@ornexus/neocortex 4.60.73 → 4.60.75

package/packages/client/dist/git/git-lifecycle-store.js

@@ -1,1981 +1,10 @@
-/**
- * Durable runtime evidence for root-owned Git lifecycle operations.
- *
- * The document lives in a private Neocortex-owned directory below the Git
- * common-dir, so it is shared by manually-created worktrees but is never part
- * of a story commit. The common-dir itself may legitimately be group-writable;
- * authority comes from the private child directory and fresh physical checks.
- */
-import { execFile, execFileSync } from 'node:child_process';
-import { createHash, randomBytes } from 'node:crypto';
-import { lstat, open, readFile, realpath, stat } from 'node:fs/promises';
-import { existsSync, lstatSync, readFileSync, realpathSync } from 'node:fs';
-import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
-import { promisify } from 'node:util';
-import { publicWriteSet } from '../../../shared/dist/yoloop/public-story-write-set.js';
-import { isRootProjectMemoryEffect } from '../private-execution/shared-root-memory-types.js';
-import { verifyRootMemoryPhysicalWriteSet } from '../private-execution/root-memory-git-evidence.js';
-import { resolveBranchUnit, } from '../../../shared/dist/yoloop/branch-unit.js';
-import { anchoredAtomicWriteFile, anchoredCreateOwnedDirectory, anchoredEnsureDirectory, anchoredExecuteGit, anchoredExecuteNode, anchoredRemoveDirectory, anchoredRenameDirectory, } from './secure-filesystem-boundary.js';
-import { GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID, GIT_LIFECYCLE_REVIEW_PR_STEP_ID, GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID, } from './git-lifecycle-step-ids.js';
-const execFileAsync = promisify(execFile);
-export const GIT_LIFECYCLE_RUNTIME_DIRECTORY = 'neocortex-yoloop';
-export const GIT_LIFECYCLE_RUNTIME_FILE = 'runtime.json';
-export const P205_COMPLETE_COMMAND = 'node scripts/test-root.mjs --gate complete';
-export const LEGACY_DIRECT_YOLO_RECOVERY_COMMITS = Object.freeze({
-    'P174.03.029264': '339141be7339a0edf55710cbccb6e6558f514792',
-});
-/**
- * Exact immutable bindings for the seven P174 checkpoints predating P205-v2.
- * This table is only an allowlist: every value is recomputed from Git and the
- * independent QA/review receipts before a fresh aggregate P205 may migrate it.
- */
-export const LEGACY_P174_CHECKPOINT_MIGRATIONS = Object.freeze({
-    'P174.03.811759': Object.freeze({ baseSha: '749c8fc732deaf26c81a8e08cc94b83c8cf0f5ba', headSha: '84162456d9cbe5000ffd0ed3eb3d0e88cfeba499', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2', commitBodyDigest: 'b4fc759a49765fd8c0b3d0f5d1c333c2a4bf28d324e83eedabb12f9530df3738', changedPathsDigest: '11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2', qaDigest: 'f1100775e21f5d0d990f77303a2a06d936908f016983e32a63316d81aee6b9fc', reviewDigest: '50400bbcddb6f02408837cf99077de5d3af8c84822ab23a8b5499c338af7103a' }),
-    'P174.03.685003': Object.freeze({ baseSha: '84162456d9cbe5000ffd0ed3eb3d0e88cfeba499', headSha: '272a7fee89e4b9324d35701df1c83b671fa96299', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641', commitBodyDigest: 'e97966e26ce3ba31d5951b9fdac67808c88c1fd8be7ec1e73982f3f1cc7ffd81', changedPathsDigest: '6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641', qaDigest: '7439329a93321f39fb6b0de0a41c22e58373a399f9048e362dff4ffa6f1a7d89', reviewDigest: '1b2d12262e84acf9da7d06149a0effb11274ebdc986affbfd47635b855ec7135' }),
-    'P174.03.029264': Object.freeze({ baseSha: '272a7fee89e4b9324d35701df1c83b671fa96299', headSha: '339141be7339a0edf55710cbccb6e6558f514792', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab', commitBodyDigest: '0f269a00dcd168a6f548ff10dfa667b193c948ac9c7211f5cb11a0561757c371', changedPathsDigest: '1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab', qaDigest: 'ef0fd2c6e216557825cd8521ccb2f9960a3af48f18e7a5ada441bee8bfda400b', reviewDigest: '372d0f4a2f32978c8b39f20167637b3917187edb75d49875e93200c4c5a19d0d' }),
-    'P174.03.913359': Object.freeze({ baseSha: '339141be7339a0edf55710cbccb6e6558f514792', headSha: '4ccc90b85c49b27f718090bf25bc452f1b84e5e3', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5', commitBodyDigest: '89a6653197509e75246a758d2706876b337770571a1cac47d9d85ec96c196459', changedPathsDigest: '12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5', qaDigest: 'c7d3762ad30e4f9356243df17a1dd7123cbf1b660808d68176f44d1cd5da6449', reviewDigest: 'e4ecf577e174fd66f31aa4a0113ab672ced16b12ee531f6831aa533795145ba1' }),
-    'P174.03.724350': Object.freeze({ baseSha: '4ccc90b85c49b27f718090bf25bc452f1b84e5e3', headSha: '568e9464fb086304146b9eb4594281f91302aef1', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: 'c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe', commitBodyDigest: 'b3032338bfcd6c9dc460e9426220a1966dedeff9968c4064fdd36a315560721b', changedPathsDigest: 'c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe', qaDigest: '91f2f5b00935b1b04bb5d400df500cbc97c412072078b713c6e5ba8fda669bd0', reviewDigest: '9bc92069d3b3a76cc8b02d339d432690258be1376464b69e152ed8fd3d682f05' }),
-    'P174.03.011976': Object.freeze({ baseSha: '568e9464fb086304146b9eb4594281f91302aef1', headSha: '195599b1a99a99a8416c4c26c9ab9990847338a4', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21', commitBodyDigest: 'b8a28392fac663dd614b695a49c894b7cab116d45722a42850e3b24e2aaf36f4', changedPathsDigest: '49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21', qaDigest: '6eb4459a7d80c4a268fc931297e8156ed2a320584f8775f0787d91b42c0929d4', reviewDigest: '98b21de29f7cceeec73da19000c6c144395cce6eb699c6a82dfab505d4ab7b44' }),
-    'P174.03.686659': Object.freeze({ baseSha: '195599b1a99a99a8416c4c26c9ab9990847338a4', headSha: '0db3681a5dad4e25ce37d967c636eb9d54915556', graphRevision: '60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445', effectiveClaimRevision: '5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e', commitBodyDigest: '143257f4018ad773afc0c7280bd8aab8786851a9c20b65f8110881ff54656839', changedPathsDigest: '5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e', qaDigest: '6303dbf473e2815a3671aeb2c25528d8daba484b92a5a40d1eea5215e1f6763e', reviewDigest: '1bd6695846ed9340c8677cfa9b573880532187aeee487efaaa70577a0c94e7f2' }),
-});
-const LEGACY_STORE_FILE = 'neocortex-yoloop-runtime.json';
-const LOCK_DIRECTORY = 'runtime.lock';
-const TRANSIENT_P205_AUTHORITIES = new WeakMap();
-export async function executeP205TransientAuthority(projectRoot, input) {
-    const authorities = await executeP205TransientAuthorities(projectRoot, {
-        headSha: input.headSha,
-        graphRevisions: [input.graphRevision],
-        ...(input.nowIso !== undefined ? { nowIso: input.nowIso } : {}),
-        ...(input.anchoredWorkspace !== undefined ? { anchoredWorkspace: input.anchoredWorkspace } : {}),
-    });
-    return authorities.get(input.graphRevision);
-}
-/**
- * Execute the physical P205 gate once for one immutable HEAD and mint a
- * separate opaque authority for every historical graph epoch accepted at that
- * HEAD. The graph revision remains part of each evidence digest; only the
- * expensive, graph-independent command execution is shared.
- */
-export async function executeP205TransientAuthorities(projectRoot, input) {
-    const graphRevisions = [...new Set(input.graphRevisions)];
-    if (!isSha(input.headSha) || graphRevisions.length === 0 || graphRevisions.some((value) => !isHash(value))) {
-        throw new Error('p205-transient-binding-invalid');
-    }
-    const anchor = input.anchoredWorkspace;
-    if (anchor && resolve(projectRoot) !== join(resolve(anchor.parent), anchor.name)) {
-        throw new Error('p205-transient-anchor-binding-invalid');
-    }
-    const runGit = async (args) => anchor
-        ? (await anchoredExecuteGit(anchor.parent, anchor.name, anchor.identity, args)).toString('utf8')
-        : String((await execFileAsync('git', [...args], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 8 * 1024 * 1024 })).stdout);
-    const readProducer = async () => {
-        if (anchor)
-            return JSON.parse((await anchoredExecuteNode(anchor.parent, anchor.name, anchor.identity, [
-                '-e', "const fs=require('node:fs');process.stdout.write(JSON.stringify({manifest:fs.readFileSync('config/release-gates.v2.json','utf8'),runner:fs.readFileSync('scripts/test-root.mjs','utf8')}));",
-            ])).toString('utf8'));
-        return { manifest: await readFile(join(projectRoot, 'config', 'release-gates.v2.json'), 'utf8'),
-            runner: await readFile(join(projectRoot, 'scripts', 'test-root.mjs'), 'utf8') };
-    };
-    const beforeHead = (await runGit(['rev-parse', 'HEAD'])).trim();
-    if (beforeHead !== input.headSha)
-        throw new Error('p205-transient-head-mismatch');
-    const { manifest: manifestRaw, runner: runnerRaw } = await readProducer();
-    const [committedManifest, committedRunner] = await Promise.all([
-        runGit(['show', `${input.headSha}:config/release-gates.v2.json`]),
-        runGit(['show', `${input.headSha}:scripts/test-root.mjs`]),
-    ]);
-    if (manifestRaw !== committedManifest || runnerRaw !== committedRunner) {
-        throw new Error('p205-transient-producer-dirty');
-    }
-    const manifest = JSON.parse(manifestRaw);
-    const gateIds = Array.isArray(manifest.requiredCompleteClasses)
-        ? manifest.requiredCompleteClasses.filter((item) => typeof item === 'string' && /^[a-z0-9-]+$/.test(item))
-        : [];
-    if (manifest.contract !== 'P205-CI-02' || gateIds.length === 0)
-        throw new Error('p205-transient-manifest-invalid');
-    const gateEnv = { ...process.env };
-    delete gateEnv.NEOCORTEX_PROFILE_DIR;
-    const output = anchor
-        ? (await anchoredExecuteNode(anchor.parent, anchor.name, anchor.identity, ['scripts/test-root.mjs', '--gate', 'complete'])).toString('utf8')
-        : String((await execFileAsync(process.execPath, ['scripts/test-root.mjs', '--gate', 'complete'], {
-            cwd: projectRoot, encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, env: gateEnv,
-        })).stdout);
-    const { manifest: afterManifest, runner: afterRunner } = await readProducer();
-    if (afterManifest !== manifestRaw || afterRunner !== runnerRaw) {
-        throw new Error('p205-transient-producer-raced');
-    }
-    const afterHead = (await runGit(['rev-parse', 'HEAD'])).trim();
-    if (afterHead !== input.headSha)
-        throw new Error('p205-transient-head-raced');
-    const manifestDigest = createHash('sha256').update(manifestRaw).digest('hex');
-    const resultDigest = createHash('sha256').update(output).digest('hex');
-    const executedAt = normalizedIso(input.nowIso ?? new Date().toISOString());
-    const authorities = new Map();
-    const frozenGateIds = Object.freeze(gateIds);
-    for (const graphRevision of graphRevisions) {
-        const executionEvidenceDigest = createHash('sha256').update([
-            'p205-transient-execution-v1', P205_COMPLETE_COMMAND, input.headSha, graphRevision,
-            manifestDigest, gateIds.join(','), resultDigest, executedAt,
-        ].join('\0')).digest('hex');
-        const evidence = Object.freeze({
-            schemaVersion: 1, kind: 'p205_transient_execution_authority',
-            contract: 'P205-CI-02', command: P205_COMPLETE_COMMAND,
-            executionHeadSha: input.headSha, graphRevision,
-            manifestDigest, gateIds: frozenGateIds, resultDigest, executedAt,
-            executionEvidenceDigest,
-        });
-        const authority = Object.freeze(Object.create(null));
-        TRANSIENT_P205_AUTHORITIES.set(authority, evidence);
-        authorities.set(graphRevision, authority);
-    }
-    return authorities;
-}
-export async function readGitLifecycleRuntime(projectRoot, options = {}) {
-    const storePath = await runtimeStorePath(projectRoot);
-    return readDocument(storePath, options);
-}
-export function readGitLifecycleRuntimeSync(projectRoot, options = {}) {
-    let path;
-    try {
-        const commonDir = execFileSync('git', ['rev-parse', '--git-common-dir'], {
-            cwd: projectRoot,
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'ignore'],
-        }).trim();
-        const canonicalRoot = realpathSync(projectRoot);
-        const absolute = isAbsolute(commonDir) ? resolve(commonDir) : resolve(canonicalRoot, commonDir);
-        const canonicalCommonDir = realpathSync(absolute);
-        if (canonicalCommonDir !== absolute)
-            throw new Error('git-lifecycle-common-dir-symlink');
-        assertCommonDirectoryEntrySync(canonicalCommonDir);
-        const runtimeDirectory = join(canonicalCommonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
-        const currentPath = join(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE);
-        if (existsSync(runtimeDirectory)) {
-            assertSafeFilesystemEntrySync(runtimeDirectory, 'directory');
-            if (realpathSync(runtimeDirectory) !== runtimeDirectory)
-                throw new Error('git-lifecycle-runtime-directory-symlink');
-        }
-        path = existsSync(currentPath) ? currentPath : join(canonicalCommonDir, LEGACY_STORE_FILE);
-    }
-    catch {
-        if (options.required)
-            throw new Error('git-lifecycle-common-dir-invalid');
-        return emptyDocument();
-    }
-    if (!existsSync(path)) {
-        if (options.required)
-            throw new Error('git-lifecycle-runtime-missing');
-        return emptyDocument();
-    }
-    assertSafeFilesystemEntrySync(path, 'file');
-    return validateDocument(JSON.parse(readFileSync(path, 'utf8')));
-}
-/**
- * Materialize the private lifecycle sidecar for repositories that already
- * declare the epic-branch contract in tracked state but predate the sidecar.
- * Missing state is the only recoverable condition: corrupt, substituted or
- * permission-unsafe paths continue to fail closed.
- */
-export async function ensureGitLifecycleRuntimeInitialized(projectRoot) {
-    try {
-        await readGitLifecycleRuntime(projectRoot, { required: true });
-        return;
-    }
-    catch (error) {
-        if (!(error instanceof Error) || error.message !== 'git-lifecycle-runtime-missing')
-            throw error;
-    }
-    try {
-        await mutateGitLifecycleRuntime(projectRoot, () => undefined, { expectedRevision: 0 });
-    }
-    catch (error) {
-        // Concurrent first-use initialization is idempotent. Accept only a proven
-        // winning document; every other filesystem or validation error propagates.
-        if (!(error instanceof Error) || error.message !== 'git-lifecycle-runtime-revision-conflict')
-            throw error;
-        await readGitLifecycleRuntime(projectRoot, { required: true });
-    }
-}
-function isLiveSameStorySetupLease(lease, storyId, nowMs) {
-    if (!lease || lease.ownerStoryId !== storyId)
-        return false;
-    const sessionId = typeof lease.sessionId === 'string' ? lease.sessionId : '';
-    const expiresAt = Date.parse(String(lease.expiresAt));
-    return /^setup-[a-f0-9]{64}$/.test(sessionId)
-        && lease.idempotencyKey === sessionId
-        && Number.isFinite(expiresAt)
-        && expiresAt > nowMs;
-}
-/**
- * Close the server-plan -> client -> P207 sidecar handoff. The authority is
- * accepted only for the exact tracked epic/story/branch projection that the
- * server selected. A genuinely new epic may bootstrap its deterministic
- * `epic/<ID>` unit into the private sidecar after the complete tracked topology
- * proves there is no legacy story Git progress. Tracked-state drift, explicit
- * lifecycle conflicts and sidecar revision races fail closed; no tracked,
- * staged or working-tree bytes are modified.
- */
-export async function persistGitLifecycleGraphAuthority(projectRoot, authority, nowIso = new Date().toISOString()) {
-    if (!isGitLifecycleGraphAuthority(authority))
-        throw new Error('git-lifecycle-graph-authority-invalid');
-    const trackedPath = join(resolve(projectRoot), '.neocortex', 'state.json');
-    const trackedRaw = await readFile(trackedPath, 'utf8');
-    const tracked = asRecord(JSON.parse(trackedRaw));
-    if (!tracked)
-        throw new Error('git-lifecycle-tracked-state-invalid');
-    // An absent sidecar is the normal first-use state for a new epic. Reading
-    // without `required` yields revision zero while corrupt/unsafe stores still
-    // fail closed. The authenticated authority mutation below materializes the
-    // sidecar only after every tracked-state invariant has passed.
-    const runtime = await readGitLifecycleRuntime(projectRoot);
-    const effective = applyGitLifecycleRuntimeOverlay(tracked, runtime);
-    const epic = asRecord(asRecord(effective.epics)?.[authority.epicId]);
-    const story = asRecord(asRecord(effective.stories)?.[authority.storyId]);
-    if (!epic)
-        throw new Error('git-lifecycle-graph-authority-epic-invalid');
-    if (!story || String(story.epic_id ?? authority.storyId.split('.')[0]) !== authority.epicId) {
-        throw new Error('git-lifecycle-graph-authority-story-invalid');
-    }
-    const declaredStoryIds = Array.isArray(epic.stories)
-        ? epic.stories.filter((value) => typeof value === 'string')
-        : Object.keys(asRecord(effective.stories) ?? {}).filter((storyId) => {
-            const candidate = asRecord(asRecord(effective.stories)?.[storyId]);
-            return String(candidate?.epic_id ?? storyId.split('.')[0]) === authority.epicId;
-        });
-    if (Array.isArray(epic.stories) && !declaredStoryIds.includes(authority.storyId)) {
-        throw new Error('git-lifecycle-graph-authority-story-invalid');
-    }
-    const branchStories = declaredStoryIds.map((storyId) => {
-        const candidate = asRecord(asRecord(effective.stories)?.[storyId]) ?? {};
-        return {
-            id: storyId,
-            branch_name: typeof candidate.branch_name === 'string' || candidate.branch_name === null
-                ? candidate.branch_name : undefined,
-            pr_number: typeof candidate.pr_number === 'number' || candidate.pr_number === null
-                ? candidate.pr_number : undefined,
-            steps_completed: Array.isArray(candidate.steps_completed)
-                ? candidate.steps_completed.filter((value) => typeof value === 'string') : [],
-            checkpoint: asRecord(candidate.checkpoint),
-        };
-    });
-    const branchUnit = resolveBranchUnit({ ...epic, id: authority.epicId }, branchStories);
-    if (branchUnit.mode !== 'epic')
-        throw new Error('git-lifecycle-graph-authority-epic-invalid');
-    if (branchUnit.executionBranch !== authority.executionBranch) {
-        throw new Error('git-lifecycle-graph-authority-branch-mismatch');
-    }
-    if (branchUnit.originBranch !== undefined && branchUnit.originBranch !== authority.originBranch) {
-        throw new Error('git-lifecycle-graph-authority-origin-mismatch');
-    }
-    const runtimeOriginBranch = typeof asRecord(runtime.epics[authority.epicId])?.origin_branch === 'string'
-        ? String(asRecord(runtime.epics[authority.epicId]).origin_branch)
-        : undefined;
-    if (runtimeOriginBranch !== undefined && runtimeOriginBranch !== authority.originBranch) {
-        throw new Error('git-lifecycle-graph-authority-origin-mismatch');
-    }
-    // Bootstrap may capture the origin only from the physical checkout selected
-    // by the operator. Once recorded, later invocations can legitimately run on
-    // the epic execution branch and are bound by the persisted origin instead.
-    if (branchUnit.originBranch === undefined && runtimeOriginBranch === undefined) {
-        const { stdout } = await execFileAsync('git', ['branch', '--show-current'], {
-            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
-        });
-        if (String(stdout).trim() !== authority.originBranch) {
-            throw new Error('git-lifecycle-graph-authority-origin-physical-mismatch');
-        }
-    }
-    const currentGraphRevision = typeof epic.graph_revision === 'string' ? epic.graph_revision : undefined;
-    const runtimeGraphRevision = typeof asRecord(runtime.epics[authority.epicId])?.graph_revision === 'string'
-        ? String(asRecord(runtime.epics[authority.epicId]).graph_revision)
-        : undefined;
-    if (currentGraphRevision !== undefined && !isHash(currentGraphRevision)) {
-        throw new Error('git-lifecycle-graph-revision-invalid');
-    }
-    if (currentGraphRevision === authority.graphRevision && runtimeGraphRevision === authority.graphRevision
-        && branchUnit.originBranch === authority.originBranch && runtimeOriginBranch === authority.originBranch) {
-        return { applied: false, reused: true, revision: runtime.revision, graphRevision: authority.graphRevision };
-    }
-    const nowMs = Date.parse(nowIso);
-    if (!Number.isFinite(nowMs))
-        throw new Error('git-lifecycle-graph-authority-time-invalid');
-    const lease = asRecord(epic.branch_lease);
-    if (lease && Number.isFinite(Date.parse(String(lease.expiresAt)))
-        && Date.parse(String(lease.expiresAt)) > nowMs
-        && !isLiveSameStorySetupLease(lease, authority.storyId, nowMs)) {
-        throw new Error('git-lifecycle-graph-authority-writer-active');
-    }
-    const mutation = await mutateGitLifecycleRuntime(projectRoot, (document) => {
-        const runtimeEpic = ensureRuntimeEpic(document, authority.epicId);
-        if (runtimeEpic.branch_mode !== undefined && runtimeEpic.branch_mode !== 'epic') {
-            throw new Error('git-lifecycle-graph-authority-epic-raced');
-        }
-        const persistedBranch = runtimeEpic.execution_branch;
-        if (persistedBranch !== undefined && persistedBranch !== authority.executionBranch) {
-            throw new Error('git-lifecycle-graph-authority-branch-raced');
-        }
-        const persistedOrigin = runtimeEpic.origin_branch;
-        if (persistedOrigin !== undefined && persistedOrigin !== authority.originBranch) {
-            throw new Error('git-lifecycle-graph-authority-origin-raced');
-        }
-        const persistedRevision = runtimeEpic.graph_revision;
-        if (persistedRevision !== undefined && persistedRevision !== currentGraphRevision) {
-            throw new Error('git-lifecycle-graph-authority-epoch-raced');
-        }
-        const persistedLease = asRecord(runtimeEpic.branch_lease);
-        if (persistedLease && Number.isFinite(Date.parse(String(persistedLease.expiresAt)))
-            && Date.parse(String(persistedLease.expiresAt)) > nowMs
-            && !isLiveSameStorySetupLease(persistedLease, authority.storyId, nowMs)) {
-            throw new Error('git-lifecycle-graph-authority-writer-active');
-        }
-        runtimeEpic.branch_mode = 'epic';
-        runtimeEpic.execution_branch = authority.executionBranch;
-        runtimeEpic.origin_branch = authority.originBranch;
-        runtimeEpic.graph_revision = authority.graphRevision;
-    }, {
-        expectedRevision: runtime.revision,
-        preCommit: async () => {
-            if (await readFile(trackedPath, 'utf8') !== trackedRaw) {
-                throw new Error('git-lifecycle-graph-authority-tracked-state-raced');
-            }
-        },
-    });
-    return {
-        applied: true,
-        reused: false,
-        revision: mutation.document.revision,
-        graphRevision: authority.graphRevision,
-    };
-}
-export async function mutateGitLifecycleRuntime(projectRoot, mutate, options = {}) {
-    const commonDir = await gitCommonDir(projectRoot);
-    const runtimeDirectory = await ensureRuntimeDirectory(commonDir);
-    const lockPath = join(runtimeDirectory, LOCK_DIRECTORY);
-    const lockOwner = await acquireLock(lockPath);
-    try {
-        const storePath = join(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE);
-        const legacyStorePath = join(commonDir, LEGACY_STORE_FILE);
-        const current = await readDocument(existsSync(storePath) ? storePath : legacyStorePath);
-        if (options.expectedRevision !== undefined && options.expectedRevision !== current.revision) {
-            throw new Error('git-lifecycle-runtime-revision-conflict');
-        }
-        const mutable = structuredClone(current);
-        const value = mutate(mutable);
-        if (current.schemaVersion === 2 && options.nextSchemaVersion !== undefined
-            && options.nextSchemaVersion !== 2) {
-            throw new Error('git-lifecycle-runtime-schema-downgrade');
-        }
-        const next = validateDocument({
-            ...mutable,
-            schemaVersion: options.nextSchemaVersion ?? current.schemaVersion,
-            revision: current.revision + 1,
-        });
-        await options.preCommit?.(next);
-        await assertSafeFilesystemEntry(runtimeDirectory, 'directory');
-        await assertStoreDestinationSafe(storePath);
-        await anchoredAtomicWriteFile(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE, `${JSON.stringify(next, null, 2)}\n`);
-        await assertSafeFilesystemEntry(storePath, 'file');
-        await syncDirectory(runtimeDirectory);
-        return { document: next, value };
-    }
-    finally {
-        await releaseRuntimeLock(lockPath, lockOwner).catch(() => undefined);
-    }
-}
-async function syncDirectory(path) {
-    let handle;
-    try {
-        handle = await open(path, 'r');
-    }
-    catch (error) {
-        // Node cannot open directories on Windows. The file itself has already
-        // been flushed; keep the stronger parent-directory flush everywhere else.
-        if (process.platform === 'win32' && (isNodeError(error, 'EPERM') || isNodeError(error, 'EISDIR') || isNodeError(error, 'EINVAL')))
-            return;
-        throw error;
-    }
-    try {
-        await handle.sync();
-    }
-    finally {
-        await handle.close();
-    }
-}
-/** Merge the runtime overlay over tracked state without mutating either input. */
-export function applyGitLifecycleRuntimeOverlay(tracked, runtime) {
-    const merged = structuredClone(tracked);
-    const epics = normalizeTrackedCollection(merged, 'epics');
-    const stories = normalizeTrackedCollection(merged, 'stories');
-    for (const [epicId, overlay] of Object.entries(runtime.epics)) {
-        epics[epicId] = { ...(asRecord(epics[epicId]) ?? {}), ...structuredClone(overlay) };
-    }
-    for (const [storyId, overlay] of Object.entries(runtime.stories)) {
-        const trackedStory = asRecord(stories[storyId]) ?? {};
-        const trackedSteps = trackedStory.steps_completed;
-        const runtimeSteps = overlay.steps_completed;
-        const c01OnlyOverlay = overlay.status === 'branch-ready'
-            && overlay.last_step === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
-            && Array.isArray(runtimeSteps) && runtimeSteps.length === 1
-            && runtimeSteps[0] === GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID
-            && overlay.checkpoint === undefined;
-        // Once the tracked story includes C01, later tracked steps must not be
-        // masked by the private C01-only bridge used before the first commit.
-        if (c01OnlyOverlay && Array.isArray(trackedSteps)
-            && trackedSteps.includes(GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID))
-            continue;
-        stories[storyId] = { ...trackedStory, ...structuredClone(overlay) };
-    }
-    return merged;
-}
-/**
- * Older project state used arrays while current consumers require records keyed
- * by canonical IDs. Normalize only the in-memory projection and fail closed on
- * ambiguous entries; the tracked document remains byte-for-byte untouched.
- */
-function normalizeTrackedCollection(parent, key) {
-    const current = parent[key];
-    if (current === undefined) {
-        const created = {};
-        parent[key] = created;
-        return created;
-    }
-    const record = asRecord(current);
-    if (record)
-        return record;
-    if (!Array.isArray(current))
-        throw new Error(`git-lifecycle-tracked-${key}-invalid`);
-    const normalized = {};
-    for (const entry of current) {
-        const value = asRecord(entry);
-        const id = typeof value?.id === 'string' ? value.id.trim() : '';
-        if (!id || normalized[id] !== undefined)
-            throw new Error(`git-lifecycle-tracked-${key}-ambiguous`);
-        normalized[id] = value;
-    }
-    parent[key] = normalized;
-    return normalized;
-}
-export function ensureRuntimeEpic(document, epicId) {
-    return document.epics[epicId] ?? (document.epics[epicId] = {});
-}
-export function ensureRuntimeStory(document, storyId) {
-    return document.stories[storyId] ?? (document.stories[storyId] = {});
-}
-/** Runtime-safe accepted-checkpoint predicate kept in the published client closure. */
-export function isAcceptedGitLifecycleStoryCheckpoint(value, storyId, epicId, executionBranch) {
-    const item = asRecord(value);
-    return Boolean(item && item.epicId === epicId && item.branch === executionBranch
-        && item.qaVerdict === 'passed' && item.reviewVerdict === 'approved'
-        && validateCheckpoint(item, storyId));
-}
-/**
- * Structural JSON is untrusted under a same-UID threat model. Recompute the
- * commit-range/review authority from Git before a checkpoint can authorize
- * aggregate QA or terminal integration.
- */
-export async function verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet = []) {
-    return verifyAcceptedGitLifecycleStoryCheckpointSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet).verdict === 'verified';
-}
-/**
- * Synchronous variant used at the state-snapshot boundary, before any runtime
- * overlay is sent to the server. It returns a fresh, public, Git-derived receipt.
- */
-export function verifyAcceptedGitLifecycleStoryCheckpointSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet = [], nowIso = new Date().toISOString(), mode = transientAuthority === undefined ? 'scheduling' : 'integration') {
-    const rejected = () => checkpointVerification({
-        storyId, epicId, executionBranch, value, verifiedAt: nowIso,
-        verdict: 'rejected', reasonCode: 'checkpoint-git-physical-invalid',
-    });
-    try {
-        if (!isAcceptedGitLifecycleStoryCheckpoint(value, storyId, epicId, executionBranch))
-            return rejected();
-        const checkpoint = asRecord(value);
-        const qa = asRecord(checkpoint.qaReceipt);
-        const review = asRecord(checkpoint.reviewReceipt);
-        const headSha = String(checkpoint.headSha);
-        const baseSha = String(checkpoint.baseSha);
-        const publicReview = publicStoryReviewArtifactFromGit(projectRoot, storyId, headSha, review.reviewArtifactDigest === undefined);
-        const legacyWithoutPublicArtifact = review.reviewArtifactDigest === undefined
-            && !publicStoryReviewBlobExistsInGit(projectRoot, storyId, headSha);
-        if (review.reviewArtifactDigest !== undefined && review.reviewArtifactDigest !== publicReview?.digest)
-            return rejected();
-        const branchHead = gitSync(projectRoot, ['rev-parse', `refs/heads/${executionBranch}`]).trim();
-        execFileSync('git', ['merge-base', '--is-ancestor', headSha, branchHead], { cwd: projectRoot, stdio: 'ignore' });
-        const historicalReviewPending = !legacyWithoutPublicArtifact && publicReview?.verdict !== 'approved';
-        if (historicalReviewPending) {
-            if (review.reviewArtifactDigest !== undefined || !verifyHistoricalReviewReconciliation(projectRoot, checkpoint, review, qa, storyId, epicId, branchHead))
-                return rejected();
-        }
-        else if (checkpoint.reviewReconciliation !== undefined) {
-            // A supplemental receipt cannot replace or shadow an already approved blob.
-            return rejected();
-        }
-        const commitBody = gitSync(projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', headSha]);
-        const parentSha = gitSync(projectRoot, ['rev-parse', `${headSha}^`]).trim();
-        const commitCount = gitSync(projectRoot, ['rev-list', '--count', `${baseSha}..${headSha}`]).trim();
-        if (parentSha !== baseSha || commitCount !== '1')
-            return rejected();
-        const trailers = new Set(commitBody.split('\n').map((line) => line.trim()));
-        const reviewTrailers = commitBody.split('\n').map((line) => line.trim())
-            .filter((line) => line.startsWith('Neocortex-Review-Artifact-Digest: '));
-        if (reviewTrailers.length > 0 && (reviewTrailers.length !== 1
-            || reviewTrailers[0] !== `Neocortex-Review-Artifact-Digest: ${publicReview?.digest}`
-            || review.reviewArtifactDigest !== publicReview?.digest))
-            return rejected();
-        const requiredTrailers = [
-            `Neocortex-Story: ${storyId}`,
-            `Neocortex-Epic: ${epicId}`,
-            `Neocortex-Execution-Branch: ${executionBranch}`,
-            `Neocortex-Bundle-Digest: ${String(checkpoint.bundleDigest)}`,
-            `Neocortex-Graph-Revision: ${String(checkpoint.graphRevision)}`,
-            ...(checkpoint.dispatchId ? [`Neocortex-Dispatch: ${String(checkpoint.dispatchId)}`] : []),
-            ...(checkpoint.bundleId ? [`Neocortex-Bundle: ${String(checkpoint.bundleId)}`] : []),
-            ...(checkpoint.claimRevision ? [`Neocortex-Claim-Revision: ${String(checkpoint.claimRevision)}`] : []),
-        ];
-        const hasCanonicalTrailers = requiredTrailers.every((trailer) => trailers.has(trailer));
-        if (hasCanonicalTrailers) {
-            const preparedBaseLine = [...trailers].find((line) => line.startsWith('Neocortex-Prepared-Base: '));
-            const preparedBase = preparedBaseLine?.slice('Neocortex-Prepared-Base: '.length) ?? '';
-            if (!/^[a-f0-9]{40,64}$/i.test(preparedBase))
-                return rejected();
-            execFileSync('git', ['merge-base', '--is-ancestor', preparedBase, headSha], { cwd: projectRoot, stdio: 'ignore' });
-        }
-        const changedRaw = gitSync(projectRoot, [
-            'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha,
-        ]);
-        const changedPaths = changedRaw.split('\0').filter(Boolean);
-        if (changedPaths.length === 0 || changedPaths.some((path) => !safeRepositoryPath(path)))
-            return rejected();
-        const commitBodyDigest = createHash('sha256').update(commitBody).digest('hex');
-        const changedPathsDigest = createHash('sha256').update([...changedPaths].sort().join('\0')).digest('hex');
-        const claimProof = checkpointClaimProof({
-            projectRoot, checkpoint, storyId, epicId, executionBranch, baseSha, headSha,
-            commitBodyDigest, changedPathsDigest, changedPaths,
-            authorizedWriteSet: authorizedWriteSet.length > 0
-                ? authorizedWriteSet : trackedStoryWriteSet(projectRoot, storyId),
-        });
-        if (!claimProof)
-            return rejected();
-        if (qa.receiptRef !== `story-qa:${String(qa.sourceEvidenceDigest)}`)
-            return rejected();
-        const expectedQaDigest = computeImmutableStoryQaEvidenceDigest({
-            storyId, baseSha, headSha,
-            bundleDigest: String(checkpoint.bundleDigest), graphRevision: String(checkpoint.graphRevision),
-            commitBody, changedPaths,
-        });
-        const executionQa = qa.evidenceVersion === 'p205-execution-v2'
-            && qa.contract === 'P205-CI-02'
-            && qa.command === P205_COMPLETE_COMMAND
-            && isHash(qa.manifestDigest)
-            && safeStringArray(qa.gateIds, 32, true)
-            && isHash(qa.resultDigest)
-            && qa.sourceEvidenceDigest === computeP205StoryQaEvidenceDigest({
-                gitEvidenceDigest: expectedQaDigest,
-                headSha,
-                graphRevision: String(checkpoint.graphRevision),
-                manifestDigest: String(qa.manifestDigest),
-                gateIds: qa.gateIds,
-                resultDigest: String(qa.resultDigest),
-            });
-        const immutableQa = qa.evidenceVersion === 'git-immutable-v1'
-            && qa.sourceEvidenceDigest === expectedQaDigest;
-        const boundedLegacyQa = qa.evidenceVersion === undefined
-            && claimProof.mode === 'legacy-migration'
-            && claimProof.binding?.qaDigest === qa.sourceEvidenceDigest;
-        const aggregateP205 = transientP205AuthorityMatches(transientAuthority, branchHead, String(checkpoint.graphRevision));
-        const transientQa = aggregateP205 && (executionQa
-            || claimProof.mode === 'legacy-migration' && (immutableQa || boundedLegacyQa));
-        const schedulingQa = mode === 'scheduling' && transientAuthority === undefined && executionQa;
-        if (!transientQa && !schedulingQa)
-            return rejected();
-        const artifactBound = review.reviewArtifactDigest !== undefined;
-        const expectedReviewDigest = createHash('sha256').update([
-            artifactBound ? 'root-commit-range-review-v2' : 'root-commit-range-review-v1', storyId, baseSha, headSha,
-            String(checkpoint.bundleDigest), String(checkpoint.graphRevision), String(qa.receiptRef),
-            createHash('sha256').update(commitBody).digest('hex'), [...changedPaths].sort().join(','),
-            ...(artifactBound ? [publicReview.digest] : []),
-        ].join('\0')).digest('hex');
-        if (review.sourceEvidenceDigest !== expectedReviewDigest
-            || review.receiptRef !== `story-review:${expectedReviewDigest}`)
-            return rejected();
-        if (claimProof.mode === 'legacy-migration'
-            && claimProof.binding?.reviewDigest !== undefined
-            && claimProof.binding.reviewDigest !== review.sourceEvidenceDigest)
-            return rejected();
-        if (!hasCanonicalTrailers) {
-            if (LEGACY_DIRECT_YOLO_RECOVERY_COMMITS[storyId] !== headSha
-                || !Array.isArray(checkpoint.receiptRefs)
-                || !checkpoint.receiptRefs.some((item) => typeof item === 'string' && item.startsWith('legacy-direct-yolo:'))) {
-                return rejected();
-            }
-        }
-        const sourceEvidenceDigest = createHash('sha256').update([
-            'checkpoint-p205-transient-v1', storyId, epicId, executionBranch, baseSha, headSha,
-            String(checkpoint.bundleDigest), commitBodyDigest, changedPathsDigest,
-            claimProof.mode, claimProof.effectiveClaimRevision,
-            String(qa.sourceEvidenceDigest), String(review.sourceEvidenceDigest),
-            ...(checkpoint.reviewReconciliation
-                ? [String(asRecord(checkpoint.reviewReconciliation)?.sourceEvidenceDigest)] : []),
-            transientAuthorityEvidence(transientAuthority)?.executionEvidenceDigest
-                ?? (schedulingQa ? 'scheduling-git-verification' : 'legacy-bounded-authority'),
-        ].join('\0')).digest('hex');
-        const effectiveAuthority = transientQa ? transientAuthorityEvidence(transientAuthority) : undefined;
-        return Object.freeze({
-            schemaVersion: 1, kind: 'story_checkpoint_physical_verification', producer: 'client-p205-transient-v1',
-            storyId, epicId, branch: executionBranch, baseSha, headSha,
-            aggregateHeadSha: effectiveAuthority?.executionHeadSha ?? headSha,
-            commitBodyDigest, changedPathsDigest,
-            claimVerification: claimProof.mode,
-            effectiveClaimRevision: claimProof.effectiveClaimRevision,
-            sourceEvidenceDigest,
-            command: P205_COMPLETE_COMMAND,
-            manifestDigest: effectiveAuthority?.manifestDigest ?? '0'.repeat(64),
-            gateIds: effectiveAuthority?.gateIds ?? Object.freeze(['legacy-bounded']),
-            resultDigest: effectiveAuthority?.resultDigest ?? '0'.repeat(64),
-            graphRevision: String(checkpoint.graphRevision),
-            executionEvidenceDigest: effectiveAuthority?.executionEvidenceDigest ?? '0'.repeat(64),
-            verifiedAt: effectiveAuthority?.executedAt ?? normalizedIso(nowIso), verdict: 'verified',
-            reasonCodes: Object.freeze([
-                transientQa ? 'checkpoint-p205-transient-verified'
-                    : schedulingQa ? 'checkpoint-git-scheduling-verified'
-                        : 'checkpoint-legacy-bounded-verified',
-                ...(claimProof.mode === 'legacy-migration' ? ['checkpoint-legacy-migration-verified'] : []),
-            ]), publicSafe: true,
-        });
-    }
-    catch {
-        return rejected();
-    }
-}
-/**
- * Classify a checkpoint for one story without allowing physical scheduling
- * evidence to impersonate transient P205 integration authority.
- */
-export function classifyGitLifecycleStoryCheckpointProjectionSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet = [], nowIso = new Date().toISOString()) {
-    const mode = transientAuthority ? 'integration' : 'scheduling';
-    const verification = verifyAcceptedGitLifecycleStoryCheckpointSync(projectRoot, value, storyId, epicId, executionBranch, transientAuthority, authorizedWriteSet, nowIso, mode);
-    if (verification.verdict !== 'verified')
-        return { kind: 'rejected', verification };
-    if (mode === 'integration')
-        return { kind: 'integration-authorized', verification };
-    if (!verification.reasonCodes.includes('checkpoint-git-scheduling-verified')) {
-        return { kind: 'rejected', verification: checkpointVerification({
-                storyId, epicId, executionBranch, value, verifiedAt: nowIso,
-                verdict: 'rejected', reasonCode: 'checkpoint-git-physical-invalid',
-            }) };
-    }
-    return {
-        kind: 'scheduling-only',
-        evidence: Object.freeze({
-            schemaVersion: 1,
-            kind: 'story_scheduling_checkpoint_evidence',
-            producer: 'client-git-physical-v1',
-            storyId,
-            epicId,
-            branch: executionBranch,
-            baseSha: verification.baseSha,
-            headSha: verification.headSha,
-            graphRevision: verification.graphRevision,
-            effectiveClaimRevision: verification.effectiveClaimRevision,
-            sourceEvidenceDigest: verification.sourceEvidenceDigest,
-            verifiedAt: verification.verifiedAt,
-            reasonCodes: Object.freeze(['checkpoint-git-scheduling-verified']),
-            integrationAuthorized: false,
-            publicSafe: true,
-        }),
-    };
-}
-function transientP205AuthorityMatches(authority, aggregateHeadSha, graphRevision) {
-    const evidence = transientAuthorityEvidence(authority);
-    return Boolean(evidence
-        && evidence.schemaVersion === 1 && evidence.kind === 'p205_transient_execution_authority'
-        && evidence.contract === 'P205-CI-02' && evidence.command === P205_COMPLETE_COMMAND
-        && evidence.graphRevision === graphRevision
-        && isHash(evidence.resultDigest) && isHash(evidence.executionEvidenceDigest)
-        && evidence.executionHeadSha === aggregateHeadSha && isSha(aggregateHeadSha));
-}
-function transientAuthorityEvidence(authority) {
-    return authority && typeof authority === 'object' ? TRANSIENT_P205_AUTHORITIES.get(authority) : undefined;
-}
-/** Read-only projection for persistence/audit; it never recreates authority. */
-export function projectP205TransientExecutionEvidence(authority) {
-    const evidence = transientAuthorityEvidence(authority);
-    return evidence ? Object.freeze({
-        executionHeadSha: evidence.executionHeadSha,
-        graphRevision: evidence.graphRevision,
-        manifestDigest: evidence.manifestDigest,
-        gateIds: Object.freeze([...evidence.gateIds]),
-        resultDigest: evidence.resultDigest,
-        executedAt: evidence.executedAt,
-        executionEvidenceDigest: evidence.executionEvidenceDigest,
-    }) : undefined;
-}
-export function p205TransientAuthorityMatchesAggregate(authority, headSha, graphRevision) {
-    const evidence = transientAuthorityEvidence(authority);
-    return Boolean(evidence && evidence.executionHeadSha === headSha
-        && evidence.graphRevision === graphRevision && evidence.command === P205_COMPLETE_COMMAND);
-}
-function checkpointClaimProof(input) {
-    const legacy = LEGACY_P174_CHECKPOINT_MIGRATIONS[input.storyId];
-    const persistedClaim = typeof input.checkpoint.claimRevision === 'string' ? input.checkpoint.claimRevision : undefined;
-    const claimlessLegacy = input.storyId === 'P174.03.811759' || input.storyId === 'P174.03.685003';
-    const normalized = normalizeAuthorizedWriteSet(input.authorizedWriteSet);
-    let rootMemoryPaths = [];
-    if (input.checkpoint.rootMemoryEffect !== undefined) {
-        if (legacy)
-            return undefined;
-        try {
-            rootMemoryPaths = verifyRootMemoryPhysicalWriteSet(input.projectRoot, input.checkpoint.rootMemoryEffect, {
-                storyId: input.storyId, executionBranch: input.executionBranch, baseSha: input.baseSha,
-                headRef: input.headSha, childPaths: normalized,
-            }).files.map(file => file.path);
-        }
-        catch {
-            return undefined;
-        }
-    }
-    const declaredWriteSetValid = normalized.length > 0 && normalized.length === input.authorizedWriteSet.length
-        && input.changedPaths.every((path) => normalized.some((scope) => writeSetCovers(scope, path)) || rootMemoryPaths.includes(path));
-    if (legacy
-        && input.epicId === 'P174' && input.executionBranch === 'epic/P174'
-        && input.baseSha === legacy.baseSha && input.headSha === legacy.headSha
-        && input.checkpoint.graphRevision === legacy.graphRevision
-        && input.commitBodyDigest === legacy.commitBodyDigest
-        && input.changedPathsDigest === legacy.changedPathsDigest
-        && (claimlessLegacy ? persistedClaim === undefined : persistedClaim === legacy.effectiveClaimRevision)) {
-        if (input.authorizedWriteSet.length > 0
-            && (!declaredWriteSetValid || !claimMatchesWriteSet(legacy.effectiveClaimRevision, normalized)))
-            return undefined;
-        return Object.freeze({ mode: 'legacy-migration', effectiveClaimRevision: legacy.effectiveClaimRevision, binding: legacy });
-    }
-    // Claimless compatibility is closed over the seven immutable P174 ranges
-    // above. Format, age, story name and otherwise-valid JSON evidence never
-    // authorize a generic migration.
-    if (persistedClaim === undefined)
-        return undefined;
-    if (!persistedClaim || !isHash(persistedClaim))
-        return undefined;
-    if (!declaredWriteSetValid || !claimMatchesWriteSet(persistedClaim, normalized))
-        return undefined;
-    return Object.freeze({ mode: 'canonical', effectiveClaimRevision: persistedClaim });
-}
-function normalizeAuthorizedWriteSet(values) {
-    const normalized = values.map((value) => value.replaceAll('\\', '/').replace(/^\.\//, '').replace(/\/{2,}/g, '/'));
-    if (normalized.some((value) => !safeRepositoryPath(value)))
-        return Object.freeze([]);
-    return Object.freeze([...new Set(normalized)].sort());
-}
-function trackedStoryWriteSet(projectRoot, storyId) {
-    try {
-        const state = JSON.parse(readFileSync(join(projectRoot, '.neocortex', 'state.json'), 'utf8'));
-        const stories = asRecord(state.stories);
-        const story = asRecord(stories?.[storyId]);
-        const runtime = readGitLifecycleRuntimeSync(projectRoot);
-        const checkpoint = asRecord(runtime.stories[storyId]?.checkpoint) ?? asRecord(story?.checkpoint);
-        return gitLifecycleStoryWriteSet(storyId, story, checkpoint);
-    }
-    catch {
-        return [];
-    }
-}
-/** Reconstruct the same closed claim used by the direct or continuous planner. */
-export function gitLifecycleStoryWriteSet(storyId, story, checkpoint) {
-    const authored = Array.isArray(story?.files_to_modify)
-        ? story.files_to_modify.filter((value) => typeof value === 'string') : [];
-    if (!checkpoint?.dispatchId || !checkpoint.bundleId)
-        return authored;
-    try {
-        return publicWriteSet({ ...story, id: storyId, files_to_modify: authored });
-    }
-    catch {
-        return [];
-    }
-}
-function claimMatchesWriteSet(claimRevision, writeSet) {
-    return claimRevision === createHash('sha256').update(writeSet.join('\0')).digest('hex')
-        || claimRevision === createHash('sha256').update(JSON.stringify(writeSet)).digest('hex');
-}
-function writeSetCovers(scope, path) {
-    return scope === path || scope.endsWith('/') && path.startsWith(scope);
-}
-/** Pre-P205 admission for only the exact seven immutable P174 migrations. */
-export function verifyLegacyCheckpointMigrationCandidateSync(projectRoot, value, storyId, epicId, executionBranch, authorizedWriteSet) {
-    try {
-        if (!isAcceptedGitLifecycleStoryCheckpoint(value, storyId, epicId, executionBranch))
-            return false;
-        const checkpoint = asRecord(value);
-        const qa = asRecord(checkpoint.qaReceipt);
-        const review = asRecord(checkpoint.reviewReceipt);
-        const headSha = String(checkpoint.headSha);
-        const baseSha = String(checkpoint.baseSha);
-        const branchHead = gitSync(projectRoot, ['rev-parse', `refs/heads/${executionBranch}`]).trim();
-        execFileSync('git', ['merge-base', '--is-ancestor', headSha, branchHead], { cwd: projectRoot, stdio: 'ignore' });
-        if (gitSync(projectRoot, ['rev-parse', `${headSha}^`]).trim() !== baseSha
-            || gitSync(projectRoot, ['rev-list', '--count', `${baseSha}..${headSha}`]).trim() !== '1')
-            return false;
-        const commitBody = gitSync(projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', headSha]);
-        const changedPaths = gitSync(projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', headSha])
-            .split('\0').filter(Boolean);
-        if (changedPaths.length === 0 || changedPaths.some((path) => !safeRepositoryPath(path)))
-            return false;
-        const proof = checkpointClaimProof({
-            projectRoot, checkpoint, storyId, epicId, executionBranch, baseSha, headSha, changedPaths, authorizedWriteSet,
-            commitBodyDigest: createHash('sha256').update(commitBody).digest('hex'),
-            changedPathsDigest: createHash('sha256').update([...changedPaths].sort().join('\0')).digest('hex'),
-        });
-        if (proof?.mode !== 'legacy-migration' || !proof.binding
-            || qa.sourceEvidenceDigest !== proof.binding.qaDigest
-            || qa.receiptRef !== `story-qa:${proof.binding.qaDigest}`
-            || review.sourceEvidenceDigest !== proof.binding.reviewDigest
-            || review.receiptRef !== `story-review:${proof.binding.reviewDigest}`
-            || review.qaReceiptRef !== qa.receiptRef)
-            return false;
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-export function computeImmutableStoryQaEvidenceDigest(input) {
-    return createHash('sha256').update([
-        'local-yolo-tdd-git-immutable-v1', input.storyId, input.baseSha, input.headSha,
-        input.bundleDigest, input.graphRevision,
-        createHash('sha256').update(input.commitBody).digest('hex'),
-        createHash('sha256').update([...input.changedPaths].sort().join('\0')).digest('hex'),
-    ].join('\0')).digest('hex');
-}
-/** Bind an actual successful P205 execution to immutable Git authority. */
-export function computeP205StoryQaEvidenceDigest(input) {
-    return createHash('sha256').update([
-        'local-yolo-tdd-p205-execution-v2', P205_COMPLETE_COMMAND,
-        input.gitEvidenceDigest, input.headSha, input.graphRevision,
-        input.manifestDigest, input.gateIds.join(','), input.resultDigest,
-    ].join('\0')).digest('hex');
-}
-function checkpointVerification(input) {
-    const checkpoint = asRecord(input.value);
-    return Object.freeze({
-        schemaVersion: 1, kind: 'story_checkpoint_physical_verification', producer: 'client-p205-transient-v1',
-        storyId: input.storyId, epicId: input.epicId, branch: input.executionBranch,
-        baseSha: isSha(checkpoint?.baseSha) ? String(checkpoint?.baseSha) : '0'.repeat(40),
-        headSha: isSha(checkpoint?.headSha) ? String(checkpoint?.headSha) : '0'.repeat(40),
-        aggregateHeadSha: '0'.repeat(40),
-        commitBodyDigest: '0'.repeat(64), changedPathsDigest: '0'.repeat(64),
-        claimVerification: 'canonical', effectiveClaimRevision: '0'.repeat(64),
-        command: P205_COMPLETE_COMMAND, manifestDigest: '0'.repeat(64), gateIds: Object.freeze([]),
-        resultDigest: '0'.repeat(64), graphRevision: '0'.repeat(64), executionEvidenceDigest: '0'.repeat(64),
-        sourceEvidenceDigest: '0'.repeat(64), verifiedAt: normalizedIso(input.verifiedAt),
-        verdict: input.verdict, reasonCodes: Object.freeze([input.reasonCode]), publicSafe: true,
-    });
-}
-function gitSync(cwd, args) {
-    return execFileSync('git', [...args], { cwd, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 });
-}
-/** Read public review evidence from Git, never from the mutable worktree. */
-export function publicStoryReviewArtifactFromGit(projectRoot, storyId, revision, allowLegacyDecision = false) {
-    if (!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(storyId))
-        return undefined;
-    if (revision !== ':' && !/^[a-f0-9]{40,64}$/i.test(revision))
-        return undefined;
-    const path = `.neocortex/stories/${storyId}/review.md`;
-    let bytes;
-    try {
-        bytes = execFileSync('git', ['show', `${revision === ':' ? ':' : `${revision}:`}${path}`], {
-            cwd: projectRoot, maxBuffer: 128 * 1024, stdio: ['ignore', 'pipe', 'ignore'],
-        });
-    }
-    catch {
-        return undefined;
-    }
-    if (bytes.length === 0 || bytes.length > 64 * 1024 || bytes.includes(0))
-        return undefined;
-    let content;
-    try {
-        content = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-    }
-    catch {
-        return undefined;
-    }
-    const lines = content.replace(/\r\n/g, '\n').split('\n');
-    const storyHeading = new RegExp(`^#\\s+${storyId.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?=\\s|$|[:—-])`);
-    if (!lines.some((line) => storyHeading.test(line)))
-        return undefined;
-    const verdictLines = lines.filter((line) => /^Verdict\s*:/i.test(line));
-    if (lines.some((line) => /^Status\s*:\s*(pending|changes-requested|rejected)\b/i.test(line))) {
-        return undefined;
-    }
-    const legacyDecisionLines = lines.filter((line) => /^Decision\s*:/i.test(line));
-    if (verdictLines.length === 0 && allowLegacyDecision
-        && legacyDecisionLines.length === 1
-        && /^Decision\s*:\s*APPROVED\b/i.test(legacyDecisionLines[0])) {
-        return Object.freeze({ verdict: 'approved', digest: createHash('sha256').update(bytes).digest('hex') });
-    }
-    if (verdictLines.length !== 1)
-        return undefined;
-    const verdict = /^Verdict\s*:\s*(approved|pending|changes-requested)(?=\s|$|[;,.])/i.exec(verdictLines[0])?.[1]?.toLowerCase();
-    if (verdict !== 'approved' && verdict !== 'pending' && verdict !== 'changes-requested')
-        return undefined;
-    return Object.freeze({ verdict, digest: createHash('sha256').update(bytes).digest('hex') });
-}
-/** Binds a later root approval to the exact immutable range of a legacy checkpoint. */
-export function computeHistoricalReviewReconciliationDigest(input) {
-    return createHash('sha256').update([
-        'root-historical-review-reconciliation-v1', input.storyId, input.epicId,
-        input.checkpointHeadSha, input.approvalCommitSha, input.approvalArtifactDigest,
-        input.qaReceiptRef, input.reviewReceiptRef,
-        createHash('sha256').update(input.approvalCommitBody).digest('hex'),
-    ].join('\0')).digest('hex');
-}
-function verifyHistoricalReviewReconciliation(projectRoot, checkpoint, review, qa, storyId, epicId, branchHead) {
-    const receipt = asRecord(checkpoint.reviewReconciliation);
-    if (!receipt || !validateHistoricalReviewReconciliation(receipt, checkpoint))
-        return false;
-    const approvalSha = String(receipt.approvalCommitSha);
-    const checkpointHead = String(checkpoint.headSha);
-    if (approvalSha === checkpointHead)
-        return false;
-    try {
-        execFileSync('git', ['merge-base', '--is-ancestor', checkpointHead, approvalSha], { cwd: projectRoot, stdio: 'ignore' });
-        execFileSync('git', ['merge-base', '--is-ancestor', approvalSha, branchHead], { cwd: projectRoot, stdio: 'ignore' });
-        if (!gitSync(projectRoot, ['rev-list', '--first-parent', branchHead]).split('\n').includes(approvalSha))
-            return false;
-        const parents = gitSync(projectRoot, ['show', '--no-patch', '--format=%P', approvalSha]).trim().split(/\s+/);
-        if (parents.length !== 1 || !isSha(parents[0]))
-            return false;
-        const approvalCommitBody = gitSync(projectRoot, ['show', '--no-patch', '--format=%H%n%P%n%B', approvalSha]);
-        const trailers = new Set(approvalCommitBody.split('\n').map((line) => line.trim()));
-        if (!trailers.has(`Neocortex-Review-Reconciliation: ${storyId}`)
-            || !trailers.has(`Neocortex-Original-Checkpoint: ${checkpointHead}`)
-            || !trailers.has(`Neocortex-Original-Review-Receipt: ${String(review.receiptRef)}`))
-            return false;
-        const reviewPath = `.neocortex/stories/${storyId}/review.md`;
-        const changedPaths = gitSync(projectRoot, ['diff-tree', '--no-commit-id', '--name-only', '-r', '-z', approvalSha])
-            .split('\0').filter(Boolean);
-        if (!changedPaths.includes(reviewPath) || changedPaths.some((path) => !safeRepositoryPath(path)))
-            return false;
-        const approved = publicStoryReviewArtifactFromGit(projectRoot, storyId, approvalSha);
-        if (approved?.verdict !== 'approved' || approved.digest !== receipt.approvalArtifactDigest)
-            return false;
-        const current = publicStoryReviewArtifactFromGit(projectRoot, storyId, branchHead);
-        if (current?.verdict !== 'approved' || current.digest !== approved.digest)
-            return false;
-        const digest = computeHistoricalReviewReconciliationDigest({
-            storyId, epicId, checkpointHeadSha: checkpointHead, approvalCommitSha: approvalSha,
-            approvalArtifactDigest: approved.digest, qaReceiptRef: String(qa.receiptRef),
-            reviewReceiptRef: String(review.receiptRef), approvalCommitBody,
-        });
-        return receipt.sourceEvidenceDigest === digest
-            && receipt.receiptRef === `story-review-reconciliation:${digest}`;
-    }
-    catch {
-        return false;
-    }
-}
-function publicStoryReviewBlobExistsInGit(projectRoot, storyId, headSha) {
-    if (!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(storyId)
-        || !/^[a-f0-9]{40,64}$/i.test(headSha))
-        return false;
-    try {
-        execFileSync('git', ['cat-file', '-e', `${headSha}:.neocortex/stories/${storyId}/review.md`], {
-            cwd: projectRoot, stdio: 'ignore', maxBuffer: 1024,
-        });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function normalizedIso(value) {
-    return Number.isFinite(Date.parse(value)) ? new Date(Date.parse(value)).toISOString() : new Date().toISOString();
-}
-/**
- * Bounded migration evidence for direct-*yolo commits created before canonical
- * trailers were mandatory. The receipt is derived only from immutable commit
- * data and story-owned evidence blobs; JSON sidecar shape alone is never enough.
- */
-export async function computeLegacyDirectYoloRecoveryReceiptRef(projectRoot, input) {
-    if (LEGACY_DIRECT_YOLO_RECOVERY_COMMITS[input.storyId] !== input.headSha)
-        return undefined;
-    const evidencePaths = [
-        '.neocortex/state.json',
-        `.neocortex/stories/${input.storyId}/qa-gate-result.json`,
-        `.neocortex/stories/${input.storyId}/validation-evidence.md`,
-        `.neocortex/stories/${input.storyId}/review.md`,
-        `docs/stories/${input.storyId}.story.md`,
-    ];
-    try {
-        const branchHead = (await execFileAsync('git', ['rev-parse', `refs/heads/${input.executionBranch}`], {
-            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
-        })).stdout.trim();
-        await execFileAsync('git', ['merge-base', '--is-ancestor', input.headSha, branchHead], { cwd: projectRoot });
-        const parentSha = (await execFileAsync('git', ['rev-parse', `${input.headSha}^`], {
-            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
-        })).stdout.trim();
-        if (parentSha !== input.baseSha)
-            return undefined;
-        const immutablePayload = String((await execFileAsync('git', [
-            'diff', '--binary', '--full-index', `${input.baseSha}..${input.headSha}`,
-        ], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 })).stdout);
-        if (createHash('sha256').update(immutablePayload).digest('hex') !== input.bundleDigest)
-            return undefined;
-        const commitBody = String((await execFileAsync('git', ['show', '--no-patch', '--format=%H%n%P%n%B', input.headSha], {
-            cwd: projectRoot, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024,
-        })).stdout);
-        const subject = String((await execFileAsync('git', ['show', '--no-patch', '--format=%s', input.headSha], {
-            cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024,
-        })).stdout).trim();
-        if (!subject.includes(input.storyId))
-            return undefined;
-        const changedRaw = String((await execFileAsync('git', [
-            'diff-tree', '--no-commit-id', '--name-only', '-r', '-z', input.headSha,
-        ], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 8 * 1024 * 1024 })).stdout);
-        const changedPaths = changedRaw.split('\0').filter(Boolean);
-        if (!evidencePaths.every((path) => changedPaths.includes(path))
-            || changedPaths.some((path) => !safeRepositoryPath(path)))
-            return undefined;
-        const blobs = await Promise.all(evidencePaths.map(async (path) => String((await execFileAsync('git', [
-            'show', `${input.headSha}:${path}`,
-        ], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 16 * 1024 * 1024 })).stdout)));
-        const state = JSON.parse(blobs[0]);
-        const stories = asRecord(state.stories);
-        const epics = asRecord(state.epics);
-        const story = asRecord(stories?.[input.storyId]);
-        const epic = asRecord(epics?.[input.epicId]);
-        const steps = Array.isArray(story?.steps_completed) ? story.steps_completed : [];
-        const qa = JSON.parse(blobs[1]);
-        if (story?.status !== 'done' || !steps.includes(GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID) || !steps.includes(GIT_LIFECYCLE_REVIEW_PR_STEP_ID)
-            || epic?.branch_mode !== 'epic' || epic.execution_branch !== input.executionBranch
-            || qa.storyId !== input.storyId || qa.status !== 'qa-passed' || qa.safeToContinueYoloop !== true
-            || !Array.isArray(qa.blockingChecks) || qa.blockingChecks.length !== 0
-            || !blobs[2].includes(input.storyId) || !/P205[\s\S]{0,80}(pass|aprov)/i.test(blobs[2])
-            || !blobs[3].includes(input.storyId) || !/approved|aprovado/i.test(blobs[3])
-            || !blobs[4].includes(input.storyId))
-            return undefined;
-        const digest = createHash('sha256').update([
-            'legacy-direct-yolo-recovery-v1', input.storyId, input.epicId, input.executionBranch,
-            input.baseSha, input.headSha, input.bundleDigest, input.graphRevision,
-            createHash('sha256').update(commitBody).digest('hex'),
-            createHash('sha256').update([...changedPaths].sort().join('\0')).digest('hex'),
-            ...blobs.map((blob) => createHash('sha256').update(blob).digest('hex')),
-        ].join('\0')).digest('hex');
-        return `legacy-direct-yolo:${digest}`;
-    }
-    catch {
-        return undefined;
-    }
-}
-async function runtimeStorePath(projectRoot) {
-    const commonDir = await gitCommonDir(projectRoot);
-    const runtimeDirectory = join(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
-    const currentPath = join(runtimeDirectory, GIT_LIFECYCLE_RUNTIME_FILE);
-    if (existsSync(runtimeDirectory)) {
-        await assertSafeFilesystemEntry(runtimeDirectory, 'directory');
-        if (await realpath(runtimeDirectory) !== runtimeDirectory)
-            throw new Error('git-lifecycle-runtime-directory-symlink');
-    }
-    return existsSync(currentPath) ? currentPath : join(commonDir, LEGACY_STORE_FILE);
-}
-/** Resolve/create the private root used by lifecycle state, locks and sandboxes. */
-export async function gitLifecycleRuntimeDirectory(projectRoot) {
-    return ensureRuntimeDirectory(await gitCommonDir(projectRoot));
-}
-/** Create or validate one private direct child without following substitutions. */
-export async function ensureGitLifecyclePrivateChildDirectory(parent, childName) {
-    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(childName) || childName.includes('..')) {
-        throw new Error('git-lifecycle-private-child-invalid');
-    }
-    const canonicalParent = resolve(parent);
-    await assertPrivateDirectory(canonicalParent);
-    const child = resolve(canonicalParent, childName);
-    assertDirectChild(canonicalParent, child);
-    if (!existsSync(child))
-        await anchoredEnsureDirectory(canonicalParent, childName);
-    await assertPrivateDirectory(child, canonicalParent);
-    await assertPrivateDirectory(canonicalParent);
-    return child;
-}
-/** Validate a private directory and every direct parent binding before use. */
-export async function assertGitLifecyclePrivateDirectory(path, parent) {
-    const canonicalParent = resolve(parent);
-    const child = resolve(path);
-    assertDirectChild(canonicalParent, child);
-    await assertPrivateDirectory(canonicalParent);
-    await assertPrivateDirectory(child, canonicalParent);
-}
-export async function assertGitLifecyclePrivateFile(path, parent) {
-    await assertSafePrivateFile(path, parent);
-}
-/** Remove only the validated directory object renamed inside its validated parent. */
-export async function removeGitLifecyclePrivateDirectory(path, parent, verifyRenamed) {
-    const canonicalParent = resolve(parent);
-    const child = resolve(path);
-    assertDirectChild(canonicalParent, child);
-    try {
-        await assertGitLifecyclePrivateDirectory(child, canonicalParent);
-    }
-    catch (error) {
-        if (isNodeError(error, 'ENOENT'))
-            return false;
-        throw error;
-    }
-    const quarantine = resolve(canonicalParent, `${child.slice(canonicalParent.length + 1)}.remove.${process.pid}.${Date.now()}.${randomBytes(4).toString('hex')}`);
-    assertDirectChild(canonicalParent, quarantine);
-    await anchoredRenameDirectory(canonicalParent, basename(child), basename(quarantine));
-    await assertGitLifecyclePrivateDirectory(quarantine, canonicalParent);
-    if (verifyRenamed && !(await verifyRenamed(quarantine))) {
-        await restoreQuarantinedPrivateDirectory(quarantine, child, canonicalParent).catch(() => undefined);
-        return false;
-    }
-    await anchoredRemoveDirectory(canonicalParent, basename(quarantine));
-    return true;
-}
-async function restoreQuarantinedPrivateDirectory(quarantine, original, parent) {
-    await assertGitLifecyclePrivateDirectory(quarantine, parent);
-    try {
-        await lstat(original);
-        return;
-    }
-    catch (error) {
-        if (!isNodeError(error, 'ENOENT'))
-            throw error;
-    }
-    await anchoredRenameDirectory(parent, basename(quarantine), basename(original));
-    await assertGitLifecyclePrivateDirectory(original, parent);
-}
-async function privateOwnerFingerprint(path) {
-    try {
-        await assertGitLifecyclePrivateDirectory(path, dirname(path));
-        const ownerPath = join(path, 'owner.json');
-        await assertSafePrivateFile(ownerPath, path);
-        const owner = await readFile(ownerPath);
-        await assertSafePrivateFile(ownerPath, path);
-        return createHash('sha256').update(owner).digest('hex');
-    }
-    catch {
-        return undefined;
-    }
-}
-/** One physical writer lock shared by direct `*yolo` and continuous DAG integration. */
-export async function acquireGitLifecyclePhysicalIntegrationLock(projectRoot, requested) {
-    const runtimeDirectory = await gitLifecycleRuntimeDirectory(projectRoot);
-    const leasesRoot = await ensureGitLifecyclePrivateChildDirectory(runtimeDirectory, 'leases');
-    const lockPath = join(leasesRoot, 'integration');
-    const legacyRecoveryPath = `${lockPath}.recovery`;
-    if (existsSync(legacyRecoveryPath)) {
-        await assertGitLifecyclePrivateDirectory(legacyRecoveryPath, leasesRoot);
-        const recoveryPid = await readLegacyPhysicalIntegrationOwnerPid(legacyRecoveryPath);
-        const recoveryFingerprint = await privateOwnerFingerprint(legacyRecoveryPath);
-        if (recoveryPid === undefined || processExists(recoveryPid)) {
-            return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
-        }
-        if (!recoveryFingerprint || !(await removeGitLifecyclePrivateDirectory(legacyRecoveryPath, leasesRoot, async (renamed) => await privateOwnerFingerprint(renamed) === recoveryFingerprint)))
-            return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
-    }
-    const nowIso = normalizedIso(requested.createdAt ?? new Date().toISOString());
-    const owner = Object.freeze({
-        schemaVersion: 1, kind: requested.kind, storyId: requested.storyId,
-        sessionId: requested.sessionId, idempotencyKey: requested.idempotencyKey,
-        pid: process.pid, createdAt: nowIso, expiresAt: normalizedIso(requested.expiresAt),
-        persistent: requested.persistent,
-        ownerNonce: requested.ownerNonce ?? randomBytes(16).toString('hex'),
-    });
-    if (Date.parse(owner.expiresAt) <= Date.parse(owner.createdAt)) {
-        return { ok: false, reasonCode: 'git-lifecycle-integration-lock-failed' };
-    }
-    const create = async () => {
-        await assertPrivateDirectory(leasesRoot, runtimeDirectory);
-        try {
-            await anchoredCreateOwnedDirectory(leasesRoot, basename(lockPath), `${JSON.stringify(owner)}\n`);
-            await assertGitLifecyclePrivateDirectory(lockPath, leasesRoot);
-            await assertSafePrivateFile(join(lockPath, 'owner.json'), lockPath);
-            return true;
-        }
-        catch (error) {
-            if (!isNodeError(error, 'EEXIST')) {
-                await removeGitLifecyclePrivateDirectory(lockPath, leasesRoot).catch(() => undefined);
-            }
-            throw error;
-        }
-    };
-    try {
-        await create();
-        return { ok: true, owner, path: lockPath };
-    }
-    catch (error) {
-        if (!isNodeError(error, 'EEXIST'))
-            return { ok: false, reasonCode: 'git-lifecycle-integration-lock-failed' };
-    }
-    try {
-        const current = await readPhysicalIntegrationOwner(lockPath);
-        const legacyPid = current ? undefined : await readLegacyPhysicalIntegrationOwnerPid(lockPath);
-        if (current && samePhysicalIntegrationOwner(current, owner))
-            return { ok: true, owner: current, path: lockPath };
-        const currentActive = current && Date.parse(current.expiresAt) > Date.now()
-            && (current.persistent || processExists(current.pid));
-        if (currentActive || legacyPid !== undefined && processExists(legacyPid)
-            || (!current && legacyPid === undefined && await recentlyCreated(lockPath))) {
-            return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
-        }
-        const ownerFingerprint = await privateOwnerFingerprint(lockPath);
-        if (!ownerFingerprint)
-            return { ok: false, reasonCode: 'git-lifecycle-integration-lock-failed' };
-        const quarantine = `${lockPath}.stale.${process.pid}.${Date.now()}`;
-        await anchoredRenameDirectory(leasesRoot, basename(lockPath), basename(quarantine));
-        try {
-            await assertGitLifecyclePrivateDirectory(quarantine, leasesRoot);
-            if (await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
-                await restoreQuarantinedPrivateDirectory(quarantine, lockPath, leasesRoot).catch(() => undefined);
-                return { ok: false, reasonCode: 'git-lifecycle-integration-backpressure' };
-            }
-            await create();
-        }
-        finally {
-            await removeGitLifecyclePrivateDirectory(quarantine, leasesRoot, async (renamed) => await privateOwnerFingerprint(renamed) === ownerFingerprint).catch(() => undefined);
-        }
-        return { ok: true, owner, path: lockPath };
-    }
-    catch (error) {
-        return {
-            ok: false,
-            reasonCode: isNodeError(error, 'EEXIST') || isNodeError(error, 'ENOENT')
-                ? 'git-lifecycle-integration-backpressure'
-                : 'git-lifecycle-integration-lock-failed',
-        };
-    }
-}
-export async function verifyGitLifecyclePhysicalIntegrationLock(path, expected) {
-    const current = await readPhysicalIntegrationOwner(path);
-    return Boolean(current && samePhysicalIntegrationOwnerExact(current, expected)
-        && Date.parse(current.expiresAt) > Date.now());
-}
-export async function releaseGitLifecyclePhysicalIntegrationLock(path, expected) {
-    try {
-        const parent = dirname(path);
-        await assertGitLifecyclePrivateDirectory(path, parent);
-        const current = await readPhysicalIntegrationOwner(path);
-        if (!current || !samePhysicalIntegrationOwnerExact(current, expected))
-            return false;
-        const ownerFingerprint = await privateOwnerFingerprint(path);
-        if (!ownerFingerprint)
-            return false;
-        const quarantine = `${path}.release.${process.pid}.${Date.now()}`;
-        await anchoredRenameDirectory(parent, basename(path), basename(quarantine));
-        await assertGitLifecyclePrivateDirectory(quarantine, parent);
-        const renamedOwner = await readPhysicalIntegrationOwner(quarantine);
-        if (!renamedOwner || !samePhysicalIntegrationOwnerExact(renamedOwner, expected)
-            || await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
-            await restoreQuarantinedPrivateDirectory(quarantine, path, parent).catch(() => undefined);
-            return false;
-        }
-        return removeGitLifecyclePrivateDirectory(quarantine, parent, async (renamed) => await privateOwnerFingerprint(renamed) === ownerFingerprint);
-    }
-    catch (error) {
-        if (isNodeError(error, 'ENOENT'))
-            return false;
-        throw error;
-    }
-}
-export function computeGitLifecyclePhysicalIntegrationLockOwnerDigest(owner) {
-    return createHash('sha256').update([
-        'git-lifecycle-physical-owner-v1', owner.kind, owner.storyId, owner.sessionId,
-        owner.idempotencyKey, String(owner.pid), owner.createdAt, owner.expiresAt,
-        owner.persistent ? 'persistent' : 'ephemeral', owner.ownerNonce,
-    ].join('\0')).digest('hex');
-}
-/** Recover only the exact persistent lock whose digest was bound to a checkpoint. */
-export async function releaseGitLifecyclePhysicalIntegrationLockForCheckpoint(projectRoot, input) {
-    if (!isCanonicalLifecycleId(input.storyId) || !safeToken(input.idempotencyKey) || !isHash(input.ownerDigest)) {
-        return 'foreign';
-    }
-    const runtimeDirectory = await gitLifecycleRuntimeDirectory(projectRoot);
-    const leasesRoot = join(runtimeDirectory, 'leases');
-    const lockPath = join(leasesRoot, 'integration');
-    if (!existsSync(lockPath))
-        return 'absent';
-    try {
-        await assertGitLifecyclePrivateDirectory(leasesRoot, runtimeDirectory);
-        await assertGitLifecyclePrivateDirectory(lockPath, leasesRoot);
-        const current = await readPhysicalIntegrationOwner(lockPath);
-        if (!current || current.kind !== 'direct' || current.storyId !== input.storyId
-            || current.sessionId !== input.idempotencyKey || current.idempotencyKey !== input.idempotencyKey
-            || current.persistent !== true
-            || computeGitLifecyclePhysicalIntegrationLockOwnerDigest(current) !== input.ownerDigest)
-            return 'foreign';
-        return await releaseGitLifecyclePhysicalIntegrationLock(lockPath, current) ? 'released' : 'foreign';
-    }
-    catch {
-        return 'foreign';
-    }
-}
-async function readPhysicalIntegrationOwner(path) {
-    try {
-        await assertGitLifecyclePrivateDirectory(path, dirname(path));
-        const ownerPath = join(path, 'owner.json');
-        await assertSafePrivateFile(ownerPath, path);
-        const item = JSON.parse(await readFile(ownerPath, 'utf8'));
-        if (item.schemaVersion !== 1 || (item.kind !== 'direct' && item.kind !== 'continuous')
-            || !isCanonicalLifecycleId(item.storyId) || !safeToken(item.sessionId) || !safeToken(item.idempotencyKey)
-            || !Number.isSafeInteger(item.pid) || Number(item.pid) <= 0 || !isIso(item.createdAt) || !isIso(item.expiresAt)
-            || typeof item.persistent !== 'boolean' || typeof item.ownerNonce !== 'string'
-            || !/^[a-f0-9]{32}$/.test(item.ownerNonce))
-            return undefined;
-        return item;
-    }
-    catch {
-        return undefined;
-    }
-}
-async function readLegacyPhysicalIntegrationOwnerPid(path) {
-    try {
-        await assertGitLifecyclePrivateDirectory(path, dirname(path));
-        const ownerPath = join(path, 'owner.json');
-        await assertSafePrivateFile(ownerPath, path);
-        const item = JSON.parse(await readFile(ownerPath, 'utf8'));
-        return Number.isSafeInteger(item.pid) && Number(item.pid) > 0 ? Number(item.pid) : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function samePhysicalIntegrationOwner(left, right) {
-    return left.kind === right.kind && left.storyId === right.storyId
-        && left.sessionId === right.sessionId && left.idempotencyKey === right.idempotencyKey
-        && left.expiresAt === right.expiresAt && left.persistent === right.persistent;
-}
-function samePhysicalIntegrationOwnerExact(left, right) {
-    return samePhysicalIntegrationOwner(left, right)
-        && left.schemaVersion === right.schemaVersion && left.pid === right.pid && left.createdAt === right.createdAt
-        && left.ownerNonce === right.ownerNonce;
-}
-async function gitCommonDir(projectRoot) {
-    const canonicalRoot = await realpath(projectRoot);
-    const result = await execFileAsync('git', ['rev-parse', '--git-common-dir'], {
-        cwd: canonicalRoot,
-        encoding: 'utf8',
-        maxBuffer: 1024 * 1024,
-    });
-    const commonDir = result.stdout.trim();
-    const resolvedCommonDir = isAbsolute(commonDir) ? resolve(commonDir) : resolve(canonicalRoot, commonDir);
-    const canonicalCommonDir = await realpath(resolvedCommonDir);
-    if (canonicalCommonDir !== resolvedCommonDir)
-        throw new Error('git-lifecycle-common-dir-symlink');
-    await assertCommonDirectoryEntry(canonicalCommonDir);
-    const revalidated = await execFileAsync('git', ['rev-parse', '--git-common-dir'], {
-        cwd: canonicalRoot,
-        encoding: 'utf8',
-        maxBuffer: 1024 * 1024,
-    });
-    const secondRaw = revalidated.stdout.trim();
-    const second = isAbsolute(secondRaw) ? resolve(secondRaw) : resolve(canonicalRoot, secondRaw);
-    if (second !== resolvedCommonDir)
-        throw new Error('git-lifecycle-common-dir-raced');
-    return canonicalCommonDir;
-}
-async function ensureRuntimeDirectory(commonDir) {
-    const runtimeDirectory = join(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
-    if (!existsSync(runtimeDirectory)) {
-        await anchoredEnsureDirectory(commonDir, GIT_LIFECYCLE_RUNTIME_DIRECTORY);
-    }
-    await assertSafeFilesystemEntry(runtimeDirectory, 'directory');
-    if (await realpath(runtimeDirectory) !== runtimeDirectory)
-        throw new Error('git-lifecycle-runtime-directory-symlink');
-    return runtimeDirectory;
-}
-async function readDocument(path, options = {}) {
-    try {
-        await assertSafeFilesystemEntry(path, 'file');
-        return validateDocument(JSON.parse(await readFile(path, 'utf8')));
-    }
-    catch (error) {
-        if (isNodeError(error, 'ENOENT')) {
-            if (options.required)
-                throw new Error('git-lifecycle-runtime-missing');
-            return emptyDocument();
-        }
-        throw error;
-    }
-}
-async function assertStoreDestinationSafe(path) {
-    try {
-        await assertSafeFilesystemEntry(path, 'file');
-    }
-    catch (error) {
-        if (isNodeError(error, 'ENOENT'))
-            return;
-        throw error;
-    }
-}
-async function assertSafeFilesystemEntry(path, kind) {
-    const info = await lstat(path);
-    if (info.isSymbolicLink())
-        throw new Error(`git-lifecycle-${kind}-symlink`);
-    if (kind === 'file' ? !info.isFile() : !info.isDirectory())
-        throw new Error(`git-lifecycle-${kind}-invalid`);
-    if (posixSecurityAvailable() && info.uid !== process.getuid())
-        throw new Error(`git-lifecycle-${kind}-ownership-mismatch`);
-    if (posixSecurityAvailable() && (info.mode & 0o077) !== 0)
-        throw new Error(`git-lifecycle-${kind}-permissions-unsafe`);
-}
-function assertDirectChild(parent, child) {
-    const normalizedParent = resolve(parent);
-    const normalizedChild = resolve(child);
-    const childRelative = relative(normalizedParent, normalizedChild);
-    if (!childRelative || childRelative.startsWith('..') || isAbsolute(childRelative)
-        || dirname(normalizedChild) !== normalizedParent) {
-        throw new Error('git-lifecycle-private-path-escape');
-    }
-}
-async function assertPrivateDirectory(path, expectedParent) {
-    const normalized = resolve(path);
-    if (expectedParent)
-        assertDirectChild(resolve(expectedParent), normalized);
-    await assertSafeFilesystemEntry(normalized, 'directory');
-    if (resolve(await realpath(normalized)) !== normalized)
-        throw new Error('git-lifecycle-directory-substituted');
-    if (expectedParent) {
-        const parent = resolve(expectedParent);
-        await assertSafeFilesystemEntry(parent, 'directory');
-        if (resolve(await realpath(parent)) !== parent)
-            throw new Error('git-lifecycle-directory-parent-substituted');
-    }
-}
-async function assertSafePrivateFile(path, expectedParent) {
-    const normalized = resolve(path);
-    assertDirectChild(resolve(expectedParent), normalized);
-    await assertPrivateDirectory(resolve(expectedParent));
-    await assertSafeFilesystemEntry(normalized, 'file');
-    if (resolve(await realpath(normalized)) !== normalized)
-        throw new Error('git-lifecycle-file-substituted');
-}
-function assertSafeFilesystemEntrySync(path, kind) {
-    const info = lstatSync(path);
-    if (info.isSymbolicLink())
-        throw new Error(`git-lifecycle-${kind}-symlink`);
-    if (kind === 'file' ? !info.isFile() : !info.isDirectory())
-        throw new Error(`git-lifecycle-${kind}-invalid`);
-    if (posixSecurityAvailable() && info.uid !== process.getuid())
-        throw new Error(`git-lifecycle-${kind}-ownership-mismatch`);
-    if (posixSecurityAvailable() && (info.mode & 0o077) !== 0)
-        throw new Error(`git-lifecycle-${kind}-permissions-unsafe`);
-}
-async function assertCommonDirectoryEntry(path) {
-    const info = await lstat(path);
-    if (info.isSymbolicLink())
-        throw new Error('git-lifecycle-common-dir-symlink');
-    if (!info.isDirectory())
-        throw new Error('git-lifecycle-common-dir-invalid');
-}
-function assertCommonDirectoryEntrySync(path) {
-    const info = lstatSync(path);
-    if (info.isSymbolicLink())
-        throw new Error('git-lifecycle-common-dir-symlink');
-    if (!info.isDirectory())
-        throw new Error('git-lifecycle-common-dir-invalid');
-}
-export function posixSecurityAvailable(platform = process.platform) {
-    return platform !== 'win32' && typeof process.getuid === 'function';
-}
-function validateDocument(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        throw new Error('git-lifecycle-runtime-invalid');
-    const record = value;
-    const schemaVersion = record.schemaVersion;
-    assertExactKeys(record, schemaVersion === 2
-        ? ['schemaVersion', 'revision', 'epics', 'stories', 'operational']
-        : ['schemaVersion', 'revision', 'epics', 'stories'], 'git-lifecycle-runtime-unknown-field');
-    const epics = asRecord(record.epics);
-    const stories = asRecord(record.stories);
-    if ((schemaVersion !== 1 && schemaVersion !== 2)
-        || !Number.isSafeInteger(record.revision) || Number(record.revision) < 0
-        || !epics || !stories
-        || Object.values(epics).some((entry) => !asRecord(entry))
-        || Object.values(stories).some((entry) => !asRecord(entry))
-        || (schemaVersion === 2 && !validateOperationalEnvelope(record.operational))) {
-        throw new Error('git-lifecycle-runtime-invalid');
-    }
-    for (const [epicId, overlay] of Object.entries(epics)) {
-        if (!isCanonicalLifecycleId(epicId) || !validateEpicOverlay(overlay)) {
-            throw new Error('git-lifecycle-runtime-epic-invalid');
-        }
-    }
-    for (const [storyId, overlay] of Object.entries(stories)) {
-        if (!isCanonicalLifecycleId(storyId) || !storyId.includes('.') || !validateStoryOverlay(overlay, storyId)) {
-            throw new Error('git-lifecycle-runtime-story-invalid');
-        }
-    }
-    return record;
-}
-/**
- * Keep the physical store closed even before a domain consumer reads v2. The
- * domain module validates every nested field; this boundary additionally
- * rejects future/private top-level fields and unbounded collections so a
- * malformed document can never be treated as a legacy v1 fallback.
- */
-function validateOperationalEnvelope(value) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'repositoryFingerprint', 'writerEpoch', 'capabilities',
-        'identities', 'yoloop', 'projectionBindings', 'activeJournal',
-        'backfillReceipts', 'reconciliationReceipts', 'rollbackReceipts',
-    ], 'git-lifecycle-runtime-operational-unknown-field');
-    const identities = asRecord(item.identities);
-    const yoloop = asRecord(item.yoloop);
-    const bindings = asRecord(item.projectionBindings);
-    return item.schemaVersion === 'EpicOperationalState/1.0'
-        && isHash(item.repositoryFingerprint)
-        && Number.isSafeInteger(item.writerEpoch) && Number(item.writerEpoch) >= 1
-        && Array.isArray(item.capabilities) && item.capabilities.length <= 16
-        && item.capabilities.every((capability) => safeToken(capability))
-        && Boolean(identities) && Object.keys(identities).length <= 2_048
-        && Boolean(yoloop) && yoloop.schemaVersion === 'CommonYoloopAuthority/1.0'
-        && Boolean(bindings)
-        && (item.activeJournal === null || Boolean(asRecord(item.activeJournal)))
-        && validateBoundedRecordArray(item.backfillReceipts, 64)
-        && validateBoundedRecordArray(item.reconciliationReceipts, 64)
-        && validateBoundedRecordArray(item.rollbackReceipts, 64);
-}
-function validateBoundedRecordArray(value, max) {
-    return Array.isArray(value) && value.length <= max && value.every((entry) => Boolean(asRecord(entry)));
-}
-const EPIC_OVERLAY_KEYS = [
-    'branch_mode', 'execution_branch', 'origin_branch', 'branch_lease', 'origin_binding',
-    'graph_revision', 'aggregate_qa_receipt', 'terminal_git_receipt', 'physicalMergeStatus',
-    'pr_number', 'git_reconciliation_receipts', 'git_reconciliation_debt',
-];
-const STORY_OVERLAY_KEYS = ['checkpoint', 'status', 'last_step', 'steps_completed'];
-function validateEpicOverlay(value) {
-    assertExactKeys(value, EPIC_OVERLAY_KEYS, 'git-lifecycle-runtime-epic-unknown-field');
-    return (value.branch_mode === undefined || value.branch_mode === 'epic')
-        && (value.execution_branch === undefined || safeGitRef(value.execution_branch))
-        && (value.origin_branch === undefined || safeGitRef(value.origin_branch))
-        && (value.branch_lease === undefined || value.branch_lease === null || validateLease(value.branch_lease))
-        && (value.origin_binding === undefined || value.origin_binding === null || validateOriginBinding(value.origin_binding))
-        && (value.graph_revision === undefined || isHash(value.graph_revision))
-        && (value.aggregate_qa_receipt === undefined || value.aggregate_qa_receipt === null || validateAggregateQa(value.aggregate_qa_receipt))
-        && (value.terminal_git_receipt === undefined || value.terminal_git_receipt === null || validateTerminalReceipt(value.terminal_git_receipt))
-        && (value.physicalMergeStatus === undefined || ['merged', 'pushed', 'denied_external_gate', 'blocked_local_or_repo', 'not_attempted'].includes(String(value.physicalMergeStatus)))
-        && (value.pr_number === undefined || value.pr_number === null || Number.isSafeInteger(value.pr_number) && Number(value.pr_number) > 0)
-        && (value.git_reconciliation_receipts === undefined || validateReconciliationReceipts(value.git_reconciliation_receipts))
-        && (value.git_reconciliation_debt === undefined || validateReconciliationDebt(value.git_reconciliation_debt));
-}
-function validateStoryOverlay(value, storyId) {
-    assertExactKeys(value, STORY_OVERLAY_KEYS, 'git-lifecycle-runtime-story-unknown-field');
-    return (value.checkpoint === undefined || value.checkpoint === null || validateCheckpoint(value.checkpoint, storyId))
-        && (value.status === undefined || safeToken(value.status))
-        && (value.last_step === undefined || value.last_step === null || safeToken(value.last_step))
-        && (value.steps_completed === undefined || safeStringArray(value.steps_completed, 128));
-}
-function validateLease(value) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'ownerStoryId', 'sessionId', 'idempotencyKey', 'acquiredAt', 'expiresAt',
-        'handoffGrant', 'handoffConsumption', 'setupHeadSha',
-    ], 'git-lifecycle-runtime-lease-unknown-field');
-    return item.schemaVersion === 1 && isCanonicalLifecycleId(item.ownerStoryId)
-        && safeToken(item.sessionId) && safeToken(item.idempotencyKey)
-        && isIso(item.acquiredAt) && isIso(item.expiresAt)
-        && Date.parse(String(item.expiresAt)) > Date.parse(String(item.acquiredAt))
-        && (item.setupHeadSha === undefined || isSha(item.setupHeadSha))
-        && (item.handoffGrant === undefined || validateDirectYoloSetupHandoffGrant(item.handoffGrant, item))
-        && (item.handoffConsumption === undefined || validateDirectYoloSetupHandoffConsumption(item.handoffConsumption, item));
-}
-function validateDirectYoloSetupHandoffGrant(value, lease) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'kind', 'storyId', 'fromSessionId', 'tokenDigest',
-        'bundleDigest', 'claimRevision', 'expiresAt',
-    ], 'git-lifecycle-runtime-handoff-grant-unknown-field');
-    return item.schemaVersion === 1 && item.kind === 'direct-yolo-setup-handoff'
-        && item.storyId === lease.ownerStoryId && item.fromSessionId === lease.sessionId
-        && isHash(item.tokenDigest) && isHash(item.bundleDigest) && isHash(item.claimRevision)
-        && isIso(item.expiresAt)
-        && Date.parse(String(item.expiresAt)) <= Date.parse(String(lease.expiresAt));
-}
-function validateDirectYoloSetupHandoffConsumption(value, lease) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'kind', 'state', 'storyId', 'fromSessionId', 'tokenDigest',
-        'bundleDigest', 'claimRevision', 'consumedBySessionId', 'consumedAt',
-    ], 'git-lifecycle-runtime-handoff-consumption-unknown-field');
-    return item.schemaVersion === 1 && item.kind === 'direct-yolo-setup-handoff-consumption'
-        && item.state === 'consumed' && item.storyId === lease.ownerStoryId
-        && safeToken(item.fromSessionId) && isHash(item.tokenDigest)
-        && isHash(item.bundleDigest) && isHash(item.claimRevision)
-        && item.consumedBySessionId === lease.sessionId && isIso(item.consumedAt);
-}
-function validateOriginBinding(value) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, ['schemaVersion', 'originBranch', 'originHeadSha', 'executionBranch', 'capturedFromCurrentCheckout', 'capturedAt'], 'git-lifecycle-runtime-origin-unknown-field');
-    return item.schemaVersion === 1 && safeGitRef(item.originBranch) && safeGitRef(item.executionBranch)
-        && item.originBranch !== item.executionBranch && isSha(item.originHeadSha)
-        && item.capturedFromCurrentCheckout === true && isIso(item.capturedAt);
-}
-function validateAggregateQa(value) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'evidenceVersion', 'producer', 'contract', 'command', 'verdict',
-        'executionHeadSha', 'graphRevision', 'manifestDigest', 'resultDigest', 'checkedAt', 'receiptRef', 'gateIds',
-    ], 'git-lifecycle-runtime-aggregate-qa-unknown-field');
-    const executionV2 = item.evidenceVersion === 'p205-execution-v2'
-        && item.producer === 'local-yolo-tdd' && item.contract === 'P205-CI-02'
-        && item.command === P205_COMPLETE_COMMAND && isHash(item.manifestDigest) && isHash(item.resultDigest);
-    const legacy = item.evidenceVersion === undefined && item.producer === undefined && item.contract === undefined
-        && item.command === undefined && item.manifestDigest === undefined && item.resultDigest === undefined;
-    return item.schemaVersion === 1 && (executionV2 || legacy) && item.verdict === 'passed' && isSha(item.executionHeadSha)
-        && isHash(item.graphRevision) && isIso(item.checkedAt) && safeReceiptRef(item.receiptRef)
-        && safeStringArray(item.gateIds, 128, true);
-}
-function validateTerminalReceipt(value) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'epicId', 'executionBranch', 'originBranch', 'baseSha', 'executionHeadSha',
-        'mergeSha', 'pushedSha', 'strategy', 'prNumber', 'physicalStatus', 'localGateReceiptRefs',
-        'idempotencyKey', 'attemptStartedAt', 'completedAt', 'retryEligible', 'reasonCodes', 'publicSafe', 'candidateQa',
-        'providerGuard',
-    ], 'git-lifecycle-runtime-terminal-receipt-unknown-field');
-    return item.schemaVersion === 1 && isCanonicalLifecycleId(item.epicId)
-        && safeGitRef(item.executionBranch) && safeGitRef(item.originBranch) && isSha(item.baseSha) && isSha(item.executionHeadSha)
-        && (item.mergeSha === undefined || isSha(item.mergeSha)) && (item.pushedSha === undefined || isSha(item.pushedSha))
-        && (item.strategy === 'direct' || item.strategy === 'single_pr')
-        && (item.candidateQa === undefined || validateMergeCandidateQaReceipt(item.candidateQa, item))
-        && (item.providerGuard === undefined || validateProviderGuardReceipt(item.providerGuard, item))
-        && (item.prNumber === undefined || Number.isSafeInteger(item.prNumber) && Number(item.prNumber) > 0)
-        && ['prepared', 'merged', 'pushed', 'denied_external_gate', 'blocked_local_or_repo'].includes(String(item.physicalStatus))
-        && safeStringArray(item.localGateReceiptRefs, 128, true) && safeToken(item.idempotencyKey)
-        && isIso(item.attemptStartedAt) && (item.completedAt === undefined || isIso(item.completedAt))
-        && typeof item.retryEligible === 'boolean' && safeStringArray(item.reasonCodes, 128)
-        && item.publicSafe === true;
-}
-function validateProviderGuardReceipt(value, terminal) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'provider', 'mode', 'source', 'prHeadSha', 'originHeadSha', 'checkedAt', 'publicSafe',
-    ], 'git-lifecycle-runtime-provider-guard-unknown-field');
-    const modeSourceValid = item.mode === 'recovered_exact_tree'
-        ? item.source === 'physical_recovery'
-        : item.mode === 'strict_up_to_date_expected_head'
-            && ['branch_protection', 'ruleset', 'branch_protection_and_ruleset'].includes(String(item.source));
-    return item.schemaVersion === 1 && item.provider === 'github' && modeSourceValid
-        && terminal.strategy === 'single_pr' && terminal.physicalStatus === 'pushed'
-        && Number.isSafeInteger(terminal.prNumber) && Number(terminal.prNumber) > 0
-        && isSha(item.prHeadSha) && item.prHeadSha === terminal.mergeSha
-        && isSha(item.originHeadSha) && item.originHeadSha === terminal.baseSha
-        && isIso(item.checkedAt) && item.publicSafe === true;
-}
-function validateMergeCandidateQaReceipt(value, terminal) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, ['schemaVersion', 'kind', 'contract', 'command', 'originHeadSha', 'executionHeadSha',
-        'mergeSha', 'treeSha', 'graphRevision', 'manifestDigest', 'resultDigest', 'gateIds', 'checkedAt', 'receiptRef'], 'git-lifecycle-runtime-merge-candidate-unknown-field');
-    return item.schemaVersion === 1 && item.kind === 'epic_merge_candidate_qa'
-        && item.contract === 'P205-CI-02' && item.command === P205_COMPLETE_COMMAND
-        && isSha(item.originHeadSha) && item.originHeadSha === terminal.baseSha
-        && isSha(item.executionHeadSha) && item.executionHeadSha === terminal.executionHeadSha
-        && isSha(item.mergeSha) && item.mergeSha === terminal.mergeSha
-        && isSha(item.treeSha) && isHash(item.graphRevision) && isHash(item.manifestDigest) && isHash(item.resultDigest)
-        && safeStringArray(item.gateIds, 128, true) && isIso(item.checkedAt) && safeReceiptRef(item.receiptRef);
-}
-function validateCheckpoint(value, storyId) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'storyId', 'epicId', 'branch', 'baseSha', 'headSha', 'commits', 'idempotencyKey',
-        'dispatchId', 'bundleId', 'bundleDigest', 'graphRevision', 'claimRevision', 'receiptRefs',
-        'qaVerdict', 'reviewVerdict', 'qaReceipt', 'reviewReceipt', 'reviewReconciliation', 'recordedAt', 'rootMemoryEffect',
-    ], 'git-lifecycle-runtime-checkpoint-unknown-field');
-    const epicId = String(storyId).split('.')[0];
-    return item.schemaVersion === 1 && item.storyId === storyId && item.epicId === epicId
-        && safeGitRef(item.branch) && isSha(item.baseSha) && isSha(item.headSha) && item.baseSha !== item.headSha
-        && safeShaArray(item.commits) && item.commits.length === 1 && item.commits[0] === item.headSha
-        && safeToken(item.idempotencyKey) && (item.dispatchId === undefined || isHash(item.dispatchId))
-        && (item.bundleId === undefined || isHash(item.bundleId)) && isHash(item.bundleDigest)
-        && isHash(item.graphRevision) && (item.claimRevision === undefined || isHash(item.claimRevision))
-        && (item.rootMemoryEffect === undefined || isRootProjectMemoryEffect(item.rootMemoryEffect)
-            && item.rootMemoryEffect.storyId === storyId && item.rootMemoryEffect.executionBranch === item.branch
-            && item.rootMemoryEffect.sourceHeadSha === item.baseSha && item.rootMemoryEffect.childClaimRevision === item.claimRevision)
-        && safeStringArray(item.receiptRefs, 256, true)
-        && (item.qaVerdict === 'passed' || item.qaVerdict === 'blocked')
-        && ['approved', 'changes-requested', 'pending'].includes(String(item.reviewVerdict))
-        && validateStoryQaReceipt(item.qaReceipt, item)
-        && (item.reviewVerdict === 'pending' ? item.reviewReceipt === undefined : validateStoryReviewReceipt(item.reviewReceipt, item))
-        && (item.reviewReconciliation === undefined || validateHistoricalReviewReconciliation(item.reviewReconciliation, item))
-        && isIso(item.recordedAt);
-}
-function validateHistoricalReviewReconciliation(value, checkpoint) {
-    const item = asRecord(value);
-    const qa = asRecord(checkpoint.qaReceipt);
-    const review = asRecord(checkpoint.reviewReceipt);
-    if (!item || !qa || !review)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'kind', 'storyId', 'epicId', 'checkpointHeadSha', 'approvalCommitSha',
-        'approvalArtifactDigest', 'qaReceiptRef', 'reviewReceiptRef', 'sourceEvidenceDigest', 'reviewedAt', 'receiptRef',
-    ], 'git-lifecycle-runtime-review-reconciliation-unknown-field');
-    return item.schemaVersion === 1 && item.kind === 'historical_review_reconciliation'
-        && item.storyId === checkpoint.storyId && item.epicId === checkpoint.epicId
-        && item.checkpointHeadSha === checkpoint.headSha && isSha(item.approvalCommitSha)
-        && isHash(item.approvalArtifactDigest) && item.qaReceiptRef === qa.receiptRef
-        && item.reviewReceiptRef === review.receiptRef && isHash(item.sourceEvidenceDigest)
-        && isIso(item.reviewedAt) && Date.parse(String(item.reviewedAt)) >= Date.parse(String(qa.checkedAt))
-        && safeReceiptRef(item.receiptRef)
-        && Array.isArray(checkpoint.receiptRefs) && checkpoint.receiptRefs.includes(item.receiptRef);
-}
-function validateStoryQaReceipt(value, checkpoint) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'kind', 'producer', 'evidenceVersion', 'storyId', 'epicId', 'baseSha', 'headSha', 'bundleDigest',
-        'graphRevision', 'contract', 'command', 'manifestDigest', 'gateIds', 'resultDigest',
-        'sourceEvidenceDigest', 'verdict', 'checkedAt', 'receiptRef',
-    ], 'git-lifecycle-runtime-story-qa-unknown-field');
-    return item.schemaVersion === 1 && item.kind === 'story_qa_evidence' && item.producer === 'local-yolo-tdd'
-        && (item.evidenceVersion === undefined || item.evidenceVersion === 'git-immutable-v1'
-            || item.evidenceVersion === 'p205-execution-v2' && item.contract === 'P205-CI-02'
-                && item.command === P205_COMPLETE_COMMAND && isHash(item.manifestDigest)
-                && safeStringArray(item.gateIds, 32, true) && isHash(item.resultDigest))
-        && evidenceBindingMatches(item, checkpoint) && isHash(item.sourceEvidenceDigest)
-        && item.verdict === checkpoint.qaVerdict && (item.verdict === 'passed' || item.verdict === 'blocked')
-        && isIso(item.checkedAt) && safeReceiptRef(item.receiptRef)
-        && checkpoint.receiptRefs.includes(item.receiptRef);
-}
-function validateStoryReviewReceipt(value, checkpoint) {
-    const item = asRecord(value);
-    const qa = asRecord(checkpoint.qaReceipt);
-    if (!item || !qa)
-        return false;
-    assertExactKeys(item, [
-        'schemaVersion', 'kind', 'producer', 'storyId', 'epicId', 'baseSha', 'headSha', 'bundleDigest',
-        'graphRevision', 'sourceEvidenceDigest', 'reviewArtifactDigest', 'qaReceiptRef', 'verdict', 'reviewedAt', 'receiptRef',
-    ], 'git-lifecycle-runtime-story-review-unknown-field');
-    return item.schemaVersion === 1 && item.kind === 'story_review_evidence' && item.producer === 'root-commit-range-review'
-        && evidenceBindingMatches(item, checkpoint) && isHash(item.sourceEvidenceDigest)
-        && (item.reviewArtifactDigest === undefined || isHash(item.reviewArtifactDigest))
-        && item.qaReceiptRef === qa.receiptRef && item.receiptRef !== qa.receiptRef
-        && (item.verdict === 'approved' || item.verdict === 'changes-requested')
-        && (item.verdict === 'approved' ? checkpoint.reviewVerdict === 'approved' : checkpoint.reviewVerdict === 'changes-requested')
-        && isIso(item.reviewedAt) && Date.parse(String(item.reviewedAt)) >= Date.parse(String(qa.checkedAt))
-        && safeReceiptRef(item.receiptRef) && checkpoint.receiptRefs.includes(item.receiptRef);
-}
-function evidenceBindingMatches(item, checkpoint) {
-    return ['storyId', 'epicId', 'baseSha', 'headSha', 'bundleDigest', 'graphRevision']
-        .every((key) => item[key] === checkpoint[key]);
-}
-function validateReconciliationReceipts(value) {
-    if (!Array.isArray(value) || value.length > 1024)
-        return false;
-    return value.every((entry) => {
-        const item = asRecord(entry);
-        if (!item)
-            return false;
-        assertExactKeys(item, ['schemaVersion', 'resourceId', 'action', 'outcome', 'idempotencyKey', 'reasonCodes', 'recordedAt', 'publicSafe'], 'git-lifecycle-runtime-reconciliation-receipt-unknown-field');
-        return item.schemaVersion === 1 && safeToken(item.resourceId)
-            && ['no_op', 'delete_local_branch', 'delete_remote_branch', 'close_pull_request'].includes(String(item.action))
-            && ['applied', 'already_absent', 'dry_run', 'failed'].includes(String(item.outcome))
-            && safeToken(item.idempotencyKey) && safeStringArray(item.reasonCodes, 128) && isIso(item.recordedAt) && item.publicSafe === true;
-    });
-}
-function validateReconciliationDebt(value) {
-    if (!Array.isArray(value) || value.length > 1024)
-        return false;
-    return value.every((entry) => {
-        const item = asRecord(entry);
-        if (!item)
-            return false;
-        assertExactKeys(item, ['schemaVersion', 'resourceId', 'action', 'managed', 'reasonCodes', 'evidence', 'publicSafe'], 'git-lifecycle-runtime-reconciliation-debt-unknown-field');
-        return item.schemaVersion === 1 && safeToken(item.resourceId) && item.action === 'preserve'
-            && typeof item.managed === 'boolean' && safeStringArray(item.reasonCodes, 128)
-            && safeStringArray(item.evidence, 16) && item.publicSafe === true;
-    });
-}
-function assertExactKeys(record, allowed, reasonCode) {
-    const allow = new Set(allowed);
-    if (Object.keys(record).some((key) => !allow.has(key)))
-        throw new Error(reasonCode);
-}
-function isCanonicalLifecycleId(value) {
-    return typeof value === 'string' && /^P[1-9][0-9]*(?:\.[0-9]+)*$/.test(value);
-}
-function isGitLifecycleGraphAuthority(value) {
-    const item = asRecord(value);
-    if (!item)
-        return false;
-    return Object.keys(item).length === 10
-        && item.schemaVersion === 1
-        && item.kind === 'git_lifecycle_graph_authority'
-        && item.producer === 'server-continuous-yoloop-v1'
-        && (item.source === 'yolo' || item.source === 'yoloop')
-        && isCanonicalLifecycleId(item.epicId)
-        && isCanonicalLifecycleId(item.storyId)
-        && String(item.storyId).startsWith(`${String(item.epicId)}.`)
-        && safeGitRef(item.executionBranch)
-        && safeGitRef(item.originBranch)
-        && item.originBranch !== item.executionBranch
-        && typeof item.graphRevision === 'string'
-        && /^[a-f0-9]{64}$/.test(item.graphRevision)
-        && item.publicSafe === true;
-}
-function safeGitRef(value) {
-    return typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._/-]{0,239}$/.test(value)
-        && !value.includes('..') && !value.includes('//') && !value.includes('@{')
-        && !value.endsWith('/') && !value.endsWith('.') && !value.split('/').some((part) => !part || part.startsWith('.') || part.endsWith('.lock'));
-}
-function safeRepositoryPath(value) {
-    return value.length > 0 && value.length <= 1024 && !isAbsolute(value)
-        && !value.includes('\0') && !value.replaceAll('\\', '/').split('/').includes('..');
-}
-function safeToken(value) {
-    return typeof value === 'string' && value.length > 0 && value.length <= 240 && /^[A-Za-z0-9._:/#\-[\]]+$/.test(value) && !value.includes('..');
-}
-function safeReceiptRef(value) {
-    return safeToken(value);
-}
-function isSha(value) {
-    return typeof value === 'string' && /^[a-f0-9]{40,64}$/i.test(value);
-}
-function isHash(value) {
-    return typeof value === 'string' && /^[a-f0-9]{64}$/i.test(value);
-}
-function isIso(value) {
-    return typeof value === 'string' && value.length <= 64 && Number.isFinite(Date.parse(value));
-}
-function safeStringArray(value, max, nonEmpty = false) {
-    return Array.isArray(value) && value.length <= max && (!nonEmpty || value.length > 0) && value.every(safeToken);
-}
-function safeShaArray(value) {
-    return Array.isArray(value) && value.length > 0 && value.length <= 256 && value.every(isSha);
-}
-function emptyDocument() {
-    return { schemaVersion: 1, revision: 0, epics: {}, stories: {} };
-}
-async function acquireLock(lockPath) {
-    const parent = dirname(lockPath);
-    const requested = { pid: process.pid, nonce: randomBytes(16).toString('hex') };
-    const create = async () => {
-        await assertPrivateDirectory(parent);
-        await anchoredCreateOwnedDirectory(parent, basename(lockPath), JSON.stringify(requested));
-        try {
-            await assertGitLifecyclePrivateDirectory(lockPath, parent);
-            await assertSafePrivateFile(join(lockPath, 'owner.json'), lockPath);
-        }
-        catch (error) {
-            await removeGitLifecyclePrivateDirectory(lockPath, parent).catch(() => undefined);
-            throw error;
-        }
-    };
-    try {
-        await create();
-    }
-    catch (error) {
-        if (!isNodeError(error, 'EEXIST'))
-            throw error;
-        await assertSafeFilesystemEntry(lockPath, 'directory');
-        const owner = await readOwner(lockPath);
-        if (owner !== undefined && processExists(owner.pid))
-            throw new Error('git-lifecycle-runtime-lock-active');
-        if (owner === undefined && await recentlyCreated(lockPath))
-            throw new Error('git-lifecycle-runtime-lock-active');
-        const ownerFingerprint = await privateOwnerFingerprint(lockPath);
-        if (!ownerFingerprint)
-            throw new Error('git-lifecycle-runtime-lock-owner-invalid');
-        const quarantine = `${lockPath}.stale.${process.pid}.${Date.now()}`;
-        await anchoredRenameDirectory(parent, basename(lockPath), basename(quarantine));
-        try {
-            await assertGitLifecyclePrivateDirectory(quarantine, parent);
-            if (await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
-                await restoreQuarantinedPrivateDirectory(quarantine, lockPath, parent).catch(() => undefined);
-                throw new Error('git-lifecycle-runtime-lock-owner-replaced');
-            }
-            await create();
-        }
-        finally {
-            await removeGitLifecyclePrivateDirectory(quarantine, parent, async (renamed) => await privateOwnerFingerprint(renamed) === ownerFingerprint).catch(() => undefined);
-        }
-    }
-    return requested;
-}
-async function releaseRuntimeLock(lockPath, expected) {
-    const parent = dirname(lockPath);
-    try {
-        await assertGitLifecyclePrivateDirectory(lockPath, parent);
-        const current = await readOwner(lockPath);
-        if (!current || !sameRuntimeLockOwner(current, expected))
-            return false;
-        const ownerFingerprint = await privateOwnerFingerprint(lockPath);
-        if (!ownerFingerprint)
-            return false;
-        const quarantine = `${lockPath}.release.${process.pid}.${Date.now()}`;
-        await anchoredRenameDirectory(parent, basename(lockPath), basename(quarantine));
-        await assertGitLifecyclePrivateDirectory(quarantine, parent);
-        const renamed = await readOwner(quarantine);
-        if (!renamed || !sameRuntimeLockOwner(renamed, expected)
-            || await privateOwnerFingerprint(quarantine) !== ownerFingerprint) {
-            await restoreQuarantinedPrivateDirectory(quarantine, lockPath, parent).catch(() => undefined);
-            return false;
-        }
-        return removeGitLifecyclePrivateDirectory(quarantine, parent, async (renamedPath) => await privateOwnerFingerprint(renamedPath) === ownerFingerprint);
-    }
-    catch (error) {
-        if (isNodeError(error, 'ENOENT'))
-            return false;
-        throw error;
-    }
-}
-async function recentlyCreated(path) {
-    try {
-        return Date.now() - (await stat(path)).mtimeMs < 30_000;
-    }
-    catch {
-        return true;
-    }
-}
-async function readOwner(lockPath) {
-    try {
-        await assertGitLifecyclePrivateDirectory(lockPath, dirname(lockPath));
-        const ownerPath = join(lockPath, 'owner.json');
-        await assertSafePrivateFile(ownerPath, lockPath);
-        const value = JSON.parse(await readFile(ownerPath, 'utf8'));
-        return Number.isSafeInteger(value.pid) && Number(value.pid) > 0
-            && (value.nonce === undefined || typeof value.nonce === 'string' && /^[a-f0-9]{32}$/.test(value.nonce))
-            ? { pid: Number(value.pid), ...(typeof value.nonce === 'string' ? { nonce: value.nonce } : {}) }
-            : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function sameRuntimeLockOwner(left, right) {
-    return left.pid === right.pid && left.nonce !== undefined && left.nonce === right.nonce;
-}
-function processExists(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        return isNodeError(error, 'EPERM');
-    }
-}
-function asRecord(value) {
-    return value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
-}
-function isNodeError(error, code) {
-    return error instanceof Error && 'code' in error && error.code === code;
-}
+import{execFile as Ii,execFileSync as G}from"node:child_process";import{createHash as b,randomBytes as Re}from"node:crypto";import{lstat as _e,open as ki,readFile as Z,realpath as re,stat as Ci}from"node:fs/promises";import{existsSync as Y,lstatSync as Fe,readFileSync as xe,realpathSync as Ee}from"node:fs";import{basename as P,dirname as X,isAbsolute as he,join as D,relative as Oi,resolve as v}from"node:path";import{promisify as Bi}from"node:util";import{publicWriteSet as Pi}from"../../../shared/dist/yoloop/public-story-write-set.js";import{isRootProjectMemoryEffect as Hi}from"../private-execution/shared-root-memory-types.js";import{verifyRootMemoryPhysicalWriteSet as $i}from"../private-execution/root-memory-git-evidence.js";import{resolveBranchUnit as Ni}from"../../../shared/dist/yoloop/branch-unit.js";import{epicHeadReconciliationInputDigest as Ke,epicHeadReconciliationPathsDigest as Ye,epicHeadReconciliationRangeDigest as Vi,validateEpicHeadReconciliationReceipt as Li}from"../../../shared/dist/yoloop/epic-terminal-git.js";import{anchoredAtomicWriteFile as zi,anchoredCreateOwnedDirectory as Je,anchoredEnsureDirectory as Qe,anchoredExecuteGit as qi,anchoredExecuteNode as Ze,anchoredRemoveDirectory as Ti,anchoredRenameDirectory as oe}from"./secure-filesystem-boundary.js";import{GIT_LIFECYCLE_COMMIT_PUSH_STEP_ID as ji,GIT_LIFECYCLE_REVIEW_PR_STEP_ID as Gi,GIT_LIFECYCLE_SETUP_BRANCH_STEP_ID as Ae}from"./git-lifecycle-step-ids.js";const T=Bi(Ii),ye="neocortex-yoloop",we="runtime.json",F="node scripts/test-root.mjs --gate complete",Ue=Object.freeze({"P174.03.029264":"339141be7339a0edf55710cbccb6e6558f514792"}),Wi=Object.freeze({"P174.03.811759":Object.freeze({baseSha:"749c8fc732deaf26c81a8e08cc94b83c8cf0f5ba",headSha:"84162456d9cbe5000ffd0ed3eb3d0e88cfeba499",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2",commitBodyDigest:"b4fc759a49765fd8c0b3d0f5d1c333c2a4bf28d324e83eedabb12f9530df3738",changedPathsDigest:"11f54704f5007f6139159419cfd7781f908b1502e117365c6d84011384579ed2",qaDigest:"f1100775e21f5d0d990f77303a2a06d936908f016983e32a63316d81aee6b9fc",reviewDigest:"50400bbcddb6f02408837cf99077de5d3af8c84822ab23a8b5499c338af7103a"}),"P174.03.685003":Object.freeze({baseSha:"84162456d9cbe5000ffd0ed3eb3d0e88cfeba499",headSha:"272a7fee89e4b9324d35701df1c83b671fa96299",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641",commitBodyDigest:"e97966e26ce3ba31d5951b9fdac67808c88c1fd8be7ec1e73982f3f1cc7ffd81",changedPathsDigest:"6cc3c9033f1c4711dcbe3c676d1d7f9906614c7d6e95228e843d1c63cefbc641",qaDigest:"7439329a93321f39fb6b0de0a41c22e58373a399f9048e362dff4ffa6f1a7d89",reviewDigest:"1b2d12262e84acf9da7d06149a0effb11274ebdc986affbfd47635b855ec7135"}),"P174.03.029264":Object.freeze({baseSha:"272a7fee89e4b9324d35701df1c83b671fa96299",headSha:"339141be7339a0edf55710cbccb6e6558f514792",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab",commitBodyDigest:"0f269a00dcd168a6f548ff10dfa667b193c948ac9c7211f5cb11a0561757c371",changedPathsDigest:"1053bb2baf487e38fa28d7e8cfb872c5c4da66802534ee226bbc2c7455a6a5ab",qaDigest:"ef0fd2c6e216557825cd8521ccb2f9960a3af48f18e7a5ada441bee8bfda400b",reviewDigest:"372d0f4a2f32978c8b39f20167637b3917187edb75d49875e93200c4c5a19d0d"}),"P174.03.913359":Object.freeze({baseSha:"339141be7339a0edf55710cbccb6e6558f514792",headSha:"4ccc90b85c49b27f718090bf25bc452f1b84e5e3",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5",commitBodyDigest:"89a6653197509e75246a758d2706876b337770571a1cac47d9d85ec96c196459",changedPathsDigest:"12b5cfba2667e8064309807776c1b323561dc8d853f9afe5f676007b8494b2b5",qaDigest:"c7d3762ad30e4f9356243df17a1dd7123cbf1b660808d68176f44d1cd5da6449",reviewDigest:"e4ecf577e174fd66f31aa4a0113ab672ced16b12ee531f6831aa533795145ba1"}),"P174.03.724350":Object.freeze({baseSha:"4ccc90b85c49b27f718090bf25bc452f1b84e5e3",headSha:"568e9464fb086304146b9eb4594281f91302aef1",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe",commitBodyDigest:"b3032338bfcd6c9dc460e9426220a1966dedeff9968c4064fdd36a315560721b",changedPathsDigest:"c8b8b6b96edf9cea78925e2f961bd74069d77af03783a5368b8ac8025bf1fefe",qaDigest:"91f2f5b00935b1b04bb5d400df500cbc97c412072078b713c6e5ba8fda669bd0",reviewDigest:"9bc92069d3b3a76cc8b02d339d432690258be1376464b69e152ed8fd3d682f05"}),"P174.03.011976":Object.freeze({baseSha:"568e9464fb086304146b9eb4594281f91302aef1",headSha:"195599b1a99a99a8416c4c26c9ab9990847338a4",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21",commitBodyDigest:"b8a28392fac663dd614b695a49c894b7cab116d45722a42850e3b24e2aaf36f4",changedPathsDigest:"49b7f2a0a967b2ba4249615c6d08834445a60df95045352838808eb4d6743b21",qaDigest:"6eb4459a7d80c4a268fc931297e8156ed2a320584f8775f0787d91b42c0929d4",reviewDigest:"98b21de29f7cceeec73da19000c6c144395cce6eb699c6a82dfab505d4ab7b44"}),"P174.03.686659":Object.freeze({baseSha:"195599b1a99a99a8416c4c26c9ab9990847338a4",headSha:"0db3681a5dad4e25ce37d967c636eb9d54915556",graphRevision:"60b343b4b810e6d5abc3159275012b9ab9ab517f9d780e7550fa5b49be740445",effectiveClaimRevision:"5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e",commitBodyDigest:"143257f4018ad773afc0c7280bd8aab8786851a9c20b65f8110881ff54656839",changedPathsDigest:"5c0fdbf820d677c288981b6f73f7d2d9a04ce7f4713687f12a2e984705244b8e",qaDigest:"6303dbf473e2815a3671aeb2c25528d8daba484b92a5a40d1eea5215e1f6763e",reviewDigest:"1bd6695846ed9340c8677cfa9b573880532187aeee487efaaa70577a0c94e7f2"})}),Ie="neocortex-yoloop-runtime.json",Mi="runtime.lock",ke=new WeakMap,Xe=new WeakMap,Ce=new WeakSet;async function Ft(i,e){return(await Fi(i,{headSha:e.headSha,graphRevisions:[e.graphRevision],...e.nowIso!==void 0?{nowIso:e.nowIso}:{},...e.anchoredWorkspace!==void 0?{anchoredWorkspace:e.anchoredWorkspace}:{}})).get(e.graphRevision)}async function Fi(i,e){const t=[...new Set(e.graphRevisions)];if(!S(e.headSha)||t.length===0||t.some(x=>!p(x)))throw new Error("p205-transient-binding-invalid");const r=e.anchoredWorkspace;if(r&&v(i)!==D(v(r.parent),r.name))throw new Error("p205-transient-anchor-binding-invalid");const n=async x=>r?(await qi(r.parent,r.name,r.identity,x)).toString("utf8"):String((await T("git",[...x],{cwd:i,encoding:"utf8",maxBuffer:8*1024*1024})).stdout),a=async()=>r?JSON.parse((await Ze(r.parent,r.name,r.identity,["-e","const fs=require('node:fs');process.stdout.write(JSON.stringify({manifest:fs.readFileSync('config/release-gates.v2.json','utf8'),runner:fs.readFileSync('scripts/test-root.mjs','utf8')}));"])).toString("utf8")):{manifest:await Z(D(i,"config","release-gates.v2.json"),"utf8"),runner:await Z(D(i,"scripts","test-root.mjs"),"utf8")};if((await n(["rev-parse","HEAD"])).trim()!==e.headSha)throw new Error("p205-transient-head-mismatch");const{manifest:o,runner:g}=await a(),[c,f]=await Promise.all([n(["show",`${e.headSha}:config/release-gates.v2.json`]),n(["show",`${e.headSha}:scripts/test-root.mjs`])]);if(o!==c||g!==f)throw new Error("p205-transient-producer-dirty");const h=JSON.parse(o),u=Array.isArray(h.requiredCompleteClasses)?h.requiredCompleteClasses.filter(x=>typeof x=="string"&&/^[a-z0-9-]+$/.test(x)):[];if(h.contract!=="P205-CI-02"||u.length===0)throw new Error("p205-transient-manifest-invalid");const l={...process.env};delete l.NEOCORTEX_PROFILE_DIR;const m=r?(await Ze(r.parent,r.name,r.identity,["scripts/test-root.mjs","--gate","complete"])).toString("utf8"):String((await T(process.execPath,["scripts/test-root.mjs","--gate","complete"],{cwd:i,encoding:"utf8",maxBuffer:64*1024*1024,env:l})).stdout),{manifest:R,runner:C}=await a();if(R!==o||C!==g)throw new Error("p205-transient-producer-raced");if((await n(["rev-parse","HEAD"])).trim()!==e.headSha)throw new Error("p205-transient-head-raced");const W=b("sha256").update(o).digest("hex"),y=b("sha256").update(m).digest("hex"),w=se(e.nowIso??new Date().toISOString()),M=new Map,U=Object.freeze(u);for(const x of t){const O=b("sha256").update(["p205-transient-execution-v1",F,e.headSha,x,W,u.join(","),y,w].join("\0")).digest("hex"),te=Object.freeze({schemaVersion:1,kind:"p205_transient_execution_authority",contract:"P205-CI-02",command:F,executionHeadSha:e.headSha,graphRevision:x,manifestDigest:W,gateIds:U,resultDigest:y,executedAt:w,executionEvidenceDigest:O}),$=Object.freeze(Object.create(null));ke.set($,te),M.set(x,$)}return M}async function Oe(i,e={}){const t=await rt(i);return pi(t,e)}function ei(i,e={}){let t;try{const r=G("git",["rev-parse","--git-common-dir"],{cwd:i,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim(),n=Ee(i),a=he(r)?v(r):v(n,r),s=Ee(a);if(s!==a)throw new Error("git-lifecycle-common-dir-symlink");dt(s);const o=D(s,ye),g=D(o,we);if(Y(o)&&(mi(o,"directory"),Ee(o)!==o))throw new Error("git-lifecycle-runtime-directory-symlink");t=Y(g)?g:D(s,Ie)}catch{if(e.required)throw new Error("git-lifecycle-common-dir-invalid");return ze()}if(!Y(t)){if(e.required)throw new Error("git-lifecycle-runtime-missing");return ze()}return mi(t,"file"),Ve(JSON.parse(xe(t,"utf8")))}async function Kt(i){try{await Oe(i,{required:!0});return}catch(e){if(!(e instanceof Error)||e.message!=="git-lifecycle-runtime-missing")throw e}try{await Be(i,()=>{},{expectedRevision:0})}catch(e){if(!(e instanceof Error)||e.message!=="git-lifecycle-runtime-revision-conflict")throw e;await Oe(i,{required:!0})}}function ii(i,e,t){if(!i||i.ownerStoryId!==e)return!1;const r=typeof i.sessionId=="string"?i.sessionId:"",n=Date.parse(String(i.expiresAt));return/^setup-[a-f0-9]{64}$/.test(r)&&i.idempotencyKey===r&&Number.isFinite(n)&&n>t}async function Yt(i,e,t=new Date().toISOString()){if(!It(e))throw new Error("git-lifecycle-graph-authority-invalid");const r=D(v(i),".neocortex","state.json"),n=await Z(r,"utf8"),a=d(JSON.parse(n));if(!a)throw new Error("git-lifecycle-tracked-state-invalid");const s=await Oe(i),o=ti(a,s),g=d(d(o.epics)?.[e.epicId]),c=d(d(o.stories)?.[e.storyId]);if(!g)throw new Error("git-lifecycle-graph-authority-epic-invalid");if(!c||String(c.epic_id??e.storyId.split(".")[0])!==e.epicId)throw new Error("git-lifecycle-graph-authority-story-invalid");const f=Array.isArray(g.stories)?g.stories.filter(y=>typeof y=="string"):Object.keys(d(o.stories)??{}).filter(y=>{const w=d(d(o.stories)?.[y]);return String(w?.epic_id??y.split(".")[0])===e.epicId});if(Array.isArray(g.stories)&&!f.includes(e.storyId))throw new Error("git-lifecycle-graph-authority-story-invalid");const h=f.map(y=>{const w=d(d(o.stories)?.[y])??{};return{id:y,branch_name:typeof w.branch_name=="string"||w.branch_name===null?w.branch_name:void 0,pr_number:typeof w.pr_number=="number"||w.pr_number===null?w.pr_number:void 0,steps_completed:Array.isArray(w.steps_completed)?w.steps_completed.filter(M=>typeof M=="string"):[],checkpoint:d(w.checkpoint)}}),u=Ni({...g,id:e.epicId},h);if(u.mode!=="epic")throw new Error("git-lifecycle-graph-authority-epic-invalid");if(u.executionBranch!==e.executionBranch)throw new Error("git-lifecycle-graph-authority-branch-mismatch");if(u.originBranch!==void 0&&u.originBranch!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-mismatch");const l=typeof d(s.epics[e.epicId])?.origin_branch=="string"?String(d(s.epics[e.epicId]).origin_branch):void 0;if(l!==void 0&&l!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-mismatch");if(u.originBranch===void 0&&l===void 0){const{stdout:y}=await T("git",["branch","--show-current"],{cwd:i,encoding:"utf8",maxBuffer:1048576});if(String(y).trim()!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-physical-mismatch")}const m=typeof g.graph_revision=="string"?g.graph_revision:void 0,R=typeof d(s.epics[e.epicId])?.graph_revision=="string"?String(d(s.epics[e.epicId]).graph_revision):void 0;if(m!==void 0&&!p(m))throw new Error("git-lifecycle-graph-revision-invalid");if(m===e.graphRevision&&R===e.graphRevision&&u.originBranch===e.originBranch&&l===e.originBranch)return{applied:!1,reused:!0,revision:s.revision,graphRevision:e.graphRevision};const C=Date.parse(t);if(!Number.isFinite(C))throw new Error("git-lifecycle-graph-authority-time-invalid");const _=d(g.branch_lease);if(_&&Number.isFinite(Date.parse(String(_.expiresAt)))&&Date.parse(String(_.expiresAt))>C&&!ii(_,e.storyId,C))throw new Error("git-lifecycle-graph-authority-writer-active");return{applied:!0,reused:!1,revision:(await Be(i,y=>{const w=ni(y,e.epicId);if(w.branch_mode!==void 0&&w.branch_mode!=="epic")throw new Error("git-lifecycle-graph-authority-epic-raced");const M=w.execution_branch;if(M!==void 0&&M!==e.executionBranch)throw new Error("git-lifecycle-graph-authority-branch-raced");const U=w.origin_branch;if(U!==void 0&&U!==e.originBranch)throw new Error("git-lifecycle-graph-authority-origin-raced");const x=w.graph_revision;if(x!==void 0&&x!==m)throw new Error("git-lifecycle-graph-authority-epoch-raced");const O=d(w.branch_lease);if(O&&Number.isFinite(Date.parse(String(O.expiresAt)))&&Date.parse(String(O.expiresAt))>C&&!ii(O,e.storyId,C))throw new Error("git-lifecycle-graph-authority-writer-active");w.branch_mode="epic",w.execution_branch=e.executionBranch,w.origin_branch=e.originBranch,w.graph_revision=e.graphRevision},{expectedRevision:s.revision,preCommit:async()=>{if(await Z(r,"utf8")!==n)throw new Error("git-lifecycle-graph-authority-tracked-state-raced")}})).document.revision,graphRevision:e.graphRevision}}async function Be(i,e,t={}){const r=await Ne(i),n=await li(r),a=D(n,Mi),s=await Ct(a);try{const o=D(n,we),g=D(r,Ie),c=await pi(Y(o)?o:g);if(t.expectedRevision!==void 0&&t.expectedRevision!==c.revision)throw new Error("git-lifecycle-runtime-revision-conflict");const f=structuredClone(c),h=e(f);if(c.schemaVersion===2&&t.nextSchemaVersion!==void 0&&t.nextSchemaVersion!==2)throw new Error("git-lifecycle-runtime-schema-downgrade");const u=Ve({...f,schemaVersion:t.nextSchemaVersion??c.schemaVersion,revision:c.revision+1});return await t.preCommit?.(u),await J(n,"directory"),await ot(o),await zi(n,we,`${JSON.stringify(u,null,2)}
+`),await J(o,"file"),await Ki(n),{document:u,value:h}}finally{await Ot(a,s).catch(()=>{})}}async function Ki(i){let e;try{e=await ki(i,"r")}catch(t){if(process.platform==="win32"&&(H(t,"EPERM")||H(t,"EISDIR")||H(t,"EINVAL")))return;throw t}try{await e.sync()}finally{await e.close()}}function ti(i,e){const t=structuredClone(i),r=ri(t,"epics"),n=ri(t,"stories");for(const[a,s]of Object.entries(e.epics))r[a]={...d(r[a])??{},...structuredClone(s)};for(const[a,s]of Object.entries(e.stories)){const o=d(n[a])??{},g=o.steps_completed,c=s.steps_completed;s.status==="branch-ready"&&s.last_step===Ae&&Array.isArray(c)&&c.length===1&&c[0]===Ae&&s.checkpoint===void 0&&Array.isArray(g)&&g.includes(Ae)||(n[a]={...o,...structuredClone(s)})}return t}function ri(i,e){const t=i[e];if(t===void 0){const a={};return i[e]=a,a}const r=d(t);if(r)return r;if(!Array.isArray(t))throw new Error(`git-lifecycle-tracked-${e}-invalid`);const n={};for(const a of t){const s=d(a),o=typeof s?.id=="string"?s.id.trim():"";if(!o||n[o]!==void 0)throw new Error(`git-lifecycle-tracked-${e}-ambiguous`);n[o]=s}return i[e]=n,n}function ni(i,e){return i.epics[e]??(i.epics[e]={})}function Jt(i,e){return i.stories[e]??(i.stories[e]={})}function ai(i,e,t,r){const n=d(i);return!!(n&&n.epicId===t&&n.branch===r&&n.qaVerdict==="passed"&&n.reviewVerdict==="approved"&&yi(n,e))}async function Qt(i,e,t,r,n,a,s=[]){return ci(i,e,t,r,n,a,s).verdict==="verified"}function ci(i,e,t,r,n,a,s=[],o=new Date().toISOString(),g=a===void 0?"scheduling":"integration"){const c=()=>fi({storyId:t,epicId:r,executionBranch:n,value:e,verifiedAt:o,verdict:"rejected",reasonCode:"checkpoint-git-physical-invalid"});try{if(!ai(e,t,r,n))return c();const f=d(e),h=d(f.qaReceipt),u=d(f.reviewReceipt),l=String(f.headSha),m=String(f.baseSha),R=He(i,t,l,u.reviewArtifactDigest===void 0),C=u.reviewArtifactDigest===void 0&&!tt(i,t,l);if(u.reviewArtifactDigest!==void 0&&u.reviewArtifactDigest!==R?.digest)return c();const _=E(i,["rev-parse",`refs/heads/${n}`]).trim();if(G("git",["merge-base","--is-ancestor",l,_],{cwd:i,stdio:"ignore"}),!C&&R?.verdict!=="approved"){if(u.reviewArtifactDigest!==void 0||!it(i,f,u,h,t,r,_))return c()}else if(f.reviewReconciliation!==void 0)return c();const y=E(i,["show","--no-patch","--format=%H%n%P%n%B",l]),w=E(i,["rev-parse",`${l}^`]).trim(),M=E(i,["rev-list","--count",`${m}..${l}`]).trim();if(w!==m||M!=="1")return c();const U=new Set(y.split(`
+`).map(q=>q.trim())),x=y.split(`
+`).map(q=>q.trim()).filter(q=>q.startsWith("Neocortex-Review-Artifact-Digest: "));if(x.length>0&&(x.length!==1||x[0]!==`Neocortex-Review-Artifact-Digest: ${R?.digest}`||u.reviewArtifactDigest!==R?.digest))return c();const te=[`Neocortex-Story: ${t}`,`Neocortex-Epic: ${r}`,`Neocortex-Execution-Branch: ${n}`,`Neocortex-Bundle-Digest: ${String(f.bundleDigest)}`,`Neocortex-Graph-Revision: ${String(f.graphRevision)}`,...f.dispatchId?[`Neocortex-Dispatch: ${String(f.dispatchId)}`]:[],...f.bundleId?[`Neocortex-Bundle: ${String(f.bundleId)}`]:[],...f.claimRevision?[`Neocortex-Claim-Revision: ${String(f.claimRevision)}`]:[]].every(q=>U.has(q));if(te){const Me=[...U].find(Ai=>Ai.startsWith("Neocortex-Prepared-Base: "))?.slice(25)??"";if(!/^[a-f0-9]{40,64}$/i.test(Me))return c();G("git",["merge-base","--is-ancestor",Me,l],{cwd:i,stdio:"ignore"})}const N=E(i,["diff-tree","--no-commit-id","--name-only","-r","-z",l]).split("\0").filter(Boolean);if(N.length===0||N.some(q=>!fe(q)))return c();const j=b("sha256").update(y).digest("hex"),me=b("sha256").update([...N].sort().join("\0")).digest("hex"),V=oi({projectRoot:i,checkpoint:f,storyId:t,epicId:r,executionBranch:n,baseSha:m,headSha:l,commitBodyDigest:j,changedPathsDigest:me,changedPaths:N,authorizedWriteSet:s.length>0?s:Zi(i,t)});if(!V||h.receiptRef!==`story-qa:${String(h.sourceEvidenceDigest)}`)return c();const Te=Ui({storyId:t,baseSha:m,headSha:l,bundleDigest:String(f.bundleDigest),graphRevision:String(f.graphRevision),commitBody:y,changedPaths:N}),je=h.evidenceVersion==="p205-execution-v2"&&h.contract==="P205-CI-02"&&h.command===F&&p(h.manifestDigest)&&z(h.gateIds,32,!0)&&p(h.resultDigest)&&h.sourceEvidenceDigest===Xi({gitEvidenceDigest:Te,headSha:l,graphRevision:String(f.graphRevision),manifestDigest:String(h.manifestDigest),gateIds:h.gateIds,resultDigest:String(h.resultDigest)}),_i=h.evidenceVersion==="git-immutable-v1"&&h.sourceEvidenceDigest===Te,xi=h.evidenceVersion===void 0&&V.mode==="legacy-migration"&&V.binding?.qaDigest===h.sourceEvidenceDigest,Se=Ji(a,_,String(f.graphRevision))&&(je||V.mode==="legacy-migration"&&(_i||xi)),De=g==="scheduling"&&a===void 0&&je;if(!Se&&!De)return c();const Ge=u.reviewArtifactDigest!==void 0,We=b("sha256").update([Ge?"root-commit-range-review-v2":"root-commit-range-review-v1",t,m,l,String(f.bundleDigest),String(f.graphRevision),String(h.receiptRef),b("sha256").update(y).digest("hex"),[...N].sort().join(","),...Ge?[R.digest]:[]].join("\0")).digest("hex");if(u.sourceEvidenceDigest!==We||u.receiptRef!==`story-review:${We}`||V.mode==="legacy-migration"&&V.binding?.reviewDigest!==void 0&&V.binding.reviewDigest!==u.sourceEvidenceDigest||!te&&(Ue[t]!==l||!Array.isArray(f.receiptRefs)||!f.receiptRefs.some(q=>typeof q=="string"&&q.startsWith("legacy-direct-yolo:"))))return c();const Ei=b("sha256").update(["checkpoint-p205-transient-v1",t,r,n,m,l,String(f.bundleDigest),j,me,V.mode,V.effectiveClaimRevision,String(h.sourceEvidenceDigest),String(u.sourceEvidenceDigest),...f.reviewReconciliation?[String(d(f.reviewReconciliation)?.sourceEvidenceDigest)]:[],ue(a)?.executionEvidenceDigest??(De?"scheduling-git-verification":"legacy-bounded-authority")].join("\0")).digest("hex"),ce=Se?ue(a):void 0;return Object.freeze({schemaVersion:1,kind:"story_checkpoint_physical_verification",producer:"client-p205-transient-v1",storyId:t,epicId:r,branch:n,baseSha:m,headSha:l,aggregateHeadSha:ce?.executionHeadSha??l,commitBodyDigest:j,changedPathsDigest:me,claimVerification:V.mode,effectiveClaimRevision:V.effectiveClaimRevision,sourceEvidenceDigest:Ei,command:F,manifestDigest:ce?.manifestDigest??"0".repeat(64),gateIds:ce?.gateIds??Object.freeze(["legacy-bounded"]),resultDigest:ce?.resultDigest??"0".repeat(64),graphRevision:String(f.graphRevision),executionEvidenceDigest:ce?.executionEvidenceDigest??"0".repeat(64),verifiedAt:ce?.executedAt??se(o),verdict:"verified",reasonCodes:Object.freeze([Se?"checkpoint-p205-transient-verified":De?"checkpoint-git-scheduling-verified":"checkpoint-legacy-bounded-verified",...V.mode==="legacy-migration"?["checkpoint-legacy-migration-verified"]:[]]),publicSafe:!0})}catch{return c()}}function Yi(i,e,t,r,n,a,s=[],o=new Date().toISOString()){const g=a?"integration":"scheduling",c=ci(i,e,t,r,n,a,s,o,g);return c.verdict!=="verified"?{kind:"rejected",verification:c}:g==="integration"?{kind:"integration-authorized",verification:c}:c.reasonCodes.includes("checkpoint-git-scheduling-verified")?{kind:"scheduling-only",evidence:Object.freeze({schemaVersion:1,kind:"story_scheduling_checkpoint_evidence",producer:"client-git-physical-v1",storyId:t,epicId:r,branch:n,baseSha:c.baseSha,headSha:c.headSha,graphRevision:c.graphRevision,effectiveClaimRevision:c.effectiveClaimRevision,sourceEvidenceDigest:c.sourceEvidenceDigest,verifiedAt:c.verifiedAt,reasonCodes:Object.freeze(["checkpoint-git-scheduling-verified"]),integrationAuthorized:!1,publicSafe:!0})}:{kind:"rejected",verification:fi({storyId:t,epicId:r,executionBranch:n,value:e,verifiedAt:o,verdict:"rejected",reasonCode:"checkpoint-git-physical-invalid"})}}function Ji(i,e,t){const r=ue(i);return!!(r&&r.schemaVersion===1&&r.kind==="p205_transient_execution_authority"&&r.contract==="P205-CI-02"&&r.command===F&&r.graphRevision===t&&p(r.resultDigest)&&p(r.executionEvidenceDigest)&&r.executionHeadSha===e&&S(e))}function ue(i){return i&&typeof i=="object"?ke.get(i):void 0}function Zt(i){const e=ue(i);return e?Object.freeze({executionHeadSha:e.executionHeadSha,graphRevision:e.graphRevision,manifestDigest:e.manifestDigest,gateIds:Object.freeze([...e.gateIds]),resultDigest:e.resultDigest,executedAt:e.executedAt,executionEvidenceDigest:e.executionEvidenceDigest}):void 0}function Ut(i,e,t){const r=ue(i);return!!(r&&r.executionHeadSha===e&&r.graphRevision===t&&r.command===F)}async function Xt(i,e,t,r=new Date().toISOString()){const n=JSON.parse(xe(D(i,".neocortex","state.json"),"utf8")),a=ei(i,{required:!0}),s=ti(n,a),o=d(s.epics),g=d(s.stories),c=d(o?.[e.epicId]),f=d(c?.origin_binding),h=d(c?.aggregate_qa_receipt);if(!c||!g||c.branch_mode!=="epic"||c.execution_branch!==e.executionBranch||c.origin_branch!==e.originBranch||c.graph_revision!==e.graphRevision||!f||f.originHeadSha!==e.originHeadSha||f.originBranch!==e.originBranch||f.executionBranch!==e.executionBranch||!h||h.receiptRef!==t.receiptRef||h.executionHeadSha!==t.executionHeadSha||h.graphRevision!==t.graphRevision||h.manifestDigest!==t.manifestDigest||h.resultDigest!==t.resultDigest)throw new Error("epic-head-reconciliation-state-drift");const u=E(i,["symbolic-ref","--quiet","--short","HEAD"]).trim(),l=E(i,["rev-parse","HEAD"]).trim();if(u!==e.executionBranch||l!==e.executionHeadSha)throw new Error("epic-head-reconciliation-head-raced");G("git",["cat-file","-e",`${e.originHeadSha}^{commit}`],{cwd:i,stdio:"ignore"}),G("git",["merge-base","--is-ancestor",e.originHeadSha,l],{cwd:i,stdio:"ignore"});const m=Array.isArray(c.stories)?c.stories.filter($=>typeof $=="string"):Object.keys(g).filter($=>$.startsWith(`${e.epicId}.`)),R=[],C=new Set;for(const $ of m){const N=d(g[$]),j=d(N?.checkpoint);if(!N||!j)throw new Error("epic-head-reconciliation-checkpoint-drift");if(Yi(i,j,$,e.epicId,e.executionBranch,void 0,Pe($,N,j),r).kind!=="scheduling-only")throw new Error("epic-head-reconciliation-checkpoint-drift");R.push(String(j.headSha));for(const V of Pe($,N,j))C.add(V)}const _=R.at(-1);if(!_||_!==e.lastAcceptedCheckpointHeadSha)throw new Error("epic-head-reconciliation-checkpoint-drift");G("git",["merge-base","--is-ancestor",_,l],{cwd:i,stdio:"ignore"});const W=E(i,["rev-list","--first-parent","--reverse",`${_}..${l}`]).trim().split(`
+`).filter(Boolean),y=E(i,["diff","--name-only","-z",`${_}..${l}`]).split("\0").filter(Boolean).sort(),w=[...C].sort(),M=Object.freeze({...e,revalidatedAt:se(r),inputDigest:void 0}),{inputDigest:U,...x}=M,O=Object.freeze({...x,inputDigest:Ke(x)});if(!ae(m,O.acceptedCheckpointIds)||!ae(R,O.acceptedCheckpointHeads)||!ae(W,O.reconciliationCommitShas)||!ae(y,O.changedPaths)||!ae(w,O.allowedWriteSet)||!Li(O,{epicId:e.epicId,executionBranch:e.executionBranch,originBranch:e.originBranch,graphRevision:e.graphRevision,originHeadSha:e.originHeadSha,executionHeadSha:l,acceptedCheckpointIds:m,acceptedCheckpointHeads:R,aggregateQaReceipt:t,nowIso:r}))throw new Error("epic-head-reconciliation-physical-invalid");await Be(i,$=>{const N=ni($,e.epicId),j=N.head_reconciliation_receipt;if(!j||j.inputDigest!==e.inputDigest)throw new Error("epic-head-reconciliation-cas-conflict");N.head_reconciliation_receipt=O},{expectedRevision:a.revision,preCommit:async()=>{if(E(i,["rev-parse","HEAD"]).trim()!==l||E(i,["symbolic-ref","--quiet","--short","HEAD"]).trim()!==u)throw new Error("epic-head-reconciliation-head-raced")}});const te=Object.freeze(Object.create(null));return Xe.set(te,Object.freeze({executionHeadSha:l,graphRevision:e.graphRevision,aggregateReceiptRef:t.receiptRef,reconciliationInputDigest:O.inputDigest})),Object.freeze({authority:te,receipt:O})}function er(i,e){if(!i||typeof i!="object"||Ce.has(i))return!1;const t=ke.get(i),r=Xe.get(i);return t&&t.executionHeadSha===e.executionHeadSha&&t.graphRevision===e.graphRevision&&t.manifestDigest===e.aggregateQaReceipt.manifestDigest&&t.resultDigest===e.aggregateQaReceipt.resultDigest&&t.executedAt===e.aggregateQaReceipt.checkedAt?(Ce.add(i),!0):!(r&&e.headReconciliationReceipt&&r.executionHeadSha===e.executionHeadSha&&r.graphRevision===e.graphRevision&&r.aggregateReceiptRef===e.aggregateQaReceipt.receiptRef&&r.reconciliationInputDigest===e.headReconciliationReceipt.inputDigest)?!1:(Ce.add(i),!0)}function oi(i){const e=Wi[i.storyId],t=typeof i.checkpoint.claimRevision=="string"?i.checkpoint.claimRevision:void 0,r=i.storyId==="P174.03.811759"||i.storyId==="P174.03.685003",n=Qi(i.authorizedWriteSet);let a=[];if(i.checkpoint.rootMemoryEffect!==void 0){if(e)return;try{a=$i(i.projectRoot,i.checkpoint.rootMemoryEffect,{storyId:i.storyId,executionBranch:i.executionBranch,baseSha:i.baseSha,headRef:i.headSha,childPaths:n}).files.map(o=>o.path)}catch{return}}const s=n.length>0&&n.length===i.authorizedWriteSet.length&&i.changedPaths.every(o=>n.some(g=>di(g,o))||a.includes(o));if(e&&i.epicId==="P174"&&i.executionBranch==="epic/P174"&&i.baseSha===e.baseSha&&i.headSha===e.headSha&&i.checkpoint.graphRevision===e.graphRevision&&i.commitBodyDigest===e.commitBodyDigest&&i.changedPathsDigest===e.changedPathsDigest&&(r?t===void 0:t===e.effectiveClaimRevision))return i.authorizedWriteSet.length>0&&(!s||!si(e.effectiveClaimRevision,n))?void 0:Object.freeze({mode:"legacy-migration",effectiveClaimRevision:e.effectiveClaimRevision,binding:e});if(t!==void 0&&!(!t||!p(t))&&!(!s||!si(t,n)))return Object.freeze({mode:"canonical",effectiveClaimRevision:t})}function Qi(i){const e=i.map(t=>t.replaceAll("\\","/").replace(/^\.\//,"").replace(/\/{2,}/g,"/"));return e.some(t=>!fe(t))?Object.freeze([]):Object.freeze([...new Set(e)].sort())}function Zi(i,e){try{const t=JSON.parse(xe(D(i,".neocortex","state.json"),"utf8")),r=d(t.stories),n=d(r?.[e]),a=ei(i),s=d(a.stories[e]?.checkpoint)??d(n?.checkpoint);return Pe(e,n,s)}catch{return[]}}function Pe(i,e,t){const r=Array.isArray(e?.files_to_modify)?e.files_to_modify.filter(n=>typeof n=="string"):[];if(!t?.dispatchId||!t.bundleId)return r;try{return Pi({...e,id:i,files_to_modify:r})}catch{return[]}}function si(i,e){return i===b("sha256").update(e.join("\0")).digest("hex")||i===b("sha256").update(JSON.stringify(e)).digest("hex")}function di(i,e){return i===e||i.endsWith("/")&&e.startsWith(i)}function ir(i,e,t,r,n,a){try{if(!ai(e,t,r,n))return!1;const s=d(e),o=d(s.qaReceipt),g=d(s.reviewReceipt),c=String(s.headSha),f=String(s.baseSha),h=E(i,["rev-parse",`refs/heads/${n}`]).trim();if(G("git",["merge-base","--is-ancestor",c,h],{cwd:i,stdio:"ignore"}),E(i,["rev-parse",`${c}^`]).trim()!==f||E(i,["rev-list","--count",`${f}..${c}`]).trim()!=="1")return!1;const u=E(i,["show","--no-patch","--format=%H%n%P%n%B",c]),l=E(i,["diff-tree","--no-commit-id","--name-only","-r","-z",c]).split("\0").filter(Boolean);if(l.length===0||l.some(R=>!fe(R)))return!1;const m=oi({projectRoot:i,checkpoint:s,storyId:t,epicId:r,executionBranch:n,baseSha:f,headSha:c,changedPaths:l,authorizedWriteSet:a,commitBodyDigest:b("sha256").update(u).digest("hex"),changedPathsDigest:b("sha256").update([...l].sort().join("\0")).digest("hex")});return!(m?.mode!=="legacy-migration"||!m.binding||o.sourceEvidenceDigest!==m.binding.qaDigest||o.receiptRef!==`story-qa:${m.binding.qaDigest}`||g.sourceEvidenceDigest!==m.binding.reviewDigest||g.receiptRef!==`story-review:${m.binding.reviewDigest}`||g.qaReceiptRef!==o.receiptRef)}catch{return!1}}function Ui(i){return b("sha256").update(["local-yolo-tdd-git-immutable-v1",i.storyId,i.baseSha,i.headSha,i.bundleDigest,i.graphRevision,b("sha256").update(i.commitBody).digest("hex"),b("sha256").update([...i.changedPaths].sort().join("\0")).digest("hex")].join("\0")).digest("hex")}function Xi(i){return b("sha256").update(["local-yolo-tdd-p205-execution-v2",F,i.gitEvidenceDigest,i.headSha,i.graphRevision,i.manifestDigest,i.gateIds.join(","),i.resultDigest].join("\0")).digest("hex")}function fi(i){const e=d(i.value);return Object.freeze({schemaVersion:1,kind:"story_checkpoint_physical_verification",producer:"client-p205-transient-v1",storyId:i.storyId,epicId:i.epicId,branch:i.executionBranch,baseSha:S(e?.baseSha)?String(e?.baseSha):"0".repeat(40),headSha:S(e?.headSha)?String(e?.headSha):"0".repeat(40),aggregateHeadSha:"0".repeat(40),commitBodyDigest:"0".repeat(64),changedPathsDigest:"0".repeat(64),claimVerification:"canonical",effectiveClaimRevision:"0".repeat(64),command:F,manifestDigest:"0".repeat(64),gateIds:Object.freeze([]),resultDigest:"0".repeat(64),graphRevision:"0".repeat(64),executionEvidenceDigest:"0".repeat(64),sourceEvidenceDigest:"0".repeat(64),verifiedAt:se(i.verifiedAt),verdict:i.verdict,reasonCodes:Object.freeze([i.reasonCode]),publicSafe:!0})}function E(i,e){return G("git",[...e],{cwd:i,encoding:"utf8",maxBuffer:32*1024*1024})}function He(i,e,t,r=!1){if(!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(e)||t!==":"&&!/^[a-f0-9]{40,64}$/i.test(t))return;const n=`.neocortex/stories/${e}/review.md`;let a;try{a=G("git",["show",`${t===":"?":":`${t}:`}${n}`],{cwd:i,maxBuffer:128*1024,stdio:["ignore","pipe","ignore"]})}catch{return}if(a.length===0||a.length>64*1024||a.includes(0))return;let s;try{s=new TextDecoder("utf-8",{fatal:!0}).decode(a)}catch{return}const o=s.replace(/\r\n/g,`
+`).split(`
+`),g=new RegExp(`^#\\s+${e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?=\\s|$|[:\u2014-])`);if(!o.some(u=>g.test(u)))return;const c=o.filter(u=>/^Verdict\s*:/i.test(u));if(o.some(u=>/^Status\s*:\s*(pending|changes-requested|rejected)\b/i.test(u)))return;const f=o.filter(u=>/^Decision\s*:/i.test(u));if(c.length===0&&r&&f.length===1&&/^Decision\s*:\s*APPROVED\b/i.test(f[0]))return Object.freeze({verdict:"approved",digest:b("sha256").update(a).digest("hex")});if(c.length!==1)return;const h=/^Verdict\s*:\s*(approved|pending|changes-requested)(?=\s|$|[;,.])/i.exec(c[0])?.[1]?.toLowerCase();if(!(h!=="approved"&&h!=="pending"&&h!=="changes-requested"))return Object.freeze({verdict:h,digest:b("sha256").update(a).digest("hex")})}function et(i){return b("sha256").update(["root-historical-review-reconciliation-v1",i.storyId,i.epicId,i.checkpointHeadSha,i.approvalCommitSha,i.approvalArtifactDigest,i.qaReceiptRef,i.reviewReceiptRef,b("sha256").update(i.approvalCommitBody).digest("hex")].join("\0")).digest("hex")}function it(i,e,t,r,n,a,s){const o=d(e.reviewReconciliation);if(!o||!wi(o,e))return!1;const g=String(o.approvalCommitSha),c=String(e.headSha);if(g===c)return!1;try{if(G("git",["merge-base","--is-ancestor",c,g],{cwd:i,stdio:"ignore"}),G("git",["merge-base","--is-ancestor",g,s],{cwd:i,stdio:"ignore"}),!E(i,["rev-list","--first-parent",s]).split(`
+`).includes(g))return!1;const f=E(i,["show","--no-patch","--format=%P",g]).trim().split(/\s+/);if(f.length!==1||!S(f[0]))return!1;const h=E(i,["show","--no-patch","--format=%H%n%P%n%B",g]),u=new Set(h.split(`
+`).map(W=>W.trim()));if(!u.has(`Neocortex-Review-Reconciliation: ${n}`)||!u.has(`Neocortex-Original-Checkpoint: ${c}`)||!u.has(`Neocortex-Original-Review-Receipt: ${String(t.receiptRef)}`))return!1;const l=`.neocortex/stories/${n}/review.md`,m=E(i,["diff-tree","--no-commit-id","--name-only","-r","-z",g]).split("\0").filter(Boolean);if(!m.includes(l)||m.some(W=>!fe(W)))return!1;const R=He(i,n,g);if(R?.verdict!=="approved"||R.digest!==o.approvalArtifactDigest)return!1;const C=He(i,n,s);if(C?.verdict!=="approved"||C.digest!==R.digest)return!1;const _=et({storyId:n,epicId:a,checkpointHeadSha:c,approvalCommitSha:g,approvalArtifactDigest:R.digest,qaReceiptRef:String(r.receiptRef),reviewReceiptRef:String(t.receiptRef),approvalCommitBody:h});return o.sourceEvidenceDigest===_&&o.receiptRef===`story-review-reconciliation:${_}`}catch{return!1}}function tt(i,e,t){if(!/^[A-Za-z][A-Za-z0-9_-]*\.[A-Za-z0-9._-]+$/.test(e)||!/^[a-f0-9]{40,64}$/i.test(t))return!1;try{return G("git",["cat-file","-e",`${t}:.neocortex/stories/${e}/review.md`],{cwd:i,stdio:"ignore",maxBuffer:1024}),!0}catch{return!1}}function se(i){return Number.isFinite(Date.parse(i))?new Date(Date.parse(i)).toISOString():new Date().toISOString()}async function tr(i,e){if(Ue[e.storyId]!==e.headSha)return;const t=[".neocortex/state.json",`.neocortex/stories/${e.storyId}/qa-gate-result.json`,`.neocortex/stories/${e.storyId}/validation-evidence.md`,`.neocortex/stories/${e.storyId}/review.md`,`docs/stories/${e.storyId}.story.md`];try{const r=(await T("git",["rev-parse",`refs/heads/${e.executionBranch}`],{cwd:i,encoding:"utf8",maxBuffer:1048576})).stdout.trim();if(await T("git",["merge-base","--is-ancestor",e.headSha,r],{cwd:i}),(await T("git",["rev-parse",`${e.headSha}^`],{cwd:i,encoding:"utf8",maxBuffer:1024*1024})).stdout.trim()!==e.baseSha)return;const a=String((await T("git",["diff","--binary","--full-index",`${e.baseSha}..${e.headSha}`],{cwd:i,encoding:"utf8",maxBuffer:32*1024*1024})).stdout);if(b("sha256").update(a).digest("hex")!==e.bundleDigest)return;const s=String((await T("git",["show","--no-patch","--format=%H%n%P%n%B",e.headSha],{cwd:i,encoding:"utf8",maxBuffer:4*1024*1024})).stdout);if(!String((await T("git",["show","--no-patch","--format=%s",e.headSha],{cwd:i,encoding:"utf8",maxBuffer:1024*1024})).stdout).trim().includes(e.storyId))return;const c=String((await T("git",["diff-tree","--no-commit-id","--name-only","-r","-z",e.headSha],{cwd:i,encoding:"utf8",maxBuffer:8*1024*1024})).stdout).split("\0").filter(Boolean);if(!t.every(y=>c.includes(y))||c.some(y=>!fe(y)))return;const f=await Promise.all(t.map(async y=>String((await T("git",["show",`${e.headSha}:${y}`],{cwd:i,encoding:"utf8",maxBuffer:16*1024*1024})).stdout))),h=JSON.parse(f[0]),u=d(h.stories),l=d(h.epics),m=d(u?.[e.storyId]),R=d(l?.[e.epicId]),C=Array.isArray(m?.steps_completed)?m.steps_completed:[],_=JSON.parse(f[1]);return m?.status!=="done"||!C.includes(ji)||!C.includes(Gi)||R?.branch_mode!=="epic"||R.execution_branch!==e.executionBranch||_.storyId!==e.storyId||_.status!=="qa-passed"||_.safeToContinueYoloop!==!0||!Array.isArray(_.blockingChecks)||_.blockingChecks.length!==0||!f[2].includes(e.storyId)||!/P205[\s\S]{0,80}(pass|aprov)/i.test(f[2])||!f[3].includes(e.storyId)||!/approved|aprovado/i.test(f[3])||!f[4].includes(e.storyId)?void 0:`legacy-direct-yolo:${b("sha256").update(["legacy-direct-yolo-recovery-v1",e.storyId,e.epicId,e.executionBranch,e.baseSha,e.headSha,e.bundleDigest,e.graphRevision,b("sha256").update(s).digest("hex"),b("sha256").update([...c].sort().join("\0")).digest("hex"),...f.map(y=>b("sha256").update(y).digest("hex"))].join("\0")).digest("hex")}`}catch{return}}async function rt(i){const e=await Ne(i),t=D(e,ye),r=D(t,we);if(Y(t)&&(await J(t,"directory"),await re(t)!==t))throw new Error("git-lifecycle-runtime-directory-symlink");return Y(r)?r:D(e,Ie)}async function gi(i){return li(await Ne(i))}async function nt(i,e){if(!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(e)||e.includes(".."))throw new Error("git-lifecycle-private-child-invalid");const t=v(i);await ee(t);const r=v(t,e);return de(t,r),Y(r)||await Qe(t,e),await ee(r,t),await ee(t),r}async function A(i,e){const t=v(e),r=v(i);de(t,r),await ee(t),await ee(r,t)}async function rr(i,e){await ie(i,e)}async function ne(i,e,t){const r=v(e),n=v(i);de(r,n);try{await A(n,r)}catch(s){if(H(s,"ENOENT"))return!1;throw s}const a=v(r,`${n.slice(r.length+1)}.remove.${process.pid}.${Date.now()}.${Re(4).toString("hex")}`);return de(r,a),await oe(r,P(n),P(a)),await A(a,r),t&&!await t(a)?(await le(a,n,r).catch(()=>{}),!1):(await Ti(r,P(a)),!0)}async function le(i,e,t){await A(i,t);try{await _e(e);return}catch(r){if(!H(r,"ENOENT"))throw r}await oe(t,P(i),P(e)),await A(e,t)}async function L(i){try{await A(i,X(i));const e=D(i,"owner.json");await ie(e,i);const t=await Z(e);return await ie(e,i),b("sha256").update(t).digest("hex")}catch{return}}async function nr(i,e){const t=await gi(i),r=await nt(t,"leases"),n=D(r,"integration"),a=`${n}.recovery`;if(Y(a)){await A(a,r);const c=await hi(a),f=await L(a);if(c===void 0||ve(c))return{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"};if(!f||!await ne(a,r,async h=>await L(h)===f))return{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"}}const s=se(e.createdAt??new Date().toISOString()),o=Object.freeze({schemaVersion:1,kind:e.kind,storyId:e.storyId,sessionId:e.sessionId,idempotencyKey:e.idempotencyKey,pid:process.pid,createdAt:s,expiresAt:se(e.expiresAt),persistent:e.persistent,ownerNonce:e.ownerNonce??Re(16).toString("hex")});if(Date.parse(o.expiresAt)<=Date.parse(o.createdAt))return{ok:!1,reasonCode:"git-lifecycle-integration-lock-failed"};const g=async()=>{await ee(r,t);try{return await Je(r,P(n),`${JSON.stringify(o)}
+`),await A(n,r),await ie(D(n,"owner.json"),n),!0}catch(c){throw H(c,"EEXIST")||await ne(n,r).catch(()=>{}),c}};try{return await g(),{ok:!0,owner:o,path:n}}catch(c){if(!H(c,"EEXIST"))return{ok:!1,reasonCode:"git-lifecycle-integration-lock-failed"}}try{const c=await pe(n),f=c?void 0:await hi(n);if(c&&ui(c,o))return{ok:!0,owner:c,path:n};if(c&&Date.parse(c.expiresAt)>Date.now()&&(c.persistent||ve(c.pid))||f!==void 0&&ve(f)||!c&&f===void 0&&await Di(n))return{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"};const u=await L(n);if(!u)return{ok:!1,reasonCode:"git-lifecycle-integration-lock-failed"};const l=`${n}.stale.${process.pid}.${Date.now()}`;await oe(r,P(n),P(l));try{if(await A(l,r),await L(l)!==u)return await le(l,n,r).catch(()=>{}),{ok:!1,reasonCode:"git-lifecycle-integration-backpressure"};await g()}finally{await ne(l,r,async m=>await L(m)===u).catch(()=>{})}return{ok:!0,owner:o,path:n}}catch(c){return{ok:!1,reasonCode:H(c,"EEXIST")||H(c,"ENOENT")?"git-lifecycle-integration-backpressure":"git-lifecycle-integration-lock-failed"}}}async function ar(i,e){const t=await pe(i);return!!(t&&$e(t,e)&&Date.parse(t.expiresAt)>Date.now())}async function at(i,e){try{const t=X(i);await A(i,t);const r=await pe(i);if(!r||!$e(r,e))return!1;const n=await L(i);if(!n)return!1;const a=`${i}.release.${process.pid}.${Date.now()}`;await oe(t,P(i),P(a)),await A(a,t);const s=await pe(a);return!s||!$e(s,e)||await L(a)!==n?(await le(a,i,t).catch(()=>{}),!1):ne(a,t,async o=>await L(o)===n)}catch(t){if(H(t,"ENOENT"))return!1;throw t}}function ct(i){return b("sha256").update(["git-lifecycle-physical-owner-v1",i.kind,i.storyId,i.sessionId,i.idempotencyKey,String(i.pid),i.createdAt,i.expiresAt,i.persistent?"persistent":"ephemeral",i.ownerNonce].join("\0")).digest("hex")}async function cr(i,e){if(!Q(e.storyId)||!B(e.idempotencyKey)||!p(e.ownerDigest))return"foreign";const t=await gi(i),r=D(t,"leases"),n=D(r,"integration");if(!Y(n))return"absent";try{await A(r,t),await A(n,r);const a=await pe(n);return!a||a.kind!=="direct"||a.storyId!==e.storyId||a.sessionId!==e.idempotencyKey||a.idempotencyKey!==e.idempotencyKey||a.persistent!==!0||ct(a)!==e.ownerDigest?"foreign":await at(n,a)?"released":"foreign"}catch{return"foreign"}}async function pe(i){try{await A(i,X(i));const e=D(i,"owner.json");await ie(e,i);const t=JSON.parse(await Z(e,"utf8"));return t.schemaVersion!==1||t.kind!=="direct"&&t.kind!=="continuous"||!Q(t.storyId)||!B(t.sessionId)||!B(t.idempotencyKey)||!Number.isSafeInteger(t.pid)||Number(t.pid)<=0||!k(t.createdAt)||!k(t.expiresAt)||typeof t.persistent!="boolean"||typeof t.ownerNonce!="string"||!/^[a-f0-9]{32}$/.test(t.ownerNonce)?void 0:t}catch{return}}async function hi(i){try{await A(i,X(i));const e=D(i,"owner.json");await ie(e,i);const t=JSON.parse(await Z(e,"utf8"));return Number.isSafeInteger(t.pid)&&Number(t.pid)>0?Number(t.pid):void 0}catch{return}}function ui(i,e){return i.kind===e.kind&&i.storyId===e.storyId&&i.sessionId===e.sessionId&&i.idempotencyKey===e.idempotencyKey&&i.expiresAt===e.expiresAt&&i.persistent===e.persistent}function $e(i,e){return ui(i,e)&&i.schemaVersion===e.schemaVersion&&i.pid===e.pid&&i.createdAt===e.createdAt&&i.ownerNonce===e.ownerNonce}async function Ne(i){const e=await re(i),r=(await T("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",maxBuffer:1024*1024})).stdout.trim(),n=he(r)?v(r):v(e,r),a=await re(n);if(a!==n)throw new Error("git-lifecycle-common-dir-symlink");await st(a);const o=(await T("git",["rev-parse","--git-common-dir"],{cwd:e,encoding:"utf8",maxBuffer:1024*1024})).stdout.trim();if((he(o)?v(o):v(e,o))!==n)throw new Error("git-lifecycle-common-dir-raced");return a}async function li(i){const e=D(i,ye);if(Y(e)||await Qe(i,ye),await J(e,"directory"),await re(e)!==e)throw new Error("git-lifecycle-runtime-directory-symlink");return e}async function pi(i,e={}){try{return await J(i,"file"),Ve(JSON.parse(await Z(i,"utf8")))}catch(t){if(H(t,"ENOENT")){if(e.required)throw new Error("git-lifecycle-runtime-missing");return ze()}throw t}}async function ot(i){try{await J(i,"file")}catch(e){if(H(e,"ENOENT"))return;throw e}}async function J(i,e){const t=await _e(i);if(t.isSymbolicLink())throw new Error(`git-lifecycle-${e}-symlink`);if(e==="file"?!t.isFile():!t.isDirectory())throw new Error(`git-lifecycle-${e}-invalid`);if(be()&&t.uid!==process.getuid())throw new Error(`git-lifecycle-${e}-ownership-mismatch`);if(be()&&(t.mode&63)!==0)throw new Error(`git-lifecycle-${e}-permissions-unsafe`)}function de(i,e){const t=v(i),r=v(e),n=Oi(t,r);if(!n||n.startsWith("..")||he(n)||X(r)!==t)throw new Error("git-lifecycle-private-path-escape")}async function ee(i,e){const t=v(i);if(e&&de(v(e),t),await J(t,"directory"),v(await re(t))!==t)throw new Error("git-lifecycle-directory-substituted");if(e){const r=v(e);if(await J(r,"directory"),v(await re(r))!==r)throw new Error("git-lifecycle-directory-parent-substituted")}}async function ie(i,e){const t=v(i);if(de(v(e),t),await ee(v(e)),await J(t,"file"),v(await re(t))!==t)throw new Error("git-lifecycle-file-substituted")}function mi(i,e){const t=Fe(i);if(t.isSymbolicLink())throw new Error(`git-lifecycle-${e}-symlink`);if(e==="file"?!t.isFile():!t.isDirectory())throw new Error(`git-lifecycle-${e}-invalid`);if(be()&&t.uid!==process.getuid())throw new Error(`git-lifecycle-${e}-ownership-mismatch`);if(be()&&(t.mode&63)!==0)throw new Error(`git-lifecycle-${e}-permissions-unsafe`)}async function st(i){const e=await _e(i);if(e.isSymbolicLink())throw new Error("git-lifecycle-common-dir-symlink");if(!e.isDirectory())throw new Error("git-lifecycle-common-dir-invalid")}function dt(i){const e=Fe(i);if(e.isSymbolicLink())throw new Error("git-lifecycle-common-dir-symlink");if(!e.isDirectory())throw new Error("git-lifecycle-common-dir-invalid")}function be(i=process.platform){return i!=="win32"&&typeof process.getuid=="function"}function Ve(i){if(!i||typeof i!="object"||Array.isArray(i))throw new Error("git-lifecycle-runtime-invalid");const e=i,t=e.schemaVersion;I(e,t===2?["schemaVersion","revision","epics","stories","operational"]:["schemaVersion","revision","epics","stories"],"git-lifecycle-runtime-unknown-field");const r=d(e.epics),n=d(e.stories);if(t!==1&&t!==2||!Number.isSafeInteger(e.revision)||Number(e.revision)<0||!r||!n||Object.values(r).some(a=>!d(a))||Object.values(n).some(a=>!d(a))||t===2&&!ft(e.operational))throw new Error("git-lifecycle-runtime-invalid");for(const[a,s]of Object.entries(r))if(!Q(a)||!ut(s))throw new Error("git-lifecycle-runtime-epic-invalid");for(const[a,s]of Object.entries(n))if(!Q(a)||!a.includes(".")||!lt(s,a))throw new Error("git-lifecycle-runtime-story-invalid");return e}function ft(i){const e=d(i);if(!e)return!1;I(e,["schemaVersion","repositoryFingerprint","writerEpoch","capabilities","identities","yoloop","projectionBindings","activeJournal","backfillReceipts","reconciliationReceipts","rollbackReceipts"],"git-lifecycle-runtime-operational-unknown-field");const t=d(e.identities),r=d(e.yoloop),n=d(e.projectionBindings);return e.schemaVersion==="EpicOperationalState/1.0"&&p(e.repositoryFingerprint)&&Number.isSafeInteger(e.writerEpoch)&&Number(e.writerEpoch)>=1&&Array.isArray(e.capabilities)&&e.capabilities.length<=16&&e.capabilities.every(a=>B(a))&&!!t&&Object.keys(t).length<=2048&&!!r&&r.schemaVersion==="CommonYoloopAuthority/1.0"&&!!n&&(e.activeJournal===null||!!d(e.activeJournal))&&Le(e.backfillReceipts,64)&&Le(e.reconciliationReceipts,64)&&Le(e.rollbackReceipts,64)}function Le(i,e){return Array.isArray(i)&&i.length<=e&&i.every(t=>!!d(t))}const gt=["branch_mode","execution_branch","origin_branch","branch_lease","origin_binding","graph_revision","aggregate_qa_receipt","head_reconciliation_receipt","terminal_git_receipt","physicalMergeStatus","pr_number","git_reconciliation_receipts","git_reconciliation_debt"],ht=["checkpoint","status","last_step","steps_completed"];function ut(i){return I(i,gt,"git-lifecycle-runtime-epic-unknown-field"),(i.branch_mode===void 0||i.branch_mode==="epic")&&(i.execution_branch===void 0||K(i.execution_branch))&&(i.origin_branch===void 0||K(i.origin_branch))&&(i.branch_lease===void 0||i.branch_lease===null||pt(i.branch_lease))&&(i.origin_binding===void 0||i.origin_binding===null||wt(i.origin_binding))&&(i.graph_revision===void 0||p(i.graph_revision))&&(i.aggregate_qa_receipt===void 0||i.aggregate_qa_receipt===null||bt(i.aggregate_qa_receipt))&&(i.head_reconciliation_receipt===void 0||i.head_reconciliation_receipt===null||vt(i.head_reconciliation_receipt))&&(i.terminal_git_receipt===void 0||i.terminal_git_receipt===null||St(i.terminal_git_receipt))&&(i.physicalMergeStatus===void 0||["merged","pushed","denied_external_gate","blocked_local_or_repo","not_attempted"].includes(String(i.physicalMergeStatus)))&&(i.pr_number===void 0||i.pr_number===null||Number.isSafeInteger(i.pr_number)&&Number(i.pr_number)>0)&&(i.git_reconciliation_receipts===void 0||Et(i.git_reconciliation_receipts))&&(i.git_reconciliation_debt===void 0||At(i.git_reconciliation_debt))}function lt(i,e){return I(i,ht,"git-lifecycle-runtime-story-unknown-field"),(i.checkpoint===void 0||i.checkpoint===null||yi(i.checkpoint,e))&&(i.status===void 0||B(i.status))&&(i.last_step===void 0||i.last_step===null||B(i.last_step))&&(i.steps_completed===void 0||z(i.steps_completed,128))}function pt(i){const e=d(i);return e?(I(e,["schemaVersion","ownerStoryId","sessionId","idempotencyKey","acquiredAt","expiresAt","handoffGrant","handoffConsumption","setupHeadSha"],"git-lifecycle-runtime-lease-unknown-field"),e.schemaVersion===1&&Q(e.ownerStoryId)&&B(e.sessionId)&&B(e.idempotencyKey)&&k(e.acquiredAt)&&k(e.expiresAt)&&Date.parse(String(e.expiresAt))>Date.parse(String(e.acquiredAt))&&(e.setupHeadSha===void 0||S(e.setupHeadSha))&&(e.handoffGrant===void 0||mt(e.handoffGrant,e))&&(e.handoffConsumption===void 0||yt(e.handoffConsumption,e))):!1}function mt(i,e){const t=d(i);return t?(I(t,["schemaVersion","kind","storyId","fromSessionId","tokenDigest","bundleDigest","claimRevision","expiresAt"],"git-lifecycle-runtime-handoff-grant-unknown-field"),t.schemaVersion===1&&t.kind==="direct-yolo-setup-handoff"&&t.storyId===e.ownerStoryId&&t.fromSessionId===e.sessionId&&p(t.tokenDigest)&&p(t.bundleDigest)&&p(t.claimRevision)&&k(t.expiresAt)&&Date.parse(String(t.expiresAt))<=Date.parse(String(e.expiresAt))):!1}function yt(i,e){const t=d(i);return t?(I(t,["schemaVersion","kind","state","storyId","fromSessionId","tokenDigest","bundleDigest","claimRevision","consumedBySessionId","consumedAt"],"git-lifecycle-runtime-handoff-consumption-unknown-field"),t.schemaVersion===1&&t.kind==="direct-yolo-setup-handoff-consumption"&&t.state==="consumed"&&t.storyId===e.ownerStoryId&&B(t.fromSessionId)&&p(t.tokenDigest)&&p(t.bundleDigest)&&p(t.claimRevision)&&t.consumedBySessionId===e.sessionId&&k(t.consumedAt)):!1}function wt(i){const e=d(i);return e?(I(e,["schemaVersion","originBranch","originHeadSha","executionBranch","capturedFromCurrentCheckout","capturedAt"],"git-lifecycle-runtime-origin-unknown-field"),e.schemaVersion===1&&K(e.originBranch)&&K(e.executionBranch)&&e.originBranch!==e.executionBranch&&S(e.originHeadSha)&&e.capturedFromCurrentCheckout===!0&&k(e.capturedAt)):!1}function bt(i){const e=d(i);if(!e)return!1;I(e,["schemaVersion","evidenceVersion","producer","contract","command","verdict","executionHeadSha","graphRevision","manifestDigest","resultDigest","checkedAt","receiptRef","gateIds"],"git-lifecycle-runtime-aggregate-qa-unknown-field");const t=e.evidenceVersion==="p205-execution-v2"&&e.producer==="local-yolo-tdd"&&e.contract==="P205-CI-02"&&e.command===F&&p(e.manifestDigest)&&p(e.resultDigest),r=e.evidenceVersion===void 0&&e.producer===void 0&&e.contract===void 0&&e.command===void 0&&e.manifestDigest===void 0&&e.resultDigest===void 0;return e.schemaVersion===1&&(t||r)&&e.verdict==="passed"&&S(e.executionHeadSha)&&p(e.graphRevision)&&k(e.checkedAt)&&ge(e.receiptRef)&&z(e.gateIds,128,!0)}function vt(i){const e=d(i);if(!e)return!1;I(e,["schemaVersion","kind","producer","epicId","executionBranch","originBranch","graphRevision","originHeadSha","lastAcceptedCheckpointHeadSha","executionHeadSha","acceptedCheckpointIds","acceptedCheckpointHeads","reconciliationCommitShas","commitRangeDigest","changedPaths","changedPathsDigest","allowedWriteSet","allowedWriteSetDigest","aggregateReceiptRef","aggregateManifestDigest","aggregateResultDigest","producedAt","revalidatedAt","inputDigest","publicSafe"],"git-lifecycle-runtime-head-reconciliation-unknown-field");const t=z(e.acceptedCheckpointIds,2048,!0)?e.acceptedCheckpointIds:[],r=z(e.acceptedCheckpointHeads,2048,!0)?e.acceptedCheckpointHeads:[],n=z(e.reconciliationCommitShas,2048)?e.reconciliationCommitShas:[],a=Si(e.changedPaths,2048)?e.changedPaths:[],s=Si(e.allowedWriteSet,2048,!0)?e.allowedWriteSet:[];if(e.schemaVersion!==1||e.kind!=="epic_head_reconciliation"||e.producer!=="client-p205-head-reconciliation-v1"||e.publicSafe!==!0||!Q(e.epicId)||!K(e.executionBranch)||!K(e.originBranch)||e.executionBranch===e.originBranch||!p(e.graphRevision)||!S(e.originHeadSha)||!S(e.lastAcceptedCheckpointHeadSha)||!S(e.executionHeadSha)||t.length===0||t.length!==r.length||t.some(g=>!Q(g)||!g.startsWith(`${String(e.epicId)}.`))||r.some(g=>!S(g))||n.some(g=>!S(g))||s.length===0||e.lastAcceptedCheckpointHeadSha!==e.executionHeadSha&&(n.length===0||a.length===0)||e.lastAcceptedCheckpointHeadSha===e.executionHeadSha&&(n.length!==0||a.length!==0)||!ae(a,[...new Set(a)].sort())||!ae(s,[...new Set(s)].sort())||a.some(g=>!fe(g))||s.some(g=>!vi(g))||a.some(g=>!s.some(c=>di(c,g)))||!p(e.commitRangeDigest)||!p(e.changedPathsDigest)||!p(e.allowedWriteSetDigest)||!ge(e.aggregateReceiptRef)||!p(e.aggregateManifestDigest)||!p(e.aggregateResultDigest)||!k(e.producedAt)||!k(e.revalidatedAt)||Date.parse(String(e.revalidatedAt))<Date.parse(String(e.producedAt))||!p(e.inputDigest))return!1;const o=e;return o.commitRangeDigest===Vi(o.lastAcceptedCheckpointHeadSha,o.executionHeadSha,o.reconciliationCommitShas)&&o.changedPathsDigest===Ye(o.changedPaths)&&o.allowedWriteSetDigest===Ye(o.allowedWriteSet)&&o.inputDigest===Ke(o)}function St(i){const e=d(i);return e?(I(e,["schemaVersion","epicId","executionBranch","originBranch","baseSha","executionHeadSha","mergeSha","pushedSha","strategy","prNumber","physicalStatus","localGateReceiptRefs","idempotencyKey","attemptStartedAt","completedAt","retryEligible","reasonCodes","publicSafe","candidateQa","providerGuard"],"git-lifecycle-runtime-terminal-receipt-unknown-field"),e.schemaVersion===1&&Q(e.epicId)&&K(e.executionBranch)&&K(e.originBranch)&&S(e.baseSha)&&S(e.executionHeadSha)&&(e.mergeSha===void 0||S(e.mergeSha))&&(e.pushedSha===void 0||S(e.pushedSha))&&(e.strategy==="direct"||e.strategy==="single_pr")&&(e.candidateQa===void 0||Rt(e.candidateQa,e))&&(e.providerGuard===void 0||Dt(e.providerGuard,e))&&(e.prNumber===void 0||Number.isSafeInteger(e.prNumber)&&Number(e.prNumber)>0)&&["prepared","merged","pushed","denied_external_gate","blocked_local_or_repo"].includes(String(e.physicalStatus))&&z(e.localGateReceiptRefs,128,!0)&&B(e.idempotencyKey)&&k(e.attemptStartedAt)&&(e.completedAt===void 0||k(e.completedAt))&&typeof e.retryEligible=="boolean"&&z(e.reasonCodes,128)&&e.publicSafe===!0):!1}function Dt(i,e){const t=d(i);if(!t)return!1;I(t,["schemaVersion","provider","mode","source","prHeadSha","originHeadSha","checkedAt","publicSafe"],"git-lifecycle-runtime-provider-guard-unknown-field");const r=t.mode==="recovered_exact_tree"?t.source==="physical_recovery":t.mode==="strict_up_to_date_expected_head"&&["branch_protection","ruleset","branch_protection_and_ruleset"].includes(String(t.source));return t.schemaVersion===1&&t.provider==="github"&&r&&e.strategy==="single_pr"&&e.physicalStatus==="pushed"&&Number.isSafeInteger(e.prNumber)&&Number(e.prNumber)>0&&S(t.prHeadSha)&&t.prHeadSha===e.mergeSha&&S(t.originHeadSha)&&t.originHeadSha===e.baseSha&&k(t.checkedAt)&&t.publicSafe===!0}function Rt(i,e){const t=d(i);return t?(I(t,["schemaVersion","kind","contract","command","originHeadSha","executionHeadSha","mergeSha","treeSha","graphRevision","manifestDigest","resultDigest","gateIds","checkedAt","receiptRef"],"git-lifecycle-runtime-merge-candidate-unknown-field"),t.schemaVersion===1&&t.kind==="epic_merge_candidate_qa"&&t.contract==="P205-CI-02"&&t.command===F&&S(t.originHeadSha)&&t.originHeadSha===e.baseSha&&S(t.executionHeadSha)&&t.executionHeadSha===e.executionHeadSha&&S(t.mergeSha)&&t.mergeSha===e.mergeSha&&S(t.treeSha)&&p(t.graphRevision)&&p(t.manifestDigest)&&p(t.resultDigest)&&z(t.gateIds,128,!0)&&k(t.checkedAt)&&ge(t.receiptRef)):!1}function yi(i,e){const t=d(i);if(!t)return!1;I(t,["schemaVersion","storyId","epicId","branch","baseSha","headSha","commits","idempotencyKey","dispatchId","bundleId","bundleDigest","graphRevision","claimRevision","receiptRefs","qaVerdict","reviewVerdict","qaReceipt","reviewReceipt","reviewReconciliation","recordedAt","rootMemoryEffect"],"git-lifecycle-runtime-checkpoint-unknown-field");const r=String(e).split(".")[0];return t.schemaVersion===1&&t.storyId===e&&t.epicId===r&&K(t.branch)&&S(t.baseSha)&&S(t.headSha)&&t.baseSha!==t.headSha&&kt(t.commits)&&t.commits.length===1&&t.commits[0]===t.headSha&&B(t.idempotencyKey)&&(t.dispatchId===void 0||p(t.dispatchId))&&(t.bundleId===void 0||p(t.bundleId))&&p(t.bundleDigest)&&p(t.graphRevision)&&(t.claimRevision===void 0||p(t.claimRevision))&&(t.rootMemoryEffect===void 0||Hi(t.rootMemoryEffect)&&t.rootMemoryEffect.storyId===e&&t.rootMemoryEffect.executionBranch===t.branch&&t.rootMemoryEffect.sourceHeadSha===t.baseSha&&t.rootMemoryEffect.childClaimRevision===t.claimRevision)&&z(t.receiptRefs,256,!0)&&(t.qaVerdict==="passed"||t.qaVerdict==="blocked")&&["approved","changes-requested","pending"].includes(String(t.reviewVerdict))&&_t(t.qaReceipt,t)&&(t.reviewVerdict==="pending"?t.reviewReceipt===void 0:xt(t.reviewReceipt,t))&&(t.reviewReconciliation===void 0||wi(t.reviewReconciliation,t))&&k(t.recordedAt)}function wi(i,e){const t=d(i),r=d(e.qaReceipt),n=d(e.reviewReceipt);return!t||!r||!n?!1:(I(t,["schemaVersion","kind","storyId","epicId","checkpointHeadSha","approvalCommitSha","approvalArtifactDigest","qaReceiptRef","reviewReceiptRef","sourceEvidenceDigest","reviewedAt","receiptRef"],"git-lifecycle-runtime-review-reconciliation-unknown-field"),t.schemaVersion===1&&t.kind==="historical_review_reconciliation"&&t.storyId===e.storyId&&t.epicId===e.epicId&&t.checkpointHeadSha===e.headSha&&S(t.approvalCommitSha)&&p(t.approvalArtifactDigest)&&t.qaReceiptRef===r.receiptRef&&t.reviewReceiptRef===n.receiptRef&&p(t.sourceEvidenceDigest)&&k(t.reviewedAt)&&Date.parse(String(t.reviewedAt))>=Date.parse(String(r.checkedAt))&&ge(t.receiptRef)&&Array.isArray(e.receiptRefs)&&e.receiptRefs.includes(t.receiptRef))}function _t(i,e){const t=d(i);return t?(I(t,["schemaVersion","kind","producer","evidenceVersion","storyId","epicId","baseSha","headSha","bundleDigest","graphRevision","contract","command","manifestDigest","gateIds","resultDigest","sourceEvidenceDigest","verdict","checkedAt","receiptRef"],"git-lifecycle-runtime-story-qa-unknown-field"),t.schemaVersion===1&&t.kind==="story_qa_evidence"&&t.producer==="local-yolo-tdd"&&(t.evidenceVersion===void 0||t.evidenceVersion==="git-immutable-v1"||t.evidenceVersion==="p205-execution-v2"&&t.contract==="P205-CI-02"&&t.command===F&&p(t.manifestDigest)&&z(t.gateIds,32,!0)&&p(t.resultDigest))&&bi(t,e)&&p(t.sourceEvidenceDigest)&&t.verdict===e.qaVerdict&&(t.verdict==="passed"||t.verdict==="blocked")&&k(t.checkedAt)&&ge(t.receiptRef)&&e.receiptRefs.includes(t.receiptRef)):!1}function xt(i,e){const t=d(i),r=d(e.qaReceipt);return!t||!r?!1:(I(t,["schemaVersion","kind","producer","storyId","epicId","baseSha","headSha","bundleDigest","graphRevision","sourceEvidenceDigest","reviewArtifactDigest","qaReceiptRef","verdict","reviewedAt","receiptRef"],"git-lifecycle-runtime-story-review-unknown-field"),t.schemaVersion===1&&t.kind==="story_review_evidence"&&t.producer==="root-commit-range-review"&&bi(t,e)&&p(t.sourceEvidenceDigest)&&(t.reviewArtifactDigest===void 0||p(t.reviewArtifactDigest))&&t.qaReceiptRef===r.receiptRef&&t.receiptRef!==r.receiptRef&&(t.verdict==="approved"||t.verdict==="changes-requested")&&(t.verdict==="approved"?e.reviewVerdict==="approved":e.reviewVerdict==="changes-requested")&&k(t.reviewedAt)&&Date.parse(String(t.reviewedAt))>=Date.parse(String(r.checkedAt))&&ge(t.receiptRef)&&e.receiptRefs.includes(t.receiptRef))}function bi(i,e){return["storyId","epicId","baseSha","headSha","bundleDigest","graphRevision"].every(t=>i[t]===e[t])}function Et(i){return!Array.isArray(i)||i.length>1024?!1:i.every(e=>{const t=d(e);return t?(I(t,["schemaVersion","resourceId","action","outcome","idempotencyKey","reasonCodes","recordedAt","publicSafe"],"git-lifecycle-runtime-reconciliation-receipt-unknown-field"),t.schemaVersion===1&&B(t.resourceId)&&["no_op","delete_local_branch","delete_remote_branch","close_pull_request"].includes(String(t.action))&&["applied","already_absent","dry_run","failed"].includes(String(t.outcome))&&B(t.idempotencyKey)&&z(t.reasonCodes,128)&&k(t.recordedAt)&&t.publicSafe===!0):!1})}function At(i){return!Array.isArray(i)||i.length>1024?!1:i.every(e=>{const t=d(e);return t?(I(t,["schemaVersion","resourceId","action","managed","reasonCodes","evidence","publicSafe"],"git-lifecycle-runtime-reconciliation-debt-unknown-field"),t.schemaVersion===1&&B(t.resourceId)&&t.action==="preserve"&&typeof t.managed=="boolean"&&z(t.reasonCodes,128)&&z(t.evidence,16)&&t.publicSafe===!0):!1})}function I(i,e,t){const r=new Set(e);if(Object.keys(i).some(n=>!r.has(n)))throw new Error(t)}function Q(i){return typeof i=="string"&&/^P[1-9][0-9]*(?:\.[0-9]+)*$/.test(i)}function It(i){const e=d(i);return e?Object.keys(e).length===10&&e.schemaVersion===1&&e.kind==="git_lifecycle_graph_authority"&&e.producer==="server-continuous-yoloop-v1"&&(e.source==="yolo"||e.source==="yoloop")&&Q(e.epicId)&&Q(e.storyId)&&String(e.storyId).startsWith(`${String(e.epicId)}.`)&&K(e.executionBranch)&&K(e.originBranch)&&e.originBranch!==e.executionBranch&&typeof e.graphRevision=="string"&&/^[a-f0-9]{64}$/.test(e.graphRevision)&&e.publicSafe===!0:!1}function K(i){return typeof i=="string"&&/^[A-Za-z0-9][A-Za-z0-9._/-]{0,239}$/.test(i)&&!i.includes("..")&&!i.includes("//")&&!i.includes("@{")&&!i.endsWith("/")&&!i.endsWith(".")&&!i.split("/").some(e=>!e||e.startsWith(".")||e.endsWith(".lock"))}function fe(i){return vi(i)&&!i.endsWith("/")}function vi(i){return i.length>0&&i.length<=1024&&!he(i)&&!/^[A-Za-z]:[\\/]/.test(i)&&!i.includes("\0")&&!i.includes("\\")&&!i.includes("//")&&!i.replace(/\/$/,"").split("/").some(e=>!e||e==="."||e==="..")&&i.replace(/\/$/,"").split("/")[0]!==".git"}function B(i){return typeof i=="string"&&i.length>0&&i.length<=240&&/^[A-Za-z0-9._:/#\-[\]]+$/.test(i)&&!i.includes("..")}function ge(i){return B(i)}function S(i){return typeof i=="string"&&/^[a-f0-9]{40,64}$/i.test(i)}function p(i){return typeof i=="string"&&/^[a-f0-9]{64}$/i.test(i)}function k(i){return typeof i=="string"&&i.length<=64&&Number.isFinite(Date.parse(i))}function z(i,e,t=!1){return Array.isArray(i)&&i.length<=e&&(!t||i.length>0)&&i.every(B)}function Si(i,e,t=!1){return Array.isArray(i)&&i.length<=e&&(!t||i.length>0)&&i.every(r=>typeof r=="string"&&r.length>0&&r.length<=1024)}function ae(i,e){return i.length===e.length&&i.every((t,r)=>t===e[r])}function kt(i){return Array.isArray(i)&&i.length>0&&i.length<=256&&i.every(S)}function ze(){return{schemaVersion:1,revision:0,epics:{},stories:{}}}async function Ct(i){const e=X(i),t={pid:process.pid,nonce:Re(16).toString("hex")},r=async()=>{await ee(e),await Je(e,P(i),JSON.stringify(t));try{await A(i,e),await ie(D(i,"owner.json"),i)}catch(n){throw await ne(i,e).catch(()=>{}),n}};try{await r()}catch(n){if(!H(n,"EEXIST"))throw n;await J(i,"directory");const a=await qe(i);if(a!==void 0&&ve(a.pid))throw new Error("git-lifecycle-runtime-lock-active");if(a===void 0&&await Di(i))throw new Error("git-lifecycle-runtime-lock-active");const s=await L(i);if(!s)throw new Error("git-lifecycle-runtime-lock-owner-invalid");const o=`${i}.stale.${process.pid}.${Date.now()}`;await oe(e,P(i),P(o));try{if(await A(o,e),await L(o)!==s)throw await le(o,i,e).catch(()=>{}),new Error("git-lifecycle-runtime-lock-owner-replaced");await r()}finally{await ne(o,e,async g=>await L(g)===s).catch(()=>{})}}return t}async function Ot(i,e){const t=X(i);try{await A(i,t);const r=await qe(i);if(!r||!Ri(r,e))return!1;const n=await L(i);if(!n)return!1;const a=`${i}.release.${process.pid}.${Date.now()}`;await oe(t,P(i),P(a)),await A(a,t);const s=await qe(a);return!s||!Ri(s,e)||await L(a)!==n?(await le(a,i,t).catch(()=>{}),!1):ne(a,t,async o=>await L(o)===n)}catch(r){if(H(r,"ENOENT"))return!1;throw r}}async function Di(i){try{return Date.now()-(await Ci(i)).mtimeMs<3e4}catch{return!0}}async function qe(i){try{await A(i,X(i));const e=D(i,"owner.json");await ie(e,i);const t=JSON.parse(await Z(e,"utf8"));return Number.isSafeInteger(t.pid)&&Number(t.pid)>0&&(t.nonce===void 0||typeof t.nonce=="string"&&/^[a-f0-9]{32}$/.test(t.nonce))?{pid:Number(t.pid),...typeof t.nonce=="string"?{nonce:t.nonce}:{}}:void 0}catch{return}}function Ri(i,e){return i.pid===e.pid&&i.nonce!==void 0&&i.nonce===e.nonce}function ve(i){try{return process.kill(i,0),!0}catch(e){return H(e,"EPERM")}}function d(i){return i&&typeof i=="object"&&!Array.isArray(i)?i:void 0}function H(i,e){return i instanceof Error&&"code"in i&&i.code===e}export{ye as GIT_LIFECYCLE_RUNTIME_DIRECTORY,we as GIT_LIFECYCLE_RUNTIME_FILE,Ue as LEGACY_DIRECT_YOLO_RECOVERY_COMMITS,Wi as LEGACY_P174_CHECKPOINT_MIGRATIONS,F as P205_COMPLETE_COMMAND,nr as acquireGitLifecyclePhysicalIntegrationLock,ti as applyGitLifecycleRuntimeOverlay,A as assertGitLifecyclePrivateDirectory,rr as assertGitLifecyclePrivateFile,Yi as classifyGitLifecycleStoryCheckpointProjectionSync,ct as computeGitLifecyclePhysicalIntegrationLockOwnerDigest,et as computeHistoricalReviewReconciliationDigest,Ui as computeImmutableStoryQaEvidenceDigest,tr as computeLegacyDirectYoloRecoveryReceiptRef,Xi as computeP205StoryQaEvidenceDigest,er as consumeEpicTerminalReleaseAuthority,nt as ensureGitLifecyclePrivateChildDirectory,Kt as ensureGitLifecycleRuntimeInitialized,ni as ensureRuntimeEpic,Jt as ensureRuntimeStory,Fi as executeP205TransientAuthorities,Ft as executeP205TransientAuthority,gi as gitLifecycleRuntimeDirectory,Pe as gitLifecycleStoryWriteSet,ai as isAcceptedGitLifecycleStoryCheckpoint,Be as mutateGitLifecycleRuntime,Ut as p205TransientAuthorityMatchesAggregate,Yt as persistGitLifecycleGraphAuthority,be as posixSecurityAvailable,Zt as projectP205TransientExecutionEvidence,He as publicStoryReviewArtifactFromGit,Oe as readGitLifecycleRuntime,ei as readGitLifecycleRuntimeSync,at as releaseGitLifecyclePhysicalIntegrationLock,cr as releaseGitLifecyclePhysicalIntegrationLockForCheckpoint,ne as removeGitLifecyclePrivateDirectory,Xt as revalidateEpicHeadReconciliationAuthority,Qt as verifyAcceptedGitLifecycleStoryCheckpoint,ci as verifyAcceptedGitLifecycleStoryCheckpointSync,ar as verifyGitLifecyclePhysicalIntegrationLock,ir as verifyLegacyCheckpointMigrationCandidateSync};