@ornexus/neocortex 4.60.68 → 4.60.70

package/packages/client/dist/runner/cli.js

@@ -1,1364 +1,19 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P180.06 -- neocortex-runner core tick loop, leases, receipts and recovery.
- */
-import { createHash, randomBytes } from 'node:crypto';
-import { resolve } from 'node:path';
-import { CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE, ContinuitySqliteStoreError, openContinuitySqliteStore, } from '../continuity/sqlite-store.js';
-import { invoke } from '../commands/invoke.js';
-import { checkRunnerBinaryTrust, } from './binary.js';
-import { runRunnerSchedulerCommand, } from './scheduler.js';
-import { runYoloExecutionPhase, } from './headless/run-yolo.js';
-import { runYoloopExecutionPhase, } from './headless/run-yoloop.js';
-import { DEFAULT_RUNNER_HEARTBEAT_BACKOFF_MS, DEFAULT_RUNNER_HEARTBEAT_INTERVAL_MS, DEFAULT_RUNNER_HEARTBEAT_JITTER_RATIO, DEFAULT_RUNNER_HEARTBEAT_TIMEOUT_MS, runRunnerPortalHeartbeat, runRunnerPortalHeartbeatLoop, runRunnerPortalSync, runRunnerPortalSyncLoop, } from './portal-sync-worker.js';
-export { RUNNER_BINARY_REASON_CODES, checkRunnerBinaryTrust, runnerTrustRelativePath } from './binary.js';
-export { LOCAL_JOBS_CONSOLE_REASON_CODES, createLocalJobConsoleServer, isLocalJobsConsoleArgs, localJobConsoleSocketPath, parseLocalJobsConsoleArgs, runLocalJobsConsoleCommand, } from './local-console.js';
-export const RUNNER_REASON_CODES = Object.freeze({
-    OK: 'continuity-ok',
-    LEASE_CONFLICT: 'lease-conflict',
-    LEASE_EXPIRED: 'lease-expired',
-    RUNNER_BINARY_UNTRUSTED: 'runner-binary-untrusted',
-    RUNNER_DIRECTIVE_UNTRUSTED: 'runner-directive-untrusted',
-    RUNNER_SERVER_INVOKE_FAILED: 'runner-server-invoke-failed',
-    SQLITE_ADAPTER_UNAVAILABLE: 'sqlite-adapter-unavailable',
-    SQLITE_INTEGRITY_FAILED: 'sqlite-integrity-failed',
-    BACKOFF_SCHEDULED: 'backoff-scheduled',
-    MISSED_RUN_CATCHUP: 'missed-run-catchup',
-    HEADLESS_RUNTIME_UNRESOLVED: 'headless-runtime-unresolved',
-    HEADLESS_RUNTIME_UNTRUSTED: 'headless-runtime-untrusted',
-    HEADLESS_ADAPTER_UNAVAILABLE: 'headless-adapter-unavailable',
-    HEADLESS_RUNTIME_AUTH_REQUIRED: 'headless-runtime-auth-required',
-    HEADLESS_EXECUTION_BACKOFF: 'headless-execution-backoff',
-    HEADLESS_EXECUTION_TIMEOUT: 'headless-execution-timeout',
-    HEADLESS_EXECUTION_FAILED: 'headless-execution-failed',
-    HEADLESS_RECEIPT_REDACTED: 'headless-receipt-redacted',
-    AUTONOMOUS_GOVERNANCE_BYPASS_BLOCKED: 'headless-directive-rejected',
-});
-export const DEFAULT_RUNNER_LEASE_MS = 5 * 60 * 1000;
-export const DEFAULT_STALE_LEASE_AFTER_MS = 30 * 1000;
-export const DEFAULT_RUNNER_BACKOFF_MS = 30 * 1000;
-export const DEFAULT_DUE_JOB_LIMIT = 1;
-export const MAX_DUE_JOB_LIMIT = 10;
-const ALLOWED_DIRECTIVE_KINDS = new Set([
-    'append_event',
-    'append_receipt',
-    'update_job_status',
-    'schedule_next_tick',
-    'release_lease',
-    'noop',
-]);
-const ALLOWED_COMMAND_CLASSES = new Set(['goal-tick', 'loop-tick', 'jobs', 'runner']);
-const RECEIPT_STATUSES = new Set(['accepted', 'applied', 'ignored', 'failed', 'deferred']);
-const JOB_STATUSES = new Set([
-    'draft',
-    'planned',
-    'active',
-    'running',
-    'waiting_external',
-    'waiting_human',
-    'backoff',
-    'paused',
-    'blocked',
-    'completed',
-    'aborted',
-    'cancelled',
-]);
-const UNSAFE_KEY_PATTERN = /(raw[_-]?logs?|prompt(?:[_-]?(?:body|text))?|private[_-]?urls?|secret|token|password|protected(?:[_-]?(?:field|body|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|authorization|api[_-]?key|license[_-]?key)/i;
-const UNSAFE_VALUE_PATTERN = /(https?:\/\/\S+|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?log|transcript|stack trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH))/i;
-const RUNNER_HEADLESS_TRUST_FAILURE_REASON_CODES = new Set([
-    RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNRESOLVED,
-    RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNTRUSTED,
-    'headless-model-rejected',
-    'headless-directive-rejected',
-    'headless-prompt-rejected',
-    'headless-yoloop-metadata-invalid',
-    'headless-yoloop-isolation-violation',
-]);
-const RUNNER_HEADLESS_ADAPTER_UNAVAILABLE_REASON_CODES = new Set([
-    RUNNER_REASON_CODES.HEADLESS_ADAPTER_UNAVAILABLE,
-]);
-const RUNNER_HEADLESS_AUTH_REQUIRED_REASON_CODES = new Set([
-    RUNNER_REASON_CODES.HEADLESS_RUNTIME_AUTH_REQUIRED,
-]);
-const RUNNER_HEADLESS_BACKOFF_REASON_CODES = new Set([
-    RUNNER_REASON_CODES.HEADLESS_EXECUTION_BACKOFF,
-]);
-const RUNNER_HEADLESS_TIMEOUT_REASON_CODES = new Set([
-    RUNNER_REASON_CODES.HEADLESS_EXECUTION_TIMEOUT,
-]);
-const RUNNER_HEADLESS_GENERIC_FAILURE_REASON_CODES = new Set([
-    RUNNER_REASON_CODES.HEADLESS_EXECUTION_FAILED,
-]);
-export async function defaultRunnerServerInvoker(input) {
-    const result = await invoke({
-        args: input.args,
-        projectRoot: input.projectRoot,
-        format: 'json',
-        platformTarget: 'runner',
-        serverUrl: input.serverUrl,
-        strictReadOnly: input.strictReadOnly,
-    });
-    return {
-        success: result.success,
-        instructions: result.instructions,
-        metadata: result.metadata,
-        error: result.error,
-        exitCode: result.exitCode,
-    };
-}
-export async function runRunnerTick(options = {}) {
-    const projectRoot = resolve(options.projectRoot ?? process.cwd());
-    const runnerId = sanitizeId(options.runnerId ?? defaultRunnerId(projectRoot));
-    const now = options.now ?? (() => new Date().toISOString());
-    const dueJobLimit = boundedInteger(options.dueJobLimit ?? DEFAULT_DUE_JOB_LIMIT, 1, MAX_DUE_JOB_LIMIT);
-    const leaseMs = boundedInteger(options.leaseMs ?? DEFAULT_RUNNER_LEASE_MS, 1_000, 60 * 60 * 1000);
-    const staleLeaseAfterMs = boundedInteger(options.staleLeaseAfterMs ?? DEFAULT_STALE_LEASE_AFTER_MS, 0, 24 * 60 * 60 * 1000);
-    const idFactory = options.idFactory ?? defaultIdFactory;
-    const processingSummarySource = normalizeRunnerProcessingSummarySource(options.processingSummarySource ?? (options.tickMode === 'scheduled' ? 'scheduled_tick' : 'manual_tick'));
-    const reasonCodes = [];
-    const receipts = [];
-    const processingSummaries = [];
-    const executionMetadata = [];
-    if (options.trustCheck !== false) {
-        const trust = checkRunnerBinaryTrust(options.executablePath ?? process.argv[1]);
-        if (!trust.trusted) {
-            return {
-                ok: false,
-                runnerId,
-                processedJobCount: 0,
-                dueJobCount: 0,
-                recoveredLeaseIds: [],
-                receipts: [],
-                reasonCodes: [trust.reasonCode ?? RUNNER_REASON_CODES.RUNNER_BINARY_UNTRUSTED],
-                publicSafe: true,
-            };
-        }
-    }
-    const store = await openContinuitySqliteStore({
-        projectRoot,
-        adapter: options.adapter,
-        adapterLoader: options.adapterLoader,
-        now,
-    });
-    const heartbeatLoop = startRunnerTickHeartbeatLoop({ options, projectRoot, runnerId, now });
-    let summary;
-    try {
-        const recovered = store.recoverStaleLeases({
-            nowIso: now(),
-            staleAfterMs: staleLeaseAfterMs,
-            limit: dueJobLimit * 2,
-        });
-        if (recovered.recoveredLeaseIds.length > 0) {
-            reasonCodes.push(RUNNER_REASON_CODES.LEASE_EXPIRED);
-            for (const leaseId of recovered.recoveredLeaseIds) {
-                // Recovery evidence is intentionally compact and public. It is not tied to
-                // a synthetic job receipt because the lease row already carries job ID.
-                void leaseId;
-            }
-        }
-        const dueJobs = store.listDueJobs({ nowIso: now(), limit: dueJobLimit });
-        for (const job of dueJobs) {
-            const result = await processDueJob({
-                store,
-                job,
-                projectRoot,
-                runnerId,
-                leaseMs,
-                now,
-                idFactory,
-                processingSummarySource,
-                serverUrl: options.serverUrl,
-                serverInvoker: options.serverInvoker ?? defaultRunnerServerInvoker,
-            });
-            receipts.push(result.receipt);
-            processingSummaries.push(...result.processingSummaries);
-            if (result.executionMetadata)
-                executionMetadata.push(result.executionMetadata);
-            reasonCodes.push(result.receipt.reasonCode);
-        }
-        const headlessExecution = await runYoloExecutionPhase({
-            store,
-            projectRoot,
-            runnerId,
-            now,
-            metadata: executionMetadata,
-            adapterRegistry: options.headlessAdapterRegistry,
-            adapterOptions: options.headlessAdapterOptions,
-            runtimeDefaults: options.headlessRuntimeDefaults,
-            runtimeFallback: options.headlessRuntimeFallback,
-            limit: options.headlessExecutionLimit,
-            leaseMs: options.headlessExecutionLeaseMs ?? leaseMs,
-            staleLeaseAfterMs: options.headlessExecutionStaleLeaseAfterMs ?? staleLeaseAfterMs,
-            timeoutMs: options.headlessExecutionTimeoutMs,
-            backoffMs: options.headlessExecutionBackoffMs,
-            maxAttempts: options.headlessExecutionMaxAttempts,
-            queueCap: options.headlessExecutionQueueCap,
-            idFactory: options.headlessExecutionIdFactory,
-        });
-        reasonCodes.push(...headlessExecution.reasonCodes);
-        const headlessYoloopExecution = await runYoloopExecutionPhase({
-            store,
-            projectRoot,
-            runnerId,
-            now,
-            metadata: executionMetadata,
-            adapterRegistry: options.headlessAdapterRegistry,
-            adapterOptions: options.headlessAdapterOptions,
-            runtimeDefaults: options.headlessRuntimeDefaults,
-            runtimeFallback: options.headlessRuntimeFallback,
-            limit: options.headlessExecutionLimit,
-            leaseMs: options.headlessExecutionLeaseMs ?? leaseMs,
-            staleLeaseAfterMs: options.headlessExecutionStaleLeaseAfterMs ?? staleLeaseAfterMs,
-            timeoutMs: options.headlessExecutionTimeoutMs,
-            backoffMs: options.headlessExecutionBackoffMs,
-            maxAttempts: options.headlessExecutionMaxAttempts,
-            queueCap: options.headlessExecutionQueueCap,
-            maxIterations: options.headlessYoloopMaxIterations,
-            maxDurationMs: options.headlessYoloopMaxDurationMs,
-            localConcurrencyCap: options.headlessYoloopLocalConcurrencyCap,
-            yoloopInvoker: options.headlessYoloopInvoker,
-            serverUrl: options.serverUrl,
-            idFactory: options.headlessExecutionIdFactory,
-        });
-        reasonCodes.push(...headlessYoloopExecution.reasonCodes);
-        summary = {
-            ok: receipts.every((receipt) => receipt.outcome !== 'failed') && headlessExecution.ok && headlessYoloopExecution.ok,
-            runnerId,
-            processedJobCount: receipts.length,
-            dueJobCount: dueJobs.length,
-            recoveredLeaseIds: recovered.recoveredLeaseIds,
-            receipts,
-            ...(processingSummaries.length > 0 ? { processingSummaries } : {}),
-            headlessExecution,
-            headlessYoloopExecution,
-            reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [RUNNER_REASON_CODES.OK]),
-            publicSafe: true,
-        };
-    }
-    finally {
-        await heartbeatLoop.stop();
-        store.close();
-    }
-    if (!summary)
-        throw new Error('runner-tick-failed');
-    return await withPostTickPortalSync(summary, {
-        options,
-        projectRoot,
-        runnerId,
-        localStateChanged: runnerTickChangedLocalState(summary),
-    });
-}
-async function withPostTickPortalSync(summary, input) {
-    const portalSync = input.options.portalSync;
-    if (portalSync === false || portalSync === undefined)
-        return summary;
-    if (!input.localStateChanged) {
-        const heartbeat = await runRunnerPortalHeartbeat({
-            ...portalSync,
-            projectRoot: portalSync.projectRoot ?? input.projectRoot,
-            runnerId: portalSync.runnerId ?? input.runnerId,
-            sessionId: portalSync.sessionId ?? input.options.portalHeartbeatSessionId,
-            serverUrl: portalSync.serverUrl ?? input.options.serverUrl,
-            adapter: portalSync.adapter ?? input.options.adapter,
-            adapterLoader: portalSync.adapterLoader ?? input.options.adapterLoader,
-            now: portalSync.now ?? input.options.now,
-            mode: portalSync.mode ?? (input.options.tickMode === 'scheduled' ? 'scheduled' : 'background'),
-            timeoutMs: portalSync.heartbeatTimeoutMs ?? input.options.portalHeartbeatTimeoutMs,
-        });
-        return { ...summary, portalHeartbeat: heartbeat };
-    }
-    const sync = await runRunnerPortalSync({
-        ...portalSync,
-        projectRoot: portalSync.projectRoot ?? input.projectRoot,
-        runnerId: portalSync.runnerId ?? input.runnerId,
-        sessionId: portalSync.sessionId ?? input.options.portalHeartbeatSessionId,
-        serverUrl: portalSync.serverUrl ?? input.options.serverUrl,
-        adapter: portalSync.adapter ?? input.options.adapter,
-        adapterLoader: portalSync.adapterLoader ?? input.options.adapterLoader,
-        now: portalSync.now ?? input.options.now,
-        mode: portalSync.mode ?? (input.options.tickMode === 'scheduled' ? 'scheduled' : 'background'),
-    });
-    return { ...summary, portalSync: sync };
-}
-function runnerTickChangedLocalState(summary) {
-    return summary.recoveredLeaseIds.length > 0
-        || summary.receipts.length > 0
-        || (summary.processingSummaries?.length ?? 0) > 0
-        || (summary.headlessExecution?.processedAttemptCount ?? 0) > 0
-        || (summary.headlessExecution?.recoveredAttemptIds.length ?? 0) > 0
-        || (summary.headlessYoloopExecution?.processedAttemptCount ?? 0) > 0
-        || (summary.headlessYoloopExecution?.recoveredAttemptIds.length ?? 0) > 0;
-}
-function startRunnerTickHeartbeatLoop(input) {
-    const portalSync = input.options.portalSync;
-    if (portalSync === false || portalSync === undefined)
-        return { stop: async () => undefined };
-    const intervalMs = boundedInteger(input.options.portalHeartbeatIntervalMs ?? DEFAULT_RUNNER_HEARTBEAT_INTERVAL_MS, 0, 24 * 60 * 60 * 1000);
-    if (intervalMs <= 0)
-        return { stop: async () => undefined };
-    const backoffMs = boundedInteger(input.options.portalHeartbeatBackoffMs ?? DEFAULT_RUNNER_HEARTBEAT_BACKOFF_MS, 1_000, 30 * 60 * 1000);
-    const jitterRatio = boundedNumber(input.options.portalHeartbeatJitterRatio ?? DEFAULT_RUNNER_HEARTBEAT_JITTER_RATIO, 0, 0.5);
-    const timeoutMs = boundedInteger(input.options.portalHeartbeatTimeoutMs ?? portalSync.heartbeatTimeoutMs ?? DEFAULT_RUNNER_HEARTBEAT_TIMEOUT_MS, 1_000, 60_000);
-    let stopped = false;
-    let timer;
-    let wake;
-    let nextDelayMs = jitteredDelayMs(intervalMs, jitterRatio, Math.random);
-    const waitForDelayOrStop = (delayMs) => new Promise((resolvePromise) => {
-        wake = resolvePromise;
-        timer = setTimeout(resolvePromise, delayMs);
-        if (typeof timer.unref === 'function')
-            timer.unref();
-    });
-    const loop = (async () => {
-        while (!stopped) {
-            if (nextDelayMs > 0)
-                await waitForDelayOrStop(nextDelayMs);
-            if (stopped)
-                break;
-            const heartbeat = await runRunnerPortalHeartbeat({
-                ...portalSync,
-                projectRoot: portalSync.projectRoot ?? input.projectRoot,
-                runnerId: portalSync.runnerId ?? input.runnerId,
-                sessionId: portalSync.sessionId ?? input.options.portalHeartbeatSessionId,
-                serverUrl: portalSync.serverUrl ?? input.options.serverUrl,
-                adapter: portalSync.adapter ?? input.options.adapter,
-                adapterLoader: portalSync.adapterLoader ?? input.options.adapterLoader,
-                now: portalSync.now ?? input.now,
-                mode: portalSync.mode ?? (input.options.tickMode === 'scheduled' ? 'scheduled' : 'background'),
-                timeoutMs,
-            }).catch(() => ({
-                ok: false,
-                runnerId: input.runnerId,
-                workspaceId: 'workspace-default',
-                workspaceLabel: 'Workspace workspace-default',
-                projectId: 'project-default',
-                projectLabel: 'Project project-default',
-                mode: input.options.tickMode === 'scheduled' ? 'scheduled' : 'background',
-                generatedAt: input.now(),
-                serverAccessToLocalhost: false,
-                serverHeldStream: false,
-                localhostCallback: false,
-                posted: { heartbeat: false },
-                counts: { redactions: 0 },
-                reasonCodes: [RUNNER_REASON_CODES.BACKOFF_SCHEDULED],
-                redactionEvidence: [],
-                publicSafe: true,
-            }));
-            nextDelayMs = jitteredDelayMs(heartbeat.ok ? intervalMs : backoffMs, jitterRatio, Math.random);
-        }
-    })();
-    return {
-        stop: async () => {
-            stopped = true;
-            if (timer)
-                clearTimeout(timer);
-            wake?.();
-            await loop.catch(() => undefined);
-        },
-    };
-}
-export async function runRunnerDoctor(options = {}) {
-    const projectRoot = resolve(options.projectRoot ?? process.cwd());
-    const now = options.now ?? (() => new Date().toISOString());
-    const generatedAt = now();
-    const checks = {};
-    let snapshotRows = null;
-    let store = null;
-    try {
-        store = await openContinuitySqliteStore({
-            projectRoot,
-            adapter: options.adapter,
-            adapterLoader: options.adapterLoader,
-            now,
-        });
-        snapshotRows = store.collectSnapshotRows({
-            nowIso: generatedAt,
-            jobLimit: 10,
-            staleLeaseLimit: 10,
-            receiptLimit: 10,
-            eventLimit: 10,
-            snapshotLimit: 5,
-        });
-        const journalMode = String(store.pragmaValue('journal_mode') ?? '').toLowerCase();
-        checks['db-integrity'] = doctorCheck('db-integrity', 'DB integrity', 'ok', [RUNNER_REASON_CODES.OK], 'Continuity SQLite integrity check completed.', {
-            jobs: count(snapshotRows.counts, 'jobs'),
-            receipts: count(snapshotRows.counts, 'receipts'),
-            events: count(snapshotRows.counts, 'events'),
-        });
-        checks['sqlite-wal'] = doctorCheck('sqlite-wal', 'SQLite WAL', journalMode === 'wal' ? 'ok' : 'blocked', journalMode === 'wal' ? [RUNNER_REASON_CODES.OK] : [RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED], journalMode === 'wal' ? 'SQLite journal mode is WAL.' : 'SQLite journal mode is not WAL.');
-        checks.migrations = doctorCheck('migrations', 'Migrations', snapshotRows.schemaVersion >= 1 ? 'ok' : 'blocked', snapshotRows.schemaVersion >= 1 ? [RUNNER_REASON_CODES.OK] : [RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED], `Continuity schema version ${snapshotRows.schemaVersion} is readable.`);
-    }
-    catch (error) {
-        const reasonCode = classifyRunnerError(error);
-        checks['db-integrity'] = doctorCheck('db-integrity', 'DB integrity', 'blocked', [reasonCode], 'Continuity SQLite could not be opened safely.');
-        checks['sqlite-wal'] = doctorCheck('sqlite-wal', 'SQLite WAL', 'blocked', [reasonCode], 'SQLite WAL could not be verified.');
-        checks.migrations = doctorCheck('migrations', 'Migrations', 'blocked', [reasonCode], 'Continuity migrations could not be verified.');
-    }
-    finally {
-        if (store) {
-            try {
-                store.close();
-            }
-            catch { /* ignore close failures for doctor output */ }
-        }
-    }
-    const staleLeases = snapshotRows ? count(snapshotRows.counts, 'staleLeases') : 0;
-    const staleHeadlessExecutionAttempts = snapshotRows ? count(snapshotRows.counts, 'staleHeadlessExecutionAttempts') : 0;
-    checks.leases = doctorCheck('leases', 'Lease health', staleLeases + staleHeadlessExecutionAttempts > 0 ? 'degraded' : 'ok', staleLeases + staleHeadlessExecutionAttempts > 0 ? [RUNNER_REASON_CODES.LEASE_EXPIRED] : [RUNNER_REASON_CODES.OK], staleLeases + staleHeadlessExecutionAttempts > 0 ? 'Stale job leases or headless execution attempts are eligible for bounded recovery.' : 'No stale leases or headless attempts reported.', { staleLeases, staleHeadlessExecutionAttempts });
-    const headlessAttempts = snapshotRows?.headlessExecutionAttempts ?? [];
-    const headlessReasonCodes = unique(headlessAttempts
-        .map((attempt) => attempt.reason_code)
-        .filter((reasonCode) => typeof reasonCode === 'string' && reasonCode.length > 0));
-    const headlessDiagnostics = summarizeRunnerHeadlessDiagnostics(headlessAttempts, headlessReasonCodes);
-    const headlessBlockingReasons = new Set([
-        RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNRESOLVED,
-        RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNTRUSTED,
-        RUNNER_REASON_CODES.HEADLESS_ADAPTER_UNAVAILABLE,
-        RUNNER_REASON_CODES.HEADLESS_RUNTIME_AUTH_REQUIRED,
-        'headless-model-rejected',
-        'headless-directive-rejected',
-        'headless-prompt-rejected',
-        'headless-yoloop-metadata-invalid',
-        'headless-yoloop-isolation-violation',
-    ]);
-    const headlessAttemptCount = snapshotRows ? count(snapshotRows.counts, 'headlessExecutionAttempts') : 0;
-    const headlessBlocked = headlessReasonCodes.some((reasonCode) => headlessBlockingReasons.has(reasonCode));
-    const headlessBackoff = headlessReasonCodes.includes(RUNNER_REASON_CODES.HEADLESS_EXECUTION_BACKOFF)
-        || headlessAttempts.some((attempt) => attempt.status === 'backoff');
-    const headlessRedacted = headlessReasonCodes.includes(RUNNER_REASON_CODES.HEADLESS_RECEIPT_REDACTED);
-    const headlessAuthRequired = headlessDiagnostics.authRequired > 0;
-    const headlessTrustOrAdapterBlocked = headlessDiagnostics.trustFailures > 0 || headlessDiagnostics.adapterUnavailable > 0;
-    const headlessDegraded = staleHeadlessExecutionAttempts > 0
-        || headlessBackoff
-        || headlessRedacted
-        || headlessDiagnostics.timeout > 0
-        || headlessDiagnostics.genericFailed > 0
-        || headlessDiagnostics.redactions > 0;
-    checks['headless-execution'] = doctorCheck('headless-execution', 'Headless execution', headlessBlocked ? 'blocked' : headlessDegraded ? 'degraded' : headlessAttemptCount > 0 ? 'ok' : 'delegated', headlessReasonCodes.length > 0
-        ? headlessReasonCodes
-        : headlessAttemptCount > 0
-            ? [RUNNER_REASON_CODES.OK]
-            : [RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNRESOLVED], headlessBlocked
-        ? headlessAuthRequired && !headlessTrustOrAdapterBlocked
-            ? 'Complete local runtime login/auth setup before starting a new headless attempt; default retry/backoff is not scheduled for auth-required.'
-            : 'Resolve public runtime/model trust, adapter availability or protected directive hard-stop reason codes before executing headless attempts.'
-        : headlessDegraded
-            ? 'Headless attempts need bounded recovery, retry/backoff, timeout/generic failure follow-up or redaction review.'
-            : headlessAttemptCount > 0
-                ? 'Headless attempts are represented by public status, runtime/model and reason-code evidence.'
-                : 'Headless resolver checks are delegated until durable headless work is queued.', {
-        attempts: headlessAttemptCount,
-        queuedBackoff: snapshotRows ? count(snapshotRows.counts, 'headlessQueuedAttempts') : 0,
-        running: snapshotRows ? count(snapshotRows.counts, 'headlessRunningAttempts') : 0,
-        staleHeadlessExecutionAttempts,
-        trustFailures: headlessDiagnostics.trustFailures,
-        adapterUnavailable: headlessDiagnostics.adapterUnavailable,
-        authRequired: headlessDiagnostics.authRequired,
-        retryBackoff: headlessDiagnostics.retryBackoff,
-        timeout: headlessDiagnostics.timeout,
-        genericFailed: headlessDiagnostics.genericFailed,
-        redactions: headlessDiagnostics.redactions,
-    });
-    const outboxCounts = snapshotRows?.outboxCounts ?? {};
-    const failedOutbox = count(outboxCounts, 'failed') + count(outboxCounts, 'dead_letter');
-    checks.outbox = doctorCheck('outbox', 'Outbox state', failedOutbox > 0 ? 'degraded' : 'ok', failedOutbox > 0 ? [RUNNER_REASON_CODES.BACKOFF_SCHEDULED] : [RUNNER_REASON_CODES.OK], failedOutbox > 0 ? 'Failed/dead-letter outbox entries can be retried with dedupe.' : 'Outbox has no failed/dead-letter entries.', {
-        pending: count(outboxCounts, 'pending'),
-        failed: count(outboxCounts, 'failed'),
-        deadLetter: count(outboxCounts, 'dead_letter'),
-    });
-    checks.metering = doctorCheck('metering', 'Metering receipts', 'ok', [RUNNER_REASON_CODES.OK], 'Metering evidence is represented by public job receipts and counts only.', { receipts: snapshotRows ? count(snapshotRows.counts, 'receipts') : 0 });
-    checks['portal-sync'] = doctorCheck('portal-sync', 'Portal sync', failedOutbox > 0 ? 'degraded' : 'ok', failedOutbox > 0 ? [RUNNER_REASON_CODES.BACKOFF_SCHEDULED] : [RUNNER_REASON_CODES.OK], failedOutbox > 0
-        ? 'Portal sync worker is enabled but has retryable outbox debt; outbound sync remains client-owned.'
-        : 'Portal sync worker is enabled for outbound heartbeat, jobs sync, command polling and acknowledgement only.', {
-        pending: count(outboxCounts, 'pending'),
-        failed: count(outboxCounts, 'failed'),
-        deadLetter: count(outboxCounts, 'dead_letter'),
-    });
-    const trust = options.trustCheck === false
-        ? { trusted: true, publicSafe: true }
-        : checkRunnerBinaryTrust(options.executablePath ?? process.argv[1]);
-    checks.runner = doctorCheck('runner', 'Runner health', trust.trusted ? 'ok' : 'blocked', trust.trusted ? [RUNNER_REASON_CODES.OK] : [trust.reasonCode ?? RUNNER_REASON_CODES.RUNNER_BINARY_UNTRUSTED], trust.trusted ? 'Runner binary trust check passed.' : 'Runner binary trust check failed.');
-    try {
-        const scheduler = await runRunnerSchedulerCommand({
-            command: 'doctor',
-            projectRoot,
-            executablePath: options.scheduler?.executablePath ?? options.executablePath ?? process.argv[1],
-            platform: options.scheduler?.platform,
-            env: options.scheduler?.env,
-            dryRun: true,
-            intervalSeconds: options.scheduler?.intervalSeconds,
-            strategy: options.scheduler?.strategy,
-            allowCronFallback: options.scheduler?.allowCronFallback,
-            trustCheck: options.scheduler?.trustCheck ?? options.trustCheck,
-            uid: options.scheduler?.uid,
-            commandAvailable: options.scheduler?.commandAvailable,
-            commandRunner: options.scheduler?.commandRunner,
-            trustChecker: options.scheduler?.trustChecker ?? checkRunnerBinaryTrust,
-        });
-        const schedulerBlocked = scheduler.reasonCodes.includes(RUNNER_REASON_CODES.RUNNER_BINARY_UNTRUSTED)
-            || scheduler.reasonCodes.some((reasonCode) => reasonCode.startsWith('runner-binary-'))
-            || scheduler.reasonCodes.includes('scheduler-install-unsafe');
-        checks.scheduler = doctorCheck('scheduler', 'Scheduler install', schedulerBlocked ? 'blocked' : scheduler.ok ? 'ok' : 'degraded', scheduler.reasonCodes, scheduler.ok ? 'Scheduler doctor selected a user-scope strategy.' : 'Scheduler doctor found public guidance or degraded capability.', { manifests: scheduler.manifestPaths.length, controlCommands: scheduler.controlCommands.length, legacyEntries: scheduler.legacyEntries.length });
-    }
-    catch (error) {
-        checks.scheduler = doctorCheck('scheduler', 'Scheduler install', 'degraded', ['scheduler-command-failed'], publicErrorMessage(error));
-    }
-    const completeChecks = checks;
-    const reasonCodes = unique(Object.values(completeChecks).flatMap((check) => check.reasonCodes));
-    return {
-        ok: Object.values(completeChecks).every((check) => check.status !== 'blocked'),
-        generatedAt,
-        checks: completeChecks,
-        reasonCodes,
-        publicSafe: true,
-    };
-}
-export function extractRunnerDirectives(metadata) {
-    if (!metadata)
-        return [];
-    const candidates = [
-        metadata.continuityRunnerDirectives,
-        metadata.runnerDirectives,
-        metadata.continuityDirectives,
-    ];
-    for (const candidate of candidates) {
-        if (Array.isArray(candidate))
-            return candidate.filter(isRecord).map(normalizeDirective).filter(isRunnerDirective);
-    }
-    return [];
-}
-export function assertRunnerDirectiveTrusted(directive, jobId) {
-    if (!isRecord(directive))
-        throw new RunnerDirectiveError('Directive is not a public record.');
-    if (directive.publicSafe !== true)
-        throw new RunnerDirectiveError('Directive is not marked public-safe.');
-    const kind = typeof directive.kind === 'string' ? directive.kind : typeof directive.type === 'string' ? directive.type : '';
-    if (!ALLOWED_DIRECTIVE_KINDS.has(kind))
-        throw new RunnerDirectiveError('Directive kind is not allowlisted.');
-    const commandClass = typeof directive.commandClass === 'string' ? directive.commandClass : 'runner';
-    if (!ALLOWED_COMMAND_CLASSES.has(commandClass))
-        throw new RunnerDirectiveError('Directive command class is not allowlisted.');
-    const directiveJobId = typeof directive.jobId === 'string' ? directive.jobId : jobId;
-    if (directiveJobId !== jobId)
-        throw new RunnerDirectiveError('Directive job ID does not match the leased job.');
-    assertPublicSafeDirectiveValue(directive, 'directive');
-}
-export async function runRunnerCli(argv, options = {}) {
-    const parsed = parseRunnerArgs(argv);
-    if (parsed.command === 'help') {
-        process.stdout.write(`${RUNNER_HELP}\n`);
-        return 0;
-    }
-    if (parsed.command === 'version') {
-        const trust = checkRunnerBinaryTrust(options.executablePath ?? process.argv[1]);
-        process.stdout.write(`${trust.packageVersion ?? '0.0.0'}\n`);
-        return trust.trusted ? 0 : 1;
-    }
-    if (parsed.command === 'doctor') {
-        try {
-            const summary = await runRunnerDoctor({
-                ...options,
-                projectRoot: parsed.projectRoot ?? options.projectRoot,
-                executablePath: options.executablePath ?? process.argv[1],
-                scheduler: {
-                    ...options.scheduler,
-                    strategy: parsed.strategy ?? options.scheduler?.strategy,
-                    allowCronFallback: parsed.allowCronFallback ?? options.scheduler?.allowCronFallback,
-                    executablePath: options.scheduler?.executablePath ?? options.executablePath ?? process.argv[1],
-                },
-            });
-            process.stdout.write(JSON.stringify(summary) + '\n');
-            return summary.ok ? 0 : 1;
-        }
-        catch (error) {
-            process.stderr.write(JSON.stringify({ error_code: 'runner-doctor-failed', message: publicErrorMessage(error) }) + '\n');
-            return 1;
-        }
-    }
-    if (isSchedulerCommand(parsed.command)) {
-        try {
-            const summary = await runRunnerSchedulerCommand({
-                command: parsed.command,
-                projectRoot: parsed.projectRoot ?? options.projectRoot,
-                executablePath: options.scheduler?.executablePath ?? options.executablePath ?? process.argv[1],
-                platform: options.scheduler?.platform,
-                env: options.scheduler?.env,
-                dryRun: parsed.dryRun ?? options.scheduler?.dryRun,
-                intervalSeconds: parsed.intervalSeconds ?? options.scheduler?.intervalSeconds,
-                strategy: parsed.strategy ?? options.scheduler?.strategy,
-                allowCronFallback: parsed.allowCronFallback ?? options.scheduler?.allowCronFallback,
-                trustCheck: options.scheduler?.trustCheck,
-                uid: options.scheduler?.uid,
-                commandAvailable: options.scheduler?.commandAvailable,
-                commandRunner: options.scheduler?.commandRunner,
-                trustChecker: options.scheduler?.trustChecker ?? checkRunnerBinaryTrust,
-            });
-            process.stdout.write(JSON.stringify(publicRunnerSchedulerCommandResult(summary)) + '\n');
-            return summary.ok ? 0 : 1;
-        }
-        catch (error) {
-            process.stderr.write(JSON.stringify({ error_code: 'scheduler-command-failed', message: publicErrorMessage(error) }) + '\n');
-            return 1;
-        }
-    }
-    if (parsed.command === 'heartbeat') {
-        try {
-            if (parsed.loop) {
-                const summary = await runRunnerPortalHeartbeatLoop({
-                    ...options,
-                    projectRoot: parsed.projectRoot ?? options.projectRoot,
-                    runnerId: parsed.runnerId ?? options.runnerId,
-                    sessionId: parsed.sessionId ?? options.portalHeartbeatSessionId,
-                    serverUrl: parsed.serverUrl ?? options.serverUrl,
-                    workspaceId: parsed.workspaceId,
-                    workspaceLabel: parsed.workspaceLabel,
-                    projectId: parsed.projectId,
-                    projectLabel: parsed.projectLabel,
-                    mode: parsed.scheduled ? 'scheduled' : 'background',
-                    intervalMs: parsed.intervalMs ?? options.portalHeartbeatIntervalMs,
-                    maxRuns: parsed.maxRuns ?? options.portalSyncMaxRuns,
-                    backoffMs: parsed.heartbeatBackoffMs ?? options.portalHeartbeatBackoffMs,
-                    timeoutMs: parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs,
-                    jitterRatio: parsed.heartbeatJitterRatio ?? options.portalHeartbeatJitterRatio,
-                });
-                process.stdout.write(JSON.stringify(summary) + '\n');
-                return summary.ok ? 0 : 1;
-            }
-            const summary = await runRunnerPortalHeartbeat({
-                ...options,
-                projectRoot: parsed.projectRoot ?? options.projectRoot,
-                runnerId: parsed.runnerId ?? options.runnerId,
-                sessionId: parsed.sessionId ?? options.portalHeartbeatSessionId,
-                serverUrl: parsed.serverUrl ?? options.serverUrl,
-                workspaceId: parsed.workspaceId,
-                workspaceLabel: parsed.workspaceLabel,
-                projectId: parsed.projectId,
-                projectLabel: parsed.projectLabel,
-                mode: parsed.scheduled ? 'scheduled' : 'manual',
-                timeoutMs: parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs,
-            });
-            process.stdout.write(JSON.stringify(summary) + '\n');
-            return summary.ok ? 0 : 1;
-        }
-        catch (error) {
-            process.stderr.write(JSON.stringify({ error_code: 'portal-heartbeat-failed', message: publicErrorMessage(error) }) + '\n');
-            return 1;
-        }
-    }
-    if (parsed.command === 'sync') {
-        try {
-            if (parsed.loop) {
-                const summary = await runRunnerPortalSyncLoop({
-                    ...options,
-                    projectRoot: parsed.projectRoot ?? options.projectRoot,
-                    runnerId: parsed.runnerId ?? options.runnerId,
-                    serverUrl: parsed.serverUrl ?? options.serverUrl,
-                    workspaceId: parsed.workspaceId,
-                    workspaceLabel: parsed.workspaceLabel,
-                    projectId: parsed.projectId,
-                    projectLabel: parsed.projectLabel,
-                    syncCursor: parsed.syncCursor,
-                    mode: parsed.scheduled ? 'scheduled' : 'background',
-                    intervalMs: parsed.intervalMs ?? options.portalSyncIntervalMs,
-                    maxRuns: parsed.maxRuns ?? options.portalSyncMaxRuns,
-                });
-                process.stdout.write(JSON.stringify(summary) + '\n');
-                return summary.ok ? 0 : 1;
-            }
-            const summary = await runRunnerPortalSync({
-                ...options,
-                projectRoot: parsed.projectRoot ?? options.projectRoot,
-                runnerId: parsed.runnerId ?? options.runnerId,
-                serverUrl: parsed.serverUrl ?? options.serverUrl,
-                workspaceId: parsed.workspaceId,
-                workspaceLabel: parsed.workspaceLabel,
-                projectId: parsed.projectId,
-                projectLabel: parsed.projectLabel,
-                syncCursor: parsed.syncCursor,
-                mode: parsed.scheduled ? 'scheduled' : 'manual',
-            });
-            process.stdout.write(JSON.stringify(summary) + '\n');
-            return summary.ok ? 0 : 1;
-        }
-        catch (error) {
-            process.stderr.write(JSON.stringify({ error_code: 'portal-sync-failed', message: publicErrorMessage(error) }) + '\n');
-            return 1;
-        }
-    }
-    if (parsed.command !== 'tick') {
-        process.stderr.write(JSON.stringify({ error_code: 'runner-command-unknown', message: 'Unknown neocortex-runner command.' }) + '\n');
-        return 1;
-    }
-    try {
-        const summary = await runRunnerTick({
-            ...options,
-            projectRoot: parsed.projectRoot ?? options.projectRoot,
-            runnerId: parsed.runnerId ?? options.runnerId,
-            dueJobLimit: parsed.limit ?? options.dueJobLimit,
-            leaseMs: parsed.leaseMs ?? options.leaseMs,
-            staleLeaseAfterMs: parsed.staleLeaseAfterMs ?? options.staleLeaseAfterMs,
-            headlessYoloopLocalConcurrencyCap: parsed.yoloopLocalCap ?? options.headlessYoloopLocalConcurrencyCap,
-            tickMode: parsed.scheduled ? 'scheduled' : options.tickMode,
-            processingSummarySource: parsed.scheduled ? 'scheduled_tick' : options.processingSummarySource,
-            serverUrl: parsed.serverUrl ?? options.serverUrl,
-            portalSync: runnerCliPortalSyncOptions(parsed, options, parsed.scheduled ? 'scheduled' : 'background'),
-        });
-        process.stdout.write(JSON.stringify(summary) + '\n');
-        return summary.ok ? 0 : 1;
-    }
-    catch (error) {
-        const reasonCode = classifyRunnerError(error);
-        process.stderr.write(JSON.stringify({ error_code: reasonCode, message: publicErrorMessage(error) }) + '\n');
-        return 1;
-    }
-}
-async function processDueJob(input) {
-    const { store, job, projectRoot, runnerId, leaseMs, now, idFactory, processingSummarySource, serverUrl, serverInvoker } = input;
-    const jobId = job.job_id;
-    const tickId = idFactory('tick', jobId);
-    const leaseId = idFactory('lease', jobId);
-    const acquiredAt = now();
-    const expiresAt = new Date(Date.parse(acquiredAt) + leaseMs).toISOString();
-    let leaseHeld = false;
-    let leaseReleasedByDirective = false;
-    let finalReasonCode = RUNNER_REASON_CODES.OK;
-    let finalOutcome = 'applied';
-    let redactionSummary = [];
-    const acquired = store.acquireLease({
-        leaseId,
-        jobId,
-        runnerId,
-        acquiredAt,
-        expiresAt,
-        operationId: `${tickId}:acquire`,
-        idempotencyKey: `${tickId}:acquire`,
-        metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'running', reasonCode: RUNNER_REASON_CODES.OK }),
-    });
-    if (!acquired.inserted) {
-        const receipt = appendTickReceipt(store, {
-            jobId,
-            tickId,
-            leaseId,
-            status: 'ignored',
-            reasonCode: RUNNER_REASON_CODES.LEASE_CONFLICT,
-            createdAt: now(),
-            redactionSummary,
-        });
-        return { receipt, processingSummaries: [] };
-    }
-    leaseHeld = true;
-    try {
-        store.appendEvent({
-            eventId: `${tickId}:started`,
-            jobId,
-            operationId: `${tickId}:event:started`,
-            idempotencyKey: `${tickId}:event:started`,
-            type: 'runner_tick_started',
-            summary: `Runner tick started for ${jobId}.`,
-            reasonCode: RUNNER_REASON_CODES.OK,
-            createdAt: acquiredAt,
-            metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'running', reasonCode: RUNNER_REASON_CODES.OK }),
-        });
-        const args = job.kind === 'loop'
-            ? `*loop tick @${jobId} --tick-id ${tickId} --lease-id ${leaseId} --runner-id ${runnerId}`
-            : job.kind === 'goal'
-                ? `*goal tick @${jobId} --tick-id ${tickId} --lease-id ${leaseId} --runner-id ${runnerId}`
-                : `*runner tick --job-id ${jobId} --tick-id ${tickId} --lease-id ${leaseId} --runner-id ${runnerId}`;
-        const serverResult = await serverInvoker({ projectRoot, args, jobId, tickId, leaseId, runnerId, serverUrl });
-        if (!serverResult.success) {
-            finalReasonCode = RUNNER_REASON_CODES.RUNNER_SERVER_INVOKE_FAILED;
-            finalOutcome = 'failed';
-            const failedAt = now();
-            store.updateJobStatus({
-                jobId,
-                status: 'backoff',
-                updatedAt: failedAt,
-                reasonCode: RUNNER_REASON_CODES.BACKOFF_SCHEDULED,
-                nextRunAt: addMilliseconds(failedAt, DEFAULT_RUNNER_BACKOFF_MS),
-            });
-            store.appendEvent({
-                eventId: `${tickId}:server-failed`,
-                jobId,
-                operationId: `${tickId}:event:server-failed`,
-                idempotencyKey: `${tickId}:event:server-failed`,
-                type: 'runner_tick_failed',
-                summary: 'Runner server tick invocation failed with public reason code.',
-                reasonCode: finalReasonCode,
-                createdAt: failedAt,
-                metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'failed', reasonCode: finalReasonCode }),
-            });
-            const receipt = appendTickReceipt(store, { jobId, tickId, leaseId, status: finalOutcome, reasonCode: finalReasonCode, createdAt: now(), redactionSummary });
-            return { receipt, processingSummaries: [] };
-        }
-        const directives = extractRunnerDirectives(serverResult.metadata);
-        const mutationDirectives = directives.filter((directive) => !isProcessingSummaryDirective(directive));
-        let directiveResult = { appliedCount: 0, releasedLease: false, changedStatus: false, redactionSummary: [] };
-        try {
-            directiveResult = executeRunnerDirectives(store, mutationDirectives, { jobId, tickId, leaseId, runnerId, now });
-            leaseReleasedByDirective = directiveResult.releasedLease;
-            redactionSummary = [...directiveResult.redactionSummary];
-            finalReasonCode = extractPublicRunnerReasonCode(serverResult.metadata) ?? finalReasonCode;
-        }
-        catch (error) {
-            finalReasonCode = RUNNER_REASON_CODES.RUNNER_DIRECTIVE_UNTRUSTED;
-            finalOutcome = 'failed';
-            redactionSummary = [error instanceof Error ? error.message : 'Directive rejected.'];
-            store.updateJobStatus({ jobId, status: 'blocked', updatedAt: now(), reasonCode: finalReasonCode });
-            store.appendEvent({
-                eventId: `${tickId}:directive-rejected`,
-                jobId,
-                operationId: `${tickId}:event:directive-rejected`,
-                idempotencyKey: `${tickId}:event:directive-rejected`,
-                type: 'runner_directive_rejected',
-                summary: 'Runner rejected an untrusted continuity directive.',
-                reasonCode: finalReasonCode,
-                createdAt: now(),
-                metadata: receiptMetadata({
-                    jobId,
-                    operationId: tickId,
-                    runnerId,
-                    leaseId,
-                    status: 'failed',
-                    reasonCode: finalReasonCode,
-                    redactionSummary,
-                }),
-            });
-            const receipt = appendTickReceipt(store, { jobId, tickId, leaseId, status: finalOutcome, reasonCode: finalReasonCode, createdAt: now(), redactionSummary });
-            return { receipt, processingSummaries: [] };
-        }
-        const processingSummaries = persistRunnerProcessingSummaries(store, serverResult.metadata, {
-            jobId,
-            tickId,
-            leaseId,
-            runnerId,
-            source: processingSummarySource,
-            createdAt: now(),
-        });
-        const serverAlreadyMutated = Boolean(serverResult.metadata?.continuityStateUpdate);
-        if (!directiveResult.changedStatus && !serverAlreadyMutated) {
-            store.updateJobStatus({ jobId, status: 'active', updatedAt: now(), reasonCode: RUNNER_REASON_CODES.OK });
-        }
-        store.appendEvent({
-            eventId: `${tickId}:completed`,
-            jobId,
-            operationId: `${tickId}:event:completed`,
-            idempotencyKey: `${tickId}:event:completed`,
-            type: 'runner_tick_completed',
-            summary: `Runner tick completed with ${directiveResult.appliedCount} public directive(s).`,
-            reasonCode: finalReasonCode,
-            createdAt: now(),
-            metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'applied', reasonCode: finalReasonCode }),
-        });
-        const receipt = appendTickReceipt(store, { jobId, tickId, leaseId, status: finalOutcome, reasonCode: finalReasonCode, createdAt: now(), redactionSummary });
-        return { receipt, processingSummaries, ...(serverResult.metadata ? { executionMetadata: serverResult.metadata } : {}) };
-    }
-    finally {
-        if (leaseHeld && !leaseReleasedByDirective) {
-            try {
-                store.releaseLease({ leaseId, releasedAt: now(), reasonCode: finalReasonCode });
-            }
-            catch {
-                // The tick receipt above remains the durable public outcome. A stale
-                // recovery pass can expire the lease if this release races or crashes.
-            }
-        }
-    }
-}
-function executeRunnerDirectives(store, directives, ctx) {
-    let appliedCount = 0;
-    let releasedLease = false;
-    let changedStatus = false;
-    const redactionSummary = [];
-    for (const directive of directives) {
-        assertRunnerDirectiveTrusted(directive, ctx.jobId);
-        switch (directive.kind) {
-            case 'noop':
-                appliedCount += 1;
-                break;
-            case 'append_event':
-                store.appendEvent({
-                    eventId: stringField(directive, 'eventId') ?? `${ctx.tickId}:directive:${appliedCount}:event`,
-                    jobId: ctx.jobId,
-                    operationId: stringField(directive, 'operationId') ?? `${ctx.tickId}:directive:${appliedCount}:event`,
-                    idempotencyKey: stringField(directive, 'idempotencyKey') ?? `${ctx.tickId}:directive:${appliedCount}:event`,
-                    type: stringField(directive, 'eventType') ?? 'runner_directive_event',
-                    summary: stringField(directive, 'summary') ?? 'Runner applied public continuity event directive.',
-                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
-                    createdAt: stringField(directive, 'createdAt') ?? ctx.now(),
-                    metadata: metadataField(directive),
-                });
-                appliedCount += 1;
-                break;
-            case 'append_receipt':
-                store.appendReceipt({
-                    receiptId: stringField(directive, 'receiptId') ?? `${ctx.tickId}:directive:${appliedCount}:receipt`,
-                    jobId: ctx.jobId,
-                    operationId: stringField(directive, 'operationId') ?? `${ctx.tickId}:directive:${appliedCount}:receipt`,
-                    idempotencyKey: stringField(directive, 'idempotencyKey') ?? `${ctx.tickId}:directive:${appliedCount}:receipt`,
-                    status: receiptStatus(stringField(directive, 'status')),
-                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
-                    createdAt: stringField(directive, 'createdAt') ?? ctx.now(),
-                    metadata: metadataField(directive),
-                });
-                appliedCount += 1;
-                break;
-            case 'update_job_status':
-                store.updateJobStatus({
-                    jobId: ctx.jobId,
-                    status: jobStatus(stringField(directive, 'status')),
-                    updatedAt: stringField(directive, 'updatedAt') ?? ctx.now(),
-                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
-                    nextRunAt: stringField(directive, 'nextRunAt'),
-                });
-                appliedCount += 1;
-                changedStatus = true;
-                break;
-            case 'schedule_next_tick':
-                store.scheduleNextTick({
-                    jobId: ctx.jobId,
-                    scheduledAt: requiredDirectiveString(directive, 'scheduledAt'),
-                    updatedAt: stringField(directive, 'updatedAt') ?? ctx.now(),
-                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
-                });
-                appliedCount += 1;
-                changedStatus = true;
-                break;
-            case 'release_lease':
-                store.releaseLease({
-                    leaseId: stringField(directive, 'leaseId') ?? ctx.leaseId,
-                    releasedAt: stringField(directive, 'releasedAt') ?? ctx.now(),
-                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
-                });
-                appliedCount += 1;
-                releasedLease = true;
-                break;
-        }
-        const redactions = directive.redactionSummary;
-        if (Array.isArray(redactions)) {
-            redactionSummary.push(...redactions.filter((item) => typeof item === 'string').slice(0, 5));
-        }
-    }
-    return { appliedCount, releasedLease, changedStatus, redactionSummary };
-}
-function persistRunnerProcessingSummaries(store, metadata, ctx) {
-    const persisted = [];
-    const seenExecutionIds = new Set();
-    for (const candidate of extractRunnerProcessingSummaryCandidates(metadata)) {
-        const input = normalizeRunnerProcessingSummaryCandidate(candidate, ctx);
-        if (!input || seenExecutionIds.has(input.executionId))
-            continue;
-        seenExecutionIds.add(input.executionId);
-        try {
-            store.recordProcessingOutputSummary(input);
-            persisted.push(publicRunnerProcessingSummary(input));
-        }
-        catch (error) {
-            if (error instanceof ContinuitySqliteStoreError && error.code === 'sqlite-public-safety-rejected')
-                continue;
-            throw error;
-        }
-    }
-    return persisted;
-}
-function extractRunnerProcessingSummaryCandidates(metadata) {
-    if (!metadata)
-        return [];
-    const candidates = [];
-    const stateUpdate = recordField(metadata, 'continuityStateUpdate');
-    const operations = arrayField(stateUpdate, 'operations');
-    for (const operation of operations) {
-        if (!isRecord(operation))
-            continue;
-        const event = recordField(operation, 'event');
-        if (!event || stringField(event, 'type') !== CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE)
-            continue;
-        candidates.push({ operation, event, summary: recordField(event, 'processingOutputSummary') ?? event });
-    }
-    for (const directive of extractRunnerDirectives(metadata)) {
-        if (!isProcessingSummaryDirective(directive))
-            continue;
-        candidates.push({ directive, event: directive, summary: recordField(directive, 'processingOutputSummary') ?? directive });
-    }
-    for (const summary of [
-        ...arrayField(metadata, 'processingSummaries'),
-        ...arrayField(metadata, 'processingOutputSummaries'),
-        ...arrayField(metadata, 'continuityProcessingSummaries'),
-        ...arrayField(recordField(metadata, 'continuity'), 'processingSummaries'),
-    ]) {
-        if (isRecord(summary))
-            candidates.push({ event: summary, summary });
-    }
-    return candidates;
-}
-function normalizeRunnerProcessingSummaryCandidate(candidate, ctx) {
-    if (!candidateMarkedPublicSafe(candidate))
-        return null;
-    const event = candidate.event ?? {};
-    const summary = candidate.summary ?? event;
-    const operation = candidate.operation ?? {};
-    const directive = candidate.directive ?? {};
-    const executionId = stringField(summary, 'executionId')
-        ?? stringField(event, 'executionId')
-        ?? stringField(operation, 'operationId')
-        ?? stringField(directive, 'operationId')
-        ?? ctx.tickId;
-    const jobId = stringField(summary, 'jobId')
-        ?? stringField(event, 'jobId')
-        ?? stringField(operation, 'jobId')
-        ?? stringField(directive, 'jobId')
-        ?? ctx.jobId;
-    if (jobId !== ctx.jobId)
-        return null;
-    const publicSummary = stringField(summary, 'publicSummary')
-        ?? stringField(event, 'publicSummary')
-        ?? stringField(event, 'summary')
-        ?? stringField(directive, 'summary');
-    if (!executionId || !publicSummary)
-        return null;
-    const metadata = mergePublicSummaryMetadata(recordField(operation, 'metadata'), recordField(event, 'metadata'), recordField(summary, 'metadata'), recordField(directive, 'metadata'), {
-        schemaVersion: 1,
-        contractVersion: 'continuity-v1',
-        executionId,
-        jobId,
-        operationId: executionId,
-        runnerId: ctx.runnerId,
-        leaseId: ctx.leaseId,
-        processingOutputSource: ctx.source,
-        publicSummary,
-    });
-    return {
-        eventId: stringField(event, 'eventId') ?? stringField(summary, 'eventId') ?? stringField(directive, 'eventId'),
-        executionId,
-        jobId,
-        idempotencyKey: stringField(operation, 'idempotencyKey') ?? stringField(directive, 'idempotencyKey') ?? executionId,
-        goalId: stringField(summary, 'goalId') ?? stringField(event, 'goalId') ?? stringField(operation, 'goalId'),
-        loopId: stringField(summary, 'loopId') ?? stringField(event, 'loopId') ?? stringField(operation, 'loopId'),
-        publicSummary,
-        reasonCode: stringField(summary, 'reasonCode') ?? stringField(event, 'reasonCode') ?? stringField(operation, 'reasonCode') ?? stringField(directive, 'reasonCode'),
-        createdAt: stringField(summary, 'createdAt') ?? stringField(event, 'createdAt') ?? stringField(operation, 'createdAt') ?? stringField(directive, 'createdAt') ?? ctx.createdAt,
-        source: ctx.source,
-        metadata,
-    };
-}
-function isProcessingSummaryDirective(directive) {
-    return directive.kind === 'append_event'
-        && (stringField(directive, 'eventType') ?? stringField(directive, 'type')) === CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE;
-}
-function candidateMarkedPublicSafe(candidate) {
-    const markers = [candidate.operation, candidate.event, candidate.summary, candidate.directive]
-        .filter((item) => Boolean(item))
-        .map((item) => item.publicSafe);
-    if (markers.some((marker) => marker === false))
-        return false;
-    return markers.some((marker) => marker === true);
-}
-function mergePublicSummaryMetadata(...records) {
-    const output = {};
-    for (const record of records) {
-        if (record)
-            Object.assign(output, record);
-    }
-    return output;
-}
-function publicRunnerProcessingSummary(input) {
-    return {
-        eventId: input.eventId ?? processingSummaryOutputEventId(input.executionId),
-        executionId: input.executionId,
-        jobId: input.jobId,
-        publicSummary: input.publicSummary,
-        ...(input.reasonCode ? { reasonCode: input.reasonCode } : {}),
-        createdAt: input.createdAt,
-        source: normalizeRunnerProcessingSummarySource(input.source),
-        publicSafe: true,
-    };
-}
-function processingSummaryOutputEventId(executionId) {
-    const safe = executionId.replace(/[^a-z0-9_.:-]+/gi, '-').replace(/^-+|-+$/g, '');
-    if (safe.length > 0)
-        return `event-processing-summary-${safe.slice(0, 160)}`;
-    return `event-processing-summary-${createHash('sha256').update(executionId).digest('hex').slice(0, 32)}`;
-}
-function appendTickReceipt(store, input) {
-    const receipt = {
-        receiptId: `receipt-${sanitizeId(input.tickId)}`,
-        jobId: input.jobId,
-        operationId: input.tickId,
-        idempotencyKey: input.tickId,
-        status: input.status,
-        reasonCode: input.reasonCode,
-        appliedOperationIds: input.status === 'applied' ? [input.tickId] : undefined,
-        ignoredOperationIds: input.status === 'ignored' ? [input.tickId] : undefined,
-        createdAt: input.createdAt,
-        metadata: receiptMetadata({
-            jobId: input.jobId,
-            operationId: input.tickId,
-            leaseId: input.leaseId,
-            status: input.status,
-            reasonCode: input.reasonCode,
-            redactionSummary: input.redactionSummary,
-        }),
-    };
-    store.appendReceipt(receipt);
-    return {
-        jobId: input.jobId,
-        tickId: input.tickId,
-        leaseId: input.leaseId,
-        outcome: input.status,
-        reasonCode: input.reasonCode,
-        timestamp: input.createdAt,
-        redactionSummary: input.redactionSummary,
-        publicSafe: true,
-    };
-}
-function receiptMetadata(input) {
-    return {
-        schemaVersion: 1,
-        contractVersion: 'continuity-v1',
-        jobId: input.jobId,
-        operationId: input.operationId,
-        ...(input.runnerId ? { runnerId: input.runnerId } : {}),
-        ...(input.leaseId ? { leaseId: input.leaseId } : {}),
-        status: input.status,
-        reasonCode: input.reasonCode,
-        redactionEvidence: (input.redactionSummary ?? []).slice(0, 20).map((summary) => ({
-            field: boundPublicString(summary, 80),
-            reason: 'unsafe_key',
-            evidence: 'operation-denied',
-            publicSafe: true,
-        })),
-    };
-}
-function extractPublicRunnerReasonCode(metadata) {
-    if (!metadata)
-        return null;
-    const continuity = isRecord(metadata.continuity) ? metadata.continuity : undefined;
-    const loop = continuity && isRecord(continuity.loop) ? continuity.loop : undefined;
-    const goal = continuity && isRecord(continuity.goal) ? continuity.goal : undefined;
-    const candidates = [
-        loop?.reasonCode,
-        goal?.reasonCode,
-        continuity?.reasonCode,
-    ];
-    for (const candidate of candidates) {
-        if (typeof candidate === 'string' && /^[a-z0-9][a-z0-9-]{0,79}$/.test(candidate) && !UNSAFE_VALUE_PATTERN.test(candidate)) {
-            return candidate;
-        }
-    }
-    return null;
-}
-function parseRunnerArgs(argv) {
-    const first = argv[0];
-    if (!first || first === '--help' || first === '-h' || first === 'help')
-        return { command: 'help' };
-    if (first === '--version' || first === '-v' || first === 'version')
-        return { command: 'version' };
-    if (first !== 'tick' && first !== 'sync' && first !== 'heartbeat' && !isSchedulerCommand(first))
-        return { command: 'unknown' };
-    let projectRoot;
-    let runnerId;
-    let serverUrl;
-    let limit;
-    let leaseMs;
-    let staleLeaseAfterMs;
-    let dryRun;
-    let intervalSeconds;
-    let intervalMs;
-    let maxRuns;
-    let heartbeatBackoffMs;
-    let heartbeatTimeoutMs;
-    let heartbeatJitterRatio;
-    let sessionId;
-    let strategy;
-    let allowCronFallback;
-    let scheduled;
-    let loop;
-    let workspaceId;
-    let workspaceLabel;
-    let projectId;
-    let projectLabel;
-    let syncCursor;
-    let yoloopLocalCap;
-    for (let index = 1; index < argv.length; index++) {
-        const arg = argv[index];
-        const next = argv[index + 1];
-        if (arg === '--project-root') {
-            projectRoot = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--runner-id') {
-            runnerId = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--server-url') {
-            serverUrl = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--limit') {
-            limit = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--lease-ms') {
-            leaseMs = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--stale-lease-after-ms') {
-            staleLeaseAfterMs = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--dry-run') {
-            dryRun = true;
-            continue;
-        }
-        if (arg === '--interval-seconds') {
-            intervalSeconds = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--interval-ms') {
-            intervalMs = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--max-runs') {
-            maxRuns = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--backoff-ms') {
-            heartbeatBackoffMs = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--heartbeat-timeout-ms' || arg === '--timeout-ms') {
-            heartbeatTimeoutMs = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--jitter-ratio') {
-            heartbeatJitterRatio = Number(next);
-            index += 1;
-            continue;
-        }
-        if (arg === '--session-id') {
-            sessionId = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--strategy' && isSchedulerStrategy(next)) {
-            strategy = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--allow-cron-fallback') {
-            allowCronFallback = true;
-            continue;
-        }
-        if (arg === '--no-cron-fallback') {
-            allowCronFallback = false;
-            continue;
-        }
-        if (arg === '--scheduled') {
-            scheduled = true;
-            continue;
-        }
-        if (arg === '--manual') {
-            scheduled = false;
-            continue;
-        }
-        if (arg === '--loop' || arg === '--background') {
-            loop = true;
-            continue;
-        }
-        if (arg === '--once') {
-            loop = false;
-            continue;
-        }
-        if (arg === '--workspace-id') {
-            workspaceId = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--workspace-label') {
-            workspaceLabel = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--project-id') {
-            projectId = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--project-label') {
-            projectLabel = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--sync-cursor') {
-            syncCursor = next;
-            index += 1;
-            continue;
-        }
-        if (arg === '--yoloop-local-cap') {
-            yoloopLocalCap = Number(next);
-            index += 1;
-            continue;
-        }
-    }
-    return {
-        command: first,
-        projectRoot,
-        runnerId,
-        serverUrl,
-        limit,
-        leaseMs,
-        staleLeaseAfterMs,
-        dryRun,
-        intervalSeconds,
-        intervalMs,
-        maxRuns,
-        heartbeatBackoffMs,
-        heartbeatTimeoutMs,
-        heartbeatJitterRatio,
-        sessionId,
-        strategy,
-        allowCronFallback,
-        scheduled,
-        loop,
-        workspaceId,
-        workspaceLabel,
-        projectId,
-        projectLabel,
-        syncCursor,
-        yoloopLocalCap,
-    };
-}
-function runnerCliPortalSyncOptions(parsed, options, mode) {
-    if (options.portalSync === false)
-        return false;
-    const base = options.portalSync ?? {};
-    return {
-        ...base,
-        ...(parsed.projectRoot ?? options.projectRoot ? { projectRoot: parsed.projectRoot ?? options.projectRoot } : {}),
-        ...(parsed.runnerId ?? options.runnerId ? { runnerId: parsed.runnerId ?? options.runnerId } : {}),
-        ...(parsed.sessionId ?? options.portalHeartbeatSessionId ? { sessionId: parsed.sessionId ?? options.portalHeartbeatSessionId } : {}),
-        ...(parsed.serverUrl ?? options.serverUrl ? { serverUrl: parsed.serverUrl ?? options.serverUrl } : {}),
-        ...(parsed.workspaceId ? { workspaceId: parsed.workspaceId } : {}),
-        ...(parsed.workspaceLabel ? { workspaceLabel: parsed.workspaceLabel } : {}),
-        ...(parsed.projectId ? { projectId: parsed.projectId } : {}),
-        ...(parsed.projectLabel ? { projectLabel: parsed.projectLabel } : {}),
-        ...(parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs ? { heartbeatTimeoutMs: parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs } : {}),
-        mode,
-    };
-}
-const RUNNER_HELP = `
+import{createHash as W,randomBytes as Ee}from"node:crypto";import{resolve as G}from"node:path";import{CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE as X,ContinuitySqliteStoreError as Ie,openContinuitySqliteStore as Z}from"../continuity/sqlite-store.js";import{invoke as ye}from"../commands/invoke.js";import{checkRunnerBinaryTrust as P}from"./binary.js";import{runRunnerSchedulerCommand as ee}from"./scheduler.js";import{runYoloExecutionPhase as Se}from"./headless/run-yolo.js";import{runYoloopExecutionPhase as Re}from"./headless/run-yoloop.js";import{DEFAULT_RUNNER_HEARTBEAT_BACKOFF_MS as _e,DEFAULT_RUNNER_HEARTBEAT_INTERVAL_MS as ke,DEFAULT_RUNNER_HEARTBEAT_JITTER_RATIO as ge,DEFAULT_RUNNER_HEARTBEAT_TIMEOUT_MS as Ae,runRunnerPortalHeartbeat as V,runRunnerPortalHeartbeatLoop as ve,runRunnerPortalSync as te,runRunnerPortalSyncLoop as we}from"./portal-sync-worker.js";import{RUNNER_BINARY_REASON_CODES as Tt,checkRunnerBinaryTrust as jt,runnerTrustRelativePath as Nt}from"./binary.js";import{LOCAL_JOBS_CONSOLE_REASON_CODES as Dt,createLocalJobConsoleServer as Ot,isLocalJobsConsoleArgs as Mt,localJobConsoleSocketPath as xt,parseLocalJobsConsoleArgs as Ft,runLocalJobsConsoleCommand as Ht}from"./local-console.js";const d=Object.freeze({OK:"continuity-ok",LEASE_CONFLICT:"lease-conflict",LEASE_EXPIRED:"lease-expired",RUNNER_BINARY_UNTRUSTED:"runner-binary-untrusted",RUNNER_DIRECTIVE_UNTRUSTED:"runner-directive-untrusted",RUNNER_SERVER_INVOKE_FAILED:"runner-server-invoke-failed",SQLITE_ADAPTER_UNAVAILABLE:"sqlite-adapter-unavailable",SQLITE_INTEGRITY_FAILED:"sqlite-integrity-failed",BACKOFF_SCHEDULED:"backoff-scheduled",MISSED_RUN_CATCHUP:"missed-run-catchup",HEADLESS_RUNTIME_UNRESOLVED:"headless-runtime-unresolved",HEADLESS_RUNTIME_UNTRUSTED:"headless-runtime-untrusted",HEADLESS_ADAPTER_UNAVAILABLE:"headless-adapter-unavailable",HEADLESS_RUNTIME_AUTH_REQUIRED:"headless-runtime-auth-required",HEADLESS_EXECUTION_BACKOFF:"headless-execution-backoff",HEADLESS_EXECUTION_TIMEOUT:"headless-execution-timeout",HEADLESS_EXECUTION_FAILED:"headless-execution-failed",HEADLESS_RECEIPT_REDACTED:"headless-receipt-redacted",AUTONOMOUS_GOVERNANCE_BYPASS_BLOCKED:"headless-directive-rejected"}),Le=300*1e3,Ce=30*1e3,Te=30*1e3,je=1,Ne=10,Ue=new Set(["append_event","append_receipt","update_job_status","schedule_next_tick","release_lease","noop"]),De=new Set(["goal-tick","loop-tick","jobs","runner"]),Oe=new Set(["accepted","applied","ignored","failed","deferred"]),Me=new Set(["draft","planned","active","running","waiting_external","waiting_human","backoff","paused","blocked","completed","aborted","cancelled"]),xe=/(raw[_-]?logs?|prompt(?:[_-]?(?:body|text))?|private[_-]?urls?|secret|token|password|protected(?:[_-]?(?:field|body|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|authorization|api[_-]?key|license[_-]?key)/i,q=/(https?:\/\/\S+|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?log|transcript|stack trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH))/i,re=new Set([d.HEADLESS_RUNTIME_UNRESOLVED,d.HEADLESS_RUNTIME_UNTRUSTED,"headless-model-rejected","headless-directive-rejected","headless-prompt-rejected","headless-yoloop-metadata-invalid","headless-yoloop-isolation-violation"]),oe=new Set([d.HEADLESS_ADAPTER_UNAVAILABLE]),ae=new Set([d.HEADLESS_RUNTIME_AUTH_REQUIRED]),se=new Set([d.HEADLESS_EXECUTION_BACKOFF]),ne=new Set([d.HEADLESS_EXECUTION_TIMEOUT]),ce=new Set([d.HEADLESS_EXECUTION_FAILED]);async function Fe(e){const t=await ye({args:e.args,projectRoot:e.projectRoot,format:"json",platformTarget:"runner",serverUrl:e.serverUrl,strictReadOnly:e.strictReadOnly});return{success:t.success,instructions:t.instructions,metadata:t.metadata,error:t.error,exitCode:t.exitCode}}async function He(e={}){const t=G(e.projectRoot??process.cwd()),r=Y(e.runnerId??nt(t)),o=e.now??(()=>new Date().toISOString()),a=F(e.dueJobLimit??je,1,Ne),s=F(e.leaseMs??Le,1e3,3600*1e3),l=F(e.staleLeaseAfterMs??Ce,0,1440*60*1e3),c=e.idFactory??ct,I=he(e.processingSummarySource??(e.tickMode==="scheduled"?"scheduled_tick":"manual_tick")),y=[],R=[],i=[],u=[];if(e.trustCheck!==!1){const A=P(e.executablePath??process.argv[1]);if(!A.trusted)return{ok:!1,runnerId:r,processedJobCount:0,dueJobCount:0,recoveredLeaseIds:[],receipts:[],reasonCodes:[A.reasonCode??d.RUNNER_BINARY_UNTRUSTED],publicSafe:!0}}const m=await Z({projectRoot:t,adapter:e.adapter,adapterLoader:e.adapterLoader,now:o}),L=Be({options:e,projectRoot:t,runnerId:r,now:o});let C;try{const A=m.recoverStaleLeases({nowIso:o(),staleAfterMs:l,limit:a*2});if(A.recoveredLeaseIds.length>0){y.push(d.LEASE_EXPIRED);for(const E of A.recoveredLeaseIds);}const T=m.listDueJobs({nowIso:o(),limit:a});for(const E of T){const g=await Ve({store:m,job:E,projectRoot:t,runnerId:r,leaseMs:s,now:o,idFactory:c,processingSummarySource:I,serverUrl:e.serverUrl,serverInvoker:e.serverInvoker??Fe});R.push(g.receipt),i.push(...g.processingSummaries),g.executionMetadata&&u.push(g.executionMetadata),y.push(g.receipt.reasonCode)}const b=await Se({store:m,projectRoot:t,runnerId:r,now:o,metadata:u,adapterRegistry:e.headlessAdapterRegistry,adapterOptions:e.headlessAdapterOptions,runtimeDefaults:e.headlessRuntimeDefaults,runtimeFallback:e.headlessRuntimeFallback,limit:e.headlessExecutionLimit,leaseMs:e.headlessExecutionLeaseMs??s,staleLeaseAfterMs:e.headlessExecutionStaleLeaseAfterMs??l,timeoutMs:e.headlessExecutionTimeoutMs,backoffMs:e.headlessExecutionBackoffMs,maxAttempts:e.headlessExecutionMaxAttempts,queueCap:e.headlessExecutionQueueCap,idFactory:e.headlessExecutionIdFactory});y.push(...b.reasonCodes);const k=await Re({store:m,projectRoot:t,runnerId:r,now:o,metadata:u,adapterRegistry:e.headlessAdapterRegistry,adapterOptions:e.headlessAdapterOptions,runtimeDefaults:e.headlessRuntimeDefaults,runtimeFallback:e.headlessRuntimeFallback,limit:e.headlessExecutionLimit,leaseMs:e.headlessExecutionLeaseMs??s,staleLeaseAfterMs:e.headlessExecutionStaleLeaseAfterMs??l,timeoutMs:e.headlessExecutionTimeoutMs,backoffMs:e.headlessExecutionBackoffMs,maxAttempts:e.headlessExecutionMaxAttempts,queueCap:e.headlessExecutionQueueCap,maxIterations:e.headlessYoloopMaxIterations,maxDurationMs:e.headlessYoloopMaxDurationMs,localConcurrencyCap:e.headlessYoloopLocalConcurrencyCap,yoloopInvoker:e.headlessYoloopInvoker,serverUrl:e.serverUrl,idFactory:e.headlessExecutionIdFactory});y.push(...k.reasonCodes),C={ok:R.every(E=>E.outcome!=="failed")&&b.ok&&k.ok,runnerId:r,processedJobCount:R.length,dueJobCount:T.length,recoveredLeaseIds:A.recoveredLeaseIds,receipts:R,...i.length>0?{processingSummaries:i}:{},headlessExecution:b,headlessYoloopExecution:k,reasonCodes:J(y.length>0?y:[d.OK]),publicSafe:!0}}finally{await L.stop(),m.close()}if(!C)throw new Error("runner-tick-failed");return await Pe(C,{options:e,projectRoot:t,runnerId:r,localStateChanged:$e(C)})}async function Pe(e,t){const r=t.options.portalSync;if(r===!1||r===void 0)return e;if(!t.localStateChanged){const a=await V({...r,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.options.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.options.serverUrl,adapter:r.adapter??t.options.adapter,adapterLoader:r.adapterLoader??t.options.adapterLoader,now:r.now??t.options.now,mode:r.mode??(t.options.tickMode==="scheduled"?"scheduled":"background"),timeoutMs:r.heartbeatTimeoutMs??t.options.portalHeartbeatTimeoutMs});return{...e,portalHeartbeat:a}}const o=await te({...r,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.options.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.options.serverUrl,adapter:r.adapter??t.options.adapter,adapterLoader:r.adapterLoader??t.options.adapterLoader,now:r.now??t.options.now,mode:r.mode??(t.options.tickMode==="scheduled"?"scheduled":"background")});return{...e,portalSync:o}}function $e(e){return e.recoveredLeaseIds.length>0||e.receipts.length>0||(e.processingSummaries?.length??0)>0||(e.headlessExecution?.processedAttemptCount??0)>0||(e.headlessExecution?.recoveredAttemptIds.length??0)>0||(e.headlessYoloopExecution?.processedAttemptCount??0)>0||(e.headlessYoloopExecution?.recoveredAttemptIds.length??0)>0}function Be(e){const t=e.options.portalSync;if(t===!1||t===void 0)return{stop:async()=>{}};const r=F(e.options.portalHeartbeatIntervalMs??ke,0,1440*60*1e3);if(r<=0)return{stop:async()=>{}};const o=F(e.options.portalHeartbeatBackoffMs??_e,1e3,1800*1e3),a=pe(e.options.portalHeartbeatJitterRatio??ge,0,.5),s=F(e.options.portalHeartbeatTimeoutMs??t.heartbeatTimeoutMs??Ae,1e3,6e4);let l=!1,c,I,y=me(r,a,Math.random);const R=u=>new Promise(m=>{I=m,c=setTimeout(m,u),typeof c.unref=="function"&&c.unref()}),i=(async()=>{for(;!l&&(y>0&&await R(y),!l);){const u=await V({...t,projectRoot:t.projectRoot??e.projectRoot,runnerId:t.runnerId??e.runnerId,sessionId:t.sessionId??e.options.portalHeartbeatSessionId,serverUrl:t.serverUrl??e.options.serverUrl,adapter:t.adapter??e.options.adapter,adapterLoader:t.adapterLoader??e.options.adapterLoader,now:t.now??e.now,mode:t.mode??(e.options.tickMode==="scheduled"?"scheduled":"background"),timeoutMs:s}).catch(()=>({ok:!1,runnerId:e.runnerId,workspaceId:"workspace-default",workspaceLabel:"Workspace workspace-default",projectId:"project-default",projectLabel:"Project project-default",mode:e.options.tickMode==="scheduled"?"scheduled":"background",generatedAt:e.now(),serverAccessToLocalhost:!1,serverHeldStream:!1,localhostCallback:!1,posted:{heartbeat:!1},counts:{redactions:0},reasonCodes:[d.BACKOFF_SCHEDULED],redactionEvidence:[],publicSafe:!0}));y=me(u.ok?r:o,a,Math.random)}})();return{stop:async()=>{l=!0,c&&clearTimeout(c),I?.(),await i.catch(()=>{})}}}async function Ke(e={}){const t=G(e.projectRoot??process.cwd()),r=e.now??(()=>new Date().toISOString()),o=r(),a={};let s=null,l=null;try{l=await Z({projectRoot:t,adapter:e.adapter,adapterLoader:e.adapterLoader,now:r}),s=l.collectSnapshotRows({nowIso:o,jobLimit:10,staleLeaseLimit:10,receiptLimit:10,eventLimit:10,snapshotLimit:5});const f=String(l.pragmaValue("journal_mode")??"").toLowerCase();a["db-integrity"]=w("db-integrity","DB integrity","ok",[d.OK],"Continuity SQLite integrity check completed.",{jobs:_(s.counts,"jobs"),receipts:_(s.counts,"receipts"),events:_(s.counts,"events")}),a["sqlite-wal"]=w("sqlite-wal","SQLite WAL",f==="wal"?"ok":"blocked",f==="wal"?[d.OK]:[d.SQLITE_INTEGRITY_FAILED],f==="wal"?"SQLite journal mode is WAL.":"SQLite journal mode is not WAL."),a.migrations=w("migrations","Migrations",s.schemaVersion>=1?"ok":"blocked",s.schemaVersion>=1?[d.OK]:[d.SQLITE_INTEGRITY_FAILED],`Continuity schema version ${s.schemaVersion} is readable.`)}catch(f){const p=ue(f);a["db-integrity"]=w("db-integrity","DB integrity","blocked",[p],"Continuity SQLite could not be opened safely."),a["sqlite-wal"]=w("sqlite-wal","SQLite WAL","blocked",[p],"SQLite WAL could not be verified."),a.migrations=w("migrations","Migrations","blocked",[p],"Continuity migrations could not be verified.")}finally{if(l)try{l.close()}catch{}}const c=s?_(s.counts,"staleLeases"):0,I=s?_(s.counts,"staleHeadlessExecutionAttempts"):0;a.leases=w("leases","Lease health",c+I>0?"degraded":"ok",c+I>0?[d.LEASE_EXPIRED]:[d.OK],c+I>0?"Stale job leases or headless execution attempts are eligible for bounded recovery.":"No stale leases or headless attempts reported.",{staleLeases:c,staleHeadlessExecutionAttempts:I});const y=s?.headlessExecutionAttempts??[],R=J(y.map(f=>f.reason_code).filter(f=>typeof f=="string"&&f.length>0)),i=ft(y,R),u=new Set([d.HEADLESS_RUNTIME_UNRESOLVED,d.HEADLESS_RUNTIME_UNTRUSTED,d.HEADLESS_ADAPTER_UNAVAILABLE,d.HEADLESS_RUNTIME_AUTH_REQUIRED,"headless-model-rejected","headless-directive-rejected","headless-prompt-rejected","headless-yoloop-metadata-invalid","headless-yoloop-isolation-violation"]),m=s?_(s.counts,"headlessExecutionAttempts"):0,L=R.some(f=>u.has(f)),C=R.includes(d.HEADLESS_EXECUTION_BACKOFF)||y.some(f=>f.status==="backoff"),A=R.includes(d.HEADLESS_RECEIPT_REDACTED),T=i.authRequired>0,b=i.trustFailures>0||i.adapterUnavailable>0,k=I>0||C||A||i.timeout>0||i.genericFailed>0||i.redactions>0;a["headless-execution"]=w("headless-execution","Headless execution",L?"blocked":k?"degraded":m>0?"ok":"delegated",R.length>0?R:m>0?[d.OK]:[d.HEADLESS_RUNTIME_UNRESOLVED],L?T&&!b?"Complete local runtime login/auth setup before starting a new headless attempt; default retry/backoff is not scheduled for auth-required.":"Resolve public runtime/model trust, adapter availability or protected directive hard-stop reason codes before executing headless attempts.":k?"Headless attempts need bounded recovery, retry/backoff, timeout/generic failure follow-up or redaction review.":m>0?"Headless attempts are represented by public status, runtime/model and reason-code evidence.":"Headless resolver checks are delegated until durable headless work is queued.",{attempts:m,queuedBackoff:s?_(s.counts,"headlessQueuedAttempts"):0,running:s?_(s.counts,"headlessRunningAttempts"):0,staleHeadlessExecutionAttempts:I,trustFailures:i.trustFailures,adapterUnavailable:i.adapterUnavailable,authRequired:i.authRequired,retryBackoff:i.retryBackoff,timeout:i.timeout,genericFailed:i.genericFailed,redactions:i.redactions});const E=s?.outboxCounts??{},g=_(E,"failed")+_(E,"dead_letter");a.outbox=w("outbox","Outbox state",g>0?"degraded":"ok",g>0?[d.BACKOFF_SCHEDULED]:[d.OK],g>0?"Failed/dead-letter outbox entries can be retried with dedupe.":"Outbox has no failed/dead-letter entries.",{pending:_(E,"pending"),failed:_(E,"failed"),deadLetter:_(E,"dead_letter")}),a.metering=w("metering","Metering receipts","ok",[d.OK],"Metering evidence is represented by public job receipts and counts only.",{receipts:s?_(s.counts,"receipts"):0}),a["portal-sync"]=w("portal-sync","Portal sync",g>0?"degraded":"ok",g>0?[d.BACKOFF_SCHEDULED]:[d.OK],g>0?"Portal sync worker is enabled but has retryable outbox debt; outbound sync remains client-owned.":"Portal sync worker is enabled for outbound heartbeat, jobs sync, command polling and acknowledgement only.",{pending:_(E,"pending"),failed:_(E,"failed"),deadLetter:_(E,"dead_letter")});const N=e.trustCheck===!1?{trusted:!0,publicSafe:!0}:P(e.executablePath??process.argv[1]);a.runner=w("runner","Runner health",N.trusted?"ok":"blocked",N.trusted?[d.OK]:[N.reasonCode??d.RUNNER_BINARY_UNTRUSTED],N.trusted?"Runner binary trust check passed.":"Runner binary trust check failed.");try{const f=await ee({command:"doctor",projectRoot:t,executablePath:e.scheduler?.executablePath??e.executablePath??process.argv[1],platform:e.scheduler?.platform,env:e.scheduler?.env,dryRun:!0,intervalSeconds:e.scheduler?.intervalSeconds,strategy:e.scheduler?.strategy,allowCronFallback:e.scheduler?.allowCronFallback,trustCheck:e.scheduler?.trustCheck??e.trustCheck,uid:e.scheduler?.uid,commandAvailable:e.scheduler?.commandAvailable,commandRunner:e.scheduler?.commandRunner,trustChecker:e.scheduler?.trustChecker??P}),p=f.reasonCodes.includes(d.RUNNER_BINARY_UNTRUSTED)||f.reasonCodes.some(h=>h.startsWith("runner-binary-"))||f.reasonCodes.includes("scheduler-install-unsafe");a.scheduler=w("scheduler","Scheduler install",p?"blocked":f.ok?"ok":"degraded",f.reasonCodes,f.ok?"Scheduler doctor selected a user-scope strategy.":"Scheduler doctor found public guidance or degraded capability.",{manifests:f.manifestPaths.length,controlCommands:f.controlCommands.length,legacyEntries:f.legacyEntries.length})}catch(f){a.scheduler=w("scheduler","Scheduler install","degraded",["scheduler-command-failed"],x(f))}const v=a,H=J(Object.values(v).flatMap(f=>f.reasonCodes));return{ok:Object.values(v).every(f=>f.status!=="blocked"),generatedAt:o,checks:v,reasonCodes:H,publicSafe:!0}}function de(e){if(!e)return[];const t=[e.continuityRunnerDirectives,e.runnerDirectives,e.continuityDirectives];for(const r of t)if(Array.isArray(r))return r.filter(j).map(it).filter(lt);return[]}function Je(e,t){if(!j(e))throw new U("Directive is not a public record.");if(e.publicSafe!==!0)throw new U("Directive is not marked public-safe.");const r=typeof e.kind=="string"?e.kind:typeof e.type=="string"?e.type:"";if(!Ue.has(r))throw new U("Directive kind is not allowlisted.");const o=typeof e.commandClass=="string"?e.commandClass:"runner";if(!De.has(o))throw new U("Directive command class is not allowlisted.");if((typeof e.jobId=="string"?e.jobId:t)!==t)throw new U("Directive job ID does not match the leased job.");Q(e,"directive")}async function wt(e,t={}){const r=tt(e);if(r.command==="help")return process.stdout.write(`${ot}
+`),0;if(r.command==="version"){const o=P(t.executablePath??process.argv[1]);return process.stdout.write(`${o.packageVersion??"0.0.0"}
+`),o.trusted?0:1}if(r.command==="doctor")try{const o=await Ke({...t,projectRoot:r.projectRoot??t.projectRoot,executablePath:t.executablePath??process.argv[1],scheduler:{...t.scheduler,strategy:r.strategy??t.scheduler?.strategy,allowCronFallback:r.allowCronFallback??t.scheduler?.allowCronFallback,executablePath:t.scheduler?.executablePath??t.executablePath??process.argv[1]}});return process.stdout.write(JSON.stringify(o)+`
+`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"runner-doctor-failed",message:x(o)})+`
+`),1}if(le(r.command))try{const o=await ee({command:r.command,projectRoot:r.projectRoot??t.projectRoot,executablePath:t.scheduler?.executablePath??t.executablePath??process.argv[1],platform:t.scheduler?.platform,env:t.scheduler?.env,dryRun:r.dryRun??t.scheduler?.dryRun,intervalSeconds:r.intervalSeconds??t.scheduler?.intervalSeconds,strategy:r.strategy??t.scheduler?.strategy,allowCronFallback:r.allowCronFallback??t.scheduler?.allowCronFallback,trustCheck:t.scheduler?.trustCheck,uid:t.scheduler?.uid,commandAvailable:t.scheduler?.commandAvailable,commandRunner:t.scheduler?.commandRunner,trustChecker:t.scheduler?.trustChecker??P});return process.stdout.write(JSON.stringify(st(o))+`
+`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"scheduler-command-failed",message:x(o)})+`
+`),1}if(r.command==="heartbeat")try{if(r.loop){const a=await ve({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,mode:r.scheduled?"scheduled":"background",intervalMs:r.intervalMs??t.portalHeartbeatIntervalMs,maxRuns:r.maxRuns??t.portalSyncMaxRuns,backoffMs:r.heartbeatBackoffMs??t.portalHeartbeatBackoffMs,timeoutMs:r.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs,jitterRatio:r.heartbeatJitterRatio??t.portalHeartbeatJitterRatio});return process.stdout.write(JSON.stringify(a)+`
+`),a.ok?0:1}const o=await V({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,mode:r.scheduled?"scheduled":"manual",timeoutMs:r.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs});return process.stdout.write(JSON.stringify(o)+`
+`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"portal-heartbeat-failed",message:x(o)})+`
+`),1}if(r.command==="sync")try{if(r.loop){const a=await we({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,syncCursor:r.syncCursor,mode:r.scheduled?"scheduled":"background",intervalMs:r.intervalMs??t.portalSyncIntervalMs,maxRuns:r.maxRuns??t.portalSyncMaxRuns});return process.stdout.write(JSON.stringify(a)+`
+`),a.ok?0:1}const o=await te({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,syncCursor:r.syncCursor,mode:r.scheduled?"scheduled":"manual"});return process.stdout.write(JSON.stringify(o)+`
+`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"portal-sync-failed",message:x(o)})+`
+`),1}if(r.command!=="tick")return process.stderr.write(JSON.stringify({error_code:"runner-command-unknown",message:"Unknown neocortex-runner command."})+`
+`),1;try{const o=await He({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,dueJobLimit:r.limit??t.dueJobLimit,leaseMs:r.leaseMs??t.leaseMs,staleLeaseAfterMs:r.staleLeaseAfterMs??t.staleLeaseAfterMs,headlessYoloopLocalConcurrencyCap:r.yoloopLocalCap??t.headlessYoloopLocalConcurrencyCap,tickMode:r.scheduled?"scheduled":t.tickMode,processingSummarySource:r.scheduled?"scheduled_tick":t.processingSummarySource,serverUrl:r.serverUrl??t.serverUrl,portalSync:rt(r,t,r.scheduled?"scheduled":"background")});return process.stdout.write(JSON.stringify(o)+`
+`),o.ok?0:1}catch(o){const a=ue(o);return process.stderr.write(JSON.stringify({error_code:a,message:x(o)})+`
+`),1}}async function Ve(e){const{store:t,job:r,projectRoot:o,runnerId:a,leaseMs:s,now:l,idFactory:c,processingSummarySource:I,serverUrl:y,serverInvoker:R}=e,i=r.job_id,u=c("tick",i),m=c("lease",i),L=l(),C=new Date(Date.parse(L)+s).toISOString();let A=!1,T=!1,b=d.OK,k="applied",E=[];if(!t.acquireLease({leaseId:m,jobId:i,runnerId:a,acquiredAt:L,expiresAt:C,operationId:`${u}:acquire`,idempotencyKey:`${u}:acquire`,metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"running",reasonCode:d.OK})}).inserted)return{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:"ignored",reasonCode:d.LEASE_CONFLICT,createdAt:l(),redactionSummary:E}),processingSummaries:[]};A=!0;try{t.appendEvent({eventId:`${u}:started`,jobId:i,operationId:`${u}:event:started`,idempotencyKey:`${u}:event:started`,type:"runner_tick_started",summary:`Runner tick started for ${i}.`,reasonCode:d.OK,createdAt:L,metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"running",reasonCode:d.OK})});const N=r.kind==="loop"?`*loop tick @${i} --tick-id ${u} --lease-id ${m} --runner-id ${a}`:r.kind==="goal"?`*goal tick @${i} --tick-id ${u} --lease-id ${m} --runner-id ${a}`:`*runner tick --job-id ${i} --tick-id ${u} --lease-id ${m} --runner-id ${a}`,v=await R({projectRoot:o,args:N,jobId:i,tickId:u,leaseId:m,runnerId:a,serverUrl:y});if(!v.success){b=d.RUNNER_SERVER_INVOKE_FAILED,k="failed";const O=l();return t.updateJobStatus({jobId:i,status:"backoff",updatedAt:O,reasonCode:d.BACKOFF_SCHEDULED,nextRunAt:dt(O,Te)}),t.appendEvent({eventId:`${u}:server-failed`,jobId:i,operationId:`${u}:event:server-failed`,idempotencyKey:`${u}:event:server-failed`,type:"runner_tick_failed",summary:"Runner server tick invocation failed with public reason code.",reasonCode:b,createdAt:O,metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"failed",reasonCode:b})}),{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:k,reasonCode:b,createdAt:l(),redactionSummary:E}),processingSummaries:[]}}const f=de(v.metadata).filter(O=>!ie(O));let p={appliedCount:0,releasedLease:!1,changedStatus:!1,redactionSummary:[]};try{p=qe(t,f,{jobId:i,tickId:u,leaseId:m,runnerId:a,now:l}),T=p.releasedLease,E=[...p.redactionSummary],b=et(v.metadata)??b}catch(O){return b=d.RUNNER_DIRECTIVE_UNTRUSTED,k="failed",E=[O instanceof Error?O.message:"Directive rejected."],t.updateJobStatus({jobId:i,status:"blocked",updatedAt:l(),reasonCode:b}),t.appendEvent({eventId:`${u}:directive-rejected`,jobId:i,operationId:`${u}:event:directive-rejected`,idempotencyKey:`${u}:event:directive-rejected`,type:"runner_directive_rejected",summary:"Runner rejected an untrusted continuity directive.",reasonCode:b,createdAt:l(),metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"failed",reasonCode:b,redactionSummary:E})}),{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:k,reasonCode:b,createdAt:l(),redactionSummary:E}),processingSummaries:[]}}const h=Ye(t,v.metadata,{jobId:i,tickId:u,leaseId:m,runnerId:a,source:I,createdAt:l()}),S=!!v.metadata?.continuityStateUpdate;return!p.changedStatus&&!S&&t.updateJobStatus({jobId:i,status:"active",updatedAt:l(),reasonCode:d.OK}),t.appendEvent({eventId:`${u}:completed`,jobId:i,operationId:`${u}:event:completed`,idempotencyKey:`${u}:event:completed`,type:"runner_tick_completed",summary:`Runner tick completed with ${p.appliedCount} public directive(s).`,reasonCode:b,createdAt:l(),metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"applied",reasonCode:b})}),{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:k,reasonCode:b,createdAt:l(),redactionSummary:E}),processingSummaries:h,...v.metadata?{executionMetadata:v.metadata}:{}}}finally{if(A&&!T)try{t.releaseLease({leaseId:m,releasedAt:l(),reasonCode:b})}catch{}}}function qe(e,t,r){let o=0,a=!1,s=!1;const l=[];for(const c of t){switch(Je(c,r.jobId),c.kind){case"noop":o+=1;break;case"append_event":e.appendEvent({eventId:n(c,"eventId")??`${r.tickId}:directive:${o}:event`,jobId:r.jobId,operationId:n(c,"operationId")??`${r.tickId}:directive:${o}:event`,idempotencyKey:n(c,"idempotencyKey")??`${r.tickId}:directive:${o}:event`,type:n(c,"eventType")??"runner_directive_event",summary:n(c,"summary")??"Runner applied public continuity event directive.",reasonCode:n(c,"reasonCode")??d.OK,createdAt:n(c,"createdAt")??r.now(),metadata:fe(c)}),o+=1;break;case"append_receipt":e.appendReceipt({receiptId:n(c,"receiptId")??`${r.tickId}:directive:${o}:receipt`,jobId:r.jobId,operationId:n(c,"operationId")??`${r.tickId}:directive:${o}:receipt`,idempotencyKey:n(c,"idempotencyKey")??`${r.tickId}:directive:${o}:receipt`,status:pt(n(c,"status")),reasonCode:n(c,"reasonCode")??d.OK,createdAt:n(c,"createdAt")??r.now(),metadata:fe(c)}),o+=1;break;case"update_job_status":e.updateJobStatus({jobId:r.jobId,status:mt(n(c,"status")),updatedAt:n(c,"updatedAt")??r.now(),reasonCode:n(c,"reasonCode")??d.OK,nextRunAt:n(c,"nextRunAt")}),o+=1,s=!0;break;case"schedule_next_tick":e.scheduleNextTick({jobId:r.jobId,scheduledAt:ut(c,"scheduledAt"),updatedAt:n(c,"updatedAt")??r.now(),reasonCode:n(c,"reasonCode")??d.OK}),o+=1,s=!0;break;case"release_lease":e.releaseLease({leaseId:n(c,"leaseId")??r.leaseId,releasedAt:n(c,"releasedAt")??r.now(),reasonCode:n(c,"reasonCode")??d.OK}),o+=1,a=!0;break}const I=c.redactionSummary;Array.isArray(I)&&l.push(...I.filter(y=>typeof y=="string").slice(0,5))}return{appliedCount:o,releasedLease:a,changedStatus:s,redactionSummary:l}}function Ye(e,t,r){const o=[],a=new Set;for(const s of Qe(t)){const l=ze(s,r);if(!(!l||a.has(l.executionId))){a.add(l.executionId);try{e.recordProcessingOutputSummary(l),o.push(Xe(l))}catch(c){if(c instanceof Ie&&c.code==="sqlite-public-safety-rejected")continue;throw c}}}return o}function Qe(e){if(!e)return[];const t=[],r=D(e,"continuityStateUpdate"),o=$(r,"operations");for(const a of o){if(!j(a))continue;const s=D(a,"event");!s||n(s,"type")!==X||t.push({operation:a,event:s,summary:D(s,"processingOutputSummary")??s})}for(const a of de(e))ie(a)&&t.push({directive:a,event:a,summary:D(a,"processingOutputSummary")??a});for(const a of[...$(e,"processingSummaries"),...$(e,"processingOutputSummaries"),...$(e,"continuityProcessingSummaries"),...$(D(e,"continuity"),"processingSummaries")])j(a)&&t.push({event:a,summary:a});return t}function ze(e,t){if(!We(e))return null;const r=e.event??{},o=e.summary??r,a=e.operation??{},s=e.directive??{},l=n(o,"executionId")??n(r,"executionId")??n(a,"operationId")??n(s,"operationId")??t.tickId,c=n(o,"jobId")??n(r,"jobId")??n(a,"jobId")??n(s,"jobId")??t.jobId;if(c!==t.jobId)return null;const I=n(o,"publicSummary")??n(r,"publicSummary")??n(r,"summary")??n(s,"summary");if(!l||!I)return null;const y=Ge(D(a,"metadata"),D(r,"metadata"),D(o,"metadata"),D(s,"metadata"),{schemaVersion:1,contractVersion:"continuity-v1",executionId:l,jobId:c,operationId:l,runnerId:t.runnerId,leaseId:t.leaseId,processingOutputSource:t.source,publicSummary:I});return{eventId:n(r,"eventId")??n(o,"eventId")??n(s,"eventId"),executionId:l,jobId:c,idempotencyKey:n(a,"idempotencyKey")??n(s,"idempotencyKey")??l,goalId:n(o,"goalId")??n(r,"goalId")??n(a,"goalId"),loopId:n(o,"loopId")??n(r,"loopId")??n(a,"loopId"),publicSummary:I,reasonCode:n(o,"reasonCode")??n(r,"reasonCode")??n(a,"reasonCode")??n(s,"reasonCode"),createdAt:n(o,"createdAt")??n(r,"createdAt")??n(a,"createdAt")??n(s,"createdAt")??t.createdAt,source:t.source,metadata:y}}function ie(e){return e.kind==="append_event"&&(n(e,"eventType")??n(e,"type"))===X}function We(e){const t=[e.operation,e.event,e.summary,e.directive].filter(r=>!!r).map(r=>r.publicSafe);return t.some(r=>r===!1)?!1:t.some(r=>r===!0)}function Ge(...e){const t={};for(const r of e)r&&Object.assign(t,r);return t}function Xe(e){return{eventId:e.eventId??Ze(e.executionId),executionId:e.executionId,jobId:e.jobId,publicSummary:e.publicSummary,...e.reasonCode?{reasonCode:e.reasonCode}:{},createdAt:e.createdAt,source:he(e.source),publicSafe:!0}}function Ze(e){const t=e.replace(/[^a-z0-9_.:-]+/gi,"-").replace(/^-+|-+$/g,"");return t.length>0?`event-processing-summary-${t.slice(0,160)}`:`event-processing-summary-${W("sha256").update(e).digest("hex").slice(0,32)}`}function K(e,t){const r={receiptId:`receipt-${Y(t.tickId)}`,jobId:t.jobId,operationId:t.tickId,idempotencyKey:t.tickId,status:t.status,reasonCode:t.reasonCode,appliedOperationIds:t.status==="applied"?[t.tickId]:void 0,ignoredOperationIds:t.status==="ignored"?[t.tickId]:void 0,createdAt:t.createdAt,metadata:M({jobId:t.jobId,operationId:t.tickId,leaseId:t.leaseId,status:t.status,reasonCode:t.reasonCode,redactionSummary:t.redactionSummary})};return e.appendReceipt(r),{jobId:t.jobId,tickId:t.tickId,leaseId:t.leaseId,outcome:t.status,reasonCode:t.reasonCode,timestamp:t.createdAt,redactionSummary:t.redactionSummary,publicSafe:!0}}function M(e){return{schemaVersion:1,contractVersion:"continuity-v1",jobId:e.jobId,operationId:e.operationId,...e.runnerId?{runnerId:e.runnerId}:{},...e.leaseId?{leaseId:e.leaseId}:{},status:e.status,reasonCode:e.reasonCode,redactionEvidence:(e.redactionSummary??[]).slice(0,20).map(t=>({field:z(t,80),reason:"unsafe_key",evidence:"operation-denied",publicSafe:!0}))}}function et(e){if(!e)return null;const t=j(e.continuity)?e.continuity:void 0,r=t&&j(t.loop)?t.loop:void 0,o=t&&j(t.goal)?t.goal:void 0,a=[r?.reasonCode,o?.reasonCode,t?.reasonCode];for(const s of a)if(typeof s=="string"&&/^[a-z0-9][a-z0-9-]{0,79}$/.test(s)&&!q.test(s))return s;return null}function tt(e){const t=e[0];if(!t||t==="--help"||t==="-h"||t==="help")return{command:"help"};if(t==="--version"||t==="-v"||t==="version")return{command:"version"};if(t!=="tick"&&t!=="sync"&&t!=="heartbeat"&&!le(t))return{command:"unknown"};let r,o,a,s,l,c,I,y,R,i,u,m,L,C,A,T,b,k,E,g,N,v,H,f;for(let p=1;p<e.length;p++){const h=e[p],S=e[p+1];if(h==="--project-root"){r=S,p+=1;continue}if(h==="--runner-id"){o=S,p+=1;continue}if(h==="--server-url"){a=S,p+=1;continue}if(h==="--limit"){s=Number(S),p+=1;continue}if(h==="--lease-ms"){l=Number(S),p+=1;continue}if(h==="--stale-lease-after-ms"){c=Number(S),p+=1;continue}if(h==="--dry-run"){I=!0;continue}if(h==="--interval-seconds"){y=Number(S),p+=1;continue}if(h==="--interval-ms"){R=Number(S),p+=1;continue}if(h==="--max-runs"){i=Number(S),p+=1;continue}if(h==="--backoff-ms"){u=Number(S),p+=1;continue}if(h==="--heartbeat-timeout-ms"||h==="--timeout-ms"){m=Number(S),p+=1;continue}if(h==="--jitter-ratio"){L=Number(S),p+=1;continue}if(h==="--session-id"){C=S,p+=1;continue}if(h==="--strategy"&&at(S)){A=S,p+=1;continue}if(h==="--allow-cron-fallback"){T=!0;continue}if(h==="--no-cron-fallback"){T=!1;continue}if(h==="--scheduled"){b=!0;continue}if(h==="--manual"){b=!1;continue}if(h==="--loop"||h==="--background"){k=!0;continue}if(h==="--once"){k=!1;continue}if(h==="--workspace-id"){E=S,p+=1;continue}if(h==="--workspace-label"){g=S,p+=1;continue}if(h==="--project-id"){N=S,p+=1;continue}if(h==="--project-label"){v=S,p+=1;continue}if(h==="--sync-cursor"){H=S,p+=1;continue}if(h==="--yoloop-local-cap"){f=Number(S),p+=1;continue}}return{command:t,projectRoot:r,runnerId:o,serverUrl:a,limit:s,leaseMs:l,staleLeaseAfterMs:c,dryRun:I,intervalSeconds:y,intervalMs:R,maxRuns:i,heartbeatBackoffMs:u,heartbeatTimeoutMs:m,heartbeatJitterRatio:L,sessionId:C,strategy:A,allowCronFallback:T,scheduled:b,loop:k,workspaceId:E,workspaceLabel:g,projectId:N,projectLabel:v,syncCursor:H,yoloopLocalCap:f}}function rt(e,t,r){return t.portalSync===!1?!1:{...t.portalSync??{},...e.projectRoot??t.projectRoot?{projectRoot:e.projectRoot??t.projectRoot}:{},...e.runnerId??t.runnerId?{runnerId:e.runnerId??t.runnerId}:{},...e.sessionId??t.portalHeartbeatSessionId?{sessionId:e.sessionId??t.portalHeartbeatSessionId}:{},...e.serverUrl??t.serverUrl?{serverUrl:e.serverUrl??t.serverUrl}:{},...e.workspaceId?{workspaceId:e.workspaceId}:{},...e.workspaceLabel?{workspaceLabel:e.workspaceLabel}:{},...e.projectId?{projectId:e.projectId}:{},...e.projectLabel?{projectLabel:e.projectLabel}:{},...e.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs?{heartbeatTimeoutMs:e.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs}:{},mode:r}}const ot=`
 neocortex-runner - Enterprise continuity local runner
 
 Usage:
@@ -1412,213 +67,4 @@ Headless doctor evidence:
   only bounded attempt status, runtime/model IDs, counts, reason codes, cursors and
   redaction counts; raw adapter stdout/stderr, prompts, transcripts, private URLs,
   local absolute paths, secrets and vendor payloads are never printed.
-`.trim();
-function isSchedulerCommand(value) {
-    return value === 'install' || value === 'start' || value === 'stop' || value === 'status' || value === 'doctor';
-}
-function isSchedulerStrategy(value) {
-    return value === 'systemd-user' || value === 'launchd-user' || value === 'windows-task-scheduler' || value === 'cron-fallback';
-}
-class RunnerDirectiveError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'RunnerDirectiveError';
-    }
-}
-function classifyRunnerError(error) {
-    if (isRecord(error)) {
-        const code = typeof error.reasonCode === 'string' ? error.reasonCode : typeof error.code === 'string' ? error.code : undefined;
-        if (code === RUNNER_REASON_CODES.SQLITE_ADAPTER_UNAVAILABLE || code === RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED)
-            return code;
-    }
-    const message = error instanceof Error ? error.message : String(error);
-    if (/sqlite-adapter-unavailable/i.test(message))
-        return RUNNER_REASON_CODES.SQLITE_ADAPTER_UNAVAILABLE;
-    if (/sqlite-integrity-failed|not a database|file is not a database|database disk image is malformed|malformed/i.test(message))
-        return RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED;
-    return 'runner-tick-failed';
-}
-function publicErrorMessage(error) {
-    return boundPublicString(error instanceof Error ? error.message : String(error), 240);
-}
-function publicRunnerSchedulerCommandResult(summary) {
-    if (summary.manifests.length === 0)
-        return summary;
-    return {
-        ...summary,
-        manifests: summary.manifests.map((manifest) => ({
-            ...manifest,
-            content: `[redacted ${manifest.kind} for project ${summary.identity.projectKey}]`,
-        })),
-    };
-}
-function defaultRunnerId(projectRoot) {
-    const hash = createHash('sha256').update(projectRoot).update(process.pid.toString()).digest('hex').slice(0, 12);
-    return `runner-${hash}`;
-}
-function defaultIdFactory(prefix, jobId) {
-    const entropy = randomBytes(4).toString('hex');
-    return `${prefix}-${sanitizeId(jobId)}-${Date.now()}-${entropy}`;
-}
-function sanitizeId(value) {
-    return value.replace(/[^a-z0-9_.:-]+/gi, '-').slice(0, 120);
-}
-function boundedInteger(value, min, max) {
-    if (!Number.isFinite(value))
-        return min;
-    return Math.max(min, Math.min(max, Math.floor(value)));
-}
-function boundedNumber(value, min, max) {
-    if (!Number.isFinite(value))
-        return min;
-    return Math.max(min, Math.min(max, value));
-}
-function jitteredDelayMs(baseDelayMs, jitterRatio, random) {
-    if (baseDelayMs <= 0)
-        return 0;
-    if (jitterRatio <= 0)
-        return baseDelayMs;
-    const boundedRandom = boundedNumber(random(), 0, 1);
-    return Math.max(0, baseDelayMs + Math.floor(baseDelayMs * jitterRatio * boundedRandom));
-}
-function addMilliseconds(iso, ms) {
-    const base = Date.parse(iso);
-    return new Date((Number.isFinite(base) ? base : Date.now()) + ms).toISOString();
-}
-function normalizeDirective(value) {
-    return typeof value.kind === 'string' ? value : { ...value, kind: value.type };
-}
-function isRunnerDirective(value) {
-    return typeof value.kind === 'string' && value.publicSafe === true;
-}
-function assertPublicSafeDirectiveValue(value, path) {
-    if (typeof value === 'string') {
-        if (UNSAFE_VALUE_PATTERN.test(value))
-            throw new RunnerDirectiveError(`Unsafe directive value at ${path}.`);
-        return;
-    }
-    if (value === null || typeof value === 'number' || typeof value === 'boolean')
-        return;
-    if (Array.isArray(value)) {
-        value.forEach((item, index) => assertPublicSafeDirectiveValue(item, `${path}[${index}]`));
-        return;
-    }
-    if (isRecord(value)) {
-        for (const [key, child] of Object.entries(value)) {
-            if (UNSAFE_KEY_PATTERN.test(key))
-                throw new RunnerDirectiveError(`Unsafe directive key at ${path}.${key}.`);
-            assertPublicSafeDirectiveValue(child, `${path}.${key}`);
-        }
-        return;
-    }
-    throw new RunnerDirectiveError(`Unsupported directive value at ${path}.`);
-}
-function stringField(input, key) {
-    const value = input[key];
-    return typeof value === 'string' && value.length > 0 ? value : undefined;
-}
-function requiredDirectiveString(input, key) {
-    const value = stringField(input, key);
-    if (!value)
-        throw new RunnerDirectiveError(`Directive missing ${key}.`);
-    return value;
-}
-function metadataField(input) {
-    const value = input.metadata;
-    return isRecord(value) ? value : undefined;
-}
-function recordField(input, key) {
-    if (!input)
-        return undefined;
-    const value = input[key];
-    return isRecord(value) ? value : undefined;
-}
-function arrayField(input, key) {
-    if (!input)
-        return [];
-    const value = input[key];
-    return Array.isArray(value) ? value : [];
-}
-function receiptStatus(value) {
-    return value && RECEIPT_STATUSES.has(value) ? value : 'applied';
-}
-function jobStatus(value) {
-    if (!value || !JOB_STATUSES.has(value))
-        throw new RunnerDirectiveError('Directive status is not allowlisted.');
-    return value;
-}
-function normalizeRunnerProcessingSummarySource(value) {
-    return value === 'scheduled_tick' || value === 'runner_tick' || value === 'manual_tick' ? value : 'manual_tick';
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function unique(values) {
-    return Array.from(new Set(values));
-}
-function count(input, key) {
-    return typeof input[key] === 'number' ? input[key] : 0;
-}
-function summarizeRunnerHeadlessDiagnostics(attempts, reasonCodes) {
-    return {
-        trustFailures: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_TRUST_FAILURE_REASON_CODES),
-        adapterUnavailable: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_ADAPTER_UNAVAILABLE_REASON_CODES),
-        authRequired: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_AUTH_REQUIRED_REASON_CODES),
-        retryBackoff: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_BACKOFF_REASON_CODES, new Set(['backoff'])),
-        timeout: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_TIMEOUT_REASON_CODES, new Set(['timed_out'])),
-        genericFailed: countRunnerGenericHeadlessFailures(attempts, reasonCodes),
-        redactions: attempts.reduce((total, attempt) => total + runnerHeadlessRedactionCount(attempt), 0),
-    };
-}
-function countRunnerHeadlessSignals(attempts, snapshotReasonCodes, reasonCodes, statuses = new Set()) {
-    const attemptCount = attempts.filter((attempt) => {
-        const reasonMatch = attempt.reason_code ? reasonCodes.has(attempt.reason_code) : false;
-        return reasonMatch || statuses.has(attempt.status);
-    }).length;
-    if (attemptCount > 0)
-        return attemptCount;
-    return snapshotReasonCodes.some((reasonCode) => reasonCodes.has(reasonCode)) ? 1 : 0;
-}
-function countRunnerGenericHeadlessFailures(attempts, snapshotReasonCodes) {
-    const attemptCount = attempts.filter((attempt) => {
-        if (attempt.reason_code && RUNNER_HEADLESS_GENERIC_FAILURE_REASON_CODES.has(attempt.reason_code))
-            return true;
-        if (attempt.status !== 'failed')
-            return false;
-        return !attempt.reason_code
-            || (!RUNNER_HEADLESS_TRUST_FAILURE_REASON_CODES.has(attempt.reason_code)
-                && !RUNNER_HEADLESS_ADAPTER_UNAVAILABLE_REASON_CODES.has(attempt.reason_code)
-                && !RUNNER_HEADLESS_AUTH_REQUIRED_REASON_CODES.has(attempt.reason_code)
-                && !RUNNER_HEADLESS_BACKOFF_REASON_CODES.has(attempt.reason_code)
-                && !RUNNER_HEADLESS_TIMEOUT_REASON_CODES.has(attempt.reason_code));
-    }).length;
-    if (attemptCount > 0)
-        return attemptCount;
-    return snapshotReasonCodes.some((reasonCode) => RUNNER_HEADLESS_GENERIC_FAILURE_REASON_CODES.has(reasonCode)) ? 1 : 0;
-}
-function runnerHeadlessRedactionCount(attempt) {
-    if (!attempt.redaction_summary_json)
-        return 0;
-    try {
-        const parsed = JSON.parse(attempt.redaction_summary_json);
-        return Array.isArray(parsed) ? parsed.length : 0;
-    }
-    catch {
-        return 0;
-    }
-}
-function doctorCheck(id, label, status, reasonCodes, summary, counts) {
-    return {
-        id,
-        label,
-        status,
-        reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [RUNNER_REASON_CODES.OK]),
-        summary: boundPublicString(summary, 180),
-        ...(counts ? { counts } : {}),
-        publicSafe: true,
-    };
-}
-function boundPublicString(value, maxChars) {
-    const redacted = UNSAFE_VALUE_PATTERN.test(value) ? '[REDACTED]' : value;
-    return redacted.length <= maxChars ? redacted : `${redacted.slice(0, maxChars)}…[TRUNCATED:${redacted.length - maxChars}]`;
-}
+`.trim();function le(e){return e==="install"||e==="start"||e==="stop"||e==="status"||e==="doctor"}function at(e){return e==="systemd-user"||e==="launchd-user"||e==="windows-task-scheduler"||e==="cron-fallback"}class U extends Error{constructor(t){super(t),this.name="RunnerDirectiveError"}}function ue(e){if(j(e)){const r=typeof e.reasonCode=="string"?e.reasonCode:typeof e.code=="string"?e.code:void 0;if(r===d.SQLITE_ADAPTER_UNAVAILABLE||r===d.SQLITE_INTEGRITY_FAILED)return r}const t=e instanceof Error?e.message:String(e);return/sqlite-adapter-unavailable/i.test(t)?d.SQLITE_ADAPTER_UNAVAILABLE:/sqlite-integrity-failed|not a database|file is not a database|database disk image is malformed|malformed/i.test(t)?d.SQLITE_INTEGRITY_FAILED:"runner-tick-failed"}function x(e){return z(e instanceof Error?e.message:String(e),240)}function st(e){return e.manifests.length===0?e:{...e,manifests:e.manifests.map(t=>({...t,content:`[redacted ${t.kind} for project ${e.identity.projectKey}]`}))}}function nt(e){return`runner-${W("sha256").update(e).update(process.pid.toString()).digest("hex").slice(0,12)}`}function ct(e,t){const r=Ee(4).toString("hex");return`${e}-${Y(t)}-${Date.now()}-${r}`}function Y(e){return e.replace(/[^a-z0-9_.:-]+/gi,"-").slice(0,120)}function F(e,t,r){return Number.isFinite(e)?Math.max(t,Math.min(r,Math.floor(e))):t}function pe(e,t,r){return Number.isFinite(e)?Math.max(t,Math.min(r,e)):t}function me(e,t,r){if(e<=0)return 0;if(t<=0)return e;const o=pe(r(),0,1);return Math.max(0,e+Math.floor(e*t*o))}function dt(e,t){const r=Date.parse(e);return new Date((Number.isFinite(r)?r:Date.now())+t).toISOString()}function it(e){return typeof e.kind=="string"?e:{...e,kind:e.type}}function lt(e){return typeof e.kind=="string"&&e.publicSafe===!0}function Q(e,t){if(typeof e=="string"){if(q.test(e))throw new U(`Unsafe directive value at ${t}.`);return}if(!(e===null||typeof e=="number"||typeof e=="boolean")){if(Array.isArray(e)){e.forEach((r,o)=>Q(r,`${t}[${o}]`));return}if(j(e)){for(const[r,o]of Object.entries(e)){if(xe.test(r))throw new U(`Unsafe directive key at ${t}.${r}.`);Q(o,`${t}.${r}`)}return}throw new U(`Unsupported directive value at ${t}.`)}}function n(e,t){const r=e[t];return typeof r=="string"&&r.length>0?r:void 0}function ut(e,t){const r=n(e,t);if(!r)throw new U(`Directive missing ${t}.`);return r}function fe(e){const t=e.metadata;return j(t)?t:void 0}function D(e,t){if(!e)return;const r=e[t];return j(r)?r:void 0}function $(e,t){if(!e)return[];const r=e[t];return Array.isArray(r)?r:[]}function pt(e){return e&&Oe.has(e)?e:"applied"}function mt(e){if(!e||!Me.has(e))throw new U("Directive status is not allowlisted.");return e}function he(e){return e==="scheduled_tick"||e==="runner_tick"||e==="manual_tick"?e:"manual_tick"}function j(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function J(e){return Array.from(new Set(e))}function _(e,t){return typeof e[t]=="number"?e[t]:0}function ft(e,t){return{trustFailures:B(e,t,re),adapterUnavailable:B(e,t,oe),authRequired:B(e,t,ae),retryBackoff:B(e,t,se,new Set(["backoff"])),timeout:B(e,t,ne,new Set(["timed_out"])),genericFailed:ht(e,t),redactions:e.reduce((r,o)=>r+bt(o),0)}}function B(e,t,r,o=new Set){const a=e.filter(s=>(s.reason_code?r.has(s.reason_code):!1)||o.has(s.status)).length;return a>0?a:t.some(s=>r.has(s))?1:0}function ht(e,t){const r=e.filter(o=>o.reason_code&&ce.has(o.reason_code)?!0:o.status!=="failed"?!1:!o.reason_code||!re.has(o.reason_code)&&!oe.has(o.reason_code)&&!ae.has(o.reason_code)&&!se.has(o.reason_code)&&!ne.has(o.reason_code)).length;return r>0?r:t.some(o=>ce.has(o))?1:0}function bt(e){if(!e.redaction_summary_json)return 0;try{const t=JSON.parse(e.redaction_summary_json);return Array.isArray(t)?t.length:0}catch{return 0}}function w(e,t,r,o,a,s){return{id:e,label:t,status:r,reasonCodes:J(o.length>0?o:[d.OK]),summary:z(a,180),...s?{counts:s}:{},publicSafe:!0}}function z(e,t){const r=q.test(e)?"[REDACTED]":e;return r.length<=t?r:`${r.slice(0,t)}\u2026[TRUNCATED:${r.length-t}]`}export{je as DEFAULT_DUE_JOB_LIMIT,Te as DEFAULT_RUNNER_BACKOFF_MS,Le as DEFAULT_RUNNER_LEASE_MS,Ce as DEFAULT_STALE_LEASE_AFTER_MS,Dt as LOCAL_JOBS_CONSOLE_REASON_CODES,Ne as MAX_DUE_JOB_LIMIT,Tt as RUNNER_BINARY_REASON_CODES,d as RUNNER_REASON_CODES,Je as assertRunnerDirectiveTrusted,jt as checkRunnerBinaryTrust,Ot as createLocalJobConsoleServer,Fe as defaultRunnerServerInvoker,de as extractRunnerDirectives,Mt as isLocalJobsConsoleArgs,xt as localJobConsoleSocketPath,Ft as parseLocalJobsConsoleArgs,Ht as runLocalJobsConsoleCommand,wt as runRunnerCli,Ke as runRunnerDoctor,He as runRunnerTick,Nt as runnerTrustRelativePath};