@ornexus/neocortex 4.60.68 → 4.60.69

package/packages/client/dist/continuity/invoke-hooks.js

@@ -1,129 +1 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P180.05 -- invoke.ts hooks for client-owned continuity SQLite state.
- */
-import { CONTINUITY_CLIENT_REASON_CODES, ContinuityClientStateStoreError, continuitySqliteExists, createContinuityHardStopSnapshot, openContinuityClientStateStore, } from './continuity-client-state-store.js';
-import { buildAutonomousGovernanceEnvelope, parseAutonomousInvokeIntent, } from './autonomous-governance.js';
-export { RUNNER_BOOTSTRAP_POLICY_REASON_CODES, classifyRunnerBootstrapPolicy, classifyRunnerBootstrapPolicyFromArgs, parseRunnerBootstrapCommandIntent, } from './runner-bootstrap-policy.js';
-import { parseRunnerBootstrapCommandIntent } from './runner-bootstrap-policy.js';
-import { StrictReadOnlyError, } from '../../../shared/dist/strict-readonly.js';
-export function isContinuityTrigger(args) {
-    return parseRunnerBootstrapCommandIntent(args).kind !== 'unknown' || parseAutonomousInvokeIntent(args) !== null;
-}
-export async function readContinuityForRequest(args, projectRoot, nowIso, effectAuthority, options = {}) {
-    const autonomousIntent = parseAutonomousInvokeIntent(args);
-    const shouldRead = autonomousIntent !== null
-        || isContinuityTrigger(args)
-        || (options.includeExistingStore !== false && continuitySqliteExists(projectRoot));
-    // An authority object does not make continuity relevant. In strict mode,
-    // attempting a read-only open for an absent, unrelated store would turn a
-    // clean diagnose into a false physical-boundary failure.
-    if (!shouldRead)
-        return undefined;
-    try {
-        const opened = effectAuthority
-            ? await effectAuthority.executeAsync({ phase: 'client-preflight', domain: 'client-persistence', category: 'continuity-store', operation: 'create' }, async () => shouldRead
-                ? ({ kind: 'writable', store: await openContinuityClientStateStore({ projectRoot, now: () => nowIso ?? new Date().toISOString() }) })
-                : ({ kind: 'skipped' }), async () => {
-                try {
-                    return { kind: 'readonly', store: await openContinuityClientStateStore({
-                            projectRoot,
-                            now: () => nowIso ?? new Date().toISOString(),
-                            strictReadOnly: true,
-                        }) };
-                }
-                catch {
-                    throw new StrictReadOnlyError('readonly-physical-boundary-unsafe', 'boundary');
-                }
-            })
-            : { kind: 'writable', store: await openContinuityClientStateStore({ projectRoot, now: () => nowIso ?? new Date().toISOString() }) };
-        if (opened.kind === 'skipped')
-            return undefined;
-        if (opened.kind === 'readonly') {
-            try {
-                return opened.store.collectSnapshot({ nowIso });
-            }
-            finally {
-                opened.store.close();
-            }
-        }
-        const store = opened.store;
-        try {
-            if (autonomousIntent) {
-                const timestamp = nowIso ?? new Date().toISOString();
-                const envelope = buildAutonomousGovernanceEnvelope(autonomousIntent);
-                if (effectAuthority) {
-                    effectAuthority.execute({ phase: 'client-preflight', domain: 'client-persistence', category: 'continuity-store', operation: 'create' }, () => store.recordAutonomousGovernance(envelope, timestamp), () => undefined);
-                }
-                else {
-                    store.recordAutonomousGovernance(envelope, timestamp);
-                }
-                return { ...store.collectSnapshot({ nowIso: timestamp }), autonomousGovernance: envelope };
-            }
-            return store.collectSnapshot({ nowIso });
-        }
-        finally {
-            store.close();
-        }
-    }
-    catch (error) {
-        if (error instanceof StrictReadOnlyError)
-            throw error;
-        const reasonCodes = reasonCodesForError(error);
-        if (isContinuityTrigger(args) || continuitySqliteExists(projectRoot)) {
-            return createContinuityHardStopSnapshot(reasonCodes, nowIso ?? new Date().toISOString());
-        }
-        return undefined;
-    }
-}
-export async function persistContinuityFromResponse(metadata, projectRoot) {
-    const update = metadata?.continuityStateUpdate;
-    if (!update) {
-        return {
-            ok: true,
-            appliedOperationIds: [],
-            ignoredOperationIds: [],
-            reasonCodes: [CONTINUITY_CLIENT_REASON_CODES.OK],
-            publicSafe: true,
-        };
-    }
-    let store;
-    try {
-        store = await openContinuityClientStateStore({ projectRoot });
-        const result = store.applyStateUpdate(update);
-        return {
-            ok: true,
-            appliedOperationIds: result.appliedOperationIds,
-            ignoredOperationIds: result.ignoredOperationIds,
-            reasonCodes: result.reasonCodes,
-            publicSafe: true,
-        };
-    }
-    catch (error) {
-        const reasonCodes = reasonCodesForError(error);
-        const message = error instanceof Error ? error.message : String(error);
-        return {
-            ok: false,
-            appliedOperationIds: [],
-            ignoredOperationIds: [],
-            reasonCodes,
-            error: message,
-            publicSafe: true,
-        };
-    }
-    finally {
-        store?.close();
-    }
-}
-function reasonCodesForError(error) {
-    if (error instanceof ContinuityClientStateStoreError)
-        return error.reasonCodes;
-    const message = error instanceof Error ? error.message : String(error);
-    if (/sqlite-adapter-unavailable/i.test(message))
-        return [CONTINUITY_CLIENT_REASON_CODES.SQLITE_ADAPTER_UNAVAILABLE];
-    if (/integrity|corrupt|malformed|not a database/i.test(message))
-        return [CONTINUITY_CLIENT_REASON_CODES.SQLITE_INTEGRITY_FAILED];
-    return [CONTINUITY_CLIENT_REASON_CODES.SQLITE_MUTATION_FAILED];
-}
+import{CONTINUITY_CLIENT_REASON_CODES as c,ContinuityClientStateStoreError as O,continuitySqliteExists as S,createContinuityHardStopSnapshot as C,openContinuityClientStateStore as d}from"./continuity-client-state-store.js";import{buildAutonomousGovernanceEnvelope as E,parseAutonomousInvokeIntent as f}from"./autonomous-governance.js";import{RUNNER_BOOTSTRAP_POLICY_REASON_CODES as D,classifyRunnerBootstrapPolicy as N,classifyRunnerBootstrapPolicyFromArgs as L,parseRunnerBootstrapCommandIntent as v}from"./runner-bootstrap-policy.js";import{parseRunnerBootstrapCommandIntent as g}from"./runner-bootstrap-policy.js";import{StrictReadOnlyError as y}from"../../../shared/dist/strict-readonly.js";function m(e){return g(e).kind!=="unknown"||f(e)!==null}async function _(e,t,n,i,r={}){const s=f(e),u=s!==null||m(e)||r.includeExistingStore!==!1&&S(t);if(u)try{const o=i?await i.executeAsync({phase:"client-preflight",domain:"client-persistence",category:"continuity-store",operation:"create"},async()=>u?{kind:"writable",store:await d({projectRoot:t,now:()=>n??new Date().toISOString()})}:{kind:"skipped"},async()=>{try{return{kind:"readonly",store:await d({projectRoot:t,now:()=>n??new Date().toISOString(),strictReadOnly:!0})}}catch{throw new y("readonly-physical-boundary-unsafe","boundary")}}):{kind:"writable",store:await d({projectRoot:t,now:()=>n??new Date().toISOString()})};if(o.kind==="skipped")return;if(o.kind==="readonly")try{return o.store.collectSnapshot({nowIso:n})}finally{o.store.close()}const a=o.store;try{if(s){const l=n??new Date().toISOString(),p=E(s);return i?i.execute({phase:"client-preflight",domain:"client-persistence",category:"continuity-store",operation:"create"},()=>a.recordAutonomousGovernance(p,l),()=>{}):a.recordAutonomousGovernance(p,l),{...a.collectSnapshot({nowIso:l}),autonomousGovernance:p}}return a.collectSnapshot({nowIso:n})}finally{a.close()}}catch(o){if(o instanceof y)throw o;const a=I(o);return m(e)||S(t)?C(a,n??new Date().toISOString()):void 0}}async function h(e,t){const n=e?.continuityStateUpdate;if(!n)return{ok:!0,appliedOperationIds:[],ignoredOperationIds:[],reasonCodes:[c.OK],publicSafe:!0};let i;try{i=await d({projectRoot:t});const r=i.applyStateUpdate(n);return{ok:!0,appliedOperationIds:r.appliedOperationIds,ignoredOperationIds:r.ignoredOperationIds,reasonCodes:r.reasonCodes,publicSafe:!0}}catch(r){const s=I(r),u=r instanceof Error?r.message:String(r);return{ok:!1,appliedOperationIds:[],ignoredOperationIds:[],reasonCodes:s,error:u,publicSafe:!0}}finally{i?.close()}}function I(e){if(e instanceof O)return e.reasonCodes;const t=e instanceof Error?e.message:String(e);return/sqlite-adapter-unavailable/i.test(t)?[c.SQLITE_ADAPTER_UNAVAILABLE]:/integrity|corrupt|malformed|not a database/i.test(t)?[c.SQLITE_INTEGRITY_FAILED]:[c.SQLITE_MUTATION_FAILED]}export{D as RUNNER_BOOTSTRAP_POLICY_REASON_CODES,N as classifyRunnerBootstrapPolicy,L as classifyRunnerBootstrapPolicyFromArgs,m as isContinuityTrigger,v as parseRunnerBootstrapCommandIntent,h as persistContinuityFromResponse,_ as readContinuityForRequest};

package/packages/client/dist/continuity/migrations/001-initial-schema.js

@@ -1,13 +1,4 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P180.04 -- Initial public-safe Enterprise Continuity Plane SQLite schema.
- */
-export const INITIAL_CONTINUITY_SQLITE_MIGRATION = Object.freeze({
-    version: 1,
-    name: 'initial-continuity-schema',
-    sql: `
+const E=Object.freeze({version:1,name:"initial-continuity-schema",sql:`
 CREATE TABLE IF NOT EXISTS jobs (
   job_id TEXT PRIMARY KEY,
   kind TEXT NOT NULL CHECK (kind IN ('goal', 'loop', 'runner', 'jobs')),
@@ -269,5 +260,4 @@ CREATE TABLE IF NOT EXISTS outbox (
 
 CREATE INDEX IF NOT EXISTS idx_outbox_status_next_attempt ON outbox(status, next_attempt_at);
 CREATE INDEX IF NOT EXISTS idx_outbox_job_id ON outbox(job_id);
-`,
-});
+`});export{E as INITIAL_CONTINUITY_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/002-processing-output-summary-indexes.js

@@ -1,17 +1,7 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P185.02 -- Bounded processing-output summary cursor indexes.
- */
-export const PROCESSING_OUTPUT_SUMMARY_SQLITE_MIGRATION = Object.freeze({
-    version: 2,
-    name: 'processing-output-summary-indexes',
-    sql: `
+const e=Object.freeze({version:2,name:"processing-output-summary-indexes",sql:`
 CREATE INDEX IF NOT EXISTS idx_job_events_type_created_at_event_id
   ON job_events(type, created_at, event_id);
 
 CREATE INDEX IF NOT EXISTS idx_job_events_job_type_created_at_event_id
   ON job_events(job_id, type, created_at, event_id);
-`,
-});
+`});export{e as PROCESSING_OUTPUT_SUMMARY_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/003-headless-execution-attempts.js

@@ -1,13 +1,4 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P190.03 -- Headless execution attempt queue, leases and public summaries.
- */
-export const HEADLESS_EXECUTION_ATTEMPTS_SQLITE_MIGRATION = Object.freeze({
-    version: 3,
-    name: 'headless-execution-attempts',
-    sql: `
+const e=Object.freeze({version:3,name:"headless-execution-attempts",sql:`
 CREATE TABLE IF NOT EXISTS headless_execution_attempts (
   attempt_id TEXT PRIMARY KEY,
   execution_id TEXT NOT NULL,
@@ -68,5 +59,4 @@ CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_runtime_model
 CREATE UNIQUE INDEX IF NOT EXISTS idx_headless_execution_attempts_active_lease
   ON headless_execution_attempts(lease_id)
   WHERE lease_id IS NOT NULL AND lease_released_at IS NULL;
-`,
-});
+`});export{e as HEADLESS_EXECUTION_ATTEMPTS_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/004-outbox-delivery-state.js

@@ -1,13 +1,4 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P192.03 -- Replay-safe outbox delivery cursor, ack and dead-letter state.
- */
-export const OUTBOX_DELIVERY_STATE_SQLITE_MIGRATION = Object.freeze({
-    version: 4,
-    name: 'outbox-delivery-state',
-    sql: `
+const t=Object.freeze({version:4,name:"outbox-delivery-state",sql:`
 ALTER TABLE outbox ADD COLUMN delivery_cursor TEXT;
 ALTER TABLE outbox ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0);
 ALTER TABLE outbox ADD COLUMN last_attempt_at TEXT;
@@ -25,5 +16,4 @@ CREATE INDEX IF NOT EXISTS idx_outbox_delivery_batch
   ON outbox(status, next_attempt_at, created_at, outbox_id);
 CREATE INDEX IF NOT EXISTS idx_outbox_ack_state
   ON outbox(status, acked_at, updated_at);
-`,
-});
+`});export{t as OUTBOX_DELIVERY_STATE_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/005-bounded-headless-queue.js

@@ -1,13 +1,4 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P199.04 -- Additive bounded queue metadata for headless execution attempts.
- */
-export const BOUNDED_HEADLESS_QUEUE_SQLITE_MIGRATION = Object.freeze({
-    version: 5,
-    name: 'bounded-headless-queue',
-    sql: `
+const e=Object.freeze({version:5,name:"bounded-headless-queue",sql:`
 ALTER TABLE headless_execution_attempts
   ADD COLUMN queue_priority INTEGER NOT NULL DEFAULT 0
   CHECK (queue_priority >= -100 AND queue_priority <= 100);
@@ -41,5 +32,4 @@ CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_bounded_due
 
 CREATE INDEX IF NOT EXISTS idx_headless_execution_attempts_dead_letter
   ON headless_execution_attempts(dead_lettered_at, attempt_id);
-`,
-});
+`});export{e as BOUNDED_HEADLESS_QUEUE_SQLITE_MIGRATION};

package/packages/client/dist/continuity/migrations/006-native-agent-dispatches.js

@@ -1,11 +1,4 @@
-/**
- * Public-safe native-agent dispatch reservation and immutable observations.
- * Raw runtime handles, prompts and logs are deliberately absent.
- */
-export const NATIVE_AGENT_DISPATCHES_SQLITE_MIGRATION = Object.freeze({
-    version: 6,
-    name: 'native-agent-dispatches',
-    sql: `
+const e=Object.freeze({version:6,name:"native-agent-dispatches",sql:`
 CREATE TABLE IF NOT EXISTS native_agent_dispatches (
   dispatch_key TEXT PRIMARY KEY CHECK (dispatch_key GLOB 'sha256:*' AND length(dispatch_key) = 71),
   story_id TEXT NOT NULL,
@@ -52,5 +45,4 @@ CREATE TABLE IF NOT EXISTS native_agent_observations (
 
 CREATE INDEX IF NOT EXISTS idx_native_agent_observations_dispatch_observed
   ON native_agent_observations(dispatch_key, observed_at, sequence);
-`,
-});
+`});export{e as NATIVE_AGENT_DISPATCHES_SQLITE_MIGRATION};

package/packages/client/dist/continuity/native-agent-store.js

@@ -1,69 +1 @@
-/**
- * Private native-agent runtime store. The database and keyed-handle secret live
- * in the Git common-dir so worktrees share one dispatch authority without
- * writing runtime identifiers into tracked project state.
- */
-import { createHmac, randomBytes } from 'node:crypto';
-import { execFileSync } from 'node:child_process';
-import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync, } from 'node:fs';
-import { isAbsolute, join, resolve } from 'node:path';
-import { openContinuitySqliteStore } from './sqlite-store.js';
-const PRIVATE_RUNTIME_DIR = 'neocortex-runtime/native-agent';
-const PRIVATE_DATABASE = 'continuity.sqlite';
-const HANDLE_KEY = 'handle-key';
-const SAFE_RAW_HANDLE = /^[^\r\n\0]{1,256}$/;
-export function resolveNativeAgentPrivateRuntimePaths(projectRoot) {
-    const observed = execFileSync('git', ['rev-parse', '--path-format=absolute', '--git-common-dir'], { cwd: projectRoot, encoding: 'utf8', timeout: 3_000, stdio: ['ignore', 'pipe', 'ignore'] }).trim();
-    if (!observed || /[\r\n\0]/.test(observed))
-        throw new Error('native-agent-git-common-dir-unavailable');
-    const commonDir = isAbsolute(observed) ? observed : resolve(projectRoot, observed);
-    const runtimeDir = join(commonDir, PRIVATE_RUNTIME_DIR);
-    return Object.freeze({
-        commonDir,
-        runtimeDir,
-        databasePath: join(runtimeDir, PRIVATE_DATABASE),
-        handleKeyPath: join(runtimeDir, HANDLE_KEY),
-    });
-}
-function ensurePrivateRuntime(paths) {
-    mkdirSync(paths.runtimeDir, { recursive: true, mode: 0o700 });
-    try {
-        chmodSync(paths.runtimeDir, 0o700);
-    }
-    catch { /* best-effort on non-POSIX */ }
-    if (!existsSync(paths.handleKeyPath)) {
-        try {
-            writeFileSync(paths.handleKeyPath, randomBytes(32).toString('hex'), {
-                encoding: 'utf8',
-                flag: 'wx',
-                mode: 0o600,
-            });
-        }
-        catch (error) {
-            if (!existsSync(paths.handleKeyPath))
-                throw error;
-        }
-    }
-    try {
-        chmodSync(paths.handleKeyPath, 0o600);
-    }
-    catch { /* best-effort on non-POSIX */ }
-}
-export function deriveOpaqueNativeAgentHandle(rawHandle, handleKeyPath) {
-    if (!SAFE_RAW_HANDLE.test(rawHandle))
-        throw new Error('native-agent-raw-handle-invalid');
-    const key = readFileSync(handleKeyPath, 'utf8').trim();
-    if (!/^[a-f0-9]{64}$/i.test(key))
-        throw new Error('native-agent-handle-key-invalid');
-    return `agt_${createHmac('sha256', Buffer.from(key, 'hex')).update(rawHandle, 'utf8').digest('hex')}`;
-}
-export async function openNativeAgentPrivateStore(projectRoot, options = {}) {
-    const paths = resolveNativeAgentPrivateRuntimePaths(projectRoot);
-    ensurePrivateRuntime(paths);
-    const store = await openContinuitySqliteStore({
-        ...options,
-        projectRoot,
-        filePath: paths.databasePath,
-    });
-    return Object.freeze({ store, paths });
-}
+import{createHmac as c,randomBytes as m}from"node:crypto";import{execFileSync as s}from"node:child_process";import{chmodSync as o,existsSync as a,mkdirSync as u,readFileSync as d,writeFileSync as f}from"node:fs";import{isAbsolute as h,join as i,resolve as l}from"node:path";import{openContinuitySqliteStore as y}from"./sqlite-store.js";const v="neocortex-runtime/native-agent",g="continuity.sqlite",P="handle-key",A=/^[^\r\n\0]{1,256}$/;function S(e){const t=s("git",["rev-parse","--path-format=absolute","--git-common-dir"],{cwd:e,encoding:"utf8",timeout:3e3,stdio:["ignore","pipe","ignore"]}).trim();if(!t||/[\r\n\0]/.test(t))throw new Error("native-agent-git-common-dir-unavailable");const n=h(t)?t:l(e,t),r=i(n,v);return Object.freeze({commonDir:n,runtimeDir:r,databasePath:i(r,g),handleKeyPath:i(r,P)})}function w(e){u(e.runtimeDir,{recursive:!0,mode:448});try{o(e.runtimeDir,448)}catch{}if(!a(e.handleKeyPath))try{f(e.handleKeyPath,m(32).toString("hex"),{encoding:"utf8",flag:"wx",mode:384})}catch(t){if(!a(e.handleKeyPath))throw t}try{o(e.handleKeyPath,384)}catch{}}function _(e,t){if(!A.test(e))throw new Error("native-agent-raw-handle-invalid");const n=d(t,"utf8").trim();if(!/^[a-f0-9]{64}$/i.test(n))throw new Error("native-agent-handle-key-invalid");return`agt_${c("sha256",Buffer.from(n,"hex")).update(e,"utf8").digest("hex")}`}async function K(e,t={}){const n=S(e);w(n);const r=await y({...t,projectRoot:e,filePath:n.databasePath});return Object.freeze({store:r,paths:n})}export{_ as deriveOpaqueNativeAgentHandle,K as openNativeAgentPrivateStore,S as resolveNativeAgentPrivateRuntimePaths};

package/packages/client/dist/continuity/native-agent-types.js

@@ -1,90 +1 @@
-const STATES = ['requested', 'spawned', 'running', 'completed', 'failed', 'interrupted', 'unknown', 'lost'];
-const TOPOLOGIES = ['native-agent', 'headless-process', 'inline'];
-const FRESHNESS = ['fresh', 'stale', 'unknown'];
-const SOURCES = ['host-event', 'host-list', 'bounded-poll', 'local-reservation'];
-const HOST_KINDS = ['codex-cli', 'codex-desktop', 'unknown'];
-const HOST_ORIGINS = ['runtime-attested', 'host-observed', 'environment', 'explicit-override', 'unknown'];
-const HOST_CONFIDENCE = ['attested', 'observed', 'inferred', 'unknown'];
-export const NATIVE_AGENT_TERMINAL_STATES = new Set(['completed', 'failed', 'interrupted']);
-const STORY_ID = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)+$/;
-const REVISION = /^(?:sha256:)?[a-f0-9]{64}$/i;
-const DISPATCH_KEY = /^sha256:[a-f0-9]{64}$/i;
-const HANDLE = /^agt_[a-f0-9]{24,64}$/i;
-const VERSION = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/;
-const REASON = /^[a-z0-9][a-z0-9-]{0,95}$/;
-function record(value) {
-    return !!value && typeof value === 'object' && !Array.isArray(value);
-}
-function exact(value, expected) {
-    const keys = Object.keys(value).sort();
-    const wanted = [...expected].sort();
-    return keys.length === wanted.length && keys.every((key, index) => key === wanted[index]);
-}
-function timestamp(value) {
-    return typeof value === 'string' && value.length >= 20 && value.length <= 40 && Number.isFinite(Date.parse(value));
-}
-export function isNativeHostAttestationV1(value) {
-    if (!record(value) || !exact(value, ['schemaVersion', 'platformTarget', 'hostKind', 'hostVersion', 'origin', 'confidence', 'publicSafe']))
-        return false;
-    return value.schemaVersion === 1 && value.platformTarget === 'codex'
-        && HOST_KINDS.includes(value.hostKind)
-        && (value.hostVersion === null || (typeof value.hostVersion === 'string' && VERSION.test(value.hostVersion)))
-        && HOST_ORIGINS.includes(value.origin)
-        && HOST_CONFIDENCE.includes(value.confidence)
-        && value.publicSafe === true;
-}
-export function isNativeDispatchBindingV1(value) {
-    if (!record(value) || !exact(value, ['schemaVersion', 'storyId', 'graphRevision', 'dispatchKey', 'requiredCapability', 'maxDepth', 'publicSafe']))
-        return false;
-    return value.schemaVersion === 1
-        && typeof value.storyId === 'string' && STORY_ID.test(value.storyId)
-        && typeof value.graphRevision === 'string' && REVISION.test(value.graphRevision)
-        && typeof value.dispatchKey === 'string' && DISPATCH_KEY.test(value.dispatchKey)
-        && value.requiredCapability === 'native_safe' && value.maxDepth === 1 && value.publicSafe === true;
-}
-export function isNativeAgentDispatchReceiptV1(value) {
-    if (!record(value) || !exact(value, [
-        'schemaVersion', 'storyId', 'graphRevision', 'dispatchKey', 'profile', 'parentHandle', 'handle', 'topology',
-        'state', 'requestedAt', 'observedAt', 'terminalAt', 'freshness', 'observationSource', 'reasonCode', 'revision', 'publicSafe',
-    ]))
-        return false;
-    const state = value.state;
-    if (value.schemaVersion !== 1 || typeof value.storyId !== 'string' || !STORY_ID.test(value.storyId)
-        || typeof value.graphRevision !== 'string' || !REVISION.test(value.graphRevision)
-        || typeof value.dispatchKey !== 'string' || !DISPATCH_KEY.test(value.dispatchKey)
-        || value.profile !== 'neocortex'
-        || (value.parentHandle !== null && (typeof value.parentHandle !== 'string' || !HANDLE.test(value.parentHandle)))
-        || (value.handle !== null && (typeof value.handle !== 'string' || !HANDLE.test(value.handle)))
-        || !TOPOLOGIES.includes(value.topology) || !STATES.includes(state)
-        || !timestamp(value.requestedAt) || (value.observedAt !== null && !timestamp(value.observedAt))
-        || (value.terminalAt !== null && !timestamp(value.terminalAt))
-        || !FRESHNESS.includes(value.freshness)
-        || !SOURCES.includes(value.observationSource)
-        || typeof value.reasonCode !== 'string' || !REASON.test(value.reasonCode)
-        || typeof value.revision !== 'number' || !Number.isSafeInteger(value.revision) || value.revision < 0
-        || value.publicSafe !== true)
-        return false;
-    if (state === 'requested')
-        return value.handle === null && value.observedAt === null && value.terminalAt === null
-            && value.freshness === 'unknown' && value.observationSource === 'local-reservation';
-    if (value.observationSource === 'local-reservation')
-        return false;
-    if ((state === 'spawned' || state === 'running') && (value.handle === null || value.freshness !== 'fresh'))
-        return false;
-    if (NATIVE_AGENT_TERMINAL_STATES.has(state) !== (value.terminalAt !== null))
-        return false;
-    return true;
-}
-const TRANSITIONS = {
-    requested: new Set(['requested', 'spawned', 'failed', 'interrupted', 'unknown']),
-    spawned: new Set(['spawned', 'running', 'completed', 'failed', 'interrupted', 'unknown', 'lost']),
-    running: new Set(['running', 'completed', 'failed', 'interrupted', 'unknown', 'lost']),
-    unknown: new Set(['unknown', 'spawned', 'running', 'completed', 'failed', 'interrupted', 'lost']),
-    lost: new Set(['lost', 'running', 'completed', 'failed', 'interrupted']),
-    completed: new Set(['completed']),
-    failed: new Set(['failed']),
-    interrupted: new Set(['interrupted']),
-};
-export function isNativeAgentStateTransitionAllowed(previous, next) {
-    return TRANSITIONS[previous].has(next);
-}
+const S=["requested","spawned","running","completed","failed","interrupted","unknown","lost"],l=["native-agent","headless-process","inline"],g=["fresh","stale","unknown"],y=["host-event","host-list","bounded-poll","local-reservation"],m=["codex-cli","codex-desktop","unknown"],A=["runtime-attested","host-observed","environment","explicit-override","unknown"],u=["attested","observed","inferred","unknown"],w=new Set(["completed","failed","interrupted"]),d=/^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)+$/,c=/^(?:sha256:)?[a-f0-9]{64}$/i,p=/^sha256:[a-f0-9]{64}$/i,f=/^agt_[a-f0-9]{24,64}$/i,b=/^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/,I=/^[a-z0-9][a-z0-9-]{0,95}$/;function n(e){return!!e&&typeof e=="object"&&!Array.isArray(e)}function s(e,t){const o=Object.keys(e).sort(),i=[...t].sort();return o.length===i.length&&o.every((a,h)=>a===i[h])}function r(e){return typeof e=="string"&&e.length>=20&&e.length<=40&&Number.isFinite(Date.parse(e))}function T(e){return!n(e)||!s(e,["schemaVersion","platformTarget","hostKind","hostVersion","origin","confidence","publicSafe"])?!1:e.schemaVersion===1&&e.platformTarget==="codex"&&m.includes(e.hostKind)&&(e.hostVersion===null||typeof e.hostVersion=="string"&&b.test(e.hostVersion))&&A.includes(e.origin)&&u.includes(e.confidence)&&e.publicSafe===!0}function E(e){return!n(e)||!s(e,["schemaVersion","storyId","graphRevision","dispatchKey","requiredCapability","maxDepth","publicSafe"])?!1:e.schemaVersion===1&&typeof e.storyId=="string"&&d.test(e.storyId)&&typeof e.graphRevision=="string"&&c.test(e.graphRevision)&&typeof e.dispatchKey=="string"&&p.test(e.dispatchKey)&&e.requiredCapability==="native_safe"&&e.maxDepth===1&&e.publicSafe===!0}function R(e){if(!n(e)||!s(e,["schemaVersion","storyId","graphRevision","dispatchKey","profile","parentHandle","handle","topology","state","requestedAt","observedAt","terminalAt","freshness","observationSource","reasonCode","revision","publicSafe"]))return!1;const t=e.state;return e.schemaVersion!==1||typeof e.storyId!="string"||!d.test(e.storyId)||typeof e.graphRevision!="string"||!c.test(e.graphRevision)||typeof e.dispatchKey!="string"||!p.test(e.dispatchKey)||e.profile!=="neocortex"||e.parentHandle!==null&&(typeof e.parentHandle!="string"||!f.test(e.parentHandle))||e.handle!==null&&(typeof e.handle!="string"||!f.test(e.handle))||!l.includes(e.topology)||!S.includes(t)||!r(e.requestedAt)||e.observedAt!==null&&!r(e.observedAt)||e.terminalAt!==null&&!r(e.terminalAt)||!g.includes(e.freshness)||!y.includes(e.observationSource)||typeof e.reasonCode!="string"||!I.test(e.reasonCode)||typeof e.revision!="number"||!Number.isSafeInteger(e.revision)||e.revision<0||e.publicSafe!==!0?!1:t==="requested"?e.handle===null&&e.observedAt===null&&e.terminalAt===null&&e.freshness==="unknown"&&e.observationSource==="local-reservation":!(e.observationSource==="local-reservation"||(t==="spawned"||t==="running")&&(e.handle===null||e.freshness!=="fresh")||w.has(t)!==(e.terminalAt!==null))}const N={requested:new Set(["requested","spawned","failed","interrupted","unknown"]),spawned:new Set(["spawned","running","completed","failed","interrupted","unknown","lost"]),running:new Set(["running","completed","failed","interrupted","unknown","lost"]),unknown:new Set(["unknown","spawned","running","completed","failed","interrupted","lost"]),lost:new Set(["lost","running","completed","failed","interrupted"]),completed:new Set(["completed"]),failed:new Set(["failed"]),interrupted:new Set(["interrupted"])};function V(e,t){return N[e].has(t)}export{w as NATIVE_AGENT_TERMINAL_STATES,R as isNativeAgentDispatchReceiptV1,V as isNativeAgentStateTransitionAllowed,E as isNativeDispatchBindingV1,T as isNativeHostAttestationV1};

package/packages/client/dist/continuity/outbox.js

@@ -1,117 +1 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P192.03 -- Public-safe continuity outbox retry/dead-letter helpers.
- */
-export const DEFAULT_CONTINUITY_RETENTION_POLICY = Object.freeze({
-    policyVersion: 1,
-    receipts: Object.freeze({ maxAgeMs: 30 * 24 * 60 * 60_000, maxItems: 1_000, maxBytes: 2 * 1024 * 1024 }),
-    processingOutputs: Object.freeze({ maxAgeMs: 7 * 24 * 60 * 60_000, maxItems: 500, maxBytes: 1024 * 1024 }),
-    maxDeleteRowsPerRun: 5_000,
-    maxCompactionSummariesPerJob: 20,
-});
-export const CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE = 'receipt_compaction';
-export const CONTINUITY_RECEIPT_RETENTION_REASON_CODES = Object.freeze({
-    COMPACTED: 'receipt-compacted',
-    NOOP: 'receipt-retention-noop',
-});
-export const CONTINUITY_QUEUE_SCOPES = Object.freeze(['project', 'workspace']);
-export const DEFAULT_CONTINUITY_QUEUE_PRIORITY = 0;
-export const MIN_CONTINUITY_QUEUE_PRIORITY = -100;
-export const MAX_CONTINUITY_QUEUE_PRIORITY = 100;
-export const DEFAULT_CONTINUITY_QUEUE_POLICY = Object.freeze({
-    maxItems: 100,
-    leaseMs: 5 * 60_000,
-    maxAttempts: 3,
-    baseDelayMs: 30_000,
-    maxDelayMs: 15 * 60_000,
-});
-export const CONTINUITY_QUEUE_REASON_CODES = Object.freeze({
-    CAP_REACHED: 'queue-cap-reached',
-    LEASE_TIMEOUT_RETRY: 'queue-lease-timeout-retry',
-    ATTEMPTS_EXHAUSTED: 'queue-attempts-exhausted',
-});
-export const DEFAULT_CONTINUITY_OUTBOX_RETRY_POLICY = Object.freeze({
-    maxAttempts: 3,
-    baseDelayMs: 60_000,
-    maxDelayMs: 60 * 60_000,
-});
-export function normalizeContinuityQueuePolicy(policy) {
-    const maxItems = boundedInteger(policy?.maxItems, 1, 10_000, DEFAULT_CONTINUITY_QUEUE_POLICY.maxItems);
-    const leaseMs = boundedInteger(policy?.leaseMs, 1_000, 60 * 60_000, DEFAULT_CONTINUITY_QUEUE_POLICY.leaseMs);
-    const maxAttempts = boundedInteger(policy?.maxAttempts, 1, 100, DEFAULT_CONTINUITY_QUEUE_POLICY.maxAttempts);
-    const baseDelayMs = boundedInteger(policy?.baseDelayMs, 1_000, 24 * 60 * 60_000, DEFAULT_CONTINUITY_QUEUE_POLICY.baseDelayMs);
-    const maxDelayMs = boundedInteger(policy?.maxDelayMs, baseDelayMs, 7 * 24 * 60 * 60_000, DEFAULT_CONTINUITY_QUEUE_POLICY.maxDelayMs);
-    return { maxItems, leaseMs, maxAttempts, baseDelayMs, maxDelayMs };
-}
-export function normalizeContinuityRetentionPolicy(input) {
-    return {
-        policyVersion: 1,
-        receipts: normalizeRetentionWindow(input?.receipts, DEFAULT_CONTINUITY_RETENTION_POLICY.receipts),
-        processingOutputs: normalizeRetentionWindow(input?.processingOutputs, DEFAULT_CONTINUITY_RETENTION_POLICY.processingOutputs),
-        maxDeleteRowsPerRun: boundedInteger(input?.maxDeleteRowsPerRun, 1, 50_000, DEFAULT_CONTINUITY_RETENTION_POLICY.maxDeleteRowsPerRun),
-        maxCompactionSummariesPerJob: boundedInteger(input?.maxCompactionSummariesPerJob, 1, 100, DEFAULT_CONTINUITY_RETENTION_POLICY.maxCompactionSummariesPerJob),
-    };
-}
-export function normalizeContinuityQueuePriority(value) {
-    return boundedInteger(value, MIN_CONTINUITY_QUEUE_PRIORITY, MAX_CONTINUITY_QUEUE_PRIORITY, DEFAULT_CONTINUITY_QUEUE_PRIORITY);
-}
-export function normalizeContinuityQueueScope(value) {
-    return value === 'workspace' ? 'workspace' : 'project';
-}
-export function computeContinuityQueueRetryAt(nowIso, retryCount, policy) {
-    const normalized = normalizeContinuityQueuePolicy(policy);
-    const nowMs = Date.parse(nowIso);
-    const safeNowMs = Number.isFinite(nowMs) ? nowMs : Date.now();
-    const exponent = Math.max(0, Math.min(16, Math.floor(retryCount) - 1));
-    const delayMs = Math.min(normalized.maxDelayMs, normalized.baseDelayMs * (2 ** exponent));
-    return new Date(safeNowMs + delayMs).toISOString();
-}
-export function normalizeContinuityOutboxRetryPolicy(policy) {
-    const maxAttempts = boundedInteger(policy?.maxAttempts, 1, 100, DEFAULT_CONTINUITY_OUTBOX_RETRY_POLICY.maxAttempts);
-    const baseDelayMs = boundedInteger(policy?.baseDelayMs, 1_000, 24 * 60 * 60_000, DEFAULT_CONTINUITY_OUTBOX_RETRY_POLICY.baseDelayMs);
-    const maxDelayMs = boundedInteger(policy?.maxDelayMs, baseDelayMs, 7 * 24 * 60 * 60_000, DEFAULT_CONTINUITY_OUTBOX_RETRY_POLICY.maxDelayMs);
-    return { maxAttempts, baseDelayMs, maxDelayMs };
-}
-export function computeContinuityOutboxFailureDecision(input) {
-    const policy = normalizeContinuityOutboxRetryPolicy(input.policy);
-    const attemptCount = boundedInteger(input.attemptCount, 0, Number.MAX_SAFE_INTEGER, 0);
-    if (attemptCount >= policy.maxAttempts) {
-        return {
-            status: 'dead_letter',
-            reasonCode: input.reasonCode,
-            ...(input.summary ? { summary: input.summary } : {}),
-            deadLetteredAt: input.nowIso,
-            maxAttempts: policy.maxAttempts,
-            publicSafe: true,
-        };
-    }
-    return {
-        status: 'failed',
-        reasonCode: input.reasonCode,
-        ...(input.summary ? { summary: input.summary } : {}),
-        nextRetryAt: input.nextRetryAt ?? computeNextRetryAt(input.nowIso, attemptCount, policy),
-        maxAttempts: policy.maxAttempts,
-        publicSafe: true,
-    };
-}
-function computeNextRetryAt(nowIso, attemptCount, policy) {
-    const nowMs = Date.parse(nowIso);
-    const safeNowMs = Number.isFinite(nowMs) ? nowMs : Date.now();
-    const exponent = Math.max(0, Math.min(16, attemptCount - 1));
-    const delayMs = Math.min(policy.maxDelayMs, policy.baseDelayMs * (2 ** exponent));
-    return new Date(safeNowMs + delayMs).toISOString();
-}
-function boundedInteger(value, min, max, fallback) {
-    if (!Number.isFinite(value))
-        return fallback;
-    return Math.max(min, Math.min(max, Math.floor(value)));
-}
-function normalizeRetentionWindow(input, fallback) {
-    return {
-        maxAgeMs: boundedInteger(input?.maxAgeMs, 60_000, 365 * 24 * 60 * 60_000, fallback.maxAgeMs),
-        maxItems: boundedInteger(input?.maxItems, 1, 100_000, fallback.maxItems),
-        maxBytes: boundedInteger(input?.maxBytes, 1_024, 256 * 1024 * 1024, fallback.maxBytes),
-    };
-}
+const c=Object.freeze({policyVersion:1,receipts:Object.freeze({maxAgeMs:2592e6,maxItems:1e3,maxBytes:2097152}),processingOutputs:Object.freeze({maxAgeMs:6048e5,maxItems:500,maxBytes:1048576}),maxDeleteRowsPerRun:5e3,maxCompactionSummariesPerJob:20}),E="receipt_compaction",C=Object.freeze({COMPACTED:"receipt-compacted",NOOP:"receipt-retention-noop"}),l=Object.freeze(["project","workspace"]),p=0,M=-100,I=100,r=Object.freeze({maxItems:100,leaseMs:5*6e4,maxAttempts:3,baseDelayMs:3e4,maxDelayMs:15*6e4}),D=Object.freeze({CAP_REACHED:"queue-cap-reached",LEASE_TIMEOUT_RETRY:"queue-lease-timeout-retry",ATTEMPTS_EXHAUSTED:"queue-attempts-exhausted"}),u=Object.freeze({maxAttempts:3,baseDelayMs:6e4,maxDelayMs:60*6e4});function y(e){const t=s(e?.maxItems,1,1e4,r.maxItems),a=s(e?.leaseMs,1e3,60*6e4,r.leaseMs),o=s(e?.maxAttempts,1,100,r.maxAttempts),m=s(e?.baseDelayMs,1e3,1440*6e4,r.baseDelayMs),n=s(e?.maxDelayMs,m,10080*6e4,r.maxDelayMs);return{maxItems:t,leaseMs:a,maxAttempts:o,baseDelayMs:m,maxDelayMs:n}}function A(e){return{policyVersion:1,receipts:i(e?.receipts,c.receipts),processingOutputs:i(e?.processingOutputs,c.processingOutputs),maxDeleteRowsPerRun:s(e?.maxDeleteRowsPerRun,1,5e4,c.maxDeleteRowsPerRun),maxCompactionSummariesPerJob:s(e?.maxCompactionSummariesPerJob,1,100,c.maxCompactionSummariesPerJob)}}function N(e){return s(e,M,I,p)}function R(e){return e==="workspace"?"workspace":"project"}function b(e,t,a){const o=y(a),m=Date.parse(e),n=Number.isFinite(m)?m:Date.now(),x=Math.max(0,Math.min(16,Math.floor(t)-1)),_=Math.min(o.maxDelayMs,o.baseDelayMs*2**x);return new Date(n+_).toISOString()}function O(e){const t=s(e?.maxAttempts,1,100,u.maxAttempts),a=s(e?.baseDelayMs,1e3,1440*6e4,u.baseDelayMs),o=s(e?.maxDelayMs,a,10080*6e4,u.maxDelayMs);return{maxAttempts:t,baseDelayMs:a,maxDelayMs:o}}function U(e){const t=O(e.policy),a=s(e.attemptCount,0,Number.MAX_SAFE_INTEGER,0);return a>=t.maxAttempts?{status:"dead_letter",reasonCode:e.reasonCode,...e.summary?{summary:e.summary}:{},deadLetteredAt:e.nowIso,maxAttempts:t.maxAttempts,publicSafe:!0}:{status:"failed",reasonCode:e.reasonCode,...e.summary?{summary:e.summary}:{},nextRetryAt:e.nextRetryAt??T(e.nowIso,a,t),maxAttempts:t.maxAttempts,publicSafe:!0}}function T(e,t,a){const o=Date.parse(e),m=Number.isFinite(o)?o:Date.now(),n=Math.max(0,Math.min(16,t-1)),x=Math.min(a.maxDelayMs,a.baseDelayMs*2**n);return new Date(m+x).toISOString()}function s(e,t,a,o){return Number.isFinite(e)?Math.max(t,Math.min(a,Math.floor(e))):o}function i(e,t){return{maxAgeMs:s(e?.maxAgeMs,6e4,365*24*60*6e4,t.maxAgeMs),maxItems:s(e?.maxItems,1,1e5,t.maxItems),maxBytes:s(e?.maxBytes,1024,256*1024*1024,t.maxBytes)}}export{D as CONTINUITY_QUEUE_REASON_CODES,l as CONTINUITY_QUEUE_SCOPES,E as CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE,C as CONTINUITY_RECEIPT_RETENTION_REASON_CODES,u as DEFAULT_CONTINUITY_OUTBOX_RETRY_POLICY,r as DEFAULT_CONTINUITY_QUEUE_POLICY,p as DEFAULT_CONTINUITY_QUEUE_PRIORITY,c as DEFAULT_CONTINUITY_RETENTION_POLICY,I as MAX_CONTINUITY_QUEUE_PRIORITY,M as MIN_CONTINUITY_QUEUE_PRIORITY,U as computeContinuityOutboxFailureDecision,b as computeContinuityQueueRetryAt,O as normalizeContinuityOutboxRetryPolicy,y as normalizeContinuityQueuePolicy,N as normalizeContinuityQueuePriority,R as normalizeContinuityQueueScope,A as normalizeContinuityRetentionPolicy};