@ornexus/neocortex 4.59.1

package/packages/client/dist/continuity/continuity-client-state-store.d.ts

@@ -0,0 +1,183 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.05 -- Thin-client continuity state snapshots and operation-log apply.
+ */
+import { type ContinuitySqliteAdapter, type ContinuitySqliteAdapterLoadResult, type ContinuitySqliteStore } from './sqlite-store.js';
+export declare const CONTINUITY_CLIENT_SCHEMA_VERSION: 1;
+export declare const CONTINUITY_CLIENT_CONTRACT_VERSION: "continuity-v1";
+export declare const CONTINUITY_CLIENT_REASON_CODES: Readonly<{
+    readonly OK: "continuity-ok";
+    readonly INVALID_SCHEMA_VERSION: "invalid-schema-version";
+    readonly INVALID_CONTRACT_VERSION: "invalid-contract-version";
+    readonly UNKNOWN_OPERATION_REQUIRED: "unknown-operation-required";
+    readonly UNKNOWN_OPERATION_IGNORED: "unknown-operation-ignored";
+    readonly DUPLICATE_OPERATION_ID: "duplicate-operation-id";
+    readonly IDEMPOTENCY_REPLAY: "idempotency-replay";
+    readonly UNSAFE_FIELD_REJECTED: "unsafe-field-rejected";
+    readonly SQLITE_ADAPTER_UNAVAILABLE: "sqlite-adapter-unavailable";
+    readonly SQLITE_INTEGRITY_FAILED: "sqlite-integrity-failed";
+    readonly SQLITE_MUTATION_FAILED: "sqlite-mutation-failed";
+}>;
+export type ContinuityClientReasonCode = (typeof CONTINUITY_CLIENT_REASON_CODES)[keyof typeof CONTINUITY_CLIENT_REASON_CODES] | 'sqlite-migration-failed' | 'sqlite-migration-conflict' | 'sqlite-foreign-key-failed' | 'sqlite-public-safety-rejected' | 'sqlite-mutation-blocked';
+export interface ContinuityRedactionEvidence {
+    readonly field: string;
+    readonly reason: 'unsafe_key' | 'raw_log' | 'prompt_body' | 'private_url' | 'secret' | 'protected_field' | 'unknown_required_operation';
+    readonly evidence: 'key-denied' | 'value-denied' | 'operation-denied';
+    readonly publicSafe: true;
+}
+export interface ContinuityApplyResult {
+    readonly ok: true;
+    readonly appliedOperationIds: readonly string[];
+    readonly ignoredOperationIds: readonly string[];
+    readonly reasonCodes: readonly ContinuityClientReasonCode[];
+    readonly redactions: readonly ContinuityRedactionEvidence[];
+    readonly publicSafe: true;
+}
+export interface ContinuitySnapshotJobSummary {
+    readonly jobId: string;
+    readonly kind: string;
+    readonly status: string;
+    readonly publicSummary: string;
+    readonly createdAt?: string;
+    readonly updatedAt: string;
+    readonly nextRunAt?: string;
+    readonly reasonCode?: string;
+    readonly counts?: Readonly<Record<string, number>>;
+    readonly publicSafe: true;
+}
+export interface ContinuitySnapshotStaleLeaseSummary {
+    readonly leaseId: string;
+    readonly jobId: string;
+    readonly runnerId: string;
+    readonly expiresAt: string;
+    readonly publicSafe: true;
+}
+export interface ContinuitySnapshotReceiptRef {
+    readonly receiptId: string;
+    readonly jobId: string;
+    readonly operationId?: string;
+    readonly status: string;
+    readonly reasonCode?: string;
+    readonly createdAt: string;
+    readonly publicSafe: true;
+}
+export interface ContinuitySnapshotEventRef {
+    readonly eventId: string;
+    readonly jobId: string;
+    readonly operationId?: string;
+    readonly type: string;
+    readonly publicSummary: string;
+    readonly reasonCode?: string;
+    readonly createdAt: string;
+    readonly publicSafe: true;
+}
+export interface ContinuitySnapshotCompactContextRef {
+    readonly snapshotId: string;
+    readonly jobId?: string;
+    readonly operationId?: string;
+    readonly capturedAt: string;
+    readonly publicSummary: string;
+    readonly summaryHash?: string;
+    readonly relativePath?: string;
+    readonly retainedRefs: readonly string[];
+    readonly artifactRefs: readonly unknown[];
+    readonly evidenceRefs: readonly unknown[];
+    readonly checkpoint?: Readonly<Record<string, unknown>>;
+    readonly reasonCode?: string;
+    readonly publicSafe: true;
+}
+export interface ContinuitySnapshotCompactContext {
+    readonly preferredSource: 'compact_summary' | 'recent_events';
+    readonly summaries: readonly ContinuitySnapshotCompactContextRef[];
+    readonly publicSafe: true;
+}
+export interface ContinuityClientSnapshot {
+    readonly schemaVersion: typeof CONTINUITY_CLIENT_SCHEMA_VERSION;
+    readonly contractVersion: typeof CONTINUITY_CLIENT_CONTRACT_VERSION;
+    readonly generatedAt: string;
+    readonly store: {
+        readonly schemaVersion: number;
+        readonly readable: true;
+    };
+    readonly jobs: readonly ContinuitySnapshotJobSummary[];
+    readonly counts: Readonly<Record<string, number>>;
+    readonly dueJobCount: number;
+    readonly dueJobs: readonly ContinuitySnapshotJobSummary[];
+    readonly staleLeases: readonly ContinuitySnapshotStaleLeaseSummary[];
+    readonly outbox: Readonly<Record<string, number>>;
+    readonly lastReceipts: readonly ContinuitySnapshotReceiptRef[];
+    readonly lastEvents: readonly ContinuitySnapshotEventRef[];
+    readonly compactContext: ContinuitySnapshotCompactContext;
+    readonly redactions: readonly ContinuityRedactionEvidence[];
+    readonly publicSafe: true;
+}
+export interface ContinuityHardStopSnapshot {
+    readonly schemaVersion: typeof CONTINUITY_CLIENT_SCHEMA_VERSION;
+    readonly contractVersion: typeof CONTINUITY_CLIENT_CONTRACT_VERSION;
+    readonly generatedAt: string;
+    readonly hardStop: true;
+    readonly reasonCodes: readonly ContinuityClientReasonCode[];
+    readonly publicSafe: true;
+}
+export type ContinuitySnapshotForInvoke = ContinuityClientSnapshot | ContinuityHardStopSnapshot;
+export interface OpenContinuityClientStateStoreOptions {
+    readonly projectRoot: string;
+    readonly adapter?: ContinuitySqliteAdapter;
+    readonly adapterLoader?: () => Promise<ContinuitySqliteAdapterLoadResult>;
+    readonly now?: () => string;
+}
+export interface ContinuitySnapshotOptions {
+    readonly nowIso?: string;
+    readonly jobLimit?: number;
+    readonly dueJobLimit?: number;
+    readonly staleLeaseLimit?: number;
+    readonly receiptLimit?: number;
+    readonly eventLimit?: number;
+    readonly snapshotLimit?: number;
+}
+interface ContinuityOperationLogLike {
+    readonly schemaVersion?: unknown;
+    readonly contractVersion?: unknown;
+    readonly jobId?: unknown;
+    readonly operations?: unknown;
+    readonly metadata?: unknown;
+    readonly publicSafe?: unknown;
+}
+export declare class ContinuityClientStateStoreError extends Error {
+    readonly reasonCodes: readonly ContinuityClientReasonCode[];
+    readonly redactions: readonly ContinuityRedactionEvidence[];
+    readonly mutationBlocked: boolean;
+    constructor(message: string, reasonCodes: readonly ContinuityClientReasonCode[], options?: {
+        readonly redactions?: readonly ContinuityRedactionEvidence[];
+        readonly mutationBlocked?: boolean;
+        readonly cause?: unknown;
+    });
+}
+export declare function continuitySqliteExists(projectRoot: string): boolean;
+export declare function createContinuityHardStopSnapshot(reasonCodes: readonly ContinuityClientReasonCode[], nowIso?: string): ContinuityHardStopSnapshot;
+export declare function openContinuityClientStateStore(options: OpenContinuityClientStateStoreOptions): Promise<ContinuityClientStateStore>;
+export declare class ContinuityClientStateStore {
+    private readonly store;
+    private readonly now;
+    constructor(store: ContinuitySqliteStore, now?: () => string);
+    close(): void;
+    collectSnapshot(options?: ContinuitySnapshotOptions): ContinuityClientSnapshot;
+    applyStateUpdate(update: unknown): ContinuityApplyResult;
+    applyOperationLog(log: ContinuityOperationLogLike): ContinuityApplyResult;
+    private applyKnownOperation;
+    private applyCompactContext;
+    private applyCreateJob;
+    private applyUpdateJobStatus;
+    private applyAppendEvent;
+    private applyAppendReceipt;
+    private applyUpsertGoalCampaign;
+    private applyUpsertGoalLedgerItem;
+    private applyUpsertVerifier;
+    private applyUpsertReviewGate;
+    private applyOutbox;
+    private recordAppliedAudit;
+    private recordIgnoredAuditIfPossible;
+}
+export {};

package/packages/client/dist/continuity/continuity-client-state-store.js

@@ -0,0 +1 @@
+import{existsSync as X}from"node:fs";import{createHash as ee}from"node:crypto";import{ContinuitySqliteStoreError as te,continuitySqliteStorePath as ne,openContinuitySqliteStore as oe}from"./sqlite-store.js";const b=1,C="continuity-v1",p=Object.freeze({OK:"continuity-ok",INVALID_SCHEMA_VERSION:"invalid-schema-version",INVALID_CONTRACT_VERSION:"invalid-contract-version",UNKNOWN_OPERATION_REQUIRED:"unknown-operation-required",UNKNOWN_OPERATION_IGNORED:"unknown-operation-ignored",DUPLICATE_OPERATION_ID:"duplicate-operation-id",IDEMPOTENCY_REPLAY:"idempotency-replay",UNSAFE_FIELD_REJECTED:"unsafe-field-rejected",SQLITE_ADAPTER_UNAVAILABLE:"sqlite-adapter-unavailable",SQLITE_INTEGRITY_FAILED:"sqlite-integrity-failed",SQLITE_MUTATION_FAILED:"sqlite-mutation-failed"}),ae=new Set(["create_job","update_job_status","append_event","append_receipt","upsert_goal_campaign","upsert_goal_ledger_item","upsert_verifier","upsert_review_gate","schedule_next_tick","acquire_lease","release_lease","compact_context","enqueue_outbox","append_outbox"]),re=new Set(["schemaVersion","contractVersion","jobId","operationId","idempotencyKey","goalId","loopId","campaignId","itemId","ledgerItemIds","verifierId","verifierIds","gateId","reviewGateIds","runnerId","leaseId","status","reasonCode","reasonCodes","counts","hashes","relativePaths","artifactRefs","evidenceRefs","validationRefs","registryRefs","storyIds","epicIds","debtIds","iteration","durationMs","retryCount","nextTickAt","publicSummary","redactionEvidence"]),w=/(raw[_-]?logs?|prompt(?:[_-]?(?:body|text))?|private[_-]?urls?|secret|token|password|protected(?:[_-]?(?:field|body|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|authorization|api[_-]?key|license[_-]?key)/i,K=/\bhttps?:\/\/\S+/i,M=/(ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=)/i,q=/(raw[_-]?log|transcript|stack trace|stderr:|stdout:)/i,F=/(prompt[_-]?body|system prompt|workflow body|step body)/i,B=/(PROTECTED_|_PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY)/i,L=240,z=2400,ie=40,se=20,ce=40,de=20,P=80;class f extends Error{reasonCodes;redactions;mutationBlocked;constructor(e,n,o={}){super(e),this.name="ContinuityClientStateStoreError",this.reasonCodes=E(n),this.redactions=o.redactions??[],this.mutationBlocked=o.mutationBlocked??!1,this.cause=o.cause}}function we(t){return X(ne(t))}function Pe(t,e=new Date().toISOString()){return{schemaVersion:b,contractVersion:C,generatedAt:e,hardStop:!0,reasonCodes:E(t),publicSafe:!0}}async function Ve(t){const e=await oe({projectRoot:t.projectRoot,adapter:t.adapter,adapterLoader:t.adapterLoader,now:t.now});return new ue(e,t.now??(()=>new Date().toISOString()))}class ue{store;now;constructor(e,n=()=>new Date().toISOString()){this.store=e,this.now=n}close(){this.store.close()}collectSnapshot(e={}){try{const n=e.nowIso??this.now(),o=this.store.collectSnapshotRows({nowIso:n,jobLimit:e.jobLimit??20,staleLeaseLimit:e.staleLeaseLimit??10,receiptLimit:e.receiptLimit??10,eventLimit:e.eventLimit??10,snapshotLimit:e.snapshotLimit??5}),a=this.store.listDueJobs({nowIso:n,limit:e.dueJobLimit??10}),s=be(o.receipts).slice(0,20);return{schemaVersion:b,contractVersion:C,generatedAt:n,store:{schemaVersion:o.schemaVersion,readable:!0},jobs:o.jobs.map(G),counts:o.counts,dueJobCount:o.counts.dueJobs??0,dueJobs:a.map(G),staleLeases:o.staleLeases.map(i=>({leaseId:d(i.lease_id,100),jobId:d(i.job_id,100),runnerId:d(i.runner_id,100),expiresAt:d(i.expires_at,80),publicSafe:!0})),outbox:{total:o.counts.outbox??0,pending:o.outboxCounts.pending??0,failed:o.outboxCounts.failed??0,deadLetter:o.outboxCounts.dead_letter??0,sent:o.outboxCounts.sent??0,acked:o.outboxCounts.acked??0},lastReceipts:o.receipts.map(i=>({receiptId:d(i.receipt_id,100),jobId:d(i.job_id,100),...i.operation_id?{operationId:d(i.operation_id,100)}:{},status:d(i.status,40),...i.reason_code?{reasonCode:d(i.reason_code,80)}:{},createdAt:d(i.created_at,80),publicSafe:!0})),lastEvents:o.events.map(i=>({eventId:d(i.event_id,100),jobId:d(i.job_id,100),operationId:d(i.operation_id,100),type:d(i.type,80),publicSummary:d(i.summary,L),...i.reason_code?{reasonCode:d(i.reason_code,80)}:{},createdAt:d(i.created_at,80),publicSafe:!0})),compactContext:me(o.stateSnapshots),redactions:s,publicSafe:!0}}catch(n){throw Z(n,"Failed to collect continuity snapshot.")}}applyStateUpdate(e){const n=ye(e),o=[],a=[],s=[],i=[];for(const u of n){const m=this.applyOperationLog(u);o.push(...m.appliedOperationIds),a.push(...m.ignoredOperationIds),s.push(...m.reasonCodes),i.push(...m.redactions)}return{ok:!0,appliedOperationIds:E(o),ignoredOperationIds:E(a),reasonCodes:E(s.length>0?s:[p.OK]),redactions:i,publicSafe:!0}}applyOperationLog(e){const n=_e(e),o=[],a=[...n.ignoredOperationIds],s=[...n.reasonCodes],i=[...n.redactions];try{this.store.runInTransaction(()=>{for(const u of n.operations){if(this.store.hasOperationRef(u.operationId,u.idempotencyKey)){a.push(u.operationId),s.push(p.IDEMPOTENCY_REPLAY);continue}this.applyKnownOperation(u,n.logMetadata),o.push(u.operationId),u.type!=="append_receipt"&&this.recordAppliedAudit(u)}for(const u of n.skippedOperations)this.recordIgnoredAuditIfPossible(u,p.UNKNOWN_OPERATION_IGNORED)})}catch(u){throw Z(u,"Failed to apply continuity operation log atomically.")}return{ok:!0,appliedOperationIds:E(o),ignoredOperationIds:E(a),reasonCodes:E(s.length>0?s:[p.OK]),redactions:i,publicSafe:!0}}applyKnownOperation(e,n){switch(e.type){case"create_job":this.applyCreateJob(e,n);return;case"update_job_status":this.applyUpdateJobStatus(e);return;case"append_event":this.applyAppendEvent(e);return;case"append_receipt":this.applyAppendReceipt(e);return;case"upsert_goal_campaign":this.applyUpsertGoalCampaign(e);return;case"schedule_next_tick":this.store.scheduleNextTick({jobId:e.jobId,scheduledAt:r(e,"scheduledAt"),updatedAt:e.createdAt,reasonCode:c(e,"reasonCode")});return;case"acquire_lease":this.store.acquireLease({leaseId:r(e,"leaseId"),jobId:e.jobId,runnerId:r(e,"runnerId"),acquiredAt:r(e,"acquiredAt"),expiresAt:r(e,"expiresAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:h(e.metadata,"operation.metadata")});return;case"release_lease":this.store.releaseLease({leaseId:r(e,"leaseId"),releasedAt:r(e,"releasedAt"),reasonCode:c(e,"reasonCode")});return;case"compact_context":this.applyCompactContext(e);return;case"upsert_goal_ledger_item":this.applyUpsertGoalLedgerItem(e);return;case"upsert_verifier":this.applyUpsertVerifier(e);return;case"upsert_review_gate":this.applyUpsertReviewGate(e);return;case"enqueue_outbox":case"append_outbox":this.applyOutbox(e);return;default:throw new f(`Unknown continuity operation ${e.type}.`,[p.UNKNOWN_OPERATION_REQUIRED],{mutationBlocked:!0})}}applyCompactContext(e){const n=D(r(e,"summaryHash"),"compact_context.summaryHash"),o=W(e.retainedRefs,"compact_context.retainedRefs",ie),a=Se(c(e,"publicSummary")??`Context compacted with ${o.length} retained public refs.`),s=Re(e),i=Oe(e),u=W(e.decisionLogRefs,"compact_context.decisionLogRefs",de),m=Ne(e,o,s,i),l=E([...o,...u,...s.map(_=>_.relativePath),...i.map(_=>_.relativePath)]).slice(0,P),v=Te(a),O=c(e,"reasonCode")??"context-compacted",k={schemaVersion:b,contractVersion:C,jobId:e.jobId,operationId:e.operationId,reasonCode:O,publicSummary:a,counts:{retainedRefs:o.length,artifactRefs:s.length,evidenceRefs:i.length,decisionLogRefs:u.length,...T(e,"inputTokens")!==void 0?{inputContextUnits:T(e,"inputTokens")}:{},...T(e,"outputTokens")!==void 0?{outputContextUnits:T(e,"outputTokens")}:{},summaryChars:a.length},hashes:{summary:n,persistedSummary:v},relativePaths:l,artifactRefs:s,evidenceRefs:i,validationRefs:u,redactionEvidence:e.redactions??[],checkpoint:m};for(const[_,g]of s.entries())this.store.recordArtifact({artifactId:`artifact-${R(e.operationId)}-${_+1}`,jobId:e.jobId,kind:g.kind,relativePath:g.relativePath,sha256:g.sha256,summary:g.publicSummary,createdAt:e.createdAt,operationId:`${e.operationId}:artifact:${_+1}`,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:artifact:${_+1}`:void 0,metadata:{schemaVersion:b,contractVersion:C,jobId:e.jobId,operationId:e.operationId,reasonCode:O,hashes:g.sha256?{artifact:g.sha256}:{},relativePaths:[g.relativePath],publicSummary:g.publicSummary}});this.store.recordStateSnapshot({snapshotId:`snapshot-${R(e.operationId)}`,jobId:e.jobId,kind:"context_compaction",relativePath:s.find(_=>_.kind==="context_summary")?.relativePath,sha256:n,summary:a,capturedAt:e.createdAt,operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:k}),this.store.appendEvent({eventId:`event-${R(e.operationId)}-context-compacted`,jobId:e.jobId,operationId:`${e.operationId}:event`,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:event`:void 0,sequence:e.sequence,type:"context_compacted",summary:`Context compaction checkpoint ${m.checkpointId} persisted with ${l.length} public refs.`,reasonCode:O,createdAt:e.createdAt,metadata:{schemaVersion:b,contractVersion:C,jobId:e.jobId,operationId:e.operationId,reasonCode:O,counts:k.counts,hashes:k.hashes,relativePaths:l,artifactRefs:s.map(_=>_.relativePath),evidenceRefs:i,publicSummary:a}})}applyCreateJob(e,n){const o=N(e,"job");this.store.recordJob({jobId:r(o,"jobId"),kind:r(o,"kind"),status:r(o,"status"),createdAt:r(o,"createdAt"),updatedAt:r(o,"updatedAt"),summary:c(o,"summary"),reasonCode:c(o,"reasonCode"),nextRunAt:c(o,"nextRunAt"),goalId:c(o,"goalId"),loopId:c(o,"loopId"),campaignId:c(o,"campaignId"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:h(y(o,"metadata")??y(e,"metadata")??{...n},"job.metadata")})}applyUpdateJobStatus(e){this.store.updateJobStatus({jobId:e.jobId,status:r(e,"status"),updatedAt:e.createdAt,reasonCode:c(e,"reasonCode")})}applyAppendEvent(e){const n=N(e,"event");this.store.appendEvent({eventId:r(n,"eventId"),jobId:r(n,"jobId"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,sequence:e.sequence,type:r(n,"type"),summary:r(n,"summary"),reasonCode:c(n,"reasonCode"),createdAt:r(n,"createdAt"),metadata:h(y(n,"metadata"),"event.metadata")})}applyAppendReceipt(e){const n=N(e,"receipt"),o=c(n,"operationId")??e.operationId;this.store.appendReceipt({receiptId:r(n,"receiptId"),jobId:r(n,"jobId"),operationId:o,idempotencyKey:e.idempotencyKey,status:r(n,"status"),reasonCode:c(n,"reasonCode"),appliedOperationIds:j(n.appliedOperationIds),ignoredOperationIds:j(n.ignoredOperationIds),createdAt:r(n,"createdAt"),metadata:h(y(n,"metadata"),"receipt.metadata")})}applyUpsertGoalCampaign(e){const n=N(e,"campaign");this.store.upsertGoalCampaign({campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),status:r(n,"status"),title:c(n,"title"),publicSummary:c(n,"publicSummary"),reasonCode:c(n,"reasonCode"),createdAt:r(n,"createdAt"),updatedAt:r(n,"updatedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:h(y(n,"metadata"),"campaign.metadata")})}applyUpsertGoalLedgerItem(e){const n=N(e,"item");this.store.upsertGoalLedgerItem({itemId:r(n,"itemId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),itemType:r(n,"type"),status:r(n,"status"),summary:r(n,"publicSummary"),reasonCode:c(n,"reasonCode"),createdAt:e.createdAt,updatedAt:r(n,"updatedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:h(y(n,"metadata"),"item.metadata")})}applyUpsertVerifier(e){const n=N(e,"verifier");this.store.upsertGoalVerifier({verifierId:r(n,"verifierId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),kind:r(n,"kind"),status:r(n,"status"),summary:c(n,"publicSummary"),reasonCode:c(n,"reasonCode"),lastCheckedAt:c(n,"lastCheckedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:h(y(n,"metadata"),"verifier.metadata")})}applyUpsertReviewGate(e){const n=N(e,"reviewGate");this.store.upsertGoalReviewGate({gateId:r(n,"gateId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),status:r(n,"status"),summary:c(n,"publicSummary"),required:ge(n,"required")??!0,reasonCode:c(n,"reasonCode"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:h(y(n,"metadata"),"reviewGate.metadata")})}applyOutbox(e){const n=y(e,"outbox")??e;this.store.enqueueOutbox({outboxId:c(n,"outboxId")??`outbox-${R(e.operationId)}`,jobId:c(n,"jobId")??e.jobId,operationId:e.operationId,idempotencyKey:e.idempotencyKey,type:c(n,"type")===e.type?"continuity_event":r(n,"type"),status:c(n,"status"),payload:h(y(n,"payload")??y(e,"metadata")??{},"outbox.payload"),retryCount:T(n,"retryCount"),nextAttemptAt:c(n,"nextAttemptAt"),lastErrorCode:c(n,"lastErrorCode"),createdAt:c(n,"createdAt")??e.createdAt,updatedAt:c(n,"updatedAt")??e.createdAt})}recordAppliedAudit(e){this.store.recordOperationAudit({receiptId:`receipt-${R(e.operationId)}`,jobId:e.jobId,operationId:e.operationId,idempotencyKey:`audit-${e.idempotencyKey??e.operationId}`,status:"applied",reasonCode:p.OK,appliedOperationIds:[e.operationId],createdAt:e.createdAt,metadata:{schemaVersion:b,contractVersion:C,jobId:e.jobId,operationId:e.operationId,status:"applied",reasonCode:p.OK}})}recordIgnoredAuditIfPossible(e,n){this.store.jobExists(e.jobId)&&this.store.recordOperationAudit({receiptId:`receipt-${R(e.operationId)}-ignored`,jobId:e.jobId,operationId:e.operationId,idempotencyKey:`audit-${e.idempotencyKey??e.operationId}-ignored`,status:"ignored",reasonCode:n,ignoredOperationIds:[e.operationId],createdAt:e.createdAt,metadata:{schemaVersion:b,contractVersion:C,jobId:e.jobId,operationId:e.operationId,status:"ignored",reasonCode:n}})}}function G(t){const e=pe(t.metadata_json,t.iteration);return S(e,"goalLedgerItems","goal_ledger_item_count"in t?t.goal_ledger_item_count:void 0),S(e,"blockedGoalLedgerItems","blocked_goal_ledger_item_count"in t?t.blocked_goal_ledger_item_count:void 0),S(e,"securityIssuesBlocked","security_issue_blocked_count"in t?t.security_issue_blocked_count:void 0),S(e,"goalVerifiers","goal_verifier_count"in t?t.goal_verifier_count:void 0),S(e,"failedVerifiers","failed_verifier_count"in t?t.failed_verifier_count:void 0),S(e,"unavailableVerifiers","unavailable_verifier_count"in t?t.unavailable_verifier_count:void 0),S(e,"goalReviewGates","goal_review_gate_count"in t?t.goal_review_gate_count:void 0),S(e,"failedRequiredReviewGates","failed_required_review_gate_count"in t?t.failed_required_review_gate_count:void 0),{jobId:d(t.job_id,80),kind:d(t.kind,40),status:d(t.status,40),publicSummary:d(t.summary??"No public summary recorded.",L),createdAt:d(t.created_at,80),updatedAt:d(t.updated_at,80),...t.next_run_at?{nextRunAt:d(t.next_run_at,80)}:{},...t.reason_code?{reasonCode:d(t.reason_code,80)}:{},...Object.keys(e).length>0?{counts:e}:{},publicSafe:!0}}function S(t,e,n){typeof n=="number"&&Number.isFinite(n)&&n>0&&(t[e]=Math.floor(n))}function pe(t,e){const n={};if(t)try{const o=JSON.parse(t),a=I(o)&&I(o.counts)?o.counts:void 0;if(a)for(const[s,i]of Object.entries(a))typeof i=="number"&&Number.isFinite(i)&&(n[s]=Math.max(0,Math.floor(i)))}catch{}return typeof e=="number"&&Number.isFinite(e)&&(n.iteration=Math.max(0,Math.floor(e))),n}function me(t){const e=t.map(le).filter(n=>!!n);return{preferredSource:e.length>0?"compact_summary":"recent_events",summaries:e,publicSafe:!0}}function le(t){const e=fe(t.metadata_json),n=I(e.hashes)?e.hashes:{},o=typeof n.summary=="string"?n.summary:t.sha256??void 0,a=typeof e.reasonCode=="string"?d(e.reasonCode,80):void 0;return{snapshotId:d(t.snapshot_id,120),...t.job_id?{jobId:d(t.job_id,100)}:{},...t.operation_id?{operationId:d(t.operation_id,120)}:{},capturedAt:d(t.captured_at,80),publicSummary:d(t.summary??"Context compacted with public-safe refs.",z),...o?{summaryHash:d(o,120)}:{},...t.relative_path?{relativePath:d(t.relative_path,240)}:{},retainedRefs:Ie(e.relativePaths),artifactRefs:H(e.artifactRefs),evidenceRefs:H(e.evidenceRefs),...I(e.checkpoint)?{checkpoint:J(e.checkpoint)}:{},...a?{reasonCode:a}:{},publicSafe:!0}}function fe(t){if(!t)return{};try{const e=JSON.parse(t);return I(e)?e:{}}catch{return{}}}function Ie(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"&&e.length>0).map(e=>d(e,240)).slice(0,P):[]}function H(t){return Array.isArray(t)?t.map(V).filter(e=>e!==void 0).slice(0,P):[]}function J(t){const e={};for(const[n,o]of Object.entries(t).slice(0,20)){if(w.test(n))continue;const a=V(o);a!==void 0&&(e[d(n,80)]=a)}return e}function V(t){if(!x(t)){if(typeof t=="string")return d(t,240);if(typeof t=="number"&&Number.isFinite(t))return Math.floor(t);if(typeof t=="boolean"||t===null)return t;if(Array.isArray(t))return t.map(V).filter(n=>n!==void 0).slice(0,20);if(I(t))return J(t)}}function ye(t){return I(t)?Array.isArray(t.operationLogs)?t.operationLogs.filter(I):I(t.operationLog)?[t.operationLog]:Array.isArray(t.operations)?[t]:[]:[]}function _e(t){const e=[],n=[],o=[],a=[],s=[],i=new Map;if(t.schemaVersion!==b)throw new f("Invalid continuity operation log schema version.",[p.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});if(t.contractVersion!==C)throw new f("Invalid continuity operation log contract version.",[p.INVALID_CONTRACT_VERSION],{mutationBlocked:!0});if(t.publicSafe!==!0)throw new f("Continuity operation log is not marked public-safe.",[p.UNSAFE_FIELD_REJECTED],{mutationBlocked:!0});const u=h(y(t,"metadata"),"log.metadata");if(!Array.isArray(t.operations))return{operations:[],skippedOperations:o,ignoredOperationIds:a,reasonCodes:e,redactions:n,logMetadata:u};for(const m of[...t.operations].filter(I).sort(Ce)){const l=he(m),v=U(l),O=i.get(l.operationId);if(O!==void 0){if(O===v){a.push(l.operationId),e.push(p.IDEMPOTENCY_REPLAY);continue}throw n.push({field:"operationId",reason:"unknown_required_operation",evidence:"operation-denied",publicSafe:!0}),new f("Duplicate continuity operation ID with conflicting payload.",[p.DUPLICATE_OPERATION_ID],{redactions:n,mutationBlocked:!0})}if(i.set(l.operationId,v),h(l.metadata,"operation.metadata"),!ae.has(l.type)){const k=m.required===!0;if(m.forwardCompatible===!0&&!k){o.push(l),a.push(l.operationId),e.push(p.UNKNOWN_OPERATION_IGNORED);continue}throw n.push({field:l.type,reason:"unknown_required_operation",evidence:"operation-denied",publicSafe:!0}),new f(`Unknown required continuity operation ${l.type}.`,[p.UNKNOWN_OPERATION_REQUIRED],{redactions:n,mutationBlocked:!0})}s.push(l)}return{operations:s,skippedOperations:o,ignoredOperationIds:a,reasonCodes:e,redactions:n,logMetadata:u}}function he(t){if(t.schemaVersion!==b)throw new f("Invalid continuity operation schema version.",[p.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});if(t.contractVersion!==C)throw new f("Invalid continuity operation contract version.",[p.INVALID_CONTRACT_VERSION],{mutationBlocked:!0});if(t.publicSafe!==!0)throw new f("Continuity operation is not marked public-safe.",[p.UNSAFE_FIELD_REJECTED],{mutationBlocked:!0});const e=r(t,"type"),n=r(t,"operationId"),o=r(t,"jobId"),a=Ee(t,"sequence"),s=r(t,"createdAt");return{...t,type:e,operationId:n,jobId:o,schemaVersion:b,contractVersion:C,sequence:a,createdAt:s,idempotencyKey:c(t,"idempotencyKey"),metadata:y(t,"metadata"),publicSafe:!0}}function h(t,e){if(!t)return{};const n={},o=[];for(const[a,s]of Object.entries(t)){const i=Ae(a),u=x(s),m=i??u;if(m){o.push({field:`${e}.${a}`,reason:m,evidence:i?"key-denied":"value-denied",publicSafe:!0});continue}n[a]=s}if(o.length>0)throw new f(`Continuity metadata rejected unsafe public fields at ${e}.`,[p.UNSAFE_FIELD_REJECTED],{redactions:o,mutationBlocked:!0});return n}function Ae(t){return!re.has(t)||w.test(t)?"unsafe_key":null}function x(t){if(typeof t=="string")return K.test(t)?"private_url":M.test(t)?"secret":F.test(t)?"prompt_body":q.test(t)?"raw_log":B.test(t)?"protected_field":null;if(t===null||typeof t=="number"||typeof t=="boolean")return null;if(Array.isArray(t)){for(const e of t){const n=x(e);if(n)return n}return null}if(I(t)){for(const[e,n]of Object.entries(t)){if(w.test(e))return"unsafe_key";const o=x(n);if(o)return o}return null}return"unsafe_key"}function be(t){const e=[];for(const n of t)if(n.metadata_json)try{const a=JSON.parse(n.metadata_json).redactionEvidence;if(!Array.isArray(a))continue;for(const s of a)I(s)&&(typeof s.field!="string"||typeof s.reason!="string"||typeof s.evidence!="string"||e.push({field:d(s.field,120),reason:s.reason,evidence:s.evidence,publicSafe:!0}))}catch{}return e}function Ce(t,e){const n=typeof t.sequence=="number"?t.sequence:0,o=typeof e.sequence=="number"?e.sequence:0;if(n!==o)return n-o;const a=String(t.createdAt??"").localeCompare(String(e.createdAt??""));return a!==0?a:String(t.operationId??"").localeCompare(String(e.operationId??""))}function I(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}function N(t,e){const n=t[e];if(!I(n))throw new f(`Continuity operation missing object field ${e}.`,[p.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function y(t,e){const n=t[e];return I(n)?n:void 0}function r(t,e){const n=t[e];if(typeof n!="string"||n.length===0)throw new f(`Continuity operation missing string field ${e}.`,[p.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function c(t,e){const n=t[e];return typeof n=="string"&&n.length>0?n:void 0}function Ee(t,e){const n=t[e];if(typeof n!="number"||!Number.isFinite(n))throw new f(`Continuity operation missing numeric field ${e}.`,[p.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function T(t,e){const n=t[e];return typeof n=="number"&&Number.isFinite(n)?n:void 0}function ge(t,e){const n=t[e];return typeof n=="boolean"?n:void 0}function j(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"&&e.length>0):[]}function Y(t){return Array.isArray(t)?t.filter(I):[]}function Se(t){return A(t,z,"compact_context.publicSummary")}function A(t,e,n){const o=t.trim();if(!o)throw new f(`Continuity compaction missing public text at ${n}.`,[p.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});const a=x(o);if(a)throw new f(`Continuity compaction rejected unsafe public text at ${n}.`,[p.UNSAFE_FIELD_REJECTED],{redactions:[{field:n,reason:a,evidence:"value-denied",publicSafe:!0}],mutationBlocked:!0});return o.length<=e?o:`${o.slice(0,e)}\u2026[TRUNCATED:${o.length-e}]`}function D(t,e){return A(t,120,e)}function W(t,e,n){return E(j(t).map((o,a)=>$(o,`${e}[${a}]`))).slice(0,n)}function $(t,e){const n=A(t,240,e).replace(/\\/g,"/"),o=n.split("/").filter(Boolean),a=/^[A-Za-z]:\//.test(n);if(n.startsWith("/")||n.startsWith("~")||n.includes("://")||a||o.includes(".."))throw new f(`Continuity compaction rejected non-relative ref at ${e}.`,[p.UNSAFE_FIELD_REJECTED],{redactions:[{field:e,reason:"private_url",evidence:"value-denied",publicSafe:!0}],mutationBlocked:!0});return n}function Re(t){const e=[],n=y(t,"summaryRef");n&&e.push(Q(n,"compact_context.summaryRef","context_summary"));for(const[a,s]of Y(t.artifactRefs).entries())e.push(Q(s,`compact_context.artifactRefs[${a}]`));const o=new Set;return e.filter(a=>{const s=`${a.kind}:${a.relativePath}`;return o.has(s)?!1:(o.add(s),!0)}).slice(0,se)}function Q(t,e,n="context_summary"){const o=A(c(t,"kind")??n,60,`${e}.kind`),a=$(r(t,"relativePath"),`${e}.relativePath`),s=c(t,"sha256"),i=c(t,"publicSummary");return{kind:o,relativePath:a,...s?{sha256:D(s,`${e}.sha256`)}:{},...i?{publicSummary:A(i,L,`${e}.publicSummary`)}:{},publicSafe:!0}}function Oe(t){return Y(t.evidenceIndex).map((e,n)=>{const o=`compact_context.evidenceIndex[${n}]`,a=$(r(e,"relativePath"),`${o}.relativePath`),s=c(e,"refId")??`evidence-${R(a)}`,i=c(e,"reasonCode")??c(t,"reasonCode")??"context-compacted",u=c(e,"sha256"),m=c(e,"publicSummary");return{refId:A(s,120,`${o}.refId`),relativePath:a,reasonCode:A(i,80,`${o}.reasonCode`),...u?{sha256:D(u,`${o}.sha256`)}:{},...m?{publicSummary:A(m,L,`${o}.publicSummary`)}:{},publicSafe:!0}}).slice(0,ce)}function Ne(t,e,n,o){const a=y(t,"checkpoint")??{},s=c(a,"checkpointId")??`checkpoint-${R(t.operationId)}`,i=c(a,"capturedAt")??t.createdAt,u={checkpointId:A(s,120,"compact_context.checkpoint.checkpointId"),capturedAt:A(i,80,"compact_context.checkpoint.capturedAt"),retainedRefCount:e.length,artifactRefCount:n.length,evidenceRefCount:o.length,publicSafe:!0};for(const m of["eventCursor","receiptCursor"]){const l=c(a,m);l&&(u[m]=A(l,120,`compact_context.checkpoint.${m}`))}for(const m of["recentEventCount","recentReceiptCount"]){const l=T(a,m);l!==void 0&&(u[m]=Math.max(0,Math.floor(l)))}return u}function Te(t){return`sha256:${ee("sha256").update(t).digest("hex")}`}function E(t){return Array.from(new Set(t))}function R(t){return t.replace(/[^a-z0-9_.:-]+/gi,"-").slice(0,120)}function d(t,e){const n=ke(t);return n.length<=e?n:`${n.slice(0,e)}\u2026[TRUNCATED:${n.length-e}]`}function ke(t){return K.test(t)||M.test(t)||q.test(t)||F.test(t)||B.test(t)?"[REDACTED]":t}function U(t){return Array.isArray(t)?`[${t.map(U).join(",")}]`:I(t)?`{${Object.keys(t).sort().map(e=>`${JSON.stringify(e)}:${U(t[e])}`).join(",")}}`:JSON.stringify(t)}function Z(t,e){if(t instanceof f)return t;if(t instanceof te)return new f(t.message,[t.reasonCode],{mutationBlocked:t.mutationBlocked,cause:t});const n=t instanceof Error?t.message:String(t);return new f(`${e} ${n}`,[p.SQLITE_MUTATION_FAILED],{cause:t})}export{C as CONTINUITY_CLIENT_CONTRACT_VERSION,p as CONTINUITY_CLIENT_REASON_CODES,b as CONTINUITY_CLIENT_SCHEMA_VERSION,ue as ContinuityClientStateStore,f as ContinuityClientStateStoreError,we as continuitySqliteExists,Pe as createContinuityHardStopSnapshot,Ve as openContinuityClientStateStore};

package/packages/client/dist/continuity/invoke-hooks.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.05 -- invoke.ts hooks for client-owned continuity SQLite state.
+ */
+import { type ContinuityClientReasonCode, type ContinuitySnapshotForInvoke } from './continuity-client-state-store.js';
+export interface ContinuityPersistResult {
+    readonly ok: boolean;
+    readonly appliedOperationIds: readonly string[];
+    readonly ignoredOperationIds: readonly string[];
+    readonly reasonCodes: readonly ContinuityClientReasonCode[];
+    readonly publicSafe: true;
+    readonly error?: string;
+}
+export declare function isContinuityTrigger(args: string): boolean;
+export declare function readContinuityForRequest(args: string, projectRoot: string, nowIso?: string): Promise<ContinuitySnapshotForInvoke | undefined>;
+export declare function persistContinuityFromResponse(metadata: Record<string, unknown> | undefined, projectRoot: string): Promise<ContinuityPersistResult>;

package/packages/client/dist/continuity/invoke-hooks.js

@@ -0,0 +1 @@
+import{CONTINUITY_CLIENT_REASON_CODES as i,ContinuityClientStateStoreError as l,continuitySqliteExists as s,createContinuityHardStopSnapshot as S,openContinuityClientStateStore as u}from"./continuity-client-state-store.js";const f=/^\s*\*?(goal|loop|jobs|runner)\b/i;function d(e){return f.test(e)}async function C(e,n,r){if(d(e)||s(n))try{const t=await u({projectRoot:n,now:()=>r??new Date().toISOString()});try{return t.collectSnapshot({nowIso:r})}finally{t.close()}}catch(t){const a=p(t);return d(e)||s(n)?S(a,r??new Date().toISOString()):void 0}}async function E(e,n){const r=e?.continuityStateUpdate;if(!r)return{ok:!0,appliedOperationIds:[],ignoredOperationIds:[],reasonCodes:[i.OK],publicSafe:!0};let o;try{o=await u({projectRoot:n});const t=o.applyStateUpdate(r);return{ok:!0,appliedOperationIds:t.appliedOperationIds,ignoredOperationIds:t.ignoredOperationIds,reasonCodes:t.reasonCodes,publicSafe:!0}}catch(t){const a=p(t),c=t instanceof Error?t.message:String(t);return{ok:!1,appliedOperationIds:[],ignoredOperationIds:[],reasonCodes:a,error:c,publicSafe:!0}}finally{o?.close()}}function p(e){if(e instanceof l)return e.reasonCodes;const n=e instanceof Error?e.message:String(e);return/sqlite-adapter-unavailable/i.test(n)?[i.SQLITE_ADAPTER_UNAVAILABLE]:/integrity|corrupt|malformed|not a database/i.test(n)?[i.SQLITE_INTEGRITY_FAILED]:[i.SQLITE_MUTATION_FAILED]}export{d as isContinuityTrigger,E as persistContinuityFromResponse,C as readContinuityForRequest};

package/packages/client/dist/continuity/migrations/001-initial-schema.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.04 -- Initial public-safe Enterprise Continuity Plane SQLite schema.
+ */
+export declare const INITIAL_CONTINUITY_SQLITE_MIGRATION: Readonly<{
+    readonly version: 1;
+    readonly name: "initial-continuity-schema";
+    readonly sql: "\nCREATE TABLE IF NOT EXISTS jobs (\n  job_id TEXT PRIMARY KEY,\n  kind TEXT NOT NULL CHECK (kind IN ('goal', 'loop', 'runner', 'jobs')),\n  status TEXT NOT NULL CHECK (status IN (\n    'draft', 'planned', 'active', 'running', 'waiting_external', 'waiting_human',\n    'backoff', 'paused', 'blocked', 'completed', 'aborted', 'cancelled'\n  )),\n  summary TEXT,\n  reason_code TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  next_run_at TEXT,\n  goal_id TEXT,\n  loop_id TEXT,\n  campaign_id TEXT,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_jobs_status ON jobs(status);\nCREATE INDEX IF NOT EXISTS idx_jobs_next_run_at ON jobs(next_run_at);\nCREATE INDEX IF NOT EXISTS idx_jobs_goal_id ON jobs(goal_id);\nCREATE INDEX IF NOT EXISTS idx_jobs_loop_id ON jobs(loop_id);\n\nCREATE TABLE IF NOT EXISTS job_leases (\n  lease_id TEXT PRIMARY KEY,\n  job_id TEXT NOT NULL,\n  runner_id TEXT NOT NULL,\n  status TEXT NOT NULL DEFAULT 'acquired' CHECK (status IN ('acquired', 'released', 'expired')),\n  acquired_at TEXT NOT NULL,\n  expires_at TEXT NOT NULL,\n  released_at TEXT,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_job_leases_job_id ON job_leases(job_id);\nCREATE INDEX IF NOT EXISTS idx_job_leases_expires_at ON job_leases(expires_at);\nCREATE UNIQUE INDEX IF NOT EXISTS idx_job_leases_active_job\n  ON job_leases(job_id)\n  WHERE released_at IS NULL;\n\nCREATE TABLE IF NOT EXISTS job_events (\n  event_id TEXT PRIMARY KEY,\n  job_id TEXT NOT NULL,\n  operation_id TEXT NOT NULL,\n  idempotency_key TEXT,\n  event_sequence INTEGER,\n  type TEXT NOT NULL,\n  summary TEXT NOT NULL,\n  reason_code TEXT,\n  created_at TEXT NOT NULL,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_job_events_job_id ON job_events(job_id);\nCREATE INDEX IF NOT EXISTS idx_job_events_created_at ON job_events(created_at);\n\nCREATE TABLE IF NOT EXISTS job_receipts (\n  receipt_id TEXT PRIMARY KEY,\n  job_id TEXT NOT NULL,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  status TEXT NOT NULL CHECK (status IN ('accepted', 'applied', 'ignored', 'failed', 'deferred')),\n  reason_code TEXT,\n  applied_operation_ids_json TEXT CHECK (applied_operation_ids_json IS NULL OR json_valid(applied_operation_ids_json)),\n  ignored_operation_ids_json TEXT CHECK (ignored_operation_ids_json IS NULL OR json_valid(ignored_operation_ids_json)),\n  created_at TEXT NOT NULL,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_job_receipts_job_id ON job_receipts(job_id);\nCREATE INDEX IF NOT EXISTS idx_job_receipts_created_at ON job_receipts(created_at);\n\nCREATE TABLE IF NOT EXISTS goal_campaigns (\n  campaign_id TEXT PRIMARY KEY,\n  job_id TEXT NOT NULL UNIQUE,\n  status TEXT NOT NULL,\n  title TEXT,\n  public_summary TEXT,\n  reason_code TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_goal_campaigns_status ON goal_campaigns(status);\n\nCREATE TABLE IF NOT EXISTS goal_ledger_items (\n  item_id TEXT PRIMARY KEY,\n  campaign_id TEXT NOT NULL,\n  operation_id TEXT NOT NULL,\n  idempotency_key TEXT,\n  item_type TEXT NOT NULL,\n  status TEXT NOT NULL,\n  summary TEXT NOT NULL,\n  reason_code TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_goal_ledger_items_campaign_id ON goal_ledger_items(campaign_id);\n\nCREATE TABLE IF NOT EXISTS goal_verifiers (\n  verifier_id TEXT PRIMARY KEY,\n  campaign_id TEXT NOT NULL,\n  kind TEXT NOT NULL,\n  status TEXT NOT NULL,\n  summary TEXT,\n  reason_code TEXT,\n  last_checked_at TEXT,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_goal_verifiers_campaign_id ON goal_verifiers(campaign_id);\n\nCREATE TABLE IF NOT EXISTS goal_review_gates (\n  gate_id TEXT PRIMARY KEY,\n  campaign_id TEXT NOT NULL,\n  status TEXT NOT NULL,\n  summary TEXT,\n  required INTEGER NOT NULL DEFAULT 1 CHECK (required IN (0, 1)),\n  reason_code TEXT,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_goal_review_gates_campaign_id ON goal_review_gates(campaign_id);\n\nCREATE TABLE IF NOT EXISTS loop_jobs (\n  loop_id TEXT PRIMARY KEY,\n  job_id TEXT NOT NULL UNIQUE,\n  interval_seconds INTEGER NOT NULL CHECK (interval_seconds > 0),\n  max_iterations INTEGER,\n  max_duration_ms INTEGER,\n  backoff_policy_json TEXT CHECK (backoff_policy_json IS NULL OR json_valid(backoff_policy_json)),\n  overlap_policy TEXT NOT NULL,\n  next_tick_at TEXT,\n  iteration INTEGER NOT NULL DEFAULT 0 CHECK (iteration >= 0),\n  operation_id TEXT,\n  idempotency_key TEXT,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_loop_jobs_next_tick_at ON loop_jobs(next_tick_at);\n\nCREATE TABLE IF NOT EXISTS artifacts (\n  artifact_id TEXT PRIMARY KEY,\n  job_id TEXT,\n  kind TEXT NOT NULL,\n  relative_path TEXT NOT NULL,\n  sha256 TEXT,\n  summary TEXT,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  created_at TEXT NOT NULL,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_artifacts_job_id ON artifacts(job_id);\nCREATE INDEX IF NOT EXISTS idx_artifacts_relative_path ON artifacts(relative_path);\n\nCREATE TABLE IF NOT EXISTS state_snapshots (\n  snapshot_id TEXT PRIMARY KEY,\n  job_id TEXT,\n  kind TEXT NOT NULL,\n  relative_path TEXT,\n  sha256 TEXT,\n  summary TEXT,\n  captured_at TEXT NOT NULL,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_state_snapshots_job_id ON state_snapshots(job_id);\nCREATE INDEX IF NOT EXISTS idx_state_snapshots_captured_at ON state_snapshots(captured_at);\n\nCREATE TABLE IF NOT EXISTS runner_config (\n  key TEXT PRIMARY KEY,\n  value_json TEXT NOT NULL CHECK (json_valid(value_json)),\n  updated_at TEXT NOT NULL,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE TABLE IF NOT EXISTS outbox (\n  outbox_id TEXT PRIMARY KEY,\n  job_id TEXT,\n  operation_id TEXT NOT NULL,\n  idempotency_key TEXT,\n  type TEXT NOT NULL,\n  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'acked', 'failed', 'dead_letter')),\n  payload_json TEXT NOT NULL CHECK (json_valid(payload_json)),\n  retry_count INTEGER NOT NULL DEFAULT 0 CHECK (retry_count >= 0),\n  next_attempt_at TEXT,\n  last_error_code TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_outbox_status_next_attempt ON outbox(status, next_attempt_at);\nCREATE INDEX IF NOT EXISTS idx_outbox_job_id ON outbox(job_id);\n";
+}>;

package/packages/client/dist/continuity/migrations/001-initial-schema.js

@@ -0,0 +1,263 @@
+const E=Object.freeze({version:1,name:"initial-continuity-schema",sql:`
+CREATE TABLE IF NOT EXISTS jobs (
+  job_id TEXT PRIMARY KEY,
+  kind TEXT NOT NULL CHECK (kind IN ('goal', 'loop', 'runner', 'jobs')),
+  status TEXT NOT NULL CHECK (status IN (
+    'draft', 'planned', 'active', 'running', 'waiting_external', 'waiting_human',
+    'backoff', 'paused', 'blocked', 'completed', 'aborted', 'cancelled'
+  )),
+  summary TEXT,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  next_run_at TEXT,
+  goal_id TEXT,
+  loop_id TEXT,
+  campaign_id TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_jobs_status ON jobs(status);
+CREATE INDEX IF NOT EXISTS idx_jobs_next_run_at ON jobs(next_run_at);
+CREATE INDEX IF NOT EXISTS idx_jobs_goal_id ON jobs(goal_id);
+CREATE INDEX IF NOT EXISTS idx_jobs_loop_id ON jobs(loop_id);
+
+CREATE TABLE IF NOT EXISTS job_leases (
+  lease_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL,
+  runner_id TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'acquired' CHECK (status IN ('acquired', 'released', 'expired')),
+  acquired_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  released_at TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_job_leases_job_id ON job_leases(job_id);
+CREATE INDEX IF NOT EXISTS idx_job_leases_expires_at ON job_leases(expires_at);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_job_leases_active_job
+  ON job_leases(job_id)
+  WHERE released_at IS NULL;
+
+CREATE TABLE IF NOT EXISTS job_events (
+  event_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL,
+  operation_id TEXT NOT NULL,
+  idempotency_key TEXT,
+  event_sequence INTEGER,
+  type TEXT NOT NULL,
+  summary TEXT NOT NULL,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_job_events_job_id ON job_events(job_id);
+CREATE INDEX IF NOT EXISTS idx_job_events_created_at ON job_events(created_at);
+
+CREATE TABLE IF NOT EXISTS job_receipts (
+  receipt_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  status TEXT NOT NULL CHECK (status IN ('accepted', 'applied', 'ignored', 'failed', 'deferred')),
+  reason_code TEXT,
+  applied_operation_ids_json TEXT CHECK (applied_operation_ids_json IS NULL OR json_valid(applied_operation_ids_json)),
+  ignored_operation_ids_json TEXT CHECK (ignored_operation_ids_json IS NULL OR json_valid(ignored_operation_ids_json)),
+  created_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_job_receipts_job_id ON job_receipts(job_id);
+CREATE INDEX IF NOT EXISTS idx_job_receipts_created_at ON job_receipts(created_at);
+
+CREATE TABLE IF NOT EXISTS goal_campaigns (
+  campaign_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL UNIQUE,
+  status TEXT NOT NULL,
+  title TEXT,
+  public_summary TEXT,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_campaigns_status ON goal_campaigns(status);
+
+CREATE TABLE IF NOT EXISTS goal_ledger_items (
+  item_id TEXT PRIMARY KEY,
+  campaign_id TEXT NOT NULL,
+  operation_id TEXT NOT NULL,
+  idempotency_key TEXT,
+  item_type TEXT NOT NULL,
+  status TEXT NOT NULL,
+  summary TEXT NOT NULL,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_ledger_items_campaign_id ON goal_ledger_items(campaign_id);
+
+CREATE TABLE IF NOT EXISTS goal_verifiers (
+  verifier_id TEXT PRIMARY KEY,
+  campaign_id TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  status TEXT NOT NULL,
+  summary TEXT,
+  reason_code TEXT,
+  last_checked_at TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_verifiers_campaign_id ON goal_verifiers(campaign_id);
+
+CREATE TABLE IF NOT EXISTS goal_review_gates (
+  gate_id TEXT PRIMARY KEY,
+  campaign_id TEXT NOT NULL,
+  status TEXT NOT NULL,
+  summary TEXT,
+  required INTEGER NOT NULL DEFAULT 1 CHECK (required IN (0, 1)),
+  reason_code TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_review_gates_campaign_id ON goal_review_gates(campaign_id);
+
+CREATE TABLE IF NOT EXISTS loop_jobs (
+  loop_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL UNIQUE,
+  interval_seconds INTEGER NOT NULL CHECK (interval_seconds > 0),
+  max_iterations INTEGER,
+  max_duration_ms INTEGER,
+  backoff_policy_json TEXT CHECK (backoff_policy_json IS NULL OR json_valid(backoff_policy_json)),
+  overlap_policy TEXT NOT NULL,
+  next_tick_at TEXT,
+  iteration INTEGER NOT NULL DEFAULT 0 CHECK (iteration >= 0),
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_loop_jobs_next_tick_at ON loop_jobs(next_tick_at);
+
+CREATE TABLE IF NOT EXISTS artifacts (
+  artifact_id TEXT PRIMARY KEY,
+  job_id TEXT,
+  kind TEXT NOT NULL,
+  relative_path TEXT NOT NULL,
+  sha256 TEXT,
+  summary TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  created_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_artifacts_job_id ON artifacts(job_id);
+CREATE INDEX IF NOT EXISTS idx_artifacts_relative_path ON artifacts(relative_path);
+
+CREATE TABLE IF NOT EXISTS state_snapshots (
+  snapshot_id TEXT PRIMARY KEY,
+  job_id TEXT,
+  kind TEXT NOT NULL,
+  relative_path TEXT,
+  sha256 TEXT,
+  summary TEXT,
+  captured_at TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_state_snapshots_job_id ON state_snapshots(job_id);
+CREATE INDEX IF NOT EXISTS idx_state_snapshots_captured_at ON state_snapshots(captured_at);
+
+CREATE TABLE IF NOT EXISTS runner_config (
+  key TEXT PRIMARY KEY,
+  value_json TEXT NOT NULL CHECK (json_valid(value_json)),
+  updated_at TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE TABLE IF NOT EXISTS outbox (
+  outbox_id TEXT PRIMARY KEY,
+  job_id TEXT,
+  operation_id TEXT NOT NULL,
+  idempotency_key TEXT,
+  type TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'acked', 'failed', 'dead_letter')),
+  payload_json TEXT NOT NULL CHECK (json_valid(payload_json)),
+  retry_count INTEGER NOT NULL DEFAULT 0 CHECK (retry_count >= 0),
+  next_attempt_at TEXT,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_outbox_status_next_attempt ON outbox(status, next_attempt_at);
+CREATE INDEX IF NOT EXISTS idx_outbox_job_id ON outbox(job_id);
+`});export{E as INITIAL_CONTINUITY_SQLITE_MIGRATION};