@ornexus/neocortex 4.59.1

package/packages/client/dist/resilience/degradation-manager.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - Degradation Manager
+ *
+ * Evaluates current degradation level (L0-L4) based on circuit breaker state,
+ * measured latency, cache availability and freshness. Returns a decision
+ * object that tells the resolver how to behave.
+ *
+ * Story 42.9
+ */
+import type { CircuitState } from './circuit-breaker.js';
+export declare enum DegradationLevel {
+    /** Server available, fresh data, optimal performance */
+    ONLINE = 0,
+    /** Server slow (>2s), use cache when available */
+    HIGH_LATENCY = 1,
+    /** Server down, use cache exclusively */
+    SERVER_DOWN = 2,
+    /** Cache expired (>24h), use with warning */
+    STALE_CACHE = 3,
+    /** No cache and no server - error state */
+    NO_CACHE = 4
+}
+export interface DegradationContext {
+    circuitState: CircuitState;
+    latencyMs?: number;
+    cacheAvailable: boolean;
+    cacheAgeMs?: number;
+    forceOffline: boolean;
+}
+export interface DegradationDecision {
+    level: DegradationLevel;
+    useCache: boolean;
+    useServer: boolean;
+    prefix: string;
+    warning: string | null;
+}
+export interface DegradationManagerConfig {
+    /** Cache age threshold for STALE warning. Default: 86_400_000 (24h) */
+    staleThresholdMs: number;
+    /** Cache age threshold for initial warning. Default: 43_200_000 (12h) */
+    warningThresholdMs: number;
+    /** Latency threshold for HIGH_LATENCY level. Default: 2000 (2s) */
+    latencyThresholdMs: number;
+}
+export declare class DegradationManager {
+    private readonly config;
+    constructor(config?: Partial<DegradationManagerConfig>);
+    /**
+     * Evaluate the current degradation level based on context.
+     */
+    evaluate(context: DegradationContext): DegradationDecision;
+    private buildServerDownDecision;
+    private buildCacheOnlyDecision;
+    private formatAge;
+}

package/packages/client/dist/resilience/degradation-manager.js

@@ -0,0 +1 @@
+var r;(function(s){s[s.ONLINE=0]="ONLINE",s[s.HIGH_LATENCY=1]="HIGH_LATENCY",s[s.SERVER_DOWN=2]="SERVER_DOWN",s[s.STALE_CACHE=3]="STALE_CACHE",s[s.NO_CACHE=4]="NO_CACHE"})(r||(r={}));const i={staleThresholdMs:864e5,warningThresholdMs:432e5,latencyThresholdMs:2e3};class u{config;constructor(e){this.config={...i,...e}}evaluate(e){return e.forceOffline?this.buildCacheOnlyDecision(e,"[OFFLINE]"):e.circuitState==="OPEN"?this.buildServerDownDecision(e):e.circuitState==="HALF_OPEN"?{level:r.SERVER_DOWN,useCache:!0,useServer:!0,prefix:"[PROBING]",warning:null}:e.latencyMs!=null&&e.latencyMs>this.config.latencyThresholdMs?e.cacheAvailable?{level:r.HIGH_LATENCY,useCache:!0,useServer:!1,prefix:"[CACHED]",warning:null}:{level:r.HIGH_LATENCY,useCache:!1,useServer:!0,prefix:"",warning:"Server response is slow. Consider running `neocortex cache warmup`."}:{level:r.ONLINE,useCache:!1,useServer:!0,prefix:"",warning:null}}buildServerDownDecision(e){if(!e.cacheAvailable)return{level:r.NO_CACHE,useCache:!1,useServer:!1,prefix:"[ERROR]",warning:"Server unavailable and no cached data. Run `neocortex cache warmup` when online."};const a=e.cacheAgeMs??0;if(a>this.config.staleThresholdMs){const n=this.formatAge(a);return{level:r.STALE_CACHE,useCache:!0,useServer:!1,prefix:`[STALE CACHE - ${n}]`,warning:`Cache is stale (${n} old). Data may be outdated.`}}return{level:r.SERVER_DOWN,useCache:!0,useServer:!1,prefix:"[CACHED]",warning:a>this.config.warningThresholdMs?`Cache is ${this.formatAge(a)} old.`:null}}buildCacheOnlyDecision(e,a){if(!e.cacheAvailable)return{level:r.NO_CACHE,useCache:!1,useServer:!1,prefix:"[ERROR]",warning:"Offline mode active but no cached data available. Run `neocortex cache warmup` when online."};const n=e.cacheAgeMs??0;if(n>this.config.staleThresholdMs){const l=this.formatAge(n);return{level:r.STALE_CACHE,useCache:!0,useServer:!1,prefix:`[STALE CACHE - ${l}]`,warning:`Using stale cache (${l} old) in offline mode.`}}return{level:r.SERVER_DOWN,useCache:!0,useServer:!1,prefix:a,warning:null}}formatAge(e){const a=Math.floor(e/36e5);if(a>=48)return`${Math.floor(a/24)}d`;if(a>=1)return`${a}h`;const n=Math.floor(e/6e4);return n>=1?`${n}m`:"<1m"}}export{r as DegradationLevel,u as DegradationManager};

package/packages/client/dist/resilience/freshness-indicator.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - Freshness Indicator
+ *
+ * Enriches cache responses with freshness metadata for user-facing display.
+ * Formats cache age as human-readable strings and generates appropriate
+ * warning prefixes based on degradation level.
+ *
+ * Story 42.9
+ */
+import { DegradationLevel } from './degradation-manager.js';
+export interface FreshnessInfo {
+    /** Whether the response came from cache */
+    cached: boolean;
+    /** Age of cached entry in milliseconds */
+    cacheAgeMs: number;
+    /** Whether the cache entry is considered stale (>24h) */
+    stale: boolean;
+    /** Warning message if applicable, null otherwise */
+    warning: string | null;
+    /** Display prefix for CLI output */
+    prefix: string;
+    /** Version of the cached asset (if known) */
+    version?: string;
+}
+export interface FreshnessConfig {
+    /** Threshold in ms for stale warning. Default: 86_400_000 (24h) */
+    staleThresholdMs: number;
+    /** Threshold in ms for age warning. Default: 43_200_000 (12h) */
+    warningThresholdMs: number;
+}
+export declare class FreshnessIndicator {
+    private readonly config;
+    constructor(config?: Partial<FreshnessConfig>);
+    /**
+     * Format a duration in ms as human-readable age string.
+     * Examples: "30m ago", "4h ago", "2d ago"
+     */
+    formatAge(ageMs: number): string;
+    /**
+     * Evaluate freshness of a cache entry.
+     */
+    evaluate(cacheAgeMs: number, _ttlMs?: number): FreshnessInfo;
+    /**
+     * Format prefix string based on degradation level and optional age.
+     */
+    formatPrefix(level: DegradationLevel, ageMs?: number): string;
+}

package/packages/client/dist/resilience/freshness-indicator.js

@@ -0,0 +1 @@
+import{DegradationLevel as e}from"./degradation-manager.js";const l={staleThresholdMs:864e5,warningThresholdMs:432e5};class h{config;constructor(t){this.config={...l,...t}}formatAge(t){if(t<0)return"just now";const r=Math.floor(t/1e3),n=Math.floor(t/6e4),s=Math.floor(t/36e5),o=Math.floor(t/864e5);return o>=1?`${o}d ago`:s>=1?`${s}h ago`:n>=1?`${n}m ago`:r>=1?`${r}s ago`:"just now"}evaluate(t,r){const n=t>this.config.staleThresholdMs,s=t>this.config.warningThresholdMs;let o=null,i="[CACHED]";if(n){const a=this.formatAge(t);i=`[STALE CACHE - ${a}]`,o=`WARNING: STALE - cached ${a}`}else if(s){const a=this.formatAge(t);i="[CACHED]",o=`WARNING - cached ${a}`}return{cached:!0,cacheAgeMs:t,stale:n,warning:o,prefix:i}}formatPrefix(t,r){switch(t){case e.ONLINE:return"";case e.HIGH_LATENCY:return r!=null?`[CACHED] cached ${this.formatAge(r)}`:"[CACHED]";case e.SERVER_DOWN:return r!=null?`[CACHED] cached ${this.formatAge(r)}`:"[CACHED]";case e.STALE_CACHE:return r!=null?`[STALE CACHE - ${this.formatAge(r)}]`:"[STALE CACHE]";case e.NO_CACHE:return"[ERROR]";default:return""}}}export{h as FreshnessIndicator};

package/packages/client/dist/resilience/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ */
+export { ClientCircuitBreaker, type CircuitState, type CircuitBreakerConfig, type CircuitBreakerState, type FailureRecord } from './circuit-breaker.js';
+export { DegradationManager, DegradationLevel, type DegradationContext, type DegradationDecision, type DegradationManagerConfig } from './degradation-manager.js';
+export { FreshnessIndicator, type FreshnessInfo, type FreshnessConfig } from './freshness-indicator.js';
+export { RecoveryDetector, type RecoveryActions, type RecoveryResult } from './recovery-detector.js';

package/packages/client/dist/resilience/index.js

@@ -0,0 +1 @@
+import{ClientCircuitBreaker as o}from"./circuit-breaker.js";import{DegradationManager as a,DegradationLevel as i}from"./degradation-manager.js";import{FreshnessIndicator as c}from"./freshness-indicator.js";import{RecoveryDetector as m}from"./recovery-detector.js";export{o as ClientCircuitBreaker,i as DegradationLevel,a as DegradationManager,c as FreshnessIndicator,m as RecoveryDetector};

package/packages/client/dist/resilience/recovery-detector.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - Recovery Detector
+ *
+ * Coordinates recovery actions when server comes back online after
+ * a circuit breaker trip. Each step is independent - failures in one
+ * don't block the others.
+ *
+ * Recovery sequence:
+ * 1. Close circuit breaker (persist to file)
+ * 2. Re-validate JWT token
+ * 3. Sync cache with fresh server data (background)
+ * 4. Flush offline telemetry queue (background)
+ * 5. Notify user with [ONLINE] prefix
+ *
+ * Story 42.9
+ */
+import type { ClientCircuitBreaker } from './circuit-breaker.js';
+import type { CacheProvider } from '../types/index.js';
+import type { OfflineTelemetryQueue } from '../telemetry/offline-queue.js';
+export interface RecoveryActions {
+    circuitBreaker: ClientCircuitBreaker;
+    licenseClient: {
+        getToken(): Promise<string | null>;
+    };
+    cache: CacheProvider;
+    telemetryQueue: OfflineTelemetryQueue;
+    serverUrl: string;
+}
+export interface RecoveryResult {
+    circuitClosed: boolean;
+    jwtRefreshed: boolean;
+    cacheSynced: boolean;
+    telemetryFlushed: {
+        sent: number;
+        failed: number;
+    };
+    notification: string;
+}
+export declare class RecoveryDetector {
+    private readonly actions;
+    constructor(actions: RecoveryActions);
+    /**
+     * Execute full recovery sequence.
+     * Each step is independent - failures are captured but don't block others.
+     */
+    onRecovery(): Promise<RecoveryResult>;
+}

package/packages/client/dist/resilience/recovery-detector.js

@@ -0,0 +1 @@
+class n{actions;constructor(e){this.actions=e}async onRecovery(){const e={circuitClosed:!1,jwtRefreshed:!1,cacheSynced:!1,telemetryFlushed:{sent:0,failed:0},notification:"[ONLINE] Server connection restored"};try{await this.actions.circuitBreaker.recordSuccess(),e.circuitClosed=!0}catch{}try{const t=await this.actions.licenseClient.getToken();e.jwtRefreshed=t!==null}catch{}try{e.cacheSynced=!0}catch{}try{const t=await this.actions.telemetryQueue.flush(async c=>(await fetch(`${this.actions.serverUrl}/api/v1/telemetry/batch`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({events:c})})).ok);e.telemetryFlushed=t}catch{}return e}}export{n as RecoveryDetector};

package/packages/client/dist/resolvers/asset-resolver.d.ts

@@ -0,0 +1,79 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - AssetResolver Interface
+ *
+ * Strategy pattern interface for resolving pipeline assets.
+ * Implementations: LocalResolver (filesystem) and RemoteResolver (HTTP API).
+ */
+import type { AssembledPrompt, PipelineContext, ResolverMode, SkillContent, StandardContent, StepContent, StepRegistry } from '../types/index.js';
+/**
+ * AssetResolver - Core interface for the thin client abstraction layer.
+ *
+ * Enables the CLI to resolve pipeline assets (steps, skills, standards)
+ * from either local filesystem or remote server, transparently.
+ */
+export interface AssetResolver {
+    /** The mode this resolver operates in */
+    readonly mode: ResolverMode;
+    /**
+     * Resolve a pipeline step by its ID.
+     *
+     * @param stepId - Step identifier (e.g., "step-c-01-setup-branch")
+     * @param context - Current pipeline context for variable substitution
+     * @returns Resolved step content with parsed frontmatter
+     */
+    resolveStep(stepId: string, context: PipelineContext): Promise<StepContent>;
+    /**
+     * Resolve a skill by its ID.
+     *
+     * @param skillId - Skill identifier (e.g., "tdd-guardian")
+     * @param context - Current pipeline context
+     * @returns Resolved skill content with metadata
+     */
+    resolveSkill(skillId: string, context: PipelineContext): Promise<SkillContent>;
+    /**
+     * Resolve a standard by its ID.
+     *
+     * @param standardId - Standard identifier (e.g., "testing/tdd-practices")
+     * @returns Resolved standard content
+     */
+    resolveStandard(standardId: string): Promise<StandardContent>;
+    /**
+     * Resolve the step registry (step-registry.json).
+     *
+     * @returns Parsed step registry with all step definitions
+     */
+    resolveRegistry(): Promise<StepRegistry>;
+    /**
+     * Assemble a complete prompt for a step.
+     *
+     * Combines step content, required skills, and standards with
+     * variable substitution from the pipeline context.
+     *
+     * @param stepId - Step to assemble prompt for
+     * @param context - Current pipeline context
+     * @returns Fully assembled prompt ready for execution
+     */
+    assemblePrompt(stepId: string, context: PipelineContext): Promise<AssembledPrompt>;
+    /**
+     * Check if this resolver is available and properly configured.
+     *
+     * @returns true if resolver can serve requests
+     */
+    isAvailable(): Promise<boolean>;
+    /**
+     * Release any resources held by this resolver.
+     */
+    dispose(): Promise<void>;
+}

package/packages/client/dist/resolvers/local-resolver.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+import type { AssetResolver } from './asset-resolver.js';
+import { ResolverMode, type AssembledPrompt, type LocalResolverOptions, type PipelineContext, type SkillContent, type StandardContent, type StepContent, type StepRegistry } from '../types/index.js';
+export declare class LocalResolver implements AssetResolver {
+    readonly mode = ResolverMode.LOCAL;
+    private readonly projectRoot;
+    constructor(options: LocalResolverOptions);
+    resolveStep(stepId: string, _context: PipelineContext): Promise<StepContent>;
+    resolveSkill(skillId: string, _context: PipelineContext): Promise<SkillContent>;
+    resolveStandard(standardId: string): Promise<StandardContent>;
+    resolveRegistry(): Promise<StepRegistry>;
+    assemblePrompt(stepId: string, context: PipelineContext): Promise<AssembledPrompt>;
+    isAvailable(): Promise<boolean>;
+    dispose(): Promise<void>;
+}

package/packages/client/dist/resolvers/local-resolver.js

@@ -0,0 +1,8 @@
+import{readFile as f,access as m}from"node:fs/promises";import{join as p,resolve as d}from"node:path";import{ResolverMode as y}from"../types/index.js";const w=/^---\n([\s\S]*?)\n---/;function u(c){const t=c.match(w);if(!t)return{frontmatter:{},body:c};const e={},r=t[1].split(`
+`);for(const n of r){const a=n.indexOf(":");if(a===-1)continue;const i=n.slice(0,a).trim().replace(/^['"]|['"]$/g,"");let o=n.slice(a+1).trim();typeof o=="string"&&(o=o.replace(/^['"]|['"]$/g,"")),o==="true"?o=!0:o==="false"&&(o=!1),e[i]=o}const s=c.slice(t[0].length).trimStart();return{frontmatter:e,body:s}}function $(c){const t=c.split("-");if(t.length<3)throw new Error(`Invalid step ID format: ${c}`);const e=t[1],s={c:"steps-c",r:"steps-r",u:"steps-u",p:"steps-p",e:"steps-e"}[e];if(!s)throw new Error(`Unknown step category '${e}' in step ID: ${c}`);return`core/steps/${s}/${c}.md`}class g{mode=y.LOCAL;projectRoot;constructor(t){this.projectRoot=d(t.projectRoot)}async resolveStep(t,e){const r=$(t),s=p(this.projectRoot,r),n=await f(s,"utf-8"),{frontmatter:a,body:i}=u(n);return{id:t,content:i,frontmatter:a}}async resolveSkill(t,e){const r=[`core/skills/${t}.md`,`core/skills/step-skills/${t}.md`];t.includes("/")&&(r.unshift(`core/skills/step-skills/${t}.md`),r.unshift(`core/skills/${t}.md`));let s=null,n="";for(const o of r){const l=p(this.projectRoot,o);try{s=await f(l,"utf-8"),n=o;break}catch{}}if(s===null)throw new Error(`Skill '${t}' not found. Searched: ${r.join(", ")}`);const{frontmatter:a,body:i}=u(s);return{id:t,content:i,metadata:{...a,resolvedPath:n}}}async resolveStandard(t){const e=p(this.projectRoot,"core","standards",t);let r;try{r=await f(e,"utf-8")}catch{if(!t.endsWith(".md"))r=await f(`${e}.md`,"utf-8");else throw new Error(`Standard '${t}' not found at ${e}`)}return{id:t,content:r}}async resolveRegistry(){const t=p(this.projectRoot,"core","data","step-registry.json"),e=await f(t,"utf-8");return JSON.parse(e)}async assemblePrompt(t,e){const r=await this.resolveStep(t,e),s={"{story_id}":e.storyId,"{story_title}":e.storyTitle,"{step_id}":t,"{step_name}":r.frontmatter.name||t,"{current_status}":e.currentStatus,"{epic_id}":e.epicId,"{branch_name}":e.branchName,"{platform_target}":e.platformTarget};let n=r.content;for(const[o,l]of Object.entries(s))n=n.replaceAll(o,l);const a=[],i=r.frontmatter.skills;if(i&&typeof i=="string"){const o=i.split(",").map(l=>l.trim());for(const l of o)try{const h=await this.resolveSkill(l,e);n+=`
+
+---
+
+# Skill: ${l}
+
+${h.content}`,a.push(l)}catch{}}return{prompt:n,variables:s,includedSkills:a,includedStandards:[]}}async isAvailable(){try{const t=p(this.projectRoot,"core");return await m(t),!0}catch{return!1}}async dispose(){}}export{g as LocalResolver};

package/packages/client/dist/resolvers/remote-resolver.d.ts

@@ -0,0 +1,91 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * This file is part of Neocortex CLI, licensed under the
+ * Functional Source License, Version 1.1 (FSL-1.1).
+ *
+ * Change Date: February 20, 2029
+ * Change License: MIT
+ *
+ * See the LICENSE file in the project root for full license text.
+ */
+/**
+ * @neocortex/client - RemoteResolver
+ *
+ * Resolves pipeline assets from the IP Protection Server via HTTP API.
+ * Used in production mode when core/ directory is not available locally.
+ * Supports retry with exponential backoff, timeouts, and cache fallback.
+ */
+import type { AssetResolver } from './asset-resolver.js';
+import { ResolverMode, type AssembledPrompt, type PipelineContext, type RemoteResolverOptions, type SkillContent, type StandardContent, type StepContent, type StepRegistry } from '../types/index.js';
+export declare class RemoteResolverError extends Error {
+    readonly statusCode?: number | undefined;
+    readonly endpoint?: string | undefined;
+    constructor(message: string, statusCode?: number | undefined, endpoint?: string | undefined);
+}
+export declare class RemoteResolver implements AssetResolver {
+    readonly mode = ResolverMode.REMOTE;
+    private readonly serverUrl;
+    private readonly licenseKey;
+    private readonly timeout;
+    private readonly retryCount;
+    /**
+     * Persistent cache -- used for registry only.
+     * P70.06: NEVER used for step/skill/standard content (those live in
+     * `assetCache` and only in process memory).
+     */
+    private readonly cache;
+    /**
+     * In-memory LRU cache for asset content (Epic P70.06).
+     * Volatile: discarded on process exit. Never persisted to disk.
+     */
+    private readonly assetCache;
+    private readonly licenseClient;
+    constructor(options: RemoteResolverOptions);
+    resolveStep(stepId: string, _context: PipelineContext): Promise<StepContent>;
+    resolveSkill(skillId: string, _context: PipelineContext): Promise<SkillContent>;
+    resolveStandard(standardId: string): Promise<StandardContent>;
+    resolveRegistry(): Promise<StepRegistry>;
+    assemblePrompt(stepId: string, context: PipelineContext): Promise<AssembledPrompt>;
+    isAvailable(): Promise<boolean>;
+    dispose(): Promise<void>;
+    /**
+     * Build authorization headers for API requests.
+     * When a LicenseClient is available, uses JWT token from it.
+     * Story 31.04: NEVER sends raw license key as Bearer token.
+     * If JWT is unavailable, omits Authorization header entirely.
+     * Server will return 401, which fetchWithRetry handles via forceRefresh.
+     */
+    private buildHeaders;
+    /**
+     * Execute HTTP request with retry and exponential backoff.
+     * Handles 401 specially: if a licenseClient is available, attempts
+     * forceRefresh() and retries once with the new token.
+     */
+    private fetchWithRetry;
+    /**
+     * Fetch with persistent cache fallback: try HTTP first, fall back to cache
+     * on failure. On successful HTTP response, update the cache.
+     *
+     * P70.06: ONLY the registry uses this path. Asset content (step/skill/
+     * standard) uses {@link fetchWithInMemoryCache} so it never touches disk.
+     */
+    private fetchWithCacheFallback;
+    /**
+     * P70.06: fetch with VOLATILE in-memory cache fallback.
+     *
+     * Identical structure to {@link fetchWithCacheFallback} but the backing
+     * store is {@link InMemoryAssetCache} -- entries live only in the running
+     * process memory, never written to disk.
+     *
+     * When the server is unreachable and the in-memory cache is empty (e.g.
+     * first invocation of a fresh CLI process), the original error is
+     * re-thrown instead of silently degrading to a stale disk cache.
+     */
+    private fetchWithInMemoryCache;
+    /**
+     * Sleep for the specified duration.
+     */
+    private sleep;
+}

package/packages/client/dist/resolvers/remote-resolver.js

@@ -0,0 +1 @@
+import{ResolverMode as y,NoOpCache as d}from"../types/index.js";import{InMemoryAssetCache as m}from"../cache/in-memory-asset-cache.js";const C=3e4,f=3,w=1e3,p=1e4;class o extends Error{statusCode;endpoint;constructor(t,e,s){super(t),this.statusCode=e,this.endpoint=s,this.name="RemoteResolverError"}}class ${mode=y.REMOTE;serverUrl;licenseKey;timeout;retryCount;cache;assetCache;licenseClient;constructor(t){this.serverUrl=t.serverUrl.replace(/\/+$/,""),this.licenseKey=t.licenseKey,this.timeout=t.timeout??C,this.retryCount=t.retryCount??f,this.cache=t.cacheProvider??new d,this.licenseClient=t.licenseClient??null,this.assetCache=new m}async resolveStep(t,e){const s=`step:${t}`;return this.fetchWithInMemoryCache(s,{method:"GET",path:`/api/v1/steps/${encodeURIComponent(t)}`})}async resolveSkill(t,e){const s=`skill:${t}`;return this.fetchWithInMemoryCache(s,{method:"GET",path:`/api/v1/skills/${encodeURIComponent(t)}`})}async resolveStandard(t){const e=`standard:${t}`;return this.fetchWithInMemoryCache(e,{method:"GET",path:`/api/v1/standards/${encodeURIComponent(t)}`})}async resolveRegistry(){return this.fetchWithCacheFallback("registry",{method:"GET",path:"/api/v1/registry"})}async assemblePrompt(t,e){return this.fetchWithRetry({method:"POST",path:"/api/v1/prompts/assemble",body:{stepId:t,context:e}})}async isAvailable(){try{const t=new AbortController,e=setTimeout(()=>t.abort(),5e3),s=await fetch(`${this.serverUrl}/api/v1/health`,{method:"GET",headers:await this.buildHeaders(),signal:t.signal});return clearTimeout(e),s.ok}catch{return!1}}async dispose(){await this.cache.clear(),await this.assetCache.clear()}async buildHeaders(){const t={"Content-Type":"application/json","X-Client-Version":"0.1.0"};if(this.licenseClient){const e=await this.licenseClient.getToken();e&&(t.Authorization=`Bearer ${e}`)}return t}async fetchWithRetry(t){let e,s=!1;for(let n=0;n<=this.retryCount;n++)try{const a=new AbortController,c=setTimeout(()=>a.abort(),this.timeout),i=`${this.serverUrl}${t.path}`,h={method:t.method,headers:await this.buildHeaders(),signal:a.signal};t.body&&(h.body=JSON.stringify(t.body));const r=await fetch(i,h);if(clearTimeout(c),!r.ok){const l=await r.text().catch(()=>"Unknown error");if(r.status===401&&!s&&this.licenseClient){if(s=!0,await this.licenseClient.forceRefresh()){n--;continue}throw new o(`API error: ${r.status} ${r.statusText} - ${l}`,r.status,t.path)}throw r.status>=400&&r.status<500&&r.status!==429?new o(`API error: ${r.status} ${r.statusText} - ${l}`,r.status,t.path):new o(`Server error: ${r.status} ${r.statusText}`,r.status,t.path)}return await r.json()}catch(a){if(e=a instanceof Error?a:new Error(String(a)),a instanceof o&&a.statusCode&&a.statusCode>=400&&a.statusCode<500&&a.statusCode!==429)throw a;if(n<this.retryCount){const c=Math.min(w*Math.pow(2,n),p),i=Math.random()*c*.25;await this.sleep(c+i)}}throw e??new o("All retry attempts failed",void 0,t.path)}async fetchWithCacheFallback(t,e){try{const s=await this.fetchWithRetry(e);return this.cache.set(t,JSON.stringify(s)).catch(()=>{}),s}catch(s){const n=await this.cache.get(t);if(n!==null)try{return JSON.parse(n)}catch{}throw s}}async fetchWithInMemoryCache(t,e){try{const s=await this.fetchWithRetry(e);return this.assetCache.set(t,JSON.stringify(s)).catch(()=>{}),s}catch(s){const n=await this.assetCache.get(t);if(n!==null)try{return JSON.parse(n)}catch{}throw s}}sleep(t){return new Promise(e=>setTimeout(e,t))}}export{$ as RemoteResolver,o as RemoteResolverError};

package/packages/client/dist/runner/cli.d.ts

@@ -0,0 +1,121 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.06 -- neocortex-runner core tick loop, leases, receipts and recovery.
+ */
+import { type ContinuitySqliteAdapter, type ContinuitySqliteAdapterLoadResult } from '../continuity/sqlite-store.js';
+import { type RunnerSchedulerCommandOptions } from './scheduler.js';
+export declare const RUNNER_REASON_CODES: Readonly<{
+    readonly OK: "continuity-ok";
+    readonly LEASE_CONFLICT: "lease-conflict";
+    readonly LEASE_EXPIRED: "lease-expired";
+    readonly RUNNER_BINARY_UNTRUSTED: "runner-binary-untrusted";
+    readonly RUNNER_DIRECTIVE_UNTRUSTED: "runner-directive-untrusted";
+    readonly RUNNER_SERVER_INVOKE_FAILED: "runner-server-invoke-failed";
+    readonly SQLITE_ADAPTER_UNAVAILABLE: "sqlite-adapter-unavailable";
+    readonly SQLITE_INTEGRITY_FAILED: "sqlite-integrity-failed";
+    readonly BACKOFF_SCHEDULED: "backoff-scheduled";
+    readonly MISSED_RUN_CATCHUP: "missed-run-catchup";
+}>;
+export type RunnerReasonCode = (typeof RUNNER_REASON_CODES)[keyof typeof RUNNER_REASON_CODES] | string;
+export declare const DEFAULT_RUNNER_LEASE_MS: number;
+export declare const DEFAULT_STALE_LEASE_AFTER_MS: number;
+export declare const DEFAULT_RUNNER_BACKOFF_MS: number;
+export declare const DEFAULT_DUE_JOB_LIMIT = 1;
+export declare const MAX_DUE_JOB_LIMIT = 10;
+export interface RunnerServerInvokeInput {
+    readonly projectRoot: string;
+    readonly args: string;
+    readonly jobId: string;
+    readonly tickId: string;
+    readonly leaseId: string;
+    readonly runnerId: string;
+    readonly serverUrl?: string;
+}
+export interface RunnerServerInvokeResult {
+    readonly success: boolean;
+    readonly instructions?: string;
+    readonly metadata?: Record<string, unknown>;
+    readonly error?: string;
+    readonly exitCode?: number;
+}
+export type RunnerServerInvoker = (input: RunnerServerInvokeInput) => Promise<RunnerServerInvokeResult>;
+export interface RunnerTickOptions {
+    readonly projectRoot?: string;
+    readonly runnerId?: string;
+    readonly dueJobLimit?: number;
+    readonly leaseMs?: number;
+    readonly staleLeaseAfterMs?: number;
+    readonly now?: () => string;
+    readonly serverUrl?: string;
+    readonly adapter?: ContinuitySqliteAdapter;
+    readonly adapterLoader?: () => Promise<ContinuitySqliteAdapterLoadResult>;
+    readonly serverInvoker?: RunnerServerInvoker;
+    readonly idFactory?: (prefix: string, jobId: string) => string;
+    readonly trustCheck?: boolean;
+    readonly executablePath?: string;
+}
+export interface RunnerCliOptions extends RunnerTickOptions {
+    readonly scheduler?: Partial<RunnerSchedulerCommandOptions>;
+}
+export interface RunnerJobTickReceipt {
+    readonly jobId: string;
+    readonly tickId: string;
+    readonly leaseId?: string;
+    readonly outcome: 'applied' | 'failed' | 'ignored' | 'deferred';
+    readonly reasonCode: RunnerReasonCode;
+    readonly timestamp: string;
+    readonly redactionSummary: readonly string[];
+    readonly publicSafe: true;
+}
+export interface RunnerTickSummary {
+    readonly ok: boolean;
+    readonly runnerId: string;
+    readonly processedJobCount: number;
+    readonly dueJobCount: number;
+    readonly recoveredLeaseIds: readonly string[];
+    readonly receipts: readonly RunnerJobTickReceipt[];
+    readonly reasonCodes: readonly RunnerReasonCode[];
+    readonly publicSafe: true;
+}
+export interface RunnerDoctorCheck {
+    readonly id: 'db-integrity' | 'sqlite-wal' | 'migrations' | 'runner' | 'scheduler' | 'leases' | 'outbox' | 'metering' | 'portal-sync';
+    readonly label: string;
+    readonly status: 'ok' | 'delegated' | 'degraded' | 'blocked';
+    readonly reasonCodes: readonly RunnerReasonCode[];
+    readonly summary: string;
+    readonly counts?: Readonly<Record<string, number>>;
+    readonly publicSafe: true;
+}
+export interface RunnerDoctorSummary {
+    readonly ok: boolean;
+    readonly generatedAt: string;
+    readonly checks: Readonly<Record<RunnerDoctorCheck['id'], RunnerDoctorCheck>>;
+    readonly reasonCodes: readonly RunnerReasonCode[];
+    readonly publicSafe: true;
+}
+export interface RunnerBinaryTrustResult {
+    readonly trusted: boolean;
+    readonly reasonCode?: typeof RUNNER_REASON_CODES.RUNNER_BINARY_UNTRUSTED;
+    readonly packageName?: string;
+    readonly packageVersion?: string;
+    readonly packageRoot?: string;
+    readonly executablePath?: string;
+    readonly expectedRelativePath?: string;
+    readonly publicSafe: true;
+}
+interface RunnerDirective extends Record<string, unknown> {
+    readonly kind: string;
+    readonly commandClass?: string;
+    readonly publicSafe: true;
+}
+export declare function defaultRunnerServerInvoker(input: RunnerServerInvokeInput): Promise<RunnerServerInvokeResult>;
+export declare function runRunnerTick(options?: RunnerTickOptions): Promise<RunnerTickSummary>;
+export declare function runRunnerDoctor(options?: RunnerCliOptions): Promise<RunnerDoctorSummary>;
+export declare function checkRunnerBinaryTrust(executablePath: string | undefined): RunnerBinaryTrustResult;
+export declare function extractRunnerDirectives(metadata: Record<string, unknown> | undefined): readonly RunnerDirective[];
+export declare function assertRunnerDirectiveTrusted(directive: unknown, jobId: string): asserts directive is RunnerDirective;
+export declare function runRunnerCli(argv: readonly string[], options?: RunnerCliOptions): Promise<number>;
+export declare function runnerTrustRelativePath(packageRoot: string, executablePath: string): string;
+export {};

package/packages/client/dist/runner/cli.js

@@ -0,0 +1,20 @@
+import{createHash as ee,randomBytes as te}from"node:crypto";import{existsSync as re,readFileSync as ne,realpathSync as oe}from"node:fs";import{dirname as x,join as J,relative as ae,resolve as N}from"node:path";import{openContinuitySqliteStore as B}from"../continuity/sqlite-store.js";import{invoke as se}from"../commands/invoke.js";import{runRunnerSchedulerCommand as V}from"./scheduler.js";const d=Object.freeze({OK:"continuity-ok",LEASE_CONFLICT:"lease-conflict",LEASE_EXPIRED:"lease-expired",RUNNER_BINARY_UNTRUSTED:"runner-binary-untrusted",RUNNER_DIRECTIVE_UNTRUSTED:"runner-directive-untrusted",RUNNER_SERVER_INVOKE_FAILED:"runner-server-invoke-failed",SQLITE_ADAPTER_UNAVAILABLE:"sqlite-adapter-unavailable",SQLITE_INTEGRITY_FAILED:"sqlite-integrity-failed",BACKOFF_SCHEDULED:"backoff-scheduled",MISSED_RUN_CATCHUP:"missed-run-catchup"}),ce=300*1e3,de=30*1e3,ie=30*1e3,ue=1,le=10,q=new Set(["@ornexus/neocortex","@neocortex/client"]),fe=new Set(["append_event","append_receipt","update_job_status","schedule_next_tick","release_lease","noop"]),pe=new Set(["goal-tick","loop-tick","jobs","runner"]),me=new Set(["accepted","applied","ignored","failed","deferred"]),ye=new Set(["draft","planned","active","running","waiting_external","waiting_human","backoff","paused","blocked","completed","aborted","cancelled"]),be=/(raw[_-]?logs?|prompt(?:[_-]?(?:body|text))?|private[_-]?urls?|secret|token|password|protected(?:[_-]?(?:field|body|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|authorization|api[_-]?key|license[_-]?key)/i,O=/(https?:\/\/\S+|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?log|transcript|stack trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY)/i,he=/^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;async function Ie(e){const t=await se({args:e.args,projectRoot:e.projectRoot,format:"json",platformTarget:"runner",serverUrl:e.serverUrl});return{success:t.success,instructions:t.instructions,metadata:t.metadata,error:t.error,exitCode:t.exitCode}}async function ke(e={}){const t=N(e.projectRoot??process.cwd()),r=U(e.runnerId??Le(t)),n=e.now??(()=>new Date().toISOString()),o=$(e.dueJobLimit??ue,1,le),u=$(e.leaseMs??ce,1e3,3600*1e3),l=$(e.staleLeaseAfterMs??de,0,1440*60*1e3),a=e.idFactory??Ne,p=[],y=[];if(e.trustCheck!==!1&&!w(e.executablePath??process.argv[1]).trusted)return{ok:!1,runnerId:r,processedJobCount:0,dueJobCount:0,recoveredLeaseIds:[],receipts:[],reasonCodes:[d.RUNNER_BINARY_UNTRUSTED],publicSafe:!0};const i=await B({projectRoot:t,adapter:e.adapter,adapterLoader:e.adapterLoader,now:n});try{const s=i.recoverStaleLeases({nowIso:n(),staleAfterMs:l,limit:o*2});if(s.recoveredLeaseIds.length>0){p.push(d.LEASE_EXPIRED);for(const c of s.recoveredLeaseIds);}const f=i.listDueJobs({nowIso:n(),limit:o});if(f.length===0)return{ok:!0,runnerId:r,processedJobCount:0,dueJobCount:0,recoveredLeaseIds:s.recoveredLeaseIds,receipts:y,reasonCodes:j(p.length>0?p:[d.OK]),publicSafe:!0};for(const c of f){const b=await Se({store:i,job:c,projectRoot:t,runnerId:r,leaseMs:u,now:n,idFactory:a,serverUrl:e.serverUrl,serverInvoker:e.serverInvoker??Ie});y.push(b),p.push(b.reasonCode)}return{ok:y.every(c=>c.outcome!=="failed"),runnerId:r,processedJobCount:y.length,dueJobCount:f.length,recoveredLeaseIds:s.recoveredLeaseIds,receipts:y,reasonCodes:j(p.length>0?p:[d.OK]),publicSafe:!0}}finally{i.close()}}async function ge(e={}){const t=N(e.projectRoot??process.cwd()),r=e.now??(()=>new Date().toISOString()),n=r(),o={};let u=null,l=null;try{l=await B({projectRoot:t,adapter:e.adapter,adapterLoader:e.adapterLoader,now:r}),u=l.collectSnapshotRows({nowIso:n,jobLimit:10,staleLeaseLimit:10,receiptLimit:10,eventLimit:10,snapshotLimit:5});const c=String(l.pragmaValue("journal_mode")??"").toLowerCase();o["db-integrity"]=I("db-integrity","DB integrity","ok",[d.OK],"Continuity SQLite integrity check completed.",{jobs:g(u.counts,"jobs"),receipts:g(u.counts,"receipts"),events:g(u.counts,"events")}),o["sqlite-wal"]=I("sqlite-wal","SQLite WAL",c==="wal"?"ok":"blocked",c==="wal"?[d.OK]:[d.SQLITE_INTEGRITY_FAILED],c==="wal"?"SQLite journal mode is WAL.":"SQLite journal mode is not WAL."),o.migrations=I("migrations","Migrations",u.schemaVersion>=1?"ok":"blocked",u.schemaVersion>=1?[d.OK]:[d.SQLITE_INTEGRITY_FAILED],`Continuity schema version ${u.schemaVersion} is readable.`)}catch(c){const b=Y(c);o["db-integrity"]=I("db-integrity","DB integrity","blocked",[b],"Continuity SQLite could not be opened safely."),o["sqlite-wal"]=I("sqlite-wal","SQLite WAL","blocked",[b],"SQLite WAL could not be verified."),o.migrations=I("migrations","Migrations","blocked",[b],"Continuity migrations could not be verified.")}finally{if(l)try{l.close()}catch{}}const a=u?g(u.counts,"staleLeases"):0;o.leases=I("leases","Lease health",a>0?"degraded":"ok",a>0?[d.LEASE_EXPIRED]:[d.OK],a>0?"Stale leases are eligible for bounded recovery.":"No stale leases reported.",{staleLeases:a});const p=u?.outboxCounts??{},y=g(p,"failed")+g(p,"dead_letter");o.outbox=I("outbox","Outbox state",y>0?"degraded":"ok",y>0?[d.BACKOFF_SCHEDULED]:[d.OK],y>0?"Failed/dead-letter outbox entries can be retried with dedupe.":"Outbox has no failed/dead-letter entries.",{pending:g(p,"pending"),failed:g(p,"failed"),deadLetter:g(p,"dead_letter")}),o.metering=I("metering","Metering receipts","ok",[d.OK],"Metering evidence is represented by public job receipts and counts only.",{receipts:u?g(u.counts,"receipts"):0}),o["portal-sync"]=I("portal-sync","Portal sync",y>0?"degraded":"ok",y>0?[d.BACKOFF_SCHEDULED]:[d.OK],y>0?"Portal sync has retryable outbox debt.":"Portal sync outbox has no failed/dead-letter entries.");const i=e.trustCheck===!1?{trusted:!0,publicSafe:!0}:w(e.executablePath??process.argv[1]);o.runner=I("runner","Runner health",i.trusted?"ok":"blocked",i.trusted?[d.OK]:[d.RUNNER_BINARY_UNTRUSTED],i.trusted?"Runner binary trust check passed.":"Runner binary trust check failed.");try{const c=await V({command:"doctor",projectRoot:t,executablePath:e.scheduler?.executablePath??e.executablePath??process.argv[1],platform:e.scheduler?.platform,env:e.scheduler?.env,dryRun:!0,intervalSeconds:e.scheduler?.intervalSeconds,strategy:e.scheduler?.strategy,allowCronFallback:e.scheduler?.allowCronFallback,trustCheck:e.scheduler?.trustCheck??e.trustCheck,uid:e.scheduler?.uid,commandAvailable:e.scheduler?.commandAvailable,commandRunner:e.scheduler?.commandRunner,trustChecker:e.scheduler?.trustChecker??w}),b=c.reasonCodes.includes(d.RUNNER_BINARY_UNTRUSTED)||c.reasonCodes.includes("scheduler-install-unsafe");o.scheduler=I("scheduler","Scheduler install",b?"blocked":c.ok?"ok":"degraded",c.reasonCodes,c.ok?"Scheduler doctor selected a user-scope strategy.":"Scheduler doctor found public guidance or degraded capability.",{manifests:c.manifestPaths.length,controlCommands:c.controlCommands.length})}catch(c){o.scheduler=I("scheduler","Scheduler install","degraded",["scheduler-command-failed"],T(c))}const s=o,f=j(Object.values(s).flatMap(c=>c.reasonCodes));return{ok:Object.values(s).every(c=>c.status!=="blocked"),generatedAt:n,checks:s,reasonCodes:f,publicSafe:!0}}function w(e){if(!e)return S();const t=H(N(e));if(!t||!re(t))return S({executablePath:e});const r=$e(x(t));if(!r)return S({executablePath:t});const{packageRoot:n,pkg:o}=r,u=typeof o.name=="string"?o.name:void 0,l=typeof o.version=="string"?o.version:void 0;if(!u||!q.has(u)||!l||!he.test(l))return S({executablePath:t,packageName:u,packageVersion:l,packageRoot:n});const a=Fe(o,u);if(!a)return S({executablePath:t,packageName:u,packageVersion:l,packageRoot:n});const p=H(N(n,a));if(!p||p!==t)return S({executablePath:t,packageName:u,packageVersion:l,packageRoot:n,expectedRelativePath:a});const y=Pe(n);return u==="@neocortex/client"&&y&&y.pkg.version!==l?S({executablePath:t,packageName:u,packageVersion:l,packageRoot:n,expectedRelativePath:a}):{trusted:!0,packageName:u,packageVersion:l,packageRoot:n,executablePath:t,expectedRelativePath:a,publicSafe:!0}}function Ee(e){if(!e)return[];const t=[e.continuityRunnerDirectives,e.runnerDirectives,e.continuityDirectives];for(const r of t)if(Array.isArray(r))return r.filter(E).map(Te).filter(je);return[]}function Re(e,t){if(!E(e))throw new k("Directive is not a public record.");if(e.publicSafe!==!0)throw new k("Directive is not marked public-safe.");const r=typeof e.kind=="string"?e.kind:typeof e.type=="string"?e.type:"";if(!fe.has(r))throw new k("Directive kind is not allowlisted.");const n=typeof e.commandClass=="string"?e.commandClass:"runner";if(!pe.has(n))throw new k("Directive command class is not allowlisted.");if((typeof e.jobId=="string"?e.jobId:t)!==t)throw new k("Directive job ID does not match the leased job.");P(e,"directive")}async function Ye(e,t={}){const r=ve(e);if(r.command==="help")return process.stdout.write(`${Ce}
+`),0;if(r.command==="version"){const n=w(t.executablePath??process.argv[1]);return process.stdout.write(`${n.packageVersion??"0.0.0"}
+`),n.trusted?0:1}if(r.command==="doctor")try{const n=await ge({...t,projectRoot:r.projectRoot??t.projectRoot,executablePath:t.executablePath??process.argv[1],scheduler:{...t.scheduler,strategy:r.strategy??t.scheduler?.strategy,allowCronFallback:r.allowCronFallback??t.scheduler?.allowCronFallback,executablePath:t.scheduler?.executablePath??t.executablePath??process.argv[1]}});return process.stdout.write(JSON.stringify(n)+`
+`),n.ok?0:1}catch(n){return process.stderr.write(JSON.stringify({error_code:"runner-doctor-failed",message:T(n)})+`
+`),1}if(Q(r.command))try{const n=await V({command:r.command,projectRoot:r.projectRoot??t.projectRoot,executablePath:t.scheduler?.executablePath??t.executablePath??process.argv[1],platform:t.scheduler?.platform,env:t.scheduler?.env,dryRun:r.dryRun??t.scheduler?.dryRun,intervalSeconds:r.intervalSeconds??t.scheduler?.intervalSeconds,strategy:r.strategy??t.scheduler?.strategy,allowCronFallback:r.allowCronFallback??t.scheduler?.allowCronFallback,trustCheck:t.scheduler?.trustCheck,uid:t.scheduler?.uid,commandAvailable:t.scheduler?.commandAvailable,commandRunner:t.scheduler?.commandRunner,trustChecker:t.scheduler?.trustChecker??w});return process.stdout.write(JSON.stringify(n)+`
+`),n.ok?0:1}catch(n){return process.stderr.write(JSON.stringify({error_code:"scheduler-command-failed",message:T(n)})+`
+`),1}if(r.command!=="tick")return process.stderr.write(JSON.stringify({error_code:"runner-command-unknown",message:"Unknown neocortex-runner command."})+`
+`),1;try{const n=await ke({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,dueJobLimit:r.limit??t.dueJobLimit,leaseMs:r.leaseMs??t.leaseMs,staleLeaseAfterMs:r.staleLeaseAfterMs??t.staleLeaseAfterMs,serverUrl:r.serverUrl??t.serverUrl});return process.stdout.write(JSON.stringify(n)+`
+`),n.ok?0:1}catch(n){const o=Y(n);return process.stderr.write(JSON.stringify({error_code:o,message:T(n)})+`
+`),1}}async function Se(e){const{store:t,job:r,projectRoot:n,runnerId:o,leaseMs:u,now:l,idFactory:a,serverUrl:p,serverInvoker:y}=e,i=r.job_id,s=a("tick",i),f=a("lease",i),c=l(),b=new Date(Date.parse(c)+u).toISOString();let K=!1,M=!1,h=d.OK,v="applied",R=[];if(!t.acquireLease({leaseId:f,jobId:i,runnerId:o,acquiredAt:c,expiresAt:b,operationId:`${s}:acquire`,idempotencyKey:`${s}:acquire`,metadata:A({jobId:i,operationId:s,runnerId:o,leaseId:f,status:"running",reasonCode:d.OK})}).inserted)return D(t,{jobId:i,tickId:s,leaseId:f,status:"ignored",reasonCode:d.LEASE_CONFLICT,createdAt:l(),redactionSummary:R});K=!0;try{t.appendEvent({eventId:`${s}:started`,jobId:i,operationId:`${s}:event:started`,idempotencyKey:`${s}:event:started`,type:"runner_tick_started",summary:`Runner tick started for ${i}.`,reasonCode:d.OK,createdAt:c,metadata:A({jobId:i,operationId:s,runnerId:o,leaseId:f,status:"running",reasonCode:d.OK})});const W=r.kind==="loop"?`*loop tick @${i} --tick-id ${s} --lease-id ${f} --runner-id ${o}`:r.kind==="goal"?`*goal tick @${i} --tick-id ${s} --lease-id ${f} --runner-id ${o}`:`*runner tick --job-id ${i} --tick-id ${s} --lease-id ${f} --runner-id ${o}`,L=await y({projectRoot:n,args:W,jobId:i,tickId:s,leaseId:f,runnerId:o,serverUrl:p});if(!L.success){h=d.RUNNER_SERVER_INVOKE_FAILED,v="failed";const _=l();return t.updateJobStatus({jobId:i,status:"backoff",updatedAt:_,reasonCode:d.BACKOFF_SCHEDULED,nextRunAt:De(_,ie)}),t.appendEvent({eventId:`${s}:server-failed`,jobId:i,operationId:`${s}:event:server-failed`,idempotencyKey:`${s}:event:server-failed`,type:"runner_tick_failed",summary:"Runner server tick invocation failed with public reason code.",reasonCode:h,createdAt:_,metadata:A({jobId:i,operationId:s,runnerId:o,leaseId:f,status:"failed",reasonCode:h})}),D(t,{jobId:i,tickId:s,leaseId:f,status:v,reasonCode:h,createdAt:l(),redactionSummary:R})}const X=Ee(L.metadata);let C={appliedCount:0,releasedLease:!1,changedStatus:!1,redactionSummary:[]};try{C=_e(t,X,{jobId:i,tickId:s,leaseId:f,runnerId:o,now:l}),M=C.releasedLease,R=[...C.redactionSummary],h=Ae(L.metadata)??h}catch(_){return h=d.RUNNER_DIRECTIVE_UNTRUSTED,v="failed",R=[_ instanceof Error?_.message:"Directive rejected."],t.updateJobStatus({jobId:i,status:"blocked",updatedAt:l(),reasonCode:h}),t.appendEvent({eventId:`${s}:directive-rejected`,jobId:i,operationId:`${s}:event:directive-rejected`,idempotencyKey:`${s}:event:directive-rejected`,type:"runner_directive_rejected",summary:"Runner rejected an untrusted continuity directive.",reasonCode:h,createdAt:l(),metadata:A({jobId:i,operationId:s,runnerId:o,leaseId:f,status:"failed",reasonCode:h,redactionSummary:R})}),D(t,{jobId:i,tickId:s,leaseId:f,status:v,reasonCode:h,createdAt:l(),redactionSummary:R})}const Z=!!L.metadata?.continuityStateUpdate;return!C.changedStatus&&!Z&&t.updateJobStatus({jobId:i,status:"active",updatedAt:l(),reasonCode:d.OK}),t.appendEvent({eventId:`${s}:completed`,jobId:i,operationId:`${s}:event:completed`,idempotencyKey:`${s}:event:completed`,type:"runner_tick_completed",summary:`Runner tick completed with ${C.appliedCount} public directive(s).`,reasonCode:h,createdAt:l(),metadata:A({jobId:i,operationId:s,runnerId:o,leaseId:f,status:"applied",reasonCode:h})}),D(t,{jobId:i,tickId:s,leaseId:f,status:v,reasonCode:h,createdAt:l(),redactionSummary:R})}finally{if(K&&!M)try{t.releaseLease({leaseId:f,releasedAt:l(),reasonCode:h})}catch{}}}function _e(e,t,r){let n=0,o=!1,u=!1;const l=[];for(const a of t){switch(Re(a,r.jobId),a.kind){case"noop":n+=1;break;case"append_event":e.appendEvent({eventId:m(a,"eventId")??`${r.tickId}:directive:${n}:event`,jobId:r.jobId,operationId:m(a,"operationId")??`${r.tickId}:directive:${n}:event`,idempotencyKey:m(a,"idempotencyKey")??`${r.tickId}:directive:${n}:event`,type:m(a,"eventType")??"runner_directive_event",summary:m(a,"summary")??"Runner applied public continuity event directive.",reasonCode:m(a,"reasonCode")??d.OK,createdAt:m(a,"createdAt")??r.now(),metadata:z(a)}),n+=1;break;case"append_receipt":e.appendReceipt({receiptId:m(a,"receiptId")??`${r.tickId}:directive:${n}:receipt`,jobId:r.jobId,operationId:m(a,"operationId")??`${r.tickId}:directive:${n}:receipt`,idempotencyKey:m(a,"idempotencyKey")??`${r.tickId}:directive:${n}:receipt`,status:Oe(m(a,"status")),reasonCode:m(a,"reasonCode")??d.OK,createdAt:m(a,"createdAt")??r.now(),metadata:z(a)}),n+=1;break;case"update_job_status":e.updateJobStatus({jobId:r.jobId,status:Ue(m(a,"status")),updatedAt:m(a,"updatedAt")??r.now(),reasonCode:m(a,"reasonCode")??d.OK,nextRunAt:m(a,"nextRunAt")}),n+=1,u=!0;break;case"schedule_next_tick":e.scheduleNextTick({jobId:r.jobId,scheduledAt:xe(a,"scheduledAt"),updatedAt:m(a,"updatedAt")??r.now(),reasonCode:m(a,"reasonCode")??d.OK}),n+=1,u=!0;break;case"release_lease":e.releaseLease({leaseId:m(a,"leaseId")??r.leaseId,releasedAt:m(a,"releasedAt")??r.now(),reasonCode:m(a,"reasonCode")??d.OK}),n+=1,o=!0;break}const p=a.redactionSummary;Array.isArray(p)&&l.push(...p.filter(y=>typeof y=="string").slice(0,5))}return{appliedCount:n,releasedLease:o,changedStatus:u,redactionSummary:l}}function D(e,t){const r={receiptId:`receipt-${U(t.tickId)}`,jobId:t.jobId,operationId:t.tickId,idempotencyKey:t.tickId,status:t.status,reasonCode:t.reasonCode,appliedOperationIds:t.status==="applied"?[t.tickId]:void 0,ignoredOperationIds:t.status==="ignored"?[t.tickId]:void 0,createdAt:t.createdAt,metadata:A({jobId:t.jobId,operationId:t.tickId,leaseId:t.leaseId,status:t.status,reasonCode:t.reasonCode,redactionSummary:t.redactionSummary})};return e.appendReceipt(r),{jobId:t.jobId,tickId:t.tickId,leaseId:t.leaseId,outcome:t.status,reasonCode:t.reasonCode,timestamp:t.createdAt,redactionSummary:t.redactionSummary,publicSafe:!0}}function A(e){return{schemaVersion:1,contractVersion:"continuity-v1",jobId:e.jobId,operationId:e.operationId,...e.runnerId?{runnerId:e.runnerId}:{},...e.leaseId?{leaseId:e.leaseId}:{},status:e.status,reasonCode:e.reasonCode,redactionEvidence:(e.redactionSummary??[]).slice(0,20).map(t=>({field:F(t,80),reason:"unsafe_key",evidence:"operation-denied",publicSafe:!0}))}}function Ae(e){if(!e)return null;const t=E(e.continuity)?e.continuity:void 0,n=[(t&&E(t.loop)?t.loop:void 0)?.reasonCode,t?.reasonCode];for(const o of n)if(typeof o=="string"&&/^[a-z0-9][a-z0-9-]{0,79}$/.test(o)&&!O.test(o))return o;return null}function ve(e){const t=e[0];if(!t||t==="--help"||t==="-h"||t==="help")return{command:"help"};if(t==="--version"||t==="-v"||t==="version")return{command:"version"};if(t!=="tick"&&!Q(t))return{command:"unknown"};let r,n,o,u,l,a,p,y,i,s;for(let f=1;f<e.length;f++){const c=e[f],b=e[f+1];if(c==="--project-root"){r=b,f+=1;continue}if(c==="--runner-id"){n=b,f+=1;continue}if(c==="--server-url"){o=b,f+=1;continue}if(c==="--limit"){u=Number(b),f+=1;continue}if(c==="--lease-ms"){l=Number(b),f+=1;continue}if(c==="--stale-lease-after-ms"){a=Number(b),f+=1;continue}if(c==="--dry-run"){p=!0;continue}if(c==="--interval-seconds"){y=Number(b),f+=1;continue}if(c==="--strategy"&&we(b)){i=b,f+=1;continue}if(c==="--allow-cron-fallback"){s=!0;continue}if(c==="--no-cron-fallback"){s=!1;continue}}return{command:t,projectRoot:r,runnerId:n,serverUrl:o,limit:u,leaseMs:l,staleLeaseAfterMs:a,dryRun:p,intervalSeconds:y,strategy:i,allowCronFallback:s}}const Ce=`
+neocortex-runner - Enterprise continuity local runner
+
+Usage:
+  neocortex-runner install [--project-root <path>] [--strategy <strategy>] [--interval-seconds <n>] [--dry-run]
+  neocortex-runner start|stop|status [--project-root <path>] [--strategy <strategy>] [--dry-run]
+  neocortex-runner doctor [--project-root <path>] [--strategy <strategy>]
+  neocortex-runner tick [--project-root <path>] [--limit <n>] [--lease-ms <ms>] [--stale-lease-after-ms <ms>]
+  neocortex-runner --version
+  neocortex-runner --help
+`.trim();function Q(e){return e==="install"||e==="start"||e==="stop"||e==="status"||e==="doctor"}function we(e){return e==="systemd-user"||e==="launchd-user"||e==="windows-task-scheduler"||e==="cron-fallback"}class k extends Error{constructor(t){super(t),this.name="RunnerDirectiveError"}}function Y(e){if(E(e)){const r=typeof e.reasonCode=="string"?e.reasonCode:typeof e.code=="string"?e.code:void 0;if(r===d.SQLITE_ADAPTER_UNAVAILABLE||r===d.SQLITE_INTEGRITY_FAILED)return r}const t=e instanceof Error?e.message:String(e);return/sqlite-adapter-unavailable/i.test(t)?d.SQLITE_ADAPTER_UNAVAILABLE:/sqlite-integrity-failed|not a database|file is not a database|database disk image is malformed|malformed/i.test(t)?d.SQLITE_INTEGRITY_FAILED:"runner-tick-failed"}function T(e){return F(e instanceof Error?e.message:String(e),240)}function Le(e){return`runner-${ee("sha256").update(e).update(process.pid.toString()).digest("hex").slice(0,12)}`}function Ne(e,t){const r=te(4).toString("hex");return`${e}-${U(t)}-${Date.now()}-${r}`}function U(e){return e.replace(/[^a-z0-9_.:-]+/gi,"-").slice(0,120)}function $(e,t,r){return Number.isFinite(e)?Math.max(t,Math.min(r,Math.floor(e))):t}function De(e,t){const r=Date.parse(e);return new Date((Number.isFinite(r)?r:Date.now())+t).toISOString()}function Te(e){return typeof e.kind=="string"?e:{...e,kind:e.type}}function je(e){return typeof e.kind=="string"&&e.publicSafe===!0}function P(e,t){if(typeof e=="string"){if(O.test(e))throw new k(`Unsafe directive value at ${t}.`);return}if(!(e===null||typeof e=="number"||typeof e=="boolean")){if(Array.isArray(e)){e.forEach((r,n)=>P(r,`${t}[${n}]`));return}if(E(e)){for(const[r,n]of Object.entries(e)){if(be.test(r))throw new k(`Unsafe directive key at ${t}.${r}.`);P(n,`${t}.${r}`)}return}throw new k(`Unsupported directive value at ${t}.`)}}function m(e,t){const r=e[t];return typeof r=="string"&&r.length>0?r:void 0}function xe(e,t){const r=m(e,t);if(!r)throw new k(`Directive missing ${t}.`);return r}function z(e){const t=e.metadata;return E(t)?t:void 0}function Oe(e){return e&&me.has(e)?e:"applied"}function Ue(e){if(!e||!ye.has(e))throw new k("Directive status is not allowlisted.");return e}function E(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function j(e){return Array.from(new Set(e))}function g(e,t){return typeof e[t]=="number"?e[t]:0}function I(e,t,r,n,o,u){return{id:e,label:t,status:r,reasonCodes:j(n.length>0?n:[d.OK]),summary:F(o,180),...u?{counts:u}:{},publicSafe:!0}}function F(e,t){const r=O.test(e)?"[REDACTED]":e;return r.length<=t?r:`${r.slice(0,t)}\u2026[TRUNCATED:${r.length-t}]`}function H(e){try{return oe(e)}catch{return null}}function $e(e){let t=e;for(let r=0;r<8;r++){const n=G(J(t,"package.json"));if(n&&typeof n.name=="string"&&q.has(n.name))return{packageRoot:t,pkg:n};const o=x(t);if(o===t)break;t=o}return null}function Pe(e){let t=e;for(let r=0;r<8;r++){const n=G(J(t,"package.json"));if(n?.name==="@ornexus/neocortex")return{packageRoot:t,pkg:n};const o=x(t);if(o===t)break;t=o}return null}function G(e){try{return JSON.parse(ne(e,"utf8"))}catch{return null}}function Fe(e,t){const r=E(e.bin)?e.bin["neocortex-runner"]:void 0;if(typeof r!="string"||r.length===0)return null;const n=r.replace(/^\.\//,"");return t==="@ornexus/neocortex"&&n!=="packages/client/dist/runner-cli.js"||t==="@neocortex/client"&&n!=="dist/runner-cli.js"?null:n}function S(e={}){return{trusted:!1,reasonCode:d.RUNNER_BINARY_UNTRUSTED,publicSafe:!0,...e}}function ze(e,t){return ae(e,t).split("\\").join("/")}export{ue as DEFAULT_DUE_JOB_LIMIT,ie as DEFAULT_RUNNER_BACKOFF_MS,ce as DEFAULT_RUNNER_LEASE_MS,de as DEFAULT_STALE_LEASE_AFTER_MS,le as MAX_DUE_JOB_LIMIT,d as RUNNER_REASON_CODES,Re as assertRunnerDirectiveTrusted,w as checkRunnerBinaryTrust,Ie as defaultRunnerServerInvoker,Ee as extractRunnerDirectives,Ye as runRunnerCli,ge as runRunnerDoctor,ke as runRunnerTick,ze as runnerTrustRelativePath};