@ornexus/neocortex 4.60.71 → 4.60.73

package/packages/client/dist/continuity/continuity-client-state-store.js

@@ -1 +1,1587 @@
-import{existsSync as se}from"node:fs";import{createHash as ie}from"node:crypto";import{deriveProjectIdentity as de}from"../runner/project-identity.js";import{recordAutonomousGovernance as ce}from"./autonomous-governance.js";import{CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE as ue,ContinuitySqliteStoreError as pe,continuitySqliteStorePath as me,isContinuityPublicStage as le,normalizeContinuityStageIteration as Y,openContinuitySqliteStore as Ie,sanitizeContinuityStageHistory as _e}from"./sqlite-store.js";const S=1,g="continuity-v1",z=10,ye=2e3,Ze=z,et=ye,tt=3,nt=1800,fe=1,I=Object.freeze({OK:"continuity-ok",INVALID_SCHEMA_VERSION:"invalid-schema-version",INVALID_CONTRACT_VERSION:"invalid-contract-version",UNKNOWN_OPERATION_REQUIRED:"unknown-operation-required",UNKNOWN_OPERATION_IGNORED:"unknown-operation-ignored",DUPLICATE_OPERATION_ID:"duplicate-operation-id",IDEMPOTENCY_REPLAY:"idempotency-replay",UNSAFE_FIELD_REJECTED:"unsafe-field-rejected",SQLITE_ADAPTER_UNAVAILABLE:"sqlite-adapter-unavailable",SQLITE_INTEGRITY_FAILED:"sqlite-integrity-failed",SQLITE_MUTATION_FAILED:"sqlite-mutation-failed"}),he=new Set(["create_job","update_job_status","append_event","append_receipt","upsert_goal_campaign","upsert_goal_ledger_item","upsert_verifier","upsert_review_gate","schedule_next_tick","acquire_lease","release_lease","compact_context","enqueue_outbox","append_outbox","enqueue_execution_attempt","claim_execution_attempt","heartbeat_execution_attempt","release_execution_attempt","complete_execution_attempt","append_execution_receipt","append_execution_summary"]),Ae=new Set(["schemaVersion","contractVersion","eventType","executionId","jobId","operationId","idempotencyKey","goalId","loopId","campaignId","itemId","ledgerItemIds","verifierId","verifierIds","gateId","reviewGateIds","runnerId","leaseId","status","reasonCode","reasonCodes","runtimeId","modelId","runtimeSource","headlessRuntime","headlessModel","headlessRuntimeReasonCode","originRuntime","originModel","targetRef","attemptId","attemptStatus","directiveHash","timeoutMs","leaseExpiresAt","heartbeatAt","notBeforeAt","maxAttempts","counts","hashes","relativePaths","artifactRefs","evidenceRefs","validationRefs","registryRefs","storyIds","epicIds","debtIds","iteration","currentStage","stageHistory","durationMs","retryCount","nextTickAt","processingOutputSource","publicSummary","redactionEvidence","selectorKind","targetId","targetJobId","relatedJobIds","serverAccessToLocalhost","serverHeldStream","initialCursor","targetResolutionState","targetKind","relatedJobCount","snapshotStatus","snapshotGeneratedAt","renderedSummaryCount","cursorState","currentCursor","nextCursor","cursorAdvanced","eventId","latestEventId","watchStatus","stopReason","syncVersion","transportKind","envelopeId","workspaceId","workspaceLabel","projectId","projectLabel","snapshotId","syncCursor","previousSyncCursor","nextSyncCursor","commandId","receiptId","acknowledgedAt","observedAt","generatedAt","syncStatus","commandStatus","receiptStatus","actorType","actorId","tenantId","commandKind","auditStatus","redactionCount"]),K=/(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i,G=/\bhttps?:\/\/\S+/i,be=/(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)/i,J=/(ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=)/i,W=/(raw[_-]?(?:logs?)\s*[:=]|transcript|stack trace|stderr:|stdout:)/i,Q=/(prompt[_-]?body|system prompt|workflow body|step body)/i,X=/(PROTECTED_|_PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH)|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY)|P192[_-]?SYNTHETIC[_-]?(?:PORTAL|RUNNER|SYNC))/i,k=240,Z=2400,Ce=40,Se=20,ge=40,Ee=20,D=80;class _ extends Error{reasonCodes;redactions;mutationBlocked;constructor(e,n,a={}){super(e),this.name="ContinuityClientStateStoreError",this.reasonCodes=E(n),this.redactions=a.redactions??[],this.mutationBlocked=a.mutationBlocked??!1,this.cause=a.cause}}function at(t){return se(me(t))}function ot(t,e=new Date().toISOString()){return{schemaVersion:S,contractVersion:g,generatedAt:e,hardStop:!0,reasonCodes:E(t),publicSafe:!0}}async function rt(t){const e=await Ie({projectRoot:t.projectRoot,adapter:t.adapter,adapterLoader:t.adapterLoader,now:t.now,strictReadOnly:t.strictReadOnly});return new Re(e,t.now??(()=>new Date().toISOString()),de(t.projectRoot))}class Re{store;now;projectIdentity;constructor(e,n=()=>new Date().toISOString(),a){this.store=e,this.now=n,this.projectIdentity=a}close(){this.store.close()}recordAutonomousGovernance(e,n){try{return ce(this.store,e,n)}catch(a){throw q(a,"Failed to record autonomous governance envelope.")}}collectSnapshot(e={}){try{const n=e.nowIso??this.now(),a=this.store.collectSnapshotRows({nowIso:n,jobLimit:e.jobLimit??20,staleLeaseLimit:e.staleLeaseLimit??10,receiptLimit:e.receiptLimit??10,eventLimit:e.eventLimit??10,snapshotLimit:e.snapshotLimit??5}),i=this.store.listDueJobs({nowIso:n,limit:e.dueJobLimit??10}),d=this.store.listProcessingOutputSummaries({limit:e.processingSummaryLimit??z}),u=Ke(a.receipts).slice(0,20),m=xe({generatedAt:n,counts:a.counts,jobCount:a.jobs.length,dueJobCount:i.length,outboxPending:a.outboxCounts.pending??0,redactions:u});return{schemaVersion:S,contractVersion:g,generatedAt:n,store:{schemaVersion:a.schemaVersion,readable:!0},jobs:a.jobs.map(ee),counts:a.counts,dueJobCount:a.counts.dueJobs??0,dueJobs:i.map(ee),staleLeases:a.staleLeases.map(c=>({leaseId:s(c.lease_id,100),jobId:s(c.job_id,100),runnerId:s(c.runner_id,100),expiresAt:s(c.expires_at,80),publicSafe:!0})),outbox:{total:a.counts.outbox??0,pending:a.outboxCounts.pending??0,failed:a.outboxCounts.failed??0,deadLetter:a.outboxCounts.dead_letter??0,sent:a.outboxCounts.sent??0,acked:a.outboxCounts.acked??0},queue:{depth:a.queue.depth,queued:a.queue.queued,running:a.queue.running,retrying:a.queue.retrying,deadLetter:a.queue.deadLetter,capacity:a.queue.capacity,available:a.queue.available,backpressure:a.queue.backpressure,generatedAt:s(a.queue.generatedAt,80),...a.queue.nextRetryAt?{nextRetryAt:s(a.queue.nextRetryAt,80)}:{},...a.queue.reasonCode?{reasonCode:s(a.queue.reasonCode,80)}:{},publicSafe:!0},lastReceipts:a.receipts.map(c=>({receiptId:s(c.receipt_id,100),jobId:s(c.job_id,100),...c.operation_id?{operationId:s(c.operation_id,100)}:{},status:s(c.status,40),...c.reason_code?{reasonCode:s(c.reason_code,80)}:{},createdAt:s(c.created_at,80),publicSafe:!0})),lastEvents:a.events.map(c=>{const l=P(v(c.metadata_json));return{eventId:s(c.event_id,100),jobId:s(c.job_id,100),operationId:s(c.operation_id,100),type:s(c.type,80),publicSummary:s(c.summary,k),...c.reason_code?{reasonCode:s(c.reason_code,80)}:{},createdAt:s(c.created_at,80),...Object.keys(l).length>0?{metadata:l}:{},publicSafe:!0}}),processingSummaries:d.map(te),headlessExecutionAttempts:a.headlessExecutionAttempts.map(Ne),compactContext:ke(a.stateSnapshots),portalSync:m,redactions:u,publicSafe:!0}}catch(n){throw q(n,"Failed to collect continuity snapshot.")}}collectProcessingOutputSummaryCursor(e={}){try{const n=this.store.pollProcessingOutputSummaries(e);return{summaries:n.summaries.map(te),...n.nextCursor?{nextCursor:n.nextCursor}:{},hasMore:n.hasMore,publicSafe:!0}}catch(n){throw q(n,"Failed to collect processing summary cursor.")}}applyStateUpdate(e){const n=Me(e),a=[],i=[],d=[],u=[];for(const m of n){const c=this.applyOperationLog(m);a.push(...c.appliedOperationIds),i.push(...c.ignoredOperationIds),d.push(...c.reasonCodes),u.push(...c.redactions)}return{ok:!0,appliedOperationIds:E(a),ignoredOperationIds:E(i),reasonCodes:E(d.length>0?d:[I.OK]),redactions:u,publicSafe:!0}}applyOperationLog(e){const n=Ue(e),a=[],i=[...n.ignoredOperationIds],d=[...n.reasonCodes],u=[...n.redactions];try{this.store.runInTransaction(()=>{for(const m of n.operations){if(this.store.hasOperationRef(m.operationId,m.idempotencyKey)){i.push(m.operationId),d.push(I.IDEMPOTENCY_REPLAY);continue}this.applyKnownOperation(m,n.logMetadata),a.push(m.operationId),m.type!=="append_receipt"&&this.recordAppliedAudit(m)}for(const m of n.skippedOperations)this.recordIgnoredAuditIfPossible(m,I.UNKNOWN_OPERATION_IGNORED)})}catch(m){throw q(m,"Failed to apply continuity operation log atomically.")}return{ok:!0,appliedOperationIds:E(a),ignoredOperationIds:E(i),reasonCodes:E(d.length>0?d:[I.OK]),redactions:u,publicSafe:!0}}applyKnownOperation(e,n){switch(e.type){case"create_job":this.applyCreateJob(e,n);return;case"update_job_status":this.applyUpdateJobStatus(e);return;case"append_event":this.applyAppendEvent(e);return;case"append_receipt":this.applyAppendReceipt(e);return;case"upsert_goal_campaign":this.applyUpsertGoalCampaign(e);return;case"schedule_next_tick":this.store.scheduleNextTick({jobId:e.jobId,scheduledAt:r(e,"scheduledAt"),updatedAt:e.createdAt,reasonCode:o(e,"reasonCode")});return;case"acquire_lease":this.store.acquireLease({leaseId:r(e,"leaseId"),jobId:e.jobId,runnerId:r(e,"runnerId"),acquiredAt:r(e,"acquiredAt"),expiresAt:r(e,"expiresAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(e.metadata,"operation.metadata")});return;case"release_lease":this.store.releaseLease({leaseId:r(e,"leaseId"),releasedAt:r(e,"releasedAt"),reasonCode:o(e,"reasonCode")});return;case"compact_context":this.applyCompactContext(e);return;case"upsert_goal_ledger_item":this.applyUpsertGoalLedgerItem(e);return;case"upsert_verifier":this.applyUpsertVerifier(e);return;case"upsert_review_gate":this.applyUpsertReviewGate(e);return;case"enqueue_outbox":case"append_outbox":this.applyOutbox(e);return;case"enqueue_execution_attempt":this.applyEnqueueExecutionAttempt(e);return;case"claim_execution_attempt":this.store.claimHeadlessExecutionAttempt({attemptId:r(e,"attemptId"),leaseId:r(e,"leaseId"),runnerId:r(e,"runnerId"),claimedAt:o(e,"claimedAt")??e.createdAt,leaseExpiresAt:r(e,"leaseExpiresAt"),reasonCode:o(e,"reasonCode")});return;case"heartbeat_execution_attempt":this.store.heartbeatHeadlessExecutionAttempt({attemptId:r(e,"attemptId"),leaseId:r(e,"leaseId"),runnerId:r(e,"runnerId"),heartbeatAt:o(e,"heartbeatAt")??e.createdAt,leaseExpiresAt:o(e,"leaseExpiresAt")});return;case"release_execution_attempt":this.store.releaseHeadlessExecutionAttempt({attemptId:r(e,"attemptId"),leaseId:r(e,"leaseId"),releasedAt:o(e,"releasedAt")??e.createdAt,status:o(e,"status"),reasonCode:o(e,"reasonCode"),notBeforeAt:o(e,"notBeforeAt"),retryCount:h(e,"retryCount")});return;case"complete_execution_attempt":this.applyCompleteExecutionAttempt(e);return;case"append_execution_receipt":this.applyAppendExecutionReceipt(e);return;case"append_execution_summary":this.applyAppendExecutionSummary(e);return;default:throw new _(`Unknown continuity operation ${e.type}.`,[I.UNKNOWN_OPERATION_REQUIRED],{mutationBlocked:!0})}}applyCompactContext(e){const n=w(r(e,"summaryHash"),"compact_context.summaryHash"),a=oe(e.retainedRefs,"compact_context.retainedRefs",Ce),i=we(o(e,"publicSummary")??`Context compacted with ${a.length} retained public refs.`),d=Fe(e),u=Be(e),m=oe(e.decisionLogRefs,"compact_context.decisionLogRefs",Ee),c=Ye(e,a,d,u),l=E([...a,...m,...d.map(A=>A.relativePath),...u.map(A=>A.relativePath)]).slice(0,D),U=B(i),N=o(e,"reasonCode")??"context-compacted",j={schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,reasonCode:N,publicSummary:i,counts:{retainedRefs:a.length,artifactRefs:d.length,evidenceRefs:u.length,decisionLogRefs:m.length,...h(e,"inputTokens")!==void 0?{inputContextUnits:h(e,"inputTokens")}:{},...h(e,"outputTokens")!==void 0?{outputContextUnits:h(e,"outputTokens")}:{},summaryChars:i.length},hashes:{summary:n,persistedSummary:U},relativePaths:l,artifactRefs:d,evidenceRefs:u,validationRefs:m,redactionEvidence:e.redactions??[],checkpoint:c};for(const[A,x]of d.entries())this.store.recordArtifact({artifactId:`artifact-${R(e.operationId)}-${A+1}`,jobId:e.jobId,kind:x.kind,relativePath:x.relativePath,sha256:x.sha256,summary:x.publicSummary,createdAt:e.createdAt,operationId:`${e.operationId}:artifact:${A+1}`,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:artifact:${A+1}`:void 0,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,reasonCode:N,hashes:x.sha256?{artifact:x.sha256}:{},relativePaths:[x.relativePath],publicSummary:x.publicSummary}});this.store.recordStateSnapshot({snapshotId:`snapshot-${R(e.operationId)}`,jobId:e.jobId,kind:"context_compaction",relativePath:d.find(A=>A.kind==="context_summary")?.relativePath,sha256:n,summary:i,capturedAt:e.createdAt,operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:j}),this.store.appendEvent({eventId:`event-${R(e.operationId)}-context-compacted`,jobId:e.jobId,operationId:`${e.operationId}:event`,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:event`:void 0,sequence:e.sequence,type:"context_compacted",summary:`Context compaction checkpoint ${c.checkpointId} persisted with ${l.length} public refs.`,reasonCode:N,createdAt:e.createdAt,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,reasonCode:N,counts:j.counts,hashes:j.hashes,relativePaths:l,artifactRefs:d.map(A=>A.relativePath),evidenceRefs:u,publicSummary:i}})}applyCreateJob(e,n){const a=T(e,"job");this.store.recordJob({jobId:r(a,"jobId"),kind:r(a,"kind"),status:r(a,"status"),createdAt:r(a,"createdAt"),updatedAt:r(a,"updatedAt"),summary:o(a,"summary"),reasonCode:o(a,"reasonCode"),nextRunAt:o(a,"nextRunAt"),goalId:o(a,"goalId"),loopId:o(a,"loopId"),campaignId:o(a,"campaignId"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f({...p(a,"metadata")??p(e,"metadata")??{...n},...Te(this.projectIdentity)},"job.metadata")})}applyUpdateJobStatus(e){this.store.updateJobStatus({jobId:e.jobId,status:r(e,"status"),updatedAt:e.createdAt,reasonCode:o(e,"reasonCode")})}applyAppendEvent(e){const n=T(e,"event"),a=r(n,"type");if(a===ue){this.applyProcessingOutputSummaryEvent(e,n);return}this.store.appendEvent({eventId:r(n,"eventId"),jobId:r(n,"jobId"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,sequence:e.sequence,type:a,summary:r(n,"summary"),reasonCode:o(n,"reasonCode"),createdAt:r(n,"createdAt"),metadata:f(p(n,"metadata"),"event.metadata")})}applyProcessingOutputSummaryEvent(e,n){const a=p(n,"processingOutputSummary")??n,i=o(a,"executionId")??e.operationId,d=o(a,"jobId")??o(n,"jobId")??e.jobId,u=o(a,"publicSummary")??r(n,"summary"),m=o(a,"createdAt")??o(n,"createdAt")??e.createdAt,c=p(a,"metadata"),l=p(n,"metadata");this.store.recordProcessingOutputSummary({eventId:o(n,"eventId"),executionId:i,jobId:d,idempotencyKey:e.idempotencyKey,goalId:o(a,"goalId")??o(n,"goalId"),loopId:o(a,"loopId")??o(n,"loopId"),publicSummary:u,reasonCode:o(a,"reasonCode")??o(n,"reasonCode"),createdAt:m,source:o(a,"source")??o(n,"source"),metadata:{...l??{},...c??{}}})}applyAppendReceipt(e){const n=T(e,"receipt"),a=o(n,"operationId")??e.operationId;this.store.appendReceipt({receiptId:r(n,"receiptId"),jobId:r(n,"jobId"),operationId:a,idempotencyKey:e.idempotencyKey,status:r(n,"status"),reasonCode:o(n,"reasonCode"),appliedOperationIds:L(n.appliedOperationIds),ignoredOperationIds:L(n.ignoredOperationIds),createdAt:r(n,"createdAt"),metadata:f(p(n,"metadata"),"receipt.metadata")})}applyUpsertGoalCampaign(e){const n=T(e,"campaign");this.store.upsertGoalCampaign({campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),status:r(n,"status"),title:o(n,"title"),publicSummary:o(n,"publicSummary"),reasonCode:o(n,"reasonCode"),createdAt:r(n,"createdAt"),updatedAt:r(n,"updatedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"campaign.metadata")})}applyUpsertGoalLedgerItem(e){const n=T(e,"item");this.store.upsertGoalLedgerItem({itemId:r(n,"itemId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),itemType:r(n,"type"),status:r(n,"status"),summary:r(n,"publicSummary"),reasonCode:o(n,"reasonCode"),createdAt:e.createdAt,updatedAt:r(n,"updatedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"item.metadata")})}applyUpsertVerifier(e){const n=T(e,"verifier");this.store.upsertGoalVerifier({verifierId:r(n,"verifierId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),kind:r(n,"kind"),status:r(n,"status"),summary:o(n,"publicSummary"),reasonCode:o(n,"reasonCode"),lastCheckedAt:o(n,"lastCheckedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"verifier.metadata")})}applyUpsertReviewGate(e){const n=T(e,"reviewGate");this.store.upsertGoalReviewGate({gateId:r(n,"gateId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),status:r(n,"status"),summary:o(n,"publicSummary"),required:He(n,"required")??!0,reasonCode:o(n,"reasonCode"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"reviewGate.metadata")})}applyOutbox(e){const n=p(e,"outbox")??e;this.store.enqueueOutbox({outboxId:o(n,"outboxId")??`outbox-${R(e.operationId)}`,jobId:o(n,"jobId")??e.jobId,operationId:e.operationId,idempotencyKey:e.idempotencyKey,type:o(n,"type")===e.type?"continuity_event":r(n,"type"),status:o(n,"status"),payload:f(p(n,"payload")??p(e,"metadata")??{},"outbox.payload"),retryCount:h(n,"retryCount"),nextAttemptAt:o(n,"nextAttemptAt"),lastErrorCode:o(n,"lastErrorCode"),createdAt:o(n,"createdAt")??e.createdAt,updatedAt:o(n,"updatedAt")??e.createdAt})}applyEnqueueExecutionAttempt(e){const n=p(e,"attempt")??e,a=f(p(n,"metadata")??p(e,"metadata"),"executionAttempt.metadata");this.store.enqueueHeadlessExecutionAttempt({attemptId:r(n,"attemptId"),executionId:r(n,"executionId"),jobId:o(n,"jobId")??e.jobId,directiveHash:r(n,"directiveHash"),directiveKind:r(n,"directiveKind"),commandClass:r(n,"commandClass"),targetKind:r(n,"targetKind"),targetRef:r(n,"targetRef"),storyId:o(n,"storyId"),epicId:o(n,"epicId"),runtimeId:o(n,"runtimeId"),modelId:o(n,"modelId"),runtimeSource:o(n,"runtimeSource"),status:o(n,"status"),reasonCode:o(n,"reasonCode"),publicSummary:o(n,"publicSummary"),enqueuedAt:o(n,"enqueuedAt")??e.createdAt,notBeforeAt:o(n,"notBeforeAt"),retryCount:h(n,"retryCount"),maxAttempts:h(n,"maxAttempts"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:a})}applyCompleteExecutionAttempt(e){const n=p(e,"completion")??e;this.store.completeHeadlessExecutionAttempt({attemptId:r(n,"attemptId"),executionId:o(n,"executionId"),jobId:o(n,"jobId")??e.jobId,leaseId:o(n,"leaseId"),runnerId:o(n,"runnerId"),status:r(n,"status"),completedAt:o(n,"completedAt")??e.createdAt,durationMs:h(n,"durationMs"),reasonCode:o(n,"reasonCode"),publicSummary:o(n,"publicSummary"),notBeforeAt:o(n,"notBeforeAt"),retryCount:h(n,"retryCount"),counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:f(p(n,"metadata"),"executionCompletion.metadata")})}applyAppendExecutionReceipt(e){const n=T(e,"receipt");this.store.recordHeadlessExecutionReceipt({receiptId:r(n,"receiptId"),attemptId:r(n,"attemptId"),executionId:r(n,"executionId"),jobId:o(n,"jobId")??e.jobId,status:r(n,"status"),reasonCode:o(n,"reasonCode"),createdAt:o(n,"createdAt")??e.createdAt,operationId:e.operationId,idempotencyKey:e.idempotencyKey,counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:f(p(n,"metadata"),"executionReceipt.metadata")})}applyAppendExecutionSummary(e){const n=p(e,"summary")??e;this.store.recordHeadlessExecutionSummary({eventId:o(n,"eventId"),attemptId:r(n,"attemptId"),executionId:r(n,"executionId"),jobId:o(n,"jobId")??e.jobId,publicSummary:r(n,"publicSummary"),reasonCode:o(n,"reasonCode"),createdAt:o(n,"createdAt")??e.createdAt,runtimeId:o(n,"runtimeId"),modelId:o(n,"modelId"),durationMs:h(n,"durationMs"),counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:f(p(n,"metadata"),"executionSummary.metadata")})}recordAppliedAudit(e){this.store.recordOperationAudit({receiptId:`receipt-${R(e.operationId)}`,jobId:e.jobId,operationId:e.operationId,idempotencyKey:`audit-${e.idempotencyKey??e.operationId}`,status:"applied",reasonCode:I.OK,appliedOperationIds:[e.operationId],createdAt:e.createdAt,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,status:"applied",reasonCode:I.OK}})}recordIgnoredAuditIfPossible(e,n){this.store.jobExists(e.jobId)&&this.store.recordOperationAudit({receiptId:`receipt-${R(e.operationId)}-ignored`,jobId:e.jobId,operationId:e.operationId,idempotencyKey:`audit-${e.idempotencyKey??e.operationId}-ignored`,status:"ignored",reasonCode:n,ignoredOperationIds:[e.operationId],createdAt:e.createdAt,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,status:"ignored",reasonCode:n}})}}function ee(t){const e=Le(t.metadata_json,t.iteration),n=v(t.metadata_json),a=P(n),i=le(n.currentStage)?n.currentStage:void 0,d=_e(n.stageHistory),u=Y(n.iteration)??Y(t.iteration);return O(e,"goalLedgerItems","goal_ledger_item_count"in t?t.goal_ledger_item_count:void 0),O(e,"blockedGoalLedgerItems","blocked_goal_ledger_item_count"in t?t.blocked_goal_ledger_item_count:void 0),O(e,"securityIssuesBlocked","security_issue_blocked_count"in t?t.security_issue_blocked_count:void 0),O(e,"goalVerifiers","goal_verifier_count"in t?t.goal_verifier_count:void 0),O(e,"failedVerifiers","failed_verifier_count"in t?t.failed_verifier_count:void 0),O(e,"unavailableVerifiers","unavailable_verifier_count"in t?t.unavailable_verifier_count:void 0),O(e,"goalReviewGates","goal_review_gate_count"in t?t.goal_review_gate_count:void 0),O(e,"failedRequiredReviewGates","failed_required_review_gate_count"in t?t.failed_required_review_gate_count:void 0),{jobId:s(t.job_id,80),kind:s(t.kind,40),status:s(t.status,40),publicSummary:s(t.summary??"No public summary recorded.",k),createdAt:s(t.created_at,80),updatedAt:s(t.updated_at,80),...t.next_run_at?{nextRunAt:s(t.next_run_at,80)}:{},...t.reason_code?{reasonCode:s(t.reason_code,80)}:{},...Object.keys(e).length>0?{counts:e}:{},...i?{currentStage:i}:{},...d.length>0?{stageHistory:d}:{},...u!==void 0?{iteration:u}:{},...Oe(a),publicSafe:!0}}function xe(t){const e={jobs:t.counts.jobs??t.jobCount,dueJobs:t.counts.dueJobs??t.dueJobCount,outboxPending:t.outboxPending,redactions:t.redactions.length},n=V({generatedAt:t.generatedAt,counts:e});return{syncVersion:fe,transportKind:"client_snapshot",snapshotId:`snapshot-${R(B(n).replace(/^sha256:/,"").slice(0,16))}`,generatedAt:s(t.generatedAt,80),publicSummary:`Client snapshot contains ${e.jobs} public jobs and ${e.outboxPending} pending outbox records.`,counts:e,hashes:{snapshot:B(n)},redactionEvidence:t.redactions.slice(0,20),publicSafe:!0}}function Oe(t){const e=t.runtimeSource==="explicit"||t.runtimeSource==="origin"||t.runtimeSource==="default"||t.runtimeSource==="fallback"||t.runtimeSource==="unspecified"?t.runtimeSource:void 0;return{...b(t,"runtimeId",80),...b(t,"modelId",120),...e?{runtimeSource:e}:{},...b(t,"headlessRuntime",80),...b(t,"headlessModel",120),...b(t,"headlessRuntimeReasonCode",100),...b(t,"originRuntime",80),...b(t,"originModel",120),...b(t,"workspaceId",120),...b(t,"workspaceLabel",80),...b(t,"projectId",120),...b(t,"projectLabel",80)}}function Te(t){return t?{workspaceId:t.workspaceId,workspaceLabel:t.workspaceLabel,projectId:t.projectId,projectLabel:t.projectLabel}:{}}function b(t,e,n){const a=t[e];return typeof a=="string"?{[e]:s(a,n)}:{}}function te(t){const e=P(v(t.metadata_json)),n=typeof e.goalId=="string"?s(e.goalId,100):void 0,a=typeof e.loopId=="string"?s(e.loopId,100):void 0;return{eventId:s(t.event_id,120),jobId:s(t.job_id,100),...n?{goalId:n}:{},...a?{loopId:a}:{},executionId:s(t.execution_id,120),publicSummary:s(t.public_summary,k),...t.reason_code?{reasonCode:s(t.reason_code,80)}:{},createdAt:s(t.created_at,80),cursor:s(t.cursor,260),...Object.keys(e).length>0?{metadata:e}:{},publicSafe:!0}}function Ne(t){return{attemptId:s(t.attempt_id,120),executionId:s(t.execution_id,120),jobId:s(t.job_id,100),status:s(t.status,40),...t.reason_code?{reasonCode:s(t.reason_code,80)}:{},...t.runtime_id?{runtimeId:s(t.runtime_id,80)}:{},...t.model_id?{modelId:s(t.model_id,120)}:{},retryCount:Math.max(0,Math.floor(t.retry_count)),attemptCount:Math.max(0,Math.floor(t.attempt_count)),maxAttempts:Math.max(1,Math.floor(t.max_attempts)),queuePriority:Math.max(-100,Math.min(100,Math.floor(t.queue_priority))),queueScope:t.queue_scope==="workspace"?"workspace":"project",...typeof t.duration_ms=="number"&&Number.isFinite(t.duration_ms)?{durationMs:Math.max(0,Math.floor(t.duration_ms))}:{},...ne("counts",v(t.counts_json)),...ne("hashes",v(t.hashes_json)),...Pe("redactionSummary",t.redaction_summary_json),...t.lease_id?{leaseId:s(t.lease_id,120)}:{},...t.runner_id?{runnerId:s(t.runner_id,120)}:{},...t.lease_expires_at?{leaseExpiresAt:s(t.lease_expires_at,80)}:{},...t.heartbeat_at?{heartbeatAt:s(t.heartbeat_at,80)}:{},publicSummary:s(t.public_summary??"No public headless execution summary recorded.",k),enqueuedAt:s(t.enqueued_at,80),...t.not_before_at?{notBeforeAt:s(t.not_before_at,80)}:{},...t.next_retry_at?{nextRetryAt:s(t.next_retry_at,80)}:{},...t.dead_lettered_at?{deadLetteredAt:s(t.dead_lettered_at,80)}:{},...t.dead_letter_reason_code?{deadLetterReasonCode:s(t.dead_letter_reason_code,80)}:{},publicSafe:!0}}function O(t,e,n){typeof n=="number"&&Number.isFinite(n)&&n>0&&(t[e]=Math.floor(n))}function Le(t,e){const n={};if(t)try{const a=JSON.parse(t),i=y(a)&&y(a.counts)?a.counts:void 0;if(i)for(const[d,u]of Object.entries(i))typeof u=="number"&&Number.isFinite(u)&&(n[d]=Math.max(0,Math.floor(u)))}catch{}return typeof e=="number"&&Number.isFinite(e)&&(n.iteration=Math.max(0,Math.floor(e))),n}function ke(t){const e=t.map(ve).filter(n=>!!n);return{preferredSource:e.length>0?"compact_summary":"recent_events",summaries:e,publicSafe:!0}}function ve(t){const e=v(t.metadata_json),n=y(e.hashes)?e.hashes:{},a=typeof n.summary=="string"?n.summary:t.sha256??void 0,i=typeof e.reasonCode=="string"?s(e.reasonCode,80):void 0;return{snapshotId:s(t.snapshot_id,120),...t.job_id?{jobId:s(t.job_id,100)}:{},...t.operation_id?{operationId:s(t.operation_id,120)}:{},capturedAt:s(t.captured_at,80),publicSummary:s(t.summary??"Context compacted with public-safe refs.",Z),...a?{summaryHash:s(a,120)}:{},...t.relative_path?{relativePath:s(t.relative_path,240)}:{},retainedRefs:je(e.relativePaths),artifactRefs:$(e.artifactRefs),evidenceRefs:$(e.evidenceRefs),...y(e.checkpoint)?{checkpoint:P(e.checkpoint)}:{},...i?{reasonCode:i}:{},publicSafe:!0}}function v(t){if(!t)return{};try{const e=JSON.parse(t);return y(e)?e:{}}catch{return{}}}function ne(t,e){const n=P(e);return Object.keys(n).length>0?{[t]:n}:{}}function Pe(t,e){if(!e)return{};try{const n=JSON.parse(e),a=$(n);return a.length>0?{[t]:a}:{}}catch{return{}}}function je(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"&&e.length>0).map(e=>s(e,240)).slice(0,D):[]}function $(t){return Array.isArray(t)?t.map(H).filter(e=>e!==void 0).slice(0,D):[]}function P(t){const e={};for(const[n,a]of Object.entries(t).slice(0,20)){if(K.test(n))continue;const i=H(a);i!==void 0&&(e[s(n,80)]=i)}return e}function H(t){if(!M(t)){if(typeof t=="string")return s(t,240);if(typeof t=="number"&&Number.isFinite(t))return Math.floor(t);if(typeof t=="boolean"||t===null)return t;if(Array.isArray(t))return t.map(H).filter(n=>n!==void 0).slice(0,20);if(y(t))return P(t)}}function Me(t){return y(t)?Array.isArray(t.operationLogs)?t.operationLogs.filter(y):y(t.operationLog)?[t.operationLog]:Array.isArray(t.operations)?[t]:[]:[]}function Ue(t){const e=[],n=[],a=[],i=[],d=[],u=new Map;if(t.schemaVersion!==S)throw new _("Invalid continuity operation log schema version.",[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});if(t.contractVersion!==g)throw new _("Invalid continuity operation log contract version.",[I.INVALID_CONTRACT_VERSION],{mutationBlocked:!0});if(t.publicSafe!==!0)throw new _("Continuity operation log is not marked public-safe.",[I.UNSAFE_FIELD_REJECTED],{mutationBlocked:!0});const m=f(p(t,"metadata"),"log.metadata");if(!Array.isArray(t.operations))return{operations:[],skippedOperations:a,ignoredOperationIds:i,reasonCodes:e,redactions:n,logMetadata:m};for(const c of[...t.operations].filter(y).sort(De)){const l=Ve(c),U=V(l),N=u.get(l.operationId);if(N!==void 0){if(N===U){i.push(l.operationId),e.push(I.IDEMPOTENCY_REPLAY);continue}throw n.push({field:"operationId",reason:"unknown_required_operation",evidence:"operation-denied",publicSafe:!0}),new _("Duplicate continuity operation ID with conflicting payload.",[I.DUPLICATE_OPERATION_ID],{redactions:n,mutationBlocked:!0})}if(u.set(l.operationId,U),f(l.metadata,"operation.metadata"),!he.has(l.type)){const j=c.required===!0;if(c.forwardCompatible===!0&&!j){a.push(l),i.push(l.operationId),e.push(I.UNKNOWN_OPERATION_IGNORED);continue}throw n.push({field:l.type,reason:"unknown_required_operation",evidence:"operation-denied",publicSafe:!0}),new _(`Unknown required continuity operation ${l.type}.`,[I.UNKNOWN_OPERATION_REQUIRED],{redactions:n,mutationBlocked:!0})}d.push(l)}return{operations:d,skippedOperations:a,ignoredOperationIds:i,reasonCodes:e,redactions:n,logMetadata:m}}function Ve(t){if(t.schemaVersion!==S)throw new _("Invalid continuity operation schema version.",[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});if(t.contractVersion!==g)throw new _("Invalid continuity operation contract version.",[I.INVALID_CONTRACT_VERSION],{mutationBlocked:!0});if(t.publicSafe!==!0)throw new _("Continuity operation is not marked public-safe.",[I.UNSAFE_FIELD_REJECTED],{mutationBlocked:!0});const e=r(t,"type"),n=r(t,"operationId"),a=r(t,"jobId"),i=$e(t,"sequence"),d=r(t,"createdAt");return{...t,type:e,operationId:n,jobId:a,schemaVersion:S,contractVersion:g,sequence:i,createdAt:d,idempotencyKey:o(t,"idempotencyKey"),metadata:p(t,"metadata"),publicSafe:!0}}function f(t,e){if(!t)return{};const n={},a=[];for(const[i,d]of Object.entries(t)){const u=qe(i),m=M(d),c=u??m;if(c){a.push({field:`${e}.${i}`,reason:c,evidence:u?"key-denied":"value-denied",publicSafe:!0});continue}n[i]=d}if(a.length>0)throw new _(`Continuity metadata rejected unsafe public fields at ${e}.`,[I.UNSAFE_FIELD_REJECTED],{redactions:a,mutationBlocked:!0});return n}function qe(t){return!Ae.has(t)||K.test(t)?"unsafe_key":null}function M(t){if(typeof t=="string")return G.test(t)?"private_url":be.test(t)?"local_absolute_path":J.test(t)?"secret":Q.test(t)?"prompt_body":W.test(t)?"raw_log":X.test(t)?"protected_field":null;if(t===null||typeof t=="number"||typeof t=="boolean")return null;if(Array.isArray(t)){for(const e of t){const n=M(e);if(n)return n}return null}if(y(t)){for(const[e,n]of Object.entries(t)){if(K.test(e))return"unsafe_key";const a=M(n);if(a)return a}return null}return"unsafe_key"}function Ke(t){const e=[];for(const n of t)if(n.metadata_json)try{const i=JSON.parse(n.metadata_json).redactionEvidence;if(!Array.isArray(i))continue;for(const d of i)y(d)&&(typeof d.field!="string"||typeof d.reason!="string"||typeof d.evidence!="string"||e.push({field:s(d.field,120),reason:d.reason,evidence:d.evidence,publicSafe:!0}))}catch{}return e}function De(t,e){const n=typeof t.sequence=="number"?t.sequence:0,a=typeof e.sequence=="number"?e.sequence:0;if(n!==a)return n-a;const i=String(t.createdAt??"").localeCompare(String(e.createdAt??""));return i!==0?i:String(t.operationId??"").localeCompare(String(e.operationId??""))}function y(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}function T(t,e){const n=t[e];if(!y(n))throw new _(`Continuity operation missing object field ${e}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function p(t,e){const n=t[e];return y(n)?n:void 0}function r(t,e){const n=t[e];if(typeof n!="string"||n.length===0)throw new _(`Continuity operation missing string field ${e}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function o(t,e){const n=t[e];return typeof n=="string"&&n.length>0?n:void 0}function $e(t,e){const n=t[e];if(typeof n!="number"||!Number.isFinite(n))throw new _(`Continuity operation missing numeric field ${e}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function h(t,e){const n=t[e];return typeof n=="number"&&Number.isFinite(n)?n:void 0}function He(t,e){const n=t[e];return typeof n=="boolean"?n:void 0}function L(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"&&e.length>0):[]}function ae(t){return Array.isArray(t)?t.filter(y):[]}function we(t){return C(t,Z,"compact_context.publicSummary")}function C(t,e,n){const a=t.trim();if(!a)throw new _(`Continuity compaction missing public text at ${n}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});const i=M(a);if(i)throw new _(`Continuity compaction rejected unsafe public text at ${n}.`,[I.UNSAFE_FIELD_REJECTED],{redactions:[{field:n,reason:i,evidence:"value-denied",publicSafe:!0}],mutationBlocked:!0});return a.length<=e?a:`${a.slice(0,e)}\u2026[TRUNCATED:${a.length-e}]`}function w(t,e){return C(t,120,e)}function oe(t,e,n){return E(L(t).map((a,i)=>F(a,`${e}[${i}]`))).slice(0,n)}function F(t,e){const n=C(t,240,e).replace(/\\/g,"/"),a=n.split("/").filter(Boolean),i=/^[A-Za-z]:\//.test(n);if(n.startsWith("/")||n.startsWith("~")||n.includes("://")||i||a.includes(".."))throw new _(`Continuity compaction rejected non-relative ref at ${e}.`,[I.UNSAFE_FIELD_REJECTED],{redactions:[{field:e,reason:"private_url",evidence:"value-denied",publicSafe:!0}],mutationBlocked:!0});return n}function Fe(t){const e=[],n=p(t,"summaryRef");n&&e.push(re(n,"compact_context.summaryRef","context_summary"));for(const[i,d]of ae(t.artifactRefs).entries())e.push(re(d,`compact_context.artifactRefs[${i}]`));const a=new Set;return e.filter(i=>{const d=`${i.kind}:${i.relativePath}`;return a.has(d)?!1:(a.add(d),!0)}).slice(0,Se)}function re(t,e,n="context_summary"){const a=C(o(t,"kind")??n,60,`${e}.kind`),i=F(r(t,"relativePath"),`${e}.relativePath`),d=o(t,"sha256"),u=o(t,"publicSummary");return{kind:a,relativePath:i,...d?{sha256:w(d,`${e}.sha256`)}:{},...u?{publicSummary:C(u,k,`${e}.publicSummary`)}:{},publicSafe:!0}}function Be(t){return ae(t.evidenceIndex).map((e,n)=>{const a=`compact_context.evidenceIndex[${n}]`,i=F(r(e,"relativePath"),`${a}.relativePath`),d=o(e,"refId")??`evidence-${R(i)}`,u=o(e,"reasonCode")??o(t,"reasonCode")??"context-compacted",m=o(e,"sha256"),c=o(e,"publicSummary");return{refId:C(d,120,`${a}.refId`),relativePath:i,reasonCode:C(u,80,`${a}.reasonCode`),...m?{sha256:w(m,`${a}.sha256`)}:{},...c?{publicSummary:C(c,k,`${a}.publicSummary`)}:{},publicSafe:!0}}).slice(0,ge)}function Ye(t,e,n,a){const i=p(t,"checkpoint")??{},d=o(i,"checkpointId")??`checkpoint-${R(t.operationId)}`,u=o(i,"capturedAt")??t.createdAt,m={checkpointId:C(d,120,"compact_context.checkpoint.checkpointId"),capturedAt:C(u,80,"compact_context.checkpoint.capturedAt"),retainedRefCount:e.length,artifactRefCount:n.length,evidenceRefCount:a.length,publicSafe:!0};for(const c of["eventCursor","receiptCursor"]){const l=o(i,c);l&&(m[c]=C(l,120,`compact_context.checkpoint.${c}`))}for(const c of["recentEventCount","recentReceiptCount"]){const l=h(i,c);l!==void 0&&(m[c]=Math.max(0,Math.floor(l)))}return m}function B(t){return`sha256:${ie("sha256").update(t).digest("hex")}`}function E(t){return Array.from(new Set(t))}function R(t){return t.replace(/[^a-z0-9_.:-]+/gi,"-").slice(0,120)}function s(t,e){const n=ze(t);return n.length<=e?n:`${n.slice(0,e)}\u2026[TRUNCATED:${n.length-e}]`}function ze(t){return G.test(t)||J.test(t)||W.test(t)||Q.test(t)||X.test(t)?"[REDACTED]":t}function V(t){return Array.isArray(t)?`[${t.map(V).join(",")}]`:y(t)?`{${Object.keys(t).sort().map(e=>`${JSON.stringify(e)}:${V(t[e])}`).join(",")}}`:JSON.stringify(t)}function q(t,e){if(t instanceof _)return t;if(t instanceof pe)return new _(t.message,[t.reasonCode],{mutationBlocked:t.mutationBlocked,cause:t});const n=t instanceof Error?t.message:String(t);return new _(`${e} ${n}`,[I.SQLITE_MUTATION_FAILED],{cause:t})}export{g as CONTINUITY_CLIENT_CONTRACT_VERSION,fe as CONTINUITY_CLIENT_PORTAL_SYNC_ENVELOPE_VERSION,I as CONTINUITY_CLIENT_REASON_CODES,S as CONTINUITY_CLIENT_SCHEMA_VERSION,Ze as CONTINUITY_INVOKE_WATCH_DEFAULT_LIMIT,tt as CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_IDLE_POLLS,nt as CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_POLLS,et as CONTINUITY_INVOKE_WATCH_DEFAULT_POLL_INTERVAL_MS,z as CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT,ye as CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_POLL_INTERVAL_MS,Re as ContinuityClientStateStore,_ as ContinuityClientStateStoreError,at as continuitySqliteExists,ot as createContinuityHardStopSnapshot,rt as openContinuityClientStateStore};
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.05 -- Thin-client continuity state snapshots and operation-log apply.
+ */
+import { existsSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { deriveProjectIdentity } from '../runner/project-identity.js';
+import { recordAutonomousGovernance, } from './autonomous-governance.js';
+import { CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE, ContinuitySqliteStoreError, continuitySqliteStorePath, isContinuityPublicStage, normalizeContinuityStageIteration, openContinuitySqliteStore, sanitizeContinuityStageHistory, } from './sqlite-store.js';
+export const CONTINUITY_CLIENT_SCHEMA_VERSION = 1;
+export const CONTINUITY_CLIENT_CONTRACT_VERSION = 'continuity-v1';
+export const CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT = 10;
+export const CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_POLL_INTERVAL_MS = 2_000;
+export const CONTINUITY_INVOKE_WATCH_DEFAULT_LIMIT = CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT;
+export const CONTINUITY_INVOKE_WATCH_DEFAULT_POLL_INTERVAL_MS = CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_POLL_INTERVAL_MS;
+export const CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_IDLE_POLLS = 3;
+export const CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_POLLS = 1_800;
+export const CONTINUITY_CLIENT_PORTAL_SYNC_ENVELOPE_VERSION = 1;
+export const CONTINUITY_CLIENT_REASON_CODES = Object.freeze({
+    OK: 'continuity-ok',
+    INVALID_SCHEMA_VERSION: 'invalid-schema-version',
+    INVALID_CONTRACT_VERSION: 'invalid-contract-version',
+    UNKNOWN_OPERATION_REQUIRED: 'unknown-operation-required',
+    UNKNOWN_OPERATION_IGNORED: 'unknown-operation-ignored',
+    DUPLICATE_OPERATION_ID: 'duplicate-operation-id',
+    IDEMPOTENCY_REPLAY: 'idempotency-replay',
+    UNSAFE_FIELD_REJECTED: 'unsafe-field-rejected',
+    SQLITE_ADAPTER_UNAVAILABLE: 'sqlite-adapter-unavailable',
+    SQLITE_INTEGRITY_FAILED: 'sqlite-integrity-failed',
+    SQLITE_MUTATION_FAILED: 'sqlite-mutation-failed',
+});
+const KNOWN_OPERATION_TYPES = new Set([
+    'create_job',
+    'update_job_status',
+    'append_event',
+    'append_receipt',
+    'upsert_goal_campaign',
+    'upsert_goal_ledger_item',
+    'upsert_verifier',
+    'upsert_review_gate',
+    'schedule_next_tick',
+    'acquire_lease',
+    'release_lease',
+    'compact_context',
+    'enqueue_outbox',
+    'append_outbox',
+    'enqueue_execution_attempt',
+    'claim_execution_attempt',
+    'heartbeat_execution_attempt',
+    'release_execution_attempt',
+    'complete_execution_attempt',
+    'append_execution_receipt',
+    'append_execution_summary',
+]);
+const ALLOWED_METADATA_KEYS = new Set([
+    'schemaVersion',
+    'contractVersion',
+    'eventType',
+    'executionId',
+    'jobId',
+    'operationId',
+    'idempotencyKey',
+    'goalId',
+    'loopId',
+    'campaignId',
+    'itemId',
+    'ledgerItemIds',
+    'verifierId',
+    'verifierIds',
+    'gateId',
+    'reviewGateIds',
+    'runnerId',
+    'leaseId',
+    'status',
+    'reasonCode',
+    'reasonCodes',
+    'runtimeId',
+    'modelId',
+    'runtimeSource',
+    'headlessRuntime',
+    'headlessModel',
+    'headlessRuntimeReasonCode',
+    'originRuntime',
+    'originModel',
+    'targetRef',
+    'attemptId',
+    'attemptStatus',
+    'directiveHash',
+    'timeoutMs',
+    'leaseExpiresAt',
+    'heartbeatAt',
+    'notBeforeAt',
+    'maxAttempts',
+    'counts',
+    'hashes',
+    'relativePaths',
+    'artifactRefs',
+    'evidenceRefs',
+    'validationRefs',
+    'registryRefs',
+    'storyIds',
+    'epicIds',
+    'debtIds',
+    'iteration',
+    'currentStage',
+    'stageHistory',
+    'durationMs',
+    'retryCount',
+    'nextTickAt',
+    'processingOutputSource',
+    'publicSummary',
+    'redactionEvidence',
+    'selectorKind',
+    'targetId',
+    'targetJobId',
+    'relatedJobIds',
+    'serverAccessToLocalhost',
+    'serverHeldStream',
+    'initialCursor',
+    'targetResolutionState',
+    'targetKind',
+    'relatedJobCount',
+    'snapshotStatus',
+    'snapshotGeneratedAt',
+    'renderedSummaryCount',
+    'cursorState',
+    'currentCursor',
+    'nextCursor',
+    'cursorAdvanced',
+    'eventId',
+    'latestEventId',
+    'watchStatus',
+    'stopReason',
+    'syncVersion',
+    'transportKind',
+    'envelopeId',
+    'workspaceId',
+    'workspaceLabel',
+    'projectId',
+    'projectLabel',
+    'snapshotId',
+    'syncCursor',
+    'previousSyncCursor',
+    'nextSyncCursor',
+    'commandId',
+    'receiptId',
+    'acknowledgedAt',
+    'observedAt',
+    'generatedAt',
+    'syncStatus',
+    'commandStatus',
+    'receiptStatus',
+    'actorType',
+    'actorId',
+    'tenantId',
+    'commandKind',
+    'auditStatus',
+    'redactionCount',
+]);
+const UNSAFE_METADATA_KEY_PATTERN = /(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i;
+const ABSOLUTE_URL_VALUE_PATTERN = /\bhttps?:\/\/\S+/i;
+const LOCAL_ABSOLUTE_PATH_VALUE_PATTERN = /(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)/i;
+const SECRET_VALUE_PATTERN = /(ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=)/i;
+const RAW_LOG_VALUE_PATTERN = /(raw[_-]?(?:logs?)\s*[:=]|transcript|stack trace|stderr:|stdout:)/i;
+const PROMPT_VALUE_PATTERN = /(prompt[_-]?body|system prompt|workflow body|step body)/i;
+const PROTECTED_VALUE_PATTERN = /(PROTECTED_|_PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH)|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY)|P192[_-]?SYNTHETIC[_-]?(?:PORTAL|RUNNER|SYNC))/i;
+const PUBLIC_TEXT_MAX_CHARS = 240;
+const COMPACTION_SUMMARY_MAX_CHARS = 2_400;
+const COMPACTION_RETAINED_REF_LIMIT = 40;
+const COMPACTION_ARTIFACT_REF_LIMIT = 20;
+const COMPACTION_EVIDENCE_REF_LIMIT = 40;
+const COMPACTION_DECISION_LOG_REF_LIMIT = 20;
+const COMPACTION_RELATIVE_PATH_LIMIT = 80;
+export class ContinuityClientStateStoreError extends Error {
+    reasonCodes;
+    redactions;
+    mutationBlocked;
+    constructor(message, reasonCodes, options = {}) {
+        super(message);
+        this.name = 'ContinuityClientStateStoreError';
+        this.reasonCodes = unique(reasonCodes);
+        this.redactions = options.redactions ?? [];
+        this.mutationBlocked = options.mutationBlocked ?? false;
+        this.cause = options.cause;
+    }
+}
+export function continuitySqliteExists(projectRoot) {
+    return existsSync(continuitySqliteStorePath(projectRoot));
+}
+export function createContinuityHardStopSnapshot(reasonCodes, nowIso = new Date().toISOString()) {
+    return {
+        schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+        contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+        generatedAt: nowIso,
+        hardStop: true,
+        reasonCodes: unique(reasonCodes),
+        publicSafe: true,
+    };
+}
+export async function openContinuityClientStateStore(options) {
+    const store = await openContinuitySqliteStore({
+        projectRoot: options.projectRoot,
+        adapter: options.adapter,
+        adapterLoader: options.adapterLoader,
+        now: options.now,
+        strictReadOnly: options.strictReadOnly,
+    });
+    return new ContinuityClientStateStore(store, options.now ?? (() => new Date().toISOString()), deriveProjectIdentity(options.projectRoot));
+}
+export class ContinuityClientStateStore {
+    store;
+    now;
+    projectIdentity;
+    constructor(store, now = () => new Date().toISOString(), projectIdentity) {
+        this.store = store;
+        this.now = now;
+        this.projectIdentity = projectIdentity;
+    }
+    close() {
+        this.store.close();
+    }
+    recordAutonomousGovernance(envelope, nowIso) {
+        try {
+            return recordAutonomousGovernance(this.store, envelope, nowIso);
+        }
+        catch (error) {
+            throw mapContinuityError(error, 'Failed to record autonomous governance envelope.');
+        }
+    }
+    collectSnapshot(options = {}) {
+        try {
+            const nowIso = options.nowIso ?? this.now();
+            const rows = this.store.collectSnapshotRows({
+                nowIso,
+                jobLimit: options.jobLimit ?? 20,
+                staleLeaseLimit: options.staleLeaseLimit ?? 10,
+                receiptLimit: options.receiptLimit ?? 10,
+                eventLimit: options.eventLimit ?? 10,
+                snapshotLimit: options.snapshotLimit ?? 5,
+            });
+            const dueRows = this.store.listDueJobs({
+                nowIso,
+                limit: options.dueJobLimit ?? 10,
+            });
+            const processingSummaryRows = this.store.listProcessingOutputSummaries({
+                limit: options.processingSummaryLimit ?? CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT,
+            });
+            const redactions = collectReceiptRedactions(rows.receipts).slice(0, 20);
+            const portalSync = toPortalSyncSnapshotSummary({
+                generatedAt: nowIso,
+                counts: rows.counts,
+                jobCount: rows.jobs.length,
+                dueJobCount: dueRows.length,
+                outboxPending: rows.outboxCounts.pending ?? 0,
+                redactions,
+            });
+            return {
+                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+                generatedAt: nowIso,
+                store: {
+                    schemaVersion: rows.schemaVersion,
+                    readable: true,
+                },
+                jobs: rows.jobs.map(toSnapshotJobSummary),
+                counts: rows.counts,
+                dueJobCount: rows.counts.dueJobs ?? 0,
+                dueJobs: dueRows.map(toSnapshotJobSummary),
+                staleLeases: rows.staleLeases.map((lease) => ({
+                    leaseId: boundPublicText(lease.lease_id, 100),
+                    jobId: boundPublicText(lease.job_id, 100),
+                    runnerId: boundPublicText(lease.runner_id, 100),
+                    expiresAt: boundPublicText(lease.expires_at, 80),
+                    publicSafe: true,
+                })),
+                outbox: {
+                    total: rows.counts.outbox ?? 0,
+                    pending: rows.outboxCounts.pending ?? 0,
+                    failed: rows.outboxCounts.failed ?? 0,
+                    deadLetter: rows.outboxCounts.dead_letter ?? 0,
+                    sent: rows.outboxCounts.sent ?? 0,
+                    acked: rows.outboxCounts.acked ?? 0,
+                },
+                queue: {
+                    depth: rows.queue.depth,
+                    queued: rows.queue.queued,
+                    running: rows.queue.running,
+                    retrying: rows.queue.retrying,
+                    deadLetter: rows.queue.deadLetter,
+                    capacity: rows.queue.capacity,
+                    available: rows.queue.available,
+                    backpressure: rows.queue.backpressure,
+                    generatedAt: boundPublicText(rows.queue.generatedAt, 80),
+                    ...(rows.queue.nextRetryAt ? { nextRetryAt: boundPublicText(rows.queue.nextRetryAt, 80) } : {}),
+                    ...(rows.queue.reasonCode ? { reasonCode: boundPublicText(rows.queue.reasonCode, 80) } : {}),
+                    publicSafe: true,
+                },
+                lastReceipts: rows.receipts.map((receipt) => ({
+                    receiptId: boundPublicText(receipt.receipt_id, 100),
+                    jobId: boundPublicText(receipt.job_id, 100),
+                    ...(receipt.operation_id ? { operationId: boundPublicText(receipt.operation_id, 100) } : {}),
+                    status: boundPublicText(receipt.status, 40),
+                    ...(receipt.reason_code ? { reasonCode: boundPublicText(receipt.reason_code, 80) } : {}),
+                    createdAt: boundPublicText(receipt.created_at, 80),
+                    publicSafe: true,
+                })),
+                lastEvents: rows.events.map((event) => {
+                    const metadata = normalizeSnapshotRecord(parsePublicMetadata(event.metadata_json));
+                    return {
+                        eventId: boundPublicText(event.event_id, 100),
+                        jobId: boundPublicText(event.job_id, 100),
+                        operationId: boundPublicText(event.operation_id, 100),
+                        type: boundPublicText(event.type, 80),
+                        publicSummary: boundPublicText(event.summary, PUBLIC_TEXT_MAX_CHARS),
+                        ...(event.reason_code ? { reasonCode: boundPublicText(event.reason_code, 80) } : {}),
+                        createdAt: boundPublicText(event.created_at, 80),
+                        ...(Object.keys(metadata).length > 0 ? { metadata } : {}),
+                        publicSafe: true,
+                    };
+                }),
+                processingSummaries: processingSummaryRows.map(toProcessingSummaryRef),
+                headlessExecutionAttempts: rows.headlessExecutionAttempts.map(toHeadlessExecutionAttemptRef),
+                compactContext: toCompactContextSnapshot(rows.stateSnapshots),
+                portalSync,
+                redactions,
+                publicSafe: true,
+            };
+        }
+        catch (error) {
+            throw mapContinuityError(error, 'Failed to collect continuity snapshot.');
+        }
+    }
+    collectProcessingOutputSummaryCursor(options = {}) {
+        try {
+            const result = this.store.pollProcessingOutputSummaries(options);
+            return {
+                summaries: result.summaries.map(toProcessingSummaryRef),
+                ...(result.nextCursor ? { nextCursor: result.nextCursor } : {}),
+                hasMore: result.hasMore,
+                publicSafe: true,
+            };
+        }
+        catch (error) {
+            throw mapContinuityError(error, 'Failed to collect processing summary cursor.');
+        }
+    }
+    applyStateUpdate(update) {
+        const logs = normalizeStateUpdate(update);
+        const appliedOperationIds = [];
+        const ignoredOperationIds = [];
+        const reasonCodes = [];
+        const redactions = [];
+        for (const log of logs) {
+            const result = this.applyOperationLog(log);
+            appliedOperationIds.push(...result.appliedOperationIds);
+            ignoredOperationIds.push(...result.ignoredOperationIds);
+            reasonCodes.push(...result.reasonCodes);
+            redactions.push(...result.redactions);
+        }
+        return {
+            ok: true,
+            appliedOperationIds: unique(appliedOperationIds),
+            ignoredOperationIds: unique(ignoredOperationIds),
+            reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [CONTINUITY_CLIENT_REASON_CODES.OK]),
+            redactions,
+            publicSafe: true,
+        };
+    }
+    applyOperationLog(log) {
+        const planned = planOperationLog(log);
+        const appliedOperationIds = [];
+        const ignoredOperationIds = [...planned.ignoredOperationIds];
+        const reasonCodes = [...planned.reasonCodes];
+        const redactions = [...planned.redactions];
+        try {
+            this.store.runInTransaction(() => {
+                for (const operation of planned.operations) {
+                    if (this.store.hasOperationRef(operation.operationId, operation.idempotencyKey)) {
+                        ignoredOperationIds.push(operation.operationId);
+                        reasonCodes.push(CONTINUITY_CLIENT_REASON_CODES.IDEMPOTENCY_REPLAY);
+                        continue;
+                    }
+                    this.applyKnownOperation(operation, planned.logMetadata);
+                    appliedOperationIds.push(operation.operationId);
+                    if (operation.type !== 'append_receipt') {
+                        this.recordAppliedAudit(operation);
+                    }
+                }
+                for (const skipped of planned.skippedOperations) {
+                    this.recordIgnoredAuditIfPossible(skipped, CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_IGNORED);
+                }
+            });
+        }
+        catch (error) {
+            throw mapContinuityError(error, 'Failed to apply continuity operation log atomically.');
+        }
+        return {
+            ok: true,
+            appliedOperationIds: unique(appliedOperationIds),
+            ignoredOperationIds: unique(ignoredOperationIds),
+            reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [CONTINUITY_CLIENT_REASON_CODES.OK]),
+            redactions,
+            publicSafe: true,
+        };
+    }
+    applyKnownOperation(operation, logMetadata) {
+        switch (operation.type) {
+            case 'create_job':
+                this.applyCreateJob(operation, logMetadata);
+                return;
+            case 'update_job_status':
+                this.applyUpdateJobStatus(operation);
+                return;
+            case 'append_event':
+                this.applyAppendEvent(operation);
+                return;
+            case 'append_receipt':
+                this.applyAppendReceipt(operation);
+                return;
+            case 'upsert_goal_campaign':
+                this.applyUpsertGoalCampaign(operation);
+                return;
+            case 'schedule_next_tick':
+                this.store.scheduleNextTick({
+                    jobId: operation.jobId,
+                    scheduledAt: requiredString(operation, 'scheduledAt'),
+                    updatedAt: operation.createdAt,
+                    reasonCode: optionalString(operation, 'reasonCode'),
+                });
+                return;
+            case 'acquire_lease':
+                this.store.acquireLease({
+                    leaseId: requiredString(operation, 'leaseId'),
+                    jobId: operation.jobId,
+                    runnerId: requiredString(operation, 'runnerId'),
+                    acquiredAt: requiredString(operation, 'acquiredAt'),
+                    expiresAt: requiredString(operation, 'expiresAt'),
+                    operationId: operation.operationId,
+                    idempotencyKey: operation.idempotencyKey,
+                    metadata: sanitizeMetadataStrict(operation.metadata, 'operation.metadata'),
+                });
+                return;
+            case 'release_lease':
+                this.store.releaseLease({
+                    leaseId: requiredString(operation, 'leaseId'),
+                    releasedAt: requiredString(operation, 'releasedAt'),
+                    reasonCode: optionalString(operation, 'reasonCode'),
+                });
+                return;
+            case 'compact_context':
+                this.applyCompactContext(operation);
+                return;
+            case 'upsert_goal_ledger_item':
+                this.applyUpsertGoalLedgerItem(operation);
+                return;
+            case 'upsert_verifier':
+                this.applyUpsertVerifier(operation);
+                return;
+            case 'upsert_review_gate':
+                this.applyUpsertReviewGate(operation);
+                return;
+            case 'enqueue_outbox':
+            case 'append_outbox':
+                this.applyOutbox(operation);
+                return;
+            case 'enqueue_execution_attempt':
+                this.applyEnqueueExecutionAttempt(operation);
+                return;
+            case 'claim_execution_attempt':
+                this.store.claimHeadlessExecutionAttempt({
+                    attemptId: requiredString(operation, 'attemptId'),
+                    leaseId: requiredString(operation, 'leaseId'),
+                    runnerId: requiredString(operation, 'runnerId'),
+                    claimedAt: optionalString(operation, 'claimedAt') ?? operation.createdAt,
+                    leaseExpiresAt: requiredString(operation, 'leaseExpiresAt'),
+                    reasonCode: optionalString(operation, 'reasonCode'),
+                });
+                return;
+            case 'heartbeat_execution_attempt':
+                this.store.heartbeatHeadlessExecutionAttempt({
+                    attemptId: requiredString(operation, 'attemptId'),
+                    leaseId: requiredString(operation, 'leaseId'),
+                    runnerId: requiredString(operation, 'runnerId'),
+                    heartbeatAt: optionalString(operation, 'heartbeatAt') ?? operation.createdAt,
+                    leaseExpiresAt: optionalString(operation, 'leaseExpiresAt'),
+                });
+                return;
+            case 'release_execution_attempt':
+                this.store.releaseHeadlessExecutionAttempt({
+                    attemptId: requiredString(operation, 'attemptId'),
+                    leaseId: requiredString(operation, 'leaseId'),
+                    releasedAt: optionalString(operation, 'releasedAt') ?? operation.createdAt,
+                    status: optionalString(operation, 'status'),
+                    reasonCode: optionalString(operation, 'reasonCode'),
+                    notBeforeAt: optionalString(operation, 'notBeforeAt'),
+                    retryCount: optionalNumber(operation, 'retryCount'),
+                });
+                return;
+            case 'complete_execution_attempt':
+                this.applyCompleteExecutionAttempt(operation);
+                return;
+            case 'append_execution_receipt':
+                this.applyAppendExecutionReceipt(operation);
+                return;
+            case 'append_execution_summary':
+                this.applyAppendExecutionSummary(operation);
+                return;
+            default:
+                throw new ContinuityClientStateStoreError(`Unknown continuity operation ${operation.type}.`, [CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_REQUIRED], { mutationBlocked: true });
+        }
+    }
+    applyCompactContext(operation) {
+        const summaryHash = normalizeCompactionHash(requiredString(operation, 'summaryHash'), 'compact_context.summaryHash');
+        const retainedRefs = normalizeCompactionPaths(operation.retainedRefs, 'compact_context.retainedRefs', COMPACTION_RETAINED_REF_LIMIT);
+        const summary = normalizeCompactionSummary(optionalString(operation, 'publicSummary')
+            ?? `Context compacted with ${retainedRefs.length} retained public refs.`);
+        const artifactRefs = normalizeCompactionArtifactRefs(operation);
+        const evidenceRefs = normalizeCompactionEvidenceRefs(operation);
+        const decisionLogRefs = normalizeCompactionPaths(operation.decisionLogRefs, 'compact_context.decisionLogRefs', COMPACTION_DECISION_LOG_REF_LIMIT);
+        const checkpoint = normalizeCompactionCheckpoint(operation, retainedRefs, artifactRefs, evidenceRefs);
+        const relativePaths = unique([
+            ...retainedRefs,
+            ...decisionLogRefs,
+            ...artifactRefs.map((ref) => ref.relativePath),
+            ...evidenceRefs.map((ref) => ref.relativePath),
+        ]).slice(0, COMPACTION_RELATIVE_PATH_LIMIT);
+        const computedSummaryHash = sha256Hex(summary);
+        const reasonCode = optionalString(operation, 'reasonCode') ?? 'context-compacted';
+        const metadata = {
+            schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+            contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+            jobId: operation.jobId,
+            operationId: operation.operationId,
+            reasonCode,
+            publicSummary: summary,
+            counts: {
+                retainedRefs: retainedRefs.length,
+                artifactRefs: artifactRefs.length,
+                evidenceRefs: evidenceRefs.length,
+                decisionLogRefs: decisionLogRefs.length,
+                ...(optionalNumber(operation, 'inputTokens') !== undefined ? { inputContextUnits: optionalNumber(operation, 'inputTokens') } : {}),
+                ...(optionalNumber(operation, 'outputTokens') !== undefined ? { outputContextUnits: optionalNumber(operation, 'outputTokens') } : {}),
+                summaryChars: summary.length,
+            },
+            hashes: {
+                summary: summaryHash,
+                persistedSummary: computedSummaryHash,
+            },
+            relativePaths,
+            artifactRefs,
+            evidenceRefs,
+            validationRefs: decisionLogRefs,
+            redactionEvidence: operation.redactions ?? [],
+            checkpoint,
+        };
+        for (const [index, artifact] of artifactRefs.entries()) {
+            this.store.recordArtifact({
+                artifactId: `artifact-${safeId(operation.operationId)}-${index + 1}`,
+                jobId: operation.jobId,
+                kind: artifact.kind,
+                relativePath: artifact.relativePath,
+                sha256: artifact.sha256,
+                summary: artifact.publicSummary,
+                createdAt: operation.createdAt,
+                operationId: `${operation.operationId}:artifact:${index + 1}`,
+                idempotencyKey: operation.idempotencyKey ? `${operation.idempotencyKey}:artifact:${index + 1}` : undefined,
+                metadata: {
+                    schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+                    contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+                    jobId: operation.jobId,
+                    operationId: operation.operationId,
+                    reasonCode,
+                    hashes: artifact.sha256 ? { artifact: artifact.sha256 } : {},
+                    relativePaths: [artifact.relativePath],
+                    publicSummary: artifact.publicSummary,
+                },
+            });
+        }
+        this.store.recordStateSnapshot({
+            snapshotId: `snapshot-${safeId(operation.operationId)}`,
+            jobId: operation.jobId,
+            kind: 'context_compaction',
+            relativePath: artifactRefs.find((ref) => ref.kind === 'context_summary')?.relativePath,
+            sha256: summaryHash,
+            summary,
+            capturedAt: operation.createdAt,
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            metadata,
+        });
+        this.store.appendEvent({
+            eventId: `event-${safeId(operation.operationId)}-context-compacted`,
+            jobId: operation.jobId,
+            operationId: `${operation.operationId}:event`,
+            idempotencyKey: operation.idempotencyKey ? `${operation.idempotencyKey}:event` : undefined,
+            sequence: operation.sequence,
+            type: 'context_compacted',
+            summary: `Context compaction checkpoint ${checkpoint.checkpointId} persisted with ${relativePaths.length} public refs.`,
+            reasonCode,
+            createdAt: operation.createdAt,
+            metadata: {
+                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+                jobId: operation.jobId,
+                operationId: operation.operationId,
+                reasonCode,
+                counts: metadata.counts,
+                hashes: metadata.hashes,
+                relativePaths,
+                artifactRefs: artifactRefs.map((ref) => ref.relativePath),
+                evidenceRefs,
+                publicSummary: summary,
+            },
+        });
+    }
+    applyCreateJob(operation, logMetadata) {
+        const job = requiredRecord(operation, 'job');
+        this.store.recordJob({
+            jobId: requiredString(job, 'jobId'),
+            kind: requiredString(job, 'kind'),
+            status: requiredString(job, 'status'),
+            createdAt: requiredString(job, 'createdAt'),
+            updatedAt: requiredString(job, 'updatedAt'),
+            summary: optionalString(job, 'summary'),
+            reasonCode: optionalString(job, 'reasonCode'),
+            nextRunAt: optionalString(job, 'nextRunAt'),
+            goalId: optionalString(job, 'goalId'),
+            loopId: optionalString(job, 'loopId'),
+            campaignId: optionalString(job, 'campaignId'),
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            metadata: sanitizeMetadataStrict({
+                ...(optionalRecord(job, 'metadata') ?? optionalRecord(operation, 'metadata') ?? { ...logMetadata }),
+                ...projectIdentityMetadata(this.projectIdentity),
+            }, 'job.metadata'),
+        });
+    }
+    applyUpdateJobStatus(operation) {
+        this.store.updateJobStatus({
+            jobId: operation.jobId,
+            status: requiredString(operation, 'status'),
+            updatedAt: operation.createdAt,
+            reasonCode: optionalString(operation, 'reasonCode'),
+        });
+    }
+    applyAppendEvent(operation) {
+        const event = requiredRecord(operation, 'event');
+        const eventType = requiredString(event, 'type');
+        if (eventType === CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE) {
+            this.applyProcessingOutputSummaryEvent(operation, event);
+            return;
+        }
+        this.store.appendEvent({
+            eventId: requiredString(event, 'eventId'),
+            jobId: requiredString(event, 'jobId'),
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            sequence: operation.sequence,
+            type: eventType,
+            summary: requiredString(event, 'summary'),
+            reasonCode: optionalString(event, 'reasonCode'),
+            createdAt: requiredString(event, 'createdAt'),
+            metadata: sanitizeMetadataStrict(optionalRecord(event, 'metadata'), 'event.metadata'),
+        });
+    }
+    applyProcessingOutputSummaryEvent(operation, event) {
+        const summary = optionalRecord(event, 'processingOutputSummary') ?? event;
+        const executionId = optionalString(summary, 'executionId') ?? operation.operationId;
+        const jobId = optionalString(summary, 'jobId') ?? optionalString(event, 'jobId') ?? operation.jobId;
+        const publicSummary = optionalString(summary, 'publicSummary') ?? requiredString(event, 'summary');
+        const createdAt = optionalString(summary, 'createdAt') ?? optionalString(event, 'createdAt') ?? operation.createdAt;
+        const summaryMetadata = optionalRecord(summary, 'metadata');
+        const eventMetadata = optionalRecord(event, 'metadata');
+        this.store.recordProcessingOutputSummary({
+            eventId: optionalString(event, 'eventId'),
+            executionId,
+            jobId,
+            idempotencyKey: operation.idempotencyKey,
+            goalId: optionalString(summary, 'goalId') ?? optionalString(event, 'goalId'),
+            loopId: optionalString(summary, 'loopId') ?? optionalString(event, 'loopId'),
+            publicSummary,
+            reasonCode: optionalString(summary, 'reasonCode') ?? optionalString(event, 'reasonCode'),
+            createdAt,
+            source: optionalString(summary, 'source') ?? optionalString(event, 'source'),
+            metadata: {
+                ...(eventMetadata ?? {}),
+                ...(summaryMetadata ?? {}),
+            },
+        });
+    }
+    applyAppendReceipt(operation) {
+        const receipt = requiredRecord(operation, 'receipt');
+        const receiptOperationId = optionalString(receipt, 'operationId') ?? operation.operationId;
+        this.store.appendReceipt({
+            receiptId: requiredString(receipt, 'receiptId'),
+            jobId: requiredString(receipt, 'jobId'),
+            operationId: receiptOperationId,
+            idempotencyKey: operation.idempotencyKey,
+            status: requiredString(receipt, 'status'),
+            reasonCode: optionalString(receipt, 'reasonCode'),
+            appliedOperationIds: arrayOfStrings(receipt.appliedOperationIds),
+            ignoredOperationIds: arrayOfStrings(receipt.ignoredOperationIds),
+            createdAt: requiredString(receipt, 'createdAt'),
+            metadata: sanitizeMetadataStrict(optionalRecord(receipt, 'metadata'), 'receipt.metadata'),
+        });
+    }
+    applyUpsertGoalCampaign(operation) {
+        const campaign = requiredRecord(operation, 'campaign');
+        this.store.upsertGoalCampaign({
+            campaignId: requiredString(campaign, 'campaignId'),
+            jobId: requiredString(campaign, 'jobId'),
+            status: requiredString(campaign, 'status'),
+            title: optionalString(campaign, 'title'),
+            publicSummary: optionalString(campaign, 'publicSummary'),
+            reasonCode: optionalString(campaign, 'reasonCode'),
+            createdAt: requiredString(campaign, 'createdAt'),
+            updatedAt: requiredString(campaign, 'updatedAt'),
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            metadata: sanitizeMetadataStrict(optionalRecord(campaign, 'metadata'), 'campaign.metadata'),
+        });
+    }
+    applyUpsertGoalLedgerItem(operation) {
+        const item = requiredRecord(operation, 'item');
+        this.store.upsertGoalLedgerItem({
+            itemId: requiredString(item, 'itemId'),
+            campaignId: requiredString(item, 'campaignId'),
+            jobId: requiredString(item, 'jobId'),
+            itemType: requiredString(item, 'type'),
+            status: requiredString(item, 'status'),
+            summary: requiredString(item, 'publicSummary'),
+            reasonCode: optionalString(item, 'reasonCode'),
+            createdAt: operation.createdAt,
+            updatedAt: requiredString(item, 'updatedAt'),
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            metadata: sanitizeMetadataStrict(optionalRecord(item, 'metadata'), 'item.metadata'),
+        });
+    }
+    applyUpsertVerifier(operation) {
+        const verifier = requiredRecord(operation, 'verifier');
+        this.store.upsertGoalVerifier({
+            verifierId: requiredString(verifier, 'verifierId'),
+            campaignId: requiredString(verifier, 'campaignId'),
+            jobId: requiredString(verifier, 'jobId'),
+            kind: requiredString(verifier, 'kind'),
+            status: requiredString(verifier, 'status'),
+            summary: optionalString(verifier, 'publicSummary'),
+            reasonCode: optionalString(verifier, 'reasonCode'),
+            lastCheckedAt: optionalString(verifier, 'lastCheckedAt'),
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            metadata: sanitizeMetadataStrict(optionalRecord(verifier, 'metadata'), 'verifier.metadata'),
+        });
+    }
+    applyUpsertReviewGate(operation) {
+        const reviewGate = requiredRecord(operation, 'reviewGate');
+        this.store.upsertGoalReviewGate({
+            gateId: requiredString(reviewGate, 'gateId'),
+            campaignId: requiredString(reviewGate, 'campaignId'),
+            jobId: requiredString(reviewGate, 'jobId'),
+            status: requiredString(reviewGate, 'status'),
+            summary: optionalString(reviewGate, 'publicSummary'),
+            required: optionalBoolean(reviewGate, 'required') ?? true,
+            reasonCode: optionalString(reviewGate, 'reasonCode'),
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            metadata: sanitizeMetadataStrict(optionalRecord(reviewGate, 'metadata'), 'reviewGate.metadata'),
+        });
+    }
+    applyOutbox(operation) {
+        const outbox = optionalRecord(operation, 'outbox') ?? operation;
+        this.store.enqueueOutbox({
+            outboxId: optionalString(outbox, 'outboxId') ?? `outbox-${safeId(operation.operationId)}`,
+            jobId: optionalString(outbox, 'jobId') ?? operation.jobId,
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            type: optionalString(outbox, 'type') === operation.type ? 'continuity_event' : requiredString(outbox, 'type'),
+            status: optionalString(outbox, 'status'),
+            payload: sanitizeMetadataStrict(optionalRecord(outbox, 'payload') ?? optionalRecord(operation, 'metadata') ?? {}, 'outbox.payload'),
+            retryCount: optionalNumber(outbox, 'retryCount'),
+            nextAttemptAt: optionalString(outbox, 'nextAttemptAt'),
+            lastErrorCode: optionalString(outbox, 'lastErrorCode'),
+            createdAt: optionalString(outbox, 'createdAt') ?? operation.createdAt,
+            updatedAt: optionalString(outbox, 'updatedAt') ?? operation.createdAt,
+        });
+    }
+    applyEnqueueExecutionAttempt(operation) {
+        const attempt = optionalRecord(operation, 'attempt') ?? operation;
+        const metadata = sanitizeMetadataStrict(optionalRecord(attempt, 'metadata') ?? optionalRecord(operation, 'metadata'), 'executionAttempt.metadata');
+        this.store.enqueueHeadlessExecutionAttempt({
+            attemptId: requiredString(attempt, 'attemptId'),
+            executionId: requiredString(attempt, 'executionId'),
+            jobId: optionalString(attempt, 'jobId') ?? operation.jobId,
+            directiveHash: requiredString(attempt, 'directiveHash'),
+            directiveKind: requiredString(attempt, 'directiveKind'),
+            commandClass: requiredString(attempt, 'commandClass'),
+            targetKind: requiredString(attempt, 'targetKind'),
+            targetRef: requiredString(attempt, 'targetRef'),
+            storyId: optionalString(attempt, 'storyId'),
+            epicId: optionalString(attempt, 'epicId'),
+            runtimeId: optionalString(attempt, 'runtimeId'),
+            modelId: optionalString(attempt, 'modelId'),
+            runtimeSource: optionalString(attempt, 'runtimeSource'),
+            status: optionalString(attempt, 'status'),
+            reasonCode: optionalString(attempt, 'reasonCode'),
+            publicSummary: optionalString(attempt, 'publicSummary'),
+            enqueuedAt: optionalString(attempt, 'enqueuedAt') ?? operation.createdAt,
+            notBeforeAt: optionalString(attempt, 'notBeforeAt'),
+            retryCount: optionalNumber(attempt, 'retryCount'),
+            maxAttempts: optionalNumber(attempt, 'maxAttempts'),
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            counts: optionalRecord(attempt, 'counts'),
+            hashes: optionalRecord(attempt, 'hashes'),
+            redactionSummary: Array.isArray(attempt.redactionSummary) ? attempt.redactionSummary : undefined,
+            relativePaths: arrayOfStrings(attempt.relativePaths),
+            metadata,
+        });
+    }
+    applyCompleteExecutionAttempt(operation) {
+        const completion = optionalRecord(operation, 'completion') ?? operation;
+        this.store.completeHeadlessExecutionAttempt({
+            attemptId: requiredString(completion, 'attemptId'),
+            executionId: optionalString(completion, 'executionId'),
+            jobId: optionalString(completion, 'jobId') ?? operation.jobId,
+            leaseId: optionalString(completion, 'leaseId'),
+            runnerId: optionalString(completion, 'runnerId'),
+            status: requiredString(completion, 'status'),
+            completedAt: optionalString(completion, 'completedAt') ?? operation.createdAt,
+            durationMs: optionalNumber(completion, 'durationMs'),
+            reasonCode: optionalString(completion, 'reasonCode'),
+            publicSummary: optionalString(completion, 'publicSummary'),
+            notBeforeAt: optionalString(completion, 'notBeforeAt'),
+            retryCount: optionalNumber(completion, 'retryCount'),
+            counts: optionalRecord(completion, 'counts'),
+            hashes: optionalRecord(completion, 'hashes'),
+            redactionSummary: Array.isArray(completion.redactionSummary) ? completion.redactionSummary : undefined,
+            relativePaths: arrayOfStrings(completion.relativePaths),
+            metadata: sanitizeMetadataStrict(optionalRecord(completion, 'metadata'), 'executionCompletion.metadata'),
+        });
+    }
+    applyAppendExecutionReceipt(operation) {
+        const receipt = requiredRecord(operation, 'receipt');
+        this.store.recordHeadlessExecutionReceipt({
+            receiptId: requiredString(receipt, 'receiptId'),
+            attemptId: requiredString(receipt, 'attemptId'),
+            executionId: requiredString(receipt, 'executionId'),
+            jobId: optionalString(receipt, 'jobId') ?? operation.jobId,
+            status: requiredString(receipt, 'status'),
+            reasonCode: optionalString(receipt, 'reasonCode'),
+            createdAt: optionalString(receipt, 'createdAt') ?? operation.createdAt,
+            operationId: operation.operationId,
+            idempotencyKey: operation.idempotencyKey,
+            counts: optionalRecord(receipt, 'counts'),
+            hashes: optionalRecord(receipt, 'hashes'),
+            redactionSummary: Array.isArray(receipt.redactionSummary) ? receipt.redactionSummary : undefined,
+            relativePaths: arrayOfStrings(receipt.relativePaths),
+            metadata: sanitizeMetadataStrict(optionalRecord(receipt, 'metadata'), 'executionReceipt.metadata'),
+        });
+    }
+    applyAppendExecutionSummary(operation) {
+        const summary = optionalRecord(operation, 'summary') ?? operation;
+        this.store.recordHeadlessExecutionSummary({
+            eventId: optionalString(summary, 'eventId'),
+            attemptId: requiredString(summary, 'attemptId'),
+            executionId: requiredString(summary, 'executionId'),
+            jobId: optionalString(summary, 'jobId') ?? operation.jobId,
+            publicSummary: requiredString(summary, 'publicSummary'),
+            reasonCode: optionalString(summary, 'reasonCode'),
+            createdAt: optionalString(summary, 'createdAt') ?? operation.createdAt,
+            runtimeId: optionalString(summary, 'runtimeId'),
+            modelId: optionalString(summary, 'modelId'),
+            durationMs: optionalNumber(summary, 'durationMs'),
+            counts: optionalRecord(summary, 'counts'),
+            hashes: optionalRecord(summary, 'hashes'),
+            redactionSummary: Array.isArray(summary.redactionSummary) ? summary.redactionSummary : undefined,
+            relativePaths: arrayOfStrings(summary.relativePaths),
+            metadata: sanitizeMetadataStrict(optionalRecord(summary, 'metadata'), 'executionSummary.metadata'),
+        });
+    }
+    recordAppliedAudit(operation) {
+        this.store.recordOperationAudit({
+            receiptId: `receipt-${safeId(operation.operationId)}`,
+            jobId: operation.jobId,
+            operationId: operation.operationId,
+            idempotencyKey: `audit-${operation.idempotencyKey ?? operation.operationId}`,
+            status: 'applied',
+            reasonCode: CONTINUITY_CLIENT_REASON_CODES.OK,
+            appliedOperationIds: [operation.operationId],
+            createdAt: operation.createdAt,
+            metadata: {
+                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+                jobId: operation.jobId,
+                operationId: operation.operationId,
+                status: 'applied',
+                reasonCode: CONTINUITY_CLIENT_REASON_CODES.OK,
+            },
+        });
+    }
+    recordIgnoredAuditIfPossible(operation, reasonCode) {
+        if (!this.store.jobExists(operation.jobId))
+            return;
+        this.store.recordOperationAudit({
+            receiptId: `receipt-${safeId(operation.operationId)}-ignored`,
+            jobId: operation.jobId,
+            operationId: operation.operationId,
+            idempotencyKey: `audit-${operation.idempotencyKey ?? operation.operationId}-ignored`,
+            status: 'ignored',
+            reasonCode,
+            ignoredOperationIds: [operation.operationId],
+            createdAt: operation.createdAt,
+            metadata: {
+                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+                jobId: operation.jobId,
+                operationId: operation.operationId,
+                status: 'ignored',
+                reasonCode,
+            },
+        });
+    }
+}
+function toSnapshotJobSummary(job) {
+    const counts = extractPublicJobCounts(job.metadata_json, job.iteration);
+    const rawMetadata = parsePublicMetadata(job.metadata_json);
+    const metadata = normalizeSnapshotRecord(rawMetadata);
+    // P195.04: read the additive stage projection from the raw metadata so a bounded
+    // `stageHistory` array survives the 20-key snapshot normalization; values are
+    // re-validated against the public stage allow-list and re-bounded here.
+    const currentStage = isContinuityPublicStage(rawMetadata.currentStage) ? rawMetadata.currentStage : undefined;
+    const stageHistory = sanitizeContinuityStageHistory(rawMetadata.stageHistory);
+    const iteration = normalizeContinuityStageIteration(rawMetadata.iteration)
+        ?? normalizeContinuityStageIteration(job.iteration);
+    addFiniteCount(counts, 'goalLedgerItems', 'goal_ledger_item_count' in job ? job.goal_ledger_item_count : undefined);
+    addFiniteCount(counts, 'blockedGoalLedgerItems', 'blocked_goal_ledger_item_count' in job ? job.blocked_goal_ledger_item_count : undefined);
+    addFiniteCount(counts, 'securityIssuesBlocked', 'security_issue_blocked_count' in job ? job.security_issue_blocked_count : undefined);
+    addFiniteCount(counts, 'goalVerifiers', 'goal_verifier_count' in job ? job.goal_verifier_count : undefined);
+    addFiniteCount(counts, 'failedVerifiers', 'failed_verifier_count' in job ? job.failed_verifier_count : undefined);
+    addFiniteCount(counts, 'unavailableVerifiers', 'unavailable_verifier_count' in job ? job.unavailable_verifier_count : undefined);
+    addFiniteCount(counts, 'goalReviewGates', 'goal_review_gate_count' in job ? job.goal_review_gate_count : undefined);
+    addFiniteCount(counts, 'failedRequiredReviewGates', 'failed_required_review_gate_count' in job ? job.failed_required_review_gate_count : undefined);
+    return {
+        jobId: boundPublicText(job.job_id, 80),
+        kind: boundPublicText(job.kind, 40),
+        status: boundPublicText(job.status, 40),
+        publicSummary: boundPublicText(job.summary ?? 'No public summary recorded.', PUBLIC_TEXT_MAX_CHARS),
+        createdAt: boundPublicText(job.created_at, 80),
+        updatedAt: boundPublicText(job.updated_at, 80),
+        ...(job.next_run_at ? { nextRunAt: boundPublicText(job.next_run_at, 80) } : {}),
+        ...(job.reason_code ? { reasonCode: boundPublicText(job.reason_code, 80) } : {}),
+        ...(Object.keys(counts).length > 0 ? { counts } : {}),
+        ...(currentStage ? { currentStage } : {}),
+        ...(stageHistory.length > 0 ? { stageHistory } : {}),
+        ...(iteration !== undefined ? { iteration } : {}),
+        ...extractHeadlessJobMetadata(metadata),
+        publicSafe: true,
+    };
+}
+function toPortalSyncSnapshotSummary(input) {
+    const counts = {
+        jobs: input.counts.jobs ?? input.jobCount,
+        dueJobs: input.counts.dueJobs ?? input.dueJobCount,
+        outboxPending: input.outboxPending,
+        redactions: input.redactions.length,
+    };
+    const hashInput = stableStringify({ generatedAt: input.generatedAt, counts });
+    return {
+        syncVersion: CONTINUITY_CLIENT_PORTAL_SYNC_ENVELOPE_VERSION,
+        transportKind: 'client_snapshot',
+        snapshotId: `snapshot-${safeId(sha256Hex(hashInput).replace(/^sha256:/, '').slice(0, 16))}`,
+        generatedAt: boundPublicText(input.generatedAt, 80),
+        publicSummary: `Client snapshot contains ${counts.jobs} public jobs and ${counts.outboxPending} pending outbox records.`,
+        counts,
+        hashes: { snapshot: sha256Hex(hashInput) },
+        redactionEvidence: input.redactions.slice(0, 20),
+        publicSafe: true,
+    };
+}
+function extractHeadlessJobMetadata(metadata) {
+    const runtimeSource = metadata.runtimeSource === 'explicit'
+        || metadata.runtimeSource === 'origin'
+        || metadata.runtimeSource === 'default'
+        || metadata.runtimeSource === 'fallback'
+        || metadata.runtimeSource === 'unspecified'
+        ? metadata.runtimeSource
+        : undefined;
+    return {
+        ...safeMetadataString(metadata, 'runtimeId', 80),
+        ...safeMetadataString(metadata, 'modelId', 120),
+        ...(runtimeSource ? { runtimeSource } : {}),
+        ...safeMetadataString(metadata, 'headlessRuntime', 80),
+        ...safeMetadataString(metadata, 'headlessModel', 120),
+        ...safeMetadataString(metadata, 'headlessRuntimeReasonCode', 100),
+        ...safeMetadataString(metadata, 'originRuntime', 80),
+        ...safeMetadataString(metadata, 'originModel', 120),
+        ...safeMetadataString(metadata, 'workspaceId', 120),
+        ...safeMetadataString(metadata, 'workspaceLabel', 80),
+        ...safeMetadataString(metadata, 'projectId', 120),
+        ...safeMetadataString(metadata, 'projectLabel', 80),
+    };
+}
+function projectIdentityMetadata(identity) {
+    return identity
+        ? {
+            workspaceId: identity.workspaceId,
+            workspaceLabel: identity.workspaceLabel,
+            projectId: identity.projectId,
+            projectLabel: identity.projectLabel,
+        }
+        : {};
+}
+function safeMetadataString(metadata, key, maxChars) {
+    const value = metadata[key];
+    return typeof value === 'string'
+        ? { [key]: boundPublicText(value, maxChars) }
+        : {};
+}
+function toProcessingSummaryRef(row) {
+    const metadata = normalizeSnapshotRecord(parsePublicMetadata(row.metadata_json));
+    const goalId = typeof metadata.goalId === 'string' ? boundPublicText(metadata.goalId, 100) : undefined;
+    const loopId = typeof metadata.loopId === 'string' ? boundPublicText(metadata.loopId, 100) : undefined;
+    return {
+        eventId: boundPublicText(row.event_id, 120),
+        jobId: boundPublicText(row.job_id, 100),
+        ...(goalId ? { goalId } : {}),
+        ...(loopId ? { loopId } : {}),
+        executionId: boundPublicText(row.execution_id, 120),
+        publicSummary: boundPublicText(row.public_summary, PUBLIC_TEXT_MAX_CHARS),
+        ...(row.reason_code ? { reasonCode: boundPublicText(row.reason_code, 80) } : {}),
+        createdAt: boundPublicText(row.created_at, 80),
+        cursor: boundPublicText(row.cursor, 260),
+        ...(Object.keys(metadata).length > 0 ? { metadata } : {}),
+        publicSafe: true,
+    };
+}
+function toHeadlessExecutionAttemptRef(row) {
+    return {
+        attemptId: boundPublicText(row.attempt_id, 120),
+        executionId: boundPublicText(row.execution_id, 120),
+        jobId: boundPublicText(row.job_id, 100),
+        status: boundPublicText(row.status, 40),
+        ...(row.reason_code ? { reasonCode: boundPublicText(row.reason_code, 80) } : {}),
+        ...(row.runtime_id ? { runtimeId: boundPublicText(row.runtime_id, 80) } : {}),
+        ...(row.model_id ? { modelId: boundPublicText(row.model_id, 120) } : {}),
+        retryCount: Math.max(0, Math.floor(row.retry_count)),
+        attemptCount: Math.max(0, Math.floor(row.attempt_count)),
+        maxAttempts: Math.max(1, Math.floor(row.max_attempts)),
+        queuePriority: Math.max(-100, Math.min(100, Math.floor(row.queue_priority))),
+        queueScope: row.queue_scope === 'workspace' ? 'workspace' : 'project',
+        ...(typeof row.duration_ms === 'number' && Number.isFinite(row.duration_ms) ? { durationMs: Math.max(0, Math.floor(row.duration_ms)) } : {}),
+        ...optionalPublicRecord('counts', parsePublicMetadata(row.counts_json)),
+        ...optionalPublicRecord('hashes', parsePublicMetadata(row.hashes_json)),
+        ...optionalPublicArray('redactionSummary', row.redaction_summary_json),
+        ...(row.lease_id ? { leaseId: boundPublicText(row.lease_id, 120) } : {}),
+        ...(row.runner_id ? { runnerId: boundPublicText(row.runner_id, 120) } : {}),
+        ...(row.lease_expires_at ? { leaseExpiresAt: boundPublicText(row.lease_expires_at, 80) } : {}),
+        ...(row.heartbeat_at ? { heartbeatAt: boundPublicText(row.heartbeat_at, 80) } : {}),
+        publicSummary: boundPublicText(row.public_summary ?? 'No public headless execution summary recorded.', PUBLIC_TEXT_MAX_CHARS),
+        enqueuedAt: boundPublicText(row.enqueued_at, 80),
+        ...(row.not_before_at ? { notBeforeAt: boundPublicText(row.not_before_at, 80) } : {}),
+        ...(row.next_retry_at ? { nextRetryAt: boundPublicText(row.next_retry_at, 80) } : {}),
+        ...(row.dead_lettered_at ? { deadLetteredAt: boundPublicText(row.dead_lettered_at, 80) } : {}),
+        ...(row.dead_letter_reason_code ? { deadLetterReasonCode: boundPublicText(row.dead_letter_reason_code, 80) } : {}),
+        publicSafe: true,
+    };
+}
+function addFiniteCount(counts, key, value) {
+    if (typeof value === 'number' && Number.isFinite(value) && value > 0) {
+        counts[key] = Math.floor(value);
+    }
+}
+function extractPublicJobCounts(metadataJson, iteration) {
+    const counts = {};
+    if (metadataJson) {
+        try {
+            const parsed = JSON.parse(metadataJson);
+            const metadataCounts = isRecord(parsed) && isRecord(parsed.counts) ? parsed.counts : undefined;
+            if (metadataCounts) {
+                for (const [key, value] of Object.entries(metadataCounts)) {
+                    if (typeof value === 'number' && Number.isFinite(value))
+                        counts[key] = Math.max(0, Math.floor(value));
+                }
+            }
+        }
+        catch {
+            // Corrupt metadata JSON is already guarded by SQLite json_valid; ignore any
+            // unexpected parse failure so snapshots remain bounded and public-safe.
+        }
+    }
+    if (typeof iteration === 'number' && Number.isFinite(iteration))
+        counts.iteration = Math.max(0, Math.floor(iteration));
+    return counts;
+}
+function toCompactContextSnapshot(rows) {
+    const summaries = rows.map(toCompactContextRef).filter((item) => Boolean(item));
+    return {
+        preferredSource: summaries.length > 0 ? 'compact_summary' : 'recent_events',
+        summaries,
+        publicSafe: true,
+    };
+}
+function toCompactContextRef(row) {
+    const metadata = parsePublicMetadata(row.metadata_json);
+    const hashes = isRecord(metadata.hashes) ? metadata.hashes : {};
+    const summaryHash = typeof hashes.summary === 'string' ? hashes.summary : row.sha256 ?? undefined;
+    const reasonCode = typeof metadata.reasonCode === 'string' ? boundPublicText(metadata.reasonCode, 80) : undefined;
+    return {
+        snapshotId: boundPublicText(row.snapshot_id, 120),
+        ...(row.job_id ? { jobId: boundPublicText(row.job_id, 100) } : {}),
+        ...(row.operation_id ? { operationId: boundPublicText(row.operation_id, 120) } : {}),
+        capturedAt: boundPublicText(row.captured_at, 80),
+        publicSummary: boundPublicText(row.summary ?? 'Context compacted with public-safe refs.', COMPACTION_SUMMARY_MAX_CHARS),
+        ...(summaryHash ? { summaryHash: boundPublicText(summaryHash, 120) } : {}),
+        ...(row.relative_path ? { relativePath: boundPublicText(row.relative_path, 240) } : {}),
+        retainedRefs: normalizeSnapshotRefArray(metadata.relativePaths),
+        artifactRefs: normalizeSnapshotUnknownArray(metadata.artifactRefs),
+        evidenceRefs: normalizeSnapshotUnknownArray(metadata.evidenceRefs),
+        ...(isRecord(metadata.checkpoint) ? { checkpoint: normalizeSnapshotRecord(metadata.checkpoint) } : {}),
+        ...(reasonCode ? { reasonCode } : {}),
+        publicSafe: true,
+    };
+}
+function parsePublicMetadata(metadataJson) {
+    if (!metadataJson)
+        return {};
+    try {
+        const parsed = JSON.parse(metadataJson);
+        return isRecord(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function optionalPublicRecord(key, value) {
+    const normalized = normalizeSnapshotRecord(value);
+    return Object.keys(normalized).length > 0 ? { [key]: normalized } : {};
+}
+function optionalPublicArray(key, json) {
+    if (!json)
+        return {};
+    try {
+        const parsed = JSON.parse(json);
+        const normalized = normalizeSnapshotUnknownArray(parsed);
+        return normalized.length > 0 ? { [key]: normalized } : {};
+    }
+    catch {
+        return {};
+    }
+}
+function normalizeSnapshotRefArray(value) {
+    return Array.isArray(value)
+        ? value.filter((item) => typeof item === 'string' && item.length > 0).map((item) => boundPublicText(item, 240)).slice(0, COMPACTION_RELATIVE_PATH_LIMIT)
+        : [];
+}
+function normalizeSnapshotUnknownArray(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.map(normalizeSnapshotValue).filter((item) => item !== undefined).slice(0, COMPACTION_RELATIVE_PATH_LIMIT);
+}
+function normalizeSnapshotRecord(value) {
+    const output = {};
+    for (const [key, child] of Object.entries(value).slice(0, 20)) {
+        if (UNSAFE_METADATA_KEY_PATTERN.test(key))
+            continue;
+        const normalized = normalizeSnapshotValue(child);
+        if (normalized !== undefined)
+            output[boundPublicText(key, 80)] = normalized;
+    }
+    return output;
+}
+function normalizeSnapshotValue(value) {
+    const reason = getUnsafeMetadataValueReason(value);
+    if (reason)
+        return undefined;
+    if (typeof value === 'string')
+        return boundPublicText(value, 240);
+    if (typeof value === 'number' && Number.isFinite(value))
+        return Math.floor(value);
+    if (typeof value === 'boolean' || value === null)
+        return value;
+    if (Array.isArray(value))
+        return value.map(normalizeSnapshotValue).filter((item) => item !== undefined).slice(0, 20);
+    if (isRecord(value))
+        return normalizeSnapshotRecord(value);
+    return undefined;
+}
+function normalizeStateUpdate(update) {
+    if (!isRecord(update))
+        return [];
+    if (Array.isArray(update.operationLogs))
+        return update.operationLogs.filter(isRecord);
+    if (isRecord(update.operationLog))
+        return [update.operationLog];
+    if (Array.isArray(update.operations))
+        return [update];
+    return [];
+}
+function planOperationLog(log) {
+    const reasonCodes = [];
+    const redactions = [];
+    const skippedOperations = [];
+    const ignoredOperationIds = [];
+    const accepted = [];
+    const seen = new Map();
+    if (log.schemaVersion !== CONTINUITY_CLIENT_SCHEMA_VERSION) {
+        throw new ContinuityClientStateStoreError('Invalid continuity operation log schema version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
+    }
+    if (log.contractVersion !== CONTINUITY_CLIENT_CONTRACT_VERSION) {
+        throw new ContinuityClientStateStoreError('Invalid continuity operation log contract version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_CONTRACT_VERSION], { mutationBlocked: true });
+    }
+    if (log.publicSafe !== true) {
+        throw new ContinuityClientStateStoreError('Continuity operation log is not marked public-safe.', [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { mutationBlocked: true });
+    }
+    const logMetadata = sanitizeMetadataStrict(optionalRecord(log, 'metadata'), 'log.metadata');
+    if (!Array.isArray(log.operations))
+        return { operations: [], skippedOperations, ignoredOperationIds, reasonCodes, redactions, logMetadata };
+    for (const rawOperation of [...log.operations].filter(isRecord).sort(compareOperationOrder)) {
+        const operation = normalizeOperation(rawOperation);
+        const canonical = stableStringify(operation);
+        const duplicatePayload = seen.get(operation.operationId);
+        if (duplicatePayload !== undefined) {
+            if (duplicatePayload === canonical) {
+                ignoredOperationIds.push(operation.operationId);
+                reasonCodes.push(CONTINUITY_CLIENT_REASON_CODES.IDEMPOTENCY_REPLAY);
+                continue;
+            }
+            redactions.push({
+                field: 'operationId',
+                reason: 'unknown_required_operation',
+                evidence: 'operation-denied',
+                publicSafe: true,
+            });
+            throw new ContinuityClientStateStoreError('Duplicate continuity operation ID with conflicting payload.', [CONTINUITY_CLIENT_REASON_CODES.DUPLICATE_OPERATION_ID], { redactions, mutationBlocked: true });
+        }
+        seen.set(operation.operationId, canonical);
+        sanitizeMetadataStrict(operation.metadata, 'operation.metadata');
+        if (!KNOWN_OPERATION_TYPES.has(operation.type)) {
+            const required = rawOperation.required === true;
+            if (rawOperation.forwardCompatible === true && !required) {
+                skippedOperations.push(operation);
+                ignoredOperationIds.push(operation.operationId);
+                reasonCodes.push(CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_IGNORED);
+                continue;
+            }
+            redactions.push({
+                field: operation.type,
+                reason: 'unknown_required_operation',
+                evidence: 'operation-denied',
+                publicSafe: true,
+            });
+            throw new ContinuityClientStateStoreError(`Unknown required continuity operation ${operation.type}.`, [CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_REQUIRED], { redactions, mutationBlocked: true });
+        }
+        accepted.push(operation);
+    }
+    return { operations: accepted, skippedOperations, ignoredOperationIds, reasonCodes, redactions, logMetadata };
+}
+function normalizeOperation(raw) {
+    if (raw.schemaVersion !== CONTINUITY_CLIENT_SCHEMA_VERSION) {
+        throw new ContinuityClientStateStoreError('Invalid continuity operation schema version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
+    }
+    if (raw.contractVersion !== CONTINUITY_CLIENT_CONTRACT_VERSION) {
+        throw new ContinuityClientStateStoreError('Invalid continuity operation contract version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_CONTRACT_VERSION], { mutationBlocked: true });
+    }
+    if (raw.publicSafe !== true) {
+        throw new ContinuityClientStateStoreError('Continuity operation is not marked public-safe.', [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { mutationBlocked: true });
+    }
+    const type = requiredString(raw, 'type');
+    const operationId = requiredString(raw, 'operationId');
+    const jobId = requiredString(raw, 'jobId');
+    const sequence = requiredNumber(raw, 'sequence');
+    const createdAt = requiredString(raw, 'createdAt');
+    return {
+        ...raw,
+        type,
+        operationId,
+        jobId,
+        schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
+        contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
+        sequence,
+        createdAt,
+        idempotencyKey: optionalString(raw, 'idempotencyKey'),
+        metadata: optionalRecord(raw, 'metadata'),
+        publicSafe: true,
+    };
+}
+function sanitizeMetadataStrict(input, path) {
+    if (!input)
+        return {};
+    const metadata = {};
+    const redactions = [];
+    for (const [key, value] of Object.entries(input)) {
+        const keyReason = getUnsafeMetadataKeyReason(key);
+        const valueReason = getUnsafeMetadataValueReason(value);
+        const reason = keyReason ?? valueReason;
+        if (reason) {
+            redactions.push({
+                field: `${path}.${key}`,
+                reason,
+                evidence: keyReason ? 'key-denied' : 'value-denied',
+                publicSafe: true,
+            });
+            continue;
+        }
+        metadata[key] = value;
+    }
+    if (redactions.length > 0) {
+        throw new ContinuityClientStateStoreError(`Continuity metadata rejected unsafe public fields at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { redactions, mutationBlocked: true });
+    }
+    return metadata;
+}
+function getUnsafeMetadataKeyReason(key) {
+    if (!ALLOWED_METADATA_KEYS.has(key) || UNSAFE_METADATA_KEY_PATTERN.test(key))
+        return 'unsafe_key';
+    return null;
+}
+function getUnsafeMetadataValueReason(value) {
+    if (typeof value === 'string') {
+        if (ABSOLUTE_URL_VALUE_PATTERN.test(value))
+            return 'private_url';
+        if (LOCAL_ABSOLUTE_PATH_VALUE_PATTERN.test(value))
+            return 'local_absolute_path';
+        if (SECRET_VALUE_PATTERN.test(value))
+            return 'secret';
+        if (PROMPT_VALUE_PATTERN.test(value))
+            return 'prompt_body';
+        if (RAW_LOG_VALUE_PATTERN.test(value))
+            return 'raw_log';
+        if (PROTECTED_VALUE_PATTERN.test(value))
+            return 'protected_field';
+        return null;
+    }
+    if (value === null || typeof value === 'number' || typeof value === 'boolean')
+        return null;
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            const reason = getUnsafeMetadataValueReason(item);
+            if (reason)
+                return reason;
+        }
+        return null;
+    }
+    if (isRecord(value)) {
+        for (const [key, child] of Object.entries(value)) {
+            if (UNSAFE_METADATA_KEY_PATTERN.test(key))
+                return 'unsafe_key';
+            const reason = getUnsafeMetadataValueReason(child);
+            if (reason)
+                return reason;
+        }
+        return null;
+    }
+    return 'unsafe_key';
+}
+function collectReceiptRedactions(receipts) {
+    const redactions = [];
+    for (const receipt of receipts) {
+        if (!receipt.metadata_json)
+            continue;
+        try {
+            const metadata = JSON.parse(receipt.metadata_json);
+            const evidence = metadata.redactionEvidence;
+            if (!Array.isArray(evidence))
+                continue;
+            for (const item of evidence) {
+                if (!isRecord(item))
+                    continue;
+                if (typeof item.field !== 'string' || typeof item.reason !== 'string' || typeof item.evidence !== 'string')
+                    continue;
+                redactions.push({
+                    field: boundPublicText(item.field, 120),
+                    reason: item.reason,
+                    evidence: item.evidence,
+                    publicSafe: true,
+                });
+            }
+        }
+        catch {
+            // Ignore malformed metadata; SQLite json_valid already guards new rows.
+        }
+    }
+    return redactions;
+}
+function compareOperationOrder(left, right) {
+    const leftSequence = typeof left.sequence === 'number' ? left.sequence : 0;
+    const rightSequence = typeof right.sequence === 'number' ? right.sequence : 0;
+    if (leftSequence !== rightSequence)
+        return leftSequence - rightSequence;
+    const createdAt = String(left.createdAt ?? '').localeCompare(String(right.createdAt ?? ''));
+    if (createdAt !== 0)
+        return createdAt;
+    return String(left.operationId ?? '').localeCompare(String(right.operationId ?? ''));
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function requiredRecord(input, key) {
+    const value = input[key];
+    if (!isRecord(value)) {
+        throw new ContinuityClientStateStoreError(`Continuity operation missing object field ${key}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
+    }
+    return value;
+}
+function optionalRecord(input, key) {
+    const value = input[key];
+    return isRecord(value) ? value : undefined;
+}
+function requiredString(input, key) {
+    const value = input[key];
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new ContinuityClientStateStoreError(`Continuity operation missing string field ${key}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
+    }
+    return value;
+}
+function optionalString(input, key) {
+    const value = input[key];
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function requiredNumber(input, key) {
+    const value = input[key];
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        throw new ContinuityClientStateStoreError(`Continuity operation missing numeric field ${key}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
+    }
+    return value;
+}
+function optionalNumber(input, key) {
+    const value = input[key];
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+function optionalBoolean(input, key) {
+    const value = input[key];
+    return typeof value === 'boolean' ? value : undefined;
+}
+function arrayOfStrings(value) {
+    return Array.isArray(value) ? value.filter((item) => typeof item === 'string' && item.length > 0) : [];
+}
+function arrayOfRecords(value) {
+    return Array.isArray(value) ? value.filter(isRecord) : [];
+}
+function normalizeCompactionSummary(value) {
+    return normalizeSafePublicText(value, COMPACTION_SUMMARY_MAX_CHARS, 'compact_context.publicSummary');
+}
+function normalizeSafePublicText(value, maxChars, path) {
+    const trimmed = value.trim();
+    if (!trimmed) {
+        throw new ContinuityClientStateStoreError(`Continuity compaction missing public text at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
+    }
+    const reason = getUnsafeMetadataValueReason(trimmed);
+    if (reason) {
+        throw new ContinuityClientStateStoreError(`Continuity compaction rejected unsafe public text at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { redactions: [{ field: path, reason, evidence: 'value-denied', publicSafe: true }], mutationBlocked: true });
+    }
+    return trimmed.length <= maxChars ? trimmed : `${trimmed.slice(0, maxChars)}…[TRUNCATED:${trimmed.length - maxChars}]`;
+}
+function normalizeCompactionHash(value, path) {
+    return normalizeSafePublicText(value, 120, path);
+}
+function normalizeCompactionPaths(value, path, limit) {
+    return unique(arrayOfStrings(value).map((item, index) => normalizeRepoRelativeRef(item, `${path}[${index}]`))).slice(0, limit);
+}
+function normalizeRepoRelativeRef(value, path) {
+    const normalized = normalizeSafePublicText(value, 240, path).replace(/\\/g, '/');
+    const segments = normalized.split('/').filter(Boolean);
+    const absoluteWindows = /^[A-Za-z]:\//.test(normalized);
+    if (normalized.startsWith('/') ||
+        normalized.startsWith('~') ||
+        normalized.includes('://') ||
+        absoluteWindows ||
+        segments.includes('..')) {
+        throw new ContinuityClientStateStoreError(`Continuity compaction rejected non-relative ref at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { redactions: [{ field: path, reason: 'private_url', evidence: 'value-denied', publicSafe: true }], mutationBlocked: true });
+    }
+    return normalized;
+}
+function normalizeCompactionArtifactRefs(operation) {
+    const refs = [];
+    const summaryRef = optionalRecord(operation, 'summaryRef');
+    if (summaryRef)
+        refs.push(normalizeCompactionArtifactRef(summaryRef, 'compact_context.summaryRef', 'context_summary'));
+    for (const [index, ref] of arrayOfRecords(operation.artifactRefs).entries()) {
+        refs.push(normalizeCompactionArtifactRef(ref, `compact_context.artifactRefs[${index}]`));
+    }
+    const seen = new Set();
+    return refs.filter((ref) => {
+        const key = `${ref.kind}:${ref.relativePath}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    }).slice(0, COMPACTION_ARTIFACT_REF_LIMIT);
+}
+function normalizeCompactionArtifactRef(input, path, fallbackKind = 'context_summary') {
+    const kind = normalizeSafePublicText(optionalString(input, 'kind') ?? fallbackKind, 60, `${path}.kind`);
+    const relativePath = normalizeRepoRelativeRef(requiredString(input, 'relativePath'), `${path}.relativePath`);
+    const sha = optionalString(input, 'sha256');
+    const publicSummary = optionalString(input, 'publicSummary');
+    return {
+        kind,
+        relativePath,
+        ...(sha ? { sha256: normalizeCompactionHash(sha, `${path}.sha256`) } : {}),
+        ...(publicSummary ? { publicSummary: normalizeSafePublicText(publicSummary, PUBLIC_TEXT_MAX_CHARS, `${path}.publicSummary`) } : {}),
+        publicSafe: true,
+    };
+}
+function normalizeCompactionEvidenceRefs(operation) {
+    return arrayOfRecords(operation.evidenceIndex).map((ref, index) => {
+        const path = `compact_context.evidenceIndex[${index}]`;
+        const relativePath = normalizeRepoRelativeRef(requiredString(ref, 'relativePath'), `${path}.relativePath`);
+        const refId = optionalString(ref, 'refId') ?? `evidence-${safeId(relativePath)}`;
+        const reasonCode = optionalString(ref, 'reasonCode') ?? optionalString(operation, 'reasonCode') ?? 'context-compacted';
+        const sha = optionalString(ref, 'sha256');
+        const publicSummary = optionalString(ref, 'publicSummary');
+        return {
+            refId: normalizeSafePublicText(refId, 120, `${path}.refId`),
+            relativePath,
+            reasonCode: normalizeSafePublicText(reasonCode, 80, `${path}.reasonCode`),
+            ...(sha ? { sha256: normalizeCompactionHash(sha, `${path}.sha256`) } : {}),
+            ...(publicSummary ? { publicSummary: normalizeSafePublicText(publicSummary, PUBLIC_TEXT_MAX_CHARS, `${path}.publicSummary`) } : {}),
+            publicSafe: true,
+        };
+    }).slice(0, COMPACTION_EVIDENCE_REF_LIMIT);
+}
+function normalizeCompactionCheckpoint(operation, retainedRefs, artifactRefs, evidenceRefs) {
+    const checkpoint = optionalRecord(operation, 'checkpoint') ?? {};
+    const checkpointId = optionalString(checkpoint, 'checkpointId') ?? `checkpoint-${safeId(operation.operationId)}`;
+    const capturedAt = optionalString(checkpoint, 'capturedAt') ?? operation.createdAt;
+    const normalized = {
+        checkpointId: normalizeSafePublicText(checkpointId, 120, 'compact_context.checkpoint.checkpointId'),
+        capturedAt: normalizeSafePublicText(capturedAt, 80, 'compact_context.checkpoint.capturedAt'),
+        retainedRefCount: retainedRefs.length,
+        artifactRefCount: artifactRefs.length,
+        evidenceRefCount: evidenceRefs.length,
+        publicSafe: true,
+    };
+    for (const key of ['eventCursor', 'receiptCursor']) {
+        const value = optionalString(checkpoint, key);
+        if (value)
+            normalized[key] = normalizeSafePublicText(value, 120, `compact_context.checkpoint.${key}`);
+    }
+    for (const key of ['recentEventCount', 'recentReceiptCount']) {
+        const value = optionalNumber(checkpoint, key);
+        if (value !== undefined)
+            normalized[key] = Math.max(0, Math.floor(value));
+    }
+    return normalized;
+}
+function sha256Hex(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+function unique(values) {
+    return Array.from(new Set(values));
+}
+function safeId(value) {
+    return value.replace(/[^a-z0-9_.:-]+/gi, '-').slice(0, 120);
+}
+function boundPublicText(value, maxChars) {
+    const redacted = redactPublicText(value);
+    return redacted.length <= maxChars ? redacted : `${redacted.slice(0, maxChars)}…[TRUNCATED:${redacted.length - maxChars}]`;
+}
+function redactPublicText(value) {
+    if (ABSOLUTE_URL_VALUE_PATTERN.test(value) ||
+        SECRET_VALUE_PATTERN.test(value) ||
+        RAW_LOG_VALUE_PATTERN.test(value) ||
+        PROMPT_VALUE_PATTERN.test(value) ||
+        PROTECTED_VALUE_PATTERN.test(value)) {
+        return '[REDACTED]';
+    }
+    return value;
+}
+function stableStringify(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(',')}]`;
+    if (isRecord(value)) {
+        return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${stableStringify(value[key])}`).join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+function mapContinuityError(error, fallbackMessage) {
+    if (error instanceof ContinuityClientStateStoreError)
+        return error;
+    if (error instanceof ContinuitySqliteStoreError) {
+        return new ContinuityClientStateStoreError(error.message, [error.reasonCode], { mutationBlocked: error.mutationBlocked, cause: error });
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    return new ContinuityClientStateStoreError(`${fallbackMessage} ${message}`, [CONTINUITY_CLIENT_REASON_CODES.SQLITE_MUTATION_FAILED], { cause: error });
+}