@haaaiawd/second-nature 0.2.9 → 0.2.12

package/runtime/storage/db/migrations/index.js

@@ -8,6 +8,8 @@ import { V7_004_BEHAVIOR_PROMOTION } from "./v7-004-behavior-promotion.js";
 import { V8_001_LIVING_PERCEPTION_LOOP } from "./v8-001-living-perception-loop.js";
 import { V8_002_PERCEPTION_CONTRACT_ALIGNMENT } from "./v8-002-perception-contract-alignment.js";
 import { V8_003_QUIET_CLOSURE_REFS } from "./v8-003-quiet-closure-refs.js";
+import { V8_004_SCHEMA_CLOSURE } from "./v8-004-schema-closure.js";
+import { V8_005_SINGLE_STATUS_SCHEMA } from "./v8-005-single-status-schema.js";
 export const ALL_MIGRATIONS = [
     V7_001_FOUNDATION,
     V7_002_EFFECT_COMMIT_LEDGER,
@@ -16,4 +18,6 @@ export const ALL_MIGRATIONS = [
     V8_001_LIVING_PERCEPTION_LOOP,
     V8_002_PERCEPTION_CONTRACT_ALIGNMENT,
     V8_003_QUIET_CLOSURE_REFS,
+    V8_004_SCHEMA_CLOSURE,
+    V8_005_SINGLE_STATUS_SCHEMA,
 ];

package/runtime/storage/db/migrations/v8-004-schema-closure.d.ts

@@ -0,0 +1,19 @@
+/**
+ * v8-004 Schema Closure — brings pre-existing v8 DBs up to the current bootstrap schema.
+ *
+ * Problem: v8-001 created the first v8 tables, but daily_rhythm_state,
+ * impulse_context_artifact, connector_cooldown_state, and several columns
+ * (action_closure_record.platform_id/capability_id,
+ * quiet_daily_review.closure_refs_json, connector_cooldown_state.terminal_count)
+ * were added later only in the bootstrap SQL. DBs initialized before those
+ * bootstrap changes would miss tables/columns and break at runtime.
+ *
+ * Strategy:
+ * - CREATE TABLE IF NOT EXISTS for the three tables (idempotent on fresh DBs).
+ * - Column-level fixes are handled by the defensive applyStateSchemaMigrations
+ *   helper in db/index.ts, because SQLite cannot conditionally ADD COLUMN.
+ *
+ * Resolves T-SMS.R.2.
+ */
+import type { Migration } from "../migration-runner.js";
+export declare const V8_004_SCHEMA_CLOSURE: Migration;

package/runtime/storage/db/migrations/v8-004-schema-closure.js

@@ -0,0 +1,74 @@
+/**
+ * v8-004 Schema Closure — brings pre-existing v8 DBs up to the current bootstrap schema.
+ *
+ * Problem: v8-001 created the first v8 tables, but daily_rhythm_state,
+ * impulse_context_artifact, connector_cooldown_state, and several columns
+ * (action_closure_record.platform_id/capability_id,
+ * quiet_daily_review.closure_refs_json, connector_cooldown_state.terminal_count)
+ * were added later only in the bootstrap SQL. DBs initialized before those
+ * bootstrap changes would miss tables/columns and break at runtime.
+ *
+ * Strategy:
+ * - CREATE TABLE IF NOT EXISTS for the three tables (idempotent on fresh DBs).
+ * - Column-level fixes are handled by the defensive applyStateSchemaMigrations
+ *   helper in db/index.ts, because SQLite cannot conditionally ADD COLUMN.
+ *
+ * Resolves T-SMS.R.2.
+ */
+export const V8_004_SCHEMA_CLOSURE = {
+    version: 8,
+    label: "v8-schema-closure",
+    sql: `
+    CREATE TABLE IF NOT EXISTS daily_rhythm_state (
+      id TEXT PRIMARY KEY,
+      day TEXT NOT NULL,
+      quiet_status TEXT NOT NULL DEFAULT 'not_due',
+      dream_status TEXT NOT NULL DEFAULT 'not_due',
+      quiet_reason TEXT,
+      dream_reason TEXT,
+      quiet_completed_at TEXT,
+      dream_completed_at TEXT,
+      source_refs_json TEXT NOT NULL,
+      payload_json TEXT,
+      updated_at TEXT NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS impulse_context_artifact (
+      id TEXT PRIMARY KEY,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      scene_type TEXT NOT NULL,
+      capability_intent TEXT,
+      platform_id TEXT,
+      capability_class TEXT,
+      impulse_source TEXT NOT NULL,
+      impulse_text TEXT,
+      atmosphere_text TEXT,
+      expression_boundary_constraints_json TEXT,
+      expression_boundary_style TEXT,
+      freshness_version INTEGER NOT NULL DEFAULT 1,
+      source_refs_json TEXT NOT NULL,
+      redaction_class TEXT NOT NULL DEFAULT 'none',
+      payload_json TEXT,
+      lifecycle_status TEXT NOT NULL DEFAULT 'active'
+    );
+
+    CREATE TABLE IF NOT EXISTS connector_cooldown_state (
+      id TEXT PRIMARY KEY,
+      platform_id TEXT NOT NULL,
+      capability_id TEXT NOT NULL,
+      failure_class TEXT NOT NULL,
+      retry_after_ms INTEGER,
+      blocked_until TEXT NOT NULL,
+      failure_count INTEGER NOT NULL DEFAULT 1,
+      terminal_count INTEGER NOT NULL DEFAULT 0,
+      source_refs_json TEXT NOT NULL,
+      redaction_class TEXT NOT NULL DEFAULT 'none',
+      payload_json TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS connector_cooldown_state_platform_capability_idx
+      ON connector_cooldown_state(platform_id, capability_id);
+  `,
+};

package/runtime/storage/db/migrations/v8-005-single-status-schema.d.ts

@@ -0,0 +1,11 @@
+/**
+ * v8-005 Single Status Schema — records Wave 114 status-column cleanup.
+ *
+ * SQLite cannot safely run `DROP COLUMN IF EXISTS`; the actual idempotent
+ * column removal lives in applyStateSchemaMigrations where each statement is
+ * isolated. This migration marks the schema version after that defensive pass.
+ *
+ * Resolves T-SMS.R.4.
+ */
+import type { Migration } from "../migration-runner.js";
+export declare const V8_005_SINGLE_STATUS_SCHEMA: Migration;

package/runtime/storage/db/migrations/v8-005-single-status-schema.js

@@ -0,0 +1,16 @@
+/**
+ * v8-005 Single Status Schema — records Wave 114 status-column cleanup.
+ *
+ * SQLite cannot safely run `DROP COLUMN IF EXISTS`; the actual idempotent
+ * column removal lives in applyStateSchemaMigrations where each statement is
+ * isolated. This migration marks the schema version after that defensive pass.
+ *
+ * Resolves T-SMS.R.4.
+ */
+export const V8_005_SINGLE_STATUS_SCHEMA = {
+    version: 9,
+    label: "v8-single-status-schema",
+    sql: `
+    SELECT 1;
+  `,
+};

package/runtime/storage/db/schema/v8-entities.d.ts

@@ -1006,25 +1006,6 @@ export declare const actionClosureRecord: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        lifecycleStatus: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "lifecycle_status";
-            tableName: "action_closure_record";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
     };
     dialect: "sqlite";
 }>;
@@ -1381,25 +1362,6 @@ export declare const dreamConsolidationRun: import("drizzle-orm/sqlite-core").SQ
         }, {}, {
             length: number | undefined;
         }>;
-        lifecycleStatus: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "lifecycle_status";
-            tableName: "dream_consolidation_run";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
     };
     dialect: "sqlite";
 }>;
@@ -1561,25 +1523,6 @@ export declare const longTermMemoryProjection: import("drizzle-orm/sqlite-core")
         }, {}, {
             length: number | undefined;
         }>;
-        lifecycleStatus: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "lifecycle_status";
-            tableName: "long_term_memory_projection";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
     };
     dialect: "sqlite";
 }>;
@@ -1790,25 +1733,6 @@ export declare const heartbeatCycleTrace: import("drizzle-orm/sqlite-core").SQLi
         }, {}, {
             length: number | undefined;
         }>;
-        lifecycleStatus: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "lifecycle_status";
-            tableName: "heartbeat_cycle_trace";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
     };
     dialect: "sqlite";
 }>;
@@ -2023,25 +1947,6 @@ export declare const loopStageEvent: import("drizzle-orm/sqlite-core").SQLiteTab
         }, {}, {
             length: number | undefined;
         }>;
-        lifecycleStatus: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "lifecycle_status";
-            tableName: "loop_stage_event";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
     };
     dialect: "sqlite";
 }>;

package/runtime/storage/db/schema/v8-entities.js

@@ -12,7 +12,7 @@
  * Dependencies: drizzle-orm/sqlite-core
  * Boundary: Schema definitions only; no runtime logic.
  */
-import { sqliteTable, text, integer, real, index } from "drizzle-orm/sqlite-core";
+import { sqliteTable, text, integer, real, index, uniqueIndex } from "drizzle-orm/sqlite-core";
 // ───────────────────────────────────────────────────────────────
 // 1. EvidenceItem
 // ───────────────────────────────────────────────────────────────
@@ -27,7 +27,9 @@ export const evidenceItem = sqliteTable("evidence_item", {
     redactionClass: text("redaction_class").notNull().default("none"),
     payloadJson: text("payload_json"),
     lifecycleStatus: text("lifecycle_status").notNull().default("pending"),
-});
+}, (table) => ({
+    platformContentHashIdx: uniqueIndex("evidence_item_platform_content_hash_idx").on(table.platformId, table.contentHash),
+}));
 // ───────────────────────────────────────────────────────────────
 // 2. PerceptionCard
 // ───────────────────────────────────────────────────────────────
@@ -83,7 +85,6 @@ export const actionClosureRecord = sqliteTable("action_closure_record", {
     sourceRefsJson: text("source_refs_json").notNull(),
     redactionClass: text("redaction_class").notNull().default("none"),
     payloadJson: text("payload_json"),
-    lifecycleStatus: text("lifecycle_status").notNull().default("closed"),
 });
 // ───────────────────────────────────────────────────────────────
 // 5. QuietDailyReview
@@ -112,7 +113,6 @@ export const dreamConsolidationRun = sqliteTable("dream_consolidation_run", {
     sourceRefsJson: text("source_refs_json").notNull(),
     redactionClass: text("redaction_class").notNull().default("none"),
     payloadJson: text("payload_json"),
-    lifecycleStatus: text("lifecycle_status").notNull().default("pending"),
 });
 // ───────────────────────────────────────────────────────────────
 // 7. LongTermMemoryProjection
@@ -126,7 +126,6 @@ export const longTermMemoryProjection = sqliteTable("long_term_memory_projection
     sourceRefsJson: text("source_refs_json").notNull(),
     redactionClass: text("redaction_class").notNull().default("none"),
     payloadJson: text("payload_json"),
-    lifecycleStatus: text("lifecycle_status").notNull().default("candidate"),
 });
 // ───────────────────────────────────────────────────────────────
 // 8. HeartbeatCycleTrace
@@ -143,7 +142,6 @@ export const heartbeatCycleTrace = sqliteTable("heartbeat_cycle_trace", {
     sourceRefsJson: text("source_refs_json"),
     redactionClass: text("redaction_class").notNull().default("none"),
     payloadJson: text("payload_json"),
-    lifecycleStatus: text("lifecycle_status").notNull().default("started"),
 });
 // ───────────────────────────────────────────────────────────────
 // 9. LoopStageEvent
@@ -160,7 +158,6 @@ export const loopStageEvent = sqliteTable("loop_stage_event", {
     occurredAt: text("occurred_at").notNull(),
     expectedDownstreamByCycle: integer("expected_downstream_by_cycle"),
     payloadJson: text("payload_json"),
-    lifecycleStatus: text("lifecycle_status").notNull().default("started"),
 });
 // ───────────────────────────────────────────────────────────────
 // 10. ImpulseContextArtifact

package/runtime/storage/delivery/types.d.ts

@@ -4,7 +4,7 @@
  * Boundaries: validates proof fields before index write; hostProofRef uses SourceRef JSON.
  * Test coverage: tests/unit/storage/delivery-attempt.test.ts
  */
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 export type DeliveryAttemptStatus = "sent" | "failed" | "dropped_by_host_policy";
 export interface DeliveryAttemptWrite {
     attemptId: string;
@@ -13,7 +13,7 @@ export interface DeliveryAttemptWrite {
     channel?: string;
     status: DeliveryAttemptStatus;
     messageId?: string;
-    hostProofRef?: SourceRef;
+    hostProofRef?: LifeEvidenceSourceRef;
     errorClass?: string;
     fallbackRef?: string;
 }

package/runtime/storage/fallback/load-operator-fallback.d.ts

@@ -1,5 +1,5 @@
 import type { StateDatabase } from "../db/index.js";
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 import type { OperatorFallbackView } from "./operator-fallback-view.js";
 export declare function normalizeFallbackRef(ref: string): string;
 /** Loads persisted operator fallback row; does not coerce status (use `toOperatorFallbackView`). */
@@ -7,7 +7,7 @@ export declare function loadOperatorFallbackRow(state: StateDatabase, fallbackRe
     fallbackRef: string;
     reason: string;
     status: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     candidateMessage?: string;
     nextStep: string;
 } | null>;

package/runtime/storage/fallback/operator-fallback-types.d.ts

@@ -1,9 +1,9 @@
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 export type OperatorFallbackReason = "target_none" | "channel_missing" | "host_unsupported" | "delivery_failed";
 export interface OperatorFallbackWrite {
     reason: OperatorFallbackReason;
     decisionId: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     candidateMessage?: string;
     nextStep: string;
 }

package/runtime/storage/fallback/operator-fallback-view.d.ts

@@ -1,11 +1,11 @@
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 import type { OperatorFallbackReason } from "./operator-fallback-types.js";
 /** Operator-facing delivery fallback (T1.2.2 / cli-system v5). Status is always not_sent — never sent/delivered. */
 export interface OperatorFallbackView {
     fallbackRef: string;
     reason: OperatorFallbackReason | string;
     status: "not_sent";
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     candidateMessage?: string;
     nextStep: string;
 }

package/runtime/storage/index.d.ts

@@ -22,7 +22,7 @@ export { createNarrativeStateStore, type NarrativeStateStore, type NarrativeStat
 export { createRelationshipMemoryStore, type RelationshipMemoryStore, type RelationshipMemory, type RelationshipMemoryUpdate, type RelationshipMemoryWriteAck, type TopicAffinity, } from "./relationship/relationship-memory-store.js";
 export { createAgentGoalStore, type AgentGoalStore, type AgentGoal, type AgentGoalWrite, type AgentGoalStatusTransition, type AgentGoalQuery, type AgentGoalWriteAck, } from "./goal/agent-goal-store.js";
 export { createMemoryStoreLifecycle, type MemoryStorePort, type MemoryStore, type MemoryStoreWrite, type MemoryStoreLifecycleTransition, type MemoryStoreAck, type CanonicalMemoryEntry, type DreamInsight, type MemoryStoreValidation, } from "./memory-store/memory-store-lifecycle.js";
-export type { LifeEvidence, LifeEvidenceCandidate, LifeEvidenceType, LifeEvidenceWriteAck, Sensitivity, SourceRef, } from "./life-evidence/types.js";
+export type { LifeEvidence, LifeEvidenceCandidate, LifeEvidenceSourceRef, LifeEvidenceType, LifeEvidenceWriteAck, Sensitivity, } from "./life-evidence/types.js";
 export { appendLifeEvidence, type AppendLifeEvidenceOptions } from "./life-evidence/append-life-evidence.js";
 export { loadRhythmPolicySnapshot, type RhythmPolicySnapshot } from "./rhythm/rhythm-policy-snapshot.js";
 export type { LifeEvidenceQuery, LifeEvidenceSnapshot, LifeEvidenceReadModel, ContinuitySnapshot, SourceCoverage, } from "./snapshots/types.js";

package/runtime/storage/life-evidence/types.d.ts

@@ -5,7 +5,7 @@
  */
 export type LifeEvidenceType = "platform_browse" | "platform_interaction" | "work_progress" | "task_discovery" | "user_interaction" | "quiet_reflection" | "delivery_fallback";
 export type Sensitivity = "public" | "private" | "credential" | "sensitive";
-export interface SourceRef {
+export interface LifeEvidenceSourceRef {
     id: string;
     kind: "platform_item" | "workspace_artifact" | "decision_record" | "user_anchor" | "connector_result" | "host_report" | "fallback_artifact";
     uri: string;
@@ -19,7 +19,7 @@ export interface LifeEvidenceCandidate {
     platformId?: string;
     summary: string;
     rawContentRef?: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     sensitivity: Sensitivity;
     confidence?: number;
     tags?: string[];
@@ -32,14 +32,14 @@ export interface LifeEvidence {
     platformId?: string;
     summary: string;
     rawContentRef?: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     sensitivity: Sensitivity;
     confidence: number;
     tags: string[];
     producer: string;
-    artifactRef: SourceRef;
+    artifactRef: LifeEvidenceSourceRef;
 }
 export interface LifeEvidenceWriteAck {
     evidenceId: string;
-    artifactRef: SourceRef;
+    artifactRef: LifeEvidenceSourceRef;
 }

package/runtime/storage/quiet/quiet-artifact-types.d.ts

@@ -1,10 +1,10 @@
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 export type QuietArtifactKind = "daily_report" | "narrative_reflection" | "curated_memory_candidate" | "empty_state";
 export type QuietClaimType = "fact" | "emotion" | "interpretation" | "next_step";
 export interface QuietClaim {
     id: string;
     text: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     claimType: QuietClaimType;
 }
 export interface QuietArtifactWrite {
@@ -13,6 +13,6 @@ export interface QuietArtifactWrite {
     title: string;
     body: string;
     claims: QuietClaim[];
-    sourceRefs: SourceRef[];
-    memoryCandidateRefs?: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
+    memoryCandidateRefs?: LifeEvidenceSourceRef[];
 }

package/runtime/storage/quiet/quiet-artifact-writer.d.ts

@@ -1,4 +1,4 @@
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 import type { SourceCoverage } from "../snapshots/types.js";
 import type { QuietArtifactWrite } from "./quiet-artifact-types.js";
 import type { QuietClaim } from "./quiet-artifact-types.js";
@@ -7,7 +7,7 @@ export declare function calculateQuietSourceCoverage(claims: QuietClaim[]): Sour
 export declare function evidenceGroundingRatio(input: Pick<QuietArtifactWrite, "claims" | "sourceRefs">): number;
 export interface QuietArtifactAck {
     artifactId: string;
-    artifactRef: SourceRef;
+    artifactRef: LifeEvidenceSourceRef;
     sourceCoverage: SourceCoverage;
 }
 export declare function writeQuietArtifact(input: QuietArtifactWrite, opts?: {

package/runtime/storage/services/write-validation-gate.d.ts

@@ -7,7 +7,7 @@
  * readable reason codes (DR-022).
  *
  * Dependencies:
- * - `SourceRef` type from `../../shared/types/source-ref.js`
+ * - `SourceRefTuple` type from `../../shared/types/source-ref.js`
  * - v7 entity types for shape awareness
  *
  * Boundary:

package/runtime/storage/services/write-validation-gate.js

@@ -7,7 +7,7 @@
  * readable reason codes (DR-022).
  *
  * Dependencies:
- * - `SourceRef` type from `../../shared/types/source-ref.js`
+ * - `SourceRefTuple` type from `../../shared/types/source-ref.js`
  * - v7 entity types for shape awareness
  *
  * Boundary:
@@ -115,7 +115,7 @@ const IDENTIFIER_FIELD_NAMES = new Set([
     "id",
     "runId",
     "run_id",
-    "sourceRef",
+    "SourceRefTuple",
     "source_ref",
     "sourceRefs",
     "source_refs_json",
@@ -127,6 +127,14 @@ const IDENTIFIER_FIELD_NAMES = new Set([
     "capability_id",
     "candidate_id",
 ]);
+// Fields that describe where a secret is stored must still reject payloads
+// that contain raw secret material, even if the value is URI-shaped.
+const SECRET_LOCATION_FIELD_NAMES = new Set([
+    "locationRef",
+    "location_ref",
+    "rotationPolicyRef",
+    "rotation_policy_ref",
+]);
 function looksLikeUriPath(text) {
     return /^[a-z][a-z0-9+.-]*:\/\//i.test(text) || (text.includes("/") && !text.includes(" "));
 }
@@ -154,8 +162,12 @@ function sensitivityScan(value, fieldPath = "payload") {
                 const matched = match[0];
                 if (exempt && exempt(matched))
                     continue;
-                if (isIdentifierField || looksLikeUriPath(value))
-                    continue;
+                if (isIdentifierField || looksLikeUriPath(value)) {
+                    const leafField = fieldPath.split(".").pop() ?? "";
+                    if (!SECRET_LOCATION_FIELD_NAMES.has(leafField)) {
+                        continue;
+                    }
+                }
                 return {
                     reason: "write_validation_failed:sensitivity_scan_failed",
                     field: fieldPath,

package/runtime/storage/snapshots/types.d.ts

@@ -1,7 +1,7 @@
 /**
  * Read-model snapshots aligned with state-system v5 (subset for S1/S2).
  */
-import type { LifeEvidenceType, SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef, LifeEvidenceType } from "../life-evidence/types.js";
 export interface LifeEvidenceQuery {
     windowStart?: string;
     windowEnd?: string;
@@ -14,7 +14,7 @@ export interface SourceCoverage {
     claimCoverage: Array<{
         claimId: string;
         backed: boolean;
-        sourceRefs: SourceRef[];
+        sourceRefs: LifeEvidenceSourceRef[];
     }>;
 }
 export interface LifeEvidenceReadModel {
@@ -24,7 +24,7 @@ export interface LifeEvidenceReadModel {
     platformId?: string;
     summary: string;
     rawContentRef?: string;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     sensitivity: import("../life-evidence/types.js").Sensitivity;
     confidence: number;
     tags: string[];
@@ -35,11 +35,11 @@ export interface LifeEvidenceSnapshot {
     generatedAt: string;
     windowStart: string;
     windowEnd: string;
-    evidenceRefs: SourceRef[];
+    evidenceRefs: LifeEvidenceSourceRef[];
     platformEvents: LifeEvidenceReadModel[];
     workEvents: LifeEvidenceReadModel[];
     userInteractionEvents: LifeEvidenceReadModel[];
-    quietArtifacts: SourceRef[];
+    quietArtifacts: LifeEvidenceSourceRef[];
     coverage: SourceCoverage;
     empty: boolean;
 }
@@ -47,12 +47,12 @@ export interface ContinuitySnapshot {
     snapshotId: string;
     generatedAt: string;
     lastHeartbeatAt?: string;
-    recentDecisionRefs: SourceRef[];
-    openObligations: SourceRef[];
+    recentDecisionRefs: LifeEvidenceSourceRef[];
+    openObligations: LifeEvidenceSourceRef[];
     quietDebt: {
         hasUnprocessedEvidence: boolean;
         oldestUnprocessedEvidenceAt?: string;
         pendingCount: number;
     };
-    fallbackRefs: SourceRef[];
+    fallbackRefs: LifeEvidenceSourceRef[];
 }

package/runtime/storage/user-interest/types.d.ts

@@ -3,7 +3,7 @@
  *
  * Test coverage: tests/unit/storage/user-interest-snapshot.test.ts
  */
-import type { SourceRef } from "../life-evidence/types.js";
+import type { LifeEvidenceSourceRef } from "../life-evidence/types.js";
 export type UserInterestStaleness = "fresh" | "stale" | "insufficient";
 export interface UserInterestSignal {
     id: string;
@@ -11,14 +11,14 @@ export interface UserInterestSignal {
     affinity: "positive" | "negative" | "watching" | "unknown";
     reason: string;
     confidence: number;
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     updatedAt: string;
 }
 export interface UserInterestSnapshot {
     snapshotId: string;
     generatedAt: string;
     signals: UserInterestSignal[];
-    sourceRefs: SourceRef[];
+    sourceRefs: LifeEvidenceSourceRef[];
     confidence: number;
     staleness: UserInterestStaleness;
     missingReasons?: string[];

package/runtime/storage/v8-state-stores.d.ts

@@ -120,7 +120,6 @@ export declare function writeDreamConsolidationRun(db: StateDatabase, row: Omit<
  */
 export declare function updateDreamConsolidationRunStatus(db: StateDatabase, id: string, status: DreamConsolidationRunRecord["status"], options?: {
     reason?: DreamConsolidationRunRecord["reason"];
-    lifecycleStatus?: DreamConsolidationRunRecord["lifecycleStatus"];
     payloadJson?: string;
 }): Promise<{
     id: string;
@@ -133,6 +132,14 @@ export declare function readDreamConsolidationRunsByQuietId(db: StateDatabase, q
     rows: DreamConsolidationRunRecord[];
     degraded?: DegradedOperationResult;
 }>;
+/**
+ * Read the most recent DreamConsolidationRun globally, filtered by status.
+ * Used to enforce the 7-day Dream interval across Quiet review IDs.
+ */
+export declare function readLatestDreamConsolidationRunByStatus(db: StateDatabase, statuses: DreamConsolidationRunRecord["status"][]): Promise<{
+    row?: DreamConsolidationRunRecord;
+    degraded?: DegradedOperationResult;
+}>;
 export declare function writeLongTermMemoryProjection(db: StateDatabase, row: Omit<NewLongTermMemoryProjectionRecord, "sourceRefsJson"> & {
     sourceRefs: SourceRef[];
 }): Promise<{