@ornexus/neocortex 4.60.71 → 4.60.73

package/packages/client/dist/runner/cli.js

@@ -1,19 +1,1364 @@
-import{createHash as W,randomBytes as Ee}from"node:crypto";import{resolve as G}from"node:path";import{CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE as X,ContinuitySqliteStoreError as Ie,openContinuitySqliteStore as Z}from"../continuity/sqlite-store.js";import{invoke as ye}from"../commands/invoke.js";import{checkRunnerBinaryTrust as P}from"./binary.js";import{runRunnerSchedulerCommand as ee}from"./scheduler.js";import{runYoloExecutionPhase as Se}from"./headless/run-yolo.js";import{runYoloopExecutionPhase as Re}from"./headless/run-yoloop.js";import{DEFAULT_RUNNER_HEARTBEAT_BACKOFF_MS as _e,DEFAULT_RUNNER_HEARTBEAT_INTERVAL_MS as ke,DEFAULT_RUNNER_HEARTBEAT_JITTER_RATIO as ge,DEFAULT_RUNNER_HEARTBEAT_TIMEOUT_MS as Ae,runRunnerPortalHeartbeat as V,runRunnerPortalHeartbeatLoop as ve,runRunnerPortalSync as te,runRunnerPortalSyncLoop as we}from"./portal-sync-worker.js";import{RUNNER_BINARY_REASON_CODES as Tt,checkRunnerBinaryTrust as jt,runnerTrustRelativePath as Nt}from"./binary.js";import{LOCAL_JOBS_CONSOLE_REASON_CODES as Dt,createLocalJobConsoleServer as Ot,isLocalJobsConsoleArgs as Mt,localJobConsoleSocketPath as xt,parseLocalJobsConsoleArgs as Ft,runLocalJobsConsoleCommand as Ht}from"./local-console.js";const d=Object.freeze({OK:"continuity-ok",LEASE_CONFLICT:"lease-conflict",LEASE_EXPIRED:"lease-expired",RUNNER_BINARY_UNTRUSTED:"runner-binary-untrusted",RUNNER_DIRECTIVE_UNTRUSTED:"runner-directive-untrusted",RUNNER_SERVER_INVOKE_FAILED:"runner-server-invoke-failed",SQLITE_ADAPTER_UNAVAILABLE:"sqlite-adapter-unavailable",SQLITE_INTEGRITY_FAILED:"sqlite-integrity-failed",BACKOFF_SCHEDULED:"backoff-scheduled",MISSED_RUN_CATCHUP:"missed-run-catchup",HEADLESS_RUNTIME_UNRESOLVED:"headless-runtime-unresolved",HEADLESS_RUNTIME_UNTRUSTED:"headless-runtime-untrusted",HEADLESS_ADAPTER_UNAVAILABLE:"headless-adapter-unavailable",HEADLESS_RUNTIME_AUTH_REQUIRED:"headless-runtime-auth-required",HEADLESS_EXECUTION_BACKOFF:"headless-execution-backoff",HEADLESS_EXECUTION_TIMEOUT:"headless-execution-timeout",HEADLESS_EXECUTION_FAILED:"headless-execution-failed",HEADLESS_RECEIPT_REDACTED:"headless-receipt-redacted",AUTONOMOUS_GOVERNANCE_BYPASS_BLOCKED:"headless-directive-rejected"}),Le=300*1e3,Ce=30*1e3,Te=30*1e3,je=1,Ne=10,Ue=new Set(["append_event","append_receipt","update_job_status","schedule_next_tick","release_lease","noop"]),De=new Set(["goal-tick","loop-tick","jobs","runner"]),Oe=new Set(["accepted","applied","ignored","failed","deferred"]),Me=new Set(["draft","planned","active","running","waiting_external","waiting_human","backoff","paused","blocked","completed","aborted","cancelled"]),xe=/(raw[_-]?logs?|prompt(?:[_-]?(?:body|text))?|private[_-]?urls?|secret|token|password|protected(?:[_-]?(?:field|body|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|authorization|api[_-]?key|license[_-]?key)/i,q=/(https?:\/\/\S+|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?log|transcript|stack trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH))/i,re=new Set([d.HEADLESS_RUNTIME_UNRESOLVED,d.HEADLESS_RUNTIME_UNTRUSTED,"headless-model-rejected","headless-directive-rejected","headless-prompt-rejected","headless-yoloop-metadata-invalid","headless-yoloop-isolation-violation"]),oe=new Set([d.HEADLESS_ADAPTER_UNAVAILABLE]),ae=new Set([d.HEADLESS_RUNTIME_AUTH_REQUIRED]),se=new Set([d.HEADLESS_EXECUTION_BACKOFF]),ne=new Set([d.HEADLESS_EXECUTION_TIMEOUT]),ce=new Set([d.HEADLESS_EXECUTION_FAILED]);async function Fe(e){const t=await ye({args:e.args,projectRoot:e.projectRoot,format:"json",platformTarget:"runner",serverUrl:e.serverUrl,strictReadOnly:e.strictReadOnly});return{success:t.success,instructions:t.instructions,metadata:t.metadata,error:t.error,exitCode:t.exitCode}}async function He(e={}){const t=G(e.projectRoot??process.cwd()),r=Y(e.runnerId??nt(t)),o=e.now??(()=>new Date().toISOString()),a=F(e.dueJobLimit??je,1,Ne),s=F(e.leaseMs??Le,1e3,3600*1e3),l=F(e.staleLeaseAfterMs??Ce,0,1440*60*1e3),c=e.idFactory??ct,I=he(e.processingSummarySource??(e.tickMode==="scheduled"?"scheduled_tick":"manual_tick")),y=[],R=[],i=[],u=[];if(e.trustCheck!==!1){const A=P(e.executablePath??process.argv[1]);if(!A.trusted)return{ok:!1,runnerId:r,processedJobCount:0,dueJobCount:0,recoveredLeaseIds:[],receipts:[],reasonCodes:[A.reasonCode??d.RUNNER_BINARY_UNTRUSTED],publicSafe:!0}}const m=await Z({projectRoot:t,adapter:e.adapter,adapterLoader:e.adapterLoader,now:o}),L=Be({options:e,projectRoot:t,runnerId:r,now:o});let C;try{const A=m.recoverStaleLeases({nowIso:o(),staleAfterMs:l,limit:a*2});if(A.recoveredLeaseIds.length>0){y.push(d.LEASE_EXPIRED);for(const E of A.recoveredLeaseIds);}const T=m.listDueJobs({nowIso:o(),limit:a});for(const E of T){const g=await Ve({store:m,job:E,projectRoot:t,runnerId:r,leaseMs:s,now:o,idFactory:c,processingSummarySource:I,serverUrl:e.serverUrl,serverInvoker:e.serverInvoker??Fe});R.push(g.receipt),i.push(...g.processingSummaries),g.executionMetadata&&u.push(g.executionMetadata),y.push(g.receipt.reasonCode)}const b=await Se({store:m,projectRoot:t,runnerId:r,now:o,metadata:u,adapterRegistry:e.headlessAdapterRegistry,adapterOptions:e.headlessAdapterOptions,runtimeDefaults:e.headlessRuntimeDefaults,runtimeFallback:e.headlessRuntimeFallback,limit:e.headlessExecutionLimit,leaseMs:e.headlessExecutionLeaseMs??s,staleLeaseAfterMs:e.headlessExecutionStaleLeaseAfterMs??l,timeoutMs:e.headlessExecutionTimeoutMs,backoffMs:e.headlessExecutionBackoffMs,maxAttempts:e.headlessExecutionMaxAttempts,queueCap:e.headlessExecutionQueueCap,idFactory:e.headlessExecutionIdFactory});y.push(...b.reasonCodes);const k=await Re({store:m,projectRoot:t,runnerId:r,now:o,metadata:u,adapterRegistry:e.headlessAdapterRegistry,adapterOptions:e.headlessAdapterOptions,runtimeDefaults:e.headlessRuntimeDefaults,runtimeFallback:e.headlessRuntimeFallback,limit:e.headlessExecutionLimit,leaseMs:e.headlessExecutionLeaseMs??s,staleLeaseAfterMs:e.headlessExecutionStaleLeaseAfterMs??l,timeoutMs:e.headlessExecutionTimeoutMs,backoffMs:e.headlessExecutionBackoffMs,maxAttempts:e.headlessExecutionMaxAttempts,queueCap:e.headlessExecutionQueueCap,maxIterations:e.headlessYoloopMaxIterations,maxDurationMs:e.headlessYoloopMaxDurationMs,localConcurrencyCap:e.headlessYoloopLocalConcurrencyCap,yoloopInvoker:e.headlessYoloopInvoker,serverUrl:e.serverUrl,idFactory:e.headlessExecutionIdFactory});y.push(...k.reasonCodes),C={ok:R.every(E=>E.outcome!=="failed")&&b.ok&&k.ok,runnerId:r,processedJobCount:R.length,dueJobCount:T.length,recoveredLeaseIds:A.recoveredLeaseIds,receipts:R,...i.length>0?{processingSummaries:i}:{},headlessExecution:b,headlessYoloopExecution:k,reasonCodes:J(y.length>0?y:[d.OK]),publicSafe:!0}}finally{await L.stop(),m.close()}if(!C)throw new Error("runner-tick-failed");return await Pe(C,{options:e,projectRoot:t,runnerId:r,localStateChanged:$e(C)})}async function Pe(e,t){const r=t.options.portalSync;if(r===!1||r===void 0)return e;if(!t.localStateChanged){const a=await V({...r,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.options.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.options.serverUrl,adapter:r.adapter??t.options.adapter,adapterLoader:r.adapterLoader??t.options.adapterLoader,now:r.now??t.options.now,mode:r.mode??(t.options.tickMode==="scheduled"?"scheduled":"background"),timeoutMs:r.heartbeatTimeoutMs??t.options.portalHeartbeatTimeoutMs});return{...e,portalHeartbeat:a}}const o=await te({...r,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.options.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.options.serverUrl,adapter:r.adapter??t.options.adapter,adapterLoader:r.adapterLoader??t.options.adapterLoader,now:r.now??t.options.now,mode:r.mode??(t.options.tickMode==="scheduled"?"scheduled":"background")});return{...e,portalSync:o}}function $e(e){return e.recoveredLeaseIds.length>0||e.receipts.length>0||(e.processingSummaries?.length??0)>0||(e.headlessExecution?.processedAttemptCount??0)>0||(e.headlessExecution?.recoveredAttemptIds.length??0)>0||(e.headlessYoloopExecution?.processedAttemptCount??0)>0||(e.headlessYoloopExecution?.recoveredAttemptIds.length??0)>0}function Be(e){const t=e.options.portalSync;if(t===!1||t===void 0)return{stop:async()=>{}};const r=F(e.options.portalHeartbeatIntervalMs??ke,0,1440*60*1e3);if(r<=0)return{stop:async()=>{}};const o=F(e.options.portalHeartbeatBackoffMs??_e,1e3,1800*1e3),a=pe(e.options.portalHeartbeatJitterRatio??ge,0,.5),s=F(e.options.portalHeartbeatTimeoutMs??t.heartbeatTimeoutMs??Ae,1e3,6e4);let l=!1,c,I,y=me(r,a,Math.random);const R=u=>new Promise(m=>{I=m,c=setTimeout(m,u),typeof c.unref=="function"&&c.unref()}),i=(async()=>{for(;!l&&(y>0&&await R(y),!l);){const u=await V({...t,projectRoot:t.projectRoot??e.projectRoot,runnerId:t.runnerId??e.runnerId,sessionId:t.sessionId??e.options.portalHeartbeatSessionId,serverUrl:t.serverUrl??e.options.serverUrl,adapter:t.adapter??e.options.adapter,adapterLoader:t.adapterLoader??e.options.adapterLoader,now:t.now??e.now,mode:t.mode??(e.options.tickMode==="scheduled"?"scheduled":"background"),timeoutMs:s}).catch(()=>({ok:!1,runnerId:e.runnerId,workspaceId:"workspace-default",workspaceLabel:"Workspace workspace-default",projectId:"project-default",projectLabel:"Project project-default",mode:e.options.tickMode==="scheduled"?"scheduled":"background",generatedAt:e.now(),serverAccessToLocalhost:!1,serverHeldStream:!1,localhostCallback:!1,posted:{heartbeat:!1},counts:{redactions:0},reasonCodes:[d.BACKOFF_SCHEDULED],redactionEvidence:[],publicSafe:!0}));y=me(u.ok?r:o,a,Math.random)}})();return{stop:async()=>{l=!0,c&&clearTimeout(c),I?.(),await i.catch(()=>{})}}}async function Ke(e={}){const t=G(e.projectRoot??process.cwd()),r=e.now??(()=>new Date().toISOString()),o=r(),a={};let s=null,l=null;try{l=await Z({projectRoot:t,adapter:e.adapter,adapterLoader:e.adapterLoader,now:r}),s=l.collectSnapshotRows({nowIso:o,jobLimit:10,staleLeaseLimit:10,receiptLimit:10,eventLimit:10,snapshotLimit:5});const f=String(l.pragmaValue("journal_mode")??"").toLowerCase();a["db-integrity"]=w("db-integrity","DB integrity","ok",[d.OK],"Continuity SQLite integrity check completed.",{jobs:_(s.counts,"jobs"),receipts:_(s.counts,"receipts"),events:_(s.counts,"events")}),a["sqlite-wal"]=w("sqlite-wal","SQLite WAL",f==="wal"?"ok":"blocked",f==="wal"?[d.OK]:[d.SQLITE_INTEGRITY_FAILED],f==="wal"?"SQLite journal mode is WAL.":"SQLite journal mode is not WAL."),a.migrations=w("migrations","Migrations",s.schemaVersion>=1?"ok":"blocked",s.schemaVersion>=1?[d.OK]:[d.SQLITE_INTEGRITY_FAILED],`Continuity schema version ${s.schemaVersion} is readable.`)}catch(f){const p=ue(f);a["db-integrity"]=w("db-integrity","DB integrity","blocked",[p],"Continuity SQLite could not be opened safely."),a["sqlite-wal"]=w("sqlite-wal","SQLite WAL","blocked",[p],"SQLite WAL could not be verified."),a.migrations=w("migrations","Migrations","blocked",[p],"Continuity migrations could not be verified.")}finally{if(l)try{l.close()}catch{}}const c=s?_(s.counts,"staleLeases"):0,I=s?_(s.counts,"staleHeadlessExecutionAttempts"):0;a.leases=w("leases","Lease health",c+I>0?"degraded":"ok",c+I>0?[d.LEASE_EXPIRED]:[d.OK],c+I>0?"Stale job leases or headless execution attempts are eligible for bounded recovery.":"No stale leases or headless attempts reported.",{staleLeases:c,staleHeadlessExecutionAttempts:I});const y=s?.headlessExecutionAttempts??[],R=J(y.map(f=>f.reason_code).filter(f=>typeof f=="string"&&f.length>0)),i=ft(y,R),u=new Set([d.HEADLESS_RUNTIME_UNRESOLVED,d.HEADLESS_RUNTIME_UNTRUSTED,d.HEADLESS_ADAPTER_UNAVAILABLE,d.HEADLESS_RUNTIME_AUTH_REQUIRED,"headless-model-rejected","headless-directive-rejected","headless-prompt-rejected","headless-yoloop-metadata-invalid","headless-yoloop-isolation-violation"]),m=s?_(s.counts,"headlessExecutionAttempts"):0,L=R.some(f=>u.has(f)),C=R.includes(d.HEADLESS_EXECUTION_BACKOFF)||y.some(f=>f.status==="backoff"),A=R.includes(d.HEADLESS_RECEIPT_REDACTED),T=i.authRequired>0,b=i.trustFailures>0||i.adapterUnavailable>0,k=I>0||C||A||i.timeout>0||i.genericFailed>0||i.redactions>0;a["headless-execution"]=w("headless-execution","Headless execution",L?"blocked":k?"degraded":m>0?"ok":"delegated",R.length>0?R:m>0?[d.OK]:[d.HEADLESS_RUNTIME_UNRESOLVED],L?T&&!b?"Complete local runtime login/auth setup before starting a new headless attempt; default retry/backoff is not scheduled for auth-required.":"Resolve public runtime/model trust, adapter availability or protected directive hard-stop reason codes before executing headless attempts.":k?"Headless attempts need bounded recovery, retry/backoff, timeout/generic failure follow-up or redaction review.":m>0?"Headless attempts are represented by public status, runtime/model and reason-code evidence.":"Headless resolver checks are delegated until durable headless work is queued.",{attempts:m,queuedBackoff:s?_(s.counts,"headlessQueuedAttempts"):0,running:s?_(s.counts,"headlessRunningAttempts"):0,staleHeadlessExecutionAttempts:I,trustFailures:i.trustFailures,adapterUnavailable:i.adapterUnavailable,authRequired:i.authRequired,retryBackoff:i.retryBackoff,timeout:i.timeout,genericFailed:i.genericFailed,redactions:i.redactions});const E=s?.outboxCounts??{},g=_(E,"failed")+_(E,"dead_letter");a.outbox=w("outbox","Outbox state",g>0?"degraded":"ok",g>0?[d.BACKOFF_SCHEDULED]:[d.OK],g>0?"Failed/dead-letter outbox entries can be retried with dedupe.":"Outbox has no failed/dead-letter entries.",{pending:_(E,"pending"),failed:_(E,"failed"),deadLetter:_(E,"dead_letter")}),a.metering=w("metering","Metering receipts","ok",[d.OK],"Metering evidence is represented by public job receipts and counts only.",{receipts:s?_(s.counts,"receipts"):0}),a["portal-sync"]=w("portal-sync","Portal sync",g>0?"degraded":"ok",g>0?[d.BACKOFF_SCHEDULED]:[d.OK],g>0?"Portal sync worker is enabled but has retryable outbox debt; outbound sync remains client-owned.":"Portal sync worker is enabled for outbound heartbeat, jobs sync, command polling and acknowledgement only.",{pending:_(E,"pending"),failed:_(E,"failed"),deadLetter:_(E,"dead_letter")});const N=e.trustCheck===!1?{trusted:!0,publicSafe:!0}:P(e.executablePath??process.argv[1]);a.runner=w("runner","Runner health",N.trusted?"ok":"blocked",N.trusted?[d.OK]:[N.reasonCode??d.RUNNER_BINARY_UNTRUSTED],N.trusted?"Runner binary trust check passed.":"Runner binary trust check failed.");try{const f=await ee({command:"doctor",projectRoot:t,executablePath:e.scheduler?.executablePath??e.executablePath??process.argv[1],platform:e.scheduler?.platform,env:e.scheduler?.env,dryRun:!0,intervalSeconds:e.scheduler?.intervalSeconds,strategy:e.scheduler?.strategy,allowCronFallback:e.scheduler?.allowCronFallback,trustCheck:e.scheduler?.trustCheck??e.trustCheck,uid:e.scheduler?.uid,commandAvailable:e.scheduler?.commandAvailable,commandRunner:e.scheduler?.commandRunner,trustChecker:e.scheduler?.trustChecker??P}),p=f.reasonCodes.includes(d.RUNNER_BINARY_UNTRUSTED)||f.reasonCodes.some(h=>h.startsWith("runner-binary-"))||f.reasonCodes.includes("scheduler-install-unsafe");a.scheduler=w("scheduler","Scheduler install",p?"blocked":f.ok?"ok":"degraded",f.reasonCodes,f.ok?"Scheduler doctor selected a user-scope strategy.":"Scheduler doctor found public guidance or degraded capability.",{manifests:f.manifestPaths.length,controlCommands:f.controlCommands.length,legacyEntries:f.legacyEntries.length})}catch(f){a.scheduler=w("scheduler","Scheduler install","degraded",["scheduler-command-failed"],x(f))}const v=a,H=J(Object.values(v).flatMap(f=>f.reasonCodes));return{ok:Object.values(v).every(f=>f.status!=="blocked"),generatedAt:o,checks:v,reasonCodes:H,publicSafe:!0}}function de(e){if(!e)return[];const t=[e.continuityRunnerDirectives,e.runnerDirectives,e.continuityDirectives];for(const r of t)if(Array.isArray(r))return r.filter(j).map(it).filter(lt);return[]}function Je(e,t){if(!j(e))throw new U("Directive is not a public record.");if(e.publicSafe!==!0)throw new U("Directive is not marked public-safe.");const r=typeof e.kind=="string"?e.kind:typeof e.type=="string"?e.type:"";if(!Ue.has(r))throw new U("Directive kind is not allowlisted.");const o=typeof e.commandClass=="string"?e.commandClass:"runner";if(!De.has(o))throw new U("Directive command class is not allowlisted.");if((typeof e.jobId=="string"?e.jobId:t)!==t)throw new U("Directive job ID does not match the leased job.");Q(e,"directive")}async function wt(e,t={}){const r=tt(e);if(r.command==="help")return process.stdout.write(`${ot}
-`),0;if(r.command==="version"){const o=P(t.executablePath??process.argv[1]);return process.stdout.write(`${o.packageVersion??"0.0.0"}
-`),o.trusted?0:1}if(r.command==="doctor")try{const o=await Ke({...t,projectRoot:r.projectRoot??t.projectRoot,executablePath:t.executablePath??process.argv[1],scheduler:{...t.scheduler,strategy:r.strategy??t.scheduler?.strategy,allowCronFallback:r.allowCronFallback??t.scheduler?.allowCronFallback,executablePath:t.scheduler?.executablePath??t.executablePath??process.argv[1]}});return process.stdout.write(JSON.stringify(o)+`
-`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"runner-doctor-failed",message:x(o)})+`
-`),1}if(le(r.command))try{const o=await ee({command:r.command,projectRoot:r.projectRoot??t.projectRoot,executablePath:t.scheduler?.executablePath??t.executablePath??process.argv[1],platform:t.scheduler?.platform,env:t.scheduler?.env,dryRun:r.dryRun??t.scheduler?.dryRun,intervalSeconds:r.intervalSeconds??t.scheduler?.intervalSeconds,strategy:r.strategy??t.scheduler?.strategy,allowCronFallback:r.allowCronFallback??t.scheduler?.allowCronFallback,trustCheck:t.scheduler?.trustCheck,uid:t.scheduler?.uid,commandAvailable:t.scheduler?.commandAvailable,commandRunner:t.scheduler?.commandRunner,trustChecker:t.scheduler?.trustChecker??P});return process.stdout.write(JSON.stringify(st(o))+`
-`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"scheduler-command-failed",message:x(o)})+`
-`),1}if(r.command==="heartbeat")try{if(r.loop){const a=await ve({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,mode:r.scheduled?"scheduled":"background",intervalMs:r.intervalMs??t.portalHeartbeatIntervalMs,maxRuns:r.maxRuns??t.portalSyncMaxRuns,backoffMs:r.heartbeatBackoffMs??t.portalHeartbeatBackoffMs,timeoutMs:r.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs,jitterRatio:r.heartbeatJitterRatio??t.portalHeartbeatJitterRatio});return process.stdout.write(JSON.stringify(a)+`
-`),a.ok?0:1}const o=await V({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,sessionId:r.sessionId??t.portalHeartbeatSessionId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,mode:r.scheduled?"scheduled":"manual",timeoutMs:r.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs});return process.stdout.write(JSON.stringify(o)+`
-`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"portal-heartbeat-failed",message:x(o)})+`
-`),1}if(r.command==="sync")try{if(r.loop){const a=await we({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,syncCursor:r.syncCursor,mode:r.scheduled?"scheduled":"background",intervalMs:r.intervalMs??t.portalSyncIntervalMs,maxRuns:r.maxRuns??t.portalSyncMaxRuns});return process.stdout.write(JSON.stringify(a)+`
-`),a.ok?0:1}const o=await te({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,serverUrl:r.serverUrl??t.serverUrl,workspaceId:r.workspaceId,workspaceLabel:r.workspaceLabel,projectId:r.projectId,projectLabel:r.projectLabel,syncCursor:r.syncCursor,mode:r.scheduled?"scheduled":"manual"});return process.stdout.write(JSON.stringify(o)+`
-`),o.ok?0:1}catch(o){return process.stderr.write(JSON.stringify({error_code:"portal-sync-failed",message:x(o)})+`
-`),1}if(r.command!=="tick")return process.stderr.write(JSON.stringify({error_code:"runner-command-unknown",message:"Unknown neocortex-runner command."})+`
-`),1;try{const o=await He({...t,projectRoot:r.projectRoot??t.projectRoot,runnerId:r.runnerId??t.runnerId,dueJobLimit:r.limit??t.dueJobLimit,leaseMs:r.leaseMs??t.leaseMs,staleLeaseAfterMs:r.staleLeaseAfterMs??t.staleLeaseAfterMs,headlessYoloopLocalConcurrencyCap:r.yoloopLocalCap??t.headlessYoloopLocalConcurrencyCap,tickMode:r.scheduled?"scheduled":t.tickMode,processingSummarySource:r.scheduled?"scheduled_tick":t.processingSummarySource,serverUrl:r.serverUrl??t.serverUrl,portalSync:rt(r,t,r.scheduled?"scheduled":"background")});return process.stdout.write(JSON.stringify(o)+`
-`),o.ok?0:1}catch(o){const a=ue(o);return process.stderr.write(JSON.stringify({error_code:a,message:x(o)})+`
-`),1}}async function Ve(e){const{store:t,job:r,projectRoot:o,runnerId:a,leaseMs:s,now:l,idFactory:c,processingSummarySource:I,serverUrl:y,serverInvoker:R}=e,i=r.job_id,u=c("tick",i),m=c("lease",i),L=l(),C=new Date(Date.parse(L)+s).toISOString();let A=!1,T=!1,b=d.OK,k="applied",E=[];if(!t.acquireLease({leaseId:m,jobId:i,runnerId:a,acquiredAt:L,expiresAt:C,operationId:`${u}:acquire`,idempotencyKey:`${u}:acquire`,metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"running",reasonCode:d.OK})}).inserted)return{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:"ignored",reasonCode:d.LEASE_CONFLICT,createdAt:l(),redactionSummary:E}),processingSummaries:[]};A=!0;try{t.appendEvent({eventId:`${u}:started`,jobId:i,operationId:`${u}:event:started`,idempotencyKey:`${u}:event:started`,type:"runner_tick_started",summary:`Runner tick started for ${i}.`,reasonCode:d.OK,createdAt:L,metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"running",reasonCode:d.OK})});const N=r.kind==="loop"?`*loop tick @${i} --tick-id ${u} --lease-id ${m} --runner-id ${a}`:r.kind==="goal"?`*goal tick @${i} --tick-id ${u} --lease-id ${m} --runner-id ${a}`:`*runner tick --job-id ${i} --tick-id ${u} --lease-id ${m} --runner-id ${a}`,v=await R({projectRoot:o,args:N,jobId:i,tickId:u,leaseId:m,runnerId:a,serverUrl:y});if(!v.success){b=d.RUNNER_SERVER_INVOKE_FAILED,k="failed";const O=l();return t.updateJobStatus({jobId:i,status:"backoff",updatedAt:O,reasonCode:d.BACKOFF_SCHEDULED,nextRunAt:dt(O,Te)}),t.appendEvent({eventId:`${u}:server-failed`,jobId:i,operationId:`${u}:event:server-failed`,idempotencyKey:`${u}:event:server-failed`,type:"runner_tick_failed",summary:"Runner server tick invocation failed with public reason code.",reasonCode:b,createdAt:O,metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"failed",reasonCode:b})}),{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:k,reasonCode:b,createdAt:l(),redactionSummary:E}),processingSummaries:[]}}const f=de(v.metadata).filter(O=>!ie(O));let p={appliedCount:0,releasedLease:!1,changedStatus:!1,redactionSummary:[]};try{p=qe(t,f,{jobId:i,tickId:u,leaseId:m,runnerId:a,now:l}),T=p.releasedLease,E=[...p.redactionSummary],b=et(v.metadata)??b}catch(O){return b=d.RUNNER_DIRECTIVE_UNTRUSTED,k="failed",E=[O instanceof Error?O.message:"Directive rejected."],t.updateJobStatus({jobId:i,status:"blocked",updatedAt:l(),reasonCode:b}),t.appendEvent({eventId:`${u}:directive-rejected`,jobId:i,operationId:`${u}:event:directive-rejected`,idempotencyKey:`${u}:event:directive-rejected`,type:"runner_directive_rejected",summary:"Runner rejected an untrusted continuity directive.",reasonCode:b,createdAt:l(),metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"failed",reasonCode:b,redactionSummary:E})}),{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:k,reasonCode:b,createdAt:l(),redactionSummary:E}),processingSummaries:[]}}const h=Ye(t,v.metadata,{jobId:i,tickId:u,leaseId:m,runnerId:a,source:I,createdAt:l()}),S=!!v.metadata?.continuityStateUpdate;return!p.changedStatus&&!S&&t.updateJobStatus({jobId:i,status:"active",updatedAt:l(),reasonCode:d.OK}),t.appendEvent({eventId:`${u}:completed`,jobId:i,operationId:`${u}:event:completed`,idempotencyKey:`${u}:event:completed`,type:"runner_tick_completed",summary:`Runner tick completed with ${p.appliedCount} public directive(s).`,reasonCode:b,createdAt:l(),metadata:M({jobId:i,operationId:u,runnerId:a,leaseId:m,status:"applied",reasonCode:b})}),{receipt:K(t,{jobId:i,tickId:u,leaseId:m,status:k,reasonCode:b,createdAt:l(),redactionSummary:E}),processingSummaries:h,...v.metadata?{executionMetadata:v.metadata}:{}}}finally{if(A&&!T)try{t.releaseLease({leaseId:m,releasedAt:l(),reasonCode:b})}catch{}}}function qe(e,t,r){let o=0,a=!1,s=!1;const l=[];for(const c of t){switch(Je(c,r.jobId),c.kind){case"noop":o+=1;break;case"append_event":e.appendEvent({eventId:n(c,"eventId")??`${r.tickId}:directive:${o}:event`,jobId:r.jobId,operationId:n(c,"operationId")??`${r.tickId}:directive:${o}:event`,idempotencyKey:n(c,"idempotencyKey")??`${r.tickId}:directive:${o}:event`,type:n(c,"eventType")??"runner_directive_event",summary:n(c,"summary")??"Runner applied public continuity event directive.",reasonCode:n(c,"reasonCode")??d.OK,createdAt:n(c,"createdAt")??r.now(),metadata:fe(c)}),o+=1;break;case"append_receipt":e.appendReceipt({receiptId:n(c,"receiptId")??`${r.tickId}:directive:${o}:receipt`,jobId:r.jobId,operationId:n(c,"operationId")??`${r.tickId}:directive:${o}:receipt`,idempotencyKey:n(c,"idempotencyKey")??`${r.tickId}:directive:${o}:receipt`,status:pt(n(c,"status")),reasonCode:n(c,"reasonCode")??d.OK,createdAt:n(c,"createdAt")??r.now(),metadata:fe(c)}),o+=1;break;case"update_job_status":e.updateJobStatus({jobId:r.jobId,status:mt(n(c,"status")),updatedAt:n(c,"updatedAt")??r.now(),reasonCode:n(c,"reasonCode")??d.OK,nextRunAt:n(c,"nextRunAt")}),o+=1,s=!0;break;case"schedule_next_tick":e.scheduleNextTick({jobId:r.jobId,scheduledAt:ut(c,"scheduledAt"),updatedAt:n(c,"updatedAt")??r.now(),reasonCode:n(c,"reasonCode")??d.OK}),o+=1,s=!0;break;case"release_lease":e.releaseLease({leaseId:n(c,"leaseId")??r.leaseId,releasedAt:n(c,"releasedAt")??r.now(),reasonCode:n(c,"reasonCode")??d.OK}),o+=1,a=!0;break}const I=c.redactionSummary;Array.isArray(I)&&l.push(...I.filter(y=>typeof y=="string").slice(0,5))}return{appliedCount:o,releasedLease:a,changedStatus:s,redactionSummary:l}}function Ye(e,t,r){const o=[],a=new Set;for(const s of Qe(t)){const l=ze(s,r);if(!(!l||a.has(l.executionId))){a.add(l.executionId);try{e.recordProcessingOutputSummary(l),o.push(Xe(l))}catch(c){if(c instanceof Ie&&c.code==="sqlite-public-safety-rejected")continue;throw c}}}return o}function Qe(e){if(!e)return[];const t=[],r=D(e,"continuityStateUpdate"),o=$(r,"operations");for(const a of o){if(!j(a))continue;const s=D(a,"event");!s||n(s,"type")!==X||t.push({operation:a,event:s,summary:D(s,"processingOutputSummary")??s})}for(const a of de(e))ie(a)&&t.push({directive:a,event:a,summary:D(a,"processingOutputSummary")??a});for(const a of[...$(e,"processingSummaries"),...$(e,"processingOutputSummaries"),...$(e,"continuityProcessingSummaries"),...$(D(e,"continuity"),"processingSummaries")])j(a)&&t.push({event:a,summary:a});return t}function ze(e,t){if(!We(e))return null;const r=e.event??{},o=e.summary??r,a=e.operation??{},s=e.directive??{},l=n(o,"executionId")??n(r,"executionId")??n(a,"operationId")??n(s,"operationId")??t.tickId,c=n(o,"jobId")??n(r,"jobId")??n(a,"jobId")??n(s,"jobId")??t.jobId;if(c!==t.jobId)return null;const I=n(o,"publicSummary")??n(r,"publicSummary")??n(r,"summary")??n(s,"summary");if(!l||!I)return null;const y=Ge(D(a,"metadata"),D(r,"metadata"),D(o,"metadata"),D(s,"metadata"),{schemaVersion:1,contractVersion:"continuity-v1",executionId:l,jobId:c,operationId:l,runnerId:t.runnerId,leaseId:t.leaseId,processingOutputSource:t.source,publicSummary:I});return{eventId:n(r,"eventId")??n(o,"eventId")??n(s,"eventId"),executionId:l,jobId:c,idempotencyKey:n(a,"idempotencyKey")??n(s,"idempotencyKey")??l,goalId:n(o,"goalId")??n(r,"goalId")??n(a,"goalId"),loopId:n(o,"loopId")??n(r,"loopId")??n(a,"loopId"),publicSummary:I,reasonCode:n(o,"reasonCode")??n(r,"reasonCode")??n(a,"reasonCode")??n(s,"reasonCode"),createdAt:n(o,"createdAt")??n(r,"createdAt")??n(a,"createdAt")??n(s,"createdAt")??t.createdAt,source:t.source,metadata:y}}function ie(e){return e.kind==="append_event"&&(n(e,"eventType")??n(e,"type"))===X}function We(e){const t=[e.operation,e.event,e.summary,e.directive].filter(r=>!!r).map(r=>r.publicSafe);return t.some(r=>r===!1)?!1:t.some(r=>r===!0)}function Ge(...e){const t={};for(const r of e)r&&Object.assign(t,r);return t}function Xe(e){return{eventId:e.eventId??Ze(e.executionId),executionId:e.executionId,jobId:e.jobId,publicSummary:e.publicSummary,...e.reasonCode?{reasonCode:e.reasonCode}:{},createdAt:e.createdAt,source:he(e.source),publicSafe:!0}}function Ze(e){const t=e.replace(/[^a-z0-9_.:-]+/gi,"-").replace(/^-+|-+$/g,"");return t.length>0?`event-processing-summary-${t.slice(0,160)}`:`event-processing-summary-${W("sha256").update(e).digest("hex").slice(0,32)}`}function K(e,t){const r={receiptId:`receipt-${Y(t.tickId)}`,jobId:t.jobId,operationId:t.tickId,idempotencyKey:t.tickId,status:t.status,reasonCode:t.reasonCode,appliedOperationIds:t.status==="applied"?[t.tickId]:void 0,ignoredOperationIds:t.status==="ignored"?[t.tickId]:void 0,createdAt:t.createdAt,metadata:M({jobId:t.jobId,operationId:t.tickId,leaseId:t.leaseId,status:t.status,reasonCode:t.reasonCode,redactionSummary:t.redactionSummary})};return e.appendReceipt(r),{jobId:t.jobId,tickId:t.tickId,leaseId:t.leaseId,outcome:t.status,reasonCode:t.reasonCode,timestamp:t.createdAt,redactionSummary:t.redactionSummary,publicSafe:!0}}function M(e){return{schemaVersion:1,contractVersion:"continuity-v1",jobId:e.jobId,operationId:e.operationId,...e.runnerId?{runnerId:e.runnerId}:{},...e.leaseId?{leaseId:e.leaseId}:{},status:e.status,reasonCode:e.reasonCode,redactionEvidence:(e.redactionSummary??[]).slice(0,20).map(t=>({field:z(t,80),reason:"unsafe_key",evidence:"operation-denied",publicSafe:!0}))}}function et(e){if(!e)return null;const t=j(e.continuity)?e.continuity:void 0,r=t&&j(t.loop)?t.loop:void 0,o=t&&j(t.goal)?t.goal:void 0,a=[r?.reasonCode,o?.reasonCode,t?.reasonCode];for(const s of a)if(typeof s=="string"&&/^[a-z0-9][a-z0-9-]{0,79}$/.test(s)&&!q.test(s))return s;return null}function tt(e){const t=e[0];if(!t||t==="--help"||t==="-h"||t==="help")return{command:"help"};if(t==="--version"||t==="-v"||t==="version")return{command:"version"};if(t!=="tick"&&t!=="sync"&&t!=="heartbeat"&&!le(t))return{command:"unknown"};let r,o,a,s,l,c,I,y,R,i,u,m,L,C,A,T,b,k,E,g,N,v,H,f;for(let p=1;p<e.length;p++){const h=e[p],S=e[p+1];if(h==="--project-root"){r=S,p+=1;continue}if(h==="--runner-id"){o=S,p+=1;continue}if(h==="--server-url"){a=S,p+=1;continue}if(h==="--limit"){s=Number(S),p+=1;continue}if(h==="--lease-ms"){l=Number(S),p+=1;continue}if(h==="--stale-lease-after-ms"){c=Number(S),p+=1;continue}if(h==="--dry-run"){I=!0;continue}if(h==="--interval-seconds"){y=Number(S),p+=1;continue}if(h==="--interval-ms"){R=Number(S),p+=1;continue}if(h==="--max-runs"){i=Number(S),p+=1;continue}if(h==="--backoff-ms"){u=Number(S),p+=1;continue}if(h==="--heartbeat-timeout-ms"||h==="--timeout-ms"){m=Number(S),p+=1;continue}if(h==="--jitter-ratio"){L=Number(S),p+=1;continue}if(h==="--session-id"){C=S,p+=1;continue}if(h==="--strategy"&&at(S)){A=S,p+=1;continue}if(h==="--allow-cron-fallback"){T=!0;continue}if(h==="--no-cron-fallback"){T=!1;continue}if(h==="--scheduled"){b=!0;continue}if(h==="--manual"){b=!1;continue}if(h==="--loop"||h==="--background"){k=!0;continue}if(h==="--once"){k=!1;continue}if(h==="--workspace-id"){E=S,p+=1;continue}if(h==="--workspace-label"){g=S,p+=1;continue}if(h==="--project-id"){N=S,p+=1;continue}if(h==="--project-label"){v=S,p+=1;continue}if(h==="--sync-cursor"){H=S,p+=1;continue}if(h==="--yoloop-local-cap"){f=Number(S),p+=1;continue}}return{command:t,projectRoot:r,runnerId:o,serverUrl:a,limit:s,leaseMs:l,staleLeaseAfterMs:c,dryRun:I,intervalSeconds:y,intervalMs:R,maxRuns:i,heartbeatBackoffMs:u,heartbeatTimeoutMs:m,heartbeatJitterRatio:L,sessionId:C,strategy:A,allowCronFallback:T,scheduled:b,loop:k,workspaceId:E,workspaceLabel:g,projectId:N,projectLabel:v,syncCursor:H,yoloopLocalCap:f}}function rt(e,t,r){return t.portalSync===!1?!1:{...t.portalSync??{},...e.projectRoot??t.projectRoot?{projectRoot:e.projectRoot??t.projectRoot}:{},...e.runnerId??t.runnerId?{runnerId:e.runnerId??t.runnerId}:{},...e.sessionId??t.portalHeartbeatSessionId?{sessionId:e.sessionId??t.portalHeartbeatSessionId}:{},...e.serverUrl??t.serverUrl?{serverUrl:e.serverUrl??t.serverUrl}:{},...e.workspaceId?{workspaceId:e.workspaceId}:{},...e.workspaceLabel?{workspaceLabel:e.workspaceLabel}:{},...e.projectId?{projectId:e.projectId}:{},...e.projectLabel?{projectLabel:e.projectLabel}:{},...e.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs?{heartbeatTimeoutMs:e.heartbeatTimeoutMs??t.portalHeartbeatTimeoutMs}:{},mode:r}}const ot=`
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.06 -- neocortex-runner core tick loop, leases, receipts and recovery.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import { resolve } from 'node:path';
+import { CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE, ContinuitySqliteStoreError, openContinuitySqliteStore, } from '../continuity/sqlite-store.js';
+import { invoke } from '../commands/invoke.js';
+import { checkRunnerBinaryTrust, } from './binary.js';
+import { runRunnerSchedulerCommand, } from './scheduler.js';
+import { runYoloExecutionPhase, } from './headless/run-yolo.js';
+import { runYoloopExecutionPhase, } from './headless/run-yoloop.js';
+import { DEFAULT_RUNNER_HEARTBEAT_BACKOFF_MS, DEFAULT_RUNNER_HEARTBEAT_INTERVAL_MS, DEFAULT_RUNNER_HEARTBEAT_JITTER_RATIO, DEFAULT_RUNNER_HEARTBEAT_TIMEOUT_MS, runRunnerPortalHeartbeat, runRunnerPortalHeartbeatLoop, runRunnerPortalSync, runRunnerPortalSyncLoop, } from './portal-sync-worker.js';
+export { RUNNER_BINARY_REASON_CODES, checkRunnerBinaryTrust, runnerTrustRelativePath } from './binary.js';
+export { LOCAL_JOBS_CONSOLE_REASON_CODES, createLocalJobConsoleServer, isLocalJobsConsoleArgs, localJobConsoleSocketPath, parseLocalJobsConsoleArgs, runLocalJobsConsoleCommand, } from './local-console.js';
+export const RUNNER_REASON_CODES = Object.freeze({
+    OK: 'continuity-ok',
+    LEASE_CONFLICT: 'lease-conflict',
+    LEASE_EXPIRED: 'lease-expired',
+    RUNNER_BINARY_UNTRUSTED: 'runner-binary-untrusted',
+    RUNNER_DIRECTIVE_UNTRUSTED: 'runner-directive-untrusted',
+    RUNNER_SERVER_INVOKE_FAILED: 'runner-server-invoke-failed',
+    SQLITE_ADAPTER_UNAVAILABLE: 'sqlite-adapter-unavailable',
+    SQLITE_INTEGRITY_FAILED: 'sqlite-integrity-failed',
+    BACKOFF_SCHEDULED: 'backoff-scheduled',
+    MISSED_RUN_CATCHUP: 'missed-run-catchup',
+    HEADLESS_RUNTIME_UNRESOLVED: 'headless-runtime-unresolved',
+    HEADLESS_RUNTIME_UNTRUSTED: 'headless-runtime-untrusted',
+    HEADLESS_ADAPTER_UNAVAILABLE: 'headless-adapter-unavailable',
+    HEADLESS_RUNTIME_AUTH_REQUIRED: 'headless-runtime-auth-required',
+    HEADLESS_EXECUTION_BACKOFF: 'headless-execution-backoff',
+    HEADLESS_EXECUTION_TIMEOUT: 'headless-execution-timeout',
+    HEADLESS_EXECUTION_FAILED: 'headless-execution-failed',
+    HEADLESS_RECEIPT_REDACTED: 'headless-receipt-redacted',
+    AUTONOMOUS_GOVERNANCE_BYPASS_BLOCKED: 'headless-directive-rejected',
+});
+export const DEFAULT_RUNNER_LEASE_MS = 5 * 60 * 1000;
+export const DEFAULT_STALE_LEASE_AFTER_MS = 30 * 1000;
+export const DEFAULT_RUNNER_BACKOFF_MS = 30 * 1000;
+export const DEFAULT_DUE_JOB_LIMIT = 1;
+export const MAX_DUE_JOB_LIMIT = 10;
+const ALLOWED_DIRECTIVE_KINDS = new Set([
+    'append_event',
+    'append_receipt',
+    'update_job_status',
+    'schedule_next_tick',
+    'release_lease',
+    'noop',
+]);
+const ALLOWED_COMMAND_CLASSES = new Set(['goal-tick', 'loop-tick', 'jobs', 'runner']);
+const RECEIPT_STATUSES = new Set(['accepted', 'applied', 'ignored', 'failed', 'deferred']);
+const JOB_STATUSES = new Set([
+    'draft',
+    'planned',
+    'active',
+    'running',
+    'waiting_external',
+    'waiting_human',
+    'backoff',
+    'paused',
+    'blocked',
+    'completed',
+    'aborted',
+    'cancelled',
+]);
+const UNSAFE_KEY_PATTERN = /(raw[_-]?logs?|prompt(?:[_-]?(?:body|text))?|private[_-]?urls?|secret|token|password|protected(?:[_-]?(?:field|body|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|authorization|api[_-]?key|license[_-]?key)/i;
+const UNSAFE_VALUE_PATTERN = /(https?:\/\/\S+|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?log|transcript|stack trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH))/i;
+const RUNNER_HEADLESS_TRUST_FAILURE_REASON_CODES = new Set([
+    RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNRESOLVED,
+    RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNTRUSTED,
+    'headless-model-rejected',
+    'headless-directive-rejected',
+    'headless-prompt-rejected',
+    'headless-yoloop-metadata-invalid',
+    'headless-yoloop-isolation-violation',
+]);
+const RUNNER_HEADLESS_ADAPTER_UNAVAILABLE_REASON_CODES = new Set([
+    RUNNER_REASON_CODES.HEADLESS_ADAPTER_UNAVAILABLE,
+]);
+const RUNNER_HEADLESS_AUTH_REQUIRED_REASON_CODES = new Set([
+    RUNNER_REASON_CODES.HEADLESS_RUNTIME_AUTH_REQUIRED,
+]);
+const RUNNER_HEADLESS_BACKOFF_REASON_CODES = new Set([
+    RUNNER_REASON_CODES.HEADLESS_EXECUTION_BACKOFF,
+]);
+const RUNNER_HEADLESS_TIMEOUT_REASON_CODES = new Set([
+    RUNNER_REASON_CODES.HEADLESS_EXECUTION_TIMEOUT,
+]);
+const RUNNER_HEADLESS_GENERIC_FAILURE_REASON_CODES = new Set([
+    RUNNER_REASON_CODES.HEADLESS_EXECUTION_FAILED,
+]);
+export async function defaultRunnerServerInvoker(input) {
+    const result = await invoke({
+        args: input.args,
+        projectRoot: input.projectRoot,
+        format: 'json',
+        platformTarget: 'runner',
+        serverUrl: input.serverUrl,
+        strictReadOnly: input.strictReadOnly,
+    });
+    return {
+        success: result.success,
+        instructions: result.instructions,
+        metadata: result.metadata,
+        error: result.error,
+        exitCode: result.exitCode,
+    };
+}
+export async function runRunnerTick(options = {}) {
+    const projectRoot = resolve(options.projectRoot ?? process.cwd());
+    const runnerId = sanitizeId(options.runnerId ?? defaultRunnerId(projectRoot));
+    const now = options.now ?? (() => new Date().toISOString());
+    const dueJobLimit = boundedInteger(options.dueJobLimit ?? DEFAULT_DUE_JOB_LIMIT, 1, MAX_DUE_JOB_LIMIT);
+    const leaseMs = boundedInteger(options.leaseMs ?? DEFAULT_RUNNER_LEASE_MS, 1_000, 60 * 60 * 1000);
+    const staleLeaseAfterMs = boundedInteger(options.staleLeaseAfterMs ?? DEFAULT_STALE_LEASE_AFTER_MS, 0, 24 * 60 * 60 * 1000);
+    const idFactory = options.idFactory ?? defaultIdFactory;
+    const processingSummarySource = normalizeRunnerProcessingSummarySource(options.processingSummarySource ?? (options.tickMode === 'scheduled' ? 'scheduled_tick' : 'manual_tick'));
+    const reasonCodes = [];
+    const receipts = [];
+    const processingSummaries = [];
+    const executionMetadata = [];
+    if (options.trustCheck !== false) {
+        const trust = checkRunnerBinaryTrust(options.executablePath ?? process.argv[1]);
+        if (!trust.trusted) {
+            return {
+                ok: false,
+                runnerId,
+                processedJobCount: 0,
+                dueJobCount: 0,
+                recoveredLeaseIds: [],
+                receipts: [],
+                reasonCodes: [trust.reasonCode ?? RUNNER_REASON_CODES.RUNNER_BINARY_UNTRUSTED],
+                publicSafe: true,
+            };
+        }
+    }
+    const store = await openContinuitySqliteStore({
+        projectRoot,
+        adapter: options.adapter,
+        adapterLoader: options.adapterLoader,
+        now,
+    });
+    const heartbeatLoop = startRunnerTickHeartbeatLoop({ options, projectRoot, runnerId, now });
+    let summary;
+    try {
+        const recovered = store.recoverStaleLeases({
+            nowIso: now(),
+            staleAfterMs: staleLeaseAfterMs,
+            limit: dueJobLimit * 2,
+        });
+        if (recovered.recoveredLeaseIds.length > 0) {
+            reasonCodes.push(RUNNER_REASON_CODES.LEASE_EXPIRED);
+            for (const leaseId of recovered.recoveredLeaseIds) {
+                // Recovery evidence is intentionally compact and public. It is not tied to
+                // a synthetic job receipt because the lease row already carries job ID.
+                void leaseId;
+            }
+        }
+        const dueJobs = store.listDueJobs({ nowIso: now(), limit: dueJobLimit });
+        for (const job of dueJobs) {
+            const result = await processDueJob({
+                store,
+                job,
+                projectRoot,
+                runnerId,
+                leaseMs,
+                now,
+                idFactory,
+                processingSummarySource,
+                serverUrl: options.serverUrl,
+                serverInvoker: options.serverInvoker ?? defaultRunnerServerInvoker,
+            });
+            receipts.push(result.receipt);
+            processingSummaries.push(...result.processingSummaries);
+            if (result.executionMetadata)
+                executionMetadata.push(result.executionMetadata);
+            reasonCodes.push(result.receipt.reasonCode);
+        }
+        const headlessExecution = await runYoloExecutionPhase({
+            store,
+            projectRoot,
+            runnerId,
+            now,
+            metadata: executionMetadata,
+            adapterRegistry: options.headlessAdapterRegistry,
+            adapterOptions: options.headlessAdapterOptions,
+            runtimeDefaults: options.headlessRuntimeDefaults,
+            runtimeFallback: options.headlessRuntimeFallback,
+            limit: options.headlessExecutionLimit,
+            leaseMs: options.headlessExecutionLeaseMs ?? leaseMs,
+            staleLeaseAfterMs: options.headlessExecutionStaleLeaseAfterMs ?? staleLeaseAfterMs,
+            timeoutMs: options.headlessExecutionTimeoutMs,
+            backoffMs: options.headlessExecutionBackoffMs,
+            maxAttempts: options.headlessExecutionMaxAttempts,
+            queueCap: options.headlessExecutionQueueCap,
+            idFactory: options.headlessExecutionIdFactory,
+        });
+        reasonCodes.push(...headlessExecution.reasonCodes);
+        const headlessYoloopExecution = await runYoloopExecutionPhase({
+            store,
+            projectRoot,
+            runnerId,
+            now,
+            metadata: executionMetadata,
+            adapterRegistry: options.headlessAdapterRegistry,
+            adapterOptions: options.headlessAdapterOptions,
+            runtimeDefaults: options.headlessRuntimeDefaults,
+            runtimeFallback: options.headlessRuntimeFallback,
+            limit: options.headlessExecutionLimit,
+            leaseMs: options.headlessExecutionLeaseMs ?? leaseMs,
+            staleLeaseAfterMs: options.headlessExecutionStaleLeaseAfterMs ?? staleLeaseAfterMs,
+            timeoutMs: options.headlessExecutionTimeoutMs,
+            backoffMs: options.headlessExecutionBackoffMs,
+            maxAttempts: options.headlessExecutionMaxAttempts,
+            queueCap: options.headlessExecutionQueueCap,
+            maxIterations: options.headlessYoloopMaxIterations,
+            maxDurationMs: options.headlessYoloopMaxDurationMs,
+            localConcurrencyCap: options.headlessYoloopLocalConcurrencyCap,
+            yoloopInvoker: options.headlessYoloopInvoker,
+            serverUrl: options.serverUrl,
+            idFactory: options.headlessExecutionIdFactory,
+        });
+        reasonCodes.push(...headlessYoloopExecution.reasonCodes);
+        summary = {
+            ok: receipts.every((receipt) => receipt.outcome !== 'failed') && headlessExecution.ok && headlessYoloopExecution.ok,
+            runnerId,
+            processedJobCount: receipts.length,
+            dueJobCount: dueJobs.length,
+            recoveredLeaseIds: recovered.recoveredLeaseIds,
+            receipts,
+            ...(processingSummaries.length > 0 ? { processingSummaries } : {}),
+            headlessExecution,
+            headlessYoloopExecution,
+            reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [RUNNER_REASON_CODES.OK]),
+            publicSafe: true,
+        };
+    }
+    finally {
+        await heartbeatLoop.stop();
+        store.close();
+    }
+    if (!summary)
+        throw new Error('runner-tick-failed');
+    return await withPostTickPortalSync(summary, {
+        options,
+        projectRoot,
+        runnerId,
+        localStateChanged: runnerTickChangedLocalState(summary),
+    });
+}
+async function withPostTickPortalSync(summary, input) {
+    const portalSync = input.options.portalSync;
+    if (portalSync === false || portalSync === undefined)
+        return summary;
+    if (!input.localStateChanged) {
+        const heartbeat = await runRunnerPortalHeartbeat({
+            ...portalSync,
+            projectRoot: portalSync.projectRoot ?? input.projectRoot,
+            runnerId: portalSync.runnerId ?? input.runnerId,
+            sessionId: portalSync.sessionId ?? input.options.portalHeartbeatSessionId,
+            serverUrl: portalSync.serverUrl ?? input.options.serverUrl,
+            adapter: portalSync.adapter ?? input.options.adapter,
+            adapterLoader: portalSync.adapterLoader ?? input.options.adapterLoader,
+            now: portalSync.now ?? input.options.now,
+            mode: portalSync.mode ?? (input.options.tickMode === 'scheduled' ? 'scheduled' : 'background'),
+            timeoutMs: portalSync.heartbeatTimeoutMs ?? input.options.portalHeartbeatTimeoutMs,
+        });
+        return { ...summary, portalHeartbeat: heartbeat };
+    }
+    const sync = await runRunnerPortalSync({
+        ...portalSync,
+        projectRoot: portalSync.projectRoot ?? input.projectRoot,
+        runnerId: portalSync.runnerId ?? input.runnerId,
+        sessionId: portalSync.sessionId ?? input.options.portalHeartbeatSessionId,
+        serverUrl: portalSync.serverUrl ?? input.options.serverUrl,
+        adapter: portalSync.adapter ?? input.options.adapter,
+        adapterLoader: portalSync.adapterLoader ?? input.options.adapterLoader,
+        now: portalSync.now ?? input.options.now,
+        mode: portalSync.mode ?? (input.options.tickMode === 'scheduled' ? 'scheduled' : 'background'),
+    });
+    return { ...summary, portalSync: sync };
+}
+function runnerTickChangedLocalState(summary) {
+    return summary.recoveredLeaseIds.length > 0
+        || summary.receipts.length > 0
+        || (summary.processingSummaries?.length ?? 0) > 0
+        || (summary.headlessExecution?.processedAttemptCount ?? 0) > 0
+        || (summary.headlessExecution?.recoveredAttemptIds.length ?? 0) > 0
+        || (summary.headlessYoloopExecution?.processedAttemptCount ?? 0) > 0
+        || (summary.headlessYoloopExecution?.recoveredAttemptIds.length ?? 0) > 0;
+}
+function startRunnerTickHeartbeatLoop(input) {
+    const portalSync = input.options.portalSync;
+    if (portalSync === false || portalSync === undefined)
+        return { stop: async () => undefined };
+    const intervalMs = boundedInteger(input.options.portalHeartbeatIntervalMs ?? DEFAULT_RUNNER_HEARTBEAT_INTERVAL_MS, 0, 24 * 60 * 60 * 1000);
+    if (intervalMs <= 0)
+        return { stop: async () => undefined };
+    const backoffMs = boundedInteger(input.options.portalHeartbeatBackoffMs ?? DEFAULT_RUNNER_HEARTBEAT_BACKOFF_MS, 1_000, 30 * 60 * 1000);
+    const jitterRatio = boundedNumber(input.options.portalHeartbeatJitterRatio ?? DEFAULT_RUNNER_HEARTBEAT_JITTER_RATIO, 0, 0.5);
+    const timeoutMs = boundedInteger(input.options.portalHeartbeatTimeoutMs ?? portalSync.heartbeatTimeoutMs ?? DEFAULT_RUNNER_HEARTBEAT_TIMEOUT_MS, 1_000, 60_000);
+    let stopped = false;
+    let timer;
+    let wake;
+    let nextDelayMs = jitteredDelayMs(intervalMs, jitterRatio, Math.random);
+    const waitForDelayOrStop = (delayMs) => new Promise((resolvePromise) => {
+        wake = resolvePromise;
+        timer = setTimeout(resolvePromise, delayMs);
+        if (typeof timer.unref === 'function')
+            timer.unref();
+    });
+    const loop = (async () => {
+        while (!stopped) {
+            if (nextDelayMs > 0)
+                await waitForDelayOrStop(nextDelayMs);
+            if (stopped)
+                break;
+            const heartbeat = await runRunnerPortalHeartbeat({
+                ...portalSync,
+                projectRoot: portalSync.projectRoot ?? input.projectRoot,
+                runnerId: portalSync.runnerId ?? input.runnerId,
+                sessionId: portalSync.sessionId ?? input.options.portalHeartbeatSessionId,
+                serverUrl: portalSync.serverUrl ?? input.options.serverUrl,
+                adapter: portalSync.adapter ?? input.options.adapter,
+                adapterLoader: portalSync.adapterLoader ?? input.options.adapterLoader,
+                now: portalSync.now ?? input.now,
+                mode: portalSync.mode ?? (input.options.tickMode === 'scheduled' ? 'scheduled' : 'background'),
+                timeoutMs,
+            }).catch(() => ({
+                ok: false,
+                runnerId: input.runnerId,
+                workspaceId: 'workspace-default',
+                workspaceLabel: 'Workspace workspace-default',
+                projectId: 'project-default',
+                projectLabel: 'Project project-default',
+                mode: input.options.tickMode === 'scheduled' ? 'scheduled' : 'background',
+                generatedAt: input.now(),
+                serverAccessToLocalhost: false,
+                serverHeldStream: false,
+                localhostCallback: false,
+                posted: { heartbeat: false },
+                counts: { redactions: 0 },
+                reasonCodes: [RUNNER_REASON_CODES.BACKOFF_SCHEDULED],
+                redactionEvidence: [],
+                publicSafe: true,
+            }));
+            nextDelayMs = jitteredDelayMs(heartbeat.ok ? intervalMs : backoffMs, jitterRatio, Math.random);
+        }
+    })();
+    return {
+        stop: async () => {
+            stopped = true;
+            if (timer)
+                clearTimeout(timer);
+            wake?.();
+            await loop.catch(() => undefined);
+        },
+    };
+}
+export async function runRunnerDoctor(options = {}) {
+    const projectRoot = resolve(options.projectRoot ?? process.cwd());
+    const now = options.now ?? (() => new Date().toISOString());
+    const generatedAt = now();
+    const checks = {};
+    let snapshotRows = null;
+    let store = null;
+    try {
+        store = await openContinuitySqliteStore({
+            projectRoot,
+            adapter: options.adapter,
+            adapterLoader: options.adapterLoader,
+            now,
+        });
+        snapshotRows = store.collectSnapshotRows({
+            nowIso: generatedAt,
+            jobLimit: 10,
+            staleLeaseLimit: 10,
+            receiptLimit: 10,
+            eventLimit: 10,
+            snapshotLimit: 5,
+        });
+        const journalMode = String(store.pragmaValue('journal_mode') ?? '').toLowerCase();
+        checks['db-integrity'] = doctorCheck('db-integrity', 'DB integrity', 'ok', [RUNNER_REASON_CODES.OK], 'Continuity SQLite integrity check completed.', {
+            jobs: count(snapshotRows.counts, 'jobs'),
+            receipts: count(snapshotRows.counts, 'receipts'),
+            events: count(snapshotRows.counts, 'events'),
+        });
+        checks['sqlite-wal'] = doctorCheck('sqlite-wal', 'SQLite WAL', journalMode === 'wal' ? 'ok' : 'blocked', journalMode === 'wal' ? [RUNNER_REASON_CODES.OK] : [RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED], journalMode === 'wal' ? 'SQLite journal mode is WAL.' : 'SQLite journal mode is not WAL.');
+        checks.migrations = doctorCheck('migrations', 'Migrations', snapshotRows.schemaVersion >= 1 ? 'ok' : 'blocked', snapshotRows.schemaVersion >= 1 ? [RUNNER_REASON_CODES.OK] : [RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED], `Continuity schema version ${snapshotRows.schemaVersion} is readable.`);
+    }
+    catch (error) {
+        const reasonCode = classifyRunnerError(error);
+        checks['db-integrity'] = doctorCheck('db-integrity', 'DB integrity', 'blocked', [reasonCode], 'Continuity SQLite could not be opened safely.');
+        checks['sqlite-wal'] = doctorCheck('sqlite-wal', 'SQLite WAL', 'blocked', [reasonCode], 'SQLite WAL could not be verified.');
+        checks.migrations = doctorCheck('migrations', 'Migrations', 'blocked', [reasonCode], 'Continuity migrations could not be verified.');
+    }
+    finally {
+        if (store) {
+            try {
+                store.close();
+            }
+            catch { /* ignore close failures for doctor output */ }
+        }
+    }
+    const staleLeases = snapshotRows ? count(snapshotRows.counts, 'staleLeases') : 0;
+    const staleHeadlessExecutionAttempts = snapshotRows ? count(snapshotRows.counts, 'staleHeadlessExecutionAttempts') : 0;
+    checks.leases = doctorCheck('leases', 'Lease health', staleLeases + staleHeadlessExecutionAttempts > 0 ? 'degraded' : 'ok', staleLeases + staleHeadlessExecutionAttempts > 0 ? [RUNNER_REASON_CODES.LEASE_EXPIRED] : [RUNNER_REASON_CODES.OK], staleLeases + staleHeadlessExecutionAttempts > 0 ? 'Stale job leases or headless execution attempts are eligible for bounded recovery.' : 'No stale leases or headless attempts reported.', { staleLeases, staleHeadlessExecutionAttempts });
+    const headlessAttempts = snapshotRows?.headlessExecutionAttempts ?? [];
+    const headlessReasonCodes = unique(headlessAttempts
+        .map((attempt) => attempt.reason_code)
+        .filter((reasonCode) => typeof reasonCode === 'string' && reasonCode.length > 0));
+    const headlessDiagnostics = summarizeRunnerHeadlessDiagnostics(headlessAttempts, headlessReasonCodes);
+    const headlessBlockingReasons = new Set([
+        RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNRESOLVED,
+        RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNTRUSTED,
+        RUNNER_REASON_CODES.HEADLESS_ADAPTER_UNAVAILABLE,
+        RUNNER_REASON_CODES.HEADLESS_RUNTIME_AUTH_REQUIRED,
+        'headless-model-rejected',
+        'headless-directive-rejected',
+        'headless-prompt-rejected',
+        'headless-yoloop-metadata-invalid',
+        'headless-yoloop-isolation-violation',
+    ]);
+    const headlessAttemptCount = snapshotRows ? count(snapshotRows.counts, 'headlessExecutionAttempts') : 0;
+    const headlessBlocked = headlessReasonCodes.some((reasonCode) => headlessBlockingReasons.has(reasonCode));
+    const headlessBackoff = headlessReasonCodes.includes(RUNNER_REASON_CODES.HEADLESS_EXECUTION_BACKOFF)
+        || headlessAttempts.some((attempt) => attempt.status === 'backoff');
+    const headlessRedacted = headlessReasonCodes.includes(RUNNER_REASON_CODES.HEADLESS_RECEIPT_REDACTED);
+    const headlessAuthRequired = headlessDiagnostics.authRequired > 0;
+    const headlessTrustOrAdapterBlocked = headlessDiagnostics.trustFailures > 0 || headlessDiagnostics.adapterUnavailable > 0;
+    const headlessDegraded = staleHeadlessExecutionAttempts > 0
+        || headlessBackoff
+        || headlessRedacted
+        || headlessDiagnostics.timeout > 0
+        || headlessDiagnostics.genericFailed > 0
+        || headlessDiagnostics.redactions > 0;
+    checks['headless-execution'] = doctorCheck('headless-execution', 'Headless execution', headlessBlocked ? 'blocked' : headlessDegraded ? 'degraded' : headlessAttemptCount > 0 ? 'ok' : 'delegated', headlessReasonCodes.length > 0
+        ? headlessReasonCodes
+        : headlessAttemptCount > 0
+            ? [RUNNER_REASON_CODES.OK]
+            : [RUNNER_REASON_CODES.HEADLESS_RUNTIME_UNRESOLVED], headlessBlocked
+        ? headlessAuthRequired && !headlessTrustOrAdapterBlocked
+            ? 'Complete local runtime login/auth setup before starting a new headless attempt; default retry/backoff is not scheduled for auth-required.'
+            : 'Resolve public runtime/model trust, adapter availability or protected directive hard-stop reason codes before executing headless attempts.'
+        : headlessDegraded
+            ? 'Headless attempts need bounded recovery, retry/backoff, timeout/generic failure follow-up or redaction review.'
+            : headlessAttemptCount > 0
+                ? 'Headless attempts are represented by public status, runtime/model and reason-code evidence.'
+                : 'Headless resolver checks are delegated until durable headless work is queued.', {
+        attempts: headlessAttemptCount,
+        queuedBackoff: snapshotRows ? count(snapshotRows.counts, 'headlessQueuedAttempts') : 0,
+        running: snapshotRows ? count(snapshotRows.counts, 'headlessRunningAttempts') : 0,
+        staleHeadlessExecutionAttempts,
+        trustFailures: headlessDiagnostics.trustFailures,
+        adapterUnavailable: headlessDiagnostics.adapterUnavailable,
+        authRequired: headlessDiagnostics.authRequired,
+        retryBackoff: headlessDiagnostics.retryBackoff,
+        timeout: headlessDiagnostics.timeout,
+        genericFailed: headlessDiagnostics.genericFailed,
+        redactions: headlessDiagnostics.redactions,
+    });
+    const outboxCounts = snapshotRows?.outboxCounts ?? {};
+    const failedOutbox = count(outboxCounts, 'failed') + count(outboxCounts, 'dead_letter');
+    checks.outbox = doctorCheck('outbox', 'Outbox state', failedOutbox > 0 ? 'degraded' : 'ok', failedOutbox > 0 ? [RUNNER_REASON_CODES.BACKOFF_SCHEDULED] : [RUNNER_REASON_CODES.OK], failedOutbox > 0 ? 'Failed/dead-letter outbox entries can be retried with dedupe.' : 'Outbox has no failed/dead-letter entries.', {
+        pending: count(outboxCounts, 'pending'),
+        failed: count(outboxCounts, 'failed'),
+        deadLetter: count(outboxCounts, 'dead_letter'),
+    });
+    checks.metering = doctorCheck('metering', 'Metering receipts', 'ok', [RUNNER_REASON_CODES.OK], 'Metering evidence is represented by public job receipts and counts only.', { receipts: snapshotRows ? count(snapshotRows.counts, 'receipts') : 0 });
+    checks['portal-sync'] = doctorCheck('portal-sync', 'Portal sync', failedOutbox > 0 ? 'degraded' : 'ok', failedOutbox > 0 ? [RUNNER_REASON_CODES.BACKOFF_SCHEDULED] : [RUNNER_REASON_CODES.OK], failedOutbox > 0
+        ? 'Portal sync worker is enabled but has retryable outbox debt; outbound sync remains client-owned.'
+        : 'Portal sync worker is enabled for outbound heartbeat, jobs sync, command polling and acknowledgement only.', {
+        pending: count(outboxCounts, 'pending'),
+        failed: count(outboxCounts, 'failed'),
+        deadLetter: count(outboxCounts, 'dead_letter'),
+    });
+    const trust = options.trustCheck === false
+        ? { trusted: true, publicSafe: true }
+        : checkRunnerBinaryTrust(options.executablePath ?? process.argv[1]);
+    checks.runner = doctorCheck('runner', 'Runner health', trust.trusted ? 'ok' : 'blocked', trust.trusted ? [RUNNER_REASON_CODES.OK] : [trust.reasonCode ?? RUNNER_REASON_CODES.RUNNER_BINARY_UNTRUSTED], trust.trusted ? 'Runner binary trust check passed.' : 'Runner binary trust check failed.');
+    try {
+        const scheduler = await runRunnerSchedulerCommand({
+            command: 'doctor',
+            projectRoot,
+            executablePath: options.scheduler?.executablePath ?? options.executablePath ?? process.argv[1],
+            platform: options.scheduler?.platform,
+            env: options.scheduler?.env,
+            dryRun: true,
+            intervalSeconds: options.scheduler?.intervalSeconds,
+            strategy: options.scheduler?.strategy,
+            allowCronFallback: options.scheduler?.allowCronFallback,
+            trustCheck: options.scheduler?.trustCheck ?? options.trustCheck,
+            uid: options.scheduler?.uid,
+            commandAvailable: options.scheduler?.commandAvailable,
+            commandRunner: options.scheduler?.commandRunner,
+            trustChecker: options.scheduler?.trustChecker ?? checkRunnerBinaryTrust,
+        });
+        const schedulerBlocked = scheduler.reasonCodes.includes(RUNNER_REASON_CODES.RUNNER_BINARY_UNTRUSTED)
+            || scheduler.reasonCodes.some((reasonCode) => reasonCode.startsWith('runner-binary-'))
+            || scheduler.reasonCodes.includes('scheduler-install-unsafe');
+        checks.scheduler = doctorCheck('scheduler', 'Scheduler install', schedulerBlocked ? 'blocked' : scheduler.ok ? 'ok' : 'degraded', scheduler.reasonCodes, scheduler.ok ? 'Scheduler doctor selected a user-scope strategy.' : 'Scheduler doctor found public guidance or degraded capability.', { manifests: scheduler.manifestPaths.length, controlCommands: scheduler.controlCommands.length, legacyEntries: scheduler.legacyEntries.length });
+    }
+    catch (error) {
+        checks.scheduler = doctorCheck('scheduler', 'Scheduler install', 'degraded', ['scheduler-command-failed'], publicErrorMessage(error));
+    }
+    const completeChecks = checks;
+    const reasonCodes = unique(Object.values(completeChecks).flatMap((check) => check.reasonCodes));
+    return {
+        ok: Object.values(completeChecks).every((check) => check.status !== 'blocked'),
+        generatedAt,
+        checks: completeChecks,
+        reasonCodes,
+        publicSafe: true,
+    };
+}
+export function extractRunnerDirectives(metadata) {
+    if (!metadata)
+        return [];
+    const candidates = [
+        metadata.continuityRunnerDirectives,
+        metadata.runnerDirectives,
+        metadata.continuityDirectives,
+    ];
+    for (const candidate of candidates) {
+        if (Array.isArray(candidate))
+            return candidate.filter(isRecord).map(normalizeDirective).filter(isRunnerDirective);
+    }
+    return [];
+}
+export function assertRunnerDirectiveTrusted(directive, jobId) {
+    if (!isRecord(directive))
+        throw new RunnerDirectiveError('Directive is not a public record.');
+    if (directive.publicSafe !== true)
+        throw new RunnerDirectiveError('Directive is not marked public-safe.');
+    const kind = typeof directive.kind === 'string' ? directive.kind : typeof directive.type === 'string' ? directive.type : '';
+    if (!ALLOWED_DIRECTIVE_KINDS.has(kind))
+        throw new RunnerDirectiveError('Directive kind is not allowlisted.');
+    const commandClass = typeof directive.commandClass === 'string' ? directive.commandClass : 'runner';
+    if (!ALLOWED_COMMAND_CLASSES.has(commandClass))
+        throw new RunnerDirectiveError('Directive command class is not allowlisted.');
+    const directiveJobId = typeof directive.jobId === 'string' ? directive.jobId : jobId;
+    if (directiveJobId !== jobId)
+        throw new RunnerDirectiveError('Directive job ID does not match the leased job.');
+    assertPublicSafeDirectiveValue(directive, 'directive');
+}
+export async function runRunnerCli(argv, options = {}) {
+    const parsed = parseRunnerArgs(argv);
+    if (parsed.command === 'help') {
+        process.stdout.write(`${RUNNER_HELP}\n`);
+        return 0;
+    }
+    if (parsed.command === 'version') {
+        const trust = checkRunnerBinaryTrust(options.executablePath ?? process.argv[1]);
+        process.stdout.write(`${trust.packageVersion ?? '0.0.0'}\n`);
+        return trust.trusted ? 0 : 1;
+    }
+    if (parsed.command === 'doctor') {
+        try {
+            const summary = await runRunnerDoctor({
+                ...options,
+                projectRoot: parsed.projectRoot ?? options.projectRoot,
+                executablePath: options.executablePath ?? process.argv[1],
+                scheduler: {
+                    ...options.scheduler,
+                    strategy: parsed.strategy ?? options.scheduler?.strategy,
+                    allowCronFallback: parsed.allowCronFallback ?? options.scheduler?.allowCronFallback,
+                    executablePath: options.scheduler?.executablePath ?? options.executablePath ?? process.argv[1],
+                },
+            });
+            process.stdout.write(JSON.stringify(summary) + '\n');
+            return summary.ok ? 0 : 1;
+        }
+        catch (error) {
+            process.stderr.write(JSON.stringify({ error_code: 'runner-doctor-failed', message: publicErrorMessage(error) }) + '\n');
+            return 1;
+        }
+    }
+    if (isSchedulerCommand(parsed.command)) {
+        try {
+            const summary = await runRunnerSchedulerCommand({
+                command: parsed.command,
+                projectRoot: parsed.projectRoot ?? options.projectRoot,
+                executablePath: options.scheduler?.executablePath ?? options.executablePath ?? process.argv[1],
+                platform: options.scheduler?.platform,
+                env: options.scheduler?.env,
+                dryRun: parsed.dryRun ?? options.scheduler?.dryRun,
+                intervalSeconds: parsed.intervalSeconds ?? options.scheduler?.intervalSeconds,
+                strategy: parsed.strategy ?? options.scheduler?.strategy,
+                allowCronFallback: parsed.allowCronFallback ?? options.scheduler?.allowCronFallback,
+                trustCheck: options.scheduler?.trustCheck,
+                uid: options.scheduler?.uid,
+                commandAvailable: options.scheduler?.commandAvailable,
+                commandRunner: options.scheduler?.commandRunner,
+                trustChecker: options.scheduler?.trustChecker ?? checkRunnerBinaryTrust,
+            });
+            process.stdout.write(JSON.stringify(publicRunnerSchedulerCommandResult(summary)) + '\n');
+            return summary.ok ? 0 : 1;
+        }
+        catch (error) {
+            process.stderr.write(JSON.stringify({ error_code: 'scheduler-command-failed', message: publicErrorMessage(error) }) + '\n');
+            return 1;
+        }
+    }
+    if (parsed.command === 'heartbeat') {
+        try {
+            if (parsed.loop) {
+                const summary = await runRunnerPortalHeartbeatLoop({
+                    ...options,
+                    projectRoot: parsed.projectRoot ?? options.projectRoot,
+                    runnerId: parsed.runnerId ?? options.runnerId,
+                    sessionId: parsed.sessionId ?? options.portalHeartbeatSessionId,
+                    serverUrl: parsed.serverUrl ?? options.serverUrl,
+                    workspaceId: parsed.workspaceId,
+                    workspaceLabel: parsed.workspaceLabel,
+                    projectId: parsed.projectId,
+                    projectLabel: parsed.projectLabel,
+                    mode: parsed.scheduled ? 'scheduled' : 'background',
+                    intervalMs: parsed.intervalMs ?? options.portalHeartbeatIntervalMs,
+                    maxRuns: parsed.maxRuns ?? options.portalSyncMaxRuns,
+                    backoffMs: parsed.heartbeatBackoffMs ?? options.portalHeartbeatBackoffMs,
+                    timeoutMs: parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs,
+                    jitterRatio: parsed.heartbeatJitterRatio ?? options.portalHeartbeatJitterRatio,
+                });
+                process.stdout.write(JSON.stringify(summary) + '\n');
+                return summary.ok ? 0 : 1;
+            }
+            const summary = await runRunnerPortalHeartbeat({
+                ...options,
+                projectRoot: parsed.projectRoot ?? options.projectRoot,
+                runnerId: parsed.runnerId ?? options.runnerId,
+                sessionId: parsed.sessionId ?? options.portalHeartbeatSessionId,
+                serverUrl: parsed.serverUrl ?? options.serverUrl,
+                workspaceId: parsed.workspaceId,
+                workspaceLabel: parsed.workspaceLabel,
+                projectId: parsed.projectId,
+                projectLabel: parsed.projectLabel,
+                mode: parsed.scheduled ? 'scheduled' : 'manual',
+                timeoutMs: parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs,
+            });
+            process.stdout.write(JSON.stringify(summary) + '\n');
+            return summary.ok ? 0 : 1;
+        }
+        catch (error) {
+            process.stderr.write(JSON.stringify({ error_code: 'portal-heartbeat-failed', message: publicErrorMessage(error) }) + '\n');
+            return 1;
+        }
+    }
+    if (parsed.command === 'sync') {
+        try {
+            if (parsed.loop) {
+                const summary = await runRunnerPortalSyncLoop({
+                    ...options,
+                    projectRoot: parsed.projectRoot ?? options.projectRoot,
+                    runnerId: parsed.runnerId ?? options.runnerId,
+                    serverUrl: parsed.serverUrl ?? options.serverUrl,
+                    workspaceId: parsed.workspaceId,
+                    workspaceLabel: parsed.workspaceLabel,
+                    projectId: parsed.projectId,
+                    projectLabel: parsed.projectLabel,
+                    syncCursor: parsed.syncCursor,
+                    mode: parsed.scheduled ? 'scheduled' : 'background',
+                    intervalMs: parsed.intervalMs ?? options.portalSyncIntervalMs,
+                    maxRuns: parsed.maxRuns ?? options.portalSyncMaxRuns,
+                });
+                process.stdout.write(JSON.stringify(summary) + '\n');
+                return summary.ok ? 0 : 1;
+            }
+            const summary = await runRunnerPortalSync({
+                ...options,
+                projectRoot: parsed.projectRoot ?? options.projectRoot,
+                runnerId: parsed.runnerId ?? options.runnerId,
+                serverUrl: parsed.serverUrl ?? options.serverUrl,
+                workspaceId: parsed.workspaceId,
+                workspaceLabel: parsed.workspaceLabel,
+                projectId: parsed.projectId,
+                projectLabel: parsed.projectLabel,
+                syncCursor: parsed.syncCursor,
+                mode: parsed.scheduled ? 'scheduled' : 'manual',
+            });
+            process.stdout.write(JSON.stringify(summary) + '\n');
+            return summary.ok ? 0 : 1;
+        }
+        catch (error) {
+            process.stderr.write(JSON.stringify({ error_code: 'portal-sync-failed', message: publicErrorMessage(error) }) + '\n');
+            return 1;
+        }
+    }
+    if (parsed.command !== 'tick') {
+        process.stderr.write(JSON.stringify({ error_code: 'runner-command-unknown', message: 'Unknown neocortex-runner command.' }) + '\n');
+        return 1;
+    }
+    try {
+        const summary = await runRunnerTick({
+            ...options,
+            projectRoot: parsed.projectRoot ?? options.projectRoot,
+            runnerId: parsed.runnerId ?? options.runnerId,
+            dueJobLimit: parsed.limit ?? options.dueJobLimit,
+            leaseMs: parsed.leaseMs ?? options.leaseMs,
+            staleLeaseAfterMs: parsed.staleLeaseAfterMs ?? options.staleLeaseAfterMs,
+            headlessYoloopLocalConcurrencyCap: parsed.yoloopLocalCap ?? options.headlessYoloopLocalConcurrencyCap,
+            tickMode: parsed.scheduled ? 'scheduled' : options.tickMode,
+            processingSummarySource: parsed.scheduled ? 'scheduled_tick' : options.processingSummarySource,
+            serverUrl: parsed.serverUrl ?? options.serverUrl,
+            portalSync: runnerCliPortalSyncOptions(parsed, options, parsed.scheduled ? 'scheduled' : 'background'),
+        });
+        process.stdout.write(JSON.stringify(summary) + '\n');
+        return summary.ok ? 0 : 1;
+    }
+    catch (error) {
+        const reasonCode = classifyRunnerError(error);
+        process.stderr.write(JSON.stringify({ error_code: reasonCode, message: publicErrorMessage(error) }) + '\n');
+        return 1;
+    }
+}
+async function processDueJob(input) {
+    const { store, job, projectRoot, runnerId, leaseMs, now, idFactory, processingSummarySource, serverUrl, serverInvoker } = input;
+    const jobId = job.job_id;
+    const tickId = idFactory('tick', jobId);
+    const leaseId = idFactory('lease', jobId);
+    const acquiredAt = now();
+    const expiresAt = new Date(Date.parse(acquiredAt) + leaseMs).toISOString();
+    let leaseHeld = false;
+    let leaseReleasedByDirective = false;
+    let finalReasonCode = RUNNER_REASON_CODES.OK;
+    let finalOutcome = 'applied';
+    let redactionSummary = [];
+    const acquired = store.acquireLease({
+        leaseId,
+        jobId,
+        runnerId,
+        acquiredAt,
+        expiresAt,
+        operationId: `${tickId}:acquire`,
+        idempotencyKey: `${tickId}:acquire`,
+        metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'running', reasonCode: RUNNER_REASON_CODES.OK }),
+    });
+    if (!acquired.inserted) {
+        const receipt = appendTickReceipt(store, {
+            jobId,
+            tickId,
+            leaseId,
+            status: 'ignored',
+            reasonCode: RUNNER_REASON_CODES.LEASE_CONFLICT,
+            createdAt: now(),
+            redactionSummary,
+        });
+        return { receipt, processingSummaries: [] };
+    }
+    leaseHeld = true;
+    try {
+        store.appendEvent({
+            eventId: `${tickId}:started`,
+            jobId,
+            operationId: `${tickId}:event:started`,
+            idempotencyKey: `${tickId}:event:started`,
+            type: 'runner_tick_started',
+            summary: `Runner tick started for ${jobId}.`,
+            reasonCode: RUNNER_REASON_CODES.OK,
+            createdAt: acquiredAt,
+            metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'running', reasonCode: RUNNER_REASON_CODES.OK }),
+        });
+        const args = job.kind === 'loop'
+            ? `*loop tick @${jobId} --tick-id ${tickId} --lease-id ${leaseId} --runner-id ${runnerId}`
+            : job.kind === 'goal'
+                ? `*goal tick @${jobId} --tick-id ${tickId} --lease-id ${leaseId} --runner-id ${runnerId}`
+                : `*runner tick --job-id ${jobId} --tick-id ${tickId} --lease-id ${leaseId} --runner-id ${runnerId}`;
+        const serverResult = await serverInvoker({ projectRoot, args, jobId, tickId, leaseId, runnerId, serverUrl });
+        if (!serverResult.success) {
+            finalReasonCode = RUNNER_REASON_CODES.RUNNER_SERVER_INVOKE_FAILED;
+            finalOutcome = 'failed';
+            const failedAt = now();
+            store.updateJobStatus({
+                jobId,
+                status: 'backoff',
+                updatedAt: failedAt,
+                reasonCode: RUNNER_REASON_CODES.BACKOFF_SCHEDULED,
+                nextRunAt: addMilliseconds(failedAt, DEFAULT_RUNNER_BACKOFF_MS),
+            });
+            store.appendEvent({
+                eventId: `${tickId}:server-failed`,
+                jobId,
+                operationId: `${tickId}:event:server-failed`,
+                idempotencyKey: `${tickId}:event:server-failed`,
+                type: 'runner_tick_failed',
+                summary: 'Runner server tick invocation failed with public reason code.',
+                reasonCode: finalReasonCode,
+                createdAt: failedAt,
+                metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'failed', reasonCode: finalReasonCode }),
+            });
+            const receipt = appendTickReceipt(store, { jobId, tickId, leaseId, status: finalOutcome, reasonCode: finalReasonCode, createdAt: now(), redactionSummary });
+            return { receipt, processingSummaries: [] };
+        }
+        const directives = extractRunnerDirectives(serverResult.metadata);
+        const mutationDirectives = directives.filter((directive) => !isProcessingSummaryDirective(directive));
+        let directiveResult = { appliedCount: 0, releasedLease: false, changedStatus: false, redactionSummary: [] };
+        try {
+            directiveResult = executeRunnerDirectives(store, mutationDirectives, { jobId, tickId, leaseId, runnerId, now });
+            leaseReleasedByDirective = directiveResult.releasedLease;
+            redactionSummary = [...directiveResult.redactionSummary];
+            finalReasonCode = extractPublicRunnerReasonCode(serverResult.metadata) ?? finalReasonCode;
+        }
+        catch (error) {
+            finalReasonCode = RUNNER_REASON_CODES.RUNNER_DIRECTIVE_UNTRUSTED;
+            finalOutcome = 'failed';
+            redactionSummary = [error instanceof Error ? error.message : 'Directive rejected.'];
+            store.updateJobStatus({ jobId, status: 'blocked', updatedAt: now(), reasonCode: finalReasonCode });
+            store.appendEvent({
+                eventId: `${tickId}:directive-rejected`,
+                jobId,
+                operationId: `${tickId}:event:directive-rejected`,
+                idempotencyKey: `${tickId}:event:directive-rejected`,
+                type: 'runner_directive_rejected',
+                summary: 'Runner rejected an untrusted continuity directive.',
+                reasonCode: finalReasonCode,
+                createdAt: now(),
+                metadata: receiptMetadata({
+                    jobId,
+                    operationId: tickId,
+                    runnerId,
+                    leaseId,
+                    status: 'failed',
+                    reasonCode: finalReasonCode,
+                    redactionSummary,
+                }),
+            });
+            const receipt = appendTickReceipt(store, { jobId, tickId, leaseId, status: finalOutcome, reasonCode: finalReasonCode, createdAt: now(), redactionSummary });
+            return { receipt, processingSummaries: [] };
+        }
+        const processingSummaries = persistRunnerProcessingSummaries(store, serverResult.metadata, {
+            jobId,
+            tickId,
+            leaseId,
+            runnerId,
+            source: processingSummarySource,
+            createdAt: now(),
+        });
+        const serverAlreadyMutated = Boolean(serverResult.metadata?.continuityStateUpdate);
+        if (!directiveResult.changedStatus && !serverAlreadyMutated) {
+            store.updateJobStatus({ jobId, status: 'active', updatedAt: now(), reasonCode: RUNNER_REASON_CODES.OK });
+        }
+        store.appendEvent({
+            eventId: `${tickId}:completed`,
+            jobId,
+            operationId: `${tickId}:event:completed`,
+            idempotencyKey: `${tickId}:event:completed`,
+            type: 'runner_tick_completed',
+            summary: `Runner tick completed with ${directiveResult.appliedCount} public directive(s).`,
+            reasonCode: finalReasonCode,
+            createdAt: now(),
+            metadata: receiptMetadata({ jobId, operationId: tickId, runnerId, leaseId, status: 'applied', reasonCode: finalReasonCode }),
+        });
+        const receipt = appendTickReceipt(store, { jobId, tickId, leaseId, status: finalOutcome, reasonCode: finalReasonCode, createdAt: now(), redactionSummary });
+        return { receipt, processingSummaries, ...(serverResult.metadata ? { executionMetadata: serverResult.metadata } : {}) };
+    }
+    finally {
+        if (leaseHeld && !leaseReleasedByDirective) {
+            try {
+                store.releaseLease({ leaseId, releasedAt: now(), reasonCode: finalReasonCode });
+            }
+            catch {
+                // The tick receipt above remains the durable public outcome. A stale
+                // recovery pass can expire the lease if this release races or crashes.
+            }
+        }
+    }
+}
+function executeRunnerDirectives(store, directives, ctx) {
+    let appliedCount = 0;
+    let releasedLease = false;
+    let changedStatus = false;
+    const redactionSummary = [];
+    for (const directive of directives) {
+        assertRunnerDirectiveTrusted(directive, ctx.jobId);
+        switch (directive.kind) {
+            case 'noop':
+                appliedCount += 1;
+                break;
+            case 'append_event':
+                store.appendEvent({
+                    eventId: stringField(directive, 'eventId') ?? `${ctx.tickId}:directive:${appliedCount}:event`,
+                    jobId: ctx.jobId,
+                    operationId: stringField(directive, 'operationId') ?? `${ctx.tickId}:directive:${appliedCount}:event`,
+                    idempotencyKey: stringField(directive, 'idempotencyKey') ?? `${ctx.tickId}:directive:${appliedCount}:event`,
+                    type: stringField(directive, 'eventType') ?? 'runner_directive_event',
+                    summary: stringField(directive, 'summary') ?? 'Runner applied public continuity event directive.',
+                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
+                    createdAt: stringField(directive, 'createdAt') ?? ctx.now(),
+                    metadata: metadataField(directive),
+                });
+                appliedCount += 1;
+                break;
+            case 'append_receipt':
+                store.appendReceipt({
+                    receiptId: stringField(directive, 'receiptId') ?? `${ctx.tickId}:directive:${appliedCount}:receipt`,
+                    jobId: ctx.jobId,
+                    operationId: stringField(directive, 'operationId') ?? `${ctx.tickId}:directive:${appliedCount}:receipt`,
+                    idempotencyKey: stringField(directive, 'idempotencyKey') ?? `${ctx.tickId}:directive:${appliedCount}:receipt`,
+                    status: receiptStatus(stringField(directive, 'status')),
+                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
+                    createdAt: stringField(directive, 'createdAt') ?? ctx.now(),
+                    metadata: metadataField(directive),
+                });
+                appliedCount += 1;
+                break;
+            case 'update_job_status':
+                store.updateJobStatus({
+                    jobId: ctx.jobId,
+                    status: jobStatus(stringField(directive, 'status')),
+                    updatedAt: stringField(directive, 'updatedAt') ?? ctx.now(),
+                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
+                    nextRunAt: stringField(directive, 'nextRunAt'),
+                });
+                appliedCount += 1;
+                changedStatus = true;
+                break;
+            case 'schedule_next_tick':
+                store.scheduleNextTick({
+                    jobId: ctx.jobId,
+                    scheduledAt: requiredDirectiveString(directive, 'scheduledAt'),
+                    updatedAt: stringField(directive, 'updatedAt') ?? ctx.now(),
+                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
+                });
+                appliedCount += 1;
+                changedStatus = true;
+                break;
+            case 'release_lease':
+                store.releaseLease({
+                    leaseId: stringField(directive, 'leaseId') ?? ctx.leaseId,
+                    releasedAt: stringField(directive, 'releasedAt') ?? ctx.now(),
+                    reasonCode: stringField(directive, 'reasonCode') ?? RUNNER_REASON_CODES.OK,
+                });
+                appliedCount += 1;
+                releasedLease = true;
+                break;
+        }
+        const redactions = directive.redactionSummary;
+        if (Array.isArray(redactions)) {
+            redactionSummary.push(...redactions.filter((item) => typeof item === 'string').slice(0, 5));
+        }
+    }
+    return { appliedCount, releasedLease, changedStatus, redactionSummary };
+}
+function persistRunnerProcessingSummaries(store, metadata, ctx) {
+    const persisted = [];
+    const seenExecutionIds = new Set();
+    for (const candidate of extractRunnerProcessingSummaryCandidates(metadata)) {
+        const input = normalizeRunnerProcessingSummaryCandidate(candidate, ctx);
+        if (!input || seenExecutionIds.has(input.executionId))
+            continue;
+        seenExecutionIds.add(input.executionId);
+        try {
+            store.recordProcessingOutputSummary(input);
+            persisted.push(publicRunnerProcessingSummary(input));
+        }
+        catch (error) {
+            if (error instanceof ContinuitySqliteStoreError && error.code === 'sqlite-public-safety-rejected')
+                continue;
+            throw error;
+        }
+    }
+    return persisted;
+}
+function extractRunnerProcessingSummaryCandidates(metadata) {
+    if (!metadata)
+        return [];
+    const candidates = [];
+    const stateUpdate = recordField(metadata, 'continuityStateUpdate');
+    const operations = arrayField(stateUpdate, 'operations');
+    for (const operation of operations) {
+        if (!isRecord(operation))
+            continue;
+        const event = recordField(operation, 'event');
+        if (!event || stringField(event, 'type') !== CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE)
+            continue;
+        candidates.push({ operation, event, summary: recordField(event, 'processingOutputSummary') ?? event });
+    }
+    for (const directive of extractRunnerDirectives(metadata)) {
+        if (!isProcessingSummaryDirective(directive))
+            continue;
+        candidates.push({ directive, event: directive, summary: recordField(directive, 'processingOutputSummary') ?? directive });
+    }
+    for (const summary of [
+        ...arrayField(metadata, 'processingSummaries'),
+        ...arrayField(metadata, 'processingOutputSummaries'),
+        ...arrayField(metadata, 'continuityProcessingSummaries'),
+        ...arrayField(recordField(metadata, 'continuity'), 'processingSummaries'),
+    ]) {
+        if (isRecord(summary))
+            candidates.push({ event: summary, summary });
+    }
+    return candidates;
+}
+function normalizeRunnerProcessingSummaryCandidate(candidate, ctx) {
+    if (!candidateMarkedPublicSafe(candidate))
+        return null;
+    const event = candidate.event ?? {};
+    const summary = candidate.summary ?? event;
+    const operation = candidate.operation ?? {};
+    const directive = candidate.directive ?? {};
+    const executionId = stringField(summary, 'executionId')
+        ?? stringField(event, 'executionId')
+        ?? stringField(operation, 'operationId')
+        ?? stringField(directive, 'operationId')
+        ?? ctx.tickId;
+    const jobId = stringField(summary, 'jobId')
+        ?? stringField(event, 'jobId')
+        ?? stringField(operation, 'jobId')
+        ?? stringField(directive, 'jobId')
+        ?? ctx.jobId;
+    if (jobId !== ctx.jobId)
+        return null;
+    const publicSummary = stringField(summary, 'publicSummary')
+        ?? stringField(event, 'publicSummary')
+        ?? stringField(event, 'summary')
+        ?? stringField(directive, 'summary');
+    if (!executionId || !publicSummary)
+        return null;
+    const metadata = mergePublicSummaryMetadata(recordField(operation, 'metadata'), recordField(event, 'metadata'), recordField(summary, 'metadata'), recordField(directive, 'metadata'), {
+        schemaVersion: 1,
+        contractVersion: 'continuity-v1',
+        executionId,
+        jobId,
+        operationId: executionId,
+        runnerId: ctx.runnerId,
+        leaseId: ctx.leaseId,
+        processingOutputSource: ctx.source,
+        publicSummary,
+    });
+    return {
+        eventId: stringField(event, 'eventId') ?? stringField(summary, 'eventId') ?? stringField(directive, 'eventId'),
+        executionId,
+        jobId,
+        idempotencyKey: stringField(operation, 'idempotencyKey') ?? stringField(directive, 'idempotencyKey') ?? executionId,
+        goalId: stringField(summary, 'goalId') ?? stringField(event, 'goalId') ?? stringField(operation, 'goalId'),
+        loopId: stringField(summary, 'loopId') ?? stringField(event, 'loopId') ?? stringField(operation, 'loopId'),
+        publicSummary,
+        reasonCode: stringField(summary, 'reasonCode') ?? stringField(event, 'reasonCode') ?? stringField(operation, 'reasonCode') ?? stringField(directive, 'reasonCode'),
+        createdAt: stringField(summary, 'createdAt') ?? stringField(event, 'createdAt') ?? stringField(operation, 'createdAt') ?? stringField(directive, 'createdAt') ?? ctx.createdAt,
+        source: ctx.source,
+        metadata,
+    };
+}
+function isProcessingSummaryDirective(directive) {
+    return directive.kind === 'append_event'
+        && (stringField(directive, 'eventType') ?? stringField(directive, 'type')) === CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE;
+}
+function candidateMarkedPublicSafe(candidate) {
+    const markers = [candidate.operation, candidate.event, candidate.summary, candidate.directive]
+        .filter((item) => Boolean(item))
+        .map((item) => item.publicSafe);
+    if (markers.some((marker) => marker === false))
+        return false;
+    return markers.some((marker) => marker === true);
+}
+function mergePublicSummaryMetadata(...records) {
+    const output = {};
+    for (const record of records) {
+        if (record)
+            Object.assign(output, record);
+    }
+    return output;
+}
+function publicRunnerProcessingSummary(input) {
+    return {
+        eventId: input.eventId ?? processingSummaryOutputEventId(input.executionId),
+        executionId: input.executionId,
+        jobId: input.jobId,
+        publicSummary: input.publicSummary,
+        ...(input.reasonCode ? { reasonCode: input.reasonCode } : {}),
+        createdAt: input.createdAt,
+        source: normalizeRunnerProcessingSummarySource(input.source),
+        publicSafe: true,
+    };
+}
+function processingSummaryOutputEventId(executionId) {
+    const safe = executionId.replace(/[^a-z0-9_.:-]+/gi, '-').replace(/^-+|-+$/g, '');
+    if (safe.length > 0)
+        return `event-processing-summary-${safe.slice(0, 160)}`;
+    return `event-processing-summary-${createHash('sha256').update(executionId).digest('hex').slice(0, 32)}`;
+}
+function appendTickReceipt(store, input) {
+    const receipt = {
+        receiptId: `receipt-${sanitizeId(input.tickId)}`,
+        jobId: input.jobId,
+        operationId: input.tickId,
+        idempotencyKey: input.tickId,
+        status: input.status,
+        reasonCode: input.reasonCode,
+        appliedOperationIds: input.status === 'applied' ? [input.tickId] : undefined,
+        ignoredOperationIds: input.status === 'ignored' ? [input.tickId] : undefined,
+        createdAt: input.createdAt,
+        metadata: receiptMetadata({
+            jobId: input.jobId,
+            operationId: input.tickId,
+            leaseId: input.leaseId,
+            status: input.status,
+            reasonCode: input.reasonCode,
+            redactionSummary: input.redactionSummary,
+        }),
+    };
+    store.appendReceipt(receipt);
+    return {
+        jobId: input.jobId,
+        tickId: input.tickId,
+        leaseId: input.leaseId,
+        outcome: input.status,
+        reasonCode: input.reasonCode,
+        timestamp: input.createdAt,
+        redactionSummary: input.redactionSummary,
+        publicSafe: true,
+    };
+}
+function receiptMetadata(input) {
+    return {
+        schemaVersion: 1,
+        contractVersion: 'continuity-v1',
+        jobId: input.jobId,
+        operationId: input.operationId,
+        ...(input.runnerId ? { runnerId: input.runnerId } : {}),
+        ...(input.leaseId ? { leaseId: input.leaseId } : {}),
+        status: input.status,
+        reasonCode: input.reasonCode,
+        redactionEvidence: (input.redactionSummary ?? []).slice(0, 20).map((summary) => ({
+            field: boundPublicString(summary, 80),
+            reason: 'unsafe_key',
+            evidence: 'operation-denied',
+            publicSafe: true,
+        })),
+    };
+}
+function extractPublicRunnerReasonCode(metadata) {
+    if (!metadata)
+        return null;
+    const continuity = isRecord(metadata.continuity) ? metadata.continuity : undefined;
+    const loop = continuity && isRecord(continuity.loop) ? continuity.loop : undefined;
+    const goal = continuity && isRecord(continuity.goal) ? continuity.goal : undefined;
+    const candidates = [
+        loop?.reasonCode,
+        goal?.reasonCode,
+        continuity?.reasonCode,
+    ];
+    for (const candidate of candidates) {
+        if (typeof candidate === 'string' && /^[a-z0-9][a-z0-9-]{0,79}$/.test(candidate) && !UNSAFE_VALUE_PATTERN.test(candidate)) {
+            return candidate;
+        }
+    }
+    return null;
+}
+function parseRunnerArgs(argv) {
+    const first = argv[0];
+    if (!first || first === '--help' || first === '-h' || first === 'help')
+        return { command: 'help' };
+    if (first === '--version' || first === '-v' || first === 'version')
+        return { command: 'version' };
+    if (first !== 'tick' && first !== 'sync' && first !== 'heartbeat' && !isSchedulerCommand(first))
+        return { command: 'unknown' };
+    let projectRoot;
+    let runnerId;
+    let serverUrl;
+    let limit;
+    let leaseMs;
+    let staleLeaseAfterMs;
+    let dryRun;
+    let intervalSeconds;
+    let intervalMs;
+    let maxRuns;
+    let heartbeatBackoffMs;
+    let heartbeatTimeoutMs;
+    let heartbeatJitterRatio;
+    let sessionId;
+    let strategy;
+    let allowCronFallback;
+    let scheduled;
+    let loop;
+    let workspaceId;
+    let workspaceLabel;
+    let projectId;
+    let projectLabel;
+    let syncCursor;
+    let yoloopLocalCap;
+    for (let index = 1; index < argv.length; index++) {
+        const arg = argv[index];
+        const next = argv[index + 1];
+        if (arg === '--project-root') {
+            projectRoot = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--runner-id') {
+            runnerId = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--server-url') {
+            serverUrl = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--limit') {
+            limit = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--lease-ms') {
+            leaseMs = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--stale-lease-after-ms') {
+            staleLeaseAfterMs = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--dry-run') {
+            dryRun = true;
+            continue;
+        }
+        if (arg === '--interval-seconds') {
+            intervalSeconds = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--interval-ms') {
+            intervalMs = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--max-runs') {
+            maxRuns = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--backoff-ms') {
+            heartbeatBackoffMs = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--heartbeat-timeout-ms' || arg === '--timeout-ms') {
+            heartbeatTimeoutMs = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--jitter-ratio') {
+            heartbeatJitterRatio = Number(next);
+            index += 1;
+            continue;
+        }
+        if (arg === '--session-id') {
+            sessionId = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--strategy' && isSchedulerStrategy(next)) {
+            strategy = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--allow-cron-fallback') {
+            allowCronFallback = true;
+            continue;
+        }
+        if (arg === '--no-cron-fallback') {
+            allowCronFallback = false;
+            continue;
+        }
+        if (arg === '--scheduled') {
+            scheduled = true;
+            continue;
+        }
+        if (arg === '--manual') {
+            scheduled = false;
+            continue;
+        }
+        if (arg === '--loop' || arg === '--background') {
+            loop = true;
+            continue;
+        }
+        if (arg === '--once') {
+            loop = false;
+            continue;
+        }
+        if (arg === '--workspace-id') {
+            workspaceId = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--workspace-label') {
+            workspaceLabel = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--project-id') {
+            projectId = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--project-label') {
+            projectLabel = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--sync-cursor') {
+            syncCursor = next;
+            index += 1;
+            continue;
+        }
+        if (arg === '--yoloop-local-cap') {
+            yoloopLocalCap = Number(next);
+            index += 1;
+            continue;
+        }
+    }
+    return {
+        command: first,
+        projectRoot,
+        runnerId,
+        serverUrl,
+        limit,
+        leaseMs,
+        staleLeaseAfterMs,
+        dryRun,
+        intervalSeconds,
+        intervalMs,
+        maxRuns,
+        heartbeatBackoffMs,
+        heartbeatTimeoutMs,
+        heartbeatJitterRatio,
+        sessionId,
+        strategy,
+        allowCronFallback,
+        scheduled,
+        loop,
+        workspaceId,
+        workspaceLabel,
+        projectId,
+        projectLabel,
+        syncCursor,
+        yoloopLocalCap,
+    };
+}
+function runnerCliPortalSyncOptions(parsed, options, mode) {
+    if (options.portalSync === false)
+        return false;
+    const base = options.portalSync ?? {};
+    return {
+        ...base,
+        ...(parsed.projectRoot ?? options.projectRoot ? { projectRoot: parsed.projectRoot ?? options.projectRoot } : {}),
+        ...(parsed.runnerId ?? options.runnerId ? { runnerId: parsed.runnerId ?? options.runnerId } : {}),
+        ...(parsed.sessionId ?? options.portalHeartbeatSessionId ? { sessionId: parsed.sessionId ?? options.portalHeartbeatSessionId } : {}),
+        ...(parsed.serverUrl ?? options.serverUrl ? { serverUrl: parsed.serverUrl ?? options.serverUrl } : {}),
+        ...(parsed.workspaceId ? { workspaceId: parsed.workspaceId } : {}),
+        ...(parsed.workspaceLabel ? { workspaceLabel: parsed.workspaceLabel } : {}),
+        ...(parsed.projectId ? { projectId: parsed.projectId } : {}),
+        ...(parsed.projectLabel ? { projectLabel: parsed.projectLabel } : {}),
+        ...(parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs ? { heartbeatTimeoutMs: parsed.heartbeatTimeoutMs ?? options.portalHeartbeatTimeoutMs } : {}),
+        mode,
+    };
+}
+const RUNNER_HELP = `
 neocortex-runner - Enterprise continuity local runner
 
 Usage:
@@ -67,4 +1412,213 @@ Headless doctor evidence:
   only bounded attempt status, runtime/model IDs, counts, reason codes, cursors and
   redaction counts; raw adapter stdout/stderr, prompts, transcripts, private URLs,
   local absolute paths, secrets and vendor payloads are never printed.
-`.trim();function le(e){return e==="install"||e==="start"||e==="stop"||e==="status"||e==="doctor"}function at(e){return e==="systemd-user"||e==="launchd-user"||e==="windows-task-scheduler"||e==="cron-fallback"}class U extends Error{constructor(t){super(t),this.name="RunnerDirectiveError"}}function ue(e){if(j(e)){const r=typeof e.reasonCode=="string"?e.reasonCode:typeof e.code=="string"?e.code:void 0;if(r===d.SQLITE_ADAPTER_UNAVAILABLE||r===d.SQLITE_INTEGRITY_FAILED)return r}const t=e instanceof Error?e.message:String(e);return/sqlite-adapter-unavailable/i.test(t)?d.SQLITE_ADAPTER_UNAVAILABLE:/sqlite-integrity-failed|not a database|file is not a database|database disk image is malformed|malformed/i.test(t)?d.SQLITE_INTEGRITY_FAILED:"runner-tick-failed"}function x(e){return z(e instanceof Error?e.message:String(e),240)}function st(e){return e.manifests.length===0?e:{...e,manifests:e.manifests.map(t=>({...t,content:`[redacted ${t.kind} for project ${e.identity.projectKey}]`}))}}function nt(e){return`runner-${W("sha256").update(e).update(process.pid.toString()).digest("hex").slice(0,12)}`}function ct(e,t){const r=Ee(4).toString("hex");return`${e}-${Y(t)}-${Date.now()}-${r}`}function Y(e){return e.replace(/[^a-z0-9_.:-]+/gi,"-").slice(0,120)}function F(e,t,r){return Number.isFinite(e)?Math.max(t,Math.min(r,Math.floor(e))):t}function pe(e,t,r){return Number.isFinite(e)?Math.max(t,Math.min(r,e)):t}function me(e,t,r){if(e<=0)return 0;if(t<=0)return e;const o=pe(r(),0,1);return Math.max(0,e+Math.floor(e*t*o))}function dt(e,t){const r=Date.parse(e);return new Date((Number.isFinite(r)?r:Date.now())+t).toISOString()}function it(e){return typeof e.kind=="string"?e:{...e,kind:e.type}}function lt(e){return typeof e.kind=="string"&&e.publicSafe===!0}function Q(e,t){if(typeof e=="string"){if(q.test(e))throw new U(`Unsafe directive value at ${t}.`);return}if(!(e===null||typeof e=="number"||typeof e=="boolean")){if(Array.isArray(e)){e.forEach((r,o)=>Q(r,`${t}[${o}]`));return}if(j(e)){for(const[r,o]of Object.entries(e)){if(xe.test(r))throw new U(`Unsafe directive key at ${t}.${r}.`);Q(o,`${t}.${r}`)}return}throw new U(`Unsupported directive value at ${t}.`)}}function n(e,t){const r=e[t];return typeof r=="string"&&r.length>0?r:void 0}function ut(e,t){const r=n(e,t);if(!r)throw new U(`Directive missing ${t}.`);return r}function fe(e){const t=e.metadata;return j(t)?t:void 0}function D(e,t){if(!e)return;const r=e[t];return j(r)?r:void 0}function $(e,t){if(!e)return[];const r=e[t];return Array.isArray(r)?r:[]}function pt(e){return e&&Oe.has(e)?e:"applied"}function mt(e){if(!e||!Me.has(e))throw new U("Directive status is not allowlisted.");return e}function he(e){return e==="scheduled_tick"||e==="runner_tick"||e==="manual_tick"?e:"manual_tick"}function j(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function J(e){return Array.from(new Set(e))}function _(e,t){return typeof e[t]=="number"?e[t]:0}function ft(e,t){return{trustFailures:B(e,t,re),adapterUnavailable:B(e,t,oe),authRequired:B(e,t,ae),retryBackoff:B(e,t,se,new Set(["backoff"])),timeout:B(e,t,ne,new Set(["timed_out"])),genericFailed:ht(e,t),redactions:e.reduce((r,o)=>r+bt(o),0)}}function B(e,t,r,o=new Set){const a=e.filter(s=>(s.reason_code?r.has(s.reason_code):!1)||o.has(s.status)).length;return a>0?a:t.some(s=>r.has(s))?1:0}function ht(e,t){const r=e.filter(o=>o.reason_code&&ce.has(o.reason_code)?!0:o.status!=="failed"?!1:!o.reason_code||!re.has(o.reason_code)&&!oe.has(o.reason_code)&&!ae.has(o.reason_code)&&!se.has(o.reason_code)&&!ne.has(o.reason_code)).length;return r>0?r:t.some(o=>ce.has(o))?1:0}function bt(e){if(!e.redaction_summary_json)return 0;try{const t=JSON.parse(e.redaction_summary_json);return Array.isArray(t)?t.length:0}catch{return 0}}function w(e,t,r,o,a,s){return{id:e,label:t,status:r,reasonCodes:J(o.length>0?o:[d.OK]),summary:z(a,180),...s?{counts:s}:{},publicSafe:!0}}function z(e,t){const r=q.test(e)?"[REDACTED]":e;return r.length<=t?r:`${r.slice(0,t)}\u2026[TRUNCATED:${r.length-t}]`}export{je as DEFAULT_DUE_JOB_LIMIT,Te as DEFAULT_RUNNER_BACKOFF_MS,Le as DEFAULT_RUNNER_LEASE_MS,Ce as DEFAULT_STALE_LEASE_AFTER_MS,Dt as LOCAL_JOBS_CONSOLE_REASON_CODES,Ne as MAX_DUE_JOB_LIMIT,Tt as RUNNER_BINARY_REASON_CODES,d as RUNNER_REASON_CODES,Je as assertRunnerDirectiveTrusted,jt as checkRunnerBinaryTrust,Ot as createLocalJobConsoleServer,Fe as defaultRunnerServerInvoker,de as extractRunnerDirectives,Mt as isLocalJobsConsoleArgs,xt as localJobConsoleSocketPath,Ft as parseLocalJobsConsoleArgs,Ht as runLocalJobsConsoleCommand,wt as runRunnerCli,Ke as runRunnerDoctor,He as runRunnerTick,Nt as runnerTrustRelativePath};
+`.trim();
+function isSchedulerCommand(value) {
+    return value === 'install' || value === 'start' || value === 'stop' || value === 'status' || value === 'doctor';
+}
+function isSchedulerStrategy(value) {
+    return value === 'systemd-user' || value === 'launchd-user' || value === 'windows-task-scheduler' || value === 'cron-fallback';
+}
+class RunnerDirectiveError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RunnerDirectiveError';
+    }
+}
+function classifyRunnerError(error) {
+    if (isRecord(error)) {
+        const code = typeof error.reasonCode === 'string' ? error.reasonCode : typeof error.code === 'string' ? error.code : undefined;
+        if (code === RUNNER_REASON_CODES.SQLITE_ADAPTER_UNAVAILABLE || code === RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED)
+            return code;
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    if (/sqlite-adapter-unavailable/i.test(message))
+        return RUNNER_REASON_CODES.SQLITE_ADAPTER_UNAVAILABLE;
+    if (/sqlite-integrity-failed|not a database|file is not a database|database disk image is malformed|malformed/i.test(message))
+        return RUNNER_REASON_CODES.SQLITE_INTEGRITY_FAILED;
+    return 'runner-tick-failed';
+}
+function publicErrorMessage(error) {
+    return boundPublicString(error instanceof Error ? error.message : String(error), 240);
+}
+function publicRunnerSchedulerCommandResult(summary) {
+    if (summary.manifests.length === 0)
+        return summary;
+    return {
+        ...summary,
+        manifests: summary.manifests.map((manifest) => ({
+            ...manifest,
+            content: `[redacted ${manifest.kind} for project ${summary.identity.projectKey}]`,
+        })),
+    };
+}
+function defaultRunnerId(projectRoot) {
+    const hash = createHash('sha256').update(projectRoot).update(process.pid.toString()).digest('hex').slice(0, 12);
+    return `runner-${hash}`;
+}
+function defaultIdFactory(prefix, jobId) {
+    const entropy = randomBytes(4).toString('hex');
+    return `${prefix}-${sanitizeId(jobId)}-${Date.now()}-${entropy}`;
+}
+function sanitizeId(value) {
+    return value.replace(/[^a-z0-9_.:-]+/gi, '-').slice(0, 120);
+}
+function boundedInteger(value, min, max) {
+    if (!Number.isFinite(value))
+        return min;
+    return Math.max(min, Math.min(max, Math.floor(value)));
+}
+function boundedNumber(value, min, max) {
+    if (!Number.isFinite(value))
+        return min;
+    return Math.max(min, Math.min(max, value));
+}
+function jitteredDelayMs(baseDelayMs, jitterRatio, random) {
+    if (baseDelayMs <= 0)
+        return 0;
+    if (jitterRatio <= 0)
+        return baseDelayMs;
+    const boundedRandom = boundedNumber(random(), 0, 1);
+    return Math.max(0, baseDelayMs + Math.floor(baseDelayMs * jitterRatio * boundedRandom));
+}
+function addMilliseconds(iso, ms) {
+    const base = Date.parse(iso);
+    return new Date((Number.isFinite(base) ? base : Date.now()) + ms).toISOString();
+}
+function normalizeDirective(value) {
+    return typeof value.kind === 'string' ? value : { ...value, kind: value.type };
+}
+function isRunnerDirective(value) {
+    return typeof value.kind === 'string' && value.publicSafe === true;
+}
+function assertPublicSafeDirectiveValue(value, path) {
+    if (typeof value === 'string') {
+        if (UNSAFE_VALUE_PATTERN.test(value))
+            throw new RunnerDirectiveError(`Unsafe directive value at ${path}.`);
+        return;
+    }
+    if (value === null || typeof value === 'number' || typeof value === 'boolean')
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertPublicSafeDirectiveValue(item, `${path}[${index}]`));
+        return;
+    }
+    if (isRecord(value)) {
+        for (const [key, child] of Object.entries(value)) {
+            if (UNSAFE_KEY_PATTERN.test(key))
+                throw new RunnerDirectiveError(`Unsafe directive key at ${path}.${key}.`);
+            assertPublicSafeDirectiveValue(child, `${path}.${key}`);
+        }
+        return;
+    }
+    throw new RunnerDirectiveError(`Unsupported directive value at ${path}.`);
+}
+function stringField(input, key) {
+    const value = input[key];
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function requiredDirectiveString(input, key) {
+    const value = stringField(input, key);
+    if (!value)
+        throw new RunnerDirectiveError(`Directive missing ${key}.`);
+    return value;
+}
+function metadataField(input) {
+    const value = input.metadata;
+    return isRecord(value) ? value : undefined;
+}
+function recordField(input, key) {
+    if (!input)
+        return undefined;
+    const value = input[key];
+    return isRecord(value) ? value : undefined;
+}
+function arrayField(input, key) {
+    if (!input)
+        return [];
+    const value = input[key];
+    return Array.isArray(value) ? value : [];
+}
+function receiptStatus(value) {
+    return value && RECEIPT_STATUSES.has(value) ? value : 'applied';
+}
+function jobStatus(value) {
+    if (!value || !JOB_STATUSES.has(value))
+        throw new RunnerDirectiveError('Directive status is not allowlisted.');
+    return value;
+}
+function normalizeRunnerProcessingSummarySource(value) {
+    return value === 'scheduled_tick' || value === 'runner_tick' || value === 'manual_tick' ? value : 'manual_tick';
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function unique(values) {
+    return Array.from(new Set(values));
+}
+function count(input, key) {
+    return typeof input[key] === 'number' ? input[key] : 0;
+}
+function summarizeRunnerHeadlessDiagnostics(attempts, reasonCodes) {
+    return {
+        trustFailures: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_TRUST_FAILURE_REASON_CODES),
+        adapterUnavailable: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_ADAPTER_UNAVAILABLE_REASON_CODES),
+        authRequired: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_AUTH_REQUIRED_REASON_CODES),
+        retryBackoff: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_BACKOFF_REASON_CODES, new Set(['backoff'])),
+        timeout: countRunnerHeadlessSignals(attempts, reasonCodes, RUNNER_HEADLESS_TIMEOUT_REASON_CODES, new Set(['timed_out'])),
+        genericFailed: countRunnerGenericHeadlessFailures(attempts, reasonCodes),
+        redactions: attempts.reduce((total, attempt) => total + runnerHeadlessRedactionCount(attempt), 0),
+    };
+}
+function countRunnerHeadlessSignals(attempts, snapshotReasonCodes, reasonCodes, statuses = new Set()) {
+    const attemptCount = attempts.filter((attempt) => {
+        const reasonMatch = attempt.reason_code ? reasonCodes.has(attempt.reason_code) : false;
+        return reasonMatch || statuses.has(attempt.status);
+    }).length;
+    if (attemptCount > 0)
+        return attemptCount;
+    return snapshotReasonCodes.some((reasonCode) => reasonCodes.has(reasonCode)) ? 1 : 0;
+}
+function countRunnerGenericHeadlessFailures(attempts, snapshotReasonCodes) {
+    const attemptCount = attempts.filter((attempt) => {
+        if (attempt.reason_code && RUNNER_HEADLESS_GENERIC_FAILURE_REASON_CODES.has(attempt.reason_code))
+            return true;
+        if (attempt.status !== 'failed')
+            return false;
+        return !attempt.reason_code
+            || (!RUNNER_HEADLESS_TRUST_FAILURE_REASON_CODES.has(attempt.reason_code)
+                && !RUNNER_HEADLESS_ADAPTER_UNAVAILABLE_REASON_CODES.has(attempt.reason_code)
+                && !RUNNER_HEADLESS_AUTH_REQUIRED_REASON_CODES.has(attempt.reason_code)
+                && !RUNNER_HEADLESS_BACKOFF_REASON_CODES.has(attempt.reason_code)
+                && !RUNNER_HEADLESS_TIMEOUT_REASON_CODES.has(attempt.reason_code));
+    }).length;
+    if (attemptCount > 0)
+        return attemptCount;
+    return snapshotReasonCodes.some((reasonCode) => RUNNER_HEADLESS_GENERIC_FAILURE_REASON_CODES.has(reasonCode)) ? 1 : 0;
+}
+function runnerHeadlessRedactionCount(attempt) {
+    if (!attempt.redaction_summary_json)
+        return 0;
+    try {
+        const parsed = JSON.parse(attempt.redaction_summary_json);
+        return Array.isArray(parsed) ? parsed.length : 0;
+    }
+    catch {
+        return 0;
+    }
+}
+function doctorCheck(id, label, status, reasonCodes, summary, counts) {
+    return {
+        id,
+        label,
+        status,
+        reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [RUNNER_REASON_CODES.OK]),
+        summary: boundPublicString(summary, 180),
+        ...(counts ? { counts } : {}),
+        publicSafe: true,
+    };
+}
+function boundPublicString(value, maxChars) {
+    const redacted = UNSAFE_VALUE_PATTERN.test(value) ? '[REDACTED]' : value;
+    return redacted.length <= maxChars ? redacted : `${redacted.slice(0, maxChars)}…[TRUNCATED:${redacted.length - maxChars}]`;
+}