@ornexus/neocortex 4.59.1

package/packages/client/dist/continuity/sqlite-store.d.ts

@@ -0,0 +1,409 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.04 -- Local SQLite continuity store, migrations and integrity checks.
+ */
+export declare const CONTINUITY_SQLITE_RELATIVE_DIR: ".neocortex/continuity";
+export declare const CONTINUITY_SQLITE_FILENAME: "continuity.sqlite";
+export declare const CONTINUITY_SQLITE_SCHEMA_VERSION: 1;
+export declare const DEFAULT_CONTINUITY_SQLITE_BUSY_TIMEOUT_MS = 5000;
+export declare const SQLITE_ADAPTER_INSTALL_GUIDANCE = "Install the optional Enterprise continuity SQLite adapter with `npm install --workspace packages/client better-sqlite3 --include=optional` or reinstall Neocortex with optional dependencies enabled.";
+export type ContinuitySqliteStoreErrorCode = 'sqlite-adapter-unavailable' | 'sqlite-integrity-failed' | 'sqlite-migration-failed' | 'sqlite-migration-conflict' | 'sqlite-foreign-key-failed' | 'sqlite-public-safety-rejected' | 'sqlite-mutation-blocked';
+export declare class ContinuitySqliteStoreError extends Error {
+    readonly code: ContinuitySqliteStoreErrorCode;
+    readonly reasonCode: ContinuitySqliteStoreErrorCode;
+    readonly guidance?: string;
+    readonly mutationBlocked: boolean;
+    readonly cause?: unknown;
+    constructor(code: ContinuitySqliteStoreErrorCode, message: string, options?: {
+        readonly guidance?: string;
+        readonly cause?: unknown;
+        readonly mutationBlocked?: boolean;
+    });
+}
+export interface ContinuitySqliteStatementRunResult {
+    readonly changes: number;
+    readonly lastInsertRowid?: number | bigint;
+}
+export interface ContinuitySqliteStatement {
+    run(...params: readonly unknown[]): ContinuitySqliteStatementRunResult;
+    get(...params: readonly unknown[]): unknown;
+    all(...params: readonly unknown[]): readonly unknown[];
+}
+export interface ContinuitySqliteDatabase {
+    pragma(source: string, options?: {
+        readonly simple?: boolean;
+    }): unknown;
+    exec(source: string): void;
+    prepare(source: string): ContinuitySqliteStatement;
+    transaction<T extends (...args: never[]) => unknown>(fn: T): T;
+    close(): void;
+}
+export interface ContinuitySqliteAdapter {
+    readonly adapterName: 'better-sqlite3' | 'test-adapter' | string;
+    open(filePath: string, options?: {
+        readonly fileMustExist?: boolean;
+    }): ContinuitySqliteDatabase;
+}
+export type ContinuitySqliteAdapterLoadResult = {
+    readonly ok: true;
+    readonly adapter: ContinuitySqliteAdapter;
+} | {
+    readonly ok: false;
+    readonly error: ContinuitySqliteStoreError;
+};
+export type ContinuitySqliteDynamicImporter = (specifier: string) => Promise<unknown>;
+export interface OpenContinuitySqliteStoreOptions {
+    readonly projectRoot: string;
+    readonly adapter?: ContinuitySqliteAdapter;
+    readonly adapterLoader?: () => Promise<ContinuitySqliteAdapterLoadResult>;
+    readonly busyTimeoutMs?: number;
+    readonly integrityCheck?: boolean;
+    readonly now?: () => string;
+}
+export interface ContinuityJobWriteInput {
+    readonly jobId: string;
+    readonly kind: 'goal' | 'loop' | 'runner' | 'jobs';
+    readonly status: string;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly summary?: string;
+    readonly reasonCode?: string;
+    readonly nextRunAt?: string;
+    readonly goalId?: string;
+    readonly loopId?: string;
+    readonly campaignId?: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityEventWriteInput {
+    readonly eventId: string;
+    readonly jobId: string;
+    readonly operationId: string;
+    readonly idempotencyKey?: string;
+    readonly sequence?: number;
+    readonly type: string;
+    readonly summary: string;
+    readonly reasonCode?: string;
+    readonly createdAt: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityReceiptWriteInput {
+    readonly receiptId: string;
+    readonly jobId: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly status: 'accepted' | 'applied' | 'ignored' | 'failed' | 'deferred';
+    readonly reasonCode?: string;
+    readonly appliedOperationIds?: readonly string[];
+    readonly ignoredOperationIds?: readonly string[];
+    readonly createdAt: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuitySqliteWriteResult {
+    readonly inserted: boolean;
+    readonly replay: boolean;
+    readonly changes: number;
+}
+export interface ContinuityJobStatusUpdateInput {
+    readonly jobId: string;
+    readonly status: string;
+    readonly updatedAt: string;
+    readonly reasonCode?: string;
+    readonly nextRunAt?: string | null;
+}
+export interface ContinuityScheduleWriteInput {
+    readonly jobId: string;
+    readonly scheduledAt: string;
+    readonly updatedAt: string;
+    readonly reasonCode?: string;
+}
+export interface ContinuityLeaseWriteInput {
+    readonly leaseId: string;
+    readonly jobId: string;
+    readonly runnerId: string;
+    readonly acquiredAt: string;
+    readonly expiresAt: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityLeaseReleaseInput {
+    readonly leaseId: string;
+    readonly releasedAt: string;
+    readonly reasonCode?: string;
+}
+export interface ContinuityStateSnapshotWriteInput {
+    readonly snapshotId: string;
+    readonly jobId?: string;
+    readonly kind: string;
+    readonly relativePath?: string;
+    readonly sha256?: string;
+    readonly summary?: string;
+    readonly capturedAt: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityArtifactWriteInput {
+    readonly artifactId: string;
+    readonly jobId?: string;
+    readonly kind: string;
+    readonly relativePath: string;
+    readonly sha256?: string;
+    readonly summary?: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly createdAt: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityOutboxWriteInput {
+    readonly outboxId: string;
+    readonly jobId?: string;
+    readonly operationId: string;
+    readonly idempotencyKey?: string;
+    readonly type: string;
+    readonly status?: 'pending' | 'sent' | 'acked' | 'failed' | 'dead_letter';
+    readonly payload: Readonly<Record<string, unknown>>;
+    readonly retryCount?: number;
+    readonly nextAttemptAt?: string;
+    readonly lastErrorCode?: string;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+}
+export interface ContinuityGoalCampaignWriteInput {
+    readonly campaignId: string;
+    readonly jobId: string;
+    readonly status: string;
+    readonly title?: string;
+    readonly publicSummary?: string;
+    readonly reasonCode?: string;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityGoalLedgerItemWriteInput {
+    readonly itemId: string;
+    readonly campaignId: string;
+    readonly jobId: string;
+    readonly itemType: string;
+    readonly status: string;
+    readonly summary: string;
+    readonly reasonCode?: string;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityGoalVerifierWriteInput {
+    readonly verifierId: string;
+    readonly campaignId: string;
+    readonly jobId: string;
+    readonly kind: string;
+    readonly status: string;
+    readonly summary?: string;
+    readonly reasonCode?: string;
+    readonly lastCheckedAt?: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityGoalReviewGateWriteInput {
+    readonly gateId: string;
+    readonly campaignId: string;
+    readonly jobId: string;
+    readonly status: string;
+    readonly summary?: string;
+    readonly required: boolean;
+    readonly reasonCode?: string;
+    readonly operationId?: string;
+    readonly idempotencyKey?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuityOperationAuditInput {
+    readonly receiptId: string;
+    readonly jobId: string;
+    readonly operationId: string;
+    readonly idempotencyKey?: string;
+    readonly status: 'accepted' | 'applied' | 'ignored' | 'failed' | 'deferred';
+    readonly reasonCode?: string;
+    readonly appliedOperationIds?: readonly string[];
+    readonly ignoredOperationIds?: readonly string[];
+    readonly createdAt: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ContinuitySnapshotQueryOptions {
+    readonly nowIso: string;
+    readonly jobLimit: number;
+    readonly staleLeaseLimit: number;
+    readonly receiptLimit: number;
+    readonly eventLimit: number;
+    readonly snapshotLimit: number;
+}
+export interface ContinuitySnapshotJobRow {
+    readonly job_id: string;
+    readonly kind: string;
+    readonly status: string;
+    readonly summary: string | null;
+    readonly reason_code: string | null;
+    readonly created_at: string;
+    readonly updated_at: string;
+    readonly next_run_at: string | null;
+    readonly metadata_json: string | null;
+    readonly iteration?: number;
+    readonly goal_ledger_item_count?: number;
+    readonly blocked_goal_ledger_item_count?: number;
+    readonly security_issue_blocked_count?: number;
+    readonly goal_verifier_count?: number;
+    readonly failed_verifier_count?: number;
+    readonly unavailable_verifier_count?: number;
+    readonly goal_review_gate_count?: number;
+    readonly failed_required_review_gate_count?: number;
+}
+export interface ContinuitySnapshotLeaseRow {
+    readonly lease_id: string;
+    readonly job_id: string;
+    readonly runner_id: string;
+    readonly expires_at: string;
+}
+export interface ContinuitySnapshotReceiptRow {
+    readonly receipt_id: string;
+    readonly job_id: string;
+    readonly operation_id: string | null;
+    readonly status: string;
+    readonly reason_code: string | null;
+    readonly created_at: string;
+    readonly metadata_json: string | null;
+}
+export interface ContinuitySnapshotEventRow {
+    readonly event_id: string;
+    readonly job_id: string;
+    readonly operation_id: string;
+    readonly type: string;
+    readonly summary: string;
+    readonly reason_code: string | null;
+    readonly created_at: string;
+}
+export interface ContinuitySnapshotStateSnapshotRow {
+    readonly snapshot_id: string;
+    readonly job_id: string | null;
+    readonly kind: string;
+    readonly relative_path: string | null;
+    readonly sha256: string | null;
+    readonly summary: string | null;
+    readonly captured_at: string;
+    readonly operation_id: string | null;
+    readonly metadata_json: string | null;
+}
+export interface ContinuitySnapshotQueryResult {
+    readonly schemaVersion: number;
+    readonly jobs: readonly ContinuitySnapshotJobRow[];
+    readonly staleLeases: readonly ContinuitySnapshotLeaseRow[];
+    readonly receipts: readonly ContinuitySnapshotReceiptRow[];
+    readonly events: readonly ContinuitySnapshotEventRow[];
+    readonly stateSnapshots: readonly ContinuitySnapshotStateSnapshotRow[];
+    readonly counts: Readonly<Record<string, number>>;
+    readonly outboxCounts: Readonly<Record<string, number>>;
+}
+export interface ContinuityDueJobRow {
+    readonly job_id: string;
+    readonly kind: string;
+    readonly status: string;
+    readonly summary: string | null;
+    readonly reason_code: string | null;
+    readonly created_at: string;
+    readonly updated_at: string;
+    readonly next_run_at: string | null;
+    readonly metadata_json: string | null;
+    readonly iteration?: number;
+    readonly active_lease_count?: number;
+}
+export interface ContinuityDueJobQueryOptions {
+    readonly nowIso: string;
+    readonly limit: number;
+}
+export interface ContinuityStaleLeaseRecoveryOptions {
+    readonly nowIso: string;
+    readonly staleAfterMs: number;
+    readonly limit: number;
+}
+export interface ContinuityStaleLeaseRecoveryResult {
+    readonly recoveredLeaseIds: readonly string[];
+    readonly safeExpiredAtOrBefore: string;
+    readonly changes: number;
+}
+export interface ContinuityOutboxRetryOptions {
+    readonly nowIso: string;
+    readonly limit: number;
+    readonly statuses?: readonly ('failed' | 'dead_letter')[];
+    readonly nextAttemptAt?: string;
+    readonly reasonCode?: string;
+}
+export interface ContinuityOutboxRetryResult {
+    readonly retriedOutboxIds: readonly string[];
+    readonly changes: number;
+    readonly reasonCode: string;
+    readonly publicSafe: true;
+}
+declare const CONTINUITY_TABLES: readonly ["continuity_migrations", "jobs", "job_leases", "job_events", "job_receipts", "goal_campaigns", "goal_ledger_items", "goal_verifiers", "goal_review_gates", "loop_jobs", "artifacts", "state_snapshots", "runner_config", "outbox"];
+export type ContinuitySqliteTable = (typeof CONTINUITY_TABLES)[number];
+export declare function loadBetterSqlite3Adapter(importer?: ContinuitySqliteDynamicImporter): Promise<ContinuitySqliteAdapterLoadResult>;
+export declare function continuitySqliteStorePath(projectRoot: string): string;
+export declare function openContinuitySqliteStore(options: OpenContinuitySqliteStoreOptions): Promise<ContinuitySqliteStore>;
+export declare class ContinuitySqliteStore {
+    readonly filePath: string;
+    readonly adapterName: string;
+    private readonly db;
+    private readonly busyTimeoutMs;
+    private readonly integrityCheck;
+    private readonly now;
+    private mutationBlocked;
+    constructor(options: {
+        readonly db: ContinuitySqliteDatabase;
+        readonly filePath: string;
+        readonly adapterName: string;
+        readonly busyTimeoutMs: number;
+        readonly integrityCheck: boolean;
+        readonly now: () => string;
+    });
+    initialize(): void;
+    close(): void;
+    pragmaValue(source: string): unknown;
+    runIntegrityCheck(): void;
+    getSchemaVersion(): number;
+    countRows(table: ContinuitySqliteTable): number;
+    recordJob(input: ContinuityJobWriteInput): ContinuitySqliteWriteResult;
+    appendEvent(input: ContinuityEventWriteInput): ContinuitySqliteWriteResult;
+    appendReceipt(input: ContinuityReceiptWriteInput): ContinuitySqliteWriteResult;
+    updateJobStatus(input: ContinuityJobStatusUpdateInput): ContinuitySqliteWriteResult;
+    scheduleNextTick(input: ContinuityScheduleWriteInput): ContinuitySqliteWriteResult;
+    acquireLease(input: ContinuityLeaseWriteInput): ContinuitySqliteWriteResult;
+    releaseLease(input: ContinuityLeaseReleaseInput): ContinuitySqliteWriteResult;
+    recordStateSnapshot(input: ContinuityStateSnapshotWriteInput): ContinuitySqliteWriteResult;
+    recordArtifact(input: ContinuityArtifactWriteInput): ContinuitySqliteWriteResult;
+    enqueueOutbox(input: ContinuityOutboxWriteInput): ContinuitySqliteWriteResult;
+    retryOutboxEntries(options: ContinuityOutboxRetryOptions): ContinuityOutboxRetryResult;
+    upsertGoalCampaign(input: ContinuityGoalCampaignWriteInput): ContinuitySqliteWriteResult;
+    upsertGoalLedgerItem(input: ContinuityGoalLedgerItemWriteInput): ContinuitySqliteWriteResult;
+    upsertGoalVerifier(input: ContinuityGoalVerifierWriteInput): ContinuitySqliteWriteResult;
+    upsertGoalReviewGate(input: ContinuityGoalReviewGateWriteInput): ContinuitySqliteWriteResult;
+    recordOperationAudit(input: ContinuityOperationAuditInput): ContinuitySqliteWriteResult;
+    hasOperationRef(operationId: string, idempotencyKey?: string): boolean;
+    jobExists(jobId: string): boolean;
+    runInTransaction<T>(fn: () => T): T;
+    collectSnapshotRows(options: ContinuitySnapshotQueryOptions): ContinuitySnapshotQueryResult;
+    listDueJobs(options: ContinuityDueJobQueryOptions): readonly ContinuityDueJobRow[];
+    recoverStaleLeases(options: ContinuityStaleLeaseRecoveryOptions): ContinuityStaleLeaseRecoveryResult;
+    private ensureGoalCampaign;
+    private configureConnection;
+    private ensureMigrationTable;
+    private applyMigrations;
+    private assertCanMutate;
+    private toWriteResult;
+}
+export {};

package/packages/client/dist/continuity/sqlite-store.js

@@ -0,0 +1,226 @@
+import{createHash as T}from"node:crypto";import{chmodSync as b,existsSync as C,mkdirSync as N}from"node:fs";import{join as y}from"node:path";import{INITIAL_CONTINUITY_SQLITE_MIGRATION as O}from"./migrations/001-initial-schema.js";const f=".neocortex/continuity",A="continuity.sqlite",K=1,j=5e3,I="Install the optional Enterprise continuity SQLite adapter with `npm install --workspace packages/client better-sqlite3 --include=optional` or reinstall Neocortex with optional dependencies enabled.";class i extends Error{code;reasonCode;guidance;mutationBlocked;cause;constructor(e,t,a={}){super(t),this.name="ContinuitySqliteStoreError",this.code=e,this.reasonCode=e,this.guidance=a.guidance,this.cause=a.cause,this.mutationBlocked=a.mutationBlocked??e==="sqlite-integrity-failed"}}const R=[O],L=Object.freeze(["continuity_migrations","jobs","job_leases","job_events","job_receipts","goal_campaigns","goal_ledger_items","goal_verifiers","goal_review_gates","loop_jobs","artifacts","state_snapshots","runner_config","outbox"]),w=/(raw[_-]?logs?|prompt(?:[_-]?(?:body|text))?|private[_-]?urls?|secret|token|password|protected(?:[_-]?(?:field|body|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|authorization|api[_-]?key|license[_-]?key)/i,S=/(https?:\/\/\S+|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?log|transcript|stack trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY)/i,k=/(corrupt|malformed|not a database|file is not a database|database disk image is malformed)/i,x=/(foreign key constraint failed|SQLITE_CONSTRAINT_FOREIGNKEY)/i;function M(r){return new Function("specifier","return import(specifier)")(r)}function v(r){return`sha256:${T("sha256").update(r).digest("hex")}`}function _(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function U(r){return r instanceof Error?r.message:String(r)}function q(r){return _(r)&&typeof r.code=="string"?r.code:void 0}function n(r,e){if(r instanceof i)return r;const t=U(r),a=q(r);return a==="SQLITE_CORRUPT"||a==="SQLITE_NOTADB"||k.test(t)?new i("sqlite-integrity-failed","Continuity SQLite integrity check failed; durable mutation is blocked until the store is repaired or rebuilt.",{cause:r,mutationBlocked:!0}):a==="SQLITE_CONSTRAINT_FOREIGNKEY"||x.test(t)?new i("sqlite-foreign-key-failed","Continuity SQLite foreign-key validation failed; mutation was rejected.",{cause:r}):new i(e,t,{cause:r})}function g(r,e){if(typeof r=="string"){if(S.test(r))throw new i("sqlite-public-safety-rejected",`Continuity SQLite metadata rejected unsafe value at ${e}.`);return}if(!(r===null||typeof r=="number"||typeof r=="boolean")){if(Array.isArray(r)){r.forEach((t,a)=>g(t,`${e}[${a}]`));return}if(_(r)){for(const[t,a]of Object.entries(r)){if(w.test(t))throw new i("sqlite-public-safety-rejected",`Continuity SQLite metadata rejected unsafe key at ${e}.${t}.`);g(a,`${e}.${t}`)}return}throw new i("sqlite-public-safety-rejected",`Continuity SQLite metadata rejected unsupported value at ${e}.`)}}function c(r,e){if(r!==void 0&&S.test(r))throw new i("sqlite-public-safety-rejected",`Continuity SQLite text rejected unsafe value at ${e}.`)}function l(r){return r?(g(r,"metadata"),JSON.stringify(r)):null}function p(r){if(Array.isArray(r)){const e=r[0];return _(e)?Object.values(e)[0]:e}return _(r)?Object.values(r)[0]:r}function D(r){return L.includes(r)}function F(r){return Array.from(new Set(r))}function W(r){const e=_(r)&&"default"in r?r.default:r;if(typeof e!="function")throw new i("sqlite-adapter-unavailable","Optional better-sqlite3 adapter did not export a database constructor.",{guidance:I});const t=e;return{adapterName:"better-sqlite3",open(a,s){return new t(a,s)}}}async function P(r=M){try{const e=await r("better-sqlite3");return{ok:!0,adapter:W(e)}}catch(e){return e instanceof i?{ok:!1,error:e}:{ok:!1,error:new i("sqlite-adapter-unavailable","Optional Enterprise continuity SQLite adapter better-sqlite3 is unavailable.",{cause:e,guidance:I})}}}function H(r){return y(r,f,A)}function B(r){const e=y(r,f);N(e,{recursive:!0,mode:448});try{b(e,448)}catch{}return e}async function z(r){const e=r.adapter??await J(r.adapterLoader);B(r.projectRoot);const t=H(r.projectRoot);let a;try{a=e.open(t)}catch(o){throw n(o,"sqlite-integrity-failed")}const s=new Q({db:a,filePath:t,adapterName:e.adapterName,busyTimeoutMs:r.busyTimeoutMs??j,integrityCheck:r.integrityCheck??!0,now:r.now??(()=>new Date().toISOString())});try{if(s.initialize(),C(t))try{b(t,384)}catch{}return s}catch(o){try{a.close()}catch{}throw o}}async function J(r){const e=r?await r():await P();if(!e.ok)throw e.error;return e.adapter}class Q{filePath;adapterName;db;busyTimeoutMs;integrityCheck;now;mutationBlocked=!1;constructor(e){this.db=e.db,this.filePath=e.filePath,this.adapterName=e.adapterName,this.busyTimeoutMs=e.busyTimeoutMs,this.integrityCheck=e.integrityCheck,this.now=e.now}initialize(){try{this.configureConnection(),this.integrityCheck&&this.runIntegrityCheck(),this.ensureMigrationTable(),this.applyMigrations(),this.integrityCheck&&this.runIntegrityCheck()}catch(e){throw n(e,"sqlite-migration-failed")}}close(){this.db.close()}pragmaValue(e){return p(this.db.pragma(e,{simple:!0}))}runIntegrityCheck(){try{if(String(p(this.db.pragma("integrity_check",{simple:!0}))??"").toLowerCase()!=="ok")throw this.mutationBlocked=!0,new i("sqlite-integrity-failed","Continuity SQLite integrity check failed; durable mutation is blocked until the store is repaired or rebuilt.",{mutationBlocked:!0})}catch(e){throw this.mutationBlocked=!0,n(e,"sqlite-integrity-failed")}}getSchemaVersion(){const e=this.db.prepare("SELECT COALESCE(MAX(version), 0) AS version FROM continuity_migrations").get();return _(e)&&typeof e.version=="number"?e.version:0}countRows(e){if(!D(e))throw new i("sqlite-public-safety-rejected","Unknown continuity table name.");const t=this.db.prepare(`SELECT COUNT(*) AS count FROM ${e}`).get();return _(t)&&typeof t.count=="number"?t.count:0}recordJob(e){this.assertCanMutate(),c(e.summary,"jobs.summary");const t=l(e.metadata);try{const a=this.db.prepare(`
+        INSERT OR IGNORE INTO jobs (
+          job_id, kind, status, summary, reason_code, created_at, updated_at,
+          next_run_at, goal_id, loop_id, campaign_id, operation_id,
+          idempotency_key, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(e.jobId,e.kind,e.status,e.summary??null,e.reasonCode??null,e.createdAt,e.updatedAt,e.nextRunAt??null,e.goalId??null,e.loopId??null,e.campaignId??null,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}appendEvent(e){this.assertCanMutate(),c(e.summary,"job_events.summary");const t=l(e.metadata);try{const a=this.db.prepare(`
+        INSERT OR IGNORE INTO job_events (
+          event_id, job_id, operation_id, idempotency_key, event_sequence,
+          type, summary, reason_code, created_at, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(e.eventId,e.jobId,e.operationId,e.idempotencyKey??null,e.sequence??null,e.type,e.summary,e.reasonCode??null,e.createdAt,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}appendReceipt(e){this.assertCanMutate();const t=l(e.metadata);try{const a=this.db.prepare(`
+        INSERT OR IGNORE INTO job_receipts (
+          receipt_id, job_id, operation_id, idempotency_key, status, reason_code,
+          applied_operation_ids_json, ignored_operation_ids_json, created_at, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(e.receiptId,e.jobId,e.operationId??null,e.idempotencyKey??null,e.status,e.reasonCode??null,e.appliedOperationIds?JSON.stringify(e.appliedOperationIds):null,e.ignoredOperationIds?JSON.stringify(e.ignoredOperationIds):null,e.createdAt,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}updateJobStatus(e){this.assertCanMutate();try{const t=this.db.prepare(`
+        UPDATE jobs
+           SET status = ?,
+               reason_code = COALESCE(?, reason_code),
+               updated_at = ?,
+               next_run_at = COALESCE(?, next_run_at)
+         WHERE job_id = ?
+      `).run(e.status,e.reasonCode??null,e.updatedAt,e.nextRunAt??null,e.jobId);if(t.changes===0)throw new i("sqlite-foreign-key-failed",`Continuity SQLite job ${e.jobId} was not found for status update.`);return this.toWriteResult(t)}catch(t){throw n(t,"sqlite-migration-failed")}}scheduleNextTick(e){return this.updateJobStatus({jobId:e.jobId,status:"active",updatedAt:e.updatedAt,reasonCode:e.reasonCode,nextRunAt:e.scheduledAt})}acquireLease(e){this.assertCanMutate();const t=l(e.metadata);try{const a=this.db.prepare(`
+        INSERT OR IGNORE INTO job_leases (
+          lease_id, job_id, runner_id, status, acquired_at, expires_at,
+          operation_id, idempotency_key, metadata_json
+        ) VALUES (?, ?, ?, 'acquired', ?, ?, ?, ?, ?)
+      `).run(e.leaseId,e.jobId,e.runnerId,e.acquiredAt,e.expiresAt,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}releaseLease(e){this.assertCanMutate();try{const t=this.db.prepare(`
+        UPDATE job_leases
+           SET status = 'released', released_at = ?
+         WHERE lease_id = ? AND released_at IS NULL
+      `).run(e.releasedAt,e.leaseId);if(t.changes===0)throw new i("sqlite-foreign-key-failed",`Continuity SQLite lease ${e.leaseId} was not found for release.`);return this.toWriteResult(t)}catch(t){throw n(t,"sqlite-migration-failed")}}recordStateSnapshot(e){this.assertCanMutate(),c(e.summary,"state_snapshots.summary"),c(e.relativePath,"state_snapshots.relative_path");const t=l(e.metadata);try{const a=this.db.prepare(`
+        INSERT OR IGNORE INTO state_snapshots (
+          snapshot_id, job_id, kind, relative_path, sha256, summary, captured_at,
+          operation_id, idempotency_key, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(e.snapshotId,e.jobId??null,e.kind,e.relativePath??null,e.sha256??null,e.summary??null,e.capturedAt,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}recordArtifact(e){this.assertCanMutate(),c(e.kind,"artifacts.kind"),c(e.relativePath,"artifacts.relative_path"),c(e.summary,"artifacts.summary");const t=l(e.metadata);try{const a=this.db.prepare(`
+        INSERT OR IGNORE INTO artifacts (
+          artifact_id, job_id, kind, relative_path, sha256, summary,
+          operation_id, idempotency_key, created_at, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(e.artifactId,e.jobId??null,e.kind,e.relativePath,e.sha256??null,e.summary??null,e.operationId??null,e.idempotencyKey??null,e.createdAt,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}enqueueOutbox(e){this.assertCanMutate();const t=l(e.payload);try{const a=this.db.prepare(`
+        INSERT OR IGNORE INTO outbox (
+          outbox_id, job_id, operation_id, idempotency_key, type, status,
+          payload_json, retry_count, next_attempt_at, last_error_code,
+          created_at, updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(e.outboxId,e.jobId??null,e.operationId,e.idempotencyKey??null,e.type,e.status??"pending",t??"{}",e.retryCount??0,e.nextAttemptAt??null,e.lastErrorCode??null,e.createdAt,e.updatedAt);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}retryOutboxEntries(e){this.assertCanMutate();const t=Math.max(1,Math.min(100,Math.floor(e.limit))),a=F(e.statuses?.length?e.statuses:["failed","dead_letter"]),s=e.reasonCode??"backoff-scheduled";c(s,"outbox.last_error_code"),c(e.nextAttemptAt,"outbox.next_attempt_at");try{return this.runInTransaction(()=>{const o=a.map(()=>"?").join(", "),d=this.db.prepare(`
+          SELECT outbox_id
+            FROM outbox
+           WHERE status IN (${o})
+           ORDER BY updated_at ASC, outbox_id ASC
+           LIMIT ?
+        `).all(...a,t).map(u=>u.outbox_id).filter(u=>typeof u=="string"&&u.length>0);if(d.length===0)return{retriedOutboxIds:[],changes:0,reasonCode:s,publicSafe:!0};const h=d.map(()=>"?").join(", "),E=this.db.prepare(`
+          UPDATE outbox
+             SET status = 'pending',
+                 retry_count = retry_count + 1,
+                 next_attempt_at = ?,
+                 last_error_code = ?,
+                 updated_at = ?
+           WHERE outbox_id IN (${h})
+        `).run(e.nextAttemptAt??e.nowIso,s,e.nowIso,...d);return{retriedOutboxIds:d,changes:E.changes,reasonCode:s,publicSafe:!0}})}catch(o){throw n(o,"sqlite-migration-failed")}}upsertGoalCampaign(e){this.assertCanMutate(),c(e.title,"goal_campaigns.title"),c(e.publicSummary,"goal_campaigns.public_summary");const t=l(e.metadata);try{const a=this.db.prepare(`
+        INSERT INTO goal_campaigns (
+          campaign_id, job_id, status, title, public_summary, reason_code,
+          created_at, updated_at, operation_id, idempotency_key, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        ON CONFLICT(campaign_id) DO UPDATE SET
+          status = excluded.status,
+          title = COALESCE(excluded.title, goal_campaigns.title),
+          public_summary = COALESCE(excluded.public_summary, goal_campaigns.public_summary),
+          reason_code = excluded.reason_code,
+          updated_at = excluded.updated_at,
+          operation_id = excluded.operation_id,
+          idempotency_key = excluded.idempotency_key,
+          metadata_json = excluded.metadata_json
+      `).run(e.campaignId,e.jobId,e.status,e.title??null,e.publicSummary??null,e.reasonCode??null,e.createdAt,e.updatedAt,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}upsertGoalLedgerItem(e){this.assertCanMutate(),c(e.summary,"goal_ledger_items.summary");const t=l(e.metadata);try{this.ensureGoalCampaign(e.campaignId,e.jobId,e.createdAt,e.updatedAt);const a=this.db.prepare(`
+        INSERT INTO goal_ledger_items (
+          item_id, campaign_id, operation_id, idempotency_key, item_type, status,
+          summary, reason_code, created_at, updated_at, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        ON CONFLICT(item_id) DO UPDATE SET
+          status = excluded.status,
+          summary = excluded.summary,
+          reason_code = excluded.reason_code,
+          updated_at = excluded.updated_at,
+          metadata_json = excluded.metadata_json
+      `).run(e.itemId,e.campaignId,e.operationId??null,e.idempotencyKey??null,e.itemType,e.status,e.summary,e.reasonCode??null,e.createdAt,e.updatedAt,t);return this.toWriteResult(a)}catch(a){throw n(a,"sqlite-migration-failed")}}upsertGoalVerifier(e){this.assertCanMutate(),c(e.summary,"goal_verifiers.summary");const t=l(e.metadata);try{const a=e.lastCheckedAt??this.now();this.ensureGoalCampaign(e.campaignId,e.jobId,a,a);const s=this.db.prepare(`
+        INSERT INTO goal_verifiers (
+          verifier_id, campaign_id, kind, status, summary, reason_code,
+          last_checked_at, operation_id, idempotency_key, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        ON CONFLICT(verifier_id) DO UPDATE SET
+          status = excluded.status,
+          summary = excluded.summary,
+          reason_code = excluded.reason_code,
+          last_checked_at = excluded.last_checked_at,
+          metadata_json = excluded.metadata_json
+      `).run(e.verifierId,e.campaignId,e.kind,e.status,e.summary??null,e.reasonCode??null,e.lastCheckedAt??null,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(s)}catch(a){throw n(a,"sqlite-migration-failed")}}upsertGoalReviewGate(e){this.assertCanMutate(),c(e.summary,"goal_review_gates.summary");const t=l(e.metadata);try{const a=this.now();this.ensureGoalCampaign(e.campaignId,e.jobId,a,a);const s=this.db.prepare(`
+        INSERT INTO goal_review_gates (
+          gate_id, campaign_id, status, summary, required, reason_code,
+          operation_id, idempotency_key, metadata_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+        ON CONFLICT(gate_id) DO UPDATE SET
+          status = excluded.status,
+          summary = excluded.summary,
+          required = excluded.required,
+          reason_code = excluded.reason_code,
+          metadata_json = excluded.metadata_json
+      `).run(e.gateId,e.campaignId,e.status,e.summary??null,e.required?1:0,e.reasonCode??null,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(s)}catch(a){throw n(a,"sqlite-migration-failed")}}recordOperationAudit(e){return this.appendReceipt(e)}hasOperationRef(e,t){this.assertCanMutate();const a=["jobs","job_leases","job_events","job_receipts","goal_campaigns","goal_ledger_items","goal_verifiers","goal_review_gates","loop_jobs","artifacts","state_snapshots","runner_config","outbox"],s=a.map(d=>`SELECT 1 AS found FROM ${d} WHERE operation_id = ?${t?" OR idempotency_key = ?":""}`),o=a.flatMap(()=>t?[e,t]:[e]);return!!this.db.prepare(`${s.join(" UNION ALL ")} LIMIT 1`).get(...o)}jobExists(e){return!!this.db.prepare("SELECT 1 AS found FROM jobs WHERE job_id = ? LIMIT 1").get(e)}runInTransaction(e){this.assertCanMutate();const t=this.db.transaction(e);try{return t()}catch(a){throw n(a,"sqlite-migration-failed")}}collectSnapshotRows(e){const t=(o,...m)=>{const d=this.db.prepare(o).get(...m);return _(d)&&typeof d.count=="number"?d.count:0},a=this.db.prepare(`
+      SELECT status, COUNT(*) AS count FROM outbox GROUP BY status
+    `).all(),s={};for(const o of a)typeof o.status=="string"&&typeof o.count=="number"&&(s[o.status]=o.count);return{schemaVersion:this.getSchemaVersion(),jobs:this.db.prepare(`
+        SELECT job_id, kind, status, summary, reason_code, created_at, updated_at,
+               next_run_at, metadata_json,
+               (SELECT COUNT(*)
+                  FROM job_receipts r
+                 WHERE r.job_id = jobs.job_id
+                    AND (r.operation_id LIKE 'tick-%' OR r.operation_id LIKE 'loop-tick-%')
+                    AND r.status IN ('accepted', 'applied')) AS iteration,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_ledger_items i ON i.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id) AS goal_ledger_item_count,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_ledger_items i ON i.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id
+                   AND i.status = 'blocked') AS blocked_goal_ledger_item_count,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_ledger_items i ON i.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id
+                   AND i.item_type = 'security_issue'
+                   AND i.status = 'blocked') AS security_issue_blocked_count,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_verifiers v ON v.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id) AS goal_verifier_count,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_verifiers v ON v.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id
+                   AND v.status = 'failed') AS failed_verifier_count,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_verifiers v ON v.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id
+                   AND v.status = 'unavailable') AS unavailable_verifier_count,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_review_gates g ON g.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id) AS goal_review_gate_count,
+               (SELECT COUNT(*)
+                  FROM goal_campaigns c
+                  JOIN goal_review_gates g ON g.campaign_id = c.campaign_id
+                 WHERE c.job_id = jobs.job_id
+                   AND g.required = 1
+                   AND g.status IN ('failed', 'blocked')) AS failed_required_review_gate_count
+          FROM jobs
+         ORDER BY updated_at DESC, job_id ASC
+         LIMIT ?
+      `).all(e.jobLimit),staleLeases:this.db.prepare(`
+        SELECT lease_id, job_id, runner_id, expires_at
+          FROM job_leases
+         WHERE released_at IS NULL AND expires_at <= ?
+         ORDER BY expires_at ASC, lease_id ASC
+         LIMIT ?
+      `).all(e.nowIso,e.staleLeaseLimit),receipts:this.db.prepare(`
+        SELECT receipt_id, job_id, operation_id, status, reason_code, created_at, metadata_json
+          FROM job_receipts
+         ORDER BY created_at DESC, receipt_id ASC
+         LIMIT ?
+      `).all(e.receiptLimit),events:this.db.prepare(`
+        SELECT event_id, job_id, operation_id, type, summary, reason_code, created_at
+          FROM job_events
+         ORDER BY created_at DESC, event_id ASC
+         LIMIT ?
+      `).all(e.eventLimit),stateSnapshots:this.db.prepare(`
+        SELECT snapshot_id, job_id, kind, relative_path, sha256, summary,
+               captured_at, operation_id, metadata_json
+          FROM state_snapshots
+         WHERE kind = 'context_compaction'
+         ORDER BY captured_at DESC, snapshot_id ASC
+         LIMIT ?
+      `).all(e.snapshotLimit),counts:{jobs:t("SELECT COUNT(*) AS count FROM jobs"),activeJobs:t("SELECT COUNT(*) AS count FROM jobs WHERE status IN ('planned', 'active', 'running', 'waiting_external', 'waiting_human', 'backoff', 'paused', 'blocked')"),activeLeases:t("SELECT COUNT(*) AS count FROM job_leases WHERE released_at IS NULL"),dueJobs:t("SELECT COUNT(*) AS count FROM jobs WHERE next_run_at IS NOT NULL AND next_run_at <= ? AND status NOT IN ('completed', 'aborted', 'cancelled')",e.nowIso),staleLeases:t("SELECT COUNT(*) AS count FROM job_leases WHERE released_at IS NULL AND expires_at <= ?",e.nowIso),receipts:t("SELECT COUNT(*) AS count FROM job_receipts"),events:t("SELECT COUNT(*) AS count FROM job_events"),goalLedgerItems:t("SELECT COUNT(*) AS count FROM goal_ledger_items"),goalVerifiers:t("SELECT COUNT(*) AS count FROM goal_verifiers"),goalReviewGates:t("SELECT COUNT(*) AS count FROM goal_review_gates"),stateSnapshots:t("SELECT COUNT(*) AS count FROM state_snapshots"),outbox:t("SELECT COUNT(*) AS count FROM outbox")},outboxCounts:s}}listDueJobs(e){const t=Math.max(1,Math.min(50,Math.floor(e.limit)));return this.db.prepare(`
+      SELECT j.job_id, j.kind, j.status, j.summary, j.reason_code, j.created_at,
+             j.updated_at, j.next_run_at, j.metadata_json,
+             (SELECT COUNT(*)
+                FROM job_receipts r
+               WHERE r.job_id = j.job_id
+                  AND (r.operation_id LIKE 'tick-%' OR r.operation_id LIKE 'loop-tick-%')
+                  AND r.status IN ('accepted', 'applied')) AS iteration,
+             (SELECT COUNT(*)
+                FROM job_leases l
+               WHERE l.job_id = j.job_id
+                 AND l.released_at IS NULL) AS active_lease_count
+        FROM jobs j
+       WHERE j.next_run_at IS NOT NULL
+         AND j.next_run_at <= ?
+         AND j.status NOT IN ('waiting_external', 'waiting_human', 'paused', 'blocked', 'completed', 'aborted', 'cancelled')
+       ORDER BY j.next_run_at ASC, j.job_id ASC
+       LIMIT ?
+    `).all(e.nowIso,t)}recoverStaleLeases(e){this.assertCanMutate();const t=Date.parse(e.nowIso);if(!Number.isFinite(t))throw new i("sqlite-public-safety-rejected","Continuity SQLite stale lease recovery received an invalid timestamp.");const a=Math.max(0,Math.floor(e.staleAfterMs)),s=Math.max(1,Math.min(100,Math.floor(e.limit))),o=new Date(t-a).toISOString();try{return this.runInTransaction(()=>{const d=this.db.prepare(`
+          SELECT lease_id
+            FROM job_leases
+           WHERE released_at IS NULL
+             AND expires_at <= ?
+           ORDER BY expires_at ASC, lease_id ASC
+           LIMIT ?
+        `).all(o,s).map(u=>u.lease_id).filter(u=>typeof u=="string"&&u.length>0);if(d.length===0)return{recoveredLeaseIds:[],safeExpiredAtOrBefore:o,changes:0};const h=d.map(()=>"?").join(", "),E=this.db.prepare(`
+          UPDATE job_leases
+             SET status = 'expired', released_at = ?
+           WHERE released_at IS NULL
+             AND lease_id IN (${h})
+        `).run(e.nowIso,...d);return{recoveredLeaseIds:d,safeExpiredAtOrBefore:o,changes:E.changes}})}catch(m){throw n(m,"sqlite-migration-failed")}}ensureGoalCampaign(e,t,a,s){this.db.prepare(`
+      INSERT OR IGNORE INTO goal_campaigns (
+        campaign_id, job_id, status, public_summary, created_at, updated_at
+      ) VALUES (?, ?, 'active', 'Public goal campaign summary unavailable', ?, ?)
+    `).run(e,t,a,s)}configureConnection(){const e=String(p(this.db.pragma("journal_mode = WAL",{simple:!0}))??"").toLowerCase();if(e!=="wal")throw new i("sqlite-migration-failed",`Continuity SQLite journal_mode did not switch to WAL (observed ${e||"unknown"}).`);if(this.db.pragma("foreign_keys = ON"),this.db.pragma(`busy_timeout = ${this.busyTimeoutMs}`),Number(p(this.db.pragma("foreign_keys",{simple:!0}))??0)!==1)throw new i("sqlite-migration-failed","Continuity SQLite foreign_keys pragma is not enabled.")}ensureMigrationTable(){this.db.exec(`
+      CREATE TABLE IF NOT EXISTS continuity_migrations (
+        version INTEGER PRIMARY KEY,
+        name TEXT NOT NULL,
+        checksum TEXT NOT NULL,
+        applied_at TEXT NOT NULL
+      );
+    `)}applyMigrations(){this.db.transaction(()=>{for(const t of R){const a=v(t.sql),s=this.db.prepare("SELECT version, name, checksum FROM continuity_migrations WHERE version = ?").get(t.version);if(s){if(s.checksum!==a||s.name!==t.name)throw new i("sqlite-migration-conflict",`Continuity SQLite migration ${t.version} checksum conflict.`);continue}this.db.exec(t.sql),this.db.prepare("INSERT INTO continuity_migrations (version, name, checksum, applied_at) VALUES (?, ?, ?, ?)").run(t.version,t.name,a,this.now()),this.db.pragma(`user_version = ${t.version}`)}})()}assertCanMutate(){if(this.mutationBlocked)throw new i("sqlite-mutation-blocked","Continuity SQLite mutation is blocked after integrity failure.",{mutationBlocked:!0})}toWriteResult(e){const t=e.changes>0;return{inserted:t,replay:!t,changes:e.changes}}}export{A as CONTINUITY_SQLITE_FILENAME,f as CONTINUITY_SQLITE_RELATIVE_DIR,K as CONTINUITY_SQLITE_SCHEMA_VERSION,Q as ContinuitySqliteStore,i as ContinuitySqliteStoreError,j as DEFAULT_CONTINUITY_SQLITE_BUSY_TIMEOUT_MS,I as SQLITE_ADAPTER_INSTALL_GUIDANCE,H as continuitySqliteStorePath,P as loadBetterSqlite3Adapter,z as openContinuitySqliteStore};