@haaaiawd/second-nature 0.1.27 → 0.1.30

package/runtime/shared/types/v7-entities.d.ts

@@ -0,0 +1,206 @@
+/**
+ * v7 全量共享实体类型 (v7 Shared Entity Types)
+ *
+ * Core logic: Centralizes all cross-system entity declarations introduced in
+ * Second Nature v7, ensuring type consistency across state-memory,
+ * control-plane, body-tool, dream-quiet, guidance-voice, connector, and
+ * observability-health systems.
+ *
+ * Design authority:
+ * - `02_ARCHITECTURE_OVERVIEW.md` §2 (System Inventory) — entity list
+ * - `05A_TASKS.md` T-SMS.F.1 — contract requirements
+ * - ADR-002/003/007/008 — entity semantics
+ *
+ * Dependencies:
+ * - `SourceRef` from `./source-ref.js`
+ * - `AgentGoal` from `./goal.js`
+ *
+ * Boundary:
+ * - This file defines types only; no runtime logic or business rules.
+ * - Sensitive fields (credential, raw private content, raw prompt,
+ *   encryption key, session token) are explicitly excluded from
+ *   RestoreSnapshot via type-level whitelist.
+ * - RuntimeSecretAnchor never stores key plaintext (ADR-007).
+ *
+ * Test coverage: tests/unit/shared/v7-entities.test.ts
+ */
+import type { SourceRef } from "./source-ref.js";
+import type { AgentGoal } from "./goal.js";
+export interface PlatformHandle {
+    platformId: string;
+    handle: string;
+    url?: string;
+    verifiedAt?: string;
+}
+export interface IdentityProfile {
+    profileId: string;
+    canonicalName: string;
+    canonicalAvatar?: string;
+    canonicalBio?: string;
+    platformHandles: PlatformHandle[];
+    updatedAt: string;
+}
+export interface RecentInteractionSnapshot {
+    interactionId: string;
+    platformId: string;
+    channelId?: string;
+    summary: string;
+    contentRef?: string;
+    isReply: boolean;
+    repliedAt?: string;
+    createdAt: string;
+}
+export type ToolExperienceOutcome = "success" | "failure" | "timeout" | "cancelled" | "probe_policy_denied";
+export type ToolExperienceTriggerSource = "heartbeat" | "manual_run" | "probe" | "idle_curiosity";
+export interface ToolExperience {
+    experienceId: string;
+    connectorId: string;
+    capabilityId: string;
+    outcome: ToolExperienceOutcome;
+    failureClass?: string;
+    latencyMs: number;
+    evidenceQuality: number;
+    sourceRefs: SourceRef;
+    triggerSource: ToolExperienceTriggerSource;
+    createdAt: string;
+}
+export type ProbeActualStatus = "available" | "degraded" | "unavailable";
+export interface CapabilityProbeResult {
+    probeResultId: string;
+    capabilityId: string;
+    connectorId: string;
+    actualStatus: ProbeActualStatus;
+    httpStatus?: number;
+    sampleResponseRef?: string;
+    probeConfigRef: string;
+    createdAt: string;
+}
+export type RestorableEntityKind = "identity_profile" | "agent_goal" | "tool_experience" | "daily_diary" | "dream_output" | "narrative_timeline";
+export type SensitiveExcludedKind = "credential" | "raw_private_message" | "raw_prompt" | "encryption_key" | "session_token";
+export interface RestoreSnapshot {
+    snapshotId: string;
+    entityWhitelist: RestorableEntityKind[];
+    excludedSensitiveKinds: SensitiveExcludedKind[];
+    capturedAt: string;
+    payload: Record<string, unknown>;
+}
+export type SecretAnchorHealth = "ok" | "missing" | "wrong_key" | "rotation_needed";
+export interface RuntimeSecretAnchor {
+    anchorId: string;
+    locationRef: string;
+    health: SecretAnchorHealth;
+    rotationPolicyRef?: string;
+    updatedAt: string;
+}
+export type QuietClaimKind = "observation" | "fact" | "pattern";
+export interface QuietClaim {
+    claimId: string;
+    kind: QuietClaimKind;
+    text: string;
+    sourceRefs: SourceRef;
+    confidence: number;
+    createdAt: string;
+}
+export interface DailyDiary {
+    diaryId: string;
+    day: string;
+    observedToday: string[];
+    notableSignals: string[];
+    tomorrowDirection: string;
+    sourceRefs: SourceRef;
+    createdAt: string;
+}
+export type DreamOutputStatus = "candidate" | "accepted" | "archived" | "partial";
+export interface DreamOutput {
+    outputId: string;
+    runId: string;
+    status: DreamOutputStatus;
+    canonicalEntries: unknown[];
+    insights: unknown[];
+    narrativeUpdate?: Record<string, unknown>;
+    relationshipUpdate?: Record<string, unknown>;
+    validation: {
+        schemaValid: boolean;
+        sourceGrounded: boolean;
+        sensitivityClean: boolean;
+        unsupportedClaims: string[];
+        errors: string[];
+        checkedAt: string;
+    };
+    createdAt?: string;
+}
+export type HealthDimensionStatus = "ok" | "degraded" | "blocked";
+export interface SelfHealthSnapshot {
+    snapshotId: string;
+    dimensions: Record<string, {
+        status: HealthDimensionStatus;
+        reason?: string;
+    }>;
+    checkedAt: string;
+}
+export interface HeartbeatDigest {
+    digestId: string;
+    day: string;
+    connectorSummary: Array<{
+        platformId: string;
+        status: string;
+        attemptCount: number;
+    }>;
+    goalSummary: Array<{
+        kind: string;
+        activeCount: number;
+    }>;
+    quietCount: number;
+    dreamCount: number;
+    breakerSummary: Array<{
+        connectorId: string;
+        state: string;
+    }>;
+    healthStatus: string;
+    createdAt: string;
+}
+export interface NarrativeTimelineEntry {
+    timelineId: string;
+    entryType: string;
+    subjectId: string;
+    delta: Record<string, unknown>;
+    previousHash: string;
+    currentHash: string;
+    createdAt: string;
+}
+export type AffordanceStatus = "safe" | "exploratory" | "needs_auth" | "painful" | "unavailable";
+export interface AffordanceItem {
+    platformId: string;
+    capabilityId: string;
+    intent: string;
+    status: AffordanceStatus;
+    reason?: string;
+    lastProbedAt?: string;
+}
+export interface AffordanceMap {
+    [platformId: string]: AffordanceItem[];
+}
+export interface AffordanceContextScope {
+    platformIds?: string[];
+    goalKind?: string;
+    allowedStatuses?: AffordanceStatus[];
+}
+export type EmbodiedContextSliceStatus = "loaded" | "degraded" | "blocked";
+export interface EmbodiedContextSlice<T> {
+    status: EmbodiedContextSliceStatus;
+    data: T;
+    reason?: string;
+}
+export interface EmbodiedContext {
+    identity: EmbodiedContextSlice<IdentityProfile>;
+    goals: EmbodiedContextSlice<AgentGoal[]>;
+    recentInteractions: EmbodiedContextSlice<RecentInteractionSnapshot[]>;
+    toolExperience: EmbodiedContextSlice<ToolExperience[]>;
+    acceptedDream: EmbodiedContextSlice<DreamOutput[]>;
+    affordanceMap?: EmbodiedContextSlice<AffordanceMap>;
+    /**
+     * selfHealth is populated by observability-health-system.
+     */
+    selfHealth?: EmbodiedContextSlice<SelfHealthSnapshot>;
+    assembledAt: string;
+}

package/runtime/shared/types/v7-entities.js

@@ -0,0 +1,27 @@
+/**
+ * v7 全量共享实体类型 (v7 Shared Entity Types)
+ *
+ * Core logic: Centralizes all cross-system entity declarations introduced in
+ * Second Nature v7, ensuring type consistency across state-memory,
+ * control-plane, body-tool, dream-quiet, guidance-voice, connector, and
+ * observability-health systems.
+ *
+ * Design authority:
+ * - `02_ARCHITECTURE_OVERVIEW.md` §2 (System Inventory) — entity list
+ * - `05A_TASKS.md` T-SMS.F.1 — contract requirements
+ * - ADR-002/003/007/008 — entity semantics
+ *
+ * Dependencies:
+ * - `SourceRef` from `./source-ref.js`
+ * - `AgentGoal` from `./goal.js`
+ *
+ * Boundary:
+ * - This file defines types only; no runtime logic or business rules.
+ * - Sensitive fields (credential, raw private content, raw prompt,
+ *   encryption key, session token) are explicitly excluded from
+ *   RestoreSnapshot via type-level whitelist.
+ * - RuntimeSecretAnchor never stores key plaintext (ADR-007).
+ *
+ * Test coverage: tests/unit/shared/v7-entities.test.ts
+ */
+export {};

package/runtime/storage/db/index.js

@@ -4,6 +4,8 @@ import path from "node:path";
 import fs from "node:fs";
 import { fileURLToPath } from "node:url";
 import * as schema from "./schema/index.js";
+import { runMigrations } from "./migration-runner.js";
+import { ALL_MIGRATIONS } from "./migrations/index.js";
 // Pre-initialize sql.js WASM at module load time
 const SQL = await initSqlJs();
 const STATE_SCHEMA_SQL = `
@@ -190,6 +192,7 @@ function resolveDbPath(filename) {
 function bootstrapStateSchema(sqlite) {
     sqlite.exec(STATE_SCHEMA_SQL);
     applyStateSchemaMigrations(sqlite);
+    runMigrations(sqlite, ALL_MIGRATIONS);
 }
 function applyStateSchemaMigrations(sqlite) {
     const migrations = [

package/runtime/storage/db/migration-runner.d.ts

@@ -0,0 +1,30 @@
+/**
+ * SQLite schema migration runner (DR-018).
+ *
+ * Core logic:
+ * - Maintains a `_meta` table with `schema_version` for version tracking.
+ * - Executes pending migrations in ascending order within transactions.
+ * - On failure, marks `schema_migration_failed` in `_meta` without crashing;
+ *   existing data is preserved (transaction rollback).
+ * - New columns use DEFAULT NULL to preserve backward compatibility.
+ *
+ * Dependencies: sql.js Database (from `sql.js` package).
+ * Boundary: Called once during DB initialization; does not own the DB lifecycle.
+ * Test coverage: tests/unit/storage/migration-runner.test.ts,
+ *                tests/integration/storage/schema-migration.test.ts
+ */
+import type { Database } from "sql.js";
+export interface Migration {
+    version: number;
+    label: string;
+    sql: string;
+}
+export interface MigrationResult {
+    schemaVersion: number;
+    applied: number[];
+    failed: boolean;
+    failedVersion?: number;
+    failedError?: string;
+}
+export declare function isMigrationFailed(sqlite: Database): boolean;
+export declare function runMigrations(sqlite: Database, migrations: readonly Migration[]): MigrationResult;

package/runtime/storage/db/migration-runner.js

@@ -0,0 +1,93 @@
+/**
+ * SQLite schema migration runner (DR-018).
+ *
+ * Core logic:
+ * - Maintains a `_meta` table with `schema_version` for version tracking.
+ * - Executes pending migrations in ascending order within transactions.
+ * - On failure, marks `schema_migration_failed` in `_meta` without crashing;
+ *   existing data is preserved (transaction rollback).
+ * - New columns use DEFAULT NULL to preserve backward compatibility.
+ *
+ * Dependencies: sql.js Database (from `sql.js` package).
+ * Boundary: Called once during DB initialization; does not own the DB lifecycle.
+ * Test coverage: tests/unit/storage/migration-runner.test.ts,
+ *                tests/integration/storage/schema-migration.test.ts
+ */
+const META_TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS _meta (
+    key TEXT PRIMARY KEY,
+    value TEXT NOT NULL
+  );
+`;
+function ensureMetaTable(sqlite) {
+    sqlite.exec(META_TABLE_SQL);
+    const rows = sqlite.exec("SELECT value FROM _meta WHERE key = 'schema_version'");
+    if (rows.length === 0 || rows[0].values.length === 0) {
+        sqlite.exec("INSERT OR IGNORE INTO _meta (key, value) VALUES ('schema_version', '0')");
+    }
+}
+function getSchemaVersion(sqlite) {
+    const rows = sqlite.exec("SELECT value FROM _meta WHERE key = 'schema_version'");
+    if (rows.length === 0 || rows[0].values.length === 0) {
+        return 0;
+    }
+    return parseInt(rows[0].values[0][0], 10);
+}
+function setSchemaVersion(sqlite, version) {
+    sqlite.exec(`UPDATE _meta SET value = '${version}' WHERE key = 'schema_version'`);
+}
+function markMigrationFailed(sqlite, version, error) {
+    sqlite.exec("INSERT OR REPLACE INTO _meta (key, value) VALUES ('schema_migration_failed', '1')");
+    const safeError = error.replace(/'/g, "''");
+    sqlite.exec(`INSERT OR REPLACE INTO _meta (key, value) VALUES ('schema_migration_failed_version', '${version}')`);
+    sqlite.exec(`INSERT OR REPLACE INTO _meta (key, value) VALUES ('schema_migration_failed_error', '${safeError}')`);
+}
+export function isMigrationFailed(sqlite) {
+    const rows = sqlite.exec("SELECT value FROM _meta WHERE key = 'schema_migration_failed'");
+    return (rows.length > 0 &&
+        rows[0].values.length > 0 &&
+        rows[0].values[0][0] === "1");
+}
+export function runMigrations(sqlite, migrations) {
+    ensureMetaTable(sqlite);
+    const currentVersion = getSchemaVersion(sqlite);
+    const pending = migrations
+        .filter((m) => m.version > currentVersion)
+        .sort((a, b) => a.version - b.version);
+    const applied = [];
+    let failed = false;
+    let failedVersion;
+    let failedError;
+    for (const migration of pending) {
+        try {
+            sqlite.exec("BEGIN EXCLUSIVE");
+            sqlite.exec(migration.sql);
+            setSchemaVersion(sqlite, migration.version);
+            sqlite.exec("COMMIT");
+            applied.push(migration.version);
+        }
+        catch (err) {
+            try {
+                sqlite.exec("ROLLBACK");
+            }
+            catch {
+                // rollback may fail if no transaction active
+            }
+            const message = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`schema_migration_failed: v${migration.version} (${migration.label}) — ${message}\n`);
+            markMigrationFailed(sqlite, migration.version, message);
+            failed = true;
+            failedVersion = migration.version;
+            failedError = message;
+            break;
+        }
+    }
+    const finalVersion = getSchemaVersion(sqlite);
+    return {
+        schemaVersion: finalVersion,
+        applied,
+        failed,
+        failedVersion,
+        failedError,
+    };
+}

package/runtime/storage/db/migrations/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Migration registry — all migrations in version order.
+ */
+import type { Migration } from "../migration-runner.js";
+export declare const ALL_MIGRATIONS: readonly Migration[];

package/runtime/storage/db/migrations/index.js

@@ -0,0 +1,13 @@
+/**
+ * Migration registry — all migrations in version order.
+ */
+import { V7_001_FOUNDATION } from "./v7-001-foundation.js";
+import { V7_002_EFFECT_COMMIT_LEDGER } from "./v7-002-effect-commit-ledger.js";
+import { V7_003_CIRCUIT_BREAKER } from "./v7-003-circuit-breaker.js";
+import { V7_004_BEHAVIOR_PROMOTION } from "./v7-004-behavior-promotion.js";
+export const ALL_MIGRATIONS = [
+    V7_001_FOUNDATION,
+    V7_002_EFFECT_COMMIT_LEDGER,
+    V7_003_CIRCUIT_BREAKER,
+    V7_004_BEHAVIOR_PROMOTION,
+];

package/runtime/storage/db/migrations/v7-001-foundation.d.ts

@@ -0,0 +1,13 @@
+/**
+ * v7-001 Foundation migration — adds v7 entity tables and _meta tracking.
+ *
+ * Tables added:
+ * - identity_profile, tool_experience, daily_diary_index,
+ *   dream_output_index, capability_probe_result, restore_snapshot,
+ *   runtime_secret_anchor, heartbeat_digest, narrative_timeline
+ * - agent_goal v7 extensions (scope, expires_at columns)
+ *
+ * All new columns use DEFAULT NULL for backward compatibility.
+ */
+import type { Migration } from "../migration-runner.js";
+export declare const V7_001_FOUNDATION: Migration;

package/runtime/storage/db/migrations/v7-001-foundation.js

@@ -0,0 +1,144 @@
+/**
+ * v7-001 Foundation migration — adds v7 entity tables and _meta tracking.
+ *
+ * Tables added:
+ * - identity_profile, tool_experience, daily_diary_index,
+ *   dream_output_index, capability_probe_result, restore_snapshot,
+ *   runtime_secret_anchor, heartbeat_digest, narrative_timeline
+ * - agent_goal v7 extensions (scope, expires_at columns)
+ *
+ * All new columns use DEFAULT NULL for backward compatibility.
+ */
+export const V7_001_FOUNDATION = {
+    version: 1,
+    label: "v7-foundation-tables",
+    sql: `
+    -- identity_profile (ADR-007)
+    CREATE TABLE IF NOT EXISTS identity_profile (
+      profile_id TEXT PRIMARY KEY,
+      canonical_name TEXT NOT NULL,
+      canonical_avatar TEXT,
+      canonical_bio TEXT,
+      platform_handles_json TEXT NOT NULL DEFAULT '[]',
+      updated_at TEXT NOT NULL
+    );
+
+    -- tool_experience (ADR-003)
+    CREATE TABLE IF NOT EXISTS tool_experience (
+      experience_id TEXT PRIMARY KEY,
+      connector_id TEXT NOT NULL,
+      capability_id TEXT NOT NULL,
+      outcome TEXT NOT NULL,
+      failure_class TEXT,
+      latency_ms INTEGER NOT NULL,
+      evidence_quality REAL NOT NULL DEFAULT 0,
+      source_refs_json TEXT NOT NULL,
+      trigger_source TEXT NOT NULL DEFAULT 'heartbeat',
+      created_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS tool_experience_connector_idx
+      ON tool_experience(connector_id);
+    CREATE INDEX IF NOT EXISTS tool_experience_outcome_idx
+      ON tool_experience(outcome);
+    CREATE INDEX IF NOT EXISTS tool_experience_created_at_idx
+      ON tool_experience(created_at);
+
+    -- daily_diary_index (ADR-005)
+    CREATE TABLE IF NOT EXISTS daily_diary_index (
+      diary_id TEXT PRIMARY KEY,
+      day TEXT NOT NULL UNIQUE,
+      observed_today_json TEXT NOT NULL DEFAULT '[]',
+      notable_signals_json TEXT NOT NULL DEFAULT '[]',
+      tomorrow_direction TEXT NOT NULL DEFAULT '',
+      source_refs_json TEXT NOT NULL,
+      created_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS daily_diary_index_day_idx
+      ON daily_diary_index(day);
+
+    -- dream_output_index (ADR-005)
+    CREATE TABLE IF NOT EXISTS dream_output_index (
+      output_id TEXT PRIMARY KEY,
+      run_id TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'candidate',
+      canonical_entries_json TEXT NOT NULL DEFAULT '[]',
+      insights_json TEXT NOT NULL DEFAULT '[]',
+      narrative_update_json TEXT,
+      relationship_update_json TEXT,
+      validation_json TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT (datetime('now'))
+    );
+    CREATE INDEX IF NOT EXISTS dream_output_index_run_idx
+      ON dream_output_index(run_id);
+    CREATE INDEX IF NOT EXISTS dream_output_index_status_idx
+      ON dream_output_index(status);
+
+    -- capability_probe_result (ADR-008)
+    CREATE TABLE IF NOT EXISTS capability_probe_result (
+      probe_result_id TEXT PRIMARY KEY,
+      capability_id TEXT NOT NULL,
+      connector_id TEXT NOT NULL,
+      actual_status TEXT NOT NULL,
+      http_status INTEGER,
+      sample_response_ref TEXT,
+      probe_config_ref TEXT NOT NULL,
+      created_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS capability_probe_result_connector_idx
+      ON capability_probe_result(connector_id);
+
+    -- restore_snapshot (ADR-007, DR-017)
+    CREATE TABLE IF NOT EXISTS restore_snapshot (
+      snapshot_id TEXT PRIMARY KEY,
+      entity_whitelist_json TEXT NOT NULL,
+      excluded_sensitive_kinds_json TEXT NOT NULL,
+      captured_at TEXT NOT NULL,
+      payload_json TEXT NOT NULL DEFAULT '{}'
+    );
+    CREATE INDEX IF NOT EXISTS restore_snapshot_captured_at_idx
+      ON restore_snapshot(captured_at);
+
+    -- runtime_secret_anchor (ADR-007)
+    CREATE TABLE IF NOT EXISTS runtime_secret_anchor (
+      anchor_id TEXT PRIMARY KEY,
+      location_ref TEXT NOT NULL,
+      health TEXT NOT NULL DEFAULT 'missing',
+      rotation_policy_ref TEXT,
+      updated_at TEXT NOT NULL
+    );
+
+    -- heartbeat_digest (ADR-006)
+    CREATE TABLE IF NOT EXISTS heartbeat_digest (
+      digest_id TEXT PRIMARY KEY,
+      day TEXT NOT NULL UNIQUE,
+      connector_summary_json TEXT NOT NULL DEFAULT '[]',
+      goal_summary_json TEXT NOT NULL DEFAULT '[]',
+      quiet_count INTEGER NOT NULL DEFAULT 0,
+      dream_count INTEGER NOT NULL DEFAULT 0,
+      breaker_summary_json TEXT NOT NULL DEFAULT '[]',
+      health_status TEXT NOT NULL DEFAULT 'ok',
+      created_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS heartbeat_digest_day_idx
+      ON heartbeat_digest(day);
+
+    -- narrative_timeline (ADR-007)
+    CREATE TABLE IF NOT EXISTS narrative_timeline (
+      timeline_id TEXT PRIMARY KEY,
+      entry_type TEXT NOT NULL,
+      subject_id TEXT NOT NULL,
+      delta_json TEXT NOT NULL DEFAULT '{}',
+      previous_hash TEXT NOT NULL DEFAULT '',
+      current_hash TEXT NOT NULL DEFAULT '',
+      created_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS narrative_timeline_subject_idx
+      ON narrative_timeline(subject_id);
+    CREATE INDEX IF NOT EXISTS narrative_timeline_created_at_idx
+      ON narrative_timeline(created_at);
+
+    -- agent_goal v7 extensions: scope and expires_at
+    ALTER TABLE agent_goal ADD COLUMN scope TEXT DEFAULT NULL;
+    ALTER TABLE agent_goal ADD COLUMN expires_at TEXT DEFAULT NULL;
+  `,
+};

package/runtime/storage/db/migrations/v7-002-effect-commit-ledger.d.ts

@@ -0,0 +1,8 @@
+/**
+ * v7-002 Effect Commit Ledger migration — adds effect_commit_ledger table
+ * for idempotency-backed side-effect persistence (T-CS.C.2).
+ *
+ * Dependencies: v7-001 (tables already exist).
+ */
+import type { Migration } from "../migration-runner.js";
+export declare const V7_002_EFFECT_COMMIT_LEDGER: Migration;

package/runtime/storage/db/migrations/v7-002-effect-commit-ledger.js

@@ -0,0 +1,27 @@
+/**
+ * v7-002 Effect Commit Ledger migration — adds effect_commit_ledger table
+ * for idempotency-backed side-effect persistence (T-CS.C.2).
+ *
+ * Dependencies: v7-001 (tables already exist).
+ */
+export const V7_002_EFFECT_COMMIT_LEDGER = {
+    version: 2,
+    label: "v7-effect-commit-ledger",
+    sql: `
+    CREATE TABLE IF NOT EXISTS effect_commit_ledger (
+      commit_id TEXT PRIMARY KEY,
+      idempotency_key TEXT NOT NULL UNIQUE,
+      decision_id TEXT NOT NULL,
+      intent_id TEXT NOT NULL,
+      effect_class TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'planned',
+      outcome_ref TEXT,
+      created_at TEXT NOT NULL,
+      committed_at TEXT
+    );
+    CREATE INDEX IF NOT EXISTS effect_commit_ledger_idempotency_idx
+      ON effect_commit_ledger(idempotency_key);
+    CREATE INDEX IF NOT EXISTS effect_commit_ledger_decision_idx
+      ON effect_commit_ledger(decision_id);
+  `,
+};

package/runtime/storage/db/migrations/v7-003-circuit-breaker.d.ts

@@ -0,0 +1,7 @@
+/**
+ * v7-003 Circuit Breaker migration — adds circuit_breaker_state table.
+ *
+ * Dependencies: v7-002 (effect_commit_ledger already exists).
+ */
+import type { Migration } from "../migration-runner.js";
+export declare const V7_003_CIRCUIT_BREAKER: Migration;

package/runtime/storage/db/migrations/v7-003-circuit-breaker.js

@@ -0,0 +1,26 @@
+/**
+ * v7-003 Circuit Breaker migration — adds circuit_breaker_state table.
+ *
+ * Dependencies: v7-002 (effect_commit_ledger already exists).
+ */
+export const V7_003_CIRCUIT_BREAKER = {
+    version: 3,
+    label: "v7-circuit-breaker-state",
+    sql: `
+    CREATE TABLE IF NOT EXISTS circuit_breaker_state (
+      platform_id TEXT NOT NULL,
+      capability_id TEXT NOT NULL,
+      state TEXT NOT NULL DEFAULT 'closed',
+      failure_count INTEGER NOT NULL DEFAULT 0,
+      consecutive_failures INTEGER NOT NULL DEFAULT 0,
+      last_failure_at TEXT,
+      opened_at TEXT,
+      last_probe_at TEXT,
+      updated_at TEXT NOT NULL,
+      PRIMARY KEY (platform_id, capability_id)
+    );
+    CREATE INDEX IF NOT EXISTS circuit_breaker_state_open_idx
+      ON circuit_breaker_state(state)
+      WHERE state = 'open';
+  `,
+};

package/runtime/storage/db/migrations/v7-004-behavior-promotion.d.ts

@@ -0,0 +1,7 @@
+/**
+ * v7-004 Behavior Promotion migration — adds behavior_promotion table.
+ *
+ * Dependencies: v7-003 (circuit_breaker_state already exists).
+ */
+import type { Migration } from "../migration-runner.js";
+export declare const V7_004_BEHAVIOR_PROMOTION: Migration;

package/runtime/storage/db/migrations/v7-004-behavior-promotion.js

@@ -0,0 +1,26 @@
+/**
+ * v7-004 Behavior Promotion migration — adds behavior_promotion table.
+ *
+ * Dependencies: v7-003 (circuit_breaker_state already exists).
+ */
+export const V7_004_BEHAVIOR_PROMOTION = {
+    version: 4,
+    label: "v7-behavior-promotion",
+    sql: `
+    CREATE TABLE IF NOT EXISTS behavior_promotion (
+      promotion_id TEXT PRIMARY KEY,
+      behavior_kind TEXT NOT NULL,
+      description TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'candidate',
+      operator_id TEXT,
+      reject_reason TEXT,
+      submitted_at TEXT NOT NULL,
+      decided_at TEXT,
+      expires_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS behavior_promotion_status_idx
+      ON behavior_promotion(status);
+    CREATE INDEX IF NOT EXISTS behavior_promotion_expires_idx
+      ON behavior_promotion(expires_at);
+  `,
+};