@haaaiawd/second-nature 0.2.8 → 0.2.12

package/runtime/storage/life-evidence/types.d.ts

@@ -5,7 +5,7 @@
  */
 export type LifeEvidenceType = "platform_browse" | "platform_interaction" | "work_progress" | "task_discovery" | "user_interaction" | "quiet_reflection" | "delivery_fallback";
 export type Sensitivity = "public" | "private" | "credential" | "sensitive";
-export interface SourceRef {
+export interface LifeEvidenceSourceRef {
     id: string;
     kind: "platform_item" | "workspace_artifact" | "decision_record" | "user_anchor" | "connector_result" | "host_report" | "fallback_artifact";
     uri: string;
@@ -19,7 +19,7 @@ export interface LifeEvidenceCandidate {
     platformId?: string;
     summary: string;
     rawContentRef?: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     sensitivity: Sensitivity;
     confidence?: number;
     tags?: string[];
@@ -32,14 +32,14 @@ export interface LifeEvidence {
     platformId?: string;
     summary: string;
     rawContentRef?: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     sensitivity: Sensitivity;
     confidence: number;
     tags: string[];
     producer: string;
-    artifactRef: SourceRef;
+    artifactRef: LifeEvidenceSourceRef;
 }
 export interface LifeEvidenceWriteAck {
     evidenceId: string;
-    artifactRef: SourceRef;
+    artifactRef: LifeEvidenceSourceRef;
 }

package/runtime/storage/quiet/quiet-artifact-types.d.ts

@@ -1,10 +1,10 @@
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 export type QuietArtifactKind = "daily_report" | "narrative_reflection" | "curated_memory_candidate" | "empty_state";
 export type QuietClaimType = "fact" | "emotion" | "interpretation" | "next_step";
 export interface QuietClaim {
     id: string;
     text: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     claimType: QuietClaimType;
 }
 export interface QuietArtifactWrite {
@@ -13,6 +13,6 @@ export interface QuietArtifactWrite {
     title: string;
     body: string;
     claims: QuietClaim[];
-    sourceRefs: SourceRef[];
-    memoryCandidateRefs?: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
+    memoryCandidateRefs?: LifeEvidenceSourceRef[];
 }

package/runtime/storage/quiet/quiet-artifact-writer.d.ts

@@ -1,4 +1,4 @@
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 import type { SourceCoverage } from "../snapshots/types.js";
 import type { QuietArtifactWrite } from "./quiet-artifact-types.js";
 import type { QuietClaim } from "./quiet-artifact-types.js";
@@ -7,7 +7,7 @@ export declare function calculateQuietSourceCoverage(claims: QuietClaim[]): Sour
 export declare function evidenceGroundingRatio(input: Pick<QuietArtifactWrite, "claims" | "sourceRefs">): number;
 export interface QuietArtifactAck {
     artifactId: string;
-    artifactRef: SourceRef;
+    artifactRef: LifeEvidenceSourceRef;
     sourceCoverage: SourceCoverage;
 }
 export declare function writeQuietArtifact(input: QuietArtifactWrite, opts?: {

package/runtime/storage/services/write-validation-gate.d.ts

@@ -7,7 +7,7 @@
  * readable reason codes (DR-022).
  *
  * Dependencies:
- * - `SourceRef` type from `../../shared/types/source-ref.js`
+ * - `SourceRefTuple` type from `../../shared/types/source-ref.js`
  * - v7 entity types for shape awareness
  *
  * Boundary:

package/runtime/storage/services/write-validation-gate.js

@@ -7,7 +7,7 @@
  * readable reason codes (DR-022).
  *
  * Dependencies:
- * - `SourceRef` type from `../../shared/types/source-ref.js`
+ * - `SourceRefTuple` type from `../../shared/types/source-ref.js`
  * - v7 entity types for shape awareness
  *
  * Boundary:
@@ -115,7 +115,7 @@ const IDENTIFIER_FIELD_NAMES = new Set([
     "id",
     "runId",
     "run_id",
-    "sourceRef",
+    "SourceRefTuple",
     "source_ref",
     "sourceRefs",
     "source_refs_json",
@@ -127,6 +127,14 @@ const IDENTIFIER_FIELD_NAMES = new Set([
     "capability_id",
     "candidate_id",
 ]);
+// Fields that describe where a secret is stored must still reject payloads
+// that contain raw secret material, even if the value is URI-shaped.
+const SECRET_LOCATION_FIELD_NAMES = new Set([
+    "locationRef",
+    "location_ref",
+    "rotationPolicyRef",
+    "rotation_policy_ref",
+]);
 function looksLikeUriPath(text) {
     return /^[a-z][a-z0-9+.-]*:\/\//i.test(text) || (text.includes("/") && !text.includes(" "));
 }
@@ -154,8 +162,12 @@ function sensitivityScan(value, fieldPath = "payload") {
                 const matched = match[0];
                 if (exempt && exempt(matched))
                     continue;
-                if (isIdentifierField || looksLikeUriPath(value))
-                    continue;
+                if (isIdentifierField || looksLikeUriPath(value)) {
+                    const leafField = fieldPath.split(".").pop() ?? "";
+                    if (!SECRET_LOCATION_FIELD_NAMES.has(leafField)) {
+                        continue;
+                    }
+                }
                 return {
                     reason: "write_validation_failed:sensitivity_scan_failed",
                     field: fieldPath,

package/runtime/storage/snapshots/types.d.ts

@@ -1,7 +1,7 @@
 /**
  * Read-model snapshots aligned with state-system v5 (subset for S1/S2).
  */
-import type { LifeEvidenceType, SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef, LifeEvidenceType } from "../life-evidence/types.js";
 export interface LifeEvidenceQuery {
     windowStart?: string;
     windowEnd?: string;
@@ -14,7 +14,7 @@ export interface SourceCoverage {
     claimCoverage: Array<{
         claimId: string;
         backed: boolean;
-        sourceRefs: SourceRef[];
+        sourceRefs: LifeEvidenceSourceRef[];
     }>;
 }
 export interface LifeEvidenceReadModel {
@@ -24,7 +24,7 @@ export interface LifeEvidenceReadModel {
     platformId?: string;
     summary: string;
     rawContentRef?: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     sensitivity: import("../life-evidence/types.js").Sensitivity;
     confidence: number;
     tags: string[];
@@ -35,11 +35,11 @@ export interface LifeEvidenceSnapshot {
     generatedAt: string;
     windowStart: string;
     windowEnd: string;
-    evidenceRefs: SourceRef[];
+    evidenceRefs: LifeEvidenceSourceRef[];
     platformEvents: LifeEvidenceReadModel[];
     workEvents: LifeEvidenceReadModel[];
     userInteractionEvents: LifeEvidenceReadModel[];
-    quietArtifacts: SourceRef[];
+    quietArtifacts: LifeEvidenceSourceRef[];
     coverage: SourceCoverage;
     empty: boolean;
 }
@@ -47,12 +47,12 @@ export interface ContinuitySnapshot {
     snapshotId: string;
     generatedAt: string;
     lastHeartbeatAt?: string;
-    recentDecisionRefs: SourceRef[];
-    openObligations: SourceRef[];
+    recentDecisionRefs: LifeEvidenceSourceRef[];
+    openObligations: LifeEvidenceSourceRef[];
     quietDebt: {
         hasUnprocessedEvidence: boolean;
         oldestUnprocessedEvidenceAt?: string;
         pendingCount: number;
     };
-    fallbackRefs: SourceRef[];
+    fallbackRefs: LifeEvidenceSourceRef[];
 }

package/runtime/storage/user-interest/types.d.ts

@@ -3,7 +3,7 @@
  *
  * Test coverage: tests/unit/storage/user-interest-snapshot.test.ts
  */
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 export type UserInterestStaleness = "fresh" | "stale" | "insufficient";
 export interface UserInterestSignal {
     id: string;
@@ -11,14 +11,14 @@ export interface UserInterestSignal {
     affinity: "positive" | "negative" | "watching" | "unknown";
     reason: string;
     confidence: number;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     updatedAt: string;
 }
 export interface UserInterestSnapshot {
     snapshotId: string;
     generatedAt: string;
     signals: UserInterestSignal[];
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     confidence: number;
     staleness: UserInterestStaleness;
     missingReasons?: string[];

package/runtime/storage/v8-state-stores.d.ts

@@ -120,7 +120,6 @@ export declare function writeDreamConsolidationRun(db: StateDatabase, row: Omit<
  */
 export declare function updateDreamConsolidationRunStatus(db: StateDatabase, id: string, status: DreamConsolidationRunRecord["status"], options?: {
     reason?: DreamConsolidationRunRecord["reason"];
-    lifecycleStatus?: DreamConsolidationRunRecord["lifecycleStatus"];
     payloadJson?: string;
 }): Promise<{
     id: string;
@@ -133,6 +132,14 @@ export declare function readDreamConsolidationRunsByQuietId(db: StateDatabase, q
     rows: DreamConsolidationRunRecord[];
     degraded?: DegradedOperationResult;
 }>;
+/**
+ * Read the most recent DreamConsolidationRun globally, filtered by status.
+ * Used to enforce the 7-day Dream interval across Quiet review IDs.
+ */
+export declare function readLatestDreamConsolidationRunByStatus(db: StateDatabase, statuses: DreamConsolidationRunRecord["status"][]): Promise<{
+    row?: DreamConsolidationRunRecord;
+    degraded?: DegradedOperationResult;
+}>;
 export declare function writeLongTermMemoryProjection(db: StateDatabase, row: Omit<NewLongTermMemoryProjectionRecord, "sourceRefsJson"> & {
     sourceRefs: SourceRef[];
 }): Promise<{

package/runtime/storage/v8-state-stores.js

@@ -21,27 +21,12 @@
  *
  * Test coverage: tests/unit/storage/v8-state-stores.test.ts
  */
-import { eq, and, desc, like, isNull } from "drizzle-orm";
+import { eq, and, desc, like, isNull, inArray } from "drizzle-orm";
 import { evidenceItem, perceptionCard, judgmentVerdict, actionClosureRecord, quietDailyReview, dreamConsolidationRun, longTermMemoryProjection, heartbeatCycleTrace, loopStageEvent, impulseContextArtifact, dailyRhythmState, connectorCooldownState, } from "./db/schema/v8-entities.js";
+import { serializeSourceRefs, parseSourceRefs, } from "../shared/serialization.js";
 // ───────────────────────────────────────────────────────────────
 // Shared helpers
 // ───────────────────────────────────────────────────────────────
-function serializeSourceRefs(refs) {
-    return JSON.stringify(refs);
-}
-function parseSourceRefs(json) {
-    if (!json)
-        return [];
-    try {
-        const parsed = JSON.parse(json);
-        if (Array.isArray(parsed))
-            return parsed;
-        return [];
-    }
-    catch {
-        return [];
-    }
-}
 function makeDegraded(reason, ownerStage, operatorNextAction, sourceRefs = []) {
     return {
         status: "degraded",
@@ -444,8 +429,6 @@ export async function updateDreamConsolidationRunStatus(db, id, status, options)
         const updateData = { status };
         if (options?.reason !== undefined)
             updateData.reason = options.reason;
-        if (options?.lifecycleStatus !== undefined)
-            updateData.lifecycleStatus = options.lifecycleStatus;
         if (options?.payloadJson !== undefined)
             updateData.payloadJson = options.payloadJson;
         await db.db.update(dreamConsolidationRun).set(updateData).where(eq(dreamConsolidationRun.id, id));
@@ -486,6 +469,26 @@ export async function readDreamConsolidationRunsByQuietId(db, quietReviewId) {
         };
     }
 }
+/**
+ * Read the most recent DreamConsolidationRun globally, filtered by status.
+ * Used to enforce the 7-day Dream interval across Quiet review IDs.
+ */
+export async function readLatestDreamConsolidationRunByStatus(db, statuses) {
+    try {
+        const rows = await db.db
+            .select()
+            .from(dreamConsolidationRun)
+            .where(inArray(dreamConsolidationRun.status, statuses))
+            .orderBy(desc(dreamConsolidationRun.createdAt))
+            .limit(1);
+        return { row: rows[0] };
+    }
+    catch {
+        return {
+            degraded: makeDegraded("state_unreadable", "dream", "Check state database connectivity"),
+        };
+    }
+}
 // ───────────────────────────────────────────────────────────────
 // LongTermMemoryProjection store
 // ───────────────────────────────────────────────────────────────
@@ -511,7 +514,7 @@ export async function writeLongTermMemoryProjection(db, row) {
  */
 export async function updateLongTermMemoryProjectionStatus(db, id, status, payloadJson) {
     try {
-        const updateData = { status, lifecycleStatus: status };
+        const updateData = { status };
         if (payloadJson !== undefined) {
             updateData.payloadJson = payloadJson;
         }

package/workspace-ops-bridge.js

@@ -99,7 +99,35 @@ export async function openWorkspaceOpsBridge(workspaceRoot) {
             const prevCwd = process.cwd();
             try {
                 process.chdir(resolvedRoot);
-                return await def.execute(input);
+                const result = await def.execute(input);
+                // T-ROS.C.3-followup: ensure sql.js in-memory DB is persisted after each
+                // mutating tool call so subsequent calls (possibly in a new process) see
+                // the latest state. Flush failures are reported as warnings, never fatal.
+                try {
+                    if (typeof stateDb.flush === "function") {
+                        stateDb.flush();
+                    }
+                }
+                catch (flushErr) {
+                    const warning = flushErr instanceof Error ? flushErr.message : String(flushErr);
+                    result.warnings = [
+                        ...(result.warnings ?? []),
+                        `state_flush_warning:${warning}`,
+                    ];
+                }
+                try {
+                    if (typeof observabilityDb.flush === "function") {
+                        observabilityDb.flush();
+                    }
+                }
+                catch (flushErr) {
+                    const warning = flushErr instanceof Error ? flushErr.message : String(flushErr);
+                    result.warnings = [
+                        ...(result.warnings ?? []),
+                        `observability_flush_warning:${warning}`,
+                    ];
+                }
+                return result;
             }
             finally {
                 process.chdir(prevCwd);