@ornexus/neocortex 4.60.73 → 4.60.75

package/packages/client/dist/runner/headless/epic-terminal-git-cli-adapter.js

@@ -1,1236 +1,10 @@
-/** Production Git/GitHub adapter for the terminal epic lifecycle. */
-import { execFile } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import { readFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import { promisify } from 'node:util';
-import { classifyGitReconciliationCandidate, reconcileTerminalReceipt } from '../../../../shared/dist/yoloop/epic-terminal-git.js';
-import { collectGitResourceOwnership, GIT_INVENTORY_PR_LIMIT, GIT_INVENTORY_REF_LIMIT, } from './epic-git-reconciliation-inventory.js';
-import { executeEpicMergeCandidateQa, verifiedEpicMergeCandidateReceipt } from './epic-merge-candidate-qa.js';
-import { applyGitLifecycleRuntimeOverlay, ensureRuntimeEpic, executeP205TransientAuthority, P205_COMPLETE_COMMAND, projectP205TransientExecutionEvidence, verifyAcceptedGitLifecycleStoryCheckpoint, mutateGitLifecycleRuntime, readGitLifecycleRuntime, } from '../../git/git-lifecycle-store.js';
-const execFileAsync = promisify(execFile);
-export function createCliEpicTerminalGitAdapter(projectRoot, options = {}) {
-    const statePath = join(projectRoot, '.neocortex', 'state.json');
-    const git = options.gitRunner ?? ((...args) => command('git', args, projectRoot));
-    const gh = options.providerRunner ?? ((...args) => command('gh', args, projectRoot));
-    const candidateAuthorities = new Map();
-    return {
-        async prepareLifecycleEvidence(input) {
-            try {
-                try {
-                    await readFile(statePath, 'utf8');
-                }
-                catch (error) {
-                    // Continuity can execute in projectless fixtures/hosts. Git lifecycle
-                    // evidence is inapplicable until a canonical project state exists.
-                    if (isNodeError(error, 'ENOENT')) {
-                        return { ok: true, originBindingCaptured: false, aggregateQaRecorded: false };
-                    }
-                    throw error;
-                }
-                const state = await readEffectiveState(projectRoot, statePath);
-                const epic = state.epics?.[input.epicId];
-                if (!epic)
-                    return failure('epic-state-missing', false, false);
-                if (stringValue(epic.branch_mode) !== 'epic') {
-                    return { ok: true, originBindingCaptured: false, aggregateQaRecorded: false };
-                }
-                const executionBranch = stringValue(epic.execution_branch);
-                const recordedOrigin = stringValue(epic.origin_branch);
-                if (!executionBranch || !safeBranch(executionBranch))
-                    return failure('epic-execution-branch-missing', false, false);
-                let currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
-                let currentHead = await git('rev-parse', 'HEAD');
-                let originBinding = isRecord(epic.origin_binding)
-                    ? epic.origin_binding
-                    : null;
-                let originBindingCaptured = false;
-                if (!originBinding) {
-                    if (!currentBranch || currentBranch === executionBranch || !safeBranch(currentBranch)) {
-                        return failure('epic-origin-binding-capture-window-missed', false, false);
-                    }
-                    if (recordedOrigin && recordedOrigin !== currentBranch) {
-                        return failure('epic-origin-binding-recorded-origin-drift', false, false);
-                    }
-                    originBinding = {
-                        schemaVersion: 1,
-                        originBranch: currentBranch,
-                        originHeadSha: currentHead,
-                        executionBranch,
-                        capturedFromCurrentCheckout: true,
-                        capturedAt: input.nowIso,
-                    };
-                    await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
-                        const runtimeEpic = ensureRuntimeEpic(runtime, input.epicId);
-                        if (runtimeEpic.origin_binding && JSON.stringify(runtimeEpic.origin_binding) !== JSON.stringify(originBinding)) {
-                            throw new Error('origin-binding-cas-conflict');
-                        }
-                        runtimeEpic.origin_branch = currentBranch;
-                        runtimeEpic.origin_binding = originBinding;
-                    });
-                    originBindingCaptured = true;
-                }
-                else if (originBinding.executionBranch !== executionBranch
-                    || originBinding.originBranch !== recordedOrigin
-                    || currentBranch !== executionBranch && currentBranch !== originBinding.originBranch
-                    || !(await isCommit(git, originBinding.originHeadSha))
-                    || !(await isAncestor(git, originBinding.originHeadSha, currentHead))) {
-                    return failure('epic-origin-binding-physical-drift', false, false);
-                }
-                if (currentBranch !== executionBranch) {
-                    const executionHead = await resolveOptionalRef(git, `refs/heads/${executionBranch}`);
-                    try {
-                        if (executionHead) {
-                            if (!(await isAncestor(git, originBinding.originHeadSha, executionHead))) {
-                                return failure('epic-execution-branch-origin-drift', false, false);
-                            }
-                            await git('switch', executionBranch);
-                        }
-                        else {
-                            await git('switch', '-c', executionBranch, originBinding.originHeadSha);
-                        }
-                    }
-                    catch {
-                        const dirty = await git('status', '--porcelain', '--untracked-files=normal').catch(() => '');
-                        return failure(dirty ? 'epic-execution-branch-switch-blocked-by-user-changes' : 'epic-execution-branch-switch-failed', true, false);
-                    }
-                    currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD');
-                    currentHead = await git('rev-parse', 'HEAD');
-                    if (currentBranch !== executionBranch)
-                        return failure('epic-execution-branch-switch-unverified', true, false);
-                }
-                const effective = await readEffectiveState(projectRoot, statePath, true);
-                const effectiveEpic = effective.epics?.[input.epicId];
-                if (!effectiveEpic)
-                    return failure('epic-state-missing', false, false);
-                const checkpointStoryIds = storyIds(effectiveEpic);
-                const checkpointVerdicts = await Promise.all(checkpointStoryIds.map((storyId) => verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, effective.stories?.[storyId]?.checkpoint, storyId, input.epicId, executionBranch).then((verified) => verified && hasP205ExecutionAuthority(effective.stories?.[storyId]?.checkpoint))));
-                const checkpointsReady = checkpointStoryIds.length > 0 && checkpointVerdicts.every(Boolean);
-                if (!checkpointsReady)
-                    return { ok: true, originBindingCaptured, aggregateQaRecorded: false };
-                if (currentBranch !== executionBranch)
-                    return failure('epic-aggregate-qa-execution-checkout-required', true, false);
-                const graphRevision = stringValue(effectiveEpic.graph_revision);
-                if (!/^[a-f0-9]{64}$/i.test(graphRevision))
-                    return failure('epic-aggregate-qa-graph-required', false, false);
-                if (await hasUncommittedSourceChanges(git)) {
-                    return failure('epic-aggregate-qa-checkout-dirty', true, false);
-                }
-                const p205Authority = await executeP205TransientAuthority(projectRoot, {
-                    headSha: currentHead,
-                    graphRevision,
-                    nowIso: input.nowIso,
-                });
-                const evidence = projectP205TransientExecutionEvidence(p205Authority);
-                if (!evidence)
-                    return failure('epic-aggregate-qa-authority-invalid', false, false);
-                await options.aggregateQaRunner?.({ projectRoot, gateIds: evidence.gateIds });
-                if (await git('rev-parse', 'HEAD') !== currentHead || await hasUncommittedSourceChanges(git)) {
-                    return failure('epic-aggregate-qa-head-raced', true, false);
-                }
-                const receiptRef = `local-yolo-tdd:${createHash('sha256').update([
-                    'epic-aggregate-p205-execution-v2', P205_COMPLETE_COMMAND,
-                    currentHead, graphRevision, evidence.manifestDigest, evidence.gateIds.join(','), evidence.resultDigest,
-                ].join('\0')).digest('hex')}`;
-                const aggregateQaReceipt = {
-                    schemaVersion: 1, evidenceVersion: 'p205-execution-v2', producer: 'local-yolo-tdd',
-                    contract: 'P205-CI-02', command: P205_COMPLETE_COMMAND,
-                    verdict: 'passed', executionHeadSha: currentHead, graphRevision,
-                    manifestDigest: evidence.manifestDigest, resultDigest: evidence.resultDigest,
-                    checkedAt: evidence.executedAt, receiptRef, gateIds: evidence.gateIds,
-                };
-                await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
-                    const runtimeEpic = ensureRuntimeEpic(runtime, input.epicId);
-                    runtimeEpic.aggregate_qa_receipt = aggregateQaReceipt;
-                });
-                return { ok: true, originBindingCaptured, aggregateQaRecorded: true, p205Authority };
-            }
-            catch {
-                return failure('epic-lifecycle-evidence-production-failed', true, false);
-            }
-        },
-        async inspect(directive) {
-            try {
-                const state = await readEffectiveState(projectRoot, statePath, true);
-                const epic = state.epics?.[directive.epicId];
-                if (!epic)
-                    return failure('epic-state-missing', false, false);
-                if (stringValue(epic.execution_branch) !== directive.executionBranch || stringValue(epic.origin_branch) !== directive.originBranch) {
-                    return failure('epic-branch-boundary-drift', false, false);
-                }
-                const executionHeadSha = await git('rev-parse', `refs/heads/${directive.executionBranch}`);
-                const originHeadSha = await resolveRemoteHeadFresh(git, directive.originBranch);
-                await fetchRemoteHeadExact(git, directive.originBranch, originHeadSha);
-                const acceptedCheckpointIds = await acceptedPhysicalCheckpointIds(projectRoot, state, epic, directive.epicId, directive.executionBranch);
-                let existingReceipt = isRecord(epic.terminal_git_receipt)
-                    ? epic.terminal_git_receipt
-                    : null;
-                if (existingReceipt?.physicalStatus === 'pushed') {
-                    const receiptStillPhysical = Boolean(existingReceipt.pushedSha)
-                        && await isAncestor(git, existingReceipt.executionHeadSha, existingReceipt.pushedSha)
-                        && await isAncestor(git, existingReceipt.pushedSha, originHeadSha);
-                    if (!receiptStillPhysical)
-                        existingReceipt = null;
-                }
-                if (!existingReceipt) {
-                    existingReceipt = await recoverDirectPhysicalReceipt({ directive, executionHeadSha, originHeadSha, git });
-                }
-                const receiptIds = new Set((Array.isArray(epic.git_reconciliation_receipts) ? epic.git_reconciliation_receipts : [])
-                    .filter(isRecord).filter(successfulReconciliation).map((item) => stringValue(item.resourceId)).filter(Boolean));
-                const currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
-                const candidates = directive.reconcile.enabled
-                    ? await buildCandidates({ state, epic, directive, currentBranch, originHeadSha, receiptIds, git, gh }) : [];
-                const persistedOriginBinding = isRecord(epic.origin_binding)
-                    ? epic.origin_binding
-                    : null;
-                const originBinding = persistedOriginBinding
-                    && persistedOriginBinding.originBranch === directive.originBranch
-                    && persistedOriginBinding.executionBranch === directive.executionBranch
-                    && await isCommit(git, persistedOriginBinding.originHeadSha)
-                    && await isAncestor(git, persistedOriginBinding.originHeadSha, executionHeadSha)
-                    ? persistedOriginBinding
-                    : null;
-                const snapshot = {
-                    executionHeadSha, originHeadSha,
-                    ...(stringValue(epic.graph_revision) ? { graphRevision: stringValue(epic.graph_revision) } : {}),
-                    writerLeaseActive: isLiveLease(epic.branch_lease),
-                    acceptedCheckpointIds,
-                    existingReceipt,
-                    aggregateQaReceipt: isRecord(epic.aggregate_qa_receipt)
-                        ? epic.aggregate_qa_receipt
-                        : null,
-                    originBinding,
-                    reconciliationCandidates: candidates,
-                };
-                return { ok: true, snapshot };
-            }
-            catch (error) {
-                return failure(publicInventoryReason(error) ?? 'epic-terminal-inspection-failed', true, false);
-            }
-        },
-        async prepareMergeObject(input) {
-            let mergeSha;
-            try {
-                const treeSha = await git('merge-tree', '--write-tree', input.originHeadSha, input.executionHeadSha);
-                mergeSha = await git('commit-tree', treeSha, '-p', input.originHeadSha, '-p', input.executionHeadSha, '-m', input.message);
-            }
-            catch {
-                return failure('epic-terminal-merge-conflict', false, false);
-            }
-            try {
-                const accepted = await executeEpicMergeCandidateQa(projectRoot, {
-                    mergeSha, originHeadSha: input.originHeadSha, executionHeadSha: input.executionHeadSha,
-                    graphRevision: input.graphRevision,
-                }, input.nowIso);
-                candidateAuthorities.set(mergeSha, accepted.candidateAuthority);
-                return { ok: true, mergeSha, ...accepted };
-            }
-            catch {
-                return failure('epic-merge-candidate-qa-failed', true, false);
-            }
-        },
-        async inspectReconciliation(directive) {
-            try {
-                const state = await readEffectiveState(projectRoot, statePath, true);
-                const epic = state.epics?.[directive.epicId];
-                if (!epic)
-                    return failure('epic-state-missing', false, false);
-                if (stringValue(epic.execution_branch) !== directive.executionBranch || stringValue(epic.origin_branch) !== directive.originBranch) {
-                    return failure('epic-branch-boundary-drift', false, false);
-                }
-                const originHeadSha = await resolveRemoteHeadFresh(git, directive.originBranch);
-                await fetchRemoteHeadExact(git, directive.originBranch, originHeadSha);
-                const receiptIds = new Set((Array.isArray(epic.git_reconciliation_receipts) ? epic.git_reconciliation_receipts : [])
-                    .filter(isRecord).filter(successfulReconciliation).map((item) => stringValue(item.resourceId)).filter(Boolean));
-                const currentBranch = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
-                const candidates = await buildCandidates({ state, epic, directive, currentBranch, originHeadSha, receiptIds, git, gh });
-                return { ok: true, candidates };
-            }
-            catch (error) {
-                return failure(publicInventoryReason(error) ?? 'git-reconciliation-inspection-failed', true, false);
-            }
-        },
-        async pushMergeObject(input) {
-            try {
-                const candidate = verifiedEpicMergeCandidateReceipt(input.candidateAuthority, {
-                    mergeSha: input.mergeSha, originHeadSha: input.expectedOriginSha,
-                    executionHeadSha: input.executionHeadSha, graphRevision: input.graphRevision,
-                });
-                if (!candidate)
-                    return failure('epic-merge-candidate-authority-required', false, false);
-                const state = await readEffectiveState(projectRoot, statePath, true);
-                const epic = state.epics?.[input.epicId];
-                if (!epic || epic.execution_branch !== input.executionBranch || epic.origin_branch !== input.originBranch
-                    || epic.graph_revision !== input.graphRevision || isLiveLease(epic.branch_lease)
-                    || await git('rev-parse', `refs/heads/${input.executionBranch}`) !== input.executionHeadSha) {
-                    return failure('epic-merge-candidate-authority-raced', true, false);
-                }
-                const accepted = await acceptedPhysicalCheckpointIds(projectRoot, state, epic, input.epicId, input.executionBranch);
-                if (!sameSet(accepted, input.storyCheckpointIds) || !sameSet(storyIds(epic), input.storyCheckpointIds)) {
-                    return failure('epic-checkpoint-set-revalidation-drift', true, false);
-                }
-                const aggregate = isRecord(epic.aggregate_qa_receipt) ? epic.aggregate_qa_receipt : null;
-                if (!validFreshAggregate(aggregate, input.executionHeadSha, input.graphRevision, input.nowIso)
-                    || aggregate.receiptRef !== input.aggregateQaReceipt.receiptRef) {
-                    return failure('epic-terminal-aggregate-qa-revalidation-drift', true, false);
-                }
-                const physicalOrigin = await resolveRemoteHeadFresh(git, input.originBranch);
-                if (physicalOrigin !== input.expectedOriginSha)
-                    return failure('epic-origin-head-raced', true, false);
-                await git('push', '--porcelain', 'origin', `${input.mergeSha}:refs/heads/${input.originBranch}`);
-                const pushedSha = await resolveRemoteHeadFresh(git, input.originBranch);
-                if (pushedSha !== input.mergeSha)
-                    return failure('epic-terminal-push-unverified', true, false);
-                return { ok: true, pushedSha };
-            }
-            catch (error) {
-                return looksLikeRemotePolicy(error)
-                    ? failure('epic-terminal-remote-policy-denied', true, true)
-                    : failure('epic-terminal-push-failed', true, false);
-            }
-        },
-        async ensureSingleEpicPullRequest(input) {
-            try {
-                const candidate = verifiedEpicMergeCandidateReceipt(input.candidateAuthority, {
-                    mergeSha: input.expectedPullRequestHeadSha,
-                    originHeadSha: input.candidateQa.originHeadSha,
-                    executionHeadSha: input.expectedStoryHeadSha,
-                    graphRevision: input.candidateQa.graphRevision,
-                });
-                if (!candidate || candidate !== input.candidateQa
-                    || !(await isAncestor(git, input.candidateQa.originHeadSha, input.expectedPullRequestHeadSha))
-                    || !(await isAncestor(git, input.expectedStoryHeadSha, input.expectedPullRequestHeadSha))) {
-                    return failure('epic-merge-candidate-authority-required', false, false);
-                }
-                const repository = await githubOriginRepository(git, gh);
-                if (!repository)
-                    return failure('git-resource-provider-repository-unverified', true, true);
-                const repositoryUrl = `https://github.com/${repository.nameWithOwner}`;
-                const remoteHead = await resolveRemoteHeadFreshOptional(git, input.executionBranch);
-                if (remoteHead && remoteHead !== input.expectedPullRequestHeadSha) {
-                    await fetchRemoteHeadExact(git, input.executionBranch, remoteHead);
-                    if (!(await isAncestor(git, remoteHead, input.expectedPullRequestHeadSha))) {
-                        return failure('epic-terminal-execution-remote-head-drift', true, true);
-                    }
-                    await git('push', '--porcelain', 'origin', `${input.expectedPullRequestHeadSha}:refs/heads/${input.executionBranch}`);
-                }
-                if (!remoteHead) {
-                    await git('push', '--porcelain', 'origin', `${input.expectedPullRequestHeadSha}:refs/heads/${input.executionBranch}`);
-                }
-                if (await resolveRemoteHeadFresh(git, input.executionBranch) !== input.expectedPullRequestHeadSha) {
-                    return failure('epic-terminal-execution-publish-unverified', true, true);
-                }
-                const existingJson = await gh('pr', 'list', '--repo', repositoryUrl, '--state', 'all', '--head', input.executionBranch, '--base', input.originBranch, '--json', 'number,state,headRefName,headRefOid,baseRefName,mergeCommit', '--limit', '100');
-                const existing = JSON.parse(existingJson);
-                const matching = existing.filter((item) => item.headRefName === input.executionBranch
-                    && item.baseRefName === input.originBranch && item.headRefOid === input.expectedPullRequestHeadSha
-                    && (item.state === 'OPEN' || item.state === 'MERGED'));
-                if (matching.length > 1)
-                    return failure('epic-terminal-duplicate-prs', false, true);
-                if (typeof matching[0]?.number === 'number')
-                    return { ok: true, prNumber: matching[0].number };
-                if (existing.some((item) => item.state === 'OPEN')) {
-                    return failure('epic-terminal-stale-pr', false, true);
-                }
-                const created = await gh('pr', 'create', '--repo', repositoryUrl, '--head', input.executionBranch, '--base', input.originBranch, '--title', `[${input.epicId}] Terminal epic integration`, '--body', `Autonomous terminal integration receipt: ${input.idempotencyKey}`);
-                const match = created.match(/\/(\d+)(?:\s*)$/);
-                if (!match)
-                    return failure('epic-terminal-pr-number-unverified', true, true);
-                const prNumber = Number(match[1]);
-                const createdView = await inspectPullRequest(gh, repository.nameWithOwner, prNumber);
-                if (!createdView || createdView.state !== 'OPEN' || createdView.headRefName !== input.executionBranch
-                    || createdView.baseRefName !== input.originBranch || createdView.headRefOid !== input.expectedPullRequestHeadSha) {
-                    return failure('epic-terminal-pr-create-unverified', true, true);
-                }
-                return { ok: true, prNumber };
-            }
-            catch (error) {
-                return failure('epic-terminal-pr-create-denied', true, looksLikeRemotePolicy(error));
-            }
-        },
-        async mergeEpicPullRequest(input) {
-            try {
-                const repository = await githubOriginRepository(git, gh);
-                if (!repository)
-                    return failure('git-resource-provider-repository-unverified', true, true);
-                const candidate = input.candidateQa && verifiedEpicMergeCandidateReceipt(input.candidateAuthority, {
-                    mergeSha: input.expectedPullRequestHeadSha,
-                    graphRevision: input.candidateQa.graphRevision,
-                    originHeadSha: input.expectedOriginHeadSha,
-                    executionHeadSha: input.expectedStoryHeadSha,
-                });
-                if (!candidate || candidate !== input.candidateQa) {
-                    return failure('epic-merge-candidate-authority-required', false, false);
-                }
-                const before = await inspectPullRequest(gh, repository.nameWithOwner, input.prNumber);
-                const freshExecution = await resolveRemoteHeadFreshOptional(git, input.executionBranch);
-                const freshOrigin = await resolveRemoteHeadFresh(git, input.originBranch);
-                if (!before || before.headRefName !== input.executionBranch || before.baseRefName !== input.originBranch
-                    || before.headRefOid !== input.expectedPullRequestHeadSha
-                    || freshExecution && freshExecution !== input.expectedPullRequestHeadSha
-                    || !(await isAncestor(git, input.expectedOriginHeadSha, input.expectedPullRequestHeadSha))
-                    || !(await isAncestor(git, input.expectedStoryHeadSha, input.expectedPullRequestHeadSha))) {
-                    return failure('epic-terminal-pr-revalidation-drift', true, true);
-                }
-                if (before.state === 'OPEN' && freshOrigin !== input.expectedOriginHeadSha) {
-                    return failure('epic-terminal-pr-origin-raced', true, true);
-                }
-                let providerGuard;
-                if (before.state === 'OPEN') {
-                    const guarded = await inspectGitHubBaseGuard(gh, repository.nameWithOwner, input.originBranch, input.expectedPullRequestHeadSha, input.expectedOriginHeadSha, input.nowIso);
-                    if (!guarded.ok)
-                        return failure(guarded.reasonCode, true, true);
-                    providerGuard = guarded.receipt;
-                    if (await resolveRemoteHeadFresh(git, input.originBranch) !== input.expectedOriginHeadSha) {
-                        return failure('epic-terminal-pr-origin-raced', true, true);
-                    }
-                    await gh('pr', 'merge', String(input.prNumber), '--repo', `https://github.com/${repository.nameWithOwner}`, '--merge', '--match-head-commit', input.expectedPullRequestHeadSha);
-                }
-                else if (before.state !== 'MERGED') {
-                    return failure('epic-terminal-pr-not-open-or-merged', false, true);
-                }
-                else {
-                    providerGuard = {
-                        schemaVersion: 1, provider: 'github', mode: 'recovered_exact_tree', source: 'physical_recovery',
-                        prHeadSha: input.expectedPullRequestHeadSha, originHeadSha: input.expectedOriginHeadSha,
-                        checkedAt: input.nowIso, publicSafe: true,
-                    };
-                }
-                const view = await inspectPullRequest(gh, repository.nameWithOwner, input.prNumber);
-                const providerMergeSha = view?.mergeCommit?.oid;
-                if (view?.state !== 'MERGED' || !providerMergeSha)
-                    return failure('epic-terminal-pr-merge-unverified', true, true);
-                const postMergeOrigin = await resolveRemoteHeadFresh(git, input.originBranch);
-                await fetchRemoteHeadExact(git, input.originBranch, postMergeOrigin);
-                if (!(await isAncestor(git, input.expectedStoryHeadSha, postMergeOrigin))
-                    || !(await isAncestor(git, input.expectedPullRequestHeadSha, postMergeOrigin))
-                    || !(await isAncestor(git, providerMergeSha, postMergeOrigin))) {
-                    return failure('epic-terminal-pr-merge-ancestry-unproven', true, true);
-                }
-                const [candidateTree, pushedTree] = await Promise.all([
-                    git('rev-parse', `${input.expectedPullRequestHeadSha}^{tree}`),
-                    git('rev-parse', `${providerMergeSha}^{tree}`),
-                ]);
-                if (candidateTree !== input.candidateQa.treeSha || pushedTree !== candidateTree) {
-                    return failure('epic-terminal-pr-merged-tree-mismatch', false, true);
-                }
-                return { ok: true, mergeSha: input.expectedPullRequestHeadSha, pushedSha: providerMergeSha, providerGuard };
-            }
-            catch (error) {
-                return failure('epic-terminal-pr-merge-denied', true, looksLikeRemotePolicy(error));
-            }
-        },
-        async verifyTerminalReceipt(directive, receipt, nowIso) {
-            try {
-                if (receipt.physicalStatus !== 'pushed' || !receipt.pushedSha || !receipt.mergeSha) {
-                    return failure('epic-terminal-physical-revalidation-required', true, false);
-                }
-                const state = await readEffectiveState(projectRoot, statePath, true);
-                const epic = state.epics?.[directive.epicId];
-                if (!epic || stringValue(epic.execution_branch) !== directive.executionBranch
-                    || stringValue(epic.origin_branch) !== directive.originBranch
-                    || stringValue(epic.graph_revision) !== directive.graphRevision) {
-                    return failure('epic-terminal-state-revalidation-drift', true, false);
-                }
-                const executionHead = await git('rev-parse', `refs/heads/${directive.executionBranch}`);
-                if (executionHead !== directive.expectedExecutionHeadSha || receipt.executionHeadSha !== executionHead) {
-                    return failure('epic-terminal-execution-revalidation-drift', true, false);
-                }
-                const originBinding = isRecord(epic.origin_binding)
-                    ? epic.origin_binding
-                    : null;
-                if (!originBinding || originBinding.originBranch !== directive.originBranch
-                    || originBinding.executionBranch !== directive.executionBranch
-                    || !(await isCommit(git, originBinding.originHeadSha))
-                    || !(await isAncestor(git, originBinding.originHeadSha, executionHead))) {
-                    return failure('epic-origin-binding-revalidation-drift', true, false);
-                }
-                const acceptedCheckpointIds = await acceptedPhysicalCheckpointIds(projectRoot, state, epic, directive.epicId, directive.executionBranch);
-                if (isLiveLease(epic.branch_lease) || !sameSet(acceptedCheckpointIds, directive.storyCheckpointIds)) {
-                    return failure('epic-checkpoint-set-revalidation-drift', true, false);
-                }
-                const aggregate = isRecord(epic.aggregate_qa_receipt)
-                    ? epic.aggregate_qa_receipt
-                    : null;
-                if (!validFreshAggregate(aggregate, executionHead, directive.graphRevision, nowIso)
-                    || aggregate?.receiptRef !== directive.localGates.aggregateQaReceipt.receiptRef) {
-                    return failure('epic-terminal-aggregate-qa-revalidation-drift', true, false);
-                }
-                const physicalOrigin = await resolveRemoteHeadFresh(git, directive.originBranch);
-                await fetchRemoteHeadExact(git, directive.originBranch, physicalOrigin);
-                if (!(await isAncestor(git, executionHead, physicalOrigin))
-                    || !(await isAncestor(git, receipt.mergeSha, physicalOrigin))
-                    || !(await isAncestor(git, receipt.pushedSha, physicalOrigin))) {
-                    return failure('epic-terminal-physical-ancestry-unproven', true, false);
-                }
-                const binding = { originHeadSha: receipt.baseSha, executionHeadSha: executionHead,
-                    mergeSha: receipt.mergeSha, graphRevision: directive.graphRevision };
-                let authority = candidateAuthorities.get(receipt.mergeSha);
-                let candidateQa = verifiedEpicMergeCandidateReceipt(authority, binding);
-                if (!candidateQa) {
-                    const accepted = await executeEpicMergeCandidateQa(projectRoot, binding, nowIso);
-                    authority = accepted.candidateAuthority;
-                    candidateQa = accepted.candidateQa;
-                    candidateAuthorities.set(receipt.mergeSha, authority);
-                }
-                if (receipt.candidateQa && (receipt.candidateQa.originHeadSha !== candidateQa.originHeadSha
-                    || receipt.candidateQa.executionHeadSha !== candidateQa.executionHeadSha
-                    || receipt.candidateQa.graphRevision !== candidateQa.graphRevision
-                    || receipt.candidateQa.treeSha !== candidateQa.treeSha)) {
-                    return failure('epic-merge-candidate-receipt-drift', true, false);
-                }
-                let providerGuard = receipt.providerGuard;
-                if (receipt.strategy === 'single_pr') {
-                    if (!receipt.prNumber)
-                        return failure('epic-terminal-pr-merge-unverified', true, false);
-                    const pushedTree = await git('rev-parse', `${receipt.pushedSha}^{tree}`);
-                    if (pushedTree !== candidateQa.treeSha) {
-                        return failure('epic-terminal-pr-merged-tree-mismatch', false, false);
-                    }
-                    if (providerGuard && !validProviderGuardReceipt(providerGuard, receipt)) {
-                        return failure('epic-terminal-pr-base-guard-unverifiable', false, false);
-                    }
-                    providerGuard ??= {
-                        schemaVersion: 1, provider: 'github', mode: 'recovered_exact_tree', source: 'physical_recovery',
-                        prHeadSha: receipt.mergeSha, originHeadSha: receipt.baseSha, checkedAt: nowIso, publicSafe: true,
-                    };
-                }
-                else if (providerGuard) {
-                    return failure('epic-terminal-pr-base-guard-unverifiable', false, false);
-                }
-                return { ok: true, candidateQa, candidateAuthority: authority, ...(providerGuard ? { providerGuard } : {}) };
-            }
-            catch {
-                return failure('epic-terminal-physical-revalidation-failed', true, false);
-            }
-        },
-        async applyReconciliation(candidate, decision, dryRun) {
-            if (decision.action === 'preserve')
-                return failure('git-reconciliation-preserve-not-actionable', false, false);
-            if (dryRun)
-                return { ok: true, outcome: 'dry_run' };
-            if (decision.action === 'no_op')
-                return { ok: true, outcome: 'already_absent' };
-            if (decision.action === 'delete_remote_branch') {
-                return deleteRemoteBranchWithCas(candidate, decision, git, gh);
-            }
-            try {
-                const revalidated = await revalidateCandidate({ candidate, decision, git, gh });
-                if (!revalidated.ok)
-                    return failure(revalidated.reasonCode, true, false);
-                if (revalidated.alreadyAbsent)
-                    return { ok: true, outcome: 'already_absent' };
-                if (decision.action === 'delete_local_branch') {
-                    await git('update-ref', '-d', `refs/heads/${candidate.branchName}`, candidate.headSha);
-                }
-                else if (decision.action === 'close_pull_request') {
-                    if (!candidate.prNumber)
-                        return failure('git-reconciliation-pr-number-missing', false, false);
-                    const repository = await githubOriginRepository(git, gh);
-                    if (!repository)
-                        return failure('git-resource-provider-repository-unverified', true, true);
-                    const repositoryUrl = `https://github.com/${repository.nameWithOwner}`;
-                    const marker = `neocortex-reconciliation:${createHash('sha256').update(candidate.resourceId).digest('hex')}`;
-                    const commentView = JSON.parse(await gh('pr', 'view', String(candidate.prNumber), '--repo', repositoryUrl, '--json', 'comments'));
-                    if (!isRecord(commentView) || !Array.isArray(commentView.comments) || commentView.comments.length > 1000
-                        || commentView.comments.some((item) => !isRecord(item) || typeof item.body !== 'string')) {
-                        return failure('git-reconciliation-pr-comments-unverified', true, true);
-                    }
-                    if (!commentView.comments.some((item) => String(item.body).includes(marker))) {
-                        await gh('pr', 'comment', String(candidate.prNumber), '--repo', repositoryUrl, '--body', `Neocortex reconciliation verified managed ownership and integrated content; requesting closure. [${marker}]`);
-                    }
-                    // Commenting is an external round trip: repeat head/base/protection
-                    // proof before closure, then verify closure before releasing branches.
-                    const beforeClose = await revalidateCandidate({ candidate, decision, git, gh });
-                    if (!beforeClose.ok)
-                        return failure(beforeClose.reasonCode, true, false);
-                    if (beforeClose.alreadyAbsent)
-                        return { ok: true, outcome: 'already_absent' };
-                    await gh('pr', 'close', String(candidate.prNumber), '--repo', repositoryUrl);
-                    const closed = await revalidateCandidate({ candidate, decision, git, gh });
-                    if (!closed.ok)
-                        return failure(closed.reasonCode, true, false);
-                    if (!closed.alreadyAbsent)
-                        return failure('git-reconciliation-pr-close-unverified', true, true);
-                }
-                return { ok: true, outcome: 'applied' };
-            }
-            catch {
-                // Provider 404/auth/transport text does not prove the resource absent.
-                return failure('git-reconciliation-effect-failed', true, false);
-            }
-        },
-        async persist(input) {
-            try {
-                let blocked;
-                await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
-                    const epic = ensureRuntimeEpic(runtime, input.terminalReceipt.epicId);
-                    const existing = Array.isArray(epic.git_reconciliation_receipts)
-                        ? epic.git_reconciliation_receipts.filter(isRecord)
-                        : [];
-                    const byKey = new Map(existing.map((item) => [item.idempotencyKey, item]));
-                    for (const receipt of input.reconciliationReceipts) {
-                        if (!successfulReconciliation(byKey.get(receipt.idempotencyKey)))
-                            byKey.set(receipt.idempotencyKey, receipt);
-                    }
-                    const currentReceipt = isRecord(epic.terminal_git_receipt)
-                        ? epic.terminal_git_receipt
-                        : null;
-                    const terminalReceipt = reconcileTerminalReceipt(currentReceipt, input.terminalReceipt);
-                    if (terminalReceipt.kind === 'blocked') {
-                        blocked = terminalReceipt.reasonCode;
-                        return;
-                    }
-                    epic.terminal_git_receipt = terminalReceipt.receipt;
-                    epic.git_reconciliation_receipts = [...byKey.values()];
-                    epic.physicalMergeStatus = input.terminalReceipt.physicalStatus === 'pushed' ? 'merged' : input.terminalReceipt.physicalStatus;
-                    epic.pr_number = input.terminalReceipt.prNumber ?? epic.pr_number ?? null;
-                    epic.git_reconciliation_debt = dedupePreserved(epic.git_reconciliation_debt, input.preservedDecisions);
-                });
-                if (blocked)
-                    return failure(blocked, false, false);
-                return { ok: true };
-            }
-            catch {
-                return failure('epic-terminal-state-persist-failed', true, false);
-            }
-        },
-        async persistReconciliation(input) {
-            try {
-                await mutateGitLifecycleRuntime(projectRoot, (runtime) => {
-                    const epic = ensureRuntimeEpic(runtime, input.epicId);
-                    const existing = Array.isArray(epic.git_reconciliation_receipts)
-                        ? epic.git_reconciliation_receipts.filter(isRecord)
-                        : [];
-                    const byKey = new Map(existing.map((item) => [item.idempotencyKey, item]));
-                    for (const receipt of input.reconciliationReceipts) {
-                        if (!successfulReconciliation(byKey.get(receipt.idempotencyKey)))
-                            byKey.set(receipt.idempotencyKey, receipt);
-                    }
-                    epic.git_reconciliation_receipts = [...byKey.values()];
-                    epic.git_reconciliation_debt = dedupePreserved(epic.git_reconciliation_debt, input.preservedDecisions);
-                });
-                return { ok: true };
-            }
-            catch {
-                return failure('git-reconciliation-state-persist-failed', true, false);
-            }
-        },
-    };
-}
-/** Bind provider identity to origin; ambient GH_REPO must never redirect deletion. */
-async function githubOriginRepository(git, gh) {
-    try {
-        const origin = await git('remote', 'get-url', 'origin');
-        const nameWithOwner = origin.match(/^https:\/\/github\.com\/([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?\/?$/)?.[1]
-            ?? origin.match(/^git@github\.com:([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?$/)?.[1];
-        if (!nameWithOwner)
-            return null;
-        const repository = JSON.parse(await gh('repo', 'view', `https://github.com/${nameWithOwner}`, '--json', 'id,nameWithOwner,url'));
-        if (repository.nameWithOwner !== nameWithOwner || repository.url !== `https://github.com/${nameWithOwner}`
-            || typeof repository.id !== 'string' || !/^[A-Za-z0-9_=-]{1,256}$/.test(repository.id))
-            return null;
-        return { id: repository.id, nameWithOwner };
-    }
-    catch {
-        return null;
-    }
-}
-async function deleteRemoteBranchWithCas(candidate, decision, git, gh) {
-    try {
-        if (candidate.kind !== 'remote_branch' || decision.resourceId !== candidate.resourceId
-            || !candidate.baseBranch || candidate.baseBranch === candidate.branchName
-            || !safeBranch(candidate.branchName) || !safeBranch(candidate.baseBranch)
-            || !/^[a-f0-9]{40}$/.test(candidate.headSha) || !/^[a-f0-9]{40}$/.test(candidate.integrationHeadSha)) {
-            return failure('git-reconciliation-candidate-no-longer-safe', false, false);
-        }
-        const repository = await githubOriginRepository(git, gh);
-        if (!repository)
-            return failure('git-resource-remote-delete-cas-unavailable', false, false);
-        const currentHead = await resolveRemoteHeadFreshOptional(git, candidate.branchName);
-        if (!currentHead)
-            return { ok: true, outcome: 'already_absent' };
-        const revalidated = await revalidateCandidate({ candidate, decision, git, gh });
-        if (!revalidated.ok)
-            return failure(revalidated.reasonCode, true, false);
-        // Recheck provider identity after revalidation, which itself issues queries.
-        const freshRepository = await githubOriginRepository(git, gh);
-        if (freshRepository?.id !== repository.id)
-            return failure('git-resource-provider-repository-raced', true, false);
-        const mutationId = createHash('sha256').update([
-            'managed-remote-delete-v1', repository.id, candidate.branchName, candidate.headSha,
-            candidate.baseBranch, candidate.integrationHeadSha,
-        ].join('\0')).digest('hex');
-        const update = (name, before, after) => `{name:${JSON.stringify(`refs/heads/${name}`)},beforeOid:${JSON.stringify(before)},afterOid:${JSON.stringify(after)},force:false}`;
-        const query = `mutation{updateRefs(input:{repositoryId:${JSON.stringify(repository.id)},clientMutationId:${JSON.stringify(mutationId)},refUpdates:[`
-            + update(candidate.branchName, candidate.headSha, '0'.repeat(40)) + ','
-            + update(candidate.baseBranch, candidate.integrationHeadSha, candidate.integrationHeadSha)
-            + ']}){clientMutationId}}';
-        const result = JSON.parse(await gh('api', 'graphql', '--hostname', 'github.com', '-f', `query=${query}`));
-        if (result.errors || result.data?.updateRefs?.clientMutationId !== mutationId) {
-            return failure('git-resource-remote-delete-cas-unverified', true, true);
-        }
-        if (await resolveRemoteHeadFreshOptional(git, candidate.branchName)) {
-            return failure('git-resource-remote-delete-recreated-or-unverified', true, false);
-        }
-        return { ok: true, outcome: 'applied' };
-    }
-    catch {
-        return failure('git-resource-remote-delete-cas-rejected', true, true);
-    }
-}
-async function revalidateCandidate(input) {
-    const { candidate, decision, git, gh } = input;
-    if (!decision.managed || !candidate.providerVerified || candidate.current || candidate.origin || candidate.protected
-        || candidate.lifecycle === 'active' || candidate.hasExclusiveCommits || candidate.worktreeActive) {
-        return { ok: false, reasonCode: 'git-reconciliation-candidate-no-longer-safe' };
-    }
-    const current = await git('symbolic-ref', '--quiet', '--short', 'HEAD').catch(() => '');
-    const worktrees = await inspectWorktreeBranches(git);
-    if (current === candidate.branchName || worktrees.has(candidate.branchName)) {
-        return { ok: false, reasonCode: 'git-resource-worktree-active' };
-    }
-    if (candidate.kind === 'local_branch') {
-        const head = await resolveOptionalRef(git, `refs/heads/${candidate.branchName}`);
-        if (!head)
-            return { ok: true, alreadyAbsent: true };
-        if (head !== candidate.headSha)
-            return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
-        if (!candidate.baseBranch || await resolveRemoteHeadFresh(git, candidate.baseBranch) !== candidate.integrationHeadSha
-            || !(await isAncestor(git, head, candidate.integrationHeadSha))) {
-            return { ok: false, reasonCode: 'git-resource-integration-unproven' };
-        }
-        return { ok: true };
-    }
-    if (candidate.kind === 'remote_branch') {
-        const head = await resolveRemoteHeadFreshOptional(git, candidate.branchName);
-        if (!head)
-            return { ok: true };
-        if (head !== candidate.headSha)
-            return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
-        const repository = await githubOriginRepository(git, gh);
-        if (!repository)
-            return { ok: false, reasonCode: 'git-resource-provider-repository-unverified' };
-        if (await inspectRemoteBranchProtection(gh, repository.nameWithOwner, candidate.branchName) !== 'unprotected') {
-            return { ok: false, reasonCode: 'git-resource-protected' };
-        }
-        if (!candidate.baseBranch || await resolveRemoteHeadFresh(git, candidate.baseBranch) !== candidate.integrationHeadSha) {
-            return { ok: false, reasonCode: 'git-resource-integration-unproven' };
-        }
-        await git('fetch', '--quiet', '--no-tags', 'origin', `refs/heads/${candidate.branchName}`);
-        if (await git('rev-parse', 'FETCH_HEAD') !== candidate.headSha
-            || !(await isAncestor(git, candidate.headSha, candidate.integrationHeadSha))) {
-            return { ok: false, reasonCode: 'git-resource-integration-unproven' };
-        }
-        return { ok: true };
-    }
-    if (!candidate.prNumber || !candidate.baseBranch)
-        return { ok: false, reasonCode: 'git-reconciliation-pr-proof-missing' };
-    const repository = await githubOriginRepository(git, gh);
-    if (!repository)
-        return { ok: false, reasonCode: 'git-resource-provider-repository-unverified' };
-    const pr = await inspectPullRequest(gh, repository.nameWithOwner, candidate.prNumber);
-    if (!pr || pr.headRefName !== candidate.branchName || pr.baseRefName !== candidate.baseBranch || pr.headRefOid !== candidate.headSha) {
-        return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
-    }
-    // A positively observed closed resource requires no effect, even if its
-    // integrated branch has since been removed. Unknown/error is not absence.
-    if (pr.state === 'CLOSED' || pr.state === 'MERGED')
-        return { ok: true, alreadyAbsent: true };
-    if (await inspectRemoteBranchProtection(gh, repository.nameWithOwner, candidate.branchName) !== 'unprotected') {
-        return { ok: false, reasonCode: 'git-resource-protected' };
-    }
-    const remoteHead = await resolveRemoteHeadFreshOptional(git, candidate.branchName);
-    if (!pr || pr.state !== 'OPEN' || pr.headRefName !== candidate.branchName || pr.baseRefName !== candidate.baseBranch
-        || pr.headRefOid !== candidate.headSha || remoteHead !== candidate.headSha) {
-        return { ok: false, reasonCode: 'git-resource-expected-oid-raced' };
-    }
-    await git('fetch', '--quiet', '--no-tags', 'origin', `refs/heads/${candidate.branchName}`);
-    if (await git('rev-parse', 'FETCH_HEAD') !== candidate.headSha
-        || await resolveRemoteHeadFresh(git, candidate.baseBranch) !== candidate.integrationHeadSha
-        || !(await isAncestor(git, candidate.headSha, candidate.integrationHeadSha))) {
-        return { ok: false, reasonCode: 'git-resource-integration-unproven' };
-    }
-    return { ok: true };
-}
-async function buildCandidates(input) {
-    const candidates = [];
-    const activeWorktreeBranches = await inspectWorktreeBranches(input.git);
-    const ownership = collectGitResourceOwnership(input.state);
-    const repository = await githubOriginRepository(input.git, input.gh);
-    const parseRefs = (output) => {
-        const entries = output.split('\n').filter(Boolean).map((line) => line.split(/\s+/));
-        if (entries.length > GIT_INVENTORY_REF_LIMIT)
-            throw new Error('git-reconciliation-ref-inventory-limit');
-        const map = new Map();
-        for (const [sha, ref] of entries) {
-            const branch = ref?.replace(/^refs\/heads\//, '');
-            if (!branch || !safeBranch(branch) || !/^[a-f0-9]{40,64}$/.test(sha ?? '') || map.has(branch)) {
-                throw new Error('git-reconciliation-ref-inventory-invalid');
-            }
-            map.set(branch, sha);
-        }
-        return map;
-    };
-    const local = parseRefs(await input.git('for-each-ref', `--count=${GIT_INVENTORY_REF_LIMIT + 1}`, '--format=%(objectname) %(refname)', 'refs/heads'));
-    const remote = parseRefs(await input.git('ls-remote', '--heads', 'origin'));
-    const managedBranches = new Set([...ownership.claims.keys()].filter(safeBranch));
-    const prs = repository
-        ? await listRepositoryPullRequests(input.gh, repository.nameWithOwner, managedBranches)
-        : [];
-    const origins = new Map([[input.directive.originBranch, input.originHeadSha]]);
-    const originHead = async (branch) => {
-        if (origins.has(branch))
-            return origins.get(branch);
-        const head = remote.get(branch);
-        if (!head)
-            return '';
-        await fetchRemoteHeadExact(input.git, branch, head);
-        origins.set(branch, head);
-        return head;
-    };
-    const ancestry = new Map();
-    const ancestor = async (head, base) => {
-        const key = `${head}:${base}`;
-        if (!ancestry.has(key))
-            ancestry.set(key, Boolean(head && base) && await isAncestor(input.git, head, base));
-        return ancestry.get(key);
-    };
-    // PRs can corroborate a branch already claimed by durable Neocortex state,
-    // but an arbitrary repository PR must never create an ownership candidate.
-    // Keeping the branch set independent from PR inventory also prevents large
-    // repository histories from exhausting the managed-ref bound.
-    const branches = new Set([...local.keys(), ...remote.keys(), ...ownership.claims.keys()]);
-    if (branches.size > GIT_INVENTORY_REF_LIMIT)
-        throw new Error('git-reconciliation-ref-inventory-limit');
-    for (const branchName of [...branches].sort()) {
-        if (!safeBranch(branchName))
-            continue;
-        const claims = ownership.claims.get(branchName) ?? [];
-        const uniqueOwners = new Set(claims.map((claim) => `${claim.epicId}:${claim.origin}`));
-        const baseBranch = uniqueOwners.size === 1 ? claims[0].origin : input.directive.originBranch;
-        const integrationHeadSha = await originHead(baseBranch);
-        const active = claims.length === 0 || claims.some((claim) => claim.active);
-        const localHead = local.get(branchName), remoteHead = remote.get(branchName);
-        if (remoteHead)
-            await fetchRemoteHeadExact(input.git, branchName, remoteHead);
-        const protection = repository && remoteHead
-            ? await inspectRemoteBranchProtection(input.gh, repository.nameWithOwner, branchName) : 'unknown';
-        const evidenceFor = async (head) => {
-            if (uniqueOwners.size !== 1)
-                return [];
-            const evidence = new Set();
-            for (const claim of claims)
-                for (const proof of claim.proofs) {
-                    if (proof.head !== head)
-                        continue;
-                    if (proof.mergeSha && (!proof.pushedSha || !(await ancestor(head, proof.mergeSha))
-                        || !(await ancestor(proof.mergeSha, proof.pushedSha)) || !(await ancestor(proof.pushedSha, integrationHeadSha))))
-                        continue;
-                    proof.evidence.forEach((item) => evidence.add(item));
-                }
-            return [...evidence];
-        };
-        const common = {
-            schemaVersion: 1, branchName, baseBranch, integrationHeadSha,
-            lifecycle: active ? 'active' : 'integrated',
-            current: branchName === input.currentBranch,
-            origin: ownership.origins.has(branchName) || branchName === input.directive.originBranch,
-            worktreeActive: activeWorktreeBranches.has(branchName), contentEquivalent: false, publicSafe: true,
-        };
-        for (const [kind, head] of [['local_branch', localHead], ['remote_branch', remoteHead]]) {
-            if (!head)
-                continue;
-            const resourceId = `${kind}:${createHash('sha256').update(branchName).digest('hex')}:${head}`;
-            const reachable = await ancestor(head, integrationHeadSha);
-            candidates.push({ ...common, resourceId, kind, headSha: head, ownershipEvidence: await evidenceFor(head),
-                // Local-only refs have no provider policy; matching remote protected refs
-                // are protected on both sides. Unknown remote policy fails closed.
-                protected: Boolean(remoteHead) && protection !== 'unprotected',
-                providerVerified: kind === 'local_branch' ? true : Boolean(repository) && protection !== 'unknown',
-                ...(kind === 'remote_branch' && repository ? { remoteDeletionCas: 'github-update-refs-v1' } : {}),
-                commitsReachable: reachable, hasExclusiveCommits: !reachable,
-                previouslyReconciled: input.receiptIds.has(resourceId), });
-        }
-        for (const pr of prs.filter((item) => item.headRefName === branchName)) {
-            const headBaseMatch = pr.baseRefName === baseBranch && pr.sameRepository;
-            const evidence = await evidenceFor(pr.headRefOid);
-            if (headBaseMatch && evidence.includes('managed_metadata'))
-                evidence.push('pr_head_base_match');
-            const resourceId = `pr:${pr.number}:${pr.headRefOid}:${createHash('sha256').update(pr.baseRefName).digest('hex')}`;
-            const reachable = await ancestor(pr.headRefOid, integrationHeadSha);
-            candidates.push({ ...common, resourceId, kind: 'pull_request', prNumber: pr.number, headSha: pr.headRefOid,
-                lifecycle: pr.state !== 'OPEN' ? 'already_absent' : active ? 'active' : 'superseded',
-                ownershipEvidence: evidence, providerVerified: headBaseMatch,
-                protected: protection !== 'unprotected', commitsReachable: reachable, hasExclusiveCommits: !reachable,
-                previouslyReconciled: input.receiptIds.has(resourceId),
-            });
-        }
-    }
-    assertReconciliationCapacity(input.epic, candidates);
-    return candidates;
-}
-/** Preflight the whole batch before any ref/PR effect. Never trim old receipts. */
-function assertReconciliationCapacity(epic, candidates) {
-    const receipts = new Set((Array.isArray(epic.git_reconciliation_receipts) ? epic.git_reconciliation_receipts : [])
-        .filter(isRecord).map((item) => stringValue(item.idempotencyKey)));
-    const debt = new Set((Array.isArray(epic.git_reconciliation_debt) ? epic.git_reconciliation_debt : [])
-        .filter(isRecord).map((item) => stringValue(item.resourceId)));
-    const prBranches = new Set(candidates.filter((item) => item.kind === 'pull_request'
-        && classifyGitReconciliationCandidate(item).action === 'close_pull_request').map((item) => item.branchName));
-    for (const candidate of candidates) {
-        const decision = classifyGitReconciliationCandidate(candidate);
-        if (decision.action === 'preserve')
-            debt.add(candidate.resourceId);
-        else {
-            receipts.add(`reconciliation:v2:${createHash('sha256').update([candidate.resourceId, decision.action].join('\0')).digest('hex')}`);
-            // A failed PR close defers related branch effects into preserved debt.
-            if (candidate.kind !== 'pull_request' && prBranches.has(candidate.branchName))
-                debt.add(candidate.resourceId);
-        }
-    }
-    if (receipts.size > 1024)
-        throw new Error('git-reconciliation-receipt-capacity');
-    if (debt.size > 1024)
-        throw new Error('git-reconciliation-debt-capacity');
-}
-function publicInventoryReason(error) {
-    const reasons = new Set([
-        'git-reconciliation-state-inventory-limit', 'git-reconciliation-ref-inventory-limit',
-        'git-reconciliation-ref-inventory-invalid', 'git-reconciliation-pr-inventory-limit',
-        'git-reconciliation-pr-inventory-invalid', 'git-reconciliation-receipt-capacity',
-        'git-reconciliation-debt-capacity',
-    ]);
-    return error instanceof Error && reasons.has(error.message) ? error.message : undefined;
-}
-async function listRepositoryPullRequests(gh, repository, managedBranches) {
-    const repositoryOwner = repository.split('/')[0];
-    if (!repositoryOwner || !/^[A-Za-z0-9_.-]+$/.test(repositoryOwner)) {
-        throw new Error('git-reconciliation-pr-inventory-invalid');
-    }
-    const result = [];
-    const seen = new Set();
-    const pageSize = 100;
-    const maxPagesPerBranch = Math.floor(GIT_INVENTORY_PR_LIMIT / pageSize) + 1;
-    for (const branch of [...managedBranches].sort()) {
-        if (!safeBranch(branch))
-            throw new Error('git-reconciliation-pr-inventory-invalid');
-        const head = encodeURIComponent(`${repositoryOwner}:${branch}`);
-        for (let page = 1; page <= maxPagesPerBranch; page += 1) {
-            const endpoint = `repos/${repository}/pulls?state=all&head=${head}&per_page=${pageSize}&page=${page}`;
-            const items = JSON.parse(await gh('api', endpoint, '--hostname', 'github.com'));
-            if (!Array.isArray(items) || items.length > pageSize) {
-                throw new Error('git-reconciliation-pr-inventory-limit');
-            }
-            for (const item of items) {
-                if (!isRecord(item) || !Number.isSafeInteger(item.number) || Number(item.number) <= 0 || seen.has(Number(item.number))
-                    || !isRecord(item.head) || !isRecord(item.base) || stringValue(item.head.ref) !== branch
-                    || !safeBranch(stringValue(item.head.ref)) || !safeBranch(stringValue(item.base.ref))
-                    || !/^[a-f0-9]{40,64}$/.test(stringValue(item.head.sha))
-                    || !['open', 'closed'].includes(stringValue(item.state)))
-                    throw new Error('git-reconciliation-pr-inventory-invalid');
-                seen.add(Number(item.number));
-                result.push({ number: Number(item.number), state: stringValue(item.state).toUpperCase(),
-                    headRefName: stringValue(item.head.ref), headRefOid: stringValue(item.head.sha), baseRefName: stringValue(item.base.ref),
-                    sameRepository: isRecord(item.head.repo) && isRecord(item.base.repo)
-                        && item.head.repo.full_name === repository && item.base.repo.full_name === repository,
-                });
-                if (result.length > GIT_INVENTORY_PR_LIMIT) {
-                    throw new Error('git-reconciliation-pr-inventory-limit');
-                }
-            }
-            if (items.length < pageSize)
-                break;
-        }
-    }
-    return result;
-}
-function successfulReconciliation(value) {
-    return isRecord(value) && (value.outcome === 'applied' || value.outcome === 'already_absent');
-}
-async function recoverDirectPhysicalReceipt(input) {
-    try {
-        const matches = (await input.git('log', input.originHeadSha, '--format=%H', '--fixed-strings', `--grep=Neocortex-Idempotency: ${input.directive.idempotencyKey}`)).split('\n').filter((sha) => /^[a-f0-9]{40,64}$/i.test(sha));
-        if (matches.length !== 1)
-            return null;
-        const mergeSha = matches[0];
-        const parents = (await input.git('rev-list', '--parents', '-n', '1', mergeSha)).split(/\s+/);
-        const message = await input.git('show', '-s', '--format=%B', mergeSha);
-        const [subject] = message.split('\n');
-        const expectedSubject = `merge(${input.directive.epicId}): integrate ${input.directive.executionBranch} into ${input.directive.originBranch}`;
-        if (parents.length !== 3 || parents[2] !== input.executionHeadSha || subject !== expectedSubject)
-            return null;
-        const trailers = new Set(message.split('\n').map((line) => line.trim()));
-        for (const trailer of [
-            `Neocortex-Epic: ${input.directive.epicId}`,
-            `Neocortex-Origin-Branch: ${input.directive.originBranch}`,
-            `Neocortex-Execution-Branch: ${input.directive.executionBranch}`,
-            `Neocortex-Execution-Head: ${input.executionHeadSha}`,
-            `Neocortex-Origin-Base: ${parents[1]}`,
-            `Neocortex-Graph-Revision: ${input.directive.graphRevision}`,
-            `Neocortex-Aggregate-QA: ${input.directive.localGates.aggregateQaReceipt.receiptRef}`,
-            `Neocortex-Idempotency: ${input.directive.idempotencyKey}`,
-        ])
-            if (!trailers.has(trailer))
-                return null;
-        const completedAt = await input.git('show', '-s', '--format=%cI', mergeSha);
-        return {
-            schemaVersion: 1, epicId: input.directive.epicId, executionBranch: input.directive.executionBranch,
-            originBranch: input.directive.originBranch, baseSha: parents[1], executionHeadSha: input.executionHeadSha,
-            mergeSha, pushedSha: mergeSha, strategy: 'direct', physicalStatus: 'pushed',
-            localGateReceiptRefs: input.directive.localGates.receiptRefs, idempotencyKey: input.directive.idempotencyKey,
-            attemptStartedAt: completedAt, completedAt, retryEligible: false,
-            reasonCodes: ['epic-terminal-recovered-physical-push'], publicSafe: true,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-async function inspectRemoteBranchProtection(gh, nameWithOwner, branchName) {
-    try {
-        if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(nameWithOwner))
-            return 'unknown';
-        const value = await gh('api', `repos/${nameWithOwner}/branches/${encodeURIComponent(branchName)}`, '--hostname', 'github.com', '--jq', '.protected');
-        return value === 'false' ? 'unprotected' : value === 'true' ? 'protected' : 'unknown';
-    }
-    catch {
-        return 'unknown';
-    }
-}
-async function inspectPullRequest(gh, nameWithOwner, prNumber) {
-    try {
-        const value = JSON.parse(await gh('pr', 'view', String(prNumber), '--repo', `https://github.com/${nameWithOwner}`, '--json', 'state,headRefName,headRefOid,baseRefName,mergeCommit'));
-        if (![value.state, value.headRefName, value.headRefOid, value.baseRefName].every((item) => typeof item === 'string'))
-            return null;
-        return value;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * GitHub protects expectedHeadOid but has no expected base OID on PR merge.
- * A strict up-to-date rule closes that base race: the tested candidate already
- * contains the exact base, and GitHub refuses it if the base advances. Merge
- * queues are a separate candidate/CI lifecycle and remain fail-closed here.
- */
-async function inspectGitHubBaseGuard(gh, nameWithOwner, originBranch, prHeadSha, originHeadSha, checkedAt) {
-    if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(nameWithOwner) || !safeBranch(originBranch)
-        || !/^[a-f0-9]{40,64}$/i.test(prHeadSha) || !/^[a-f0-9]{40,64}$/i.test(originHeadSha)
-        || Number.isNaN(Date.parse(checkedAt))) {
-        return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
-    }
-    let rules;
-    try {
-        const raw = JSON.parse(await gh('api', `repos/${nameWithOwner}/rules/branches/${encodeURIComponent(originBranch)}`, '--hostname', 'github.com', '--paginate', '--slurp'));
-        const flattened = Array.isArray(raw) && raw.every(Array.isArray) ? raw.flat() : raw;
-        if (!Array.isArray(flattened) || flattened.length > 256 || flattened.some((item) => !isRecord(item))) {
-            return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
-        }
-        rules = flattened;
-    }
-    catch {
-        return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
-    }
-    if (rules.some((rule) => rule.type === 'merge_queue')) {
-        return { ok: false, reasonCode: 'epic-terminal-pr-merge-queue-local-gate-required' };
-    }
-    const rulesetStrict = rules.some((rule) => rule.type === 'required_status_checks'
-        && isRecord(rule.parameters) && rule.parameters.strict_required_status_checks_policy === true);
-    let branchProtectionStrict = false;
-    try {
-        const classic = JSON.parse(await gh('api', `repos/${nameWithOwner}/branches/${encodeURIComponent(originBranch)}/protection/required_status_checks`, '--hostname', 'github.com'));
-        if (!isRecord(classic) || typeof classic.strict !== 'boolean') {
-            return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
-        }
-        branchProtectionStrict = classic.strict;
-    }
-    catch (error) {
-        if (!isProviderNotFound(error)) {
-            return { ok: false, reasonCode: 'epic-terminal-pr-base-guard-unverifiable' };
-        }
-    }
-    if (!rulesetStrict && !branchProtectionStrict) {
-        return { ok: false, reasonCode: 'epic-terminal-pr-strict-base-guard-required' };
-    }
-    const source = rulesetStrict && branchProtectionStrict
-        ? 'branch_protection_and_ruleset'
-        : rulesetStrict ? 'ruleset' : 'branch_protection';
-    return {
-        ok: true,
-        receipt: {
-            schemaVersion: 1, provider: 'github', mode: 'strict_up_to_date_expected_head', source,
-            prHeadSha, originHeadSha, checkedAt, publicSafe: true,
-        },
-    };
-}
-function isProviderNotFound(error) {
-    return error instanceof Error && /(?:HTTP\s*)?404\b|not found/i.test(error.message);
-}
-function validProviderGuardReceipt(value, terminal) {
-    const modeSourceValid = value.mode === 'recovered_exact_tree'
-        ? value.source === 'physical_recovery'
-        : value.mode === 'strict_up_to_date_expected_head'
-            && ['branch_protection', 'ruleset', 'branch_protection_and_ruleset'].includes(value.source);
-    return value.schemaVersion === 1 && value.provider === 'github' && modeSourceValid
-        && value.publicSafe === true && !Number.isNaN(Date.parse(value.checkedAt))
-        && value.prHeadSha === terminal.mergeSha && value.originHeadSha === terminal.baseSha;
-}
-async function command(binary, args, cwd) {
-    const result = await execFileAsync(binary, [...args], { cwd, encoding: 'utf8', maxBuffer: 16 * 1024 * 1024 });
-    return result.stdout.trim();
-}
-async function readEffectiveState(projectRoot, statePath, requiredRuntime = false) {
-    const tracked = JSON.parse(await readFile(statePath, 'utf8'));
-    return applyGitLifecycleRuntimeOverlay(tracked, await readGitLifecycleRuntime(projectRoot, { required: requiredRuntime }));
-}
-function validFreshAggregate(value, executionHeadSha, graphRevision, nowIso) {
-    if (!value || value.schemaVersion !== 1 || value.evidenceVersion !== 'p205-execution-v2'
-        || value.producer !== 'local-yolo-tdd' || value.contract !== 'P205-CI-02'
-        || value.command !== P205_COMPLETE_COMMAND || value.verdict !== 'passed'
-        || value.executionHeadSha !== executionHeadSha || value.graphRevision !== graphRevision
-        || !/^[a-f0-9]{64}$/i.test(value.manifestDigest ?? '')
-        || !/^[a-f0-9]{64}$/i.test(value.resultDigest ?? '') || value.gateIds.length === 0)
-        return false;
-    const expectedRef = `local-yolo-tdd:${createHash('sha256').update([
-        'epic-aggregate-p205-execution-v2', P205_COMPLETE_COMMAND,
-        executionHeadSha, graphRevision, value.manifestDigest, value.gateIds.join(','), value.resultDigest,
-    ].join('\0')).digest('hex')}`;
-    if (value.receiptRef !== expectedRef)
-        return false;
-    const checkedAt = Date.parse(value.checkedAt);
-    const now = Date.parse(nowIso);
-    return Number.isFinite(checkedAt) && Number.isFinite(now)
-        && now - checkedAt <= 30 * 60 * 1000 && checkedAt - now <= 5 * 60 * 1000;
-}
-async function resolveRemoteHeadFresh(git, branch) {
-    const sha = await resolveRemoteHeadFreshOptional(git, branch);
-    if (!sha)
-        throw new Error('origin-ref-missing');
-    return sha;
-}
-async function resolveRemoteHeadFreshOptional(git, branch) {
-    if (!safeBranch(branch))
-        throw new Error('branch-ref-invalid');
-    // Only a successful empty query proves absence. Transport/auth failure or
-    // malformed/ambiguous output must never authorize creation/deletion/replay.
-    const output = await git('ls-remote', '--heads', 'origin', `refs/heads/${branch}`);
-    const matches = output.split('\n').filter(Boolean).map((line) => line.split(/\s+/));
-    if (matches.length === 0)
-        return undefined;
-    if (matches.length !== 1 || matches[0].length !== 2 || matches[0][1] !== `refs/heads/${branch}`
-        || !/^[a-f0-9]{40,64}$/i.test(matches[0][0] ?? ''))
-        throw new Error('remote-ref-query-invalid');
-    return matches[0][0];
-}
-async function fetchRemoteHeadExact(git, branch, expectedSha) {
-    await git('fetch', '--quiet', '--no-tags', 'origin', `refs/heads/${branch}`);
-    if (await git('rev-parse', 'FETCH_HEAD') !== expectedSha)
-        throw new Error('remote-head-raced');
-}
-async function resolveOptionalRef(git, ref) {
-    try {
-        return await git('rev-parse', '--verify', ref);
-    }
-    catch {
-        return undefined;
-    }
-}
-async function isAncestor(git, ancestor, branch) {
-    try {
-        await git('merge-base', '--is-ancestor', ancestor, branch);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-async function isCommit(git, sha) {
-    if (!/^[a-f0-9]{40,64}$/i.test(sha))
-        return false;
-    try {
-        return await git('cat-file', '-t', sha) === 'commit';
-    }
-    catch {
-        return false;
-    }
-}
-async function inspectWorktreeBranches(git) {
-    const branches = new Set();
-    const output = await git('worktree', 'list', '--porcelain');
-    for (const line of output.split('\n')) {
-        if (line.startsWith('branch refs/heads/'))
-            branches.add(line.slice('branch refs/heads/'.length));
-    }
-    return branches;
-}
-function failure(reasonCode, retryEligible, externalPolicy) {
-    return { ok: false, reasonCode, retryEligible, externalPolicy };
-}
-function stringValue(value) {
-    return typeof value === 'string' ? value.trim() : '';
-}
-function safeBranch(value) {
-    return value.length > 0 && value.length <= 240 && !value.startsWith('-') && !value.startsWith('/')
-        && !value.endsWith('/') && !value.endsWith('.lock') && !value.includes('..') && !value.includes('\\')
-        && !value.includes('@{') && !value.includes('//') && /^[A-Za-z0-9._/-]+$/.test(value);
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function isNodeError(error, code) {
-    return error instanceof Error && 'code' in error && error.code === code;
-}
-function storyIds(epic) {
-    const value = Array.isArray(epic.stories) ? epic.stories : Array.isArray(epic.story_ids) ? epic.story_ids : [];
-    return value.filter((item) => typeof item === 'string');
-}
-async function acceptedPhysicalCheckpointIds(projectRoot, state, epic, epicId, executionBranch) {
-    const ids = storyIds(epic);
-    const verdicts = await Promise.all(ids.map((storyId) => verifyAcceptedGitLifecycleStoryCheckpoint(projectRoot, state.stories?.[storyId]?.checkpoint, storyId, epicId, executionBranch).then((verified) => verified && hasP205ExecutionAuthority(state.stories?.[storyId]?.checkpoint))));
-    return ids.filter((_storyId, index) => verdicts[index]);
-}
-function hasP205ExecutionAuthority(value) {
-    const checkpoint = isRecord(value) ? value : undefined;
-    const qa = checkpoint && isRecord(checkpoint.qaReceipt) ? checkpoint.qaReceipt : undefined;
-    return Boolean(qa
-        && qa.evidenceVersion === 'p205-execution-v2'
-        && qa.producer === 'local-yolo-tdd'
-        && qa.contract === 'P205-CI-02'
-        && qa.command === P205_COMPLETE_COMMAND
-        && /^[a-f0-9]{64}$/i.test(stringValue(qa.manifestDigest))
-        && /^[a-f0-9]{64}$/i.test(stringValue(qa.resultDigest))
-        && Array.isArray(qa.gateIds)
-        && qa.gateIds.length > 0);
-}
-function sameSet(left, right) {
-    return left.length === right.length
-        && [...left].sort().every((item, index) => item === [...right].sort()[index]);
-}
-function isLiveLease(value) {
-    return isRecord(value) && typeof value.expiresAt === 'string' && value.expiresAt > new Date().toISOString();
-}
-async function hasUncommittedSourceChanges(git) {
-    // These exact untracked files are the running client's own operational data.
-    // Never exempt a tracked modification (including a user-tracked SQLite), and
-    // never ignore an entire directory that could contain unrelated user work.
-    const runtimeFiles = new Set([
-        '.neocortex/yoloop.lock', '.neocortex/yoloop-state.json',
-        '.neocortex/continuity/continuity.sqlite', '.neocortex/continuity/continuity.sqlite-shm',
-        '.neocortex/continuity/continuity.sqlite-wal',
-    ]);
-    return (await git('status', '--porcelain', '--untracked-files=all')).split('\n').filter(Boolean)
-        .some((line) => !line.startsWith('?? ') || !runtimeFiles.has(line.slice(3)));
-}
-function looksLikeRemotePolicy(error) {
-    const text = error instanceof Error ? error.message : '';
-    return /protected branch|branch protection|required pull request|GH006|GH013|ruleset|review required/i.test(text);
-}
-function dedupePreserved(existing, decisions) {
-    const values = Array.isArray(existing) ? existing.filter(isRecord) : [];
-    const byId = new Map(values.map((item) => [stringValue(item.resourceId), item]));
-    for (const decision of decisions)
-        byId.set(decision.resourceId, decision);
-    return [...byId.values()];
-}
+import{execFile as ve}from"node:child_process";import{createHash as q}from"node:crypto";import{readFile as oe}from"node:fs/promises";import{join as He}from"node:path";import{promisify as Be}from"node:util";import{P205_RELEASE_GATE_BUDGETS as ce,classifyGitReconciliationCandidate as se,epicHeadReconciliationInputDigest as ke,epicHeadReconciliationPathsDigest as de,epicHeadReconciliationRangeDigest as Ie,reconcileTerminalReceipt as Ne,validateEpicHeadReconciliationReceipt as he}from"../../../../shared/dist/yoloop/epic-terminal-git.js";import{collectGitResourceOwnership as $e,GIT_INVENTORY_PR_LIMIT as le,GIT_INVENTORY_REF_LIMIT as re}from"./epic-git-reconciliation-inventory.js";import{executeEpicMergeCandidateQa as ge,verifiedEpicMergeCandidateReceipt as L}from"./epic-merge-candidate-qa.js";import{applyGitLifecycleRuntimeOverlay as Ae,ensureRuntimeEpic as K,executeP205TransientAuthority as Ee,gitLifecycleStoryWriteSet as fe,P205_COMPLETE_COMMAND as z,projectP205TransientExecutionEvidence as Ce,revalidateEpicHeadReconciliationAuthority as Oe,verifyAcceptedGitLifecycleStoryCheckpoint as ue,mutateGitLifecycleRuntime as Z,readGitLifecycleRuntime as qe}from"../../git/git-lifecycle-store.js";const Pe=Be(ve);function rr(e,t={}){const i=He(e,".neocortex","state.json"),a=t.gitRunner??((...r)=>ye("git",r,e)),d=t.providerRunner??((...r)=>ye("gh",r,e)),u=new Map;return{async prepareLifecycleEvidence(r){try{try{await oe(i,"utf8")}catch(H){if(Je(H,"ENOENT"))return{ok:!0,originBindingCaptured:!1,aggregateQaRecorded:!1};throw H}const o=(await P(e,i)).epics?.[r.epicId];if(!o)return s("epic-state-missing",!1,!1);if(b(o.branch_mode)!=="epic")return{ok:!0,originBindingCaptured:!1,aggregateQaRecorded:!1};const c=b(o.execution_branch),h=b(o.origin_branch);if(!c||!A(c))return s("epic-execution-branch-missing",!1,!1);let g=await a("symbolic-ref","--quiet","--short","HEAD").catch(()=>""),f=await a("rev-parse","HEAD"),l=y(o.origin_binding)?o.origin_binding:null,S=!1;if(l){if(l.executionBranch!==c||l.originBranch!==h||g!==c&&g!==l.originBranch||!await T(a,l.originHeadSha)||!await v(a,l.originHeadSha,f))return s("epic-origin-binding-physical-drift",!1,!1)}else{if(!g||g===c||!A(g))return s("epic-origin-binding-capture-window-missed",!1,!1);if(h&&h!==g)return s("epic-origin-binding-recorded-origin-drift",!1,!1);l={schemaVersion:1,originBranch:g,originHeadSha:f,executionBranch:c,capturedFromCurrentCheckout:!0,capturedAt:r.nowIso},await Z(e,H=>{const R=K(H,r.epicId);if(R.origin_binding&&JSON.stringify(R.origin_binding)!==JSON.stringify(l))throw new Error("origin-binding-cas-conflict");R.origin_branch=g,R.origin_binding=l}),S=!0}if(g!==c){const H=await Se(a,`refs/heads/${c}`);try{if(H){if(!await v(a,l.originHeadSha,H))return s("epic-execution-branch-origin-drift",!1,!1);await a("switch",c)}else await a("switch","-c",c,l.originHeadSha)}catch{const R=await a("status","--porcelain","--untracked-files=normal").catch(()=>"");return s(R?"epic-execution-branch-switch-blocked-by-user-changes":"epic-execution-branch-switch-failed",!0,!1)}if(g=await a("symbolic-ref","--quiet","--short","HEAD"),f=await a("rev-parse","HEAD"),g!==c)return s("epic-execution-branch-switch-unverified",!0,!1)}const p=await P(e,i,!0),m=p.epics?.[r.epicId];if(!m)return s("epic-state-missing",!1,!1);const x=G(m),w=await Promise.all(x.map(H=>ue(e,p.stories?.[H]?.checkpoint,H,r.epicId,c).then(R=>R&&xe(p.stories?.[H]?.checkpoint))));if(!(x.length>0&&w.every(Boolean)))return{ok:!0,originBindingCaptured:S,aggregateQaRecorded:!1};if(g!==c)return s("epic-aggregate-qa-execution-checkout-required",!0,!1);const B=b(m.graph_revision);if(!/^[a-f0-9]{64}$/i.test(B))return s("epic-aggregate-qa-graph-required",!1,!1);if(await _e(a))return s("epic-aggregate-qa-checkout-dirty",!0,!1);const W=y(m.aggregate_qa_receipt)?m.aggregate_qa_receipt:null,E=y(m.head_reconciliation_receipt)?m.head_reconciliation_receipt:null;if(E&&X(W,f,B,r.nowIso)){const H=await Oe(e,E,W,r.nowIso);return{ok:!0,originBindingCaptured:S,aggregateQaRecorded:!1,headReconciliationRecorded:!0,terminalAuthority:H.authority}}const O=await Ee(e,{headSha:f,graphRevision:B,nowIso:r.nowIso}),N=Ce(O);if(!N)return s("epic-aggregate-qa-authority-invalid",!1,!1);if(await t.aggregateQaRunner?.({projectRoot:e,gateIds:N.gateIds}),await a("rev-parse","HEAD")!==f||await _e(a))return s("epic-aggregate-qa-head-raced",!0,!1);const J=`local-yolo-tdd:${q("sha256").update(["epic-aggregate-p205-execution-v2",z,f,B,N.manifestDigest,N.gateIds.join(","),N.resultDigest].join("\0")).digest("hex")}`,_={schemaVersion:1,evidenceVersion:"p205-execution-v2",producer:"local-yolo-tdd",contract:"P205-CI-02",command:z,verdict:"passed",executionHeadSha:f,graphRevision:B,manifestDigest:N.manifestDigest,resultDigest:N.resultDigest,checkedAt:N.executedAt,receiptRef:J,gateIds:N.gateIds},I=await Ve({git:a,state:p,epic:m,epicId:r.epicId,executionBranch:c,originBranch:l.originBranch,originHeadSha:l.originHeadSha,executionHeadSha:f,graphRevision:B,aggregateQaReceipt:_,nowIso:N.executedAt});return await Z(e,H=>{const R=K(H,r.epicId);R.aggregate_qa_receipt=_,R.head_reconciliation_receipt=I}),{ok:!0,originBindingCaptured:S,aggregateQaRecorded:!0,headReconciliationRecorded:!0,terminalAuthority:O,p205Authority:O}}catch{return s("epic-lifecycle-evidence-production-failed",!0,!1)}},async inspect(r){try{const n=await P(e,i,!0),o=n.epics?.[r.epicId];if(!o)return s("epic-state-missing",!1,!1);if(b(o.execution_branch)!==r.executionBranch||b(o.origin_branch)!==r.originBranch)return s("epic-branch-boundary-drift",!1,!1);const c=await a("rev-parse",`refs/heads/${r.executionBranch}`),h=await $(a,r.originBranch);await Q(a,r.originBranch,h);const g=await V(e,n,o,r.epicId,r.executionBranch);let f=y(o.terminal_git_receipt)?o.terminal_git_receipt:null;f?.physicalStatus==="pushed"&&(f.pushedSha&&await v(a,f.executionHeadSha,f.pushedSha)&&await v(a,f.pushedSha,h)||(f=null)),f||(f=await Ge({directive:r,executionHeadSha:c,originHeadSha:h,git:a}));const l=new Set((Array.isArray(o.git_reconciliation_receipts)?o.git_reconciliation_receipts:[]).filter(y).filter(j).map(E=>b(E.resourceId)).filter(Boolean)),S=await a("symbolic-ref","--quiet","--short","HEAD").catch(()=>""),p=r.reconcile.enabled?await pe({state:n,epic:o,directive:r,currentBranch:S,originHeadSha:h,receiptIds:l,git:a,gh:d}):[],m=y(o.origin_binding)?o.origin_binding:null,x=m&&m.originBranch===r.originBranch&&m.executionBranch===r.executionBranch&&await T(a,m.originHeadSha)&&await v(a,m.originHeadSha,c)?m:null,w=y(o.aggregate_qa_receipt)?o.aggregate_qa_receipt:null,k=t.now?.()??new Date().toISOString(),B=w&&x&&await te({projectRoot:e,git:a,state:n,epic:o,epicId:r.epicId,executionBranch:r.executionBranch,originBranch:r.originBranch,executionHeadSha:c,graphRevision:r.graphRevision,aggregateQaReceipt:w,nowIso:k})?o.head_reconciliation_receipt:null;return{ok:!0,snapshot:{executionHeadSha:c,originHeadSha:h,...b(o.graph_revision)?{graphRevision:b(o.graph_revision)}:{},writerLeaseActive:ee(o.branch_lease),acceptedCheckpointIds:g,existingReceipt:f,aggregateQaReceipt:w,headReconciliationReceipt:B,originBinding:x,reconciliationCandidates:p}}}catch(n){return s(me(n)??"epic-terminal-inspection-failed",!0,!1)}},async prepareMergeObject(r){let n;try{const o=await a("merge-tree","--write-tree",r.originHeadSha,r.executionHeadSha);n=await a("commit-tree",o,"-p",r.originHeadSha,"-p",r.executionHeadSha,"-m",r.message)}catch{return s("epic-terminal-merge-conflict",!1,!1)}try{const o=await ge(e,{mergeSha:n,originHeadSha:r.originHeadSha,executionHeadSha:r.executionHeadSha,graphRevision:r.graphRevision},r.nowIso);return u.set(n,o.candidateAuthority),{ok:!0,mergeSha:n,...o}}catch{return s("epic-merge-candidate-qa-failed",!0,!1)}},async inspectReconciliation(r){try{const n=await P(e,i,!0),o=n.epics?.[r.epicId];if(!o)return s("epic-state-missing",!1,!1);if(b(o.execution_branch)!==r.executionBranch||b(o.origin_branch)!==r.originBranch)return s("epic-branch-boundary-drift",!1,!1);const c=await $(a,r.originBranch);await Q(a,r.originBranch,c);const h=new Set((Array.isArray(o.git_reconciliation_receipts)?o.git_reconciliation_receipts:[]).filter(y).filter(j).map(l=>b(l.resourceId)).filter(Boolean)),g=await a("symbolic-ref","--quiet","--short","HEAD").catch(()=>"");return{ok:!0,candidates:await pe({state:n,epic:o,directive:r,currentBranch:g,originHeadSha:c,receiptIds:h,git:a,gh:d})}}catch(n){return s(me(n)??"git-reconciliation-inspection-failed",!0,!1)}},async pushMergeObject(r){try{if(!L(r.candidateAuthority,{mergeSha:r.mergeSha,originHeadSha:r.expectedOriginSha,executionHeadSha:r.executionHeadSha,graphRevision:r.graphRevision}))return s("epic-merge-candidate-authority-required",!1,!1);const o=await P(e,i,!0),c=o.epics?.[r.epicId];if(!c||c.execution_branch!==r.executionBranch||c.origin_branch!==r.originBranch||c.graph_revision!==r.graphRevision||ee(c.branch_lease)||await a("rev-parse",`refs/heads/${r.executionBranch}`)!==r.executionHeadSha)return s("epic-merge-candidate-authority-raced",!0,!1);const h=await V(e,o,c,r.epicId,r.executionBranch);if(!ie(h,r.storyCheckpointIds)||!ie(G(c),r.storyCheckpointIds))return s("epic-checkpoint-set-revalidation-drift",!0,!1);const g=y(c.aggregate_qa_receipt)?c.aggregate_qa_receipt:null;if(!X(g,r.executionHeadSha,r.graphRevision,r.nowIso)||g.receiptRef!==r.aggregateQaReceipt.receiptRef)return s("epic-terminal-aggregate-qa-revalidation-drift",!0,!1);if(!await te({projectRoot:e,git:a,state:o,epic:c,epicId:r.epicId,executionBranch:r.executionBranch,originBranch:r.originBranch,executionHeadSha:r.executionHeadSha,graphRevision:r.graphRevision,aggregateQaReceipt:g,nowIso:r.nowIso}))return s("epic-head-reconciliation-revalidation-drift",!0,!1);if(await $(a,r.originBranch)!==r.expectedOriginSha)return s("epic-origin-head-raced",!0,!1);await a("push","--porcelain","origin",`${r.mergeSha}:refs/heads/${r.originBranch}`);const l=await $(a,r.originBranch);return l!==r.mergeSha?s("epic-terminal-push-unverified",!0,!1):{ok:!0,pushedSha:l}}catch(n){return ne(n)?s("epic-terminal-remote-policy-denied",!0,!0):s("epic-terminal-push-failed",!0,!1)}},async ensureSingleEpicPullRequest(r){try{const n=L(r.candidateAuthority,{mergeSha:r.expectedPullRequestHeadSha,originHeadSha:r.candidateQa.originHeadSha,executionHeadSha:r.expectedStoryHeadSha,graphRevision:r.candidateQa.graphRevision});if(!n||n!==r.candidateQa||!await v(a,r.candidateQa.originHeadSha,r.expectedPullRequestHeadSha)||!await v(a,r.expectedStoryHeadSha,r.expectedPullRequestHeadSha))return s("epic-merge-candidate-authority-required",!1,!1);const o=await C(a,d);if(!o)return s("git-resource-provider-repository-unverified",!0,!0);if(r.terminalBinding&&!await we({projectRoot:e,statePath:i,git:a,epicId:r.epicId,originBranch:r.originBranch,executionBranch:r.executionBranch,executionHeadSha:r.expectedStoryHeadSha,graphRevision:r.terminalBinding.graphRevision,storyCheckpointIds:r.terminalBinding.storyCheckpointIds,aggregateQaReceipt:r.terminalBinding.aggregateQaReceipt,nowIso:r.terminalBinding.nowIso}))return s("epic-head-reconciliation-revalidation-drift",!0,!1);const c=`https://github.com/${o.nameWithOwner}`,h=await D(a,r.executionBranch);if(h&&h!==r.expectedPullRequestHeadSha){if(await Q(a,r.executionBranch,h),!await v(a,h,r.expectedPullRequestHeadSha))return s("epic-terminal-execution-remote-head-drift",!0,!0);await a("push","--porcelain","origin",`${r.expectedPullRequestHeadSha}:refs/heads/${r.executionBranch}`)}if(h||await a("push","--porcelain","origin",`${r.expectedPullRequestHeadSha}:refs/heads/${r.executionBranch}`),await $(a,r.executionBranch)!==r.expectedPullRequestHeadSha)return s("epic-terminal-execution-publish-unverified",!0,!0);const g=await d("pr","list","--repo",c,"--state","all","--head",r.executionBranch,"--base",r.originBranch,"--json","number,state,headRefName,headRefOid,baseRefName,mergeCommit","--limit","100"),f=JSON.parse(g),l=f.filter(w=>w.headRefName===r.executionBranch&&w.baseRefName===r.originBranch&&w.headRefOid===r.expectedPullRequestHeadSha&&(w.state==="OPEN"||w.state==="MERGED"));if(l.length>1)return s("epic-terminal-duplicate-prs",!1,!0);if(typeof l[0]?.number=="number")return{ok:!0,prNumber:l[0].number};if(f.some(w=>w.state==="OPEN"))return s("epic-terminal-stale-pr",!1,!0);const p=(await d("pr","create","--repo",c,"--head",r.executionBranch,"--base",r.originBranch,"--title",`[${r.epicId}] Terminal epic integration`,"--body",`Autonomous terminal integration receipt: ${r.idempotencyKey}`)).match(/\/(\d+)(?:\s*)$/);if(!p)return s("epic-terminal-pr-number-unverified",!0,!0);const m=Number(p[1]),x=await Y(d,o.nameWithOwner,m);return!x||x.state!=="OPEN"||x.headRefName!==r.executionBranch||x.baseRefName!==r.originBranch||x.headRefOid!==r.expectedPullRequestHeadSha?s("epic-terminal-pr-create-unverified",!0,!0):{ok:!0,prNumber:m}}catch(n){return s("epic-terminal-pr-create-denied",!0,ne(n))}},async mergeEpicPullRequest(r){try{const n=await C(a,d);if(!n)return s("git-resource-provider-repository-unverified",!0,!0);const o=r.candidateQa&&L(r.candidateAuthority,{mergeSha:r.expectedPullRequestHeadSha,graphRevision:r.candidateQa.graphRevision,originHeadSha:r.expectedOriginHeadSha,executionHeadSha:r.expectedStoryHeadSha});if(!o||o!==r.candidateQa)return s("epic-merge-candidate-authority-required",!1,!1);const c=await Y(d,n.nameWithOwner,r.prNumber),h=await D(a,r.executionBranch),g=await $(a,r.originBranch);if(!c||c.headRefName!==r.executionBranch||c.baseRefName!==r.originBranch||c.headRefOid!==r.expectedPullRequestHeadSha||h&&h!==r.expectedPullRequestHeadSha||!await v(a,r.expectedOriginHeadSha,r.expectedPullRequestHeadSha)||!await v(a,r.expectedStoryHeadSha,r.expectedPullRequestHeadSha))return s("epic-terminal-pr-revalidation-drift",!0,!0);if(c.state==="OPEN"&&g!==r.expectedOriginHeadSha)return s("epic-terminal-pr-origin-raced",!0,!0);let f;if(c.state==="OPEN"){const w=await We(d,n.nameWithOwner,r.originBranch,r.expectedPullRequestHeadSha,r.expectedOriginHeadSha,r.nowIso);if(!w.ok)return s(w.reasonCode,!0,!0);if(f=w.receipt,r.terminalBinding&&(!r.epicId||!await we({projectRoot:e,statePath:i,git:a,epicId:r.epicId,originBranch:r.originBranch,executionBranch:r.executionBranch,executionHeadSha:r.expectedStoryHeadSha,graphRevision:r.terminalBinding.graphRevision,storyCheckpointIds:r.terminalBinding.storyCheckpointIds,aggregateQaReceipt:r.terminalBinding.aggregateQaReceipt,nowIso:r.nowIso})))return s("epic-head-reconciliation-revalidation-drift",!0,!1);if(await $(a,r.originBranch)!==r.expectedOriginHeadSha)return s("epic-terminal-pr-origin-raced",!0,!0);await d("pr","merge",String(r.prNumber),"--repo",`https://github.com/${n.nameWithOwner}`,"--merge","--match-head-commit",r.expectedPullRequestHeadSha)}else{if(c.state!=="MERGED")return s("epic-terminal-pr-not-open-or-merged",!1,!0);f={schemaVersion:1,provider:"github",mode:"recovered_exact_tree",source:"physical_recovery",prHeadSha:r.expectedPullRequestHeadSha,originHeadSha:r.expectedOriginHeadSha,checkedAt:r.nowIso,publicSafe:!0}}const l=await Y(d,n.nameWithOwner,r.prNumber),S=l?.mergeCommit?.oid;if(l?.state!=="MERGED"||!S)return s("epic-terminal-pr-merge-unverified",!0,!0);const p=await $(a,r.originBranch);if(await Q(a,r.originBranch,p),!await v(a,r.expectedStoryHeadSha,p)||!await v(a,r.expectedPullRequestHeadSha,p)||!await v(a,S,p))return s("epic-terminal-pr-merge-ancestry-unproven",!0,!0);const[m,x]=await Promise.all([a("rev-parse",`${r.expectedPullRequestHeadSha}^{tree}`),a("rev-parse",`${S}^{tree}`)]);return m!==r.candidateQa.treeSha||x!==m?s("epic-terminal-pr-merged-tree-mismatch",!1,!0):{ok:!0,mergeSha:r.expectedPullRequestHeadSha,pushedSha:S,providerGuard:f}}catch(n){return s("epic-terminal-pr-merge-denied",!0,ne(n))}},async verifyTerminalReceipt(r,n,o){try{if(n.physicalStatus!=="pushed"||!n.pushedSha||!n.mergeSha)return s("epic-terminal-physical-revalidation-required",!0,!1);const c=await P(e,i,!0),h=c.epics?.[r.epicId];if(!h||b(h.execution_branch)!==r.executionBranch||b(h.origin_branch)!==r.originBranch||b(h.graph_revision)!==r.graphRevision)return s("epic-terminal-state-revalidation-drift",!0,!1);const g=await a("rev-parse",`refs/heads/${r.executionBranch}`);if(g!==r.expectedExecutionHeadSha||n.executionHeadSha!==g)return s("epic-terminal-execution-revalidation-drift",!0,!1);const f=y(h.origin_binding)?h.origin_binding:null;if(!f||f.originBranch!==r.originBranch||f.executionBranch!==r.executionBranch||!await T(a,f.originHeadSha)||!await v(a,f.originHeadSha,g))return s("epic-origin-binding-revalidation-drift",!0,!1);const l=await V(e,c,h,r.epicId,r.executionBranch);if(ee(h.branch_lease)||!ie(l,r.storyCheckpointIds))return s("epic-checkpoint-set-revalidation-drift",!0,!1);const S=y(h.aggregate_qa_receipt)?h.aggregate_qa_receipt:null;if(!X(S,g,r.graphRevision,o)||S?.receiptRef!==r.localGates.aggregateQaReceipt.receiptRef)return s("epic-terminal-aggregate-qa-revalidation-drift",!0,!1);const p=await $(a,r.originBranch);if(await Q(a,r.originBranch,p),!await v(a,g,p)||!await v(a,n.mergeSha,p)||!await v(a,n.pushedSha,p))return s("epic-terminal-physical-ancestry-unproven",!0,!1);const m={originHeadSha:n.baseSha,executionHeadSha:g,mergeSha:n.mergeSha,graphRevision:r.graphRevision};let x=u.get(n.mergeSha),w=L(x,m);if(!w){const B=await ge(e,m,o);x=B.candidateAuthority,w=B.candidateQa,u.set(n.mergeSha,x)}if(n.candidateQa&&(n.candidateQa.originHeadSha!==w.originHeadSha||n.candidateQa.executionHeadSha!==w.executionHeadSha||n.candidateQa.graphRevision!==w.graphRevision||n.candidateQa.treeSha!==w.treeSha))return s("epic-merge-candidate-receipt-drift",!0,!1);let k=n.providerGuard;if(n.strategy==="single_pr"){if(!n.prNumber)return s("epic-terminal-pr-merge-unverified",!0,!1);if(await a("rev-parse",`${n.pushedSha}^{tree}`)!==w.treeSha)return s("epic-terminal-pr-merged-tree-mismatch",!1,!1);if(k&&!Te(k,n))return s("epic-terminal-pr-base-guard-unverifiable",!1,!1);k??={schemaVersion:1,provider:"github",mode:"recovered_exact_tree",source:"physical_recovery",prHeadSha:n.mergeSha,originHeadSha:n.baseSha,checkedAt:o,publicSafe:!0}}else if(k)return s("epic-terminal-pr-base-guard-unverifiable",!1,!1);return{ok:!0,candidateQa:w,candidateAuthority:x,...k?{providerGuard:k}:{}}}catch{return s("epic-terminal-physical-revalidation-failed",!0,!1)}},async applyReconciliation(r,n,o){if(n.action==="preserve")return s("git-reconciliation-preserve-not-actionable",!1,!1);if(o)return{ok:!0,outcome:"dry_run"};if(n.action==="no_op")return{ok:!0,outcome:"already_absent"};if(n.action==="delete_remote_branch")return De(r,n,a,d);try{const c=await U({candidate:r,decision:n,git:a,gh:d});if(!c.ok)return s(c.reasonCode,!0,!1);if(c.alreadyAbsent)return{ok:!0,outcome:"already_absent"};if(n.action==="delete_local_branch")await a("update-ref","-d",`refs/heads/${r.branchName}`,r.headSha);else if(n.action==="close_pull_request"){if(!r.prNumber)return s("git-reconciliation-pr-number-missing",!1,!1);const h=await C(a,d);if(!h)return s("git-resource-provider-repository-unverified",!0,!0);const g=`https://github.com/${h.nameWithOwner}`,f=`neocortex-reconciliation:${q("sha256").update(r.resourceId).digest("hex")}`,l=JSON.parse(await d("pr","view",String(r.prNumber),"--repo",g,"--json","comments"));if(!y(l)||!Array.isArray(l.comments)||l.comments.length>1e3||l.comments.some(m=>!y(m)||typeof m.body!="string"))return s("git-reconciliation-pr-comments-unverified",!0,!0);l.comments.some(m=>String(m.body).includes(f))||await d("pr","comment",String(r.prNumber),"--repo",g,"--body",`Neocortex reconciliation verified managed ownership and integrated content; requesting closure. [${f}]`);const S=await U({candidate:r,decision:n,git:a,gh:d});if(!S.ok)return s(S.reasonCode,!0,!1);if(S.alreadyAbsent)return{ok:!0,outcome:"already_absent"};await d("pr","close",String(r.prNumber),"--repo",g);const p=await U({candidate:r,decision:n,git:a,gh:d});if(!p.ok)return s(p.reasonCode,!0,!1);if(!p.alreadyAbsent)return s("git-reconciliation-pr-close-unverified",!0,!0)}return{ok:!0,outcome:"applied"}}catch{return s("git-reconciliation-effect-failed",!0,!1)}},async persist(r){try{let n;return await Z(e,o=>{const c=K(o,r.terminalReceipt.epicId),h=Array.isArray(c.git_reconciliation_receipts)?c.git_reconciliation_receipts.filter(y):[],g=new Map(h.map(S=>[S.idempotencyKey,S]));for(const S of r.reconciliationReceipts)j(g.get(S.idempotencyKey))||g.set(S.idempotencyKey,S);const f=y(c.terminal_git_receipt)?c.terminal_git_receipt:null,l=Ne(f,r.terminalReceipt);if(l.kind==="blocked"){n=l.reasonCode;return}c.terminal_git_receipt=l.receipt,c.git_reconciliation_receipts=[...g.values()],c.physicalMergeStatus=r.terminalReceipt.physicalStatus==="pushed"?"merged":r.terminalReceipt.physicalStatus,c.pr_number=r.terminalReceipt.prNumber??c.pr_number??null,c.git_reconciliation_debt=Re(c.git_reconciliation_debt,r.preservedDecisions)}),n?s(n,!1,!1):{ok:!0}}catch{return s("epic-terminal-state-persist-failed",!0,!1)}},async persistReconciliation(r){try{return await Z(e,n=>{const o=K(n,r.epicId),c=Array.isArray(o.git_reconciliation_receipts)?o.git_reconciliation_receipts.filter(y):[],h=new Map(c.map(g=>[g.idempotencyKey,g]));for(const g of r.reconciliationReceipts)j(h.get(g.idempotencyKey))||h.set(g.idempotencyKey,g);o.git_reconciliation_receipts=[...h.values()],o.git_reconciliation_debt=Re(o.git_reconciliation_debt,r.preservedDecisions)}),{ok:!0}}catch{return s("git-reconciliation-state-persist-failed",!0,!1)}}}}async function C(e,t){try{const i=await e("remote","get-url","origin"),a=i.match(/^https:\/\/github\.com\/([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?\/?$/)?.[1]??i.match(/^git@github\.com:([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?$/)?.[1];if(!a)return null;const d=JSON.parse(await t("repo","view",`https://github.com/${a}`,"--json","id,nameWithOwner,url"));return d.nameWithOwner!==a||d.url!==`https://github.com/${a}`||typeof d.id!="string"||!/^[A-Za-z0-9_=-]{1,256}$/.test(d.id)?null:{id:d.id,nameWithOwner:a}}catch{return null}}async function De(e,t,i,a){try{if(e.kind!=="remote_branch"||t.resourceId!==e.resourceId||!e.baseBranch||e.baseBranch===e.branchName||!A(e.branchName)||!A(e.baseBranch)||!/^[a-f0-9]{40}$/.test(e.headSha)||!/^[a-f0-9]{40}$/.test(e.integrationHeadSha))return s("git-reconciliation-candidate-no-longer-safe",!1,!1);const d=await C(i,a);if(!d)return s("git-resource-remote-delete-cas-unavailable",!1,!1);if(!await D(i,e.branchName))return{ok:!0,outcome:"already_absent"};const r=await U({candidate:e,decision:t,git:i,gh:a});if(!r.ok)return s(r.reasonCode,!0,!1);if((await C(i,a))?.id!==d.id)return s("git-resource-provider-repository-raced",!0,!1);const o=q("sha256").update(["managed-remote-delete-v1",d.id,e.branchName,e.headSha,e.baseBranch,e.integrationHeadSha].join("\0")).digest("hex"),c=(f,l,S)=>`{name:${JSON.stringify(`refs/heads/${f}`)},beforeOid:${JSON.stringify(l)},afterOid:${JSON.stringify(S)},force:false}`,h=`mutation{updateRefs(input:{repositoryId:${JSON.stringify(d.id)},clientMutationId:${JSON.stringify(o)},refUpdates:[`+c(e.branchName,e.headSha,"0".repeat(40))+","+c(e.baseBranch,e.integrationHeadSha,e.integrationHeadSha)+"]}){clientMutationId}}",g=JSON.parse(await a("api","graphql","--hostname","github.com","-f",`query=${h}`));return g.errors||g.data?.updateRefs?.clientMutationId!==o?s("git-resource-remote-delete-cas-unverified",!0,!0):await D(i,e.branchName)?s("git-resource-remote-delete-recreated-or-unverified",!0,!1):{ok:!0,outcome:"applied"}}catch{return s("git-resource-remote-delete-cas-rejected",!0,!0)}}async function U(e){const{candidate:t,decision:i,git:a,gh:d}=e;if(!i.managed||!t.providerVerified||t.current||t.origin||t.protected||t.lifecycle==="active"||t.hasExclusiveCommits||t.worktreeActive)return{ok:!1,reasonCode:"git-reconciliation-candidate-no-longer-safe"};const u=await a("symbolic-ref","--quiet","--short","HEAD").catch(()=>""),r=await be(a);if(u===t.branchName||r.has(t.branchName))return{ok:!1,reasonCode:"git-resource-worktree-active"};if(t.kind==="local_branch"){const h=await Se(a,`refs/heads/${t.branchName}`);return h?h!==t.headSha?{ok:!1,reasonCode:"git-resource-expected-oid-raced"}:!t.baseBranch||await $(a,t.baseBranch)!==t.integrationHeadSha||!await v(a,h,t.integrationHeadSha)?{ok:!1,reasonCode:"git-resource-integration-unproven"}:{ok:!0}:{ok:!0,alreadyAbsent:!0}}if(t.kind==="remote_branch"){const h=await D(a,t.branchName);if(!h)return{ok:!0};if(h!==t.headSha)return{ok:!1,reasonCode:"git-resource-expected-oid-raced"};const g=await C(a,d);return g?await ae(d,g.nameWithOwner,t.branchName)!=="unprotected"?{ok:!1,reasonCode:"git-resource-protected"}:!t.baseBranch||await $(a,t.baseBranch)!==t.integrationHeadSha?{ok:!1,reasonCode:"git-resource-integration-unproven"}:(await a("fetch","--quiet","--no-tags","origin",`refs/heads/${t.branchName}`),await a("rev-parse","FETCH_HEAD")!==t.headSha||!await v(a,t.headSha,t.integrationHeadSha)?{ok:!1,reasonCode:"git-resource-integration-unproven"}:{ok:!0}):{ok:!1,reasonCode:"git-resource-provider-repository-unverified"}}if(!t.prNumber||!t.baseBranch)return{ok:!1,reasonCode:"git-reconciliation-pr-proof-missing"};const n=await C(a,d);if(!n)return{ok:!1,reasonCode:"git-resource-provider-repository-unverified"};const o=await Y(d,n.nameWithOwner,t.prNumber);if(!o||o.headRefName!==t.branchName||o.baseRefName!==t.baseBranch||o.headRefOid!==t.headSha)return{ok:!1,reasonCode:"git-resource-expected-oid-raced"};if(o.state==="CLOSED"||o.state==="MERGED")return{ok:!0,alreadyAbsent:!0};if(await ae(d,n.nameWithOwner,t.branchName)!=="unprotected")return{ok:!1,reasonCode:"git-resource-protected"};const c=await D(a,t.branchName);return!o||o.state!=="OPEN"||o.headRefName!==t.branchName||o.baseRefName!==t.baseBranch||o.headRefOid!==t.headSha||c!==t.headSha?{ok:!1,reasonCode:"git-resource-expected-oid-raced"}:(await a("fetch","--quiet","--no-tags","origin",`refs/heads/${t.branchName}`),await a("rev-parse","FETCH_HEAD")!==t.headSha||await $(a,t.baseBranch)!==t.integrationHeadSha||!await v(a,t.headSha,t.integrationHeadSha)?{ok:!1,reasonCode:"git-resource-integration-unproven"}:{ok:!0})}async function pe(e){const t=[],i=await be(e.git),a=$e(e.state),d=await C(e.git,e.gh),u=p=>{const m=p.split(`
+`).filter(Boolean).map(w=>w.split(/\s+/));if(m.length>re)throw new Error("git-reconciliation-ref-inventory-limit");const x=new Map;for(const[w,k]of m){const B=k?.replace(/^refs\/heads\//,"");if(!B||!A(B)||!/^[a-f0-9]{40,64}$/.test(w??"")||x.has(B))throw new Error("git-reconciliation-ref-inventory-invalid");x.set(B,w)}return x},r=u(await e.git("for-each-ref",`--count=${re+1}`,"--format=%(objectname) %(refname)","refs/heads")),n=u(await e.git("ls-remote","--heads","origin")),o=new Set([...a.claims.keys()].filter(A)),c=d?await Me(e.gh,d.nameWithOwner,o):[],h=new Map([[e.directive.originBranch,e.originHeadSha]]),g=async p=>{if(h.has(p))return h.get(p);const m=n.get(p);return m?(await Q(e.git,p,m),h.set(p,m),m):""},f=new Map,l=async(p,m)=>{const x=`${p}:${m}`;return f.has(x)||f.set(x,!!(p&&m)&&await v(e.git,p,m)),f.get(x)},S=new Set([...r.keys(),...n.keys(),...a.claims.keys()]);if(S.size>re)throw new Error("git-reconciliation-ref-inventory-limit");for(const p of[...S].sort()){if(!A(p))continue;const m=a.claims.get(p)??[],x=new Set(m.map(_=>`${_.epicId}:${_.origin}`)),w=x.size===1?m[0].origin:e.directive.originBranch,k=await g(w),B=m.length===0||m.some(_=>_.active),W=r.get(p),E=n.get(p);E&&await Q(e.git,p,E);const O=d&&E?await ae(e.gh,d.nameWithOwner,p):"unknown",N=async _=>{if(x.size!==1)return[];const I=new Set;for(const H of m)for(const R of H.proofs)R.head===_&&(R.mergeSha&&(!R.pushedSha||!await l(_,R.mergeSha)||!await l(R.mergeSha,R.pushedSha)||!await l(R.pushedSha,k))||R.evidence.forEach(F=>I.add(F)));return[...I]},J={schemaVersion:1,branchName:p,baseBranch:w,integrationHeadSha:k,lifecycle:B?"active":"integrated",current:p===e.currentBranch,origin:a.origins.has(p)||p===e.directive.originBranch,worktreeActive:i.has(p),contentEquivalent:!1,publicSafe:!0};for(const[_,I]of[["local_branch",W],["remote_branch",E]]){if(!I)continue;const H=`${_}:${q("sha256").update(p).digest("hex")}:${I}`,R=await l(I,k);t.push({...J,resourceId:H,kind:_,headSha:I,ownershipEvidence:await N(I),protected:!!E&&O!=="unprotected",providerVerified:_==="local_branch"?!0:!!d&&O!=="unknown",..._==="remote_branch"&&d?{remoteDeletionCas:"github-update-refs-v1"}:{},commitsReachable:R,hasExclusiveCommits:!R,previouslyReconciled:e.receiptIds.has(H)})}for(const _ of c.filter(I=>I.headRefName===p)){const I=_.baseRefName===w&&_.sameRepository,H=await N(_.headRefOid);I&&H.includes("managed_metadata")&&H.push("pr_head_base_match");const R=`pr:${_.number}:${_.headRefOid}:${q("sha256").update(_.baseRefName).digest("hex")}`,F=await l(_.headRefOid,k);t.push({...J,resourceId:R,kind:"pull_request",prNumber:_.number,headSha:_.headRefOid,lifecycle:_.state!=="OPEN"?"already_absent":B?"active":"superseded",ownershipEvidence:H,providerVerified:I,protected:O!=="unprotected",commitsReachable:F,hasExclusiveCommits:!F,previouslyReconciled:e.receiptIds.has(R)})}}return Qe(e.epic,t),t}function Qe(e,t){const i=new Set((Array.isArray(e.git_reconciliation_receipts)?e.git_reconciliation_receipts:[]).filter(y).map(u=>b(u.idempotencyKey))),a=new Set((Array.isArray(e.git_reconciliation_debt)?e.git_reconciliation_debt:[]).filter(y).map(u=>b(u.resourceId))),d=new Set(t.filter(u=>u.kind==="pull_request"&&se(u).action==="close_pull_request").map(u=>u.branchName));for(const u of t){const r=se(u);r.action==="preserve"?a.add(u.resourceId):(i.add(`reconciliation:v2:${q("sha256").update([u.resourceId,r.action].join("\0")).digest("hex")}`),u.kind!=="pull_request"&&d.has(u.branchName)&&a.add(u.resourceId))}if(i.size>1024)throw new Error("git-reconciliation-receipt-capacity");if(a.size>1024)throw new Error("git-reconciliation-debt-capacity")}function me(e){const t=new Set(["git-reconciliation-state-inventory-limit","git-reconciliation-ref-inventory-limit","git-reconciliation-ref-inventory-invalid","git-reconciliation-pr-inventory-limit","git-reconciliation-pr-inventory-invalid","git-reconciliation-receipt-capacity","git-reconciliation-debt-capacity"]);return e instanceof Error&&t.has(e.message)?e.message:void 0}async function Me(e,t,i){const a=t.split("/")[0];if(!a||!/^[A-Za-z0-9_.-]+$/.test(a))throw new Error("git-reconciliation-pr-inventory-invalid");const d=[],u=new Set,r=100,n=Math.floor(le/r)+1;for(const o of[...i].sort()){if(!A(o))throw new Error("git-reconciliation-pr-inventory-invalid");const c=encodeURIComponent(`${a}:${o}`);for(let h=1;h<=n;h+=1){const g=`repos/${t}/pulls?state=all&head=${c}&per_page=${r}&page=${h}`,f=JSON.parse(await e("api",g,"--hostname","github.com"));if(!Array.isArray(f)||f.length>r)throw new Error("git-reconciliation-pr-inventory-limit");for(const l of f){if(!y(l)||!Number.isSafeInteger(l.number)||Number(l.number)<=0||u.has(Number(l.number))||!y(l.head)||!y(l.base)||b(l.head.ref)!==o||!A(b(l.head.ref))||!A(b(l.base.ref))||!/^[a-f0-9]{40,64}$/.test(b(l.head.sha))||!["open","closed"].includes(b(l.state)))throw new Error("git-reconciliation-pr-inventory-invalid");if(u.add(Number(l.number)),d.push({number:Number(l.number),state:b(l.state).toUpperCase(),headRefName:b(l.head.ref),headRefOid:b(l.head.sha),baseRefName:b(l.base.ref),sameRepository:y(l.head.repo)&&y(l.base.repo)&&l.head.repo.full_name===t&&l.base.repo.full_name===t}),d.length>le)throw new Error("git-reconciliation-pr-inventory-limit")}if(f.length<r)break}}return d}function j(e){return y(e)&&(e.outcome==="applied"||e.outcome==="already_absent")}async function Ge(e){try{const t=(await e.git("log",e.originHeadSha,"--format=%H","--fixed-strings",`--grep=Neocortex-Idempotency: ${e.directive.idempotencyKey}`)).split(`
+`).filter(c=>/^[a-f0-9]{40,64}$/i.test(c));if(t.length!==1)return null;const i=t[0],a=(await e.git("rev-list","--parents","-n","1",i)).split(/\s+/),d=await e.git("show","-s","--format=%B",i),[u]=d.split(`
+`),r=`merge(${e.directive.epicId}): integrate ${e.directive.executionBranch} into ${e.directive.originBranch}`;if(a.length!==3||a[2]!==e.executionHeadSha||u!==r)return null;const n=new Set(d.split(`
+`).map(c=>c.trim()));for(const c of[`Neocortex-Epic: ${e.directive.epicId}`,`Neocortex-Origin-Branch: ${e.directive.originBranch}`,`Neocortex-Execution-Branch: ${e.directive.executionBranch}`,`Neocortex-Execution-Head: ${e.executionHeadSha}`,`Neocortex-Origin-Base: ${a[1]}`,`Neocortex-Graph-Revision: ${e.directive.graphRevision}`,`Neocortex-Aggregate-QA: ${e.directive.localGates.aggregateQaReceipt.receiptRef}`,`Neocortex-Idempotency: ${e.directive.idempotencyKey}`])if(!n.has(c))return null;const o=await e.git("show","-s","--format=%cI",i);return{schemaVersion:1,epicId:e.directive.epicId,executionBranch:e.directive.executionBranch,originBranch:e.directive.originBranch,baseSha:a[1],executionHeadSha:e.executionHeadSha,mergeSha:i,pushedSha:i,strategy:"direct",physicalStatus:"pushed",localGateReceiptRefs:e.directive.localGates.receiptRefs,idempotencyKey:e.directive.idempotencyKey,attemptStartedAt:o,completedAt:o,retryEligible:!1,reasonCodes:["epic-terminal-recovered-physical-push"],publicSafe:!0}}catch{return null}}async function ae(e,t,i){try{if(!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(t))return"unknown";const a=await e("api",`repos/${t}/branches/${encodeURIComponent(i)}`,"--hostname","github.com","--jq",".protected");return a==="false"?"unprotected":a==="true"?"protected":"unknown"}catch{return"unknown"}}async function Y(e,t,i){try{const a=JSON.parse(await e("pr","view",String(i),"--repo",`https://github.com/${t}`,"--json","state,headRefName,headRefOid,baseRefName,mergeCommit"));return[a.state,a.headRefName,a.headRefOid,a.baseRefName].every(d=>typeof d=="string")?a:null}catch{return null}}async function We(e,t,i,a,d,u){if(!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(t)||!A(i)||!/^[a-f0-9]{40,64}$/i.test(a)||!/^[a-f0-9]{40,64}$/i.test(d)||Number.isNaN(Date.parse(u)))return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"};let r;try{const h=JSON.parse(await e("api",`repos/${t}/rules/branches/${encodeURIComponent(i)}`,"--hostname","github.com","--paginate","--slurp")),g=Array.isArray(h)&&h.every(Array.isArray)?h.flat():h;if(!Array.isArray(g)||g.length>256||g.some(f=>!y(f)))return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"};r=g}catch{return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"}}if(r.some(h=>h.type==="merge_queue"))return{ok:!1,reasonCode:"epic-terminal-pr-merge-queue-local-gate-required"};const n=r.some(h=>h.type==="required_status_checks"&&y(h.parameters)&&h.parameters.strict_required_status_checks_policy===!0);let o=!1;try{const h=JSON.parse(await e("api",`repos/${t}/branches/${encodeURIComponent(i)}/protection/required_status_checks`,"--hostname","github.com"));if(!y(h)||typeof h.strict!="boolean")return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"};o=h.strict}catch(h){if(!ze(h))return{ok:!1,reasonCode:"epic-terminal-pr-base-guard-unverifiable"}}return!n&&!o?{ok:!1,reasonCode:"epic-terminal-pr-strict-base-guard-required"}:{ok:!0,receipt:{schemaVersion:1,provider:"github",mode:"strict_up_to_date_expected_head",source:n&&o?"branch_protection_and_ruleset":n?"ruleset":"branch_protection",prHeadSha:a,originHeadSha:d,checkedAt:u,publicSafe:!0}}}function ze(e){return e instanceof Error&&/(?:HTTP\s*)?404\b|not found/i.test(e.message)}function Te(e,t){const i=e.mode==="recovered_exact_tree"?e.source==="physical_recovery":e.mode==="strict_up_to_date_expected_head"&&["branch_protection","ruleset","branch_protection_and_ruleset"].includes(e.source);return e.schemaVersion===1&&e.provider==="github"&&i&&e.publicSafe===!0&&!Number.isNaN(Date.parse(e.checkedAt))&&e.prHeadSha===t.mergeSha&&e.originHeadSha===t.baseSha}async function ye(e,t,i){return(await Pe(e,[...t],{cwd:i,encoding:"utf8",maxBuffer:16777216})).stdout.trim()}async function P(e,t,i=!1){const a=JSON.parse(await oe(t,"utf8"));return Ae(a,await qe(e,{required:i}))}async function Ve(e){if(!await T(e.git,e.originHeadSha)||!await v(e.git,e.originHeadSha,e.executionHeadSha))throw new Error("epic-head-reconciliation-origin-ancestry-invalid");const t=G(e.epic),i=[],a=new Set;for(const h of t){const g=e.state.stories?.[h],f=g?.checkpoint;if(!y(g)||!y(f))throw new Error("epic-head-reconciliation-checkpoint-missing");const l=b(f.headSha);if(!/^[a-f0-9]{40,64}$/i.test(l))throw new Error("epic-head-reconciliation-checkpoint-head-invalid");i.push(l);for(const S of fe(h,g,f))a.add(S)}const d=i.at(-1);if(!d||!await v(e.git,d,e.executionHeadSha))throw new Error("epic-head-reconciliation-checkpoint-ancestry-invalid");const u=(await e.git("rev-list","--first-parent","--reverse",`${d}..${e.executionHeadSha}`)).split(`
+`).filter(Boolean),r=(await e.git("diff","--name-only","-z",`${d}..${e.executionHeadSha}`)).split("\0").filter(Boolean).sort(),n=[...a].sort(),o=Object.freeze({schemaVersion:1,kind:"epic_head_reconciliation",producer:"client-p205-head-reconciliation-v1",epicId:e.epicId,executionBranch:e.executionBranch,originBranch:e.originBranch,graphRevision:e.graphRevision,originHeadSha:e.originHeadSha,lastAcceptedCheckpointHeadSha:d,executionHeadSha:e.executionHeadSha,acceptedCheckpointIds:Object.freeze([...t]),acceptedCheckpointHeads:Object.freeze(i),reconciliationCommitShas:Object.freeze(u),commitRangeDigest:Ie(d,e.executionHeadSha,u),changedPaths:Object.freeze(r),changedPathsDigest:de(r),allowedWriteSet:Object.freeze(n),allowedWriteSetDigest:de(n),aggregateReceiptRef:e.aggregateQaReceipt.receiptRef,aggregateManifestDigest:e.aggregateQaReceipt.manifestDigest??"",aggregateResultDigest:e.aggregateQaReceipt.resultDigest??"",producedAt:e.nowIso,revalidatedAt:e.nowIso,publicSafe:!0}),c=Object.freeze({...o,inputDigest:ke(o)});if(!he(c,{epicId:e.epicId,executionBranch:e.executionBranch,originBranch:e.originBranch,graphRevision:e.graphRevision,originHeadSha:e.originHeadSha,executionHeadSha:e.executionHeadSha,acceptedCheckpointIds:t,acceptedCheckpointHeads:i,aggregateQaReceipt:e.aggregateQaReceipt,nowIso:e.nowIso}))throw new Error("epic-head-reconciliation-receipt-invalid");return c}async function te(e){const t=y(e.epic.head_reconciliation_receipt)?e.epic.head_reconciliation_receipt:null,i=y(e.epic.origin_binding)?e.epic.origin_binding:null;if(!t||!i||i.originBranch!==e.originBranch||i.executionBranch!==e.executionBranch||!await T(e.git,i.originHeadSha)||!await v(e.git,i.originHeadSha,e.executionHeadSha))return!1;const a=await V(e.projectRoot,e.state,e.epic,e.epicId,e.executionBranch);if(!M(a,G(e.epic)))return!1;const d=[],u=new Set;for(const c of a){const h=e.state.stories?.[c],g=h?.checkpoint;if(!y(h)||!y(g))return!1;d.push(b(g.headSha));for(const f of fe(c,h,g))u.add(f)}const r=d.at(-1);if(!r||!await v(e.git,r,e.executionHeadSha))return!1;const n=(await e.git("rev-list","--first-parent","--reverse",`${r}..${e.executionHeadSha}`)).split(`
+`).filter(Boolean),o=(await e.git("diff","--name-only","-z",`${r}..${e.executionHeadSha}`)).split("\0").filter(Boolean).sort();return M(n,t.reconciliationCommitShas)&&M(o,t.changedPaths)&&M([...u].sort(),t.allowedWriteSet)&&he(t,{epicId:e.epicId,executionBranch:e.executionBranch,originBranch:e.originBranch,graphRevision:e.graphRevision,originHeadSha:i.originHeadSha,executionHeadSha:e.executionHeadSha,acceptedCheckpointIds:a,acceptedCheckpointHeads:d,aggregateQaReceipt:e.aggregateQaReceipt,nowIso:e.nowIso})}async function we(e){const t=await P(e.projectRoot,e.statePath,!0),i=t.epics?.[e.epicId];if(!i||i.execution_branch!==e.executionBranch||i.origin_branch!==e.originBranch||i.graph_revision!==e.graphRevision||ee(i.branch_lease)||await e.git("rev-parse",`refs/heads/${e.executionBranch}`)!==e.executionHeadSha)return!1;const a=await V(e.projectRoot,t,i,e.epicId,e.executionBranch);if(!M(a,e.storyCheckpointIds)||!M(a,G(i)))return!1;const d=y(i.aggregate_qa_receipt)?i.aggregate_qa_receipt:null;if(!X(d,e.executionHeadSha,e.graphRevision,e.nowIso)||d.receiptRef!==e.aggregateQaReceipt.receiptRef)return!1;const u=t.stories?.[a.at(-1)??""]?.checkpoint;return(y(u)?b(u.headSha):"")===e.executionHeadSha?!0:te({projectRoot:e.projectRoot,git:e.git,state:t,epic:i,epicId:e.epicId,executionBranch:e.executionBranch,originBranch:e.originBranch,executionHeadSha:e.executionHeadSha,graphRevision:e.graphRevision,aggregateQaReceipt:d,nowIso:e.nowIso})}function X(e,t,i,a){if(!e||e.schemaVersion!==1||e.evidenceVersion!=="p205-execution-v2"||e.producer!=="local-yolo-tdd"||e.contract!=="P205-CI-02"||e.command!==z||e.verdict!=="passed"||e.executionHeadSha!==t||e.graphRevision!==i||!/^[a-f0-9]{64}$/i.test(e.manifestDigest??"")||!/^[a-f0-9]{64}$/i.test(e.resultDigest??"")||e.gateIds.length===0)return!1;const d=`local-yolo-tdd:${q("sha256").update(["epic-aggregate-p205-execution-v2",z,t,i,e.manifestDigest,e.gateIds.join(","),e.resultDigest].join("\0")).digest("hex")}`;if(e.receiptRef!==d)return!1;const u=Date.parse(e.checkedAt),r=Date.parse(a);return Number.isFinite(u)&&Number.isFinite(r)&&r-u<=ce.aggregateValidityMs&&u-r<=ce.cancellationGraceMs}function M(e,t){return e.length===t.length&&e.every((i,a)=>i===t[a])}async function $(e,t){const i=await D(e,t);if(!i)throw new Error("origin-ref-missing");return i}async function D(e,t){if(!A(t))throw new Error("branch-ref-invalid");const a=(await e("ls-remote","--heads","origin",`refs/heads/${t}`)).split(`
+`).filter(Boolean).map(d=>d.split(/\s+/));if(a.length!==0){if(a.length!==1||a[0].length!==2||a[0][1]!==`refs/heads/${t}`||!/^[a-f0-9]{40,64}$/i.test(a[0][0]??""))throw new Error("remote-ref-query-invalid");return a[0][0]}}async function Q(e,t,i){if(await e("fetch","--quiet","--no-tags","origin",`refs/heads/${t}`),await e("rev-parse","FETCH_HEAD")!==i)throw new Error("remote-head-raced")}async function Se(e,t){try{return await e("rev-parse","--verify",t)}catch{return}}async function v(e,t,i){try{return await e("merge-base","--is-ancestor",t,i),!0}catch{return!1}}async function T(e,t){if(!/^[a-f0-9]{40,64}$/i.test(t))return!1;try{return await e("cat-file","-t",t)==="commit"}catch{return!1}}async function be(e){const t=new Set,i=await e("worktree","list","--porcelain");for(const a of i.split(`
+`))a.startsWith("branch refs/heads/")&&t.add(a.slice(18));return t}function s(e,t,i){return{ok:!1,reasonCode:e,retryEligible:t,externalPolicy:i}}function b(e){return typeof e=="string"?e.trim():""}function A(e){return e.length>0&&e.length<=240&&!e.startsWith("-")&&!e.startsWith("/")&&!e.endsWith("/")&&!e.endsWith(".lock")&&!e.includes("..")&&!e.includes("\\")&&!e.includes("@{")&&!e.includes("//")&&/^[A-Za-z0-9._/-]+$/.test(e)}function y(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function Je(e,t){return e instanceof Error&&"code"in e&&e.code===t}function G(e){return(Array.isArray(e.stories)?e.stories:Array.isArray(e.story_ids)?e.story_ids:[]).filter(i=>typeof i=="string")}async function V(e,t,i,a,d){const u=G(i),r=await Promise.all(u.map(n=>ue(e,t.stories?.[n]?.checkpoint,n,a,d).then(o=>o&&xe(t.stories?.[n]?.checkpoint))));return u.filter((n,o)=>r[o])}function xe(e){const t=y(e)?e:void 0,i=t&&y(t.qaReceipt)?t.qaReceipt:void 0;return!!(i&&i.evidenceVersion==="p205-execution-v2"&&i.producer==="local-yolo-tdd"&&i.contract==="P205-CI-02"&&i.command===z&&/^[a-f0-9]{64}$/i.test(b(i.manifestDigest))&&/^[a-f0-9]{64}$/i.test(b(i.resultDigest))&&Array.isArray(i.gateIds)&&i.gateIds.length>0)}function ie(e,t){return e.length===t.length&&[...e].sort().every((i,a)=>i===[...t].sort()[a])}function ee(e){return y(e)&&typeof e.expiresAt=="string"&&e.expiresAt>new Date().toISOString()}async function _e(e){const t=new Set([".neocortex/yoloop.lock",".neocortex/yoloop-state.json",".neocortex/continuity/continuity.sqlite",".neocortex/continuity/continuity.sqlite-shm",".neocortex/continuity/continuity.sqlite-wal"]);return(await e("status","--porcelain","--untracked-files=all")).split(`
+`).filter(Boolean).some(i=>!i.startsWith("?? ")||!t.has(i.slice(3)))}function ne(e){const t=e instanceof Error?e.message:"";return/protected branch|branch protection|required pull request|GH006|GH013|ruleset|review required/i.test(t)}function Re(e,t){const i=Array.isArray(e)?e.filter(y):[],a=new Map(i.map(d=>[b(d.resourceId),d]));for(const d of t)a.set(d.resourceId,d);return[...a.values()]}export{rr as createCliEpicTerminalGitAdapter};