@ornexus/neocortex 4.60.16

package/packages/client/dist/continuity/migrations/001-initial-schema.js

@@ -0,0 +1,263 @@
+const E=Object.freeze({version:1,name:"initial-continuity-schema",sql:`
+CREATE TABLE IF NOT EXISTS jobs (
+  job_id TEXT PRIMARY KEY,
+  kind TEXT NOT NULL CHECK (kind IN ('goal', 'loop', 'runner', 'jobs')),
+  status TEXT NOT NULL CHECK (status IN (
+    'draft', 'planned', 'active', 'running', 'waiting_external', 'waiting_human',
+    'backoff', 'paused', 'blocked', 'completed', 'aborted', 'cancelled'
+  )),
+  summary TEXT,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  next_run_at TEXT,
+  goal_id TEXT,
+  loop_id TEXT,
+  campaign_id TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_jobs_status ON jobs(status);
+CREATE INDEX IF NOT EXISTS idx_jobs_next_run_at ON jobs(next_run_at);
+CREATE INDEX IF NOT EXISTS idx_jobs_goal_id ON jobs(goal_id);
+CREATE INDEX IF NOT EXISTS idx_jobs_loop_id ON jobs(loop_id);
+
+CREATE TABLE IF NOT EXISTS job_leases (
+  lease_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL,
+  runner_id TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'acquired' CHECK (status IN ('acquired', 'released', 'expired')),
+  acquired_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  released_at TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_job_leases_job_id ON job_leases(job_id);
+CREATE INDEX IF NOT EXISTS idx_job_leases_expires_at ON job_leases(expires_at);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_job_leases_active_job
+  ON job_leases(job_id)
+  WHERE released_at IS NULL;
+
+CREATE TABLE IF NOT EXISTS job_events (
+  event_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL,
+  operation_id TEXT NOT NULL,
+  idempotency_key TEXT,
+  event_sequence INTEGER,
+  type TEXT NOT NULL,
+  summary TEXT NOT NULL,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_job_events_job_id ON job_events(job_id);
+CREATE INDEX IF NOT EXISTS idx_job_events_created_at ON job_events(created_at);
+
+CREATE TABLE IF NOT EXISTS job_receipts (
+  receipt_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  status TEXT NOT NULL CHECK (status IN ('accepted', 'applied', 'ignored', 'failed', 'deferred')),
+  reason_code TEXT,
+  applied_operation_ids_json TEXT CHECK (applied_operation_ids_json IS NULL OR json_valid(applied_operation_ids_json)),
+  ignored_operation_ids_json TEXT CHECK (ignored_operation_ids_json IS NULL OR json_valid(ignored_operation_ids_json)),
+  created_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_job_receipts_job_id ON job_receipts(job_id);
+CREATE INDEX IF NOT EXISTS idx_job_receipts_created_at ON job_receipts(created_at);
+
+CREATE TABLE IF NOT EXISTS goal_campaigns (
+  campaign_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL UNIQUE,
+  status TEXT NOT NULL,
+  title TEXT,
+  public_summary TEXT,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_campaigns_status ON goal_campaigns(status);
+
+CREATE TABLE IF NOT EXISTS goal_ledger_items (
+  item_id TEXT PRIMARY KEY,
+  campaign_id TEXT NOT NULL,
+  operation_id TEXT NOT NULL,
+  idempotency_key TEXT,
+  item_type TEXT NOT NULL,
+  status TEXT NOT NULL,
+  summary TEXT NOT NULL,
+  reason_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_ledger_items_campaign_id ON goal_ledger_items(campaign_id);
+
+CREATE TABLE IF NOT EXISTS goal_verifiers (
+  verifier_id TEXT PRIMARY KEY,
+  campaign_id TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  status TEXT NOT NULL,
+  summary TEXT,
+  reason_code TEXT,
+  last_checked_at TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_verifiers_campaign_id ON goal_verifiers(campaign_id);
+
+CREATE TABLE IF NOT EXISTS goal_review_gates (
+  gate_id TEXT PRIMARY KEY,
+  campaign_id TEXT NOT NULL,
+  status TEXT NOT NULL,
+  summary TEXT,
+  required INTEGER NOT NULL DEFAULT 1 CHECK (required IN (0, 1)),
+  reason_code TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (campaign_id) REFERENCES goal_campaigns(campaign_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_goal_review_gates_campaign_id ON goal_review_gates(campaign_id);
+
+CREATE TABLE IF NOT EXISTS loop_jobs (
+  loop_id TEXT PRIMARY KEY,
+  job_id TEXT NOT NULL UNIQUE,
+  interval_seconds INTEGER NOT NULL CHECK (interval_seconds > 0),
+  max_iterations INTEGER,
+  max_duration_ms INTEGER,
+  backoff_policy_json TEXT CHECK (backoff_policy_json IS NULL OR json_valid(backoff_policy_json)),
+  overlap_policy TEXT NOT NULL,
+  next_tick_at TEXT,
+  iteration INTEGER NOT NULL DEFAULT 0 CHECK (iteration >= 0),
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_loop_jobs_next_tick_at ON loop_jobs(next_tick_at);
+
+CREATE TABLE IF NOT EXISTS artifacts (
+  artifact_id TEXT PRIMARY KEY,
+  job_id TEXT,
+  kind TEXT NOT NULL,
+  relative_path TEXT NOT NULL,
+  sha256 TEXT,
+  summary TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  created_at TEXT NOT NULL,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_artifacts_job_id ON artifacts(job_id);
+CREATE INDEX IF NOT EXISTS idx_artifacts_relative_path ON artifacts(relative_path);
+
+CREATE TABLE IF NOT EXISTS state_snapshots (
+  snapshot_id TEXT PRIMARY KEY,
+  job_id TEXT,
+  kind TEXT NOT NULL,
+  relative_path TEXT,
+  sha256 TEXT,
+  summary TEXT,
+  captured_at TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_state_snapshots_job_id ON state_snapshots(job_id);
+CREATE INDEX IF NOT EXISTS idx_state_snapshots_captured_at ON state_snapshots(captured_at);
+
+CREATE TABLE IF NOT EXISTS runner_config (
+  key TEXT PRIMARY KEY,
+  value_json TEXT NOT NULL CHECK (json_valid(value_json)),
+  updated_at TEXT NOT NULL,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE TABLE IF NOT EXISTS outbox (
+  outbox_id TEXT PRIMARY KEY,
+  job_id TEXT,
+  operation_id TEXT NOT NULL,
+  idempotency_key TEXT,
+  type TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'acked', 'failed', 'dead_letter')),
+  payload_json TEXT NOT NULL CHECK (json_valid(payload_json)),
+  retry_count INTEGER NOT NULL DEFAULT 0 CHECK (retry_count >= 0),
+  next_attempt_at TEXT,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE SET NULL,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_outbox_status_next_attempt ON outbox(status, next_attempt_at);
+CREATE INDEX IF NOT EXISTS idx_outbox_job_id ON outbox(job_id);
+`});export{E as INITIAL_CONTINUITY_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/002-processing-output-summary-indexes.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P185.02 -- Bounded processing-output summary cursor indexes.
+ */
+export declare const PROCESSING_OUTPUT_SUMMARY_SQLITE_MIGRATION: Readonly<{
+    readonly version: 2;
+    readonly name: "processing-output-summary-indexes";
+    readonly sql: "\nCREATE INDEX IF NOT EXISTS idx_job_events_type_created_at_event_id\n  ON job_events(type, created_at, event_id);\n\nCREATE INDEX IF NOT EXISTS idx_job_events_job_type_created_at_event_id\n  ON job_events(job_id, type, created_at, event_id);\n";
+}>;

package/packages/client/dist/continuity/migrations/002-processing-output-summary-indexes.js

@@ -0,0 +1,7 @@
+const e=Object.freeze({version:2,name:"processing-output-summary-indexes",sql:`
+CREATE INDEX IF NOT EXISTS idx_job_events_type_created_at_event_id
+  ON job_events(type, created_at, event_id);
+
+CREATE INDEX IF NOT EXISTS idx_job_events_job_type_created_at_event_id
+  ON job_events(job_id, type, created_at, event_id);
+`});export{e as PROCESSING_OUTPUT_SUMMARY_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/003-headless-execution-attempts.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P190.03 -- Headless execution attempt queue, leases and public summaries.
+ */
+export declare const HEADLESS_EXECUTION_ATTEMPTS_SQLITE_MIGRATION: Readonly<{
+    readonly version: 3;
+    readonly name: "headless-execution-attempts";
+    readonly sql: "\nCREATE TABLE IF NOT EXISTS headless_execution_attempts (\n  attempt_id TEXT PRIMARY KEY,\n  execution_id TEXT NOT NULL,\n  job_id TEXT NOT NULL,\n  directive_hash TEXT NOT NULL,\n  directive_kind TEXT NOT NULL CHECK (directive_kind IN ('run_yolo', 'run_yoloop')),\n  command_class TEXT NOT NULL CHECK (command_class IN ('goal-tick', 'loop-tick')),\n  target_kind TEXT NOT NULL CHECK (target_kind IN ('story', 'epic')),\n  target_ref TEXT NOT NULL,\n  story_id TEXT,\n  epic_id TEXT,\n  runtime_id TEXT,\n  model_id TEXT,\n  runtime_source TEXT CHECK (runtime_source IS NULL OR runtime_source IN ('explicit', 'origin', 'default', 'fallback', 'unspecified')),\n  status TEXT NOT NULL CHECK (status IN ('queued', 'running', 'completed', 'failed', 'timed_out', 'backoff', 'skipped')),\n  reason_code TEXT,\n  public_summary TEXT,\n  enqueued_at TEXT NOT NULL,\n  not_before_at TEXT,\n  started_at TEXT,\n  heartbeat_at TEXT,\n  completed_at TEXT,\n  duration_ms INTEGER CHECK (duration_ms IS NULL OR duration_ms >= 0),\n  retry_count INTEGER NOT NULL DEFAULT 0 CHECK (retry_count >= 0),\n  max_attempts INTEGER NOT NULL DEFAULT 3 CHECK (max_attempts > 0),\n  lease_id TEXT,\n  runner_id TEXT,\n  lease_expires_at TEXT,\n  lease_released_at TEXT,\n  operation_id TEXT,\n  idempotency_key TEXT,\n  counts_json TEXT CHECK (counts_json IS NULL OR json_valid(counts_json)),\n  hashes_json TEXT CHECK (hashes_json IS NULL OR json_valid(hashes_json)),\n  redaction_summary_json TEXT CHECK (redaction_summary_json IS NULL OR json_valid(redaction_summary_json)),\n  relative_paths_json TEXT CHECK (relative_paths_json IS NULL OR json_valid(relative_paths_json)),\n  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),\n  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),\n  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,\n  UNIQUE (operation_id),\n  UNIQUE (idempotency_key)\n);\n\nCREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_execution_id\n  ON headless_execution_attempts(execution_id);\n\nCREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_job_status\n  ON headless_execution_attempts(job_id, status);\n\nCREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_due\n  ON headless_execution_attempts(status, not_before_at, enqueued_at, attempt_id);\n\nCREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_lease_expiry\n  ON headless_execution_attempts(status, lease_expires_at, attempt_id);\n\nCREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_runtime_model\n  ON headless_execution_attempts(runtime_id, model_id);\n\nCREATE UNIQUE INDEX IF NOT EXISTS idx_headless_execution_attempts_active_lease\n  ON headless_execution_attempts(lease_id)\n  WHERE lease_id IS NOT NULL AND lease_released_at IS NULL;\n";
+}>;

package/packages/client/dist/continuity/migrations/003-headless-execution-attempts.js

@@ -0,0 +1,62 @@
+const e=Object.freeze({version:3,name:"headless-execution-attempts",sql:`
+CREATE TABLE IF NOT EXISTS headless_execution_attempts (
+  attempt_id TEXT PRIMARY KEY,
+  execution_id TEXT NOT NULL,
+  job_id TEXT NOT NULL,
+  directive_hash TEXT NOT NULL,
+  directive_kind TEXT NOT NULL CHECK (directive_kind IN ('run_yolo', 'run_yoloop')),
+  command_class TEXT NOT NULL CHECK (command_class IN ('goal-tick', 'loop-tick')),
+  target_kind TEXT NOT NULL CHECK (target_kind IN ('story', 'epic')),
+  target_ref TEXT NOT NULL,
+  story_id TEXT,
+  epic_id TEXT,
+  runtime_id TEXT,
+  model_id TEXT,
+  runtime_source TEXT CHECK (runtime_source IS NULL OR runtime_source IN ('explicit', 'origin', 'default', 'fallback', 'unspecified')),
+  status TEXT NOT NULL CHECK (status IN ('queued', 'running', 'completed', 'failed', 'timed_out', 'backoff', 'skipped')),
+  reason_code TEXT,
+  public_summary TEXT,
+  enqueued_at TEXT NOT NULL,
+  not_before_at TEXT,
+  started_at TEXT,
+  heartbeat_at TEXT,
+  completed_at TEXT,
+  duration_ms INTEGER CHECK (duration_ms IS NULL OR duration_ms >= 0),
+  retry_count INTEGER NOT NULL DEFAULT 0 CHECK (retry_count >= 0),
+  max_attempts INTEGER NOT NULL DEFAULT 3 CHECK (max_attempts > 0),
+  lease_id TEXT,
+  runner_id TEXT,
+  lease_expires_at TEXT,
+  lease_released_at TEXT,
+  operation_id TEXT,
+  idempotency_key TEXT,
+  counts_json TEXT CHECK (counts_json IS NULL OR json_valid(counts_json)),
+  hashes_json TEXT CHECK (hashes_json IS NULL OR json_valid(hashes_json)),
+  redaction_summary_json TEXT CHECK (redaction_summary_json IS NULL OR json_valid(redaction_summary_json)),
+  relative_paths_json TEXT CHECK (relative_paths_json IS NULL OR json_valid(relative_paths_json)),
+  metadata_json TEXT CHECK (metadata_json IS NULL OR json_valid(metadata_json)),
+  public_safe INTEGER NOT NULL DEFAULT 1 CHECK (public_safe = 1),
+  FOREIGN KEY (job_id) REFERENCES jobs(job_id) ON DELETE CASCADE,
+  UNIQUE (operation_id),
+  UNIQUE (idempotency_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_execution_id
+  ON headless_execution_attempts(execution_id);
+
+CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_job_status
+  ON headless_execution_attempts(job_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_due
+  ON headless_execution_attempts(status, not_before_at, enqueued_at, attempt_id);
+
+CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_lease_expiry
+  ON headless_execution_attempts(status, lease_expires_at, attempt_id);
+
+CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_runtime_model
+  ON headless_execution_attempts(runtime_id, model_id);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_headless_execution_attempts_active_lease
+  ON headless_execution_attempts(lease_id)
+  WHERE lease_id IS NOT NULL AND lease_released_at IS NULL;
+`});export{e as HEADLESS_EXECUTION_ATTEMPTS_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/004-outbox-delivery-state.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P192.03 -- Replay-safe outbox delivery cursor, ack and dead-letter state.
+ */
+export declare const OUTBOX_DELIVERY_STATE_SQLITE_MIGRATION: Readonly<{
+    readonly version: 4;
+    readonly name: "outbox-delivery-state";
+    readonly sql: "\nALTER TABLE outbox ADD COLUMN delivery_cursor TEXT;\nALTER TABLE outbox ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0);\nALTER TABLE outbox ADD COLUMN last_attempt_at TEXT;\nALTER TABLE outbox ADD COLUMN sent_at TEXT;\nALTER TABLE outbox ADD COLUMN acked_at TEXT;\nALTER TABLE outbox ADD COLUMN last_error_reason TEXT;\nALTER TABLE outbox ADD COLUMN last_error_summary TEXT;\nALTER TABLE outbox ADD COLUMN dead_letter_summary TEXT;\nALTER TABLE outbox ADD COLUMN dead_lettered_at TEXT;\n\nCREATE UNIQUE INDEX IF NOT EXISTS idx_outbox_delivery_cursor\n  ON outbox(delivery_cursor)\n  WHERE delivery_cursor IS NOT NULL;\nCREATE INDEX IF NOT EXISTS idx_outbox_delivery_batch\n  ON outbox(status, next_attempt_at, created_at, outbox_id);\nCREATE INDEX IF NOT EXISTS idx_outbox_ack_state\n  ON outbox(status, acked_at, updated_at);\n";
+}>;

package/packages/client/dist/continuity/migrations/004-outbox-delivery-state.js

@@ -0,0 +1,19 @@
+const t=Object.freeze({version:4,name:"outbox-delivery-state",sql:`
+ALTER TABLE outbox ADD COLUMN delivery_cursor TEXT;
+ALTER TABLE outbox ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0);
+ALTER TABLE outbox ADD COLUMN last_attempt_at TEXT;
+ALTER TABLE outbox ADD COLUMN sent_at TEXT;
+ALTER TABLE outbox ADD COLUMN acked_at TEXT;
+ALTER TABLE outbox ADD COLUMN last_error_reason TEXT;
+ALTER TABLE outbox ADD COLUMN last_error_summary TEXT;
+ALTER TABLE outbox ADD COLUMN dead_letter_summary TEXT;
+ALTER TABLE outbox ADD COLUMN dead_lettered_at TEXT;
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_outbox_delivery_cursor
+  ON outbox(delivery_cursor)
+  WHERE delivery_cursor IS NOT NULL;
+CREATE INDEX IF NOT EXISTS idx_outbox_delivery_batch
+  ON outbox(status, next_attempt_at, created_at, outbox_id);
+CREATE INDEX IF NOT EXISTS idx_outbox_ack_state
+  ON outbox(status, acked_at, updated_at);
+`});export{t as OUTBOX_DELIVERY_STATE_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/005-bounded-headless-queue.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P199.04 -- Additive bounded queue metadata for headless execution attempts.
+ */
+export declare const BOUNDED_HEADLESS_QUEUE_SQLITE_MIGRATION: Readonly<{
+    readonly version: 5;
+    readonly name: "bounded-headless-queue";
+    readonly sql: "\nALTER TABLE headless_execution_attempts\n  ADD COLUMN queue_priority INTEGER NOT NULL DEFAULT 0\n  CHECK (queue_priority >= -100 AND queue_priority <= 100);\n\nALTER TABLE headless_execution_attempts\n  ADD COLUMN queue_scope TEXT NOT NULL DEFAULT 'project'\n  CHECK (queue_scope IN ('project', 'workspace'));\n\nALTER TABLE headless_execution_attempts\n  ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0\n  CHECK (attempt_count >= 0);\n\nALTER TABLE headless_execution_attempts\n  ADD COLUMN next_retry_at TEXT;\n\nALTER TABLE headless_execution_attempts\n  ADD COLUMN dead_lettered_at TEXT;\n\nALTER TABLE headless_execution_attempts\n  ADD COLUMN dead_letter_reason_code TEXT;\n\nCREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_bounded_due\n  ON headless_execution_attempts(\n    status,\n    queue_priority DESC,\n    next_retry_at,\n    not_before_at,\n    enqueued_at,\n    attempt_id\n  );\n\nCREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_dead_letter\n  ON headless_execution_attempts(dead_lettered_at, attempt_id);\n";
+}>;

package/packages/client/dist/continuity/migrations/005-bounded-headless-queue.js

@@ -0,0 +1,35 @@
+const e=Object.freeze({version:5,name:"bounded-headless-queue",sql:`
+ALTER TABLE headless_execution_attempts
+  ADD COLUMN queue_priority INTEGER NOT NULL DEFAULT 0
+  CHECK (queue_priority >= -100 AND queue_priority <= 100);
+
+ALTER TABLE headless_execution_attempts
+  ADD COLUMN queue_scope TEXT NOT NULL DEFAULT 'project'
+  CHECK (queue_scope IN ('project', 'workspace'));
+
+ALTER TABLE headless_execution_attempts
+  ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0
+  CHECK (attempt_count >= 0);
+
+ALTER TABLE headless_execution_attempts
+  ADD COLUMN next_retry_at TEXT;
+
+ALTER TABLE headless_execution_attempts
+  ADD COLUMN dead_lettered_at TEXT;
+
+ALTER TABLE headless_execution_attempts
+  ADD COLUMN dead_letter_reason_code TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_bounded_due
+  ON headless_execution_attempts(
+    status,
+    queue_priority DESC,
+    next_retry_at,
+    not_before_at,
+    enqueued_at,
+    attempt_id
+  );
+
+CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_dead_letter
+  ON headless_execution_attempts(dead_lettered_at, attempt_id);
+`});export{e as BOUNDED_HEADLESS_QUEUE_SQLITE_MIGRATION};

package/packages/client/dist/continuity/outbox.d.ts

@@ -0,0 +1,83 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P192.03 -- Public-safe continuity outbox retry/dead-letter helpers.
+ */
+export type ContinuityOutboxStatus = 'pending' | 'sent' | 'acked' | 'failed' | 'dead_letter';
+export interface ContinuityOutboxRetryPolicy {
+    readonly maxAttempts: number;
+    readonly baseDelayMs: number;
+    readonly maxDelayMs: number;
+}
+export interface ContinuityOutboxFailureInput {
+    readonly nowIso: string;
+    readonly attemptCount: number;
+    readonly reasonCode: string;
+    readonly summary?: string;
+    readonly nextRetryAt?: string;
+    readonly policy?: Partial<ContinuityOutboxRetryPolicy>;
+}
+export interface ContinuityOutboxFailureDecision {
+    readonly status: Extract<ContinuityOutboxStatus, 'failed' | 'dead_letter'>;
+    readonly reasonCode: string;
+    readonly summary?: string;
+    readonly nextRetryAt?: string;
+    readonly deadLetteredAt?: string;
+    readonly maxAttempts: number;
+    readonly publicSafe: true;
+}
+/**
+ * P199.04 -- Client-local bounded queue policy. The shared public SSoT lives in
+ * `packages/shared/src/continuity/queue.ts`; the SQLite store keeps this local
+ * copy so it does not acquire a runtime dependency on `@neocortex/shared`.
+ */
+export interface ContinuityQueuePolicy {
+    readonly maxItems: number;
+    readonly leaseMs: number;
+    readonly maxAttempts: number;
+    readonly baseDelayMs: number;
+    readonly maxDelayMs: number;
+}
+/** P199.06 client-local mirror of the shared bounded retention policy. */
+export interface ContinuityRetentionWindow {
+    readonly maxAgeMs: number;
+    readonly maxItems: number;
+    readonly maxBytes: number;
+}
+export interface ContinuityRetentionPolicy {
+    readonly policyVersion: 1;
+    readonly receipts: ContinuityRetentionWindow;
+    readonly processingOutputs: ContinuityRetentionWindow;
+    readonly maxDeleteRowsPerRun: number;
+    readonly maxCompactionSummariesPerJob: number;
+}
+export type ContinuityRetentionPolicyInput = Partial<Omit<ContinuityRetentionPolicy, 'receipts' | 'processingOutputs'>> & {
+    readonly receipts?: Partial<ContinuityRetentionWindow>;
+    readonly processingOutputs?: Partial<ContinuityRetentionWindow>;
+};
+export declare const DEFAULT_CONTINUITY_RETENTION_POLICY: ContinuityRetentionPolicy;
+export declare const CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE: "receipt_compaction";
+export declare const CONTINUITY_RECEIPT_RETENTION_REASON_CODES: Readonly<{
+    readonly COMPACTED: "receipt-compacted";
+    readonly NOOP: "receipt-retention-noop";
+}>;
+export declare const CONTINUITY_QUEUE_SCOPES: readonly ["project", "workspace"];
+export type ContinuityQueueScope = (typeof CONTINUITY_QUEUE_SCOPES)[number];
+export declare const DEFAULT_CONTINUITY_QUEUE_PRIORITY: 0;
+export declare const MIN_CONTINUITY_QUEUE_PRIORITY: -100;
+export declare const MAX_CONTINUITY_QUEUE_PRIORITY: 100;
+export declare const DEFAULT_CONTINUITY_QUEUE_POLICY: ContinuityQueuePolicy;
+export declare const CONTINUITY_QUEUE_REASON_CODES: Readonly<{
+    readonly CAP_REACHED: "queue-cap-reached";
+    readonly LEASE_TIMEOUT_RETRY: "queue-lease-timeout-retry";
+    readonly ATTEMPTS_EXHAUSTED: "queue-attempts-exhausted";
+}>;
+export declare const DEFAULT_CONTINUITY_OUTBOX_RETRY_POLICY: ContinuityOutboxRetryPolicy;
+export declare function normalizeContinuityQueuePolicy(policy: Partial<ContinuityQueuePolicy> | undefined): ContinuityQueuePolicy;
+export declare function normalizeContinuityRetentionPolicy(input: ContinuityRetentionPolicyInput | undefined): ContinuityRetentionPolicy;
+export declare function normalizeContinuityQueuePriority(value: number | undefined): number;
+export declare function normalizeContinuityQueueScope(value: string | undefined): ContinuityQueueScope;
+export declare function computeContinuityQueueRetryAt(nowIso: string, retryCount: number, policy?: Partial<ContinuityQueuePolicy>): string;
+export declare function normalizeContinuityOutboxRetryPolicy(policy: Partial<ContinuityOutboxRetryPolicy> | undefined): ContinuityOutboxRetryPolicy;
+export declare function computeContinuityOutboxFailureDecision(input: ContinuityOutboxFailureInput): ContinuityOutboxFailureDecision;

package/packages/client/dist/continuity/outbox.js

@@ -0,0 +1 @@
+const c=Object.freeze({policyVersion:1,receipts:Object.freeze({maxAgeMs:2592e6,maxItems:1e3,maxBytes:2097152}),processingOutputs:Object.freeze({maxAgeMs:6048e5,maxItems:500,maxBytes:1048576}),maxDeleteRowsPerRun:5e3,maxCompactionSummariesPerJob:20}),E="receipt_compaction",C=Object.freeze({COMPACTED:"receipt-compacted",NOOP:"receipt-retention-noop"}),l=Object.freeze(["project","workspace"]),p=0,M=-100,I=100,r=Object.freeze({maxItems:100,leaseMs:5*6e4,maxAttempts:3,baseDelayMs:3e4,maxDelayMs:15*6e4}),D=Object.freeze({CAP_REACHED:"queue-cap-reached",LEASE_TIMEOUT_RETRY:"queue-lease-timeout-retry",ATTEMPTS_EXHAUSTED:"queue-attempts-exhausted"}),u=Object.freeze({maxAttempts:3,baseDelayMs:6e4,maxDelayMs:60*6e4});function y(e){const t=s(e?.maxItems,1,1e4,r.maxItems),a=s(e?.leaseMs,1e3,60*6e4,r.leaseMs),o=s(e?.maxAttempts,1,100,r.maxAttempts),m=s(e?.baseDelayMs,1e3,1440*6e4,r.baseDelayMs),n=s(e?.maxDelayMs,m,10080*6e4,r.maxDelayMs);return{maxItems:t,leaseMs:a,maxAttempts:o,baseDelayMs:m,maxDelayMs:n}}function A(e){return{policyVersion:1,receipts:i(e?.receipts,c.receipts),processingOutputs:i(e?.processingOutputs,c.processingOutputs),maxDeleteRowsPerRun:s(e?.maxDeleteRowsPerRun,1,5e4,c.maxDeleteRowsPerRun),maxCompactionSummariesPerJob:s(e?.maxCompactionSummariesPerJob,1,100,c.maxCompactionSummariesPerJob)}}function N(e){return s(e,M,I,p)}function R(e){return e==="workspace"?"workspace":"project"}function b(e,t,a){const o=y(a),m=Date.parse(e),n=Number.isFinite(m)?m:Date.now(),x=Math.max(0,Math.min(16,Math.floor(t)-1)),_=Math.min(o.maxDelayMs,o.baseDelayMs*2**x);return new Date(n+_).toISOString()}function O(e){const t=s(e?.maxAttempts,1,100,u.maxAttempts),a=s(e?.baseDelayMs,1e3,1440*6e4,u.baseDelayMs),o=s(e?.maxDelayMs,a,10080*6e4,u.maxDelayMs);return{maxAttempts:t,baseDelayMs:a,maxDelayMs:o}}function U(e){const t=O(e.policy),a=s(e.attemptCount,0,Number.MAX_SAFE_INTEGER,0);return a>=t.maxAttempts?{status:"dead_letter",reasonCode:e.reasonCode,...e.summary?{summary:e.summary}:{},deadLetteredAt:e.nowIso,maxAttempts:t.maxAttempts,publicSafe:!0}:{status:"failed",reasonCode:e.reasonCode,...e.summary?{summary:e.summary}:{},nextRetryAt:e.nextRetryAt??T(e.nowIso,a,t),maxAttempts:t.maxAttempts,publicSafe:!0}}function T(e,t,a){const o=Date.parse(e),m=Number.isFinite(o)?o:Date.now(),n=Math.max(0,Math.min(16,t-1)),x=Math.min(a.maxDelayMs,a.baseDelayMs*2**n);return new Date(m+x).toISOString()}function s(e,t,a,o){return Number.isFinite(e)?Math.max(t,Math.min(a,Math.floor(e))):o}function i(e,t){return{maxAgeMs:s(e?.maxAgeMs,6e4,365*24*60*6e4,t.maxAgeMs),maxItems:s(e?.maxItems,1,1e5,t.maxItems),maxBytes:s(e?.maxBytes,1024,256*1024*1024,t.maxBytes)}}export{D as CONTINUITY_QUEUE_REASON_CODES,l as CONTINUITY_QUEUE_SCOPES,E as CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE,C as CONTINUITY_RECEIPT_RETENTION_REASON_CODES,u as DEFAULT_CONTINUITY_OUTBOX_RETRY_POLICY,r as DEFAULT_CONTINUITY_QUEUE_POLICY,p as DEFAULT_CONTINUITY_QUEUE_PRIORITY,c as DEFAULT_CONTINUITY_RETENTION_POLICY,I as MAX_CONTINUITY_QUEUE_PRIORITY,M as MIN_CONTINUITY_QUEUE_PRIORITY,U as computeContinuityOutboxFailureDecision,b as computeContinuityQueueRetryAt,O as normalizeContinuityOutboxRetryPolicy,y as normalizeContinuityQueuePolicy,N as normalizeContinuityQueuePriority,R as normalizeContinuityQueueScope,A as normalizeContinuityRetentionPolicy};

package/packages/client/dist/continuity/runner-bootstrap-policy.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P181.03 -- public-safe runner bootstrap classifier for durable goal/loop
+ * operations.
+ */
+export declare const RUNNER_BOOTSTRAP_POLICY_REASON_CODES: {
+    readonly REQUIRED_DURABLE_COMMAND: "runner-bootstrap-required-durable-command";
+    readonly REQUIRED_UNKNOWN_GOAL_LOOP_OPERATION: "runner-bootstrap-required-unknown-goal-loop-operation";
+    readonly OPTIONAL_OPERATOR_COMMAND: "runner-bootstrap-optional-operator-command";
+    readonly SKIPPED_BOOTSTRAP_IN_PROGRESS: "runner-bootstrap-skipped-bootstrap-in-progress";
+    readonly SKIPPED_RUNNER_PLATFORM: "runner-bootstrap-skipped-runner-platform";
+    readonly SKIPPED_GOAL_LOOP_TICK: "runner-bootstrap-skipped-goal-loop-tick";
+    readonly SKIPPED_JOBS_COMMAND: "runner-bootstrap-skipped-jobs-command";
+    readonly SKIPPED_RUNNER_COMMAND: "runner-bootstrap-skipped-runner-command";
+    readonly SKIPPED_NON_CONTINUITY_COMMAND: "runner-bootstrap-skipped-non-continuity-command";
+};
+export type RunnerBootstrapPolicyReasonCode = typeof RUNNER_BOOTSTRAP_POLICY_REASON_CODES[keyof typeof RUNNER_BOOTSTRAP_POLICY_REASON_CODES];
+export type RunnerBootstrapCommandKind = 'goal' | 'loop' | 'jobs' | 'runner' | 'unknown';
+export type RunnerBootstrapOperation = 'create' | 'start' | 'resume' | 'activate' | 'run' | 'run-once' | 'restart' | 'continue' | 'unpause' | 'status' | 'cancel' | 'pause' | 'report' | 'reports' | 'log' | 'logs' | 'tick' | 'unknown' | 'none';
+export type RunnerBootstrapPolicyAction = 'required' | 'optional' | 'skipped';
+export type RunnerBootstrapFailurePolicy = 'fail-closed' | 'fail-open' | 'not-applicable';
+export interface RunnerBootstrapCommandIntent {
+    readonly kind: RunnerBootstrapCommandKind;
+    /** Canonical public operation token, never raw user text. */
+    readonly operation: RunnerBootstrapOperation;
+    /** Whether the leading public command token was recognized as an alias/number. */
+    readonly recognizedAlias: boolean;
+    readonly publicSafe: true;
+}
+export interface RunnerBootstrapPolicyContext {
+    readonly platformTarget?: string;
+    /** Explicit recursion guard set by future invoke integration. */
+    readonly bootstrapInProgress?: boolean;
+    /** Optional process-like environment, provided explicitly to keep the classifier pure. */
+    readonly environment?: Readonly<Record<string, string | undefined>>;
+}
+export interface RunnerBootstrapPolicyDecision {
+    readonly action: RunnerBootstrapPolicyAction;
+    readonly failurePolicy: RunnerBootstrapFailurePolicy;
+    readonly command: RunnerBootstrapCommandKind;
+    readonly operation: RunnerBootstrapOperation;
+    readonly reasonCodes: readonly RunnerBootstrapPolicyReasonCode[];
+    readonly publicSummary: string;
+    readonly publicSafe: true;
+}
+export declare function parseRunnerBootstrapCommandIntent(args: string): RunnerBootstrapCommandIntent;
+export declare function classifyRunnerBootstrapPolicy(commandIntent: RunnerBootstrapCommandIntent, context?: RunnerBootstrapPolicyContext): RunnerBootstrapPolicyDecision;
+export declare function classifyRunnerBootstrapPolicyFromArgs(args: string, context?: RunnerBootstrapPolicyContext): RunnerBootstrapPolicyDecision;

package/packages/client/dist/continuity/runner-bootstrap-policy.js

@@ -0,0 +1 @@
+const e={REQUIRED_DURABLE_COMMAND:"runner-bootstrap-required-durable-command",REQUIRED_UNKNOWN_GOAL_LOOP_OPERATION:"runner-bootstrap-required-unknown-goal-loop-operation",OPTIONAL_OPERATOR_COMMAND:"runner-bootstrap-optional-operator-command",SKIPPED_BOOTSTRAP_IN_PROGRESS:"runner-bootstrap-skipped-bootstrap-in-progress",SKIPPED_RUNNER_PLATFORM:"runner-bootstrap-skipped-runner-platform",SKIPPED_GOAL_LOOP_TICK:"runner-bootstrap-skipped-goal-loop-tick",SKIPPED_JOBS_COMMAND:"runner-bootstrap-skipped-jobs-command",SKIPPED_RUNNER_COMMAND:"runner-bootstrap-skipped-runner-command",SKIPPED_NON_CONTINUITY_COMMAND:"runner-bootstrap-skipped-non-continuity-command"},P=new Set(["goal","goals","durable-goal","continuity-goal","59"]),N=new Set(["loop","loops","durable-loop","continuity-loop","60"]),f=new Set(["jobs","job","continuity-jobs","61"]),R=new Set(["runner","neocortex-runner","continuity-runner","62"]),E=new Map([["goal-tick","goal"],["loop-tick","loop"]]),s=new Set(["create","start","resume","activate","run","run-once","restart","continue","unpause"]),p=new Set(["status","cancel","pause","report","reports","log","logs"]),S=new Set([...s,...p,"tick"]),A=/^@?(?:goal|loop|job)-[a-z0-9][a-z0-9._-]*$/i;function b(r){const o=d(r),n=l(o[0]);if(!n)return u("unknown","none",!1);const a=E.get(n);if(a)return u(a,"tick",!0);const i=T(n);return i==="unknown"?u("unknown","none",!1):u(i,O(_(o)),!0)}function k(r,o={}){if(C(o))return t(r,e.SKIPPED_BOOTSTRAP_IN_PROGRESS,"runner bootstrap skipped because a bootstrap guard is active.");if(D(o.platformTarget)==="runner")return t(r,e.SKIPPED_RUNNER_PLATFORM,"runner bootstrap skipped for runner platform invocation.");if((r.kind==="goal"||r.kind==="loop")&&r.operation==="tick")return t(r,e.SKIPPED_GOAL_LOOP_TICK,`runner bootstrap skipped for ${r.kind} tick operation.`);if(r.kind==="jobs")return t(r,e.SKIPPED_JOBS_COMMAND,"runner bootstrap skipped for jobs command.");if(r.kind==="runner")return t(r,e.SKIPPED_RUNNER_COMMAND,"runner bootstrap skipped for runner command.");if(r.kind!=="goal"&&r.kind!=="loop")return t(r,e.SKIPPED_NON_CONTINUITY_COMMAND,"runner bootstrap skipped for non-continuity command.");if(p.has(r.operation))return{action:"optional",failurePolicy:"fail-open",command:r.kind,operation:r.operation,reasonCodes:[e.OPTIONAL_OPERATOR_COMMAND],publicSummary:`runner bootstrap optional for ${r.kind} operator command.`,publicSafe:!0};const n=s.has(r.operation)||r.operation==="none"?e.REQUIRED_DURABLE_COMMAND:e.REQUIRED_UNKNOWN_GOAL_LOOP_OPERATION;return{action:"required",failurePolicy:"fail-closed",command:r.kind,operation:r.operation==="none"?"create":r.operation,reasonCodes:[n],publicSummary:`runner bootstrap required for durable ${r.kind} command.`,publicSafe:!0}}function M(r,o={}){return k(b(r),o)}function t(r,o,n){return{action:"skipped",failurePolicy:"not-applicable",command:r.kind,operation:r.operation,reasonCodes:[o],publicSummary:n,publicSafe:!0}}function u(r,o,n){return{kind:r,operation:o,recognizedAlias:n,publicSafe:!0}}function T(r){return P.has(r)?"goal":N.has(r)?"loop":f.has(r)?"jobs":R.has(r)?"runner":"unknown"}function O(r){const o=l(r);return o?S.has(o)?o:"unknown":"none"}function _(r){const o=r[1];if(o)return A.test(o)?r[2]:o}function d(r){return r.trim().split(/\s+/).filter(Boolean).slice(0,3)}function l(r){return(r??"").trim().toLowerCase().replace(/^\*/,"")}function D(r){return(r??"").trim().toLowerCase()}function C(r){return r.bootstrapInProgress?!0:c(r.environment?.NEOCORTEX_RUNNER_BOOTSTRAP_IN_PROGRESS)||c(r.environment?.NEOCORTEX_BOOTSTRAP_IN_PROGRESS)}function c(r){return/^(1|true|yes|on)$/i.test(r??"")}export{e as RUNNER_BOOTSTRAP_POLICY_REASON_CODES,k as classifyRunnerBootstrapPolicy,M as classifyRunnerBootstrapPolicyFromArgs,b as parseRunnerBootstrapCommandIntent};