za-z0-9._:@/+\-=]+$/.test(value);
-}
-function safeRef(value) {
-    return value.length > 0 && value.length <= 240 && !value.startsWith('-') && !/[\s~^:?*[\\]/.test(value) && !value.includes('..');
-}
-function safeRemote(value) {
-    if (!/^[A-Za-z0-9._-]{1,128}$/.test(value))
-        throw new Error('direct-yolo-remote-invalid');
-    return value;
-}
-function trailer(body, key) {
-    const prefix = `${key}: `;
-    const values = body.split('\n').map((line) => line.trim()).filter((line) => line.startsWith(prefix)).map((line) => line.slice(prefix.length));
-    return values.length === 1 ? values[0] : undefined;
-}
-function digest(value) { return createHash('sha256').update(value).digest('hex'); }
-function splitNull(value) { return value.split('\0').filter(Boolean); }
-function normalizedTime(value) {
-    return value && Number.isFinite(Date.parse(value)) ? new Date(Date.parse(value)).toISOString() : new Date().toISOString();
-}
-function asRecord(value) {
-    return value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
-}
-function validOriginBinding(value, executionBranch, originBranch) {
-    const item = asRecord(value);
-    if (!item || item.schemaVersion !== 1 || item.originBranch !== originBranch
-        || item.executionBranch !== executionBranch || item.capturedFromCurrentCheckout !== true
-        || typeof item.originHeadSha !== 'string' || !/^[a-f0-9]{40,64}$/.test(item.originHeadSha)
-        || typeof item.capturedAt !== 'string' || !Number.isFinite(Date.parse(item.capturedAt)))
-        return undefined;
-    return item;
-}
-function setupReceipt(authority, binding, leaseExpiresAt, reused) {
-    return Object.freeze({
-        schemaVersion: 1, kind: 'direct-yolo-setup-receipt', storyId: authority.storyId,
-        epicId: authority.epicId, executionBranch: authority.executionBranch, originBranch: authority.originBranch,
-        originHeadSha: binding.originHeadSha, leaseExpiresAt, reused, publicSafe: true,
-    });
-}
-async function checkoutPayload(projectRoot) {
-    const untrackedPaths = splitNull(await gitRaw(projectRoot, [
-        'ls-files', '--others', '--exclude-standard', '-z',
-    ])).sort();
-    const untrackedBlobs = await Promise.all(untrackedPaths.map(async (path) => {
-        if (!safePath(path))
-            throw new Error('direct-yolo-checkout-payload-invalid');
-        return `${path}\0${await git(projectRoot, ['hash-object', '--no-filters', '--', path])}`;
-    }));
-    return digest([
-        await gitRaw(projectRoot, ['diff', '--cached', '--binary', '--full-index']),
-        await gitRaw(projectRoot, ['diff', '--binary', '--full-index']),
-        await gitRaw(projectRoot, ['status', '--porcelain=v1', '-z', '--untracked-files=all']),
-        ...untrackedBlobs,
-    ].join('\0'));
-}
-/** Physical observation for a private YOLO agent step; this is not actor attribution. */
-export async function captureDirectYoloCheckoutEvidence(projectRootInput) {
-    const projectRoot = resolve(projectRootInput);
-    const headSha = await git(projectRoot, ['rev-parse', 'HEAD']);
-    const branch = await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
-    const payloadDigest = await checkoutPayload(projectRoot);
-    if (await git(projectRoot, ['rev-parse', 'HEAD']) !== headSha
-        || await git(projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']) !== branch) {
-        throw new Error('direct-yolo-checkout-observation-raced');
-    }
-    return Object.freeze({ headSha, branch, payloadDigest });
-}
-async function worktreeBranches(projectRoot) {
-    const records = [];
-    let current;
-    for (const line of (await gitRaw(projectRoot, ['worktree', 'list', '--porcelain'])).split('\n')) {
-        if (line.startsWith('worktree ')) {
-            current = { path: line.slice('worktree '.length) };
-            records.push(current);
-        }
-        else if (current && line.startsWith('branch refs/heads/')) {
-            current.branch = line.slice('branch refs/heads/'.length);
-        }
-    }
-    return records;
-}
-function publicReason(error, fallback) {
-    if (error instanceof Error && error.message === 'git-lifecycle-runtime-revision-conflict') {
-        return 'direct-yolo-runtime-revision-conflict';
-    }
-    return error instanceof Error && /^direct-yolo-[a-z0-9-]+$/.test(error.message) ? error.message : fallback;
-}
-function failure(reasonCode) { return { ok: false, reasonCode }; }
-async function git(cwd, args) {
-    return String((await execFileAsync('git', [...args], { cwd, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 })).stdout).trim();
-}
-async function gitRaw(cwd, args) {
-    return String((await execFileAsync('git', [...args], { cwd, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 })).stdout);
-}
-async function gitExitOk(cwd, args) {
-    try {
-        await execFileAsync('git', [...args], { cwd, maxBuffer: 8 * 1024 * 1024 });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
+import{execFile as He}from"node:child_process";import{createHash as Le,randomBytes as me,timingSafeEqual as Ce}from"node:crypto";import{readFile as Z}from"node:fs/promises";import{join as te,resolve as M}from"node:path";import{promisify as Oe}from"node:util";import{readRootMemoryEffectForCheckpoint as qe}from"../private-execution/root-memory-scope.js";import{rootMemoryEffectDigest as $e,verifyRootMemoryPhysicalWriteSet as re}from"../private-execution/root-memory-git-evidence.js";import{acquireGitLifecyclePhysicalIntegrationLock as V,applyGitLifecycleRuntimeOverlay as Pe,computeImmutableStoryQaEvidenceDigest as ze,computeGitLifecyclePhysicalIntegrationLockOwnerDigest as we,computeP205StoryQaEvidenceDigest as Ne,computeLegacyDirectYoloRecoveryReceiptRef as Ke,ensureRuntimeEpic as N,ensureRuntimeStory as Re,ensureGitLifecyclePrivateChildDirectory as Me,executeP205TransientAuthority as Ve,projectP205TransientExecutionEvidence as We,publicStoryReviewArtifactFromGit as Q,LEGACY_DIRECT_YOLO_RECOVERY_COMMITS as Ge,mutateGitLifecycleRuntime as P,P205_COMPLETE_COMMAND as Fe,readGitLifecycleRuntime as C,gitLifecycleRuntimeDirectory as Te,assertGitLifecyclePrivateFile as Ie,releaseGitLifecyclePhysicalIntegrationLock as W,releaseGitLifecyclePhysicalIntegrationLockForCheckpoint as Je,verifyGitLifecyclePhysicalIntegrationLock as U,verifyAcceptedGitLifecycleStoryCheckpoint as ve}from"./git-lifecycle-store.js";import{anchoredAtomicWriteFile as Ye}from"./secure-filesystem-boundary.js";import{GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID as Ze,GIT_LIFECYCLE_REVIEW_PR_STEP_ID as xe,GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID as X}from"./git-lifecycle-step-ids.js";const oe=Oe(He),ie=3600*1e3;async function gt(e){let t,o=!1;try{const r=await Se(e.projectRoot,e.storyId),i=K(e.nowIso),n=Date.parse(i),g=await y(r.projectRoot,["symbolic-ref","--quiet","--short","HEAD"]),s=await y(r.projectRoot,["rev-parse","HEAD"]),h=await C(r.projectRoot,{required:!0}),c=w(h.epics[r.epicId]),d=w(c?.branch_lease),l=e.expiredSetupRecovery;if(l&&!ot(l,h.revision,d,e.storyId,n))return a("direct-yolo-expired-setup-recovery-invalid");const u=d&&Number.isFinite(Date.parse(String(d.expiresAt)))&&Date.parse(String(d.expiresAt))>n;if(u&&d?.ownerStoryId!==e.storyId)return a("direct-yolo-writer-active");let m=he(c?.origin_binding,r.executionBranch,r.originBranch);if(g===r.executionBranch){if(!m)return a("direct-yolo-origin-binding-invalid")}else{if(g!==r.originBranch)return a("direct-yolo-current-branch-mismatch");if(m&&m.originHeadSha!==s){if(!l||!await B(r.projectRoot,["merge-base","--is-ancestor",m.originHeadSha,s]))return a("direct-yolo-origin-binding-conflict");const p=`refs/heads/${r.executionBranch}`;if(!await B(r.projectRoot,["show-ref","--verify","--quiet",p]))return a("direct-yolo-execution-branch-missing");const I=await y(r.projectRoot,["rev-parse",p]);if(!await B(r.projectRoot,["merge-base","--is-ancestor",I,s]))return a("direct-yolo-execution-branch-diverged")}if(m??={schemaVersion:1,originBranch:r.originBranch,originHeadSha:s,executionBranch:r.executionBranch,capturedFromCurrentCheckout:!0,capturedAt:i},(await ye(r.projectRoot)).some(p=>p.branch===r.executionBranch&&M(p.path)!==r.projectRoot))return a("direct-yolo-execution-branch-checked-out-elsewhere");const f=await q(r.projectRoot),R=`refs/heads/${r.executionBranch}`;if(await B(r.projectRoot,["show-ref","--verify","--quiet",R])){const p=await y(r.projectRoot,["rev-parse",R]);if(p!==s){if(!await B(r.projectRoot,["merge-base","--is-ancestor",p,s]))return a("direct-yolo-execution-branch-diverged");l||await y(r.projectRoot,["update-ref",R,s,p])}l?t={checkoutBefore:f,executionRef:R,executionBranch:r.executionBranch,executionHead:p,originBranch:r.originBranch,originHead:s}:await y(r.projectRoot,["switch",r.executionBranch])}else{if(l)return a("direct-yolo-execution-branch-missing");await y(r.projectRoot,["switch","-c",r.executionBranch])}if(!t&&await q(r.projectRoot)!==f)return a("direct-yolo-checkout-payload-raced")}const S=t?.originHead??await y(r.projectRoot,["rev-parse","HEAD"]);if(!t&&await y(r.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==r.executionBranch)return a("direct-yolo-current-branch-mismatch");if(u&&d?.ownerStoryId===e.storyId)return d.setupHeadSha!==S?a("direct-yolo-setup-lease-head-unbound"):{ok:!0,value:pe(r,m,String(d.expiresAt),!0)};const v=i,x=new Date(n+3600*1e3).toISOString(),b=`setup-${me(32).toString("hex")}`,D=l?h:await C(r.projectRoot,{required:!0});return await P(r.projectRoot,A=>{const f=N(A,r.epicId),R=w(f.branch_lease);if(l&&JSON.stringify(R)!==JSON.stringify(l.expectedLease))throw new Error("direct-yolo-expired-setup-recovery-raced");if(R&&Date.parse(String(R.expiresAt))>n&&R.ownerStoryId!==e.storyId)throw new Error("direct-yolo-writer-active");const p=he(f.origin_binding,r.executionBranch,r.originBranch);if(f.origin_binding&&!p)throw new Error("direct-yolo-origin-binding-conflict");if(p&&JSON.stringify(p)!==JSON.stringify(m))throw new Error("direct-yolo-origin-binding-conflict");f.branch_mode="epic",f.execution_branch=r.executionBranch,f.origin_branch=r.originBranch,f.graph_revision=r.graphRevision,f.origin_binding=m,f.branch_lease={schemaVersion:1,ownerStoryId:e.storyId,sessionId:b,idempotencyKey:b,acquiredAt:v,expiresAt:x,setupHeadSha:S}},{expectedRevision:l?.expectedRuntimeRevision??D.revision,preCommit:async()=>{if(t){if((await ye(r.projectRoot)).some(f=>f.branch===r.executionBranch&&M(f.path)!==r.projectRoot)||await y(r.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==r.originBranch||await y(r.projectRoot,["rev-parse","HEAD"])!==t.originHead||await q(r.projectRoot)!==t.checkoutBefore||!await B(r.projectRoot,["show-ref","--verify","--quiet",t.executionRef])||await y(r.projectRoot,["rev-parse",t.executionRef])!==t.executionHead)throw new Error("direct-yolo-expired-setup-recovery-raced");if(o=!0,t.executionHead!==t.originHead&&await y(r.projectRoot,["update-ref",t.executionRef,t.originHead,t.executionHead]),await y(r.projectRoot,["switch",r.executionBranch]),await q(r.projectRoot)!==t.checkoutBefore)throw new Error("direct-yolo-checkout-payload-raced")}if(await y(r.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==r.executionBranch||await y(r.projectRoot,["rev-parse","HEAD"])!==S)throw new Error("direct-yolo-setup-physical-state-raced")}}),{ok:!0,value:pe(r,m,x,!1)}}catch(r){return o&&t&&await it(M(e.projectRoot),t).catch(()=>{}),a(Y(r,"direct-yolo-setup-failed"))}}async function mt(e){let t;try{const o=await F(e.projectRoot,e.storyId),r=K(e.nowIso),i=te(o.projectRoot,".neocortex/state.json"),n=await Z(i,"utf8"),g=await q(o.projectRoot),s=await y(o.projectRoot,["rev-parse","HEAD"]),h=`refs/heads/${o.executionBranch}`,c=await C(o.projectRoot,{required:!0}),d=w(c.epics[o.epicId]),l=he(d?.origin_binding,o.executionBranch,o.originBranch),u=w(d?.branch_lease);if(!l)return a("direct-yolo-origin-binding-invalid");if(!u||!ne(u,e.storyId,r)||u?.sessionId!==u?.idempotencyKey)return a("direct-yolo-setup-lease-invalid");const m=await V(o.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:String(u.sessionId),idempotencyKey:String(u.idempotencyKey),expiresAt:new Date(Date.now()+300*1e3).toISOString(),persistent:!1});if(!m.ok)return a(m.reasonCode);if(t=m,s!==u.setupHeadSha||!await B(o.projectRoot,["merge-base","--is-ancestor",l.originHeadSha,s])||await y(o.projectRoot,["rev-parse",h])!==s)return a("direct-yolo-setup-head-mismatch");if((await ye(o.projectRoot)).some(f=>f.branch===o.executionBranch&&M(f.path)!==o.projectRoot))return a("direct-yolo-execution-branch-checked-out-elsewhere");const v=w(JSON.parse(n)),x=w(w(v?.stories)?.[e.storyId]),b=w(c.stories[e.storyId]);if(!x||!["backlog","ready_to_start"].includes(String(x.status))||x.steps_completed!==void 0&&(!Array.isArray(x.steps_completed)||x.steps_completed.length>0)||x.branch_name||x.checkpoint)return a("direct-yolo-setup-story-progress-conflict");const D=b?.status==="branch-ready"&&b.last_step===X&&Array.isArray(b.steps_completed)&&b.steps_completed.length===1&&b.steps_completed[0]===X&&Object.keys(b).sort().join(",")==="last_step,status,steps_completed";if(b&&Object.keys(b).length>0&&!D)return a("direct-yolo-setup-story-progress-conflict");const A=async()=>{if(Date.parse(String(u.expiresAt))<=(e.nowIso?Date.parse(r):Date.now())||!t||!await U(t.path,t.owner)||await Z(i,"utf8")!==n||await q(o.projectRoot)!==g||await y(o.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==o.executionBranch||await y(o.projectRoot,["rev-parse","HEAD"])!==s||!await B(o.projectRoot,["merge-base","--is-ancestor",l.originHeadSha,s])||await y(o.projectRoot,["rev-parse",h])!==s)throw new Error("direct-yolo-setup-physical-state-raced")};return D?await A():await P(o.projectRoot,f=>{const R=w(f.epics[o.epicId]),p=Re(f,e.storyId);if(JSON.stringify(R?.branch_lease)!==JSON.stringify(u)||JSON.stringify(R?.origin_binding)!==JSON.stringify(l)||R?.graph_revision!==o.graphRevision||Object.keys(p).length>0)throw new Error("direct-yolo-setup-runtime-raced");p.status="branch-ready",p.last_step=X,p.steps_completed=[X]},{expectedRevision:c.revision,preCommit:A}),{ok:!0,value:Object.freeze({...pe(o,l,String(u.expiresAt),D),checkpointAccepted:!0,graphRevision:o.graphRevision,headSha:s})}}catch(o){return a(Y(o,"direct-yolo-setup-acceptance-failed"))}finally{t&&await W(t.path,t.owner).catch(()=>{})}}async function wt(e){try{const t=await F(e.projectRoot,e.storyId),o=O(await j(t.projectRoot,["diff","--cached","--name-only","-z"])),r=T(o,t.authorizedWriteSet,e.storyId,t.rootMemoryEffect);if(!r.ok)return a(r.reasonCode);if(t.rootMemoryEffect&&re(t.projectRoot,t.rootMemoryEffect,{storyId:e.storyId,executionBranch:t.executionBranch,baseSha:await y(t.projectRoot,["rev-parse","HEAD"]),headRef:":",childPaths:t.authorizedWriteSet}),Q(t.projectRoot,e.storyId,":")?.verdict!=="approved")return a("direct-yolo-review-artifact-not-approved");if(O(await j(t.projectRoot,["diff","--name-only","-z"])).some(I=>o.includes(I)))return a("direct-yolo-user-overlap");const g=await j(t.projectRoot,["diff","--cached","--binary","--full-index"]);if(!g)return a("direct-yolo-staged-diff-empty");const s=k(g),h=k([...t.authorizedWriteSet].sort().join("\0")),c=K(e.nowIso),d=await C(t.projectRoot,{required:!0}),l=w(d.epics[t.epicId]?.branch_lease);if(!ne(l,e.storyId,c))return a("direct-yolo-setup-handoff-owner-invalid");const u=String(l.sessionId),m=String(l.expiresAt),S=new Date(Math.min(Date.parse(m),Date.parse(c)+300*1e3)).toISOString(),v=await G(t.projectRoot,e.storyId),x=v?.state==="issued"&&v.fromSessionId===u&&v.bundleDigest===s&&v.claimRevision===h&&Date.parse(v.expiresAt)>Date.parse(c),b=x?v.expiresAt:S,D=x?v.token:me(32).toString("base64url"),A=k(D),f=Object.freeze({schemaVersion:1,kind:"direct-yolo-setup-handoff",storyId:e.storyId,fromSessionId:u,tokenDigest:A,bundleDigest:s,claimRevision:h,expiresAt:b}),R=k(JSON.stringify(f)),p=await V(t.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:u,idempotencyKey:u,expiresAt:b,persistent:!1,createdAt:c});if(!p.ok)return a(p.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-integration-backpressure":"direct-yolo-integration-lock-failed");try{await ae(t.projectRoot,{schemaVersion:1,kind:"direct-yolo-setup-handoff-token",state:"issued",storyId:e.storyId,fromSessionId:u,token:D,tokenDigest:A,bundleDigest:s,claimRevision:h,grantDigest:R,expiresAt:b}),await P(t.projectRoot,I=>{const E=w(N(I,t.epicId).branch_lease);if(!ne(E,e.storyId,c)||E?.sessionId!==u||E.idempotencyKey!==u)throw new Error("direct-yolo-setup-handoff-owner-raced");E.handoffGrant=f},{expectedRevision:d.revision,preCommit:async()=>{if(!await U(p.path,p.owner))throw new Error("direct-yolo-integration-lock-raced");const I=await G(t.projectRoot,e.storyId);if(!I||I.state!=="issued"||I.grantDigest!==R||I.tokenDigest!==A)throw new Error("direct-yolo-setup-handoff-token-raced")}})}finally{await W(p.path,p.owner).catch(()=>{})}return{ok:!0,value:Object.freeze({schemaVersion:1,kind:"direct-yolo-setup-handoff-receipt",storyId:e.storyId,sessionId:u,bundleDigest:s,claimRevision:h,grantDigest:R,expiresAt:b,reused:x,publicSafe:!0})}}catch(t){return a(t instanceof Error&&/^direct-yolo-/.test(t.message)?t.message:"direct-yolo-setup-handoff-failed")}}async function Rt(e){try{const t=await F(e.projectRoot,e.storyId),o=await y(t.projectRoot,["rev-parse","HEAD"]),r=O(await j(t.projectRoot,["diff","--cached","--name-only","-z"])),i=T(r,t.authorizedWriteSet,e.storyId,t.rootMemoryEffect);if(!i.ok)return a(i.reasonCode);t.rootMemoryEffect&&re(t.projectRoot,t.rootMemoryEffect,{storyId:e.storyId,executionBranch:t.executionBranch,baseSha:o,headRef:":",childPaths:t.authorizedWriteSet});const n=Q(t.projectRoot,e.storyId,":");if(n?.verdict!=="approved")return a("direct-yolo-review-artifact-not-approved");if(O(await j(t.projectRoot,["diff","--name-only","-z"])).some(f=>r.includes(f)))return a("direct-yolo-user-overlap");const s=await j(t.projectRoot,["diff","--cached","--binary","--full-index"]);if(!s)return a("direct-yolo-staged-diff-empty");const h=k(s),c=k([...t.authorizedWriteSet].sort().join("\0")),d=k(["direct-yolo-commit-v1",e.storyId,t.epicId,t.executionBranch,o,h,t.graphRevision,c].join("\0")),l=K(e.nowIso);let u=e.setupLeaseHandoff??await Qe(t.projectRoot,e.storyId,h,c,l);const m=await C(t.projectRoot,{required:!0}),S=w(m.epics[t.epicId]?.branch_lease),v=S?.ownerStoryId===e.storyId&&S.sessionId===d&&S.idempotencyKey===d&&typeof S.expiresAt=="string"&&Date.parse(S.expiresAt)>Date.parse(l)?S:void 0;if(v&&e.setupLeaseHandoff)return a("direct-yolo-setup-handoff-replayed");const x=w(v?.handoffConsumption);if(x){const f=await G(t.projectRoot,e.storyId);if(!f||!["consuming","consumed"].includes(f.state)||f.fromSessionId!==x.fromSessionId||f.tokenDigest!==x.tokenDigest||f.bundleDigest!==h||f.claimRevision!==c||x.bundleDigest!==h||x.claimRevision!==c||f.consumedBySessionId!==d||x.consumedBySessionId!==d)return a("direct-yolo-setup-handoff-consume-invalid");if(f.state==="consuming"){if(!f.token||k(f.token)!==f.tokenDigest)return a("direct-yolo-setup-handoff-consume-invalid");u={sessionId:f.fromSessionId,token:f.token}}}const b=v?String(v.expiresAt):new Date(Date.parse(l)+ie).toISOString(),D=await V(t.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:d,idempotencyKey:d,expiresAt:b,persistent:!0,createdAt:v&&typeof v.acquiredAt=="string"?v.acquiredAt:l});if(!D.ok)return a(D.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-integration-backpressure":"direct-yolo-integration-lock-failed");try{u&&e.setupLeaseHandoff===void 0&&(await Ue(t.projectRoot,e.storyId,u.sessionId,u.token,d,l),await e.setupHandoffFault?.("after-consuming-persisted")),await P(t.projectRoot,f=>{const R=N(f,t.epicId),p=w(R.branch_lease),I=p&&Date.parse(String(p.expiresAt))>Date.parse(l),E=p?.ownerStoryId===e.storyId&&p.sessionId===d&&p.idempotencyKey===d,$=p?.ownerStoryId===e.storyId&&p.sessionId===p.idempotencyKey&&typeof p.idempotencyKey=="string"&&/^setup-[a-f0-9]{64}$/.test(p.idempotencyKey),_=I&&$&&et({current:p,handoff:u,storyId:e.storyId,bundleDigest:h,claimRevision:c,nowIso:l});if(u&&I&&!E&&!_)throw new Error("direct-yolo-setup-handoff-invalid");if(I&&!E&&!_)throw new Error("direct-yolo-writer-active");const H=_?w(p?.handoffGrant):void 0,L=H?{schemaVersion:1,kind:"direct-yolo-setup-handoff-consumption",state:"consumed",storyId:e.storyId,fromSessionId:String(p?.sessionId),tokenDigest:String(H.tokenDigest),bundleDigest:h,claimRevision:c,consumedBySessionId:d,consumedAt:l}:void 0;R.branch_mode="epic",R.execution_branch=t.executionBranch,R.origin_branch=t.originBranch,R.graph_revision=t.graphRevision,R.branch_lease=I&&E?p:{schemaVersion:1,ownerStoryId:e.storyId,sessionId:d,idempotencyKey:d,acquiredAt:l,expiresAt:b,...L?{handoffConsumption:L}:{}}},{expectedRevision:m.revision,preCommit:async()=>{if(!await U(D.path,D.owner))throw new Error("direct-yolo-integration-lock-raced")}})}catch(f){throw await W(D.path,D.owner).catch(()=>{}),f}u&&e.setupLeaseHandoff===void 0&&(await e.setupHandoffFault?.("before-consumed-persist"),await Xe(t.projectRoot,t.epicId,e.storyId,u.sessionId,u.token,h,c,d,l));const A=Object.freeze([`Neocortex-Story: ${e.storyId}`,`Neocortex-Epic: ${t.epicId}`,`Neocortex-Execution-Branch: ${t.executionBranch}`,`Neocortex-Prepared-Base: ${o}`,`Neocortex-Bundle-Digest: ${h}`,`Neocortex-Review-Artifact-Digest: ${n.digest}`,`Neocortex-Graph-Revision: ${t.graphRevision}`,`Neocortex-Claim-Revision: ${c}`,...t.rootMemoryEffect?[`Neocortex-Root-Memory-Effect: ${$e(t.rootMemoryEffect)}`]:[]]);return{ok:!0,value:Object.freeze({schemaVersion:1,storyId:e.storyId,epicId:t.epicId,executionBranch:t.executionBranch,baseSha:o,bundleDigest:h,reviewArtifactDigest:n.digest,graphRevision:t.graphRevision,claimRevision:c,idempotencyKey:d,changedPaths:Object.freeze(r),trailers:A})}}catch(t){return a(Y(t,"direct-yolo-begin-failed"))}}async function It(e){let t,o,r;try{const i=await F(e.projectRoot,e.storyId);t=i;const n=await y(i.projectRoot,["rev-parse","HEAD"]);let g=await C(i.projectRoot,{required:!0});const s=w(g.stories[e.storyId]?.checkpoint);if(s){const _=typeof s.headSha=="string"?s.headSha:"",H=typeof s.graphRevision=="string"?s.graphRevision:"",L=/^[a-f0-9]{40,64}$/.test(_)?O(await j(i.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",_])):[],z=T(L,i.authorizedWriteSet,e.storyId,i.rootMemoryEffect);if(!(/^[a-f0-9]{40,64}$/.test(_)&&await B(i.projectRoot,["merge-base","--is-ancestor",_,n]))||!/^[a-f0-9]{64}$/.test(H)||!z.ok)return a("direct-yolo-replay-invalid");const _e=await de(e,i.projectRoot,n,H);if(!await ve(i.projectRoot,s,e.storyId,i.epicId,i.executionBranch,_e.transientAuthority,i.authorizedWriteSet))return a("direct-yolo-replay-invalid");if(!await fe(i.projectRoot,i.executionBranch,n,L))return a("direct-yolo-replay-head-raced");if(e.push&&!await De(i.projectRoot,e.remote??"origin",i.executionBranch,_))return a("direct-yolo-remote-head-mismatch");const le=Array.isArray(s.receiptRefs)?s.receiptRefs.find(ge=>typeof ge=="string"&&/^physical-lock-owner:[a-f0-9]{64}$/.test(ge)):void 0;return le&&typeof s.idempotencyKey=="string"&&await Je(i.projectRoot,{storyId:e.storyId,idempotencyKey:s.idempotencyKey,ownerDigest:le.slice(20)}),{ok:!0,value:s}}const h=n,c=await y(i.projectRoot,["rev-parse",`${h}^`]),d=await j(i.projectRoot,["show","--no-patch","--format=%B",h]),l=O(await j(i.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",h])),u=T(l,i.authorizedWriteSet,e.storyId,i.rootMemoryEffect);if(!u.ok)return a(u.reasonCode);i.rootMemoryEffect&&re(i.projectRoot,i.rootMemoryEffect,{storyId:e.storyId,executionBranch:i.executionBranch,baseSha:c,headRef:h,childPaths:i.authorizedWriteSet});const m=J(d,"Neocortex-Bundle-Digest"),S=J(d,"Neocortex-Graph-Revision"),v=J(d,"Neocortex-Claim-Revision"),x=new Map([["Neocortex-Story",e.storyId],["Neocortex-Epic",i.epicId],["Neocortex-Execution-Branch",i.executionBranch],["Neocortex-Prepared-Base",c],["Neocortex-Graph-Revision",i.graphRevision],["Neocortex-Claim-Revision",k([...i.authorizedWriteSet].sort().join("\0"))]]);if(!m||!/^[a-f0-9]{64}$/.test(m)||!S||!v||[...x].some(([_,H])=>J(d,_)!==H))return a("direct-yolo-trailers-invalid");const b=Q(i.projectRoot,e.storyId,h);if(b?.verdict!=="approved")return a("direct-yolo-review-artifact-not-approved");const D=J(d,"Neocortex-Review-Artifact-Digest");if(D!==void 0&&D!==b.digest)return a("direct-yolo-review-artifact-digest-mismatch");const A=k(await j(i.projectRoot,["diff","--binary","--full-index",`${c}..${h}`]));if(m!==A)return a("direct-yolo-bundle-digest-mismatch");const f=k(["direct-yolo-commit-v1",e.storyId,i.epicId,i.executionBranch,c,m,S,v].join("\0")),R=w(g.epics[i.epicId]?.branch_lease),p=K(e.nowIso),I=R?.ownerStoryId===e.storyId&&R.idempotencyKey===f&&R.sessionId===f&&Date.parse(String(R.expiresAt))>Date.now()?R:void 0;if(R&&Date.parse(String(R.expiresAt))>Date.now()&&!I)return a("direct-yolo-writer-active");const E=I??{schemaVersion:1,ownerStoryId:e.storyId,sessionId:f,idempotencyKey:f,acquiredAt:p,expiresAt:new Date(Date.parse(p)+ie).toISOString()},$=await V(i.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:f,idempotencyKey:f,expiresAt:String(E.expiresAt),persistent:!0,createdAt:String(E.acquiredAt)});if(!$.ok)return a($.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-integration-backpressure":"direct-yolo-integration-lock-failed");r=$,I||(g=(await P(i.projectRoot,H=>{const L=N(H,i.epicId),z=w(L.branch_lease);if(z&&Date.parse(String(z.expiresAt))>Date.parse(p))throw new Error("direct-yolo-writer-active");if(L.graph_revision!==i.graphRevision)throw new Error("direct-yolo-graph-revision-raced");L.branch_lease=E},{expectedRevision:g.revision})).document),o=E;{const _=await de(e,i.projectRoot,h,i.graphRevision);if(!await fe(i.projectRoot,i.executionBranch,h,l))return a("direct-yolo-head-raced");if(e.push){const z=ee(e.remote??"origin");if(await y(i.projectRoot,["push",z,i.executionBranch]),!await Ae(i.projectRoot,z,i.executionBranch,h))return a("direct-yolo-remote-head-mismatch")}const H=await be({projectRoot:i.projectRoot,storyId:e.storyId,epicId:i.epicId,executionBranch:i.executionBranch,baseSha:c,headSha:h,bundleDigest:m,graphRevision:S,claimRevision:v,idempotencyKey:f,qaExecution:_,physicalLockOwnerDigest:we($.owner),nowIso:K(e.nowIso),legacyReceiptRef:void 0,rootMemoryEffect:i.rootMemoryEffect});return await e.beforeCheckpointPersist?.(),await ke({projectRoot:i.projectRoot,checkpoint:H,remote:e.push?e.remote??"origin":void 0,expectedRevision:g.revision,expectedLease:E,expectedGraphRevision:i.graphRevision,physicalLockPath:$.path,physicalLockOwner:$.owner,transientAuthority:_.transientAuthority,authorizedWriteSet:i.authorizedWriteSet})?(await e.afterCheckpointPersist?.(),{ok:!0,value:H}):a("direct-yolo-checkpoint-persist-failed")}}catch(i){return a(Y(i,"direct-yolo-finalize-failed"))}finally{r&&await W(r.path,r.owner).catch(()=>{}),t&&o?await se(t.projectRoot,t.epicId,o).catch(()=>{}):t&&await rt(t,e.storyId).catch(()=>{})}}async function vt(e){try{const t=await F(e.projectRoot,e.storyId);if(!/^[a-f0-9]{40,64}$/.test(e.commitSha))return a("direct-yolo-recovery-commit-invalid");const o=await y(t.projectRoot,["rev-parse",e.commitSha]);if(Ge[e.storyId]!==o)return a("direct-yolo-recovery-not-allowlisted");if(await y(t.projectRoot,["rev-parse","HEAD"])!==o)return a("direct-yolo-recovery-head-mismatch");await y(t.projectRoot,["merge-base","--is-ancestor",o,`refs/heads/${t.executionBranch}`]);const r=await y(t.projectRoot,["rev-parse",`${o}^`]),i=await j(t.projectRoot,["diff","--binary","--full-index",`${r}..${o}`]),n=O(await j(t.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",o]));if(!T(n,t.authorizedWriteSet.length>0?t.authorizedWriteSet:n,e.storyId).ok)return a("direct-yolo-recovery-write-set-invalid");const s=k(i),h=k([...n].sort().join("\0")),c=k(["legacy-direct-yolo-recovery-v1",e.storyId,o].join("\0")),d=K(e.nowIso),l=new Date(Date.parse(d)+ie).toISOString(),u=await C(t.projectRoot,{required:!0}),m=await V(t.projectRoot,{kind:"direct",storyId:e.storyId,sessionId:c,idempotencyKey:c,expiresAt:l,persistent:!0,createdAt:d});if(!m.ok)return a(m.reasonCode==="git-lifecycle-integration-backpressure"?"direct-yolo-recovery-integration-backpressure":"direct-yolo-recovery-integration-lock-failed");const S={schemaVersion:1,ownerStoryId:e.storyId,sessionId:c,idempotencyKey:c,acquiredAt:d,expiresAt:l};let v=!1;try{const x=await P(t.projectRoot,p=>{const I=N(p,t.epicId),E=w(I.branch_lease);if(E&&Date.parse(String(E.expiresAt))>Date.parse(d)&&!ce(E,S))throw new Error("direct-yolo-recovery-writer-active");if(I.graph_revision!==t.graphRevision)throw new Error("direct-yolo-recovery-graph-raced");I.branch_mode="epic",I.execution_branch=t.executionBranch,I.origin_branch=t.originBranch,I.branch_lease=S},{expectedRevision:u.revision});v=!0;const b=await de(e,t.projectRoot,o,t.graphRevision);if(!await fe(t.projectRoot,t.executionBranch,o,n))return a("direct-yolo-recovery-head-raced");if(e.push){const p=ee(e.remote??"origin"),I=(await y(t.projectRoot,["ls-remote","--heads",p,`refs/heads/${t.executionBranch}`])).split(/\s+/)[0];if(!I||!await B(t.projectRoot,["merge-base","--is-ancestor",o,I]))return a("direct-yolo-recovery-remote-proof-missing")}const D=await be({projectRoot:t.projectRoot,storyId:e.storyId,epicId:t.epicId,executionBranch:t.executionBranch,baseSha:r,headSha:o,bundleDigest:s,graphRevision:t.graphRevision,claimRevision:h,idempotencyKey:c,qaExecution:b,physicalLockOwnerDigest:we(m.owner),nowIso:d,legacyReceiptRef:void 0}),A=await Ke(t.projectRoot,{storyId:e.storyId,epicId:t.epicId,executionBranch:t.executionBranch,baseSha:r,headSha:o,bundleDigest:s,graphRevision:t.graphRevision});if(!A)return a("direct-yolo-recovery-evidence-invalid");const f=Object.freeze({...D,receiptRefs:Object.freeze([...D.receiptRefs,A])});return await ke({projectRoot:t.projectRoot,checkpoint:f,remote:e.push?e.remote??"origin":void 0,remotePolicy:"ancestor-recovery",expectedRevision:x.document.revision,expectedLease:S,expectedGraphRevision:t.graphRevision,physicalLockPath:m.path,physicalLockOwner:m.owner,transientAuthority:b.transientAuthority,authorizedWriteSet:t.authorizedWriteSet})?{ok:!0,value:f}:a("direct-yolo-recovery-persist-failed")}finally{await W(m.path,m.owner).catch(()=>{}),v&&await se(t.projectRoot,t.epicId,S).catch(()=>{})}}catch(t){return a(Y(t,"direct-yolo-recovery-failed"))}}async function Se(e,t){if(!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(t))throw new Error("direct-yolo-story-id-invalid");const o=M(e),r=w(JSON.parse(await Z(te(o,".neocortex/state.json"),"utf8"))),i=await C(o,{required:!0}),n=Pe(r,i),g=w(n.stories),s=w(n.epics),h=w(g?.[t]),c=String(h?.epic_id??t.split(".")[0]),d=w(s?.[c]),l=String(d?.execution_branch??""),u=String(d?.origin_branch??""),m=String(d?.graph_revision??""),S=Array.isArray(h?.files_to_modify)?[...new Set(h.files_to_modify.filter(x=>typeof x=="string"&&ue(x)))].sort():[];if(!h)throw new Error("direct-yolo-story-state-missing");if(d?.branch_mode!=="epic")throw new Error("direct-yolo-branch-mode-invalid");if(!Be(l)||!await B(o,["check-ref-format","--branch",l]))throw new Error("direct-yolo-execution-branch-invalid");if(!Be(u)||!await B(o,["check-ref-format","--branch",u]))throw new Error("direct-yolo-origin-branch-invalid");if(!/^[a-f0-9]{64}$/.test(m))throw new Error("direct-yolo-graph-revision-invalid");const v=await qe({projectRoot:o,storyId:t,graphRevision:m,executionBranch:l,childPaths:S});return{projectRoot:o,storyId:t,story:h,epicId:c,executionBranch:l,originBranch:u,graphRevision:m,authorizedWriteSet:S,rootMemoryEffect:v}}async function F(e,t){const o=await Se(e,t);if(await y(o.projectRoot,["symbolic-ref","--quiet","--short","HEAD"])!==o.executionBranch)throw new Error("direct-yolo-current-branch-mismatch");return o}async function be(e){const t=e.nowIso,o=await j(e.projectRoot,["show","--no-patch","--format=%H%n%P%n%B",e.headSha]),r=O(await j(e.projectRoot,["diff-tree","--no-commit-id","--name-only","-r","-z",e.headSha])),i=ze({storyId:e.storyId,baseSha:e.baseSha,headSha:e.headSha,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,commitBody:o,changedPaths:r}),n=Ne({gitEvidenceDigest:i,headSha:e.headSha,graphRevision:e.graphRevision,manifestDigest:e.qaExecution.manifestDigest,gateIds:e.qaExecution.gateIds,resultDigest:e.qaExecution.resultDigest}),g=`story-qa:${n}`,s=Object.freeze({schemaVersion:1,kind:"story_qa_evidence",producer:"local-yolo-tdd",evidenceVersion:"p205-execution-v2",storyId:e.storyId,epicId:e.epicId,baseSha:e.baseSha,headSha:e.headSha,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,contract:e.qaExecution.contract,command:e.qaExecution.command,manifestDigest:e.qaExecution.manifestDigest,gateIds:e.qaExecution.gateIds,resultDigest:e.qaExecution.resultDigest,sourceEvidenceDigest:n,verdict:"passed",checkedAt:t,receiptRef:g}),h=Q(e.projectRoot,e.storyId,e.headSha);if(h?.verdict!=="approved")throw new Error("direct-yolo-review-artifact-not-approved");const c=k(["root-commit-range-review-v2",e.storyId,e.baseSha,e.headSha,e.bundleDigest,e.graphRevision,g,k(o),[...r].sort().join(","),h.digest].join("\0")),d=`story-review:${c}`,l=Object.freeze({schemaVersion:1,kind:"story_review_evidence",producer:"root-commit-range-review",storyId:e.storyId,epicId:e.epicId,baseSha:e.baseSha,headSha:e.headSha,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,sourceEvidenceDigest:c,reviewArtifactDigest:h.digest,qaReceiptRef:g,verdict:"approved",reviewedAt:t,receiptRef:d}),u=[`.neocortex/stories/${e.storyId}/qa-gate-result.json`,`.neocortex/stories/${e.storyId}/validation-evidence.md`,g,d,...e.physicalLockOwnerDigest?[`physical-lock-owner:${e.physicalLockOwnerDigest}`]:[],...e.legacyReceiptRef?[e.legacyReceiptRef]:[]];return Object.freeze({schemaVersion:1,storyId:e.storyId,epicId:e.epicId,branch:e.executionBranch,baseSha:e.baseSha,headSha:e.headSha,commits:Object.freeze([e.headSha]),idempotencyKey:e.idempotencyKey,bundleDigest:e.bundleDigest,graphRevision:e.graphRevision,claimRevision:e.claimRevision,receiptRefs:Object.freeze(u),qaVerdict:"passed",reviewVerdict:"approved",qaReceipt:s,reviewReceipt:l,recordedAt:t,...e.rootMemoryEffect?{rootMemoryEffect:e.rootMemoryEffect}:{}})}async function ke(e){const{projectRoot:t,checkpoint:o,remote:r}=e;let i=!1;return await P(t,n=>{const g=N(n,o.epicId);if(e.expectedLease){const d=w(g.branch_lease);if(!ce(d,e.expectedLease))throw new Error("direct-yolo-runtime-revision-conflict");if(Date.parse(String(d?.expiresAt))<=Date.now())throw new Error("direct-yolo-writer-lease-expired");if(g.graph_revision!==e.expectedGraphRevision||o.graphRevision!==e.expectedGraphRevision)throw new Error("direct-yolo-graph-revision-raced")}const s=Re(n,o.storyId),h=w(s.checkpoint);if(h&&h.headSha!==o.headSha){i=!0;return}s.checkpoint=o,s.status="done",s.last_step=xe;const c=Array.isArray(s.steps_completed)?s.steps_completed.filter(d=>typeof d=="string"):[];s.steps_completed=[...new Set([...c,Ze,xe])],g.branch_lease=null},{expectedRevision:e.expectedRevision,preCommit:async()=>{if(i)throw new Error("direct-yolo-checkpoint-conflict");if(await y(t,["symbolic-ref","--quiet","--short","HEAD"])!==o.branch||await y(t,["rev-parse","HEAD"])!==o.headSha)throw new Error("direct-yolo-checkpoint-head-raced");if(!await ve(t,o,o.storyId,o.epicId,o.branch,e.transientAuthority,e.authorizedWriteSet))throw new Error("direct-yolo-checkpoint-physical-invalid");if(e.physicalLockPath&&e.physicalLockOwner&&!await U(e.physicalLockPath,e.physicalLockOwner))throw new Error("direct-yolo-integration-lock-raced");if(r&&!(e.remotePolicy==="ancestor-recovery"?await De(t,r,o.branch,o.headSha):await Ae(t,r,o.branch,o.headSha)))throw new Error("direct-yolo-checkpoint-remote-raced")}}),!i}async function De(e,t,o,r){const i=ee(t),n=(await y(e,["ls-remote","--heads",i,`refs/heads/${o}`])).split(/\s+/)[0];return!!(n&&await B(e,["merge-base","--is-ancestor",r,n]))}function ne(e,t,o){return!!(e?.ownerStoryId===t&&e.sessionId===e.idempotencyKey&&typeof e.idempotencyKey=="string"&&/^setup-[a-f0-9]{64}$/.test(e.idempotencyKey)&&typeof e.expiresAt=="string"&&Date.parse(e.expiresAt)>Date.parse(o))}async function je(e,t){const o=await Te(e),r=await Me(o,"handoffs"),i=`direct-${k(t)}.json`;return{parent:r,name:i,path:te(r,i)}}async function ae(e,t){const o=await je(e,t.storyId);await Ye(o.parent,o.name,`${JSON.stringify(t,null,2)}
+`),await Ie(o.path,o.parent)}async function G(e,t){try{const o=await je(e,t);await Ie(o.path,o.parent);const r=JSON.parse(await Z(o.path,"utf8")),i=r.state==="issued"?["schemaVersion","kind","state","storyId","fromSessionId","token","tokenDigest","bundleDigest","claimRevision","grantDigest","expiresAt"]:r.state==="consuming"?["schemaVersion","kind","state","storyId","fromSessionId","token","tokenDigest","bundleDigest","claimRevision","grantDigest","expiresAt","consumedBySessionId","consumeStartedAt"]:["schemaVersion","kind","state","storyId","fromSessionId","tokenDigest","bundleDigest","claimRevision","grantDigest","expiresAt","consumedBySessionId","consumedAt"];return Object.keys(r).sort().join("\0")!==[...i].sort().join("\0")||r.schemaVersion!==1||r.kind!=="direct-yolo-setup-handoff-token"||r.state!=="issued"&&r.state!=="consuming"&&r.state!=="consumed"||r.storyId!==t||typeof r.fromSessionId!="string"||!/^setup-[a-f0-9]{64}$/.test(r.fromSessionId)||![r.tokenDigest,r.bundleDigest,r.claimRevision,r.grantDigest].every(n=>typeof n=="string"&&/^[a-f0-9]{64}$/.test(n))||typeof r.expiresAt!="string"||!Number.isFinite(Date.parse(r.expiresAt))||(r.state==="issued"||r.state==="consuming")&&(typeof r.token!="string"||!/^[A-Za-z0-9_-]{32,256}$/.test(r.token))||r.state==="consuming"&&(typeof r.consumedBySessionId!="string"||!/^[a-f0-9]{64}$/.test(r.consumedBySessionId)||typeof r.consumeStartedAt!="string"||!Number.isFinite(Date.parse(r.consumeStartedAt)))||r.state==="consumed"&&(typeof r.consumedBySessionId!="string"||!/^[a-f0-9]{64}$/.test(r.consumedBySessionId)||typeof r.consumedAt!="string"||!Number.isFinite(Date.parse(r.consumedAt)))?void 0:r}catch{return}}async function Qe(e,t,o,r,i){const n=await G(e,t);if(!(!n||n.state==="consumed"||!n.token||n.bundleDigest!==o||n.claimRevision!==r||Date.parse(n.expiresAt)<=Date.parse(i)||k(n.token)!==n.tokenDigest))return{sessionId:n.fromSessionId,token:n.token}}async function Ue(e,t,o,r,i,n){const g=await G(e,t);if(!g||g.state==="consumed"||g.fromSessionId!==o||g.token!==r||g.tokenDigest!==k(r))throw new Error("direct-yolo-setup-handoff-consume-invalid");if(g.state==="consuming"){if(g.consumedBySessionId!==i)throw new Error("direct-yolo-setup-handoff-consume-raced");return}await ae(e,{...g,state:"consuming",consumedBySessionId:i,consumeStartedAt:n})}async function Xe(e,t,o,r,i,n,g,s,h){const c=await G(e,o);if(c?.state==="consumed"&&c.fromSessionId===r&&c.consumedBySessionId===s)return;const d=await C(e,{required:!0}),l=w(d.epics[t]?.branch_lease),u=w(l?.handoffConsumption);if(!c||c.state!=="consuming"||c.fromSessionId!==r||c.token!==i||c.tokenDigest!==k(i)||c.bundleDigest!==n||c.claimRevision!==g||c.consumedBySessionId!==s||l?.ownerStoryId!==o||l.sessionId!==s||u?.kind!=="direct-yolo-setup-handoff-consumption"||u.state!=="consumed"||u.fromSessionId!==r||u.tokenDigest!==c.tokenDigest||u.bundleDigest!==n||u.claimRevision!==g||u.consumedBySessionId!==s)throw new Error("direct-yolo-setup-handoff-consume-invalid");try{await ae(e,{schemaVersion:1,kind:c.kind,state:"consumed",storyId:o,fromSessionId:r,tokenDigest:c.tokenDigest,bundleDigest:c.bundleDigest,claimRevision:c.claimRevision,grantDigest:c.grantDigest,expiresAt:c.expiresAt,consumedBySessionId:s,consumedAt:h})}catch{throw new Error("direct-yolo-setup-handoff-consume-persist-failed")}}function et(e){const t=w(e.current?.handoffGrant),o=e.handoff?.token,r=typeof o=="string"&&/^[A-Za-z0-9_-]{32,256}$/.test(o)?k(o):void 0;return!!(t&&r&&e.handoff&&e.handoff.sessionId===e.current?.sessionId&&t.schemaVersion===1&&t.kind==="direct-yolo-setup-handoff"&&t.storyId===e.storyId&&t.fromSessionId===e.current?.sessionId&&t.bundleDigest===e.bundleDigest&&t.claimRevision===e.claimRevision&&typeof t.expiresAt=="string"&&Date.parse(t.expiresAt)>Date.parse(e.nowIso)&&typeof t.tokenDigest=="string"&&/^[a-f0-9]{64}$/.test(t.tokenDigest)&&tt(t.tokenDigest,r))}function tt(e,t){const o=Buffer.from(e,"hex"),r=Buffer.from(t,"hex");return o.length===32&&r.length===32&&Ce(o,r)}function ce(e,t){return!!(e&&["schemaVersion","ownerStoryId","sessionId","idempotencyKey","acquiredAt","expiresAt"].every(o=>e[o]===t[o]))}async function se(e,t,o){await P(e,r=>{const i=N(r,t),n=w(i.branch_lease);ce(n,o)&&(i.branch_lease=null)})}async function rt(e,t){const o=await C(e.projectRoot,{required:!0}),r=w(o.epics[e.epicId]?.branch_lease);if(!r||r.ownerStoryId!==t||!Ee(r.sessionId)||!Ee(r.idempotencyKey)||!Number.isFinite(Date.parse(String(r.acquiredAt)))||!Number.isFinite(Date.parse(String(r.expiresAt))))return;const i=await V(e.projectRoot,{kind:"direct",storyId:t,sessionId:String(r.sessionId),idempotencyKey:String(r.idempotencyKey),createdAt:String(r.acquiredAt),expiresAt:String(r.expiresAt),persistent:!0});if(!i.ok)return;await W(i.path,i.owner)&&await se(e.projectRoot,e.epicId,r)}async function de(e,t,o,r){const i=await Ve(t,{headSha:o,graphRevision:r,nowIso:e.nowIso});await e.qaRunner?.({projectRoot:t,storyId:e.storyId,headSha:o});const n=We(i);if(!n)throw new Error("p205-transient-authority-invalid");return{contract:"P205-CI-02",command:Fe,manifestDigest:n.manifestDigest,gateIds:n.gateIds,resultDigest:n.resultDigest,transientAuthority:i}}async function fe(e,t,o,r){return await y(e,["rev-parse","HEAD"])!==o||await y(e,["symbolic-ref","--quiet","--short","HEAD"])!==t||!await B(e,["diff","--cached","--quiet"])?!1:B(e,["diff","--quiet","HEAD","--",...r])}async function Ae(e,t,o,r){const i=ee(t);return(await y(e,["ls-remote","--heads",i,`refs/heads/${o}`])).split(/\s+/)[0]===r}function T(e,t,o,r){if(e.length===0||e.some(n=>!ue(n)))return{ok:!1,reasonCode:"direct-yolo-write-set-invalid"};const i=[".neocortex/state.json",`docs/stories/${o}.story.md`,`.neocortex/stories/${o}/qa-gate-result.json`,`.neocortex/stories/${o}/validation-evidence.md`,`.neocortex/stories/${o}/review.md`];return!i.every(n=>e.includes(n))||!i.every(n=>t.includes(n))?{ok:!1,reasonCode:"direct-yolo-write-set-invalid"}:r&&(r.storyId!==o||r.childClaimRevision!==k([...t].sort().join("\0")))?{ok:!1,reasonCode:"direct-yolo-root-memory-claim-mismatch"}:e.some(n=>!t.includes(n)&&!r?.files.some(g=>g.path===n))?{ok:!1,reasonCode:"direct-yolo-write-set-unauthorized"}:{ok:!0}}function ue(e){return e.length>0&&e.length<=1024&&!e.startsWith("/")&&!e.includes("\\")&&!e.split("/").includes("..")&&!e.startsWith(".git/")&&!e.includes("\0")}function Ee(e){return typeof e=="string"&&e.length>0&&e.length<=512&&/^[A-Za-z0-9._:@/+\-=]+$/.test(e)}function Be(e){return e.length>0&&e.length<=240&&!e.startsWith("-")&&!/[\s~^:?*[\\]/.test(e)&&!e.includes("..")}function ee(e){if(!/^[A-Za-z0-9._-]{1,128}$/.test(e))throw new Error("direct-yolo-remote-invalid");return e}function J(e,t){const o=`${t}: `,r=e.split(`
+`).map(i=>i.trim()).filter(i=>i.startsWith(o)).map(i=>i.slice(o.length));return r.length===1?r[0]:void 0}function k(e){return Le("sha256").update(e).digest("hex")}function O(e){return e.split("\0").filter(Boolean)}function K(e){return e&&Number.isFinite(Date.parse(e))?new Date(Date.parse(e)).toISOString():new Date().toISOString()}function w(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function ot(e,t,o,r,i){const n=w(e.expectedLease),g=n?.sessionId,s=Date.parse(String(n?.expiresAt??""));return e.schemaVersion===1&&Number.isSafeInteger(e.expectedRuntimeRevision)&&e.expectedRuntimeRevision===t&&!!o&&JSON.stringify(o)===JSON.stringify(n)&&n?.schemaVersion===1&&n.ownerStoryId===r&&typeof g=="string"&&/^setup-[a-f0-9]{64}$/.test(g)&&n.idempotencyKey===g&&Number.isFinite(s)&&s<=i}async function it(e,t){let o=await y(e,["symbolic-ref","--quiet","--short","HEAD"]);if(o===t.executionBranch){if(await y(e,["rev-parse","HEAD"])!==t.originHead||await q(e)!==t.checkoutBefore)return;await y(e,["switch",t.originBranch]),o=t.originBranch}if(o!==t.originBranch||await y(e,["rev-parse","HEAD"])!==t.originHead||await q(e)!==t.checkoutBefore||t.executionHead===t.originHead||!await B(e,["show-ref","--verify","--quiet",t.executionRef]))return;await y(e,["rev-parse",t.executionRef])===t.originHead&&await y(e,["update-ref",t.executionRef,t.executionHead,t.originHead])}function he(e,t,o){const r=w(e);if(!(!r||r.schemaVersion!==1||r.originBranch!==o||r.executionBranch!==t||r.capturedFromCurrentCheckout!==!0||typeof r.originHeadSha!="string"||!/^[a-f0-9]{40,64}$/.test(r.originHeadSha)||typeof r.capturedAt!="string"||!Number.isFinite(Date.parse(r.capturedAt))))return r}function pe(e,t,o,r){return Object.freeze({schemaVersion:1,kind:"direct-yolo-setup-receipt",storyId:e.storyId,epicId:e.epicId,executionBranch:e.executionBranch,originBranch:e.originBranch,originHeadSha:t.originHeadSha,leaseExpiresAt:o,reused:r,publicSafe:!0})}async function q(e){const t=O(await j(e,["ls-files","--others","--exclude-standard","-z"])).sort(),o=await Promise.all(t.map(async r=>{if(!ue(r))throw new Error("direct-yolo-checkout-payload-invalid");return`${r}\0${await y(e,["hash-object","--no-filters","--",r])}`}));return k([await j(e,["diff","--cached","--binary","--full-index"]),await j(e,["diff","--binary","--full-index"]),await j(e,["status","--porcelain=v1","-z","--untracked-files=all"]),...o].join("\0"))}async function xt(e){const t=M(e),o=await y(t,["rev-parse","HEAD"]),r=await y(t,["symbolic-ref","--quiet","--short","HEAD"]),i=await q(t);if(await y(t,["rev-parse","HEAD"])!==o||await y(t,["symbolic-ref","--quiet","--short","HEAD"])!==r)throw new Error("direct-yolo-checkout-observation-raced");return Object.freeze({headSha:o,branch:r,payloadDigest:i})}async function ye(e){const t=[];let o;for(const r of(await j(e,["worktree","list","--porcelain"])).split(`
+`))r.startsWith("worktree ")?(o={path:r.slice(9)},t.push(o)):o&&r.startsWith("branch refs/heads/")&&(o.branch=r.slice(18));return t}function Y(e,t){return e instanceof Error&&e.message==="git-lifecycle-runtime-revision-conflict"?"direct-yolo-runtime-revision-conflict":e instanceof Error&&/^direct-yolo-[a-z0-9-]+$/.test(e.message)?e.message:t}function a(e){return{ok:!1,reasonCode:e}}async function y(e,t){return String((await oe("git",[...t],{cwd:e,encoding:"utf8",maxBuffer:32*1024*1024})).stdout).trim()}async function j(e,t){return String((await oe("git",[...t],{cwd:e,encoding:"utf8",maxBuffer:32*1024*1024})).stdout)}async function B(e,t){try{return await oe("git",[...t],{cwd:e,maxBuffer:8*1024*1024}),!0}catch{return!1}}export{mt as acceptDirectYoloSetupCheckpoint,Rt as beginDirectYoloStoryCommit,xt as captureDirectYoloCheckoutEvidence,It as finalizeDirectYoloStoryCheckpoint,wt as issueDirectYoloSetupLeaseHandoff,gt as prepareDirectYoloSetup,vt as recoverLegacyDirectYoloStoryCheckpoint};