@ornexus/neocortex 4.60.73 → 4.60.75

package/packages/client/dist/yolo/change-evidence-collector.js

@@ -1,126 +1 @@
-import { execFileSync } from 'node:child_process';
-import { realpathSync } from 'node:fs';
-import { createYoloChangeEvidence } from '../../../shared/dist/yolo/change-evidence.js';
-import { readGitLifecycleRuntimeSync } from '../git/git-lifecycle-store.js';
-/** Reacquire only an expired setup lease for this exact story through P207's CAS boundary. */
-export async function reconcileYoloChangeEvidenceLease(options) {
-    let lease;
-    try {
-        lease = readGitLifecycleRuntimeSync(options.projectRoot, { required: true })
-            .epics[options.epicId]?.branch_lease;
-    }
-    catch (error) {
-        // C01 can legitimately precede first-use sidecar materialization. Only
-        // that exact absence falls through to the existing remote/base evidence.
-        if (error instanceof Error && error.message === 'git-lifecycle-runtime-missing')
-            return;
-        throw new Error('yolo-change-evidence-unavailable');
-    }
-    if (lease === null || lease === undefined)
-        return;
-    if (typeof lease !== 'object' || Array.isArray(lease)
-        || lease.ownerStoryId !== options.storyId
-        || typeof lease.expiresAt !== 'string') {
-        throw new Error('yolo-change-evidence-unavailable');
-    }
-    const expiry = Date.parse(lease.expiresAt);
-    if (!Number.isFinite(expiry))
-        throw new Error('yolo-change-evidence-unavailable');
-    if (expiry > Date.now())
-        return;
-    if (typeof lease.sessionId !== 'string'
-        || !/^setup-[a-f0-9]{64}$/.test(lease.sessionId)
-        || lease.idempotencyKey !== lease.sessionId) {
-        throw new Error('yolo-change-evidence-unavailable');
-    }
-    const { prepareDirectYoloSetup } = await import('../git/direct-yolo-checkpoint.js');
-    const result = await prepareDirectYoloSetup(options);
-    if (!result.ok || result.value.storyId !== options.storyId
-        || result.value.epicId !== options.epicId
-        || Date.parse(result.value.leaseExpiresAt) <= Date.now()) {
-        throw new Error('yolo-change-evidence-unavailable');
-    }
-}
-function git(root, args) {
-    try {
-        return execFileSync('git', ['-C', root, ...args], {
-            encoding: 'utf8', timeout: 3_000, maxBuffer: 1024 * 1024, stdio: ['ignore', 'pipe', 'ignore'],
-        });
-    }
-    catch {
-        throw new Error('yolo-change-evidence-unavailable');
-    }
-}
-export function collectYoloChangeEvidence(options) {
-    if (!/^[A-Za-z0-9][A-Za-z0-9_./-]{0,119}$/.test(options.defaultBranch)
-        || options.defaultBranch.includes('..'))
-        throw new Error('yolo-change-evidence-unavailable');
-    const repositoryRoot = git(options.projectRoot, ['rev-parse', '--show-toplevel']).trim();
-    if (realpathSync(repositoryRoot) !== realpathSync(options.projectRoot))
-        throw new Error('yolo-change-evidence-unavailable');
-    const headSha = git(options.projectRoot, ['rev-parse', 'HEAD']).trim();
-    if (headSha !== options.expectedHeadSha)
-        throw new Error('yolo-change-evidence-stale');
-    let baseSha;
-    let activeStoryLease = false;
-    let executionBranch = null;
-    if (options.storyId && options.epicId) {
-        try {
-            const runtime = readGitLifecycleRuntimeSync(options.projectRoot);
-            const epic = runtime.epics[options.epicId];
-            const lease = epic?.branch_lease;
-            const currentBranch = git(options.projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']).trim();
-            if (epic?.branch_mode === 'epic' && epic.execution_branch === currentBranch) {
-                executionBranch = currentBranch;
-            }
-            if (lease && typeof lease === 'object' && !Array.isArray(lease)) {
-                const item = lease;
-                if (item.ownerStoryId !== options.storyId
-                    || typeof item.expiresAt !== 'string' || Date.parse(item.expiresAt) <= Date.now()
-                    || executionBranch === null) {
-                    throw new Error('yolo-change-evidence-unavailable');
-                }
-                activeStoryLease = true;
-            }
-        }
-        catch {
-            throw new Error('yolo-change-evidence-unavailable');
-        }
-    }
-    if (activeStoryLease) {
-        // Before the root C08 commit, the setup lease owns the current checkout.
-        // Earlier epic commits are not part of this story's implementation diff.
-        // A manually pre-committed change cannot satisfy the staged C08 checkpoint.
-        baseSha = headSha;
-    }
-    else {
-        // Before C01 has acquired a story lease, compare this epic checkout with
-        // its published tip. Historical epic commits are not new story changes,
-        // while local unpushed commits must remain visible to the evidence gate.
-        const remoteLine = executionBranch === null ? '' : git(options.projectRoot, [
-            'ls-remote', '--heads', 'origin', `refs/heads/${executionBranch}`,
-        ]).trim();
-        if (remoteLine) {
-            const match = /^([a-f0-9]{40})\trefs\/heads\/([^\n]+)$/.exec(remoteLine);
-            if (!match || match[2] !== executionBranch
-                || git(options.projectRoot, ['merge-base', 'HEAD', match[1]]).trim() !== match[1]) {
-                throw new Error('yolo-change-evidence-unavailable');
-            }
-            baseSha = match[1];
-        }
-        else {
-            try {
-                baseSha = git(options.projectRoot, ['merge-base', 'HEAD', options.defaultBranch]).trim();
-            }
-            catch {
-                baseSha = git(options.projectRoot, ['merge-base', 'HEAD', `refs/remotes/origin/${options.defaultBranch}`]).trim();
-            }
-        }
-    }
-    const tracked = git(options.projectRoot, ['diff', '--name-only', '-z', baseSha, '--']).split('\0').filter(Boolean);
-    const untracked = git(options.projectRoot, ['ls-files', '--others', '--exclude-standard', '-z']).split('\0').filter(Boolean);
-    const evidence = createYoloChangeEvidence({ baseSha, headSha, changedPaths: [...tracked, ...untracked] });
-    if (git(options.projectRoot, ['rev-parse', 'HEAD']).trim() !== headSha)
-        throw new Error('yolo-change-evidence-stale');
-    return evidence;
-}
+import{execFileSync as E,spawnSync as h}from"node:child_process";import{realpathSync as y}from"node:fs";import{createYoloChangeEvidence as A}from"../../../shared/dist/yolo/change-evidence.js";import{readGitLifecycleRuntimeSync as g}from"../git/git-lifecycle-store.js";class p extends Error{diagnostic;constructor(t){super("yolo-change-evidence-unavailable"),this.name="YoloChangeEvidenceUnavailableError",this.diagnostic=Object.freeze({...t})}}function z(e){return e instanceof p?e.diagnostic:void 0}const c=Object.freeze({repair:"not-attempted",recollectionCount:0});function I(e){return e==="lease-owner-mismatch"||e==="lease-invalid-or-nonsetup"||e==="direct-yolo-writer-active"?"resolve-lease-conflict":e==="base-ref-missing"||e==="base-observation-unavailable"||e==="base-object-missing"||e==="base-not-ancestor"||e==="diff-read-unavailable"?"restore-verified-base-evidence":e==="execution-branch-mismatch"||e.startsWith("direct-yolo-")?"inspect-repository-binding":"none"}function r(e,t,i=c,o=i.repair){throw new p({reason:e,baseSource:t,repair:o,recollectionCount:i.recollectionCount,fallbackAction:I(e),publicSafe:!0})}async function $(e){let t;try{t=g(e.projectRoot,{required:!0})}catch(b){if(b instanceof Error&&b.message==="git-lifecycle-runtime-missing")return c;r("runtime-state-unavailable","none")}const i=t.epics[e.epicId]?.branch_lease;if(i==null)return c;(typeof i!="object"||Array.isArray(i))&&r("lease-invalid-or-nonsetup","active-story-lease",c,"not-eligible"),i.ownerStoryId!==e.storyId&&r("lease-owner-mismatch","active-story-lease",c,"not-eligible"),typeof i.expiresAt!="string"&&r("lease-invalid-or-nonsetup","active-story-lease",c,"not-eligible");const o=Date.parse(i.expiresAt);if(Number.isFinite(o)||r("lease-invalid-or-nonsetup","active-story-lease",c,"not-eligible"),o>Date.now())return c;(typeof i.sessionId!="string"||!/^setup-[a-f0-9]{64}$/.test(i.sessionId)||i.idempotencyKey!==i.sessionId)&&r("lease-invalid-or-nonsetup","active-story-lease",c,"not-eligible");const{prepareDirectYoloSetup:n}=await import("../git/direct-yolo-checkpoint.js"),a=await n({...e,expiredSetupRecovery:{schemaVersion:1,expectedRuntimeRevision:t.revision,expectedLease:Object.freeze({...i})}});return a.ok||r(a.reasonCode,"active-story-lease",c,"not-eligible"),(a.value.storyId!==e.storyId||a.value.epicId!==e.epicId||Date.parse(a.value.leaseExpiresAt)<=Date.now())&&r("lease-invalid-or-nonsetup","active-story-lease",c,"not-eligible"),Object.freeze({repair:"applied",recollectionCount:1})}function f(e,t,i,o,n){try{return E("git",["-C",e,...t],{encoding:"utf8",timeout:3e3,maxBuffer:1024*1024,stdio:["ignore","pipe","ignore"]})}catch{r(i,o,n)}}function x(e,t,i){const o=h("git",["-C",e,"show-ref","--verify","--quiet",t],{timeout:3e3,stdio:"ignore"});if(o.status===0)return!0;if(o.status===1)return!1;r("base-observation-unavailable","none",i)}function C(e,t,i,o){const n=h("git",["-C",e,"cat-file","-e",`${t}^{commit}`],{timeout:3e3,stdio:"ignore"});if(n.status===0)return!0;if(n.status===1||n.status===128)return!1;r("base-observation-unavailable",i,o)}function H(e){const t=e.reconciliation??c;(!/^[A-Za-z0-9][A-Za-z0-9_./-]{0,119}$/.test(e.defaultBranch)||e.defaultBranch.includes(".."))&&r("invalid-default-branch","none",t);let i;try{i=f(e.projectRoot,["rev-parse","--show-toplevel"],"repository-root-mismatch","none",t).trim(),y(i)!==y(e.projectRoot)&&r("repository-root-mismatch","none",t)}catch(l){if(l instanceof p)throw l;r("repository-root-mismatch","none",t)}const o=f(e.projectRoot,["rev-parse","HEAD"],"base-observation-unavailable","none",t).trim();if(o!==e.expectedHeadSha)throw new Error("yolo-change-evidence-stale");let n,a="none",b=!1,m=null;if(e.storyId&&e.epicId){let l;try{l=g(e.projectRoot)}catch{r("runtime-state-unavailable","none",t)}const s=l.epics[e.epicId],u=s?.branch_lease,d=f(e.projectRoot,["symbolic-ref","--quiet","--short","HEAD"],"execution-branch-mismatch","none",t).trim();if(s?.branch_mode==="epic"&&s.execution_branch===d&&(m=d),u&&typeof u=="object"&&!Array.isArray(u)){const v=u;v.ownerStoryId!==e.storyId&&r("lease-owner-mismatch","active-story-lease",t,"not-eligible"),(typeof v.expiresAt!="string"||!Number.isFinite(Date.parse(v.expiresAt))||Date.parse(v.expiresAt)<=Date.now())&&r("lease-invalid-or-nonsetup","active-story-lease",t,"not-eligible"),m===null&&r("execution-branch-mismatch","active-story-lease",t,"not-eligible"),b=!0}}if(b)n=o,a="active-story-lease";else{const l=m===null?"":f(e.projectRoot,["ls-remote","--heads","origin",`refs/heads/${m}`],"base-observation-unavailable","published-execution-branch",t).trim();if(l){a="published-execution-branch";const s=/^([a-f0-9]{40})\trefs\/heads\/([^\n]+)$/.exec(l);(!s||s[2]!==m)&&r("base-observation-unavailable",a,t),C(e.projectRoot,s[1],a,t)||r("base-object-missing",a,t),h("git",["-C",e.projectRoot,"merge-base","--is-ancestor",s[1],"HEAD"],{timeout:3e3,stdio:"ignore"}).status!==0&&r("base-not-ancestor",a,t),n=s[1]}else{const s=`refs/heads/${e.defaultBranch}`,u=`refs/remotes/origin/${e.defaultBranch}`,d=x(e.projectRoot,s,t)?s:x(e.projectRoot,u,t)?u:null;d||r("base-ref-missing","none",t),a=d===s?"local-default-branch":"remote-default-branch",n=f(e.projectRoot,["merge-base","HEAD",d],"base-not-ancestor",a,t).trim()}}const R=f(e.projectRoot,["diff","--name-only","-z",n,"--"],"diff-read-unavailable",a,t).split("\0").filter(Boolean),j=f(e.projectRoot,["ls-files","--others","--exclude-standard","-z"],"diff-read-unavailable",a,t).split("\0").filter(Boolean),w=A({baseSha:n,headSha:o,changedPaths:[...R,...j]});if(f(e.projectRoot,["rev-parse","HEAD"],"base-observation-unavailable",a,t).trim()!==o)throw new Error("yolo-change-evidence-stale");return w}export{p as YoloChangeEvidenceUnavailableError,H as collectYoloChangeEvidence,$ as reconcileYoloChangeEvidenceLease,z as yoloChangeEvidenceDiagnostic};

package/packages/client/dist/yolo/invoke-envelope-capability.js

@@ -1,62 +1 @@
-import { YOLO_INVOKE_ENVELOPE_CAPABILITY } from '../../../shared/dist/yolo/spec-envelope.js';
-const MAX_CAPABILITY_RESPONSE_BYTES = 16 * 1024;
-const PUBLIC_VERSION = /^[0-9]{1,6}\.[0-9]{1,6}\.[0-9]{1,6}(?:-[A-Za-z0-9.-]{1,40})?$/;
-function result(supported, reason, serverVersion) {
-    return Object.freeze({
-        supported,
-        capability: YOLO_INVOKE_ENVELOPE_CAPABILITY,
-        reason,
-        ...(serverVersion && PUBLIC_VERSION.test(serverVersion) ? { serverVersion } : {}),
-        publicSafe: true,
-    });
-}
-/**
- * Non-mutating, fail-closed compatibility probe for targeted YOLO requests.
- * Older strict servers must be rejected before local release-gate execution.
- */
-export async function probeYoloInvokeEnvelopeCapability(serverUrl, fetcher = globalThis.fetch) {
-    if (!fetcher)
-        return result(false, 'fetch-unavailable');
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 5_000);
-    timeout.unref?.();
-    try {
-        const response = await fetcher(`${serverUrl.replace(/\/+$/, '')}/api/v1/health`, {
-            method: 'GET',
-            headers: { accept: 'application/json' },
-            signal: controller.signal,
-        });
-        if (!response.ok)
-            return result(false, 'http-rejected');
-        const raw = await response.text();
-        if (Buffer.byteLength(raw, 'utf8') > MAX_CAPABILITY_RESPONSE_BYTES) {
-            return result(false, 'response-too-large');
-        }
-        let parsed;
-        try {
-            parsed = JSON.parse(raw);
-        }
-        catch {
-            return result(false, 'response-invalid');
-        }
-        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-            return result(false, 'response-invalid');
-        }
-        const record = parsed;
-        const capabilities = record.capabilities;
-        const serverVersion = typeof record.version === 'string' ? record.version : undefined;
-        if (!Array.isArray(capabilities)
-            || capabilities.some((value) => typeof value !== 'string' || value.length > 80)) {
-            return result(false, 'response-invalid', serverVersion);
-        }
-        return capabilities.includes(YOLO_INVOKE_ENVELOPE_CAPABILITY)
-            ? result(true, 'supported', serverVersion)
-            : result(false, 'capability-missing', serverVersion);
-    }
-    catch {
-        return result(false, 'request-failed');
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
+import{YOLO_INVOKE_ENVELOPE_CAPABILITY as u}from"../../../shared/dist/yolo/spec-envelope.js";const y=16*1024,b=/^[0-9]{1,6}\.[0-9]{1,6}\.[0-9]{1,6}(?:-[A-Za-z0-9.-]{1,40})?$/;function e(n,a,t){return Object.freeze({supported:n,capability:u,reason:a,...t&&b.test(t)?{serverVersion:t}:{},publicSafe:!0})}async function h(n,a=globalThis.fetch){if(!a)return e(!1,"fetch-unavailable");const t=new AbortController,l=setTimeout(()=>t.abort(),5e3);l.unref?.();try{const c=await a(`${n.replace(/\/+$/,"")}/api/v1/health`,{method:"GET",headers:{accept:"application/json"},signal:t.signal});if(!c.ok)return e(!1,"http-rejected");const f=await c.text();if(Buffer.byteLength(f,"utf8")>y)return e(!1,"response-too-large");let r;try{r=JSON.parse(f)}catch{return e(!1,"response-invalid")}if(!r||typeof r!="object"||Array.isArray(r))return e(!1,"response-invalid");const i=r,s=i.capabilities,o=typeof i.version=="string"?i.version:void 0;return!Array.isArray(s)||s.some(p=>typeof p!="string"||p.length>80)?e(!1,"response-invalid",o):s.includes(u)?e(!0,"supported",o):e(!1,"capability-missing",o)}catch{return e(!1,"request-failed")}finally{clearTimeout(l)}}export{h as probeYoloInvokeEnvelopeCapability};

package/packages/client/dist/yolo/spec-envelope-collector.js

@@ -1,184 +1,5 @@
-import { execFileSync } from 'node:child_process';
-import { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';
-import { join, sep } from 'node:path';
-import { createYoloSpecEnvelopeV1, YOLO_SPEC_MAX_ARTIFACTS, } from '../../../shared/dist/yolo/spec-envelope.js';
-import { inspectFrontmatterContext } from '../../../shared/dist/frontmatter-context-contract.js';
-const TEMPLATE_PATHS = [
-    'core/templates/specs/feature-spec-template.md',
-    'core/templates/specs/architecture-spec-template.md',
-    'core/templates/specs/contract-spec-template.md',
-    'core/templates/specs/story-spec-template.md',
-    'core/templates/specs/traceability-matrix-template.md',
-];
-const REFERENCE_PATH = /(?:^|[\s([`'";])((?:docs\/(?:stories|epics|specs|architecture|examples)\/|core\/templates\/specs\/)[A-Za-z0-9_./-]+\.(?:md|mdx|feature))(?:$|[\s)\]`'",;])/gm;
-const STORY_ID = /^[A-Za-z][A-Za-z0-9_-]*(?:\.[A-Za-z0-9_-]+)+$/;
-// Resource-safety stop only. Ordinary envelope sizing belongs to the existing
-// invoke request guardrail, not to a smaller 64/128 KiB document policy.
-const YOLO_SPEC_LOCAL_SOURCE_SAFETY_LIMIT_BYTES = 16 * 1024 * 1024;
-/** Resolve only an explicit story target. Inline YOLO text intentionally has no match. */
-export function extractTargetedYoloStoryId(args) {
-    const pathMatches = [...args.matchAll(/(?:^|\s)@?docs\/stories\/([A-Za-z][A-Za-z0-9_-]*(?:\.[A-Za-z0-9_-]+)+)\.story\.md(?=\s|$)/g)]
-        .map((match) => match[1]);
-    const tokenMatches = args.trim().split(/\s+/).slice(1)
-        .map((token) => token.replace(/^@/, ''))
-        .filter((token) => STORY_ID.test(token));
-    const matches = [...new Set([...pathMatches, ...tokenMatches])];
-    return matches.length === 1 ? matches[0] : null;
-}
-function artifactKind(path) {
-    if (path.startsWith('core/templates/'))
-        return 'template';
-    if (path.startsWith('docs/epics/'))
-        return 'epic';
-    if (path.startsWith('docs/stories/') && path.endsWith('.story.md'))
-        return 'story';
-    if (path.endsWith('.rtm.md'))
-        return 'traceability';
-    if (path.toLowerCase().includes('adr'))
-        return 'adr';
-    if (path.toLowerCase().includes('contract'))
-        return 'contract';
-    if (path.toLowerCase().includes('nfr'))
-        return 'nfr';
-    if (path.endsWith('.feature'))
-        return 'bdd';
-    if (path.toLowerCase().includes('traceability'))
-        return 'traceability';
-    if (path.startsWith('docs/examples/'))
-        return 'example';
-    return 'spec';
-}
-function selectedReferencePaths(story) {
-    return [...new Set([...story.matchAll(REFERENCE_PATH)].map((match) => match[1]).filter((path) => Boolean(path)))].sort();
-}
-function safeSource(root, path) {
-    const rootReal = realpathSync(root);
-    let fileReal;
-    try {
-        fileReal = realpathSync(join(rootReal, path));
-    }
-    catch {
-        throw new Error('yolo-spec-envelope-required');
-    }
-    if (!fileReal.startsWith(`${rootReal}${sep}`))
-        throw new Error('yolo-spec-envelope-path-out-of-scope');
-    const sourceStat = statSync(fileReal);
-    if (!sourceStat.isFile())
-        throw new Error('yolo-spec-envelope-unsafe');
-    if (sourceStat.size > YOLO_SPEC_LOCAL_SOURCE_SAFETY_LIMIT_BYTES)
-        throw new Error('yolo-spec-envelope-too-large');
-    return readFileSync(fileReal, 'utf8');
-}
-function publicMarkdown(source, kind) {
-    const context = kind === 'story' ? 'story-target' : 'epic-target';
-    const inspected = inspectFrontmatterContext(source, { context, explicitlySelected: true });
-    if (inspected.status === 'malformed' || inspected.status === 'oversized')
-        throw new Error('yolo-spec-envelope-unsafe');
-    if (inspected.status === 'absent')
-        return source;
-    const match = source.match(/^---\r?\n[\s\S]*?\r?\n---\r?\n/);
-    if (!match)
-        throw new Error('yolo-spec-envelope-unsafe');
-    const fields = Object.entries(inspected.metadata).map(([key, value]) => `${key}: ${JSON.stringify(value)}`);
-    return `---\n${fields.join('\n')}\n---\n${source.slice(match[0].length)}`;
-}
-function readHeadSha(root) {
-    try {
-        return execFileSync('git', ['-C', root, 'rev-parse', 'HEAD'], {
-            encoding: 'utf8', timeout: 2_000, stdio: ['ignore', 'pipe', 'ignore'],
-        }).trim();
-    }
-    catch {
-        throw new Error('yolo-spec-envelope-stale');
-    }
-}
-export function collectYoloSpecEnvelope(options) {
-    const targetPath = `docs/stories/${options.storyId}.story.md`;
-    const epicPath = `docs/epics/epic-${options.epicId}.md`;
-    const initialHead = options.headSha ?? readHeadSha(options.projectRoot);
-    const story = publicMarkdown(safeSource(options.projectRoot, targetPath), 'story');
-    const epic = publicMarkdown(safeSource(options.projectRoot, epicPath), 'epic');
-    const artifacts = [
-        { kind: 'story', path: targetPath, content: story },
-        { kind: 'epic', path: epicPath, content: epic },
-    ];
-    const coreStoryReferences = new Set([
-        `docs/stories/${options.storyId}.spec.md`,
-        `docs/stories/${options.storyId}.tasks.md`,
-        `docs/stories/${options.storyId}.rtm.md`,
-    ]);
-    // Older stories may not link to their own SDD files. Bind physically present
-    // siblings to the same HEAD/content checks as explicitly referenced files.
-    const selectedReferences = [...new Set([
-            ...selectedReferencePaths(story),
-            ...[...coreStoryReferences].filter((path) => existsSync(join(options.projectRoot, path))),
-        ])].sort();
-    const prioritizedReferences = [
-        ...selectedReferences.filter((path) => coreStoryReferences.has(path)),
-        ...selectedReferences.filter((path) => !coreStoryReferences.has(path)),
-    ];
-    let omittedReferences = 0;
-    for (const path of prioritizedReferences) {
-        if (path === targetPath || path === epicPath || !existsSync(join(options.projectRoot, path)))
-            continue;
-        // A foreign story/epic is a target conflict, never optional context. The
-        // byte budget must not turn a prior target-mismatch denial into admission.
-        if ((path.startsWith('docs/stories/') && path.endsWith('.story.md'))
-            || path.startsWith('docs/epics/'))
-            throw new Error('yolo-spec-envelope-target-mismatch');
-        const content = safeSource(options.projectRoot, path);
-        if (artifacts.length >= YOLO_SPEC_MAX_ARTIFACTS) {
-            if (coreStoryReferences.has(path))
-                throw new Error('yolo-spec-envelope-too-large');
-            omittedReferences += 1;
-            continue;
-        }
-        artifacts.push({ kind: artifactKind(path), path, content });
-    }
-    // Templates and non-core references are supporting context. Preserve the
-    // story's own SDD artifacts and signal omissions without exposing paths.
-    if (omittedReferences)
-        options.onOmittedReferences?.(omittedReferences);
-    for (const path of TEMPLATE_PATHS) {
-        if (path === targetPath || path === epicPath || selectedReferences.includes(path)
-            || !existsSync(join(options.projectRoot, path)))
-            continue;
-        const content = safeSource(options.projectRoot, path);
-        if (artifacts.length >= YOLO_SPEC_MAX_ARTIFACTS)
-            continue;
-        artifacts.push({ kind: artifactKind(path), path, content });
-    }
-    const envelope = createYoloSpecEnvelopeV1({
-        storyId: options.storyId,
-        epicId: options.epicId,
-        targetPath,
-        inputSha256: options.inputSha256,
-        headSha: initialHead,
-        collectedAt: options.collectedAt ?? new Date().toISOString(),
-        artifacts,
-    });
-    const finalHead = options.headSha ?? readHeadSha(options.projectRoot);
-    if (initialHead !== finalHead
-        || publicMarkdown(safeSource(options.projectRoot, targetPath), 'story') !== story
-        || publicMarkdown(safeSource(options.projectRoot, epicPath), 'epic') !== epic
-        || artifacts.some((artifact) => artifact.kind !== 'story' && artifact.kind !== 'epic'
-            && safeSource(options.projectRoot, artifact.path) !== artifact.content)) {
-        throw new Error('yolo-spec-envelope-stale');
-    }
-    return envelope;
-}
-/**
- * Reissue a precollected physical snapshot with a fresh bounded transport time.
- * The caller still performs the final disk/HEAD collection and digest comparison.
- */
-export function refreshPrecollectedYoloSpecEnvelope(envelope, collectedAt = new Date().toISOString()) {
-    return createYoloSpecEnvelopeV1({
-        storyId: envelope.storyId,
-        epicId: envelope.epicId,
-        targetPath: envelope.targetPath,
-        inputSha256: envelope.inputSha256,
-        headSha: envelope.sourceRevision.headSha,
-        collectedAt,
-        artifacts: envelope.artifacts.map(({ kind, path, content }) => ({ kind, path, content })),
-    });
-}
+import{execFileSync as _}from"node:child_process";import{existsSync as u,readFileSync as j,realpathSync as y,statSync as x}from"node:fs";import{join as l,sep as $}from"node:path";import{createYoloSpecEnvelopeV1 as S,YOLO_SPEC_MAX_ARTIFACTS as w}from"../../../shared/dist/yolo/spec-envelope.js";import{inspectFrontmatterContext as v}from"../../../shared/dist/frontmatter-context-contract.js";const C=["core/templates/specs/feature-spec-template.md","core/templates/specs/architecture-spec-template.md","core/templates/specs/contract-spec-template.md","core/templates/specs/story-spec-template.md","core/templates/specs/traceability-matrix-template.md"],O=/(?:^|[\s([`'";])((?:docs\/(?:stories|epics|specs|architecture|examples)\/|core\/templates\/specs\/)[A-Za-z0-9_./-]+\.(?:md|mdx|feature))(?:$|[\s)\]`'",;])/gm,P=/^[A-Za-z][A-Za-z0-9_-]*(?:\.[A-Za-z0-9_-]+)+$/,T=16*1024*1024;function F(e){const r=[...e.matchAll(/(?:^|\s)@?docs\/stories\/([A-Za-z][A-Za-z0-9_-]*(?:\.[A-Za-z0-9_-]+)+)\.story\.md(?=\s|$)/g)].map(c=>c[1]),s=e.trim().split(/\s+/).slice(1).map(c=>c.replace(/^@/,"")).filter(c=>P.test(c)),o=[...new Set([...r,...s])];return o.length===1?o[0]:null}function R(e){return e.startsWith("core/templates/")?"template":e.startsWith("docs/epics/")?"epic":e.startsWith("docs/stories/")&&e.endsWith(".story.md")?"story":e.endsWith(".rtm.md")?"traceability":e.toLowerCase().includes("adr")?"adr":e.toLowerCase().includes("contract")?"contract":e.toLowerCase().includes("nfr")?"nfr":e.endsWith(".feature")?"bdd":e.toLowerCase().includes("traceability")?"traceability":e.startsWith("docs/examples/")?"example":"spec"}function W(e){return[...new Set([...e.matchAll(O)].map(r=>r[1]).filter(r=>!!r))].sort()}function a(e,r){const s=y(e);let o;try{o=y(l(s,r))}catch{throw new Error("yolo-spec-envelope-required")}if(!o.startsWith(`${s}${$}`))throw new Error("yolo-spec-envelope-path-out-of-scope");const c=x(o);if(!c.isFile())throw new Error("yolo-spec-envelope-unsafe");if(c.size>T)throw new Error("yolo-spec-envelope-too-large");return j(o,"utf8")}function d(e,r){const o=v(e,{context:r==="story"?"story-target":"epic-target",explicitlySelected:!0});if(o.status==="malformed"||o.status==="oversized")throw new Error("yolo-spec-envelope-unsafe");if(o.status==="absent")return e;const c=e.match(/^---\r?\n[\s\S]*?\r?\n---\r?\n/);if(!c)throw new Error("yolo-spec-envelope-unsafe");return`---
+${Object.entries(o.metadata).map(([n,i])=>`${n}: ${JSON.stringify(i)}`).join(`
+`)}
+---
+${e.slice(c[0].length)}`}function E(e){try{return _("git",["-C",e,"rev-parse","HEAD"],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()}catch{throw new Error("yolo-spec-envelope-stale")}}function Z(e){const r=`docs/stories/${e.storyId}.story.md`,s=`docs/epics/epic-${e.epicId}.md`,o=e.headSha??E(e.projectRoot),c=d(a(e.projectRoot,r),"story"),p=d(a(e.projectRoot,s),"epic"),n=[{kind:"story",path:r,content:c},{kind:"epic",path:s,content:p}],i=new Set([`docs/stories/${e.storyId}.spec.md`,`docs/stories/${e.storyId}.tasks.md`,`docs/stories/${e.storyId}.rtm.md`]),f=[...new Set([...W(c),...[...i].filter(t=>u(l(e.projectRoot,t)))])].sort(),g=[...f.filter(t=>i.has(t)),...f.filter(t=>!i.has(t))];let m=0;for(const t of g){if(t===r||t===s||!u(l(e.projectRoot,t)))continue;if(t.startsWith("docs/stories/")&&t.endsWith(".story.md")||t.startsWith("docs/epics/"))throw new Error("yolo-spec-envelope-target-mismatch");const h=a(e.projectRoot,t);if(n.length>=w){if(i.has(t))throw new Error("yolo-spec-envelope-too-large");m+=1;continue}n.push({kind:R(t),path:t,content:h})}m&&e.onOmittedReferences?.(m);for(const t of C){if(t===r||t===s||f.includes(t)||!u(l(e.projectRoot,t)))continue;const h=a(e.projectRoot,t);n.length>=w||n.push({kind:R(t),path:t,content:h})}const A=S({storyId:e.storyId,epicId:e.epicId,targetPath:r,inputSha256:e.inputSha256,headSha:o,collectedAt:e.collectedAt??new Date().toISOString(),artifacts:n}),I=e.headSha??E(e.projectRoot);if(o!==I||d(a(e.projectRoot,r),"story")!==c||d(a(e.projectRoot,s),"epic")!==p||n.some(t=>t.kind!=="story"&&t.kind!=="epic"&&a(e.projectRoot,t.path)!==t.content))throw new Error("yolo-spec-envelope-stale");return A}function H(e,r=new Date().toISOString()){return S({storyId:e.storyId,epicId:e.epicId,targetPath:e.targetPath,inputSha256:e.inputSha256,headSha:e.sourceRevision.headSha,collectedAt:r,artifacts:e.artifacts.map(({kind:s,path:o,content:c})=>({kind:s,path:o,content:c}))})}export{Z as collectYoloSpecEnvelope,F as extractTargetedYoloStoryId,H as refreshPrecollectedYoloSpecEnvelope};