@ornexus/neocortex 4.60.72 → 4.60.73

package/packages/client/dist/continuity/sqlite-store.js

@@ -1,31 +1,1262 @@
-import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";import{chmodSync as z,closeSync as ge,existsSync as te,mkdirSync as ae,openSync as Ae,readSync as xe}from"node:fs";import{dirname as re,join as se}from"node:path";import{INITIAL_CONTINUITY_SQLITE_MIGRATION as Re}from"./migrations/001-initial-schema.js";import{PROCESSING_OUTPUT_SUMMARY_SQLITE_MIGRATION as Oe}from"./migrations/002-processing-output-summary-indexes.js";import{HEADLESS_EXECUTION_ATTEMPTS_SQLITE_MIGRATION as Ne}from"./migrations/003-headless-execution-attempts.js";import{OUTBOX_DELIVERY_STATE_SQLITE_MIGRATION as Te}from"./migrations/004-outbox-delivery-state.js";import{BOUNDED_HEADLESS_QUEUE_SQLITE_MIGRATION as Le}from"./migrations/005-bounded-headless-queue.js";import{NATIVE_AGENT_DISPATCHES_SQLITE_MIGRATION as ve}from"./migrations/006-native-agent-dispatches.js";import{NATIVE_AGENT_TERMINAL_STATES as oe,isNativeAgentDispatchReceiptV1 as X,isNativeAgentStateTransitionAllowed as je,isNativeDispatchBindingV1 as Me,isNativeHostAttestationV1 as ke}from"./native-agent-types.js";import{CONTINUITY_QUEUE_REASON_CODES as k,CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE as W,CONTINUITY_RECEIPT_RETENTION_REASON_CODES as F,DEFAULT_CONTINUITY_QUEUE_POLICY as De,computeContinuityQueueRetryAt as Ue,computeContinuityOutboxFailureDecision as we,normalizeContinuityQueuePolicy as B,normalizeContinuityQueuePriority as qe,normalizeContinuityQueueScope as Pe,normalizeContinuityRetentionPolicy as He}from"./outbox.js";const ne=".neocortex/continuity",We="continuity.sqlite",kt=6,Fe=5e3,O="processing_output_summary",Be=2e3,de=20,$e=100,ie="Install the optional Enterprise continuity SQLite adapter with `npm install --workspace packages/client better-sqlite3 --include=optional` or reinstall Neocortex with optional dependencies enabled.",Ye=Object.freeze(["discover_more","create_epic","run_yoloop","run_yolo","run_verifier","run_review_gate","compact_context","wait_external","backoff","waiting_human","complete","abort","scheduled","running","overlap_skipped","missed_run_catchup","completed","aborted","cancelled","blocked","draft","planned"]),ce=20,Ke=new Set(Ye),Ve=/^\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}(?::\d{2}(?:\.\d{1,6})?)?(?:Z|[+-]\d{2}:?\d{2})?$/;function le(a){return typeof a=="string"&&Ke.has(a)}function ue(a){if(typeof a!="string")return;const e=a.trim();if(!(e.length===0||e.length>40)&&Ve.test(e))return e}function Ge(a){if(!Array.isArray(a))return[];const e=[];for(const t of a){if(!E(t)||!le(t.stage))continue;const r=ue(t.at);r&&e.push({stage:t.stage,at:r})}return e.slice(-ce)}function Qe(a){if(!(typeof a!="number"||!Number.isFinite(a)||a<0))return Math.floor(a)}class i extends Error{code;reasonCode;guidance;mutationBlocked;cause;constructor(e,t,r={}){super(t),this.name="ContinuitySqliteStoreError",this.code=e,this.reasonCode=e,this.guidance=r.guidance,this.cause=r.cause,this.mutationBlocked=r.mutationBlocked??e==="sqlite-integrity-failed"}}function $(a){const e=Object.freeze({schemaVersion:1,storyId:a.story_id,graphRevision:a.graph_revision,dispatchKey:a.dispatch_key,profile:a.profile,parentHandle:a.parent_handle,handle:a.handle,topology:a.topology,state:a.state,requestedAt:a.requested_at,observedAt:a.observed_at,terminalAt:a.terminal_at,freshness:a.freshness,observationSource:a.observation_source,reasonCode:a.reason_code,revision:a.revision,publicSafe:!0});if(!X(e))throw new i("sqlite-integrity-failed","Native-agent receipt failed its closed public contract.",{mutationBlocked:!0});return e}const Je=[Re,Oe,Ne,Te,Le,ve],ze=Object.freeze(["continuity_migrations","jobs","job_leases","job_events","job_receipts","goal_campaigns","goal_ledger_items","goal_verifiers","goal_review_gates","loop_jobs","artifacts","state_snapshots","headless_execution_attempts","runner_config","outbox","native_agent_dispatches","native_agent_observations"]),_e=/(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i,me=/(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_ -]?(?:logs?|outputs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|prompt[_ -]?(?:body|text)|workflow body|step body|\bargv\b|(?:bash|sh|zsh|powershell|pwsh)\s+-c\b|(?:\.{0,2}\/|[A-Za-z]:\\|\/)[^\s]*(?:\.exe|\.bat|\.cmd|\.ps1|\.sh|\/bin\/[^\s]+)|\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH)|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY)|P192[_-]?SYNTHETIC[_-]?(?:PORTAL|RUNNER|SYNC))/i,Xe=new Set(["unsafe_key","raw_log","prompt_body","private_url","local_absolute_path","secret","protected_field","unbounded_text","unbounded_number","unknown_required_operation","missing"]),Ze=/(corrupt|malformed|not a database|file is not a database|database disk image is malformed)/i,et=/(foreign key constraint failed|SQLITE_CONSTRAINT_FOREIGNKEY)/i,Z="p185:v1:",tt=new Set(["schemaVersion","contractVersion","eventType","executionId","jobId","operationId","idempotencyKey","goalId","loopId","campaignId","itemId","ledgerItemIds","verifierId","verifierIds","gateId","reviewGateIds","runnerId","leaseId","status","reasonCode","reasonCodes","runtimeId","modelId","runtimeSource","headlessRuntime","headlessModel","headlessRuntimeReasonCode","originRuntime","originModel","targetRef","attemptId","attemptStatus","terminalClass","releaseBlocked","directiveHash","timeoutMs","leaseExpiresAt","heartbeatAt","notBeforeAt","maxAttempts","counts","hashes","relativePaths","artifactRefs","evidenceRefs","validationRefs","registryRefs","storyIds","epicIds","debtIds","iteration","currentStage","stageHistory","durationMs","retryCount","attemptCount","queuePriority","queueScope","queueCap","queueDepth","queueAvailable","queueBackpressure","nextTickAt","nextAttemptAt","nextRetryAt","deadLetterReasonCode","deliveryCursor","lastAttemptAt","sentAt","ackedAt","lastErrorReason","lastErrorSummary","deadLetterSummary","deadLetteredAt","processingOutputSource","publicSummary","redactionEvidence","selectorKind","targetId","targetJobId","relatedJobIds","serverAccessToLocalhost","serverHeldStream","initialCursor","targetResolutionState","targetKind","relatedJobCount","snapshotStatus","snapshotGeneratedAt","renderedSummaryCount","cursorState","currentCursor","nextCursor","cursorAdvanced","eventId","latestEventId","watchStatus","stopReason","syncVersion","transportKind","envelopeId","workspaceId","workspaceLabel","projectId","projectLabel","snapshotId","syncCursor","previousSyncCursor","nextSyncCursor","commandId","receiptId","acknowledgedAt","observedAt","generatedAt","syncStatus","commandStatus","receiptStatus","actorType","actorId","tenantId","commandKind","auditStatus","redactionCount","autonomousGovernance","governanceVersion","governanceEvidence","governanceSource","publicSafe"]),at=new Set(["foreground_invoke","scheduled_tick","runner_tick","manual_tick","headless_execution","jobs_command","invoke_watch","portal_render"]);function rt(a){return import(a)}function st(a){return`sha256:${M("sha256").update(a).digest("hex")}`}function E(a){return typeof a=="object"&&a!==null&&!Array.isArray(a)}function ot(a){return a instanceof Error?a.message:String(a)}function nt(a){return E(a)&&typeof a.code=="string"?a.code:void 0}function m(a,e){if(a instanceof i)return a;const t=ot(a),r=nt(a);return r==="SQLITE_CORRUPT"||r==="SQLITE_NOTADB"||Ze.test(t)?new i("sqlite-integrity-failed","Continuity SQLite integrity check failed; durable mutation is blocked until the store is repaired or rebuilt.",{cause:a,mutationBlocked:!0}):r==="SQLITE_CONSTRAINT_FOREIGNKEY"||et.test(t)?new i("sqlite-foreign-key-failed","Continuity SQLite foreign-key validation failed; mutation was rejected.",{cause:a}):new i(e,t,{cause:a})}function g(a,e){if(typeof a=="string"){if(/\.(?:redactionEvidence|redactionSummary)\[\d+\]\.field$/.test(e)&&/^[A-Za-z0-9_.:[\]-]{1,120}$/.test(a)||/\.(?:redactionEvidence|redactionSummary)\[\d+\]\.reason$/.test(e)&&Xe.has(a))return;if(me.test(a))throw new i("sqlite-public-safety-rejected",`Continuity SQLite metadata rejected unsafe value at ${e}.`);return}if(!(a===null||typeof a=="number"||typeof a=="boolean")){if(Array.isArray(a)){a.forEach((t,r)=>g(t,`${e}[${r}]`));return}if(E(a)){for(const[t,r]of Object.entries(a)){const s=t==="terminationToken"&&e.endsWith(".releaseBlocked")&&r==="[YOLOOP_RELEASE_BLOCKED]";if(_e.test(t)&&!s)throw new i("sqlite-public-safety-rejected",`Continuity SQLite metadata rejected unsafe key at ${e}.${t}.`);g(r,`${e}.${t}`)}return}throw new i("sqlite-public-safety-rejected",`Continuity SQLite metadata rejected unsupported value at ${e}.`)}}function b(a,e){if(a!==void 0&&me.test(a))throw new i("sqlite-public-safety-rejected",`Continuity SQLite text rejected unsafe value at ${e}.`)}function Y(a,e,t=240){if(a.trim().length===0)throw new i("sqlite-public-safety-rejected",`Continuity SQLite processing summary text is required at ${e}.`);if(b(a,e),a.length>t)throw new i("sqlite-public-safety-rejected",`Continuity SQLite processing summary text exceeded the public bound at ${e}.`)}function K(a){const e={};if(!a)return e;for(const[t,r]of Object.entries(a))if(tt.has(t)&&!_e.test(t))try{g(r,`metadata.${t}`),e[t]=r}catch{}return e}function dt(a){const e={...K(a.metadata),schemaVersion:1,contractVersion:"continuity-v1",eventType:O,executionId:a.executionId,jobId:a.jobId,operationId:a.executionId,publicSummary:a.publicSummary};return a.idempotencyKey&&(e.idempotencyKey=a.idempotencyKey),a.goalId&&(e.goalId=a.goalId),a.loopId&&(e.loopId=a.loopId),a.reasonCode&&(e.reasonCode=a.reasonCode),a.source&&at.has(a.source)&&(e.processingOutputSource=a.source),K(e)}function ye(a){const e=Math.floor(a??de);return Number.isFinite(e)?Math.max(1,Math.min($e,e)):de}function it(a){if(a.eventId&&a.eventId.trim().length>0)return a.eventId;const e=a.executionId.replace(/[^a-z0-9_.:-]+/gi,"-").replace(/^-+|-+$/g,"");return e.length>0?`event-processing-summary-${e.slice(0,160)}`:`event-processing-summary-${M("sha256").update(a.executionId).digest("hex").slice(0,32)}`}function ct(a){return`${Z}${J.from(JSON.stringify([a.created_at,a.event_id]),"utf8").toString("base64url")}`}function lt(a){if(a?.startsWith(Z))try{const e=a.slice(Z.length),t=JSON.parse(J.from(e,"base64url").toString("utf8"));if(!Array.isArray(t)||t.length!==2)return;const[r,s]=t;return typeof r!="string"||typeof s!="string"?void 0:{createdAt:r,eventId:s}}catch{return}}function D(a,e){if(!e)return;const t=e.trim().replace(/^@/,"");if(a==="job"&&/^job-J\d{3,}$/i.test(t))return`job-J${t.match(/\d+$/)?.[0]??""}`;if(a==="goal"&&/^goal-G\d{3,}$/i.test(t))return`goal-G${t.match(/\d+$/)?.[0]??""}`;if(a==="loop"&&/^loop-L\d{3,}$/i.test(t))return`loop-L${t.match(/\d+$/)?.[0]??""}`}function he(a){return a?q(a.map(e=>D("job",e)).filter(e=>!!e)):[]}function pe(a){const e=a.target;if(!e){const r=D("job",a.jobId);return r?{sql:" AND job_id = ?",params:[r]}:{sql:"",params:[]}}const t=e.selectorKind;if(t==="job"){const r=D("job",e.jobId??e.targetId??a.jobId);return r?{sql:" AND job_id = ?",params:[r]}:{sql:" AND 1 = 0",params:[]}}if(t==="goal"){const r=D("goal",e.goalId??e.targetId);if(!r)return{sql:" AND 1 = 0",params:[]};const s=he(e.relatedJobIds);return{sql:` AND (job_id = ? OR json_extract(metadata_json, '$.goalId') = ?${s.length>0?` OR job_id IN (${s.map(()=>"?").join(", ")})`:""})`,params:[r,r,...s]}}if(t==="loop"){const r=D("loop",e.loopId??e.targetId);if(!r)return{sql:" AND 1 = 0",params:[]};const s=he(e.relatedJobIds);return{sql:` AND (job_id = ? OR json_extract(metadata_json, '$.loopId') = ?${s.length>0?` OR job_id IN (${s.map(()=>"?").join(", ")})`:""})`,params:[r,r,...s]}}return{sql:" AND 1 = 0",params:[]}}function be(a){const e={event_id:a.event_id,job_id:a.job_id,execution_id:a.operation_id,public_summary:a.summary,reason_code:a.reason_code,created_at:a.created_at,metadata_json:a.metadata_json};return{...e,cursor:ct(e)}}function S(a){return a?(g(a,"metadata"),JSON.stringify(a)):null}function ut(a,e,t){const r=d=>`sha256:${M("sha256").update(d.map(o=>[o.id,o.status,o.reasonCode].join(":")).sort().join(`
-`)).digest("hex")}`,s=r(e),n=r(t);return{receipts:s,outputs:n,aggregate:`sha256:${M("sha256").update(`${a}:${s}:${n}`).digest("hex")}`}}function _t(a){if(!a)return{};try{const e=JSON.parse(a);return E(e)?{...e}:{}}catch{return{}}}function c(a,e,t,r=!1){if(a===void 0){if(r)throw new i("sqlite-public-safety-rejected",`Continuity SQLite text is required at ${e}.`);return}if(b(a,e),a.trim().length===0||a.length>t)throw new i("sqlite-public-safety-rejected",`Continuity SQLite text exceeded the public bound at ${e}.`)}function N(a,e){if(a!==void 0&&(!Number.isFinite(a)||a<0||Math.floor(a)!==a))throw new i("sqlite-public-safety-rejected",`Continuity SQLite numeric value rejected at ${e}.`)}function v(a){c(a.outboxId,"outbox.outboxId",160,!0),c(a.jobId,"outbox.jobId",160),c(a.operationId,"outbox.operationId",160),c(a.idempotencyKey,"outbox.idempotencyKey",160),c(a.type,"outbox.type",80),c(a.status,"outbox.status",40),c(a.deliveryCursor,"outbox.deliveryCursor",200),c(a.timestamp,"outbox.timestamp",80),c(a.reasonCode,"outbox.reasonCode",100),c(a.summary,"outbox.summary",240)}function Ie(a){return a==="pending"||a==="sent"||a==="acked"||a==="failed"||a==="dead_letter"}function mt(a){return typeof a=="string"&&Ie(a)?a:"failed"}function h(a){return typeof a=="string"&&a.length>0?a:void 0}function yt(a){if(typeof a!="string"||a.trim().length===0)return{};try{const e=JSON.parse(a);return E(e)?(g(e,"outbox.payload"),e):{}}catch{return{}}}function ht(a){return{outboxId:String(a.outbox_id??""),...h(a.job_id)?{jobId:h(a.job_id)}:{},operationId:String(a.operation_id??""),...h(a.idempotency_key)?{idempotencyKey:h(a.idempotency_key)}:{},type:String(a.type??""),status:mt(a.status),payload:yt(a.payload_json),retryCount:typeof a.retry_count=="number"?a.retry_count:0,attemptCount:typeof a.attempt_count=="number"?a.attempt_count:0,...h(a.delivery_cursor)?{deliveryCursor:h(a.delivery_cursor)}:{},...h(a.next_attempt_at)?{nextAttemptAt:h(a.next_attempt_at)}:{},...h(a.last_attempt_at)?{lastAttemptAt:h(a.last_attempt_at)}:{},...h(a.sent_at)?{sentAt:h(a.sent_at)}:{},...h(a.acked_at)?{ackedAt:h(a.acked_at)}:{},...h(a.last_error_code)?{lastErrorCode:h(a.last_error_code)}:{},...h(a.last_error_reason)?{lastErrorReason:h(a.last_error_reason)}:{},...h(a.last_error_summary)?{lastErrorSummary:h(a.last_error_summary)}:{},...h(a.dead_letter_summary)?{deadLetterSummary:h(a.dead_letter_summary)}:{},...h(a.dead_lettered_at)?{deadLetteredAt:h(a.dead_lettered_at)}:{},createdAt:String(a.created_at??""),updatedAt:String(a.updated_at??""),publicSafe:!0}}function C(a){return{...a,publicSafe:!0}}function T(a,e){return a===void 0?null:(g(a,e),JSON.stringify(a))}function U(a){if(!a)return;const e=q(a.map(t=>t.replace(/\\/g,"/"))).filter(t=>t.length>0).slice(0,50);for(const[t,r]of e.entries()){c(r,`relativePaths[${t}]`,240,!0);const s=r.split("/").filter(Boolean);if(r.startsWith("/")||r.startsWith("~")||r.includes("://")||/^[A-Za-z]:\//.test(r)||s.includes(".."))throw new i("sqlite-public-safety-rejected",`Continuity SQLite rejected non-relative path at relativePaths[${t}].`)}return e}function V(a){const e={...K(a.metadata),schemaVersion:1,contractVersion:"continuity-v1",attemptId:a.attemptId,executionId:a.executionId,jobId:a.jobId};return a.directiveHash&&(e.directiveHash=a.directiveHash),a.runtimeId&&(e.runtimeId=a.runtimeId),a.modelId&&(e.modelId=a.modelId),a.runtimeSource&&(e.runtimeSource=a.runtimeSource),a.status&&(e.attemptStatus=a.status),a.reasonCode&&(e.reasonCode=a.reasonCode),a.durationMs!==void 0&&(e.durationMs=a.durationMs),a.retryCount!==void 0&&(e.retryCount=a.retryCount),a.attemptCount!==void 0&&(e.attemptCount=a.attemptCount),a.maxAttempts!==void 0&&(e.maxAttempts=a.maxAttempts),a.queuePriority!==void 0&&(e.queuePriority=a.queuePriority),a.queueScope&&(e.queueScope=a.queueScope),a.nextRetryAt&&(e.nextRetryAt=a.nextRetryAt),a.deadLetterReasonCode&&(e.deadLetterReasonCode=a.deadLetterReasonCode),a.counts&&(e.counts=a.counts),a.hashes&&(e.hashes=a.hashes),a.redactionSummary&&(e.redactionEvidence=a.redactionSummary),a.relativePaths&&(e.relativePaths=U(a.relativePaths)),K(e)}function L(a){c(a.attemptId,"headless_execution.attemptId",160,!0),c(a.executionId,"headless_execution.executionId",160,!0),c(a.jobId,"headless_execution.jobId",160,!0),c(a.directiveHash,"headless_execution.directiveHash",160),c(a.targetRef,"headless_execution.targetRef",240),c(a.storyId,"headless_execution.storyId",120),c(a.epicId,"headless_execution.epicId",120),c(a.runtimeId,"headless_execution.runtimeId",80),c(a.modelId,"headless_execution.modelId",120),c(a.runtimeSource,"headless_execution.runtimeSource",40),c(a.reasonCode,"headless_execution.reasonCode",100),c(a.publicSummary,"headless_execution.publicSummary",240),c(a.leaseId,"headless_execution.leaseId",160),c(a.runnerId,"headless_execution.runnerId",160),c(a.timestamp,"headless_execution.timestamp",80)}function w(a){if(Array.isArray(a)){const e=a[0];return E(e)?Object.values(e)[0]:e}return E(a)?Object.values(a)[0]:a}function pt(a){return ze.includes(a)}function q(a){return Array.from(new Set(a))}function bt(a){const e=E(a)&&"default"in a?a.default:a;if(typeof e!="function")throw new i("sqlite-adapter-unavailable","Optional better-sqlite3 adapter did not export a database constructor.",{guidance:ie});const t=e;return{adapterName:"better-sqlite3",open(r,s){return new t(r,s)}}}async function It(a=rt){try{const e=await a("better-sqlite3");return{ok:!0,adapter:bt(e)}}catch(e){return e instanceof i?{ok:!1,error:e}:{ok:!1,error:new i("sqlite-adapter-unavailable","Optional Enterprise continuity SQLite adapter better-sqlite3 is unavailable.",{cause:e,guidance:ie})}}}function Ee(a){return se(a,ne,We)}function Et(a){const e=se(a,ne);ae(e,{recursive:!0,mode:448});try{z(e,448)}catch{}return e}async function Dt(a){const e=a.adapter??await Ce(a.adapterLoader),t=a.filePath??Ee(a.projectRoot);if(a.strictReadOnly)fe(t);else if(a.filePath){ae(re(t),{recursive:!0,mode:448});try{z(re(t),448)}catch{}}else Et(a.projectRoot);let r;try{r=e.open(t,a.strictReadOnly?{fileMustExist:!0,readonly:!0}:void 0)}catch(n){throw m(n,"sqlite-integrity-failed")}const s=new ft({db:r,filePath:t,adapterName:e.adapterName,busyTimeoutMs:a.busyTimeoutMs??Fe,integrityCheck:a.integrityCheck??!0,now:a.now??(()=>new Date().toISOString())});try{if(a.strictReadOnly)return s.runIntegrityCheck(),s.getSchemaVersion(),s;if(s.initialize(),te(t))try{z(t,384)}catch{}return s}catch(n){try{r.close()}catch{}throw n}}function fe(a){if(!te(a))throw new i("sqlite-integrity-failed","Continuity database is unavailable for physical read-only inspection.",{mutationBlocked:!0});let e;try{const t=Ae(a,"r");try{if(e=J.alloc(20),xe(t,e,0,e.length,0)<e.length)throw new Error("short-header")}finally{ge(t)}}catch(t){throw new i("sqlite-integrity-failed","Continuity database header could not be inspected read-only.",{cause:t,mutationBlocked:!0})}if(e.subarray(0,16).toString("ascii")!=="SQLite format 3\0"||e[18]===2||e[19]===2)throw new i("sqlite-integrity-failed","Continuity database requires an unsafe WAL read profile.",{mutationBlocked:!0})}async function Ut(a){const e=Ee(a.projectRoot);fe(e);const t=a.adapter??await Ce(a.adapterLoader);let r;try{r=t.open(e,{fileMustExist:!0,readonly:!0});const n=w(r.pragma("integrity_check",{simple:!0}));if(String(n).toLowerCase()!=="ok")throw new Error("integrity")}catch(n){throw new i("sqlite-integrity-failed","Continuity database failed physical read-only inspection.",{cause:n,mutationBlocked:!0})}const s=n=>{const d=n.trim().replace(/^\(+/u,"").toLowerCase();if(!/^(select|with\s)/u.test(d)||/\b(insert|update|delete|replace|create|alter|drop|pragma|attach|detach|vacuum|reindex)\b/u.test(d))throw new i("sqlite-mutation-blocked","Statement is not in the physical read-only query profile.",{mutationBlocked:!0})};return Object.freeze({filePath:e,adapterName:t.adapterName,all(n,...d){return s(n),r.prepare(n).all(...d)},get(n,...d){return s(n),r.prepare(n).get(...d)},close(){r.close()}})}async function Ce(a){const e=a?await a():await It();if(!e.ok)throw e.error;return e.adapter}class ft{filePath;adapterName;db;busyTimeoutMs;integrityCheck;now;mutationBlocked=!1;constructor(e){this.db=e.db,this.filePath=e.filePath,this.adapterName=e.adapterName,this.busyTimeoutMs=e.busyTimeoutMs,this.integrityCheck=e.integrityCheck,this.now=e.now}initialize(){try{this.configureConnection(),this.integrityCheck&&this.runIntegrityCheck(),this.ensureMigrationTable(),this.applyMigrations(),this.integrityCheck&&this.runIntegrityCheck()}catch(e){throw m(e,"sqlite-migration-failed")}}close(){this.db.close()}pragmaValue(e){return w(this.db.pragma(e,{simple:!0}))}runIntegrityCheck(){try{if(String(w(this.db.pragma("integrity_check",{simple:!0}))??"").toLowerCase()!=="ok")throw this.mutationBlocked=!0,new i("sqlite-integrity-failed","Continuity SQLite integrity check failed; durable mutation is blocked until the store is repaired or rebuilt.",{mutationBlocked:!0})}catch(e){throw this.mutationBlocked=!0,m(e,"sqlite-integrity-failed")}}getSchemaVersion(){const e=this.db.prepare("SELECT COALESCE(MAX(version), 0) AS version FROM continuity_migrations").get();return E(e)&&typeof e.version=="number"?e.version:0}countRows(e){if(!pt(e))throw new i("sqlite-public-safety-rejected","Unknown continuity table name.");const t=this.db.prepare(`SELECT COUNT(*) AS count FROM ${e}`).get();return E(t)&&typeof t.count=="number"?t.count:0}reserveNativeAgentDispatch(e){if(this.assertCanMutate(),!Me(e.binding)||!ke(e.hostAttestation))throw new i("sqlite-public-safety-rejected","Native-agent reservation rejected invalid binding or host evidence.");const t={schemaVersion:1,storyId:e.binding.storyId,graphRevision:e.binding.graphRevision.replace(/^sha256:/,"").toLowerCase(),dispatchKey:e.binding.dispatchKey.toLowerCase(),profile:"neocortex",parentHandle:null,handle:null,topology:e.topology??"native-agent",state:"requested",requestedAt:e.requestedAt,observedAt:null,terminalAt:null,freshness:"unknown",observationSource:"local-reservation",reasonCode:e.reasonCode??"native-agent-dispatch-reserved",revision:0,publicSafe:!0};if(!X(t))throw new i("sqlite-public-safety-rejected","Native-agent reservation rejected unsafe public fields.");try{return this.runInTransaction(()=>{const r=this.db.prepare(`
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P180.04 -- Local SQLite continuity store, migrations and integrity checks.
+ */
+import { Buffer } from 'node:buffer';
+import { createHash } from 'node:crypto';
+import { chmodSync, closeSync, existsSync, mkdirSync, openSync, readSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { INITIAL_CONTINUITY_SQLITE_MIGRATION } from './migrations/001-initial-schema.js';
+import { PROCESSING_OUTPUT_SUMMARY_SQLITE_MIGRATION } from './migrations/002-processing-output-summary-indexes.js';
+import { HEADLESS_EXECUTION_ATTEMPTS_SQLITE_MIGRATION } from './migrations/003-headless-execution-attempts.js';
+import { OUTBOX_DELIVERY_STATE_SQLITE_MIGRATION } from './migrations/004-outbox-delivery-state.js';
+import { BOUNDED_HEADLESS_QUEUE_SQLITE_MIGRATION } from './migrations/005-bounded-headless-queue.js';
+import { NATIVE_AGENT_DISPATCHES_SQLITE_MIGRATION } from './migrations/006-native-agent-dispatches.js';
+import { NATIVE_AGENT_TERMINAL_STATES, isNativeAgentDispatchReceiptV1, isNativeAgentStateTransitionAllowed, isNativeDispatchBindingV1, isNativeHostAttestationV1, } from './native-agent-types.js';
+import { CONTINUITY_QUEUE_REASON_CODES, CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE, CONTINUITY_RECEIPT_RETENTION_REASON_CODES, DEFAULT_CONTINUITY_QUEUE_POLICY, computeContinuityQueueRetryAt, computeContinuityOutboxFailureDecision, normalizeContinuityQueuePolicy, normalizeContinuityQueuePriority, normalizeContinuityQueueScope, normalizeContinuityRetentionPolicy, } from './outbox.js';
+export const CONTINUITY_SQLITE_RELATIVE_DIR = '.neocortex/continuity';
+export const CONTINUITY_SQLITE_FILENAME = 'continuity.sqlite';
+export const CONTINUITY_SQLITE_SCHEMA_VERSION = 6;
+export const DEFAULT_CONTINUITY_SQLITE_BUSY_TIMEOUT_MS = 5_000;
+export const CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE = 'processing_output_summary';
+export const CONTINUITY_PROCESSING_OUTPUT_SUMMARY_MAX_CHARS = 2_000;
+export const DEFAULT_CONTINUITY_PROCESSING_SUMMARY_LIMIT = 20;
+export const MAX_CONTINUITY_PROCESSING_SUMMARY_LIMIT = 100;
+export const SQLITE_ADAPTER_INSTALL_GUIDANCE = 'Install the optional Enterprise continuity SQLite adapter with `npm install --workspace packages/client better-sqlite3 --include=optional` or reinstall Neocortex with optional dependencies enabled.';
+/**
+ * P195.04: Client-local mirror of the shared continuity process-stage contract
+ * (SSoT: `packages/shared/src/continuity/runner-state.ts` ->
+ * `CONTINUITY_PUBLIC_STAGES` / `CONTINUITY_STAGE_HISTORY_MAX`). The client keeps a
+ * local copy so continuity SQLite persistence has no runtime `@neocortex/shared`
+ * import; a drift test in `continuity-sqlite.test.ts` asserts parity with the
+ * shared SSoT. Values are an allow-list only -- unknown/arbitrary strings never
+ * persist or project as a stage.
+ */
+export const CONTINUITY_PUBLIC_STAGES = Object.freeze([
+    // Goal tick decision kinds.
+    'discover_more',
+    'create_epic',
+    'run_yoloop',
+    'run_yolo',
+    'run_verifier',
+    'run_review_gate',
+    'compact_context',
+    'wait_external',
+    'backoff',
+    'waiting_human',
+    'complete',
+    'abort',
+    // Loop lifecycle states.
+    'scheduled',
+    'running',
+    'overlap_skipped',
+    'missed_run_catchup',
+    'completed',
+    'aborted',
+    'cancelled',
+    'blocked',
+    // Pre-tick states (goal draft/planned before the first tick decision).
+    'draft',
+    'planned',
+]);
+/** P195.04: Maximum retained `stageHistory` entries (newest kept). ADR-P195-03. */
+export const CONTINUITY_STAGE_HISTORY_MAX = 20;
+const CONTINUITY_PUBLIC_STAGE_SET = new Set(CONTINUITY_PUBLIC_STAGES);
+/** P195.04: Bounded ISO-8601 date-time prefix accepted for `stageHistory.at`. */
+const CONTINUITY_STAGE_TIMESTAMP_PATTERN = /^\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}(?::\d{2}(?:\.\d{1,6})?)?(?:Z|[+-]\d{2}:?\d{2})?$/;
+export function isContinuityPublicStage(value) {
+    return typeof value === 'string' && CONTINUITY_PUBLIC_STAGE_SET.has(value);
+}
+export function sanitizeContinuityStageTimestamp(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    if (trimmed.length === 0 || trimmed.length > 40)
+        return undefined;
+    if (!CONTINUITY_STAGE_TIMESTAMP_PATTERN.test(trimmed))
+        return undefined;
+    return trimmed;
+}
+/**
+ * P195.04: Validate an unknown value into a bounded, allow-listed stage history.
+ * Unknown stages and unsafe timestamps are dropped, and the newest
+ * `CONTINUITY_STAGE_HISTORY_MAX` entries are kept.
+ */
+export function sanitizeContinuityStageHistory(value) {
+    if (!Array.isArray(value))
+        return [];
+    const entries = [];
+    for (const item of value) {
+        if (!isRecord(item) || !isContinuityPublicStage(item.stage))
+            continue;
+        const at = sanitizeContinuityStageTimestamp(item.at);
+        if (!at)
+            continue;
+        entries.push({ stage: item.stage, at });
+    }
+    return entries.slice(-CONTINUITY_STAGE_HISTORY_MAX);
+}
+export function normalizeContinuityStageIteration(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0)
+        return undefined;
+    return Math.floor(value);
+}
+export class ContinuitySqliteStoreError extends Error {
+    code;
+    reasonCode;
+    guidance;
+    mutationBlocked;
+    cause;
+    constructor(code, message, options = {}) {
+        super(message);
+        this.name = 'ContinuitySqliteStoreError';
+        this.code = code;
+        this.reasonCode = code;
+        this.guidance = options.guidance;
+        this.cause = options.cause;
+        this.mutationBlocked = options.mutationBlocked ?? code === 'sqlite-integrity-failed';
+    }
+}
+function toNativeAgentReceipt(row) {
+    const receipt = Object.freeze({
+        schemaVersion: 1,
+        storyId: row.story_id,
+        graphRevision: row.graph_revision,
+        dispatchKey: row.dispatch_key,
+        profile: row.profile,
+        parentHandle: row.parent_handle,
+        handle: row.handle,
+        topology: row.topology,
+        state: row.state,
+        requestedAt: row.requested_at,
+        observedAt: row.observed_at,
+        terminalAt: row.terminal_at,
+        freshness: row.freshness,
+        observationSource: row.observation_source,
+        reasonCode: row.reason_code,
+        revision: row.revision,
+        publicSafe: true,
+    });
+    if (!isNativeAgentDispatchReceiptV1(receipt)) {
+        throw new ContinuitySqliteStoreError('sqlite-integrity-failed', 'Native-agent receipt failed its closed public contract.', { mutationBlocked: true });
+    }
+    return receipt;
+}
+const CONTINUITY_MIGRATIONS = [
+    INITIAL_CONTINUITY_SQLITE_MIGRATION,
+    PROCESSING_OUTPUT_SUMMARY_SQLITE_MIGRATION,
+    HEADLESS_EXECUTION_ATTEMPTS_SQLITE_MIGRATION,
+    OUTBOX_DELIVERY_STATE_SQLITE_MIGRATION,
+    BOUNDED_HEADLESS_QUEUE_SQLITE_MIGRATION,
+    NATIVE_AGENT_DISPATCHES_SQLITE_MIGRATION,
+];
+const CONTINUITY_TABLES = Object.freeze([
+    'continuity_migrations',
+    'jobs',
+    'job_leases',
+    'job_events',
+    'job_receipts',
+    'goal_campaigns',
+    'goal_ledger_items',
+    'goal_verifiers',
+    'goal_review_gates',
+    'loop_jobs',
+    'artifacts',
+    'state_snapshots',
+    'headless_execution_attempts',
+    'runner_config',
+    'outbox',
+    'native_agent_dispatches',
+    'native_agent_observations',
+]);
+const UNSAFE_METADATA_KEY_PATTERN = /(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i;
+const UNSAFE_METADATA_VALUE_PATTERN = /(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_ -]?(?:logs?|outputs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|prompt[_ -]?(?:body|text)|workflow body|step body|\bargv\b|(?:bash|sh|zsh|powershell|pwsh)\s+-c\b|(?:\.{0,2}\/|[A-Za-z]:\\|\/)[^\s]*(?:\.exe|\.bat|\.cmd|\.ps1|\.sh|\/bin\/[^\s]+)|\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH)|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY)|P192[_-]?SYNTHETIC[_-]?(?:PORTAL|RUNNER|SYNC))/i;
+const PUBLIC_REDACTION_REASON_VALUES = new Set([
+    'unsafe_key',
+    'raw_log',
+    'prompt_body',
+    'private_url',
+    'local_absolute_path',
+    'secret',
+    'protected_field',
+    'unbounded_text',
+    'unbounded_number',
+    'unknown_required_operation',
+    'missing',
+]);
+const SQLITE_CORRUPT_PATTERN = /(corrupt|malformed|not a database|file is not a database|database disk image is malformed)/i;
+const SQLITE_FOREIGN_KEY_PATTERN = /(foreign key constraint failed|SQLITE_CONSTRAINT_FOREIGNKEY)/i;
+const PROCESSING_SUMMARY_CURSOR_PREFIX = 'p185:v1:';
+const CONTINUITY_PUBLIC_METADATA_ALLOWED_KEYS = new Set([
+    'schemaVersion',
+    'contractVersion',
+    'eventType',
+    'executionId',
+    'jobId',
+    'operationId',
+    'idempotencyKey',
+    'goalId',
+    'loopId',
+    'campaignId',
+    'itemId',
+    'ledgerItemIds',
+    'verifierId',
+    'verifierIds',
+    'gateId',
+    'reviewGateIds',
+    'runnerId',
+    'leaseId',
+    'status',
+    'reasonCode',
+    'reasonCodes',
+    'runtimeId',
+    'modelId',
+    'runtimeSource',
+    'headlessRuntime',
+    'headlessModel',
+    'headlessRuntimeReasonCode',
+    'originRuntime',
+    'originModel',
+    'targetRef',
+    'attemptId',
+    'attemptStatus',
+    'terminalClass',
+    'releaseBlocked',
+    'directiveHash',
+    'timeoutMs',
+    'leaseExpiresAt',
+    'heartbeatAt',
+    'notBeforeAt',
+    'maxAttempts',
+    'counts',
+    'hashes',
+    'relativePaths',
+    'artifactRefs',
+    'evidenceRefs',
+    'validationRefs',
+    'registryRefs',
+    'storyIds',
+    'epicIds',
+    'debtIds',
+    'iteration',
+    'currentStage',
+    'stageHistory',
+    'durationMs',
+    'retryCount',
+    'attemptCount',
+    'queuePriority',
+    'queueScope',
+    'queueCap',
+    'queueDepth',
+    'queueAvailable',
+    'queueBackpressure',
+    'nextTickAt',
+    'nextAttemptAt',
+    'nextRetryAt',
+    'deadLetterReasonCode',
+    'deliveryCursor',
+    'lastAttemptAt',
+    'sentAt',
+    'ackedAt',
+    'lastErrorReason',
+    'lastErrorSummary',
+    'deadLetterSummary',
+    'deadLetteredAt',
+    'processingOutputSource',
+    'publicSummary',
+    'redactionEvidence',
+    'selectorKind',
+    'targetId',
+    'targetJobId',
+    'relatedJobIds',
+    'serverAccessToLocalhost',
+    'serverHeldStream',
+    'initialCursor',
+    'targetResolutionState',
+    'targetKind',
+    'relatedJobCount',
+    'snapshotStatus',
+    'snapshotGeneratedAt',
+    'renderedSummaryCount',
+    'cursorState',
+    'currentCursor',
+    'nextCursor',
+    'cursorAdvanced',
+    'eventId',
+    'latestEventId',
+    'watchStatus',
+    'stopReason',
+    'syncVersion',
+    'transportKind',
+    'envelopeId',
+    'workspaceId',
+    'workspaceLabel',
+    'projectId',
+    'projectLabel',
+    'snapshotId',
+    'syncCursor',
+    'previousSyncCursor',
+    'nextSyncCursor',
+    'commandId',
+    'receiptId',
+    'acknowledgedAt',
+    'observedAt',
+    'generatedAt',
+    'syncStatus',
+    'commandStatus',
+    'receiptStatus',
+    'actorType',
+    'actorId',
+    'tenantId',
+    'commandKind',
+    'auditStatus',
+    'redactionCount',
+    'autonomousGovernance',
+    'governanceVersion',
+    'governanceEvidence',
+    'governanceSource',
+    'publicSafe',
+]);
+const CONTINUITY_PROCESSING_OUTPUT_SUMMARY_SOURCES = new Set([
+    'foreground_invoke',
+    'scheduled_tick',
+    'runner_tick',
+    'manual_tick',
+    'headless_execution',
+    'jobs_command',
+    'invoke_watch',
+    'portal_render',
+]);
+function defaultDynamicImport(specifier) {
+    return import(specifier);
+}
+function checksumMigration(sql) {
+    return `sha256:${createHash('sha256').update(sql).digest('hex')}`;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function getErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function getErrorCode(error) {
+    return isRecord(error) && typeof error.code === 'string' ? error.code : undefined;
+}
+function mapSqliteError(error, fallback) {
+    if (error instanceof ContinuitySqliteStoreError)
+        return error;
+    const message = getErrorMessage(error);
+    const nativeCode = getErrorCode(error);
+    if (nativeCode === 'SQLITE_CORRUPT' || nativeCode === 'SQLITE_NOTADB' || SQLITE_CORRUPT_PATTERN.test(message)) {
+        return new ContinuitySqliteStoreError('sqlite-integrity-failed', 'Continuity SQLite integrity check failed; durable mutation is blocked until the store is repaired or rebuilt.', { cause: error, mutationBlocked: true });
+    }
+    if (nativeCode === 'SQLITE_CONSTRAINT_FOREIGNKEY' || SQLITE_FOREIGN_KEY_PATTERN.test(message)) {
+        return new ContinuitySqliteStoreError('sqlite-foreign-key-failed', 'Continuity SQLite foreign-key validation failed; mutation was rejected.', { cause: error });
+    }
+    return new ContinuitySqliteStoreError(fallback, message, { cause: error });
+}
+function assertPublicSafeValue(value, path) {
+    if (typeof value === 'string') {
+        if (/\.(?:redactionEvidence|redactionSummary)\[\d+\]\.field$/.test(path) && /^[A-Za-z0-9_.:[\]-]{1,120}$/.test(value)) {
+            return;
+        }
+        if (/\.(?:redactionEvidence|redactionSummary)\[\d+\]\.reason$/.test(path) && PUBLIC_REDACTION_REASON_VALUES.has(value)) {
+            return;
+        }
+        if (UNSAFE_METADATA_VALUE_PATTERN.test(value)) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite metadata rejected unsafe value at ${path}.`);
+        }
+        return;
+    }
+    if (value === null || typeof value === 'number' || typeof value === 'boolean')
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertPublicSafeValue(item, `${path}[${index}]`));
+        return;
+    }
+    if (isRecord(value)) {
+        for (const [key, child] of Object.entries(value)) {
+            const publicReleaseBlockedSignal = key === 'terminationToken'
+                && path.endsWith('.releaseBlocked')
+                && child === '[YOLOOP_RELEASE_BLOCKED]';
+            if (UNSAFE_METADATA_KEY_PATTERN.test(key) && !publicReleaseBlockedSignal) {
+                throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite metadata rejected unsafe key at ${path}.${key}.`);
+            }
+            assertPublicSafeValue(child, `${path}.${key}`);
+        }
+        return;
+    }
+    throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite metadata rejected unsupported value at ${path}.`);
+}
+function assertPublicSafeText(value, path) {
+    if (value === undefined)
+        return;
+    if (UNSAFE_METADATA_VALUE_PATTERN.test(value)) {
+        throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite text rejected unsafe value at ${path}.`);
+    }
+}
+function assertProcessingSummaryText(value, path, maxChars = 240) {
+    if (value.trim().length === 0) {
+        throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite processing summary text is required at ${path}.`);
+    }
+    assertPublicSafeText(value, path);
+    if (value.length > maxChars) {
+        throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite processing summary text exceeded the public bound at ${path}.`);
+    }
+}
+function filterContinuityPublicMetadata(input) {
+    const metadata = {};
+    if (!input)
+        return metadata;
+    for (const [key, value] of Object.entries(input)) {
+        if (!CONTINUITY_PUBLIC_METADATA_ALLOWED_KEYS.has(key))
+            continue;
+        if (UNSAFE_METADATA_KEY_PATTERN.test(key))
+            continue;
+        try {
+            assertPublicSafeValue(value, `metadata.${key}`);
+            metadata[key] = value;
+        }
+        catch {
+            // Summary metadata is best-effort public context. Unsafe entries are
+            // filtered so a safe public summary can still be persisted without raw
+            // logs, prompts, secrets, private URLs or protected bodies.
+        }
+    }
+    return metadata;
+}
+function buildProcessingOutputSummaryMetadata(input) {
+    const metadata = {
+        ...filterContinuityPublicMetadata(input.metadata),
+        schemaVersion: 1,
+        contractVersion: 'continuity-v1',
+        eventType: CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE,
+        executionId: input.executionId,
+        jobId: input.jobId,
+        operationId: input.executionId,
+        publicSummary: input.publicSummary,
+    };
+    if (input.idempotencyKey)
+        metadata.idempotencyKey = input.idempotencyKey;
+    if (input.goalId)
+        metadata.goalId = input.goalId;
+    if (input.loopId)
+        metadata.loopId = input.loopId;
+    if (input.reasonCode)
+        metadata.reasonCode = input.reasonCode;
+    if (input.source && CONTINUITY_PROCESSING_OUTPUT_SUMMARY_SOURCES.has(input.source)) {
+        metadata.processingOutputSource = input.source;
+    }
+    return filterContinuityPublicMetadata(metadata);
+}
+function normalizeProcessingSummaryLimit(limit) {
+    const candidate = Math.floor(limit ?? DEFAULT_CONTINUITY_PROCESSING_SUMMARY_LIMIT);
+    if (!Number.isFinite(candidate))
+        return DEFAULT_CONTINUITY_PROCESSING_SUMMARY_LIMIT;
+    return Math.max(1, Math.min(MAX_CONTINUITY_PROCESSING_SUMMARY_LIMIT, candidate));
+}
+function processingSummaryEventId(input) {
+    if (input.eventId && input.eventId.trim().length > 0)
+        return input.eventId;
+    const safe = input.executionId.replace(/[^a-z0-9_.:-]+/gi, '-').replace(/^-+|-+$/g, '');
+    if (safe.length > 0)
+        return `event-processing-summary-${safe.slice(0, 160)}`;
+    return `event-processing-summary-${createHash('sha256').update(input.executionId).digest('hex').slice(0, 32)}`;
+}
+function encodeProcessingSummaryCursor(row) {
+    return `${PROCESSING_SUMMARY_CURSOR_PREFIX}${Buffer.from(JSON.stringify([row.created_at, row.event_id]), 'utf8').toString('base64url')}`;
+}
+function decodeProcessingSummaryCursor(cursor) {
+    if (!cursor?.startsWith(PROCESSING_SUMMARY_CURSOR_PREFIX))
+        return undefined;
+    try {
+        const payload = cursor.slice(PROCESSING_SUMMARY_CURSOR_PREFIX.length);
+        const decoded = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+        if (!Array.isArray(decoded) || decoded.length !== 2)
+            return undefined;
+        const [createdAt, eventId] = decoded;
+        if (typeof createdAt !== 'string' || typeof eventId !== 'string')
+            return undefined;
+        return { createdAt, eventId };
+    }
+    catch {
+        return undefined;
+    }
+}
+function normalizeProcessingSummaryTargetId(kind, value) {
+    if (!value)
+        return undefined;
+    const normalized = value.trim().replace(/^@/, '');
+    if (kind === 'job' && /^job-J\d{3,}$/i.test(normalized))
+        return `job-J${normalized.match(/\d+$/)?.[0] ?? ''}`;
+    if (kind === 'goal' && /^goal-G\d{3,}$/i.test(normalized))
+        return `goal-G${normalized.match(/\d+$/)?.[0] ?? ''}`;
+    if (kind === 'loop' && /^loop-L\d{3,}$/i.test(normalized))
+        return `loop-L${normalized.match(/\d+$/)?.[0] ?? ''}`;
+    return undefined;
+}
+function normalizedRelatedJobIds(values) {
+    if (!values)
+        return [];
+    return uniqueValues(values
+        .map((value) => normalizeProcessingSummaryTargetId('job', value))
+        .filter((value) => Boolean(value)));
+}
+function processingSummaryTargetPredicate(options) {
+    const target = options.target;
+    if (!target) {
+        const jobId = normalizeProcessingSummaryTargetId('job', options.jobId);
+        return jobId ? { sql: ' AND job_id = ?', params: [jobId] } : { sql: '', params: [] };
+    }
+    const selectorKind = target.selectorKind;
+    if (selectorKind === 'job') {
+        const targetJobId = normalizeProcessingSummaryTargetId('job', target.jobId ?? target.targetId ?? options.jobId);
+        return targetJobId ? { sql: ' AND job_id = ?', params: [targetJobId] } : { sql: ' AND 1 = 0', params: [] };
+    }
+    if (selectorKind === 'goal') {
+        const goalId = normalizeProcessingSummaryTargetId('goal', target.goalId ?? target.targetId);
+        if (!goalId)
+            return { sql: ' AND 1 = 0', params: [] };
+        const relatedJobIds = normalizedRelatedJobIds(target.relatedJobIds);
+        const relatedPredicate = relatedJobIds.length > 0
+            ? ` OR job_id IN (${relatedJobIds.map(() => '?').join(', ')})`
+            : '';
+        return {
+            sql: ` AND (job_id = ? OR json_extract(metadata_json, '$.goalId') = ?${relatedPredicate})`,
+            params: [goalId, goalId, ...relatedJobIds],
+        };
+    }
+    if (selectorKind === 'loop') {
+        const loopId = normalizeProcessingSummaryTargetId('loop', target.loopId ?? target.targetId);
+        if (!loopId)
+            return { sql: ' AND 1 = 0', params: [] };
+        const relatedJobIds = normalizedRelatedJobIds(target.relatedJobIds);
+        const relatedPredicate = relatedJobIds.length > 0
+            ? ` OR job_id IN (${relatedJobIds.map(() => '?').join(', ')})`
+            : '';
+        return {
+            sql: ` AND (job_id = ? OR json_extract(metadata_json, '$.loopId') = ?${relatedPredicate})`,
+            params: [loopId, loopId, ...relatedJobIds],
+        };
+    }
+    return { sql: ' AND 1 = 0', params: [] };
+}
+function toProcessingOutputSummaryRow(row) {
+    const output = {
+        event_id: row.event_id,
+        job_id: row.job_id,
+        execution_id: row.operation_id,
+        public_summary: row.summary,
+        reason_code: row.reason_code,
+        created_at: row.created_at,
+        metadata_json: row.metadata_json,
+    };
+    return {
+        ...output,
+        cursor: encodeProcessingSummaryCursor(output),
+    };
+}
+function stringifyPublicMetadata(metadata) {
+    if (!metadata)
+        return null;
+    assertPublicSafeValue(metadata, 'metadata');
+    return JSON.stringify(metadata);
+}
+function retentionHashes(jobId, receipts, outputs) {
+    const digest = (values) => `sha256:${createHash('sha256')
+        .update(values
+        .map((value) => [value.id, value.status, value.reasonCode].join(':'))
+        .sort()
+        .join('\n'))
+        .digest('hex')}`;
+    const receiptHash = digest(receipts);
+    const outputHash = digest(outputs);
+    return {
+        receipts: receiptHash,
+        outputs: outputHash,
+        aggregate: `sha256:${createHash('sha256').update(`${jobId}:${receiptHash}:${outputHash}`).digest('hex')}`,
+    };
+}
+/**
+ * P195.04: Parse an existing `jobs.metadata_json` value into a mutable object for
+ * additive read-modify-write of stage progress. Corrupt/absent metadata returns a
+ * fresh object so forward-compatible reads never throw on older DBs.
+ */
+function parseJobMetadataObject(metadataJson) {
+    if (!metadataJson)
+        return {};
+    try {
+        const parsed = JSON.parse(metadataJson);
+        return isRecord(parsed) ? { ...parsed } : {};
+    }
+    catch {
+        return {};
+    }
+}
+function assertBoundedPublicText(value, path, maxChars, required = false) {
+    if (value === undefined) {
+        if (required) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite text is required at ${path}.`);
+        }
+        return;
+    }
+    assertPublicSafeText(value, path);
+    if (value.trim().length === 0 || value.length > maxChars) {
+        throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite text exceeded the public bound at ${path}.`);
+    }
+}
+function assertNonNegativeInteger(value, path) {
+    if (value === undefined)
+        return;
+    if (!Number.isFinite(value) || value < 0 || Math.floor(value) !== value) {
+        throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite numeric value rejected at ${path}.`);
+    }
+}
+function assertOutboxIdentity(input) {
+    assertBoundedPublicText(input.outboxId, 'outbox.outboxId', 160, true);
+    assertBoundedPublicText(input.jobId, 'outbox.jobId', 160);
+    assertBoundedPublicText(input.operationId, 'outbox.operationId', 160);
+    assertBoundedPublicText(input.idempotencyKey, 'outbox.idempotencyKey', 160);
+    assertBoundedPublicText(input.type, 'outbox.type', 80);
+    assertBoundedPublicText(input.status, 'outbox.status', 40);
+    assertBoundedPublicText(input.deliveryCursor, 'outbox.deliveryCursor', 200);
+    assertBoundedPublicText(input.timestamp, 'outbox.timestamp', 80);
+    assertBoundedPublicText(input.reasonCode, 'outbox.reasonCode', 100);
+    assertBoundedPublicText(input.summary, 'outbox.summary', 240);
+}
+function isOutboxStatus(value) {
+    return value === 'pending' || value === 'sent' || value === 'acked' || value === 'failed' || value === 'dead_letter';
+}
+function publicOutboxStatus(value) {
+    return typeof value === 'string' && isOutboxStatus(value) ? value : 'failed';
+}
+function optionalOutboxString(value) {
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function parseOutboxPayload(payloadJson) {
+    if (typeof payloadJson !== 'string' || payloadJson.trim().length === 0)
+        return {};
+    try {
+        const parsed = JSON.parse(payloadJson);
+        if (!isRecord(parsed))
+            return {};
+        assertPublicSafeValue(parsed, 'outbox.payload');
+        return parsed;
+    }
+    catch {
+        return {};
+    }
+}
+function toOutboxDeliveryRow(row) {
+    return {
+        outboxId: String(row.outbox_id ?? ''),
+        ...(optionalOutboxString(row.job_id) ? { jobId: optionalOutboxString(row.job_id) } : {}),
+        operationId: String(row.operation_id ?? ''),
+        ...(optionalOutboxString(row.idempotency_key) ? { idempotencyKey: optionalOutboxString(row.idempotency_key) } : {}),
+        type: String(row.type ?? ''),
+        status: publicOutboxStatus(row.status),
+        payload: parseOutboxPayload(row.payload_json),
+        retryCount: typeof row.retry_count === 'number' ? row.retry_count : 0,
+        attemptCount: typeof row.attempt_count === 'number' ? row.attempt_count : 0,
+        ...(optionalOutboxString(row.delivery_cursor) ? { deliveryCursor: optionalOutboxString(row.delivery_cursor) } : {}),
+        ...(optionalOutboxString(row.next_attempt_at) ? { nextAttemptAt: optionalOutboxString(row.next_attempt_at) } : {}),
+        ...(optionalOutboxString(row.last_attempt_at) ? { lastAttemptAt: optionalOutboxString(row.last_attempt_at) } : {}),
+        ...(optionalOutboxString(row.sent_at) ? { sentAt: optionalOutboxString(row.sent_at) } : {}),
+        ...(optionalOutboxString(row.acked_at) ? { ackedAt: optionalOutboxString(row.acked_at) } : {}),
+        ...(optionalOutboxString(row.last_error_code) ? { lastErrorCode: optionalOutboxString(row.last_error_code) } : {}),
+        ...(optionalOutboxString(row.last_error_reason) ? { lastErrorReason: optionalOutboxString(row.last_error_reason) } : {}),
+        ...(optionalOutboxString(row.last_error_summary) ? { lastErrorSummary: optionalOutboxString(row.last_error_summary) } : {}),
+        ...(optionalOutboxString(row.dead_letter_summary) ? { deadLetterSummary: optionalOutboxString(row.dead_letter_summary) } : {}),
+        ...(optionalOutboxString(row.dead_lettered_at) ? { deadLetteredAt: optionalOutboxString(row.dead_lettered_at) } : {}),
+        createdAt: String(row.created_at ?? ''),
+        updatedAt: String(row.updated_at ?? ''),
+        publicSafe: true,
+    };
+}
+function outboxTransitionResult(input) {
+    return { ...input, publicSafe: true };
+}
+function stringifyPublicJsonValue(value, path) {
+    if (value === undefined)
+        return null;
+    assertPublicSafeValue(value, path);
+    return JSON.stringify(value);
+}
+function normalizePublicRelativePaths(paths) {
+    if (!paths)
+        return undefined;
+    const normalized = uniqueValues(paths.map((path) => path.replace(/\\/g, '/')))
+        .filter((path) => path.length > 0)
+        .slice(0, 50);
+    for (const [index, path] of normalized.entries()) {
+        assertBoundedPublicText(path, `relativePaths[${index}]`, 240, true);
+        const segments = path.split('/').filter(Boolean);
+        if (path.startsWith('/') || path.startsWith('~') || path.includes('://') || /^[A-Za-z]:\//.test(path) || segments.includes('..')) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', `Continuity SQLite rejected non-relative path at relativePaths[${index}].`);
+        }
+    }
+    return normalized;
+}
+function buildHeadlessExecutionPublicMetadata(input) {
+    const metadata = {
+        ...filterContinuityPublicMetadata(input.metadata),
+        schemaVersion: 1,
+        contractVersion: 'continuity-v1',
+        attemptId: input.attemptId,
+        executionId: input.executionId,
+        jobId: input.jobId,
+    };
+    if (input.directiveHash)
+        metadata.directiveHash = input.directiveHash;
+    if (input.runtimeId)
+        metadata.runtimeId = input.runtimeId;
+    if (input.modelId)
+        metadata.modelId = input.modelId;
+    if (input.runtimeSource)
+        metadata.runtimeSource = input.runtimeSource;
+    if (input.status)
+        metadata.attemptStatus = input.status;
+    if (input.reasonCode)
+        metadata.reasonCode = input.reasonCode;
+    if (input.durationMs !== undefined)
+        metadata.durationMs = input.durationMs;
+    if (input.retryCount !== undefined)
+        metadata.retryCount = input.retryCount;
+    if (input.attemptCount !== undefined)
+        metadata.attemptCount = input.attemptCount;
+    if (input.maxAttempts !== undefined)
+        metadata.maxAttempts = input.maxAttempts;
+    if (input.queuePriority !== undefined)
+        metadata.queuePriority = input.queuePriority;
+    if (input.queueScope)
+        metadata.queueScope = input.queueScope;
+    if (input.nextRetryAt)
+        metadata.nextRetryAt = input.nextRetryAt;
+    if (input.deadLetterReasonCode)
+        metadata.deadLetterReasonCode = input.deadLetterReasonCode;
+    if (input.counts)
+        metadata.counts = input.counts;
+    if (input.hashes)
+        metadata.hashes = input.hashes;
+    if (input.redactionSummary)
+        metadata.redactionEvidence = input.redactionSummary;
+    if (input.relativePaths)
+        metadata.relativePaths = normalizePublicRelativePaths(input.relativePaths);
+    return filterContinuityPublicMetadata(metadata);
+}
+function validateHeadlessExecutionAttemptIdentity(input) {
+    assertBoundedPublicText(input.attemptId, 'headless_execution.attemptId', 160, true);
+    assertBoundedPublicText(input.executionId, 'headless_execution.executionId', 160, true);
+    assertBoundedPublicText(input.jobId, 'headless_execution.jobId', 160, true);
+    assertBoundedPublicText(input.directiveHash, 'headless_execution.directiveHash', 160);
+    assertBoundedPublicText(input.targetRef, 'headless_execution.targetRef', 240);
+    assertBoundedPublicText(input.storyId, 'headless_execution.storyId', 120);
+    assertBoundedPublicText(input.epicId, 'headless_execution.epicId', 120);
+    assertBoundedPublicText(input.runtimeId, 'headless_execution.runtimeId', 80);
+    assertBoundedPublicText(input.modelId, 'headless_execution.modelId', 120);
+    assertBoundedPublicText(input.runtimeSource, 'headless_execution.runtimeSource', 40);
+    assertBoundedPublicText(input.reasonCode, 'headless_execution.reasonCode', 100);
+    assertBoundedPublicText(input.publicSummary, 'headless_execution.publicSummary', 240);
+    assertBoundedPublicText(input.leaseId, 'headless_execution.leaseId', 160);
+    assertBoundedPublicText(input.runnerId, 'headless_execution.runnerId', 160);
+    assertBoundedPublicText(input.timestamp, 'headless_execution.timestamp', 80);
+}
+function asSinglePragmaValue(value) {
+    if (Array.isArray(value)) {
+        const first = value[0];
+        if (isRecord(first))
+            return Object.values(first)[0];
+        return first;
+    }
+    if (isRecord(value))
+        return Object.values(value)[0];
+    return value;
+}
+function isContinuityTable(table) {
+    return CONTINUITY_TABLES.includes(table);
+}
+function uniqueValues(values) {
+    return Array.from(new Set(values));
+}
+function createBetterSqlite3Adapter(moduleValue) {
+    const constructorValue = isRecord(moduleValue) && 'default' in moduleValue
+        ? moduleValue.default
+        : moduleValue;
+    if (typeof constructorValue !== 'function') {
+        throw new ContinuitySqliteStoreError('sqlite-adapter-unavailable', 'Optional better-sqlite3 adapter did not export a database constructor.', { guidance: SQLITE_ADAPTER_INSTALL_GUIDANCE });
+    }
+    const Database = constructorValue;
+    return {
+        adapterName: 'better-sqlite3',
+        open(filePath, options) {
+            return new Database(filePath, options);
+        },
+    };
+}
+export async function loadBetterSqlite3Adapter(importer = defaultDynamicImport) {
+    try {
+        const moduleValue = await importer('better-sqlite3');
+        return { ok: true, adapter: createBetterSqlite3Adapter(moduleValue) };
+    }
+    catch (error) {
+        if (error instanceof ContinuitySqliteStoreError)
+            return { ok: false, error };
+        return {
+            ok: false,
+            error: new ContinuitySqliteStoreError('sqlite-adapter-unavailable', 'Optional Enterprise continuity SQLite adapter better-sqlite3 is unavailable.', { cause: error, guidance: SQLITE_ADAPTER_INSTALL_GUIDANCE }),
+        };
+    }
+}
+export function continuitySqliteStorePath(projectRoot) {
+    return join(projectRoot, CONTINUITY_SQLITE_RELATIVE_DIR, CONTINUITY_SQLITE_FILENAME);
+}
+function ensureContinuityDirectory(projectRoot) {
+    const directory = join(projectRoot, CONTINUITY_SQLITE_RELATIVE_DIR);
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    try {
+        chmodSync(directory, 0o700);
+    }
+    catch {
+        // Permission tightening is best-effort on non-POSIX filesystems.
+    }
+    return directory;
+}
+export async function openContinuitySqliteStore(options) {
+    const adapter = options.adapter ?? await resolveAdapter(options.adapterLoader);
+    const filePath = options.filePath ?? continuitySqliteStorePath(options.projectRoot);
+    if (options.strictReadOnly) {
+        assertContinuitySqliteReadOnlyHeader(filePath);
+    }
+    else {
+        if (options.filePath) {
+            mkdirSync(dirname(filePath), { recursive: true, mode: 0o700 });
+            try {
+                chmodSync(dirname(filePath), 0o700);
+            }
+            catch { /* best-effort */ }
+        }
+        else {
+            ensureContinuityDirectory(options.projectRoot);
+        }
+    }
+    let db;
+    try {
+        db = adapter.open(filePath, options.strictReadOnly
+            ? { fileMustExist: true, readonly: true }
+            : undefined);
+    }
+    catch (error) {
+        throw mapSqliteError(error, 'sqlite-integrity-failed');
+    }
+    const store = new ContinuitySqliteStore({
+        db,
+        filePath,
+        adapterName: adapter.adapterName,
+        busyTimeoutMs: options.busyTimeoutMs ?? DEFAULT_CONTINUITY_SQLITE_BUSY_TIMEOUT_MS,
+        integrityCheck: options.integrityCheck ?? true,
+        now: options.now ?? (() => new Date().toISOString()),
+    });
+    try {
+        if (options.strictReadOnly) {
+            store.runIntegrityCheck();
+            // Prove the expected schema is readable without attempting repair.
+            store.getSchemaVersion();
+            return store;
+        }
+        store.initialize();
+        if (existsSync(filePath)) {
+            try {
+                chmodSync(filePath, 0o600);
+            }
+            catch {
+                // Best-effort on non-POSIX filesystems.
+            }
+        }
+        return store;
+    }
+    catch (error) {
+        try {
+            db.close();
+        }
+        catch {
+            // Ignore close errors while surfacing the original hard stop.
+        }
+        throw error;
+    }
+}
+function assertContinuitySqliteReadOnlyHeader(filePath) {
+    if (!existsSync(filePath)) {
+        throw new ContinuitySqliteStoreError('sqlite-projection-missing', 'Continuity database is unavailable for physical read-only inspection.', { mutationBlocked: true });
+    }
+    let header;
+    try {
+        const fd = openSync(filePath, 'r');
+        try {
+            header = Buffer.alloc(20);
+            if (readSync(fd, header, 0, header.length, 0) < header.length)
+                throw new Error('short-header');
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch (error) {
+        throw new ContinuitySqliteStoreError('sqlite-integrity-failed', 'Continuity database header could not be inspected read-only.', { cause: error, mutationBlocked: true });
+    }
+    if (header.subarray(0, 16).toString('ascii') !== 'SQLite format 3\0') {
+        throw new ContinuitySqliteStoreError('sqlite-integrity-failed', 'Continuity database header is not a recognized SQLite database.', { mutationBlocked: true });
+    }
+    if (header[18] === 2 || header[19] === 2) {
+        throw new ContinuitySqliteStoreError('sqlite-projection-wal-unsafe', 'Continuity database requires an unsafe WAL read profile.', { mutationBlocked: true });
+    }
+}
+/**
+ * P205.05 physical inspection boundary. The database must already exist and is
+ * opened with the adapter's OS-backed read-only flag. No directory creation,
+ * chmod, initialization, migrations or mutative pragma is attempted.
+ */
+export async function openContinuitySqliteReadOnly(options) {
+    const filePath = continuitySqliteStorePath(options.projectRoot);
+    // SQLite read-only opens can still create `-wal`/`-shm` companions when the
+    // database header is in WAL mode. Deny that profile before adapter open.
+    assertContinuitySqliteReadOnlyHeader(filePath);
+    const adapter = options.adapter ?? await resolveAdapter(options.adapterLoader);
+    let db;
+    let opened = false;
+    try {
+        db = adapter.open(filePath, { fileMustExist: true, readonly: true });
+        opened = true;
+        const integrity = asSinglePragmaValue(db.pragma('integrity_check', { simple: true }));
+        if (String(integrity).toLowerCase() !== 'ok')
+            throw new Error('integrity');
+    }
+    catch (error) {
+        throw new ContinuitySqliteStoreError(!opened ? 'sqlite-projection-adapter-incompatible' : 'sqlite-integrity-failed', 'Continuity database failed physical read-only inspection.', { cause: error, mutationBlocked: true });
+    }
+    const assertReadStatement = (source) => {
+        const normalized = source.trim().replace(/^\(+/u, '').toLowerCase();
+        if (!/^(select|with\s)/u.test(normalized) || /\b(insert|update|delete|replace|create|alter|drop|pragma|attach|detach|vacuum|reindex)\b/u.test(normalized)) {
+            throw new ContinuitySqliteStoreError('sqlite-mutation-blocked', 'Statement is not in the physical read-only query profile.', { mutationBlocked: true });
+        }
+    };
+    return Object.freeze({
+        filePath,
+        adapterName: adapter.adapterName,
+        all(source, ...params) { assertReadStatement(source); return db.prepare(source).all(...params); },
+        get(source, ...params) { assertReadStatement(source); return db.prepare(source).get(...params); },
+        close() { db.close(); },
+    });
+}
+/**
+ * P224.01 strict projection binding. The existing state_snapshots table is
+ * inspected without schema initialization, WAL, chmod, mkdir or repair. A
+ * missing/optional adapter is explicit and never promoted to equality.
+ */
+export async function inspectEpicOperationalSqliteBinding(options) {
+    if (!Number.isSafeInteger(options.authorityRevision) || options.authorityRevision < 0
+        || !/^[a-f0-9]{64}$/.test(options.sourceDigest)) {
+        throw new ContinuitySqliteStoreError('sqlite-integrity-failed', 'Epic operational SQLite binding input is invalid.', { mutationBlocked: true });
+    }
+    let inspector;
+    try {
+        inspector = await openContinuitySqliteReadOnly(options);
+        let rows;
+        try {
+            rows = inspector.all('SELECT sha256, metadata_json FROM state_snapshots WHERE kind = ? ORDER BY captured_at DESC LIMIT 2', 'epic-operational-state');
+        }
+        catch {
+            return Object.freeze({
+                schemaVersion: 'EpicOperationalSqliteBindingInspection/1.0',
+                status: 'unavailable',
+                authorityRevision: options.authorityRevision,
+                sourceDigest: null,
+                adapterName: inspector.adapterName,
+                reasonCodes: ['sqlite-projection-schema-unsupported'],
+                publicSafe: true,
+            });
+        }
+        const matching = rows.filter((row) => {
+            if (!isRecord(row) || row.sha256 !== options.sourceDigest)
+                return false;
+            if (typeof row.metadata_json !== 'string')
+                return false;
+            try {
+                const metadata = JSON.parse(row.metadata_json);
+                return isRecord(metadata) && metadata.authorityRevision === options.authorityRevision;
+            }
+            catch {
+                return false;
+            }
+        });
+        return Object.freeze({
+            schemaVersion: 'EpicOperationalSqliteBindingInspection/1.0',
+            status: matching.length === 1 ? 'bound' : 'unbound',
+            authorityRevision: options.authorityRevision,
+            sourceDigest: matching.length === 1 ? options.sourceDigest : null,
+            adapterName: inspector.adapterName,
+            reasonCodes: matching.length === 1
+                ? ['epic-operational-sqlite-binding-verified']
+                : ['epic-operational-projection-unbound'],
+            publicSafe: true,
+        });
+    }
+    catch (error) {
+        const reasonCode = error instanceof ContinuitySqliteStoreError
+            ? error.reasonCode
+            : 'sqlite-integrity-failed';
+        return Object.freeze({
+            schemaVersion: 'EpicOperationalSqliteBindingInspection/1.0',
+            status: 'unavailable',
+            authorityRevision: options.authorityRevision,
+            sourceDigest: null,
+            adapterName: null,
+            reasonCodes: [reasonCode],
+            publicSafe: true,
+        });
+    }
+    finally {
+        inspector?.close();
+    }
+}
+async function resolveAdapter(loader) {
+    const result = loader ? await loader() : await loadBetterSqlite3Adapter();
+    if (!result.ok)
+        throw result.error;
+    return result.adapter;
+}
+export class ContinuitySqliteStore {
+    filePath;
+    adapterName;
+    db;
+    busyTimeoutMs;
+    integrityCheck;
+    now;
+    mutationBlocked = false;
+    constructor(options) {
+        this.db = options.db;
+        this.filePath = options.filePath;
+        this.adapterName = options.adapterName;
+        this.busyTimeoutMs = options.busyTimeoutMs;
+        this.integrityCheck = options.integrityCheck;
+        this.now = options.now;
+    }
+    initialize() {
+        try {
+            this.configureConnection();
+            if (this.integrityCheck)
+                this.runIntegrityCheck();
+            this.ensureMigrationTable();
+            this.applyMigrations();
+            if (this.integrityCheck)
+                this.runIntegrityCheck();
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-migration-failed');
+        }
+    }
+    close() {
+        this.db.close();
+    }
+    pragmaValue(source) {
+        return asSinglePragmaValue(this.db.pragma(source, { simple: true }));
+    }
+    runIntegrityCheck() {
+        try {
+            const result = String(asSinglePragmaValue(this.db.pragma('integrity_check', { simple: true })) ?? '');
+            if (result.toLowerCase() !== 'ok') {
+                this.mutationBlocked = true;
+                throw new ContinuitySqliteStoreError('sqlite-integrity-failed', 'Continuity SQLite integrity check failed; durable mutation is blocked until the store is repaired or rebuilt.', { mutationBlocked: true });
+            }
+        }
+        catch (error) {
+            this.mutationBlocked = true;
+            throw mapSqliteError(error, 'sqlite-integrity-failed');
+        }
+    }
+    getSchemaVersion() {
+        const row = this.db.prepare('SELECT COALESCE(MAX(version), 0) AS version FROM continuity_migrations').get();
+        return isRecord(row) && typeof row.version === 'number' ? row.version : 0;
+    }
+    countRows(table) {
+        if (!isContinuityTable(table)) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Unknown continuity table name.');
+        }
+        const row = this.db.prepare(`SELECT COUNT(*) AS count FROM ${table}`).get();
+        return isRecord(row) && typeof row.count === 'number' ? row.count : 0;
+    }
+    reserveNativeAgentDispatch(input) {
+        this.assertCanMutate();
+        if (!isNativeDispatchBindingV1(input.binding) || !isNativeHostAttestationV1(input.hostAttestation)) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Native-agent reservation rejected invalid binding or host evidence.');
+        }
+        const candidate = {
+            schemaVersion: 1,
+            storyId: input.binding.storyId,
+            graphRevision: input.binding.graphRevision.replace(/^sha256:/, '').toLowerCase(),
+            dispatchKey: input.binding.dispatchKey.toLowerCase(),
+            profile: 'neocortex',
+            parentHandle: null,
+            handle: null,
+            topology: input.topology ?? 'native-agent',
+            state: 'requested',
+            requestedAt: input.requestedAt,
+            observedAt: null,
+            terminalAt: null,
+            freshness: 'unknown',
+            observationSource: 'local-reservation',
+            reasonCode: input.reasonCode ?? 'native-agent-dispatch-reserved',
+            revision: 0,
+            publicSafe: true,
+        };
+        if (!isNativeAgentDispatchReceiptV1(candidate)) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Native-agent reservation rejected unsafe public fields.');
+        }
+        try {
+            return this.runInTransaction(() => {
+                const inserted = this.db.prepare(`
           INSERT OR IGNORE INTO native_agent_dispatches (
             dispatch_key, story_id, graph_revision, profile,
             host_kind, host_version, host_origin, host_confidence,
             parent_handle, handle, topology, state, requested_at, observed_at,
             terminal_at, freshness, observation_source, reason_code, revision
           ) VALUES (?, ?, ?, 'neocortex', ?, ?, ?, ?, NULL, NULL, ?, 'requested', ?, NULL, NULL, 'unknown', 'local-reservation', ?, 0)
-        `).run(t.dispatchKey,t.storyId,t.graphRevision,e.hostAttestation.hostKind,e.hostAttestation.hostVersion,e.hostAttestation.origin,e.hostAttestation.confidence,t.topology,t.requestedAt,t.reasonCode),s=this.findNativeAgentDispatchRow(t.dispatchKey,t.storyId,t.graphRevision);if(!s)throw new Error("native-agent-reservation-readback-missing");if(s.dispatch_key!==t.dispatchKey||s.story_id!==t.storyId||s.graph_revision!==t.graphRevision)throw new i("sqlite-mutation-failed","Native-agent reservation conflicts with an existing story graph binding.");return Object.freeze({receipt:$(s),reserved:r.changes===1,replay:r.changes===0})})}catch(r){throw m(r,"sqlite-mutation-failed")}}observeNativeAgentDispatch(e){this.assertCanMutate();try{return this.runInTransaction(()=>{const t=this.db.prepare("SELECT * FROM native_agent_dispatches WHERE dispatch_key = ?").get(e.dispatchKey);if(!t)throw new i("sqlite-mutation-failed","Native-agent dispatch reservation is missing.");const r=$(t),s=oe.has(e.state)?e.terminalAt??e.observedAt:null,n=e.handle??r.handle,d=e.parentHandle===void 0?r.parentHandle:e.parentHandle,o={...r,handle:n,parentHandle:d,topology:e.topology,state:e.state,observedAt:e.observedAt,terminalAt:s,freshness:e.freshness,observationSource:e.observationSource,reasonCode:e.reasonCode,revision:r.revision+1};if(!X(o))throw new i("sqlite-public-safety-rejected","Native-agent observation rejected unsafe or inconsistent fields.");if(r.handle&&e.handle&&r.handle!==e.handle)throw new i("sqlite-mutation-failed","Native-agent observation handle conflicts with the reserved dispatch.");if(!je(r.state,e.state))throw new i("sqlite-mutation-failed","Native-agent observation attempted a terminal or non-monotonic regression.");if(r.state===o.state&&r.handle===o.handle&&r.parentHandle===o.parentHandle&&r.topology===o.topology&&r.observedAt===o.observedAt&&r.terminalAt===o.terminalAt&&r.freshness===o.freshness&&r.observationSource===o.observationSource&&r.reasonCode===o.reasonCode)return Object.freeze({receipt:r,applied:!1,replay:!0});if(e.expectedRevision!==r.revision)throw new i("sqlite-mutation-failed","Native-agent observation CAS revision conflict.");if(r.observedAt&&Date.parse(e.observedAt)<Date.parse(r.observedAt))throw new i("sqlite-mutation-failed","Native-agent observation timestamp regressed.");if(this.db.prepare(`
+        `).run(candidate.dispatchKey, candidate.storyId, candidate.graphRevision, input.hostAttestation.hostKind, input.hostAttestation.hostVersion, input.hostAttestation.origin, input.hostAttestation.confidence, candidate.topology, candidate.requestedAt, candidate.reasonCode);
+                const row = this.findNativeAgentDispatchRow(candidate.dispatchKey, candidate.storyId, candidate.graphRevision);
+                if (!row)
+                    throw new Error('native-agent-reservation-readback-missing');
+                if (row.dispatch_key !== candidate.dispatchKey
+                    || row.story_id !== candidate.storyId
+                    || row.graph_revision !== candidate.graphRevision) {
+                    throw new ContinuitySqliteStoreError('sqlite-mutation-failed', 'Native-agent reservation conflicts with an existing story graph binding.');
+                }
+                return Object.freeze({
+                    receipt: toNativeAgentReceipt(row),
+                    reserved: inserted.changes === 1,
+                    replay: inserted.changes === 0,
+                });
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    observeNativeAgentDispatch(input) {
+        this.assertCanMutate();
+        try {
+            return this.runInTransaction(() => {
+                const currentRow = this.db.prepare('SELECT * FROM native_agent_dispatches WHERE dispatch_key = ?').get(input.dispatchKey);
+                if (!currentRow) {
+                    throw new ContinuitySqliteStoreError('sqlite-mutation-failed', 'Native-agent dispatch reservation is missing.');
+                }
+                const current = toNativeAgentReceipt(currentRow);
+                const terminalAt = NATIVE_AGENT_TERMINAL_STATES.has(input.state)
+                    ? input.terminalAt ?? input.observedAt
+                    : null;
+                const handle = input.handle ?? current.handle;
+                const parentHandle = input.parentHandle === undefined ? current.parentHandle : input.parentHandle;
+                const candidate = {
+                    ...current,
+                    handle,
+                    parentHandle,
+                    topology: input.topology,
+                    state: input.state,
+                    observedAt: input.observedAt,
+                    terminalAt,
+                    freshness: input.freshness,
+                    observationSource: input.observationSource,
+                    reasonCode: input.reasonCode,
+                    revision: current.revision + 1,
+                };
+                if (!isNativeAgentDispatchReceiptV1(candidate)) {
+                    throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Native-agent observation rejected unsafe or inconsistent fields.');
+                }
+                if (current.handle && input.handle && current.handle !== input.handle) {
+                    throw new ContinuitySqliteStoreError('sqlite-mutation-failed', 'Native-agent observation handle conflicts with the reserved dispatch.');
+                }
+                if (!isNativeAgentStateTransitionAllowed(current.state, input.state)) {
+                    throw new ContinuitySqliteStoreError('sqlite-mutation-failed', 'Native-agent observation attempted a terminal or non-monotonic regression.');
+                }
+                const sameObservation = current.state === candidate.state
+                    && current.handle === candidate.handle
+                    && current.parentHandle === candidate.parentHandle
+                    && current.topology === candidate.topology
+                    && current.observedAt === candidate.observedAt
+                    && current.terminalAt === candidate.terminalAt
+                    && current.freshness === candidate.freshness
+                    && current.observationSource === candidate.observationSource
+                    && current.reasonCode === candidate.reasonCode;
+                if (sameObservation)
+                    return Object.freeze({ receipt: current, applied: false, replay: true });
+                if (input.expectedRevision !== current.revision) {
+                    throw new ContinuitySqliteStoreError('sqlite-mutation-failed', 'Native-agent observation CAS revision conflict.');
+                }
+                if (current.observedAt && Date.parse(input.observedAt) < Date.parse(current.observedAt)) {
+                    throw new ContinuitySqliteStoreError('sqlite-mutation-failed', 'Native-agent observation timestamp regressed.');
+                }
+                const updated = this.db.prepare(`
           UPDATE native_agent_dispatches
              SET parent_handle = ?, handle = ?, topology = ?, state = ?, observed_at = ?,
                  terminal_at = ?, freshness = ?, observation_source = ?, reason_code = ?, revision = revision + 1
            WHERE dispatch_key = ? AND revision = ?
-        `).run(o.parentHandle,o.handle,o.topology,o.state,o.observedAt,o.terminalAt,o.freshness,o.observationSource,o.reasonCode,o.dispatchKey,e.expectedRevision).changes!==1)throw new i("sqlite-mutation-failed","Native-agent observation CAS update was not applied.");return this.db.prepare(`
+        `).run(candidate.parentHandle, candidate.handle, candidate.topology, candidate.state, candidate.observedAt, candidate.terminalAt, candidate.freshness, candidate.observationSource, candidate.reasonCode, candidate.dispatchKey, input.expectedRevision);
+                if (updated.changes !== 1) {
+                    throw new ContinuitySqliteStoreError('sqlite-mutation-failed', 'Native-agent observation CAS update was not applied.');
+                }
+                this.db.prepare(`
           INSERT INTO native_agent_observations (
             dispatch_key, sequence, state, handle, parent_handle, topology,
             observed_at, terminal_at, freshness, observation_source, reason_code
           ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-        `).run(o.dispatchKey,o.revision,o.state,o.handle,o.parentHandle,o.topology,o.observedAt,o.terminalAt,o.freshness,o.observationSource,o.reasonCode),Object.freeze({receipt:o,applied:!0,replay:!1})})}catch(t){throw m(t,"sqlite-mutation-failed")}}getNativeAgentDispatchStatus(e,t={}){const r=this.db.prepare("SELECT * FROM native_agent_dispatches WHERE dispatch_key = ?").get(e);if(!r)return null;const s=$(r),n=Math.max(1e3,t.staleAfterMs??3e4),d=Date.parse(t.nowIso??this.now()),o=s.observedAt?Date.parse(s.observedAt):NaN;return!oe.has(s.state)&&Number.isFinite(d)&&(!Number.isFinite(o)||d-o>n)?Object.freeze({...s,state:"unknown",freshness:s.observedAt?"stale":"unknown",reasonCode:s.observedAt?"native-agent-observation-stale":"native-agent-awaiting-host-evidence"}):s}listRecentNativeAgentDispatches(e=20){const t=Math.max(1,Math.min(50,Math.floor(e))),r=this.db.prepare(`
+        `).run(candidate.dispatchKey, candidate.revision, candidate.state, candidate.handle, candidate.parentHandle, candidate.topology, candidate.observedAt, candidate.terminalAt, candidate.freshness, candidate.observationSource, candidate.reasonCode);
+                return Object.freeze({ receipt: candidate, applied: true, replay: false });
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    getNativeAgentDispatchStatus(dispatchKey, options = {}) {
+        const row = this.db.prepare('SELECT * FROM native_agent_dispatches WHERE dispatch_key = ?').get(dispatchKey);
+        if (!row)
+            return null;
+        const receipt = toNativeAgentReceipt(row);
+        const staleAfterMs = Math.max(1_000, options.staleAfterMs ?? 30_000);
+        const nowMs = Date.parse(options.nowIso ?? this.now());
+        const observedMs = receipt.observedAt ? Date.parse(receipt.observedAt) : NaN;
+        if (!NATIVE_AGENT_TERMINAL_STATES.has(receipt.state)
+            && Number.isFinite(nowMs)
+            && (!Number.isFinite(observedMs) || nowMs - observedMs > staleAfterMs)) {
+            return Object.freeze({
+                ...receipt,
+                state: 'unknown',
+                freshness: receipt.observedAt ? 'stale' : 'unknown',
+                reasonCode: receipt.observedAt ? 'native-agent-observation-stale' : 'native-agent-awaiting-host-evidence',
+            });
+        }
+        return receipt;
+    }
+    listRecentNativeAgentDispatches(limit = 20) {
+        const bounded = Math.max(1, Math.min(50, Math.floor(limit)));
+        const rows = this.db.prepare(`
       SELECT * FROM native_agent_dispatches
        ORDER BY COALESCE(observed_at, requested_at) DESC, dispatch_key DESC
        LIMIT ?
-    `).all(t);return Object.freeze(r.map($))}findNativeAgentDispatchRow(e,t,r){return this.db.prepare(`
+    `).all(bounded);
+        return Object.freeze(rows.map(toNativeAgentReceipt));
+    }
+    findNativeAgentDispatchRow(dispatchKey, storyId, graphRevision) {
+        return this.db.prepare(`
       SELECT * FROM native_agent_dispatches
        WHERE dispatch_key = ? OR (story_id = ? AND graph_revision = ?)
        ORDER BY CASE WHEN dispatch_key = ? THEN 0 ELSE 1 END
        LIMIT 1
-    `).get(e,t,r,e)}getLocalConsoleAttachmentState(e){c(e,"local_console.jobId",160,!0);const t=this.db.prepare(`
+    `).get(dispatchKey, storyId, graphRevision, dispatchKey);
+    }
+    getLocalConsoleAttachmentState(jobId) {
+        assertBoundedPublicText(jobId, 'local_console.jobId', 160, true);
+        const row = this.db.prepare(`
       SELECT j.job_id AS job_id,
              j.kind AS kind,
              j.status AS status,
@@ -34,41 +1265,210 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
         FROM jobs j
        WHERE j.job_id = ?
        LIMIT 1
-    `).get(e);return!E(t)||typeof t.job_id!="string"?null:{jobId:t.job_id,kind:typeof t.kind=="string"?t.kind:"unknown",status:typeof t.status=="string"?t.status:"unknown",activeLeaseCount:typeof t.active_lease_count=="number"?t.active_lease_count:0,runningHeadlessAttemptCount:typeof t.running_headless_attempt_count=="number"?t.running_headless_attempt_count:0,publicSafe:!0}}recordJob(e){this.assertCanMutate(),b(e.summary,"jobs.summary");const t=S(e.metadata);try{const r=this.db.prepare(`
+    `).get(jobId);
+        if (!isRecord(row) || typeof row.job_id !== 'string')
+            return null;
+        return {
+            jobId: row.job_id,
+            kind: typeof row.kind === 'string' ? row.kind : 'unknown',
+            status: typeof row.status === 'string' ? row.status : 'unknown',
+            activeLeaseCount: typeof row.active_lease_count === 'number' ? row.active_lease_count : 0,
+            runningHeadlessAttemptCount: typeof row.running_headless_attempt_count === 'number' ? row.running_headless_attempt_count : 0,
+            publicSafe: true,
+        };
+    }
+    recordJob(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.summary, 'jobs.summary');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const result = this.db.prepare(`
         INSERT OR IGNORE INTO jobs (
           job_id, kind, status, summary, reason_code, created_at, updated_at,
           next_run_at, goal_id, loop_id, campaign_id, operation_id,
           idempotency_key, metadata_json
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `).run(e.jobId,e.kind,e.status,e.summary??null,e.reasonCode??null,e.createdAt,e.updatedAt,e.nextRunAt??null,e.goalId??null,e.loopId??null,e.campaignId??null,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}appendEvent(e){this.assertCanMutate(),b(e.summary,"job_events.summary");const t=S(e.metadata);try{const r=this.db.prepare(`
+      `).run(input.jobId, input.kind, input.status, input.summary ?? null, input.reasonCode ?? null, input.createdAt, input.updatedAt, input.nextRunAt ?? null, input.goalId ?? null, input.loopId ?? null, input.campaignId ?? null, input.operationId ?? null, input.idempotencyKey ?? null, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    appendEvent(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.summary, 'job_events.summary');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const result = this.db.prepare(`
         INSERT OR IGNORE INTO job_events (
           event_id, job_id, operation_id, idempotency_key, event_sequence,
           type, summary, reason_code, created_at, metadata_json
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `).run(e.eventId,e.jobId,e.operationId,e.idempotencyKey??null,e.sequence??null,e.type,e.summary,e.reasonCode??null,e.createdAt,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}recordProcessingOutputSummary(e){Y(e.executionId,"processing_output_summary.executionId",160),Y(e.jobId,"processing_output_summary.jobId",160),Y(e.publicSummary,"processing_output_summary.publicSummary",Be),Y(e.createdAt,"processing_output_summary.createdAt",80),b(e.eventId,"processing_output_summary.eventId"),b(e.idempotencyKey,"processing_output_summary.idempotencyKey"),b(e.goalId,"processing_output_summary.goalId"),b(e.loopId,"processing_output_summary.loopId"),b(e.reasonCode,"processing_output_summary.reasonCode"),b(e.source,"processing_output_summary.source");const t=this.appendEvent({eventId:it(e),jobId:e.jobId,operationId:e.executionId,idempotencyKey:e.idempotencyKey??e.executionId,type:O,summary:e.publicSummary,reasonCode:e.reasonCode,createdAt:e.createdAt,metadata:dt(e)});return t.inserted&&this.recordJobStageProgress({jobId:e.jobId,currentStage:e.metadata?.currentStage,iteration:e.metadata?.iteration,at:e.createdAt}),t}enqueueHeadlessExecutionAttempt(e){if(this.assertCanMutate(),L({attemptId:e.attemptId,executionId:e.executionId,jobId:e.jobId,directiveHash:e.directiveHash,targetRef:e.targetRef,storyId:e.storyId,epicId:e.epicId,runtimeId:e.runtimeId,modelId:e.modelId,runtimeSource:e.runtimeSource,reasonCode:e.reasonCode,publicSummary:e.publicSummary,timestamp:e.enqueuedAt}),c(e.notBeforeAt,"headless_execution.notBeforeAt",80),c(e.operationId,"headless_execution.operationId",160),c(e.idempotencyKey,"headless_execution.idempotencyKey",160),N(e.retryCount,"headless_execution.retryCount"),N(e.maxAttempts,"headless_execution.maxAttempts"),e.maxAttempts!==void 0&&e.maxAttempts<1)throw new i("sqlite-public-safety-rejected","Continuity SQLite maxAttempts must be greater than zero.");e.metadata&&g(e.metadata,"headless_execution.metadata");const t=B({maxItems:e.queueCap,maxAttempts:e.maxAttempts}),r=qe(e.queuePriority),s=Pe(e.queueScope),n=U(e.relativePaths),d=V({attemptId:e.attemptId,executionId:e.executionId,jobId:e.jobId,directiveHash:e.directiveHash,runtimeId:e.runtimeId,modelId:e.modelId,runtimeSource:e.runtimeSource,status:e.status??"queued",reasonCode:e.reasonCode,retryCount:e.retryCount??0,attemptCount:0,maxAttempts:t.maxAttempts,queuePriority:r,queueScope:s,counts:e.counts,hashes:e.hashes,redactionSummary:e.redactionSummary,relativePaths:n,metadata:e.metadata});return this.runInTransaction(()=>{const o=this.db.prepare(`
+      `).run(input.eventId, input.jobId, input.operationId, input.idempotencyKey ?? null, input.sequence ?? null, input.type, input.summary, input.reasonCode ?? null, input.createdAt, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    recordProcessingOutputSummary(input) {
+        assertProcessingSummaryText(input.executionId, 'processing_output_summary.executionId', 160);
+        assertProcessingSummaryText(input.jobId, 'processing_output_summary.jobId', 160);
+        assertProcessingSummaryText(input.publicSummary, 'processing_output_summary.publicSummary', CONTINUITY_PROCESSING_OUTPUT_SUMMARY_MAX_CHARS);
+        assertProcessingSummaryText(input.createdAt, 'processing_output_summary.createdAt', 80);
+        assertPublicSafeText(input.eventId, 'processing_output_summary.eventId');
+        assertPublicSafeText(input.idempotencyKey, 'processing_output_summary.idempotencyKey');
+        assertPublicSafeText(input.goalId, 'processing_output_summary.goalId');
+        assertPublicSafeText(input.loopId, 'processing_output_summary.loopId');
+        assertPublicSafeText(input.reasonCode, 'processing_output_summary.reasonCode');
+        assertPublicSafeText(input.source, 'processing_output_summary.source');
+        const result = this.appendEvent({
+            eventId: processingSummaryEventId(input),
+            jobId: input.jobId,
+            operationId: input.executionId,
+            idempotencyKey: input.idempotencyKey ?? input.executionId,
+            type: CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE,
+            summary: input.publicSummary,
+            reasonCode: input.reasonCode,
+            createdAt: input.createdAt,
+            metadata: buildProcessingOutputSummaryMetadata(input),
+        });
+        // P195.04: On a freshly applied tick summary, persist the producer-emitted
+        // stage/iteration into the job row and append one bounded stageHistory entry.
+        // Gating on `inserted` keeps this idempotent across replays and runner retries.
+        if (result.inserted) {
+            this.recordJobStageProgress({
+                jobId: input.jobId,
+                currentStage: input.metadata?.currentStage,
+                iteration: input.metadata?.iteration,
+                at: input.createdAt,
+            });
+        }
+        return result;
+    }
+    enqueueHeadlessExecutionAttempt(input) {
+        this.assertCanMutate();
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.attemptId,
+            executionId: input.executionId,
+            jobId: input.jobId,
+            directiveHash: input.directiveHash,
+            targetRef: input.targetRef,
+            storyId: input.storyId,
+            epicId: input.epicId,
+            runtimeId: input.runtimeId,
+            modelId: input.modelId,
+            runtimeSource: input.runtimeSource,
+            reasonCode: input.reasonCode,
+            publicSummary: input.publicSummary,
+            timestamp: input.enqueuedAt,
+        });
+        assertBoundedPublicText(input.notBeforeAt, 'headless_execution.notBeforeAt', 80);
+        assertBoundedPublicText(input.operationId, 'headless_execution.operationId', 160);
+        assertBoundedPublicText(input.idempotencyKey, 'headless_execution.idempotencyKey', 160);
+        assertNonNegativeInteger(input.retryCount, 'headless_execution.retryCount');
+        assertNonNegativeInteger(input.maxAttempts, 'headless_execution.maxAttempts');
+        if (input.maxAttempts !== undefined && input.maxAttempts < 1) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Continuity SQLite maxAttempts must be greater than zero.');
+        }
+        if (input.metadata)
+            assertPublicSafeValue(input.metadata, 'headless_execution.metadata');
+        const queuePolicy = normalizeContinuityQueuePolicy({
+            maxItems: input.queueCap,
+            maxAttempts: input.maxAttempts,
+        });
+        const queuePriority = normalizeContinuityQueuePriority(input.queuePriority);
+        const queueScope = normalizeContinuityQueueScope(input.queueScope);
+        const relativePaths = normalizePublicRelativePaths(input.relativePaths);
+        const metadata = buildHeadlessExecutionPublicMetadata({
+            attemptId: input.attemptId,
+            executionId: input.executionId,
+            jobId: input.jobId,
+            directiveHash: input.directiveHash,
+            runtimeId: input.runtimeId,
+            modelId: input.modelId,
+            runtimeSource: input.runtimeSource,
+            status: input.status ?? 'queued',
+            reasonCode: input.reasonCode,
+            retryCount: input.retryCount ?? 0,
+            attemptCount: 0,
+            maxAttempts: queuePolicy.maxAttempts,
+            queuePriority,
+            queueScope,
+            counts: input.counts,
+            hashes: input.hashes,
+            redactionSummary: input.redactionSummary,
+            relativePaths,
+            metadata: input.metadata,
+        });
+        return this.runInTransaction(() => {
+            const configuredPolicyRow = this.db.prepare(`
         SELECT value_json
           FROM runner_config
          WHERE key = 'headless_queue_policy'
          LIMIT 1
-      `).get();let l=t.maxItems;if(e.queueCap===void 0&&E(o)&&typeof o.value_json=="string")try{const u=JSON.parse(o.value_json);E(u)&&typeof u.maxItems=="number"&&(l=B({maxItems:u.maxItems}).maxItems)}catch{}this.db.prepare(`
+      `).get();
+            let effectiveQueueCap = queuePolicy.maxItems;
+            if (input.queueCap === undefined && isRecord(configuredPolicyRow) && typeof configuredPolicyRow.value_json === 'string') {
+                try {
+                    const configuredPolicy = JSON.parse(configuredPolicyRow.value_json);
+                    if (isRecord(configuredPolicy) && typeof configuredPolicy.maxItems === 'number') {
+                        effectiveQueueCap = normalizeContinuityQueuePolicy({ maxItems: configuredPolicy.maxItems }).maxItems;
+                    }
+                }
+                catch {
+                    // runner_config has a json_valid constraint; retain the bounded default defensively.
+                }
+            }
+            this.db.prepare(`
         INSERT INTO runner_config (key, value_json, updated_at)
         VALUES ('headless_queue_policy', ?, ?)
         ON CONFLICT(key) DO UPDATE SET
           value_json = excluded.value_json,
           updated_at = excluded.updated_at
-      `).run(JSON.stringify({maxItems:l}),e.enqueuedAt);const I=this.db.prepare(`
+      `).run(JSON.stringify({ maxItems: effectiveQueueCap }), input.enqueuedAt);
+            const replay = this.db.prepare(`
         SELECT attempt_id
           FROM headless_execution_attempts
          WHERE attempt_id = ?
             OR (? IS NOT NULL AND operation_id = ?)
             OR (? IS NOT NULL AND idempotency_key = ?)
          LIMIT 1
-      `).get(e.attemptId,e.operationId??null,e.operationId??null,e.idempotencyKey??null,e.idempotencyKey??null),y=this.db.prepare(`
+      `).get(input.attemptId, input.operationId ?? null, input.operationId ?? null, input.idempotencyKey ?? null, input.idempotencyKey ?? null);
+            const depthRow = this.db.prepare(`
         SELECT COUNT(*) AS count
           FROM headless_execution_attempts
          WHERE status IN ('queued', 'backoff', 'running')
            AND dead_lettered_at IS NULL
-      `).get(),f=E(y)&&typeof y.count=="number"?y.count:0;if(I)return{inserted:!1,replay:!0,changes:0,accepted:!0,backpressure:f>=l,queueDepth:f,queueCap:l,publicSafe:!0};if(f>=l)return{inserted:!1,replay:!1,changes:0,accepted:!1,backpressure:!0,queueDepth:f,queueCap:l,reasonCode:k.CAP_REACHED,publicSafe:!0};const _=this.db.prepare(`
+      `).get();
+            const queueDepth = isRecord(depthRow) && typeof depthRow.count === 'number' ? depthRow.count : 0;
+            if (replay) {
+                return {
+                    inserted: false,
+                    replay: true,
+                    changes: 0,
+                    accepted: true,
+                    backpressure: queueDepth >= effectiveQueueCap,
+                    queueDepth,
+                    queueCap: effectiveQueueCap,
+                    publicSafe: true,
+                };
+            }
+            if (queueDepth >= effectiveQueueCap) {
+                return {
+                    inserted: false,
+                    replay: false,
+                    changes: 0,
+                    accepted: false,
+                    backpressure: true,
+                    queueDepth,
+                    queueCap: effectiveQueueCap,
+                    reasonCode: CONTINUITY_QUEUE_REASON_CODES.CAP_REACHED,
+                    publicSafe: true,
+                };
+            }
+            const result = this.db.prepare(`
         INSERT INTO headless_execution_attempts (
           attempt_id, execution_id, job_id, directive_hash, directive_kind,
           command_class, target_kind, target_ref, story_id, epic_id, runtime_id,
@@ -78,7 +1478,23 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           relative_paths_json, metadata_json, queue_priority, queue_scope,
           attempt_count, next_retry_at
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?)
-      `).run(e.attemptId,e.executionId,e.jobId,e.directiveHash,e.directiveKind,e.commandClass,e.targetKind,e.targetRef,e.storyId??null,e.epicId??null,e.runtimeId??null,e.modelId??null,e.runtimeSource??null,e.status??"queued",e.reasonCode??null,e.publicSummary??null,e.enqueuedAt,e.status==="backoff"?e.notBeforeAt??e.enqueuedAt:null,e.retryCount??0,t.maxAttempts,e.operationId??null,e.idempotencyKey??null,T(e.counts,"headless_execution.counts"),T(e.hashes,"headless_execution.hashes"),T(e.redactionSummary,"headless_execution.redactionSummary"),T(n,"headless_execution.relativePaths"),S(d),r,s,e.notBeforeAt??e.enqueuedAt);return{inserted:_.changes>0,replay:!1,changes:_.changes,accepted:_.changes>0,backpressure:f+_.changes>=l,queueDepth:f+_.changes,queueCap:l,publicSafe:!0}})}listDueHeadlessExecutionAttempts(e){const t=Math.max(1,Math.min(50,Math.floor(e.limit)));return c(e.nowIso,"headless_execution.nowIso",80,!0),this.db.prepare(`
+      `).run(input.attemptId, input.executionId, input.jobId, input.directiveHash, input.directiveKind, input.commandClass, input.targetKind, input.targetRef, input.storyId ?? null, input.epicId ?? null, input.runtimeId ?? null, input.modelId ?? null, input.runtimeSource ?? null, input.status ?? 'queued', input.reasonCode ?? null, input.publicSummary ?? null, input.enqueuedAt, input.status === 'backoff' ? (input.notBeforeAt ?? input.enqueuedAt) : null, input.retryCount ?? 0, queuePolicy.maxAttempts, input.operationId ?? null, input.idempotencyKey ?? null, stringifyPublicJsonValue(input.counts, 'headless_execution.counts'), stringifyPublicJsonValue(input.hashes, 'headless_execution.hashes'), stringifyPublicJsonValue(input.redactionSummary, 'headless_execution.redactionSummary'), stringifyPublicJsonValue(relativePaths, 'headless_execution.relativePaths'), stringifyPublicMetadata(metadata), queuePriority, queueScope, input.notBeforeAt ?? input.enqueuedAt);
+            return {
+                inserted: result.changes > 0,
+                replay: false,
+                changes: result.changes,
+                accepted: result.changes > 0,
+                backpressure: queueDepth + result.changes >= effectiveQueueCap,
+                queueDepth: queueDepth + result.changes,
+                queueCap: effectiveQueueCap,
+                publicSafe: true,
+            };
+        });
+    }
+    listDueHeadlessExecutionAttempts(options) {
+        const limit = Math.max(1, Math.min(50, Math.floor(options.limit)));
+        assertBoundedPublicText(options.nowIso, 'headless_execution.nowIso', 80, true);
+        return this.db.prepare(`
       SELECT attempt_id, execution_id, job_id, directive_hash, directive_kind,
              command_class, target_kind, target_ref, story_id, epic_id,
              runtime_id, model_id, runtime_source, status, reason_code,
@@ -97,13 +1513,36 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
        ORDER BY queue_priority DESC, COALESCE(next_retry_at, not_before_at, enqueued_at) ASC,
                 enqueued_at ASC, attempt_id ASC
        LIMIT ?
-    `).all(e.nowIso,e.nowIso,t)}hasCompletedHeadlessExecutionDirectiveHash(e,t){c(e,"headless_execution.directiveHash",160,!0),c(t,"headless_execution.attemptId",160);const r=t?" AND attempt_id != ?":"",s=t?[e,t]:[e];return this.db.prepare(`
+    `).all(options.nowIso, options.nowIso, limit);
+    }
+    hasCompletedHeadlessExecutionDirectiveHash(directiveHash, excludeAttemptId) {
+        assertBoundedPublicText(directiveHash, 'headless_execution.directiveHash', 160, true);
+        assertBoundedPublicText(excludeAttemptId, 'headless_execution.attemptId', 160);
+        const excludePredicate = excludeAttemptId ? ' AND attempt_id != ?' : '';
+        const params = excludeAttemptId ? [directiveHash, excludeAttemptId] : [directiveHash];
+        const row = this.db.prepare(`
       SELECT 1 AS found
         FROM headless_execution_attempts
        WHERE directive_hash = ?
-         AND status = 'completed'${r}
+         AND status = 'completed'${excludePredicate}
        LIMIT 1
-    `).get(...s)?.found===1}claimHeadlessExecutionAttempt(e){this.assertCanMutate(),L({attemptId:e.attemptId,executionId:e.attemptId,jobId:e.attemptId,leaseId:e.leaseId,runnerId:e.runnerId,reasonCode:e.reasonCode,timestamp:e.claimedAt}),c(e.leaseExpiresAt,"headless_execution.leaseExpiresAt",80,!0);try{const t=this.db.prepare(`
+    `).get(...params);
+        return row?.found === 1;
+    }
+    claimHeadlessExecutionAttempt(input) {
+        this.assertCanMutate();
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.attemptId,
+            executionId: input.attemptId,
+            jobId: input.attemptId,
+            leaseId: input.leaseId,
+            runnerId: input.runnerId,
+            reasonCode: input.reasonCode,
+            timestamp: input.claimedAt,
+        });
+        assertBoundedPublicText(input.leaseExpiresAt, 'headless_execution.leaseExpiresAt', 80, true);
+        try {
+            const result = this.db.prepare(`
         UPDATE headless_execution_attempts
            SET status = 'running',
                lease_id = ?,
@@ -119,7 +1558,27 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
            AND dead_lettered_at IS NULL
            AND (COALESCE(next_retry_at, not_before_at) IS NULL OR COALESCE(next_retry_at, not_before_at) <= ?)
            AND (lease_id IS NULL OR lease_released_at IS NOT NULL OR lease_expires_at <= ?)
-      `).run(e.leaseId,e.runnerId,e.claimedAt,e.claimedAt,e.leaseExpiresAt,e.reasonCode??null,e.attemptId,e.claimedAt,e.claimedAt);return this.toWriteResult(t)}catch(t){throw m(t,"sqlite-mutation-failed")}}acquireNextHeadlessExecutionAttempt(e){return this.assertCanMutate(),L({attemptId:e.leaseId,executionId:e.leaseId,jobId:e.leaseId,leaseId:e.leaseId,runnerId:e.runnerId,reasonCode:e.reasonCode,timestamp:e.claimedAt}),c(e.leaseExpiresAt,"headless_execution.leaseExpiresAt",80,!0),this.runInTransaction(()=>{const t=this.db.prepare(`
+      `).run(input.leaseId, input.runnerId, input.claimedAt, input.claimedAt, input.leaseExpiresAt, input.reasonCode ?? null, input.attemptId, input.claimedAt, input.claimedAt);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    acquireNextHeadlessExecutionAttempt(input) {
+        this.assertCanMutate();
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.leaseId,
+            executionId: input.leaseId,
+            jobId: input.leaseId,
+            leaseId: input.leaseId,
+            runnerId: input.runnerId,
+            reasonCode: input.reasonCode,
+            timestamp: input.claimedAt,
+        });
+        assertBoundedPublicText(input.leaseExpiresAt, 'headless_execution.leaseExpiresAt', 80, true);
+        return this.runInTransaction(() => {
+            const row = this.db.prepare(`
         SELECT attempt_id
           FROM headless_execution_attempts
          WHERE status IN ('queued', 'backoff')
@@ -132,7 +1591,11 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                   enqueued_at ASC,
                   attempt_id ASC
          LIMIT 1
-      `).get(e.directiveKind??null,e.directiveKind??null,e.claimedAt,e.claimedAt);if(typeof t?.attempt_id!="string")return{acquired:!1,reasonCode:"continuity-ok",publicSafe:!0};if(this.db.prepare(`
+      `).get(input.directiveKind ?? null, input.directiveKind ?? null, input.claimedAt, input.claimedAt);
+            if (typeof row?.attempt_id !== 'string') {
+                return { acquired: false, reasonCode: 'continuity-ok', publicSafe: true };
+            }
+            const result = this.db.prepare(`
         UPDATE headless_execution_attempts
            SET status = 'running',
                lease_id = ?,
@@ -148,7 +1611,29 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
            AND dead_lettered_at IS NULL
            AND (COALESCE(next_retry_at, not_before_at) IS NULL OR COALESCE(next_retry_at, not_before_at) <= ?)
            AND (lease_id IS NULL OR lease_released_at IS NOT NULL OR lease_expires_at <= ?)
-      `).run(e.leaseId,e.runnerId,e.claimedAt,e.claimedAt,e.leaseExpiresAt,e.reasonCode??null,t.attempt_id,e.claimedAt,e.claimedAt).changes===0)return{acquired:!1,reasonCode:"lease-conflict",publicSafe:!0};const s=this.getHeadlessExecutionAttempt(t.attempt_id);return s?{acquired:!0,attempt:s,reasonCode:e.reasonCode??"continuity-ok",publicSafe:!0}:{acquired:!1,reasonCode:"lease-conflict",publicSafe:!0}})}heartbeatHeadlessExecutionAttempt(e){this.assertCanMutate(),L({attemptId:e.attemptId,executionId:e.attemptId,jobId:e.attemptId,leaseId:e.leaseId,runnerId:e.runnerId,timestamp:e.heartbeatAt}),c(e.leaseExpiresAt,"headless_execution.leaseExpiresAt",80);try{const t=this.db.prepare(`
+      `).run(input.leaseId, input.runnerId, input.claimedAt, input.claimedAt, input.leaseExpiresAt, input.reasonCode ?? null, row.attempt_id, input.claimedAt, input.claimedAt);
+            if (result.changes === 0) {
+                return { acquired: false, reasonCode: 'lease-conflict', publicSafe: true };
+            }
+            const attempt = this.getHeadlessExecutionAttempt(row.attempt_id);
+            return attempt
+                ? { acquired: true, attempt, reasonCode: input.reasonCode ?? 'continuity-ok', publicSafe: true }
+                : { acquired: false, reasonCode: 'lease-conflict', publicSafe: true };
+        });
+    }
+    heartbeatHeadlessExecutionAttempt(input) {
+        this.assertCanMutate();
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.attemptId,
+            executionId: input.attemptId,
+            jobId: input.attemptId,
+            leaseId: input.leaseId,
+            runnerId: input.runnerId,
+            timestamp: input.heartbeatAt,
+        });
+        assertBoundedPublicText(input.leaseExpiresAt, 'headless_execution.leaseExpiresAt', 80);
+        try {
+            const result = this.db.prepare(`
         UPDATE headless_execution_attempts
            SET heartbeat_at = ?,
                lease_expires_at = COALESCE(?, lease_expires_at)
@@ -158,7 +1643,27 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
            AND status = 'running'
            AND lease_released_at IS NULL
            AND lease_expires_at > ?
-      `).run(e.heartbeatAt,e.leaseExpiresAt??null,e.attemptId,e.leaseId,e.runnerId,e.heartbeatAt);return this.toWriteResult(t)}catch(t){throw m(t,"sqlite-mutation-failed")}}releaseHeadlessExecutionAttempt(e){this.assertCanMutate(),L({attemptId:e.attemptId,executionId:e.attemptId,jobId:e.attemptId,leaseId:e.leaseId,reasonCode:e.reasonCode,timestamp:e.releasedAt}),c(e.notBeforeAt,"headless_execution.notBeforeAt",80),N(e.retryCount,"headless_execution.retryCount");try{const t=this.db.prepare(`
+      `).run(input.heartbeatAt, input.leaseExpiresAt ?? null, input.attemptId, input.leaseId, input.runnerId, input.heartbeatAt);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    releaseHeadlessExecutionAttempt(input) {
+        this.assertCanMutate();
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.attemptId,
+            executionId: input.attemptId,
+            jobId: input.attemptId,
+            leaseId: input.leaseId,
+            reasonCode: input.reasonCode,
+            timestamp: input.releasedAt,
+        });
+        assertBoundedPublicText(input.notBeforeAt, 'headless_execution.notBeforeAt', 80);
+        assertNonNegativeInteger(input.retryCount, 'headless_execution.retryCount');
+        try {
+            const result = this.db.prepare(`
         UPDATE headless_execution_attempts
            SET status = COALESCE(?, status),
                reason_code = COALESCE(?, reason_code),
@@ -174,8 +1679,76 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
            AND lease_id = ?
            AND status = 'running'
            AND lease_released_at IS NULL
-      `).run(e.status??null,e.reasonCode??null,e.notBeforeAt??null,e.retryCount??null,e.status??null,e.notBeforeAt??null,e.status??null,e.releasedAt,e.attemptId,e.leaseId);return this.toWriteResult(t)}catch(t){throw m(t,"sqlite-mutation-failed")}}completeHeadlessExecutionAttempt(e){this.assertCanMutate(),L({attemptId:e.attemptId,executionId:e.attemptId,jobId:e.attemptId,leaseId:e.leaseId,runnerId:e.runnerId,reasonCode:e.reasonCode,publicSummary:e.publicSummary,timestamp:e.completedAt}),c(e.notBeforeAt,"headless_execution.notBeforeAt",80),N(e.durationMs,"headless_execution.durationMs"),N(e.retryCount,"headless_execution.retryCount"),e.metadata&&g(e.metadata,"headless_execution.metadata");const t=U(e.relativePaths),r=V({attemptId:e.attemptId,executionId:e.executionId??e.attemptId,jobId:e.jobId??e.attemptId,status:e.status,reasonCode:e.reasonCode,durationMs:e.durationMs,retryCount:e.retryCount,counts:e.counts,hashes:e.hashes,redactionSummary:e.redactionSummary,relativePaths:t,metadata:e.metadata}),s=e.leaseId?` AND lease_id = ?
-          AND lease_released_at IS NULL${e.runnerId?" AND runner_id = ?":""}`:"",n=e.leaseId?"status = 'running'":"status NOT IN ('completed', 'failed', 'timed_out', 'skipped')",d=[e.status,e.completedAt,e.durationMs??null,e.reasonCode??null,e.publicSummary??null,e.notBeforeAt??null,e.retryCount??null,e.status,e.notBeforeAt??null,e.counts?T(e.counts,"headless_execution.counts"):null,e.hashes?T(e.hashes,"headless_execution.hashes"):null,e.redactionSummary?T(e.redactionSummary,"headless_execution.redactionSummary"):null,t?T(t,"headless_execution.relativePaths"):null,S(r),e.completedAt,e.attemptId];e.leaseId&&d.push(e.leaseId),e.leaseId&&e.runnerId&&d.push(e.runnerId);try{const o=this.db.prepare(`
+      `).run(input.status ?? null, input.reasonCode ?? null, input.notBeforeAt ?? null, input.retryCount ?? null, input.status ?? null, input.notBeforeAt ?? null, input.status ?? null, input.releasedAt, input.attemptId, input.leaseId);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    completeHeadlessExecutionAttempt(input) {
+        this.assertCanMutate();
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.attemptId,
+            executionId: input.attemptId,
+            jobId: input.attemptId,
+            leaseId: input.leaseId,
+            runnerId: input.runnerId,
+            reasonCode: input.reasonCode,
+            publicSummary: input.publicSummary,
+            timestamp: input.completedAt,
+        });
+        assertBoundedPublicText(input.notBeforeAt, 'headless_execution.notBeforeAt', 80);
+        assertNonNegativeInteger(input.durationMs, 'headless_execution.durationMs');
+        assertNonNegativeInteger(input.retryCount, 'headless_execution.retryCount');
+        if (input.metadata)
+            assertPublicSafeValue(input.metadata, 'headless_execution.metadata');
+        const relativePaths = normalizePublicRelativePaths(input.relativePaths);
+        const metadata = buildHeadlessExecutionPublicMetadata({
+            attemptId: input.attemptId,
+            executionId: input.executionId ?? input.attemptId,
+            jobId: input.jobId ?? input.attemptId,
+            status: input.status,
+            reasonCode: input.reasonCode,
+            durationMs: input.durationMs,
+            retryCount: input.retryCount,
+            counts: input.counts,
+            hashes: input.hashes,
+            redactionSummary: input.redactionSummary,
+            relativePaths,
+            metadata: input.metadata,
+        });
+        const leasePredicate = input.leaseId
+            ? ` AND lease_id = ?
+          AND lease_released_at IS NULL${input.runnerId ? ' AND runner_id = ?' : ''}`
+            : '';
+        const statusPredicate = input.leaseId
+            ? "status = 'running'"
+            : "status NOT IN ('completed', 'failed', 'timed_out', 'skipped')";
+        const params = [
+            input.status,
+            input.completedAt,
+            input.durationMs ?? null,
+            input.reasonCode ?? null,
+            input.publicSummary ?? null,
+            input.notBeforeAt ?? null,
+            input.retryCount ?? null,
+            input.status,
+            input.notBeforeAt ?? null,
+            input.counts ? stringifyPublicJsonValue(input.counts, 'headless_execution.counts') : null,
+            input.hashes ? stringifyPublicJsonValue(input.hashes, 'headless_execution.hashes') : null,
+            input.redactionSummary ? stringifyPublicJsonValue(input.redactionSummary, 'headless_execution.redactionSummary') : null,
+            relativePaths ? stringifyPublicJsonValue(relativePaths, 'headless_execution.relativePaths') : null,
+            stringifyPublicMetadata(metadata),
+            input.completedAt,
+            input.attemptId,
+        ];
+        if (input.leaseId)
+            params.push(input.leaseId);
+        if (input.leaseId && input.runnerId)
+            params.push(input.runnerId);
+        try {
+            const result = this.db.prepare(`
         UPDATE headless_execution_attempts
            SET status = ?,
                completed_at = ?,
@@ -194,53 +1767,426 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                relative_paths_json = COALESCE(?, relative_paths_json),
                metadata_json = COALESCE(?, metadata_json),
                lease_released_at = COALESCE(lease_released_at, ?)
-         WHERE attempt_id = ?${s}
-           AND ${n}
-      `).run(...d);return this.toWriteResult(o)}catch(o){throw m(o,"sqlite-mutation-failed")}}recordHeadlessExecutionReceipt(e){L({attemptId:e.attemptId,executionId:e.executionId,jobId:e.jobId,reasonCode:e.reasonCode,timestamp:e.createdAt}),e.metadata&&g(e.metadata,"headless_execution.metadata");const t=U(e.relativePaths),r=V({attemptId:e.attemptId,executionId:e.executionId,jobId:e.jobId,status:e.status,reasonCode:e.reasonCode,counts:e.counts,hashes:e.hashes,redactionSummary:e.redactionSummary,relativePaths:t,metadata:e.metadata});return this.appendReceipt({receiptId:e.receiptId,jobId:e.jobId,operationId:e.operationId??e.executionId,idempotencyKey:e.idempotencyKey??e.executionId,status:e.status,reasonCode:e.reasonCode,appliedOperationIds:e.status==="applied"?[e.executionId]:void 0,ignoredOperationIds:e.status==="ignored"?[e.executionId]:void 0,createdAt:e.createdAt,metadata:r})}recordHeadlessExecutionSummary(e){L({attemptId:e.attemptId,executionId:e.executionId,jobId:e.jobId,runtimeId:e.runtimeId,modelId:e.modelId,reasonCode:e.reasonCode,publicSummary:e.publicSummary,timestamp:e.createdAt}),N(e.durationMs,"headless_execution.durationMs"),e.metadata&&g(e.metadata,"headless_execution.metadata");const t=U(e.relativePaths),r=V({attemptId:e.attemptId,executionId:e.executionId,jobId:e.jobId,runtimeId:e.runtimeId,modelId:e.modelId,status:e.status??"completed",reasonCode:e.reasonCode,durationMs:e.durationMs,counts:e.counts,hashes:e.hashes,redactionSummary:e.redactionSummary,relativePaths:t,metadata:e.metadata});return this.recordProcessingOutputSummary({eventId:e.eventId,executionId:e.executionId,jobId:e.jobId,idempotencyKey:e.executionId,publicSummary:e.publicSummary,reasonCode:e.reasonCode,createdAt:e.createdAt,source:"headless_execution",metadata:r})}appendReceipt(e){this.assertCanMutate();const t=S(e.metadata);try{const r=this.db.prepare(`
+         WHERE attempt_id = ?${leasePredicate}
+           AND ${statusPredicate}
+      `).run(...params);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    recordHeadlessExecutionReceipt(input) {
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.attemptId,
+            executionId: input.executionId,
+            jobId: input.jobId,
+            reasonCode: input.reasonCode,
+            timestamp: input.createdAt,
+        });
+        if (input.metadata)
+            assertPublicSafeValue(input.metadata, 'headless_execution.metadata');
+        const relativePaths = normalizePublicRelativePaths(input.relativePaths);
+        const metadata = buildHeadlessExecutionPublicMetadata({
+            attemptId: input.attemptId,
+            executionId: input.executionId,
+            jobId: input.jobId,
+            status: input.status,
+            reasonCode: input.reasonCode,
+            counts: input.counts,
+            hashes: input.hashes,
+            redactionSummary: input.redactionSummary,
+            relativePaths,
+            metadata: input.metadata,
+        });
+        return this.appendReceipt({
+            receiptId: input.receiptId,
+            jobId: input.jobId,
+            operationId: input.operationId ?? input.executionId,
+            idempotencyKey: input.idempotencyKey ?? input.executionId,
+            status: input.status,
+            reasonCode: input.reasonCode,
+            appliedOperationIds: input.status === 'applied' ? [input.executionId] : undefined,
+            ignoredOperationIds: input.status === 'ignored' ? [input.executionId] : undefined,
+            createdAt: input.createdAt,
+            metadata,
+        });
+    }
+    recordHeadlessExecutionSummary(input) {
+        validateHeadlessExecutionAttemptIdentity({
+            attemptId: input.attemptId,
+            executionId: input.executionId,
+            jobId: input.jobId,
+            runtimeId: input.runtimeId,
+            modelId: input.modelId,
+            reasonCode: input.reasonCode,
+            publicSummary: input.publicSummary,
+            timestamp: input.createdAt,
+        });
+        assertNonNegativeInteger(input.durationMs, 'headless_execution.durationMs');
+        if (input.metadata)
+            assertPublicSafeValue(input.metadata, 'headless_execution.metadata');
+        const relativePaths = normalizePublicRelativePaths(input.relativePaths);
+        const metadata = buildHeadlessExecutionPublicMetadata({
+            attemptId: input.attemptId,
+            executionId: input.executionId,
+            jobId: input.jobId,
+            runtimeId: input.runtimeId,
+            modelId: input.modelId,
+            status: input.status ?? 'completed',
+            reasonCode: input.reasonCode,
+            durationMs: input.durationMs,
+            counts: input.counts,
+            hashes: input.hashes,
+            redactionSummary: input.redactionSummary,
+            relativePaths,
+            metadata: input.metadata,
+        });
+        return this.recordProcessingOutputSummary({
+            eventId: input.eventId,
+            executionId: input.executionId,
+            jobId: input.jobId,
+            idempotencyKey: input.executionId,
+            publicSummary: input.publicSummary,
+            reasonCode: input.reasonCode,
+            createdAt: input.createdAt,
+            source: 'headless_execution',
+            metadata,
+        });
+    }
+    appendReceipt(input) {
+        this.assertCanMutate();
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const result = this.db.prepare(`
         INSERT OR IGNORE INTO job_receipts (
           receipt_id, job_id, operation_id, idempotency_key, status, reason_code,
           applied_operation_ids_json, ignored_operation_ids_json, created_at, metadata_json
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `).run(e.receiptId,e.jobId,e.operationId??null,e.idempotencyKey??null,e.status,e.reasonCode??null,e.appliedOperationIds?JSON.stringify(e.appliedOperationIds):null,e.ignoredOperationIds?JSON.stringify(e.ignoredOperationIds):null,e.createdAt,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}compactPublicReceiptsAndOutputs(e){this.assertCanMutate();const t=Date.parse(e.nowIso);if(!Number.isFinite(t))throw new i("sqlite-public-safety-rejected","Continuity receipt compaction requires a valid public timestamp.");const r=He(e.policy),s=new Date(t-r.receipts.maxAgeMs).toISOString(),n=new Date(t-r.processingOutputs.maxAgeMs).toISOString();try{return this.runInTransaction(()=>{const d=this.selectReceiptRetentionCandidates({cutoff:s,maxItems:r.receipts.maxItems,maxBytes:r.receipts.maxBytes,limit:r.maxDeleteRowsPerRun}),o=this.selectOutputRetentionCandidates({cutoff:n,maxItems:r.processingOutputs.maxItems,maxBytes:r.processingOutputs.maxBytes,limit:r.maxDeleteRowsPerRun}),l=[...d,...o].sort((u,p)=>u.createdAt.localeCompare(p.createdAt)||u.id.localeCompare(p.id)).slice(0,r.maxDeleteRowsPerRun);if(l.length===0)return{status:"noop",summaries:[],counts:{receiptsRemoved:0,outputsRemoved:0,bytesRemoved:0,summariesCreated:0},reasonCode:F.NOOP,publicSafe:!0};const I=l.filter(u=>u.kind==="receipt"),y=l.filter(u=>u.kind==="output");for(const u of q(I.map(p=>p.jobId)))this.preserveReceiptDerivedIteration(u,e.nowIso);this.deleteRetentionCandidates("job_receipts","receipt_id",I.map(u=>u.id)),this.deleteRetentionCandidates("job_events","event_id",y.map(u=>u.id));const f=new Map;for(const u of l)f.set(u.jobId,[...f.get(u.jobId)??[],u]);const _=[];for(const[u,p]of[...f.entries()].sort(([x],[A])=>x.localeCompare(A))){const x=p.filter(j=>j.kind==="receipt"),A=p.filter(j=>j.kind==="output"),G=this.retainedReceiptOutputCounts(u),Q=ut(u,x,A),R={receiptsRemoved:x.length,receiptsRetained:G.receipts,outputsRemoved:A.length,outputsRetained:G.outputs,bytesRemoved:p.reduce((j,Se)=>j+Se.approxBytes,0),bytesRetained:G.bytes,redactions:0},P=`Compacted public receipt and processing evidence: receipts removed ${R.receiptsRemoved}, retained ${R.receiptsRetained}; summaries removed ${R.outputsRemoved}, retained ${R.outputsRetained}; bytes removed ${R.bytesRemoved}, retained ${R.bytesRetained}.`;c(P,"receipt_compaction.publicSummary",500,!0);const H=`receipt-compaction-${M("sha256").update(`${u}:${e.nowIso}:${Q.aggregate}`).digest("hex").slice(0,32)}`,ee={schemaVersion:1,contractVersion:"continuity-v1",policyVersion:1,type:W,summaryId:H,jobId:u,scope:"local_sqlite",status:"compacted",createdAt:e.nowIso,reasonCodes:[F.COMPACTED],counts:R,hashes:Q,publicSummary:P,publicSafe:!0};this.appendEvent({eventId:H,jobId:u,operationId:`op-${H}`,idempotencyKey:`idem-${H}`,type:W,summary:P,reasonCode:F.COMPACTED,createdAt:e.nowIso,metadata:{schemaVersion:1,contractVersion:"continuity-v1",eventType:W,jobId:u,reasonCodes:ee.reasonCodes,counts:R,hashes:Q,publicSummary:P}}),this.pruneReceiptCompactionSummaries(u,r.maxCompactionSummariesPerJob),_.push(ee)}return{status:"compacted",summaries:_,counts:{receiptsRemoved:I.length,outputsRemoved:y.length,bytesRemoved:l.reduce((u,p)=>u+p.approxBytes,0),summariesCreated:_.length},reasonCode:F.COMPACTED,publicSafe:!0}})}catch(d){throw m(d,"sqlite-mutation-failed")}}updateJobStatus(e){this.assertCanMutate();try{const t=this.db.prepare(`
+      `).run(input.receiptId, input.jobId, input.operationId ?? null, input.idempotencyKey ?? null, input.status, input.reasonCode ?? null, input.appliedOperationIds ? JSON.stringify(input.appliedOperationIds) : null, input.ignoredOperationIds ? JSON.stringify(input.ignoredOperationIds) : null, input.createdAt, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    /**
+     * P199.06: Apply TTL/count/byte retention to public receipts and persisted
+     * processing summaries. Deleted content is replaced with bounded audit evidence
+     * that hashes only public identifiers/status/reason codes, never summaries.
+     */
+    compactPublicReceiptsAndOutputs(input) {
+        this.assertCanMutate();
+        const nowMs = Date.parse(input.nowIso);
+        if (!Number.isFinite(nowMs)) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Continuity receipt compaction requires a valid public timestamp.');
+        }
+        const policy = normalizeContinuityRetentionPolicy(input.policy);
+        const receiptCutoff = new Date(nowMs - policy.receipts.maxAgeMs).toISOString();
+        const outputCutoff = new Date(nowMs - policy.processingOutputs.maxAgeMs).toISOString();
+        try {
+            return this.runInTransaction(() => {
+                const receiptCandidates = this.selectReceiptRetentionCandidates({
+                    cutoff: receiptCutoff,
+                    maxItems: policy.receipts.maxItems,
+                    maxBytes: policy.receipts.maxBytes,
+                    limit: policy.maxDeleteRowsPerRun,
+                });
+                const outputCandidates = this.selectOutputRetentionCandidates({
+                    cutoff: outputCutoff,
+                    maxItems: policy.processingOutputs.maxItems,
+                    maxBytes: policy.processingOutputs.maxBytes,
+                    limit: policy.maxDeleteRowsPerRun,
+                });
+                const candidates = [...receiptCandidates, ...outputCandidates]
+                    .sort((left, right) => left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id))
+                    .slice(0, policy.maxDeleteRowsPerRun);
+                if (candidates.length === 0) {
+                    return {
+                        status: 'noop',
+                        summaries: [],
+                        counts: { receiptsRemoved: 0, outputsRemoved: 0, bytesRemoved: 0, summariesCreated: 0 },
+                        reasonCode: CONTINUITY_RECEIPT_RETENTION_REASON_CODES.NOOP,
+                        publicSafe: true,
+                    };
+                }
+                const selectedReceipts = candidates.filter((candidate) => candidate.kind === 'receipt');
+                const selectedOutputs = candidates.filter((candidate) => candidate.kind === 'output');
+                for (const jobId of uniqueValues(selectedReceipts.map((candidate) => candidate.jobId))) {
+                    this.preserveReceiptDerivedIteration(jobId, input.nowIso);
+                }
+                this.deleteRetentionCandidates('job_receipts', 'receipt_id', selectedReceipts.map((candidate) => candidate.id));
+                this.deleteRetentionCandidates('job_events', 'event_id', selectedOutputs.map((candidate) => candidate.id));
+                const byJob = new Map();
+                for (const candidate of candidates) {
+                    byJob.set(candidate.jobId, [...(byJob.get(candidate.jobId) ?? []), candidate]);
+                }
+                const summaries = [];
+                for (const [jobId, removed] of [...byJob.entries()].sort(([left], [right]) => left.localeCompare(right))) {
+                    const removedReceipts = removed.filter((candidate) => candidate.kind === 'receipt');
+                    const removedOutputs = removed.filter((candidate) => candidate.kind === 'output');
+                    const retained = this.retainedReceiptOutputCounts(jobId);
+                    const hashes = retentionHashes(jobId, removedReceipts, removedOutputs);
+                    const counts = {
+                        receiptsRemoved: removedReceipts.length,
+                        receiptsRetained: retained.receipts,
+                        outputsRemoved: removedOutputs.length,
+                        outputsRetained: retained.outputs,
+                        bytesRemoved: removed.reduce((total, candidate) => total + candidate.approxBytes, 0),
+                        bytesRetained: retained.bytes,
+                        redactions: 0,
+                    };
+                    const publicSummary = `Compacted public receipt and processing evidence: receipts removed ${counts.receiptsRemoved}, retained ${counts.receiptsRetained}; summaries removed ${counts.outputsRemoved}, retained ${counts.outputsRetained}; bytes removed ${counts.bytesRemoved}, retained ${counts.bytesRetained}.`;
+                    assertBoundedPublicText(publicSummary, 'receipt_compaction.publicSummary', 500, true);
+                    const eventDigest = createHash('sha256')
+                        .update(`${jobId}:${input.nowIso}:${hashes.aggregate}`)
+                        .digest('hex');
+                    const summaryId = `receipt-compaction-${eventDigest.slice(0, 32)}`;
+                    const summary = {
+                        schemaVersion: 1,
+                        contractVersion: 'continuity-v1',
+                        policyVersion: 1,
+                        type: CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE,
+                        summaryId,
+                        jobId,
+                        scope: 'local_sqlite',
+                        status: 'compacted',
+                        createdAt: input.nowIso,
+                        reasonCodes: [CONTINUITY_RECEIPT_RETENTION_REASON_CODES.COMPACTED],
+                        counts,
+                        hashes,
+                        publicSummary,
+                        publicSafe: true,
+                    };
+                    this.appendEvent({
+                        eventId: summaryId,
+                        jobId,
+                        operationId: `op-${summaryId}`,
+                        idempotencyKey: `idem-${summaryId}`,
+                        type: CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE,
+                        summary: publicSummary,
+                        reasonCode: CONTINUITY_RECEIPT_RETENTION_REASON_CODES.COMPACTED,
+                        createdAt: input.nowIso,
+                        metadata: {
+                            schemaVersion: 1,
+                            contractVersion: 'continuity-v1',
+                            eventType: CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE,
+                            jobId,
+                            reasonCodes: summary.reasonCodes,
+                            counts,
+                            hashes,
+                            publicSummary,
+                        },
+                    });
+                    this.pruneReceiptCompactionSummaries(jobId, policy.maxCompactionSummariesPerJob);
+                    summaries.push(summary);
+                }
+                return {
+                    status: 'compacted',
+                    summaries,
+                    counts: {
+                        receiptsRemoved: selectedReceipts.length,
+                        outputsRemoved: selectedOutputs.length,
+                        bytesRemoved: candidates.reduce((total, candidate) => total + candidate.approxBytes, 0),
+                        summariesCreated: summaries.length,
+                    },
+                    reasonCode: CONTINUITY_RECEIPT_RETENTION_REASON_CODES.COMPACTED,
+                    publicSafe: true,
+                };
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    updateJobStatus(input) {
+        this.assertCanMutate();
+        try {
+            const result = this.db.prepare(`
         UPDATE jobs
            SET status = ?,
                reason_code = COALESCE(?, reason_code),
                updated_at = ?,
                next_run_at = COALESCE(?, next_run_at)
          WHERE job_id = ?
-      `).run(e.status,e.reasonCode??null,e.updatedAt,e.nextRunAt??null,e.jobId);if(t.changes===0)throw new i("sqlite-foreign-key-failed",`Continuity SQLite job ${e.jobId} was not found for status update.`);return this.toWriteResult(t)}catch(t){throw m(t,"sqlite-mutation-failed")}}recordJobStageProgress(e){this.assertCanMutate(),c(e.jobId,"job_stage.jobId",160,!0);const t=le(e.currentStage)?e.currentStage:void 0,r=Qe(e.iteration);if(!t&&r===void 0)return{inserted:!1,replay:!1,changes:0};const s=ue(e.at);try{const n=this.db.prepare("SELECT metadata_json FROM jobs WHERE job_id = ?").get(e.jobId);if(!n)return{inserted:!1,replay:!1,changes:0};const d=_t(typeof n.metadata_json=="string"?n.metadata_json:null);if(t&&(d.currentStage=t),r!==void 0&&(d.iteration=r),t&&s&&e.appendHistory!==!1){const l=Ge(d.stageHistory);l.push({stage:t,at:s}),d.stageHistory=l.slice(-ce)}const o=this.db.prepare("UPDATE jobs SET metadata_json = ? WHERE job_id = ?").run(S(d),e.jobId);return this.toWriteResult(o)}catch(n){throw m(n,"sqlite-mutation-failed")}}updateJobAndExistingGoalCampaignStatus(e){return this.runInTransaction(()=>{const t=this.db.prepare(`
+      `).run(input.status, input.reasonCode ?? null, input.updatedAt, input.nextRunAt ?? null, input.jobId);
+            if (result.changes === 0) {
+                throw new ContinuitySqliteStoreError('sqlite-foreign-key-failed', `Continuity SQLite job ${input.jobId} was not found for status update.`);
+            }
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    /**
+     * P195.04: Additively persist producer-emitted process stage/iteration into the
+     * existing `jobs.metadata_json` column and append a bounded `stageHistory`
+     * (newest `CONTINUITY_STAGE_HISTORY_MAX` kept). No schema migration is required.
+     * Unknown stages, unsafe timestamps and missing jobs are no-ops so older DBs and
+     * non-tick summaries never throw.
+     */
+    recordJobStageProgress(input) {
+        this.assertCanMutate();
+        assertBoundedPublicText(input.jobId, 'job_stage.jobId', 160, true);
+        const stage = isContinuityPublicStage(input.currentStage) ? input.currentStage : undefined;
+        const iteration = normalizeContinuityStageIteration(input.iteration);
+        if (!stage && iteration === undefined) {
+            return { inserted: false, replay: false, changes: 0 };
+        }
+        const at = sanitizeContinuityStageTimestamp(input.at);
+        try {
+            const existing = this.db
+                .prepare('SELECT metadata_json FROM jobs WHERE job_id = ?')
+                .get(input.jobId);
+            if (!existing)
+                return { inserted: false, replay: false, changes: 0 };
+            const metadata = parseJobMetadataObject(typeof existing.metadata_json === 'string' ? existing.metadata_json : null);
+            if (stage)
+                metadata.currentStage = stage;
+            if (iteration !== undefined)
+                metadata.iteration = iteration;
+            if (stage && at && input.appendHistory !== false) {
+                const history = sanitizeContinuityStageHistory(metadata.stageHistory);
+                history.push({ stage, at });
+                metadata.stageHistory = history.slice(-CONTINUITY_STAGE_HISTORY_MAX);
+            }
+            const result = this.db
+                .prepare('UPDATE jobs SET metadata_json = ? WHERE job_id = ?')
+                .run(stringifyPublicMetadata(metadata), input.jobId);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    updateJobAndExistingGoalCampaignStatus(input) {
+        return this.runInTransaction(() => {
+            const jobResult = this.db.prepare(`
         UPDATE jobs
            SET status = ?,
                reason_code = COALESCE(?, reason_code),
                updated_at = ?,
                next_run_at = COALESCE(?, next_run_at)
          WHERE job_id = ?
-      `).run(e.status,e.reasonCode??null,e.updatedAt,e.nextRunAt??null,e.jobId);if(t.changes===0)throw new i("sqlite-foreign-key-failed",`Continuity SQLite job ${e.jobId} was not found for status parity update.`);const r=this.db.prepare(`
+      `).run(input.status, input.reasonCode ?? null, input.updatedAt, input.nextRunAt ?? null, input.jobId);
+            if (jobResult.changes === 0) {
+                throw new ContinuitySqliteStoreError('sqlite-foreign-key-failed', `Continuity SQLite job ${input.jobId} was not found for status parity update.`);
+            }
+            const campaignResult = this.db.prepare(`
         UPDATE goal_campaigns
            SET status = ?,
                reason_code = COALESCE(?, reason_code),
                updated_at = ?
          WHERE job_id = ?
-      `).run(e.status,e.reasonCode??null,e.updatedAt,e.jobId);return this.toWriteResult({changes:t.changes+r.changes})})}scheduleNextTick(e){return this.updateJobStatus({jobId:e.jobId,status:"active",updatedAt:e.updatedAt,reasonCode:e.reasonCode,nextRunAt:e.scheduledAt})}acquireLease(e){this.assertCanMutate();const t=S(e.metadata);try{const r=this.db.prepare(`
+      `).run(input.status, input.reasonCode ?? null, input.updatedAt, input.jobId);
+            return this.toWriteResult({ changes: jobResult.changes + campaignResult.changes });
+        });
+    }
+    scheduleNextTick(input) {
+        return this.updateJobStatus({
+            jobId: input.jobId,
+            status: 'active',
+            updatedAt: input.updatedAt,
+            reasonCode: input.reasonCode,
+            nextRunAt: input.scheduledAt,
+        });
+    }
+    acquireLease(input) {
+        this.assertCanMutate();
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const result = this.db.prepare(`
         INSERT OR IGNORE INTO job_leases (
           lease_id, job_id, runner_id, status, acquired_at, expires_at,
           operation_id, idempotency_key, metadata_json
         ) VALUES (?, ?, ?, 'acquired', ?, ?, ?, ?, ?)
-      `).run(e.leaseId,e.jobId,e.runnerId,e.acquiredAt,e.expiresAt,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}releaseLease(e){this.assertCanMutate();try{const t=this.db.prepare(`
+      `).run(input.leaseId, input.jobId, input.runnerId, input.acquiredAt, input.expiresAt, input.operationId ?? null, input.idempotencyKey ?? null, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    releaseLease(input) {
+        this.assertCanMutate();
+        try {
+            const result = this.db.prepare(`
         UPDATE job_leases
            SET status = 'released', released_at = ?
          WHERE lease_id = ? AND released_at IS NULL
-      `).run(e.releasedAt,e.leaseId);if(t.changes===0)throw new i("sqlite-foreign-key-failed",`Continuity SQLite lease ${e.leaseId} was not found for release.`);return this.toWriteResult(t)}catch(t){throw m(t,"sqlite-mutation-failed")}}recordStateSnapshot(e){this.assertCanMutate(),b(e.summary,"state_snapshots.summary"),b(e.relativePath,"state_snapshots.relative_path");const t=S(e.metadata);try{const r=this.db.prepare(`
+      `).run(input.releasedAt, input.leaseId);
+            if (result.changes === 0) {
+                throw new ContinuitySqliteStoreError('sqlite-foreign-key-failed', `Continuity SQLite lease ${input.leaseId} was not found for release.`);
+            }
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    recordStateSnapshot(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.summary, 'state_snapshots.summary');
+        assertPublicSafeText(input.relativePath, 'state_snapshots.relative_path');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const result = this.db.prepare(`
         INSERT OR IGNORE INTO state_snapshots (
           snapshot_id, job_id, kind, relative_path, sha256, summary, captured_at,
           operation_id, idempotency_key, metadata_json
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `).run(e.snapshotId,e.jobId??null,e.kind,e.relativePath??null,e.sha256??null,e.summary??null,e.capturedAt,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}recordArtifact(e){this.assertCanMutate(),b(e.kind,"artifacts.kind"),b(e.relativePath,"artifacts.relative_path"),b(e.summary,"artifacts.summary");const t=S(e.metadata);try{const r=this.db.prepare(`
+      `).run(input.snapshotId, input.jobId ?? null, input.kind, input.relativePath ?? null, input.sha256 ?? null, input.summary ?? null, input.capturedAt, input.operationId ?? null, input.idempotencyKey ?? null, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    recordArtifact(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.kind, 'artifacts.kind');
+        assertPublicSafeText(input.relativePath, 'artifacts.relative_path');
+        assertPublicSafeText(input.summary, 'artifacts.summary');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const result = this.db.prepare(`
         INSERT OR IGNORE INTO artifacts (
           artifact_id, job_id, kind, relative_path, sha256, summary,
           operation_id, idempotency_key, created_at, metadata_json
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `).run(e.artifactId,e.jobId??null,e.kind,e.relativePath,e.sha256??null,e.summary??null,e.operationId??null,e.idempotencyKey??null,e.createdAt,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}enqueueOutbox(e){this.assertCanMutate(),v({outboxId:e.outboxId,jobId:e.jobId,operationId:e.operationId,idempotencyKey:e.idempotencyKey,type:e.type,status:e.status,deliveryCursor:e.deliveryCursor,timestamp:e.createdAt,reasonCode:e.lastErrorReason??e.lastErrorCode,summary:e.lastErrorSummary??e.deadLetterSummary}),v({outboxId:e.outboxId,timestamp:e.updatedAt}),c(e.nextAttemptAt,"outbox.nextAttemptAt",80),c(e.lastAttemptAt,"outbox.lastAttemptAt",80),c(e.sentAt,"outbox.sentAt",80),c(e.ackedAt,"outbox.ackedAt",80),c(e.deadLetteredAt,"outbox.deadLetteredAt",80),N(e.retryCount,"outbox.retryCount"),N(e.attemptCount,"outbox.attemptCount");const t=S(e.payload);try{const r=this.db.prepare(`
+      `).run(input.artifactId, input.jobId ?? null, input.kind, input.relativePath, input.sha256 ?? null, input.summary ?? null, input.operationId ?? null, input.idempotencyKey ?? null, input.createdAt, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    enqueueOutbox(input) {
+        this.assertCanMutate();
+        assertOutboxIdentity({
+            outboxId: input.outboxId,
+            jobId: input.jobId,
+            operationId: input.operationId,
+            idempotencyKey: input.idempotencyKey,
+            type: input.type,
+            status: input.status,
+            deliveryCursor: input.deliveryCursor,
+            timestamp: input.createdAt,
+            reasonCode: input.lastErrorReason ?? input.lastErrorCode,
+            summary: input.lastErrorSummary ?? input.deadLetterSummary,
+        });
+        assertOutboxIdentity({ outboxId: input.outboxId, timestamp: input.updatedAt });
+        assertBoundedPublicText(input.nextAttemptAt, 'outbox.nextAttemptAt', 80);
+        assertBoundedPublicText(input.lastAttemptAt, 'outbox.lastAttemptAt', 80);
+        assertBoundedPublicText(input.sentAt, 'outbox.sentAt', 80);
+        assertBoundedPublicText(input.ackedAt, 'outbox.ackedAt', 80);
+        assertBoundedPublicText(input.deadLetteredAt, 'outbox.deadLetteredAt', 80);
+        assertNonNegativeInteger(input.retryCount, 'outbox.retryCount');
+        assertNonNegativeInteger(input.attemptCount, 'outbox.attemptCount');
+        const payloadJson = stringifyPublicMetadata(input.payload);
+        try {
+            const result = this.db.prepare(`
         INSERT OR IGNORE INTO outbox (
           outbox_id, job_id, operation_id, idempotency_key, type, status,
           payload_json, retry_count, attempt_count, delivery_cursor,
@@ -248,18 +2194,57 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           last_error_reason, last_error_summary, dead_letter_summary,
           dead_lettered_at, created_at, updated_at
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `).run(e.outboxId,e.jobId??null,e.operationId,e.idempotencyKey??null,e.type,e.status??"pending",t??"{}",e.retryCount??0,e.attemptCount??0,e.deliveryCursor??null,e.nextAttemptAt??null,e.lastAttemptAt??null,e.sentAt??null,e.ackedAt??null,e.lastErrorCode??null,e.lastErrorReason??e.lastErrorCode??null,e.lastErrorSummary??null,e.deadLetterSummary??null,e.deadLetteredAt??null,e.createdAt,e.updatedAt);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}selectOutboxBatch(e){v({outboxId:"outbox-query",timestamp:e.nowIso});const t=Math.max(1,Math.min(100,Math.floor(e.limit))),r=q(e.statuses?.length?e.statuses:["pending","failed"]);for(const d of r)if(!Ie(d))throw new i("sqlite-public-safety-rejected","Continuity SQLite outbox batch query rejected an unknown status.");const s=r.map(()=>"?").join(", ");return this.db.prepare(`
+      `).run(input.outboxId, input.jobId ?? null, input.operationId, input.idempotencyKey ?? null, input.type, input.status ?? 'pending', payloadJson ?? '{}', input.retryCount ?? 0, input.attemptCount ?? 0, input.deliveryCursor ?? null, input.nextAttemptAt ?? null, input.lastAttemptAt ?? null, input.sentAt ?? null, input.ackedAt ?? null, input.lastErrorCode ?? null, input.lastErrorReason ?? input.lastErrorCode ?? null, input.lastErrorSummary ?? null, input.deadLetterSummary ?? null, input.deadLetteredAt ?? null, input.createdAt, input.updatedAt);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    selectOutboxBatch(options) {
+        assertOutboxIdentity({ outboxId: 'outbox-query', timestamp: options.nowIso });
+        const limit = Math.max(1, Math.min(100, Math.floor(options.limit)));
+        const statuses = uniqueValues(options.statuses?.length ? options.statuses : ['pending', 'failed']);
+        for (const status of statuses) {
+            if (!isOutboxStatus(status)) {
+                throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Continuity SQLite outbox batch query rejected an unknown status.');
+            }
+        }
+        const placeholders = statuses.map(() => '?').join(', ');
+        const rows = this.db.prepare(`
       SELECT outbox_id, job_id, operation_id, idempotency_key, type, status,
              payload_json, retry_count, attempt_count, delivery_cursor,
              next_attempt_at, last_attempt_at, sent_at, acked_at, last_error_code,
              last_error_reason, last_error_summary, dead_letter_summary,
              dead_lettered_at, created_at, updated_at
         FROM outbox
-       WHERE status IN (${s})
+       WHERE status IN (${placeholders})
          AND (status NOT IN ('pending', 'failed') OR next_attempt_at IS NULL OR next_attempt_at <= ?)
        ORDER BY COALESCE(next_attempt_at, created_at) ASC, created_at ASC, outbox_id ASC
        LIMIT ?
-    `).all(...r,e.nowIso,t).map(ht)}markOutboxSent(e){this.assertCanMutate(),v({outboxId:e.outboxId,deliveryCursor:e.deliveryCursor,timestamp:e.sentAt,reasonCode:e.reasonCode});try{return this.runInTransaction(()=>{const t=this.getOutboxTransitionRow(e.outboxId);if(!t)return C({outboxId:e.outboxId,status:"missing",changes:0,replay:!1,reasonCode:"outbox-missing"});if((t.status==="sent"||t.status==="acked")&&t.delivery_cursor===e.deliveryCursor)return C({outboxId:e.outboxId,status:t.status,changes:0,replay:!0,deliveryCursor:e.deliveryCursor,reasonCode:e.reasonCode??"outbox-delivery-replay"});if(t.status==="sent"||t.status==="acked"||t.status==="dead_letter")return C({outboxId:e.outboxId,status:"conflict",changes:0,replay:!1,deliveryCursor:t.delivery_cursor??void 0,reasonCode:"outbox-delivery-conflict"});const r=this.db.prepare(`
+    `).all(...statuses, options.nowIso, limit);
+        return rows.map(toOutboxDeliveryRow);
+    }
+    markOutboxSent(input) {
+        this.assertCanMutate();
+        assertOutboxIdentity({
+            outboxId: input.outboxId,
+            deliveryCursor: input.deliveryCursor,
+            timestamp: input.sentAt,
+            reasonCode: input.reasonCode,
+        });
+        try {
+            return this.runInTransaction(() => {
+                const row = this.getOutboxTransitionRow(input.outboxId);
+                if (!row)
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'missing', changes: 0, replay: false, reasonCode: 'outbox-missing' });
+                if ((row.status === 'sent' || row.status === 'acked') && row.delivery_cursor === input.deliveryCursor) {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: row.status, changes: 0, replay: true, deliveryCursor: input.deliveryCursor, reasonCode: input.reasonCode ?? 'outbox-delivery-replay' });
+                }
+                if (row.status === 'sent' || row.status === 'acked' || row.status === 'dead_letter') {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'conflict', changes: 0, replay: false, deliveryCursor: row.delivery_cursor ?? undefined, reasonCode: 'outbox-delivery-conflict' });
+                }
+                const result = this.db.prepare(`
           UPDATE outbox
              SET status = 'sent',
                  delivery_cursor = ?,
@@ -270,7 +2255,34 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                  updated_at = ?
            WHERE outbox_id = ?
              AND status IN ('pending', 'failed')
-        `).run(e.deliveryCursor,e.sentAt,e.sentAt,e.sentAt,e.outboxId);return C({outboxId:e.outboxId,status:"sent",changes:r.changes,replay:!1,deliveryCursor:e.deliveryCursor,reasonCode:e.reasonCode??"outbox-sent"})})}catch(t){throw m(t,"sqlite-mutation-failed")}}ackOutbox(e){this.assertCanMutate(),v({outboxId:e.outboxId,deliveryCursor:e.deliveryCursor,timestamp:e.ackedAt,reasonCode:e.reasonCode});try{return this.runInTransaction(()=>{const t=this.getOutboxTransitionRow(e.outboxId);if(!t)return C({outboxId:e.outboxId,status:"missing",changes:0,replay:!1,reasonCode:"outbox-missing"});if(t.status==="acked"&&(!e.deliveryCursor||t.delivery_cursor===e.deliveryCursor))return C({outboxId:e.outboxId,status:"acked",changes:0,replay:!0,deliveryCursor:t.delivery_cursor??void 0,reasonCode:e.reasonCode??"outbox-ack-replay"});if(t.status!=="sent"||e.deliveryCursor&&t.delivery_cursor!==e.deliveryCursor)return C({outboxId:e.outboxId,status:"conflict",changes:0,replay:!1,deliveryCursor:t.delivery_cursor??void 0,reasonCode:"outbox-ack-conflict"});const r=this.db.prepare(`
+        `).run(input.deliveryCursor, input.sentAt, input.sentAt, input.sentAt, input.outboxId);
+                return outboxTransitionResult({ outboxId: input.outboxId, status: 'sent', changes: result.changes, replay: false, deliveryCursor: input.deliveryCursor, reasonCode: input.reasonCode ?? 'outbox-sent' });
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    ackOutbox(input) {
+        this.assertCanMutate();
+        assertOutboxIdentity({
+            outboxId: input.outboxId,
+            deliveryCursor: input.deliveryCursor,
+            timestamp: input.ackedAt,
+            reasonCode: input.reasonCode,
+        });
+        try {
+            return this.runInTransaction(() => {
+                const row = this.getOutboxTransitionRow(input.outboxId);
+                if (!row)
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'missing', changes: 0, replay: false, reasonCode: 'outbox-missing' });
+                if (row.status === 'acked' && (!input.deliveryCursor || row.delivery_cursor === input.deliveryCursor)) {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'acked', changes: 0, replay: true, deliveryCursor: row.delivery_cursor ?? undefined, reasonCode: input.reasonCode ?? 'outbox-ack-replay' });
+                }
+                if (row.status !== 'sent' || (input.deliveryCursor && row.delivery_cursor !== input.deliveryCursor)) {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'conflict', changes: 0, replay: false, deliveryCursor: row.delivery_cursor ?? undefined, reasonCode: 'outbox-ack-conflict' });
+                }
+                const result = this.db.prepare(`
           UPDATE outbox
              SET status = 'acked',
                  acked_at = ?,
@@ -280,7 +2292,48 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                  last_error_reason = NULL
            WHERE outbox_id = ?
              AND status = 'sent'
-        `).run(e.ackedAt,e.ackedAt,e.outboxId);return C({outboxId:e.outboxId,status:"acked",changes:r.changes,replay:!1,deliveryCursor:t.delivery_cursor??void 0,reasonCode:e.reasonCode??"outbox-acked"})})}catch(t){throw m(t,"sqlite-mutation-failed")}}failOutboxDelivery(e){this.assertCanMutate(),v({outboxId:e.outboxId,deliveryCursor:e.deliveryCursor,timestamp:e.failedAt,reasonCode:e.reasonCode,summary:e.summary}),c(e.nextRetryAt,"outbox.nextRetryAt",80);try{return this.runInTransaction(()=>{const t=this.getOutboxTransitionRow(e.outboxId);if(!t)return C({outboxId:e.outboxId,status:"missing",changes:0,replay:!1,reasonCode:"outbox-missing"});if(t.status==="acked")return C({outboxId:e.outboxId,status:"acked",changes:0,replay:!0,deliveryCursor:t.delivery_cursor??void 0,reasonCode:"outbox-already-acked"});if(t.status==="dead_letter")return C({outboxId:e.outboxId,status:"dead_letter",changes:0,replay:!0,deliveryCursor:t.delivery_cursor??void 0,deadLetteredAt:t.dead_lettered_at??void 0,reasonCode:t.last_error_reason??t.last_error_code??e.reasonCode});if(e.deliveryCursor&&t.delivery_cursor&&t.delivery_cursor!==e.deliveryCursor)return C({outboxId:e.outboxId,status:"conflict",changes:0,replay:!1,deliveryCursor:t.delivery_cursor,reasonCode:"outbox-fail-conflict"});const r=Math.max(1,t.attempt_count??0,t.retry_count??0),s=we({nowIso:e.failedAt,attemptCount:r,reasonCode:e.reasonCode,summary:e.summary,nextRetryAt:e.nextRetryAt,policy:e.policy}),n=this.db.prepare(`
+        `).run(input.ackedAt, input.ackedAt, input.outboxId);
+                return outboxTransitionResult({ outboxId: input.outboxId, status: 'acked', changes: result.changes, replay: false, deliveryCursor: row.delivery_cursor ?? undefined, reasonCode: input.reasonCode ?? 'outbox-acked' });
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    failOutboxDelivery(input) {
+        this.assertCanMutate();
+        assertOutboxIdentity({
+            outboxId: input.outboxId,
+            deliveryCursor: input.deliveryCursor,
+            timestamp: input.failedAt,
+            reasonCode: input.reasonCode,
+            summary: input.summary,
+        });
+        assertBoundedPublicText(input.nextRetryAt, 'outbox.nextRetryAt', 80);
+        try {
+            return this.runInTransaction(() => {
+                const row = this.getOutboxTransitionRow(input.outboxId);
+                if (!row)
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'missing', changes: 0, replay: false, reasonCode: 'outbox-missing' });
+                if (row.status === 'acked') {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'acked', changes: 0, replay: true, deliveryCursor: row.delivery_cursor ?? undefined, reasonCode: 'outbox-already-acked' });
+                }
+                if (row.status === 'dead_letter') {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'dead_letter', changes: 0, replay: true, deliveryCursor: row.delivery_cursor ?? undefined, deadLetteredAt: row.dead_lettered_at ?? undefined, reasonCode: row.last_error_reason ?? row.last_error_code ?? input.reasonCode });
+                }
+                if (input.deliveryCursor && row.delivery_cursor && row.delivery_cursor !== input.deliveryCursor) {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'conflict', changes: 0, replay: false, deliveryCursor: row.delivery_cursor, reasonCode: 'outbox-fail-conflict' });
+                }
+                const attemptCount = Math.max(1, row.attempt_count ?? 0, row.retry_count ?? 0);
+                const decision = computeContinuityOutboxFailureDecision({
+                    nowIso: input.failedAt,
+                    attemptCount,
+                    reasonCode: input.reasonCode,
+                    summary: input.summary,
+                    nextRetryAt: input.nextRetryAt,
+                    policy: input.policy,
+                });
+                const result = this.db.prepare(`
           UPDATE outbox
              SET status = ?,
                  retry_count = MAX(retry_count, ?),
@@ -293,7 +2346,40 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                  updated_at = ?
            WHERE outbox_id = ?
              AND status IN ('pending', 'sent', 'failed')
-        `).run(s.status,r,s.status==="failed"?s.nextRetryAt??e.failedAt:null,e.reasonCode,e.reasonCode,e.summary??null,s.status==="dead_letter"?e.summary??e.reasonCode:null,s.deadLetteredAt??null,e.failedAt,e.outboxId);return C({outboxId:e.outboxId,status:s.status,changes:n.changes,replay:!1,deliveryCursor:t.delivery_cursor??e.deliveryCursor,reasonCode:s.reasonCode,...s.nextRetryAt?{nextRetryAt:s.nextRetryAt}:{},...s.deadLetteredAt?{deadLetteredAt:s.deadLetteredAt}:{}})})}catch(t){throw m(t,"sqlite-mutation-failed")}}deadLetterOutbox(e){this.assertCanMutate(),v({outboxId:e.outboxId,timestamp:e.deadLetteredAt,reasonCode:e.reasonCode,summary:e.summary});try{return this.runInTransaction(()=>{const t=this.getOutboxTransitionRow(e.outboxId);if(!t)return C({outboxId:e.outboxId,status:"missing",changes:0,replay:!1,reasonCode:"outbox-missing"});if(t.status==="dead_letter")return C({outboxId:e.outboxId,status:"dead_letter",changes:0,replay:!0,deliveryCursor:t.delivery_cursor??void 0,deadLetteredAt:t.dead_lettered_at??void 0,reasonCode:t.last_error_reason??t.last_error_code??e.reasonCode});const r=this.db.prepare(`
+        `).run(decision.status, attemptCount, decision.status === 'failed' ? decision.nextRetryAt ?? input.failedAt : null, input.reasonCode, input.reasonCode, input.summary ?? null, decision.status === 'dead_letter' ? input.summary ?? input.reasonCode : null, decision.deadLetteredAt ?? null, input.failedAt, input.outboxId);
+                return outboxTransitionResult({
+                    outboxId: input.outboxId,
+                    status: decision.status,
+                    changes: result.changes,
+                    replay: false,
+                    deliveryCursor: row.delivery_cursor ?? input.deliveryCursor,
+                    reasonCode: decision.reasonCode,
+                    ...(decision.nextRetryAt ? { nextRetryAt: decision.nextRetryAt } : {}),
+                    ...(decision.deadLetteredAt ? { deadLetteredAt: decision.deadLetteredAt } : {}),
+                });
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    deadLetterOutbox(input) {
+        this.assertCanMutate();
+        assertOutboxIdentity({
+            outboxId: input.outboxId,
+            timestamp: input.deadLetteredAt,
+            reasonCode: input.reasonCode,
+            summary: input.summary,
+        });
+        try {
+            return this.runInTransaction(() => {
+                const row = this.getOutboxTransitionRow(input.outboxId);
+                if (!row)
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'missing', changes: 0, replay: false, reasonCode: 'outbox-missing' });
+                if (row.status === 'dead_letter') {
+                    return outboxTransitionResult({ outboxId: input.outboxId, status: 'dead_letter', changes: 0, replay: true, deliveryCursor: row.delivery_cursor ?? undefined, deadLetteredAt: row.dead_lettered_at ?? undefined, reasonCode: row.last_error_reason ?? row.last_error_code ?? input.reasonCode });
+                }
+                const result = this.db.prepare(`
           UPDATE outbox
              SET status = 'dead_letter',
                  next_attempt_at = NULL,
@@ -305,13 +2391,39 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                  updated_at = ?
            WHERE outbox_id = ?
              AND status <> 'acked'
-        `).run(e.reasonCode,e.reasonCode,e.summary,e.summary,e.deadLetteredAt,e.deadLetteredAt,e.outboxId);return C({outboxId:e.outboxId,status:"dead_letter",changes:r.changes,replay:!1,deliveryCursor:t.delivery_cursor??void 0,deadLetteredAt:e.deadLetteredAt,reasonCode:e.reasonCode})})}catch(t){throw m(t,"sqlite-mutation-failed")}}retryOutboxEntries(e){this.assertCanMutate();const t=Math.max(1,Math.min(100,Math.floor(e.limit))),r=q(e.statuses?.length?e.statuses:["failed","dead_letter"]),s=e.reasonCode??"backoff-scheduled";b(s,"outbox.last_error_code"),b(e.nextAttemptAt,"outbox.next_attempt_at");try{return this.runInTransaction(()=>{const n=r.map(()=>"?").join(", "),o=this.db.prepare(`
+        `).run(input.reasonCode, input.reasonCode, input.summary, input.summary, input.deadLetteredAt, input.deadLetteredAt, input.outboxId);
+                return outboxTransitionResult({ outboxId: input.outboxId, status: 'dead_letter', changes: result.changes, replay: false, deliveryCursor: row.delivery_cursor ?? undefined, deadLetteredAt: input.deadLetteredAt, reasonCode: input.reasonCode });
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    retryOutboxEntries(options) {
+        this.assertCanMutate();
+        const limit = Math.max(1, Math.min(100, Math.floor(options.limit)));
+        const statuses = uniqueValues(options.statuses?.length ? options.statuses : ['failed', 'dead_letter']);
+        const reasonCode = options.reasonCode ?? 'backoff-scheduled';
+        assertPublicSafeText(reasonCode, 'outbox.last_error_code');
+        assertPublicSafeText(options.nextAttemptAt, 'outbox.next_attempt_at');
+        try {
+            return this.runInTransaction(() => {
+                const placeholders = statuses.map(() => '?').join(', ');
+                const rows = this.db.prepare(`
           SELECT outbox_id
             FROM outbox
-           WHERE status IN (${n})
+           WHERE status IN (${placeholders})
            ORDER BY updated_at ASC, outbox_id ASC
            LIMIT ?
-        `).all(...r,t).map(y=>y.outbox_id).filter(y=>typeof y=="string"&&y.length>0);if(o.length===0)return{retriedOutboxIds:[],changes:0,reasonCode:s,publicSafe:!0};const l=o.map(()=>"?").join(", "),I=this.db.prepare(`
+        `).all(...statuses, limit);
+                const retriedOutboxIds = rows
+                    .map((row) => row.outbox_id)
+                    .filter((outboxId) => typeof outboxId === 'string' && outboxId.length > 0);
+                if (retriedOutboxIds.length === 0) {
+                    return { retriedOutboxIds: [], changes: 0, reasonCode, publicSafe: true };
+                }
+                const idPlaceholders = retriedOutboxIds.map(() => '?').join(', ');
+                const result = this.db.prepare(`
           UPDATE outbox
              SET status = 'pending',
                  retry_count = retry_count + 1,
@@ -324,8 +2436,22 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                  dead_letter_summary = NULL,
                  dead_lettered_at = NULL,
                  updated_at = ?
-           WHERE outbox_id IN (${l})
-        `).run(e.nextAttemptAt??e.nowIso,s,s,e.nowIso,...o);return{retriedOutboxIds:o,changes:I.changes,reasonCode:s,publicSafe:!0}})}catch(n){throw m(n,"sqlite-mutation-failed")}}upsertGoalCampaign(e){this.assertCanMutate(),b(e.title,"goal_campaigns.title"),b(e.publicSummary,"goal_campaigns.public_summary");const t=S(e.metadata);try{const r=this.db.prepare(`
+           WHERE outbox_id IN (${idPlaceholders})
+        `).run(options.nextAttemptAt ?? options.nowIso, reasonCode, reasonCode, options.nowIso, ...retriedOutboxIds);
+                return { retriedOutboxIds, changes: result.changes, reasonCode, publicSafe: true };
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    upsertGoalCampaign(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.title, 'goal_campaigns.title');
+        assertPublicSafeText(input.publicSummary, 'goal_campaigns.public_summary');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const result = this.db.prepare(`
         INSERT INTO goal_campaigns (
           campaign_id, job_id, status, title, public_summary, reason_code,
           created_at, updated_at, operation_id, idempotency_key, metadata_json
@@ -339,7 +2465,20 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           operation_id = excluded.operation_id,
           idempotency_key = excluded.idempotency_key,
           metadata_json = excluded.metadata_json
-      `).run(e.campaignId,e.jobId,e.status,e.title??null,e.publicSummary??null,e.reasonCode??null,e.createdAt,e.updatedAt,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}upsertGoalLedgerItem(e){this.assertCanMutate(),b(e.summary,"goal_ledger_items.summary");const t=S(e.metadata);try{this.ensureGoalCampaign(e.campaignId,e.jobId,e.createdAt,e.updatedAt);const r=this.db.prepare(`
+      `).run(input.campaignId, input.jobId, input.status, input.title ?? null, input.publicSummary ?? null, input.reasonCode ?? null, input.createdAt, input.updatedAt, input.operationId ?? null, input.idempotencyKey ?? null, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    upsertGoalLedgerItem(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.summary, 'goal_ledger_items.summary');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            this.ensureGoalCampaign(input.campaignId, input.jobId, input.createdAt, input.updatedAt);
+            const result = this.db.prepare(`
         INSERT INTO goal_ledger_items (
           item_id, campaign_id, operation_id, idempotency_key, item_type, status,
           summary, reason_code, created_at, updated_at, metadata_json
@@ -350,7 +2489,21 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           reason_code = excluded.reason_code,
           updated_at = excluded.updated_at,
           metadata_json = excluded.metadata_json
-      `).run(e.itemId,e.campaignId,e.operationId??null,e.idempotencyKey??null,e.itemType,e.status,e.summary,e.reasonCode??null,e.createdAt,e.updatedAt,t);return this.toWriteResult(r)}catch(r){throw m(r,"sqlite-mutation-failed")}}upsertGoalVerifier(e){this.assertCanMutate(),b(e.summary,"goal_verifiers.summary");const t=S(e.metadata);try{const r=e.lastCheckedAt??this.now();this.ensureGoalCampaign(e.campaignId,e.jobId,r,r);const s=this.db.prepare(`
+      `).run(input.itemId, input.campaignId, input.operationId ?? null, input.idempotencyKey ?? null, input.itemType, input.status, input.summary, input.reasonCode ?? null, input.createdAt, input.updatedAt, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    upsertGoalVerifier(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.summary, 'goal_verifiers.summary');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const fallbackTimestamp = input.lastCheckedAt ?? this.now();
+            this.ensureGoalCampaign(input.campaignId, input.jobId, fallbackTimestamp, fallbackTimestamp);
+            const result = this.db.prepare(`
         INSERT INTO goal_verifiers (
           verifier_id, campaign_id, kind, status, summary, reason_code,
           last_checked_at, operation_id, idempotency_key, metadata_json
@@ -361,7 +2514,21 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           reason_code = excluded.reason_code,
           last_checked_at = excluded.last_checked_at,
           metadata_json = excluded.metadata_json
-      `).run(e.verifierId,e.campaignId,e.kind,e.status,e.summary??null,e.reasonCode??null,e.lastCheckedAt??null,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(s)}catch(r){throw m(r,"sqlite-mutation-failed")}}upsertGoalReviewGate(e){this.assertCanMutate(),b(e.summary,"goal_review_gates.summary");const t=S(e.metadata);try{const r=this.now();this.ensureGoalCampaign(e.campaignId,e.jobId,r,r);const s=this.db.prepare(`
+      `).run(input.verifierId, input.campaignId, input.kind, input.status, input.summary ?? null, input.reasonCode ?? null, input.lastCheckedAt ?? null, input.operationId ?? null, input.idempotencyKey ?? null, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    upsertGoalReviewGate(input) {
+        this.assertCanMutate();
+        assertPublicSafeText(input.summary, 'goal_review_gates.summary');
+        const metadataJson = stringifyPublicMetadata(input.metadata);
+        try {
+            const fallbackTimestamp = this.now();
+            this.ensureGoalCampaign(input.campaignId, input.jobId, fallbackTimestamp, fallbackTimestamp);
+            const result = this.db.prepare(`
         INSERT INTO goal_review_gates (
           gate_id, campaign_id, status, summary, required, reason_code,
           operation_id, idempotency_key, metadata_json
@@ -372,7 +2539,45 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           required = excluded.required,
           reason_code = excluded.reason_code,
           metadata_json = excluded.metadata_json
-      `).run(e.gateId,e.campaignId,e.status,e.summary??null,e.required?1:0,e.reasonCode??null,e.operationId??null,e.idempotencyKey??null,t);return this.toWriteResult(s)}catch(r){throw m(r,"sqlite-mutation-failed")}}recordOperationAudit(e){return this.appendReceipt(e)}hasOperationRef(e,t){this.assertCanMutate();const r=["jobs","job_leases","job_events","job_receipts","goal_campaigns","goal_ledger_items","goal_verifiers","goal_review_gates","loop_jobs","artifacts","state_snapshots","headless_execution_attempts","runner_config","outbox"],s=r.map(o=>`SELECT 1 AS found FROM ${o} WHERE operation_id = ?${t?" OR idempotency_key = ?":""}`),n=r.flatMap(()=>t?[e,t]:[e]);return!!this.db.prepare(`${s.join(" UNION ALL ")} LIMIT 1`).get(...n)}jobExists(e){return!!this.db.prepare("SELECT 1 AS found FROM jobs WHERE job_id = ? LIMIT 1").get(e)}getHeadlessExecutionAttempt(e){return this.db.prepare(`
+      `).run(input.gateId, input.campaignId, input.status, input.summary ?? null, input.required ? 1 : 0, input.reasonCode ?? null, input.operationId ?? null, input.idempotencyKey ?? null, metadataJson);
+            return this.toWriteResult(result);
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    recordOperationAudit(input) {
+        return this.appendReceipt(input);
+    }
+    hasOperationRef(operationId, idempotencyKey) {
+        this.assertCanMutate();
+        const tables = [
+            'jobs',
+            'job_leases',
+            'job_events',
+            'job_receipts',
+            'goal_campaigns',
+            'goal_ledger_items',
+            'goal_verifiers',
+            'goal_review_gates',
+            'loop_jobs',
+            'artifacts',
+            'state_snapshots',
+            'headless_execution_attempts',
+            'runner_config',
+            'outbox',
+        ];
+        const clauses = tables.map((table) => `SELECT 1 AS found FROM ${table} WHERE operation_id = ?${idempotencyKey ? ' OR idempotency_key = ?' : ''}`);
+        const params = tables.flatMap(() => idempotencyKey ? [operationId, idempotencyKey] : [operationId]);
+        const row = this.db.prepare(`${clauses.join(' UNION ALL ')} LIMIT 1`).get(...params);
+        return Boolean(row);
+    }
+    jobExists(jobId) {
+        const row = this.db.prepare('SELECT 1 AS found FROM jobs WHERE job_id = ? LIMIT 1').get(jobId);
+        return Boolean(row);
+    }
+    getHeadlessExecutionAttempt(attemptId) {
+        return this.db.prepare(`
       SELECT attempt_id, execution_id, job_id, directive_hash, directive_kind,
              command_class, target_kind, target_ref, story_id, epic_id,
              runtime_id, model_id, runtime_source, status, reason_code,
@@ -386,13 +2591,22 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
         FROM headless_execution_attempts
        WHERE attempt_id = ?
        LIMIT 1
-    `).get(e)}getOutboxTransitionRow(e){const t=this.db.prepare(`
+    `).get(attemptId);
+    }
+    getOutboxTransitionRow(outboxId) {
+        const row = this.db.prepare(`
       SELECT outbox_id, status, delivery_cursor, retry_count, attempt_count,
              last_error_code, last_error_reason, dead_lettered_at
         FROM outbox
        WHERE outbox_id = ?
        LIMIT 1
-    `).get(e);if(!(!t||!E(t)))return t}selectReceiptRetentionCandidates(e){return this.db.prepare(`
+    `).get(outboxId);
+        if (!row || !isRecord(row))
+            return undefined;
+        return row;
+    }
+    selectReceiptRetentionCandidates(input) {
+        const rows = this.db.prepare(`
       WITH sized AS (
         SELECT receipt_id, job_id, status, reason_code, created_at,
                length(receipt_id) + length(job_id) + length(status) + length(created_at)
@@ -411,7 +2625,23 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
        WHERE created_at < ? OR retain_rank > ? OR cumulative_bytes > ?
        ORDER BY created_at ASC, receipt_id ASC
        LIMIT ?
-    `).all(e.cutoff,e.maxItems,e.maxBytes,e.limit).flatMap(r=>typeof r.receipt_id!="string"||typeof r.job_id!="string"?[]:[{kind:"receipt",id:r.receipt_id,jobId:r.job_id,status:typeof r.status=="string"?r.status:"unknown",reasonCode:typeof r.reason_code=="string"?r.reason_code:"continuity-ok",createdAt:typeof r.created_at=="string"?r.created_at:e.cutoff,approxBytes:typeof r.approx_bytes=="number"&&r.approx_bytes>=0?Math.floor(r.approx_bytes):0}])}selectOutputRetentionCandidates(e){return this.db.prepare(`
+    `).all(input.cutoff, input.maxItems, input.maxBytes, input.limit);
+        return rows.flatMap((row) => {
+            if (typeof row.receipt_id !== 'string' || typeof row.job_id !== 'string')
+                return [];
+            return [{
+                    kind: 'receipt',
+                    id: row.receipt_id,
+                    jobId: row.job_id,
+                    status: typeof row.status === 'string' ? row.status : 'unknown',
+                    reasonCode: typeof row.reason_code === 'string' ? row.reason_code : 'continuity-ok',
+                    createdAt: typeof row.created_at === 'string' ? row.created_at : input.cutoff,
+                    approxBytes: typeof row.approx_bytes === 'number' && row.approx_bytes >= 0 ? Math.floor(row.approx_bytes) : 0,
+                }];
+        });
+    }
+    selectOutputRetentionCandidates(input) {
+        const rows = this.db.prepare(`
       WITH sized AS (
         SELECT event_id, job_id, type, reason_code, created_at,
                length(event_id) + length(job_id) + length(operation_id) + length(type)
@@ -430,13 +2660,42 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
        WHERE created_at < ? OR retain_rank > ? OR cumulative_bytes > ?
        ORDER BY created_at ASC, event_id ASC
        LIMIT ?
-    `).all(O,e.cutoff,e.maxItems,e.maxBytes,e.limit).flatMap(r=>typeof r.event_id!="string"||typeof r.job_id!="string"?[]:[{kind:"output",id:r.event_id,jobId:r.job_id,status:typeof r.type=="string"?r.type:O,reasonCode:typeof r.reason_code=="string"?r.reason_code:"continuity-ok",createdAt:typeof r.created_at=="string"?r.created_at:e.cutoff,approxBytes:typeof r.approx_bytes=="number"&&r.approx_bytes>=0?Math.floor(r.approx_bytes):0}])}deleteRetentionCandidates(e,t,r){if(r.length===0)return;const s=r.map(()=>"?").join(", ");this.db.prepare(`DELETE FROM ${e} WHERE ${t} IN (${s})`).run(...r)}preserveReceiptDerivedIteration(e,t){const r=this.db.prepare(`
+    `).all(CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE, input.cutoff, input.maxItems, input.maxBytes, input.limit);
+        return rows.flatMap((row) => {
+            if (typeof row.event_id !== 'string' || typeof row.job_id !== 'string')
+                return [];
+            return [{
+                    kind: 'output',
+                    id: row.event_id,
+                    jobId: row.job_id,
+                    status: typeof row.type === 'string' ? row.type : CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE,
+                    reasonCode: typeof row.reason_code === 'string' ? row.reason_code : 'continuity-ok',
+                    createdAt: typeof row.created_at === 'string' ? row.created_at : input.cutoff,
+                    approxBytes: typeof row.approx_bytes === 'number' && row.approx_bytes >= 0 ? Math.floor(row.approx_bytes) : 0,
+                }];
+        });
+    }
+    deleteRetentionCandidates(table, idColumn, ids) {
+        if (ids.length === 0)
+            return;
+        const placeholders = ids.map(() => '?').join(', ');
+        this.db.prepare(`DELETE FROM ${table} WHERE ${idColumn} IN (${placeholders})`).run(...ids);
+    }
+    preserveReceiptDerivedIteration(jobId, at) {
+        const row = this.db.prepare(`
       SELECT COUNT(*) AS iteration
         FROM job_receipts
        WHERE job_id = ?
          AND (operation_id LIKE 'tick-%' OR operation_id LIKE 'loop-tick-%')
          AND status IN ('accepted', 'applied')
-    `).get(e),s=typeof r?.iteration=="number"?r.iteration:0;s>0&&this.recordJobStageProgress({jobId:e,iteration:s,at:t,appendHistory:!1})}retainedReceiptOutputCounts(e){const t=this.db.prepare(`
+    `).get(jobId);
+        const iteration = typeof row?.iteration === 'number' ? row.iteration : 0;
+        if (iteration > 0) {
+            this.recordJobStageProgress({ jobId, iteration, at, appendHistory: false });
+        }
+    }
+    retainedReceiptOutputCounts(jobId) {
+        const receipt = this.db.prepare(`
       SELECT COUNT(*) AS count,
              COALESCE(SUM(length(receipt_id) + length(job_id) + length(status) + length(created_at)
                + COALESCE(length(operation_id), 0) + COALESCE(length(idempotency_key), 0)
@@ -444,14 +2703,23 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                + COALESCE(length(ignored_operation_ids_json), 0) + COALESCE(length(metadata_json), 0)), 0) AS bytes
         FROM job_receipts
        WHERE job_id = ?
-    `).get(e),r=this.db.prepare(`
+    `).get(jobId);
+        const output = this.db.prepare(`
       SELECT COUNT(*) AS count,
              COALESCE(SUM(length(event_id) + length(job_id) + length(operation_id) + length(type)
                + length(summary) + length(created_at) + COALESCE(length(idempotency_key), 0)
                + COALESCE(length(reason_code), 0) + COALESCE(length(metadata_json), 0)), 0) AS bytes
         FROM job_events
        WHERE job_id = ? AND type = ?
-    `).get(e,O);return{receipts:typeof t?.count=="number"?t.count:0,outputs:typeof r?.count=="number"?r.count:0,bytes:(typeof t?.bytes=="number"?t.bytes:0)+(typeof r?.bytes=="number"?r.bytes:0)}}pruneReceiptCompactionSummaries(e,t){this.db.prepare(`
+    `).get(jobId, CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE);
+        return {
+            receipts: typeof receipt?.count === 'number' ? receipt.count : 0,
+            outputs: typeof output?.count === 'number' ? output.count : 0,
+            bytes: (typeof receipt?.bytes === 'number' ? receipt.bytes : 0) + (typeof output?.bytes === 'number' ? output.bytes : 0),
+        };
+    }
+    pruneReceiptCompactionSummaries(jobId, limit) {
+        this.db.prepare(`
       DELETE FROM job_events
        WHERE event_id IN (
          SELECT event_id
@@ -460,20 +2728,69 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           ORDER BY created_at DESC, event_id DESC
           LIMIT -1 OFFSET ?
        )
-    `).run(e,W,t)}runInTransaction(e){this.assertCanMutate();const t=this.db.transaction(e);try{return typeof t.immediate=="function"?t.immediate():t()}catch(r){throw m(r,"sqlite-mutation-failed")}}collectSnapshotRows(e){const t=(p,...x)=>{const A=this.db.prepare(p).get(...x);return E(A)&&typeof A.count=="number"?A.count:0},r=this.db.prepare(`
+    `).run(jobId, CONTINUITY_RECEIPT_COMPACTION_EVENT_TYPE, limit);
+    }
+    runInTransaction(fn) {
+        this.assertCanMutate();
+        const tx = this.db.transaction(fn);
+        try {
+            if (typeof tx.immediate === 'function')
+                return tx.immediate();
+            return tx();
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    collectSnapshotRows(options) {
+        const countRows = (sql, ...params) => {
+            const row = this.db.prepare(sql).get(...params);
+            return isRecord(row) && typeof row.count === 'number' ? row.count : 0;
+        };
+        const outboxRows = this.db.prepare(`
       SELECT status, COUNT(*) AS count FROM outbox GROUP BY status
-    `).all(),s={};for(const p of r)typeof p.status=="string"&&typeof p.count=="number"&&(s[p.status]=p.count);const n=this.db.prepare(`
+    `).all();
+        const outboxCounts = {};
+        for (const row of outboxRows) {
+            if (typeof row.status === 'string' && typeof row.count === 'number')
+                outboxCounts[row.status] = row.count;
+        }
+        const queuePolicyRow = this.db.prepare(`
       SELECT value_json
         FROM runner_config
        WHERE key = 'headless_queue_policy'
        LIMIT 1
-    `).get();let d=De;if(E(n)&&typeof n.value_json=="string")try{const p=JSON.parse(n.value_json);E(p)&&typeof p.maxItems=="number"&&(d=B({maxItems:p.maxItems}))}catch{}const o=t("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'queued' AND dead_lettered_at IS NULL"),l=t("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'backoff' AND dead_lettered_at IS NULL"),I=t("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'running' AND dead_lettered_at IS NULL"),y=t("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE dead_lettered_at IS NOT NULL"),f=o+l+I,_=this.db.prepare(`
+    `).get();
+        let queuePolicy = DEFAULT_CONTINUITY_QUEUE_POLICY;
+        if (isRecord(queuePolicyRow) && typeof queuePolicyRow.value_json === 'string') {
+            try {
+                const parsed = JSON.parse(queuePolicyRow.value_json);
+                if (isRecord(parsed) && typeof parsed.maxItems === 'number') {
+                    queuePolicy = normalizeContinuityQueuePolicy({ maxItems: parsed.maxItems });
+                }
+            }
+            catch {
+                // SQLite json_valid guards this row; retain bounded defaults on unexpected parse failure.
+            }
+        }
+        const queueQueued = countRows("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'queued' AND dead_lettered_at IS NULL");
+        const queueRetrying = countRows("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'backoff' AND dead_lettered_at IS NULL");
+        const queueRunning = countRows("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'running' AND dead_lettered_at IS NULL");
+        const queueDeadLetter = countRows('SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE dead_lettered_at IS NOT NULL');
+        const queueDepth = queueQueued + queueRetrying + queueRunning;
+        const nextRetryRow = this.db.prepare(`
       SELECT MIN(next_retry_at) AS next_retry_at
         FROM headless_execution_attempts
        WHERE status = 'backoff'
          AND dead_lettered_at IS NULL
          AND next_retry_at IS NOT NULL
-    `).get(),u=E(_)&&typeof _.next_retry_at=="string"?_.next_retry_at:void 0;return{schemaVersion:this.getSchemaVersion(),jobs:this.db.prepare(`
+    `).get();
+        const nextRetryAt = isRecord(nextRetryRow) && typeof nextRetryRow.next_retry_at === 'string'
+            ? nextRetryRow.next_retry_at
+            : undefined;
+        return {
+            schemaVersion: this.getSchemaVersion(),
+            jobs: this.db.prepare(`
         SELECT job_id, kind, status, summary, reason_code, created_at, updated_at,
                next_run_at, metadata_json,
                (SELECT COUNT(*)
@@ -523,30 +2840,35 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           FROM jobs
          ORDER BY updated_at DESC, job_id ASC
          LIMIT ?
-      `).all(e.jobLimit),staleLeases:this.db.prepare(`
+      `).all(options.jobLimit),
+            staleLeases: this.db.prepare(`
         SELECT lease_id, job_id, runner_id, expires_at
           FROM job_leases
          WHERE released_at IS NULL AND expires_at <= ?
          ORDER BY expires_at ASC, lease_id ASC
          LIMIT ?
-      `).all(e.nowIso,e.staleLeaseLimit),receipts:this.db.prepare(`
+      `).all(options.nowIso, options.staleLeaseLimit),
+            receipts: this.db.prepare(`
         SELECT receipt_id, job_id, operation_id, status, reason_code, created_at, metadata_json
           FROM job_receipts
          ORDER BY created_at DESC, receipt_id ASC
          LIMIT ?
-      `).all(e.receiptLimit),events:this.db.prepare(`
+      `).all(options.receiptLimit),
+            events: this.db.prepare(`
         SELECT event_id, job_id, operation_id, type, summary, reason_code, created_at, metadata_json
           FROM job_events
          ORDER BY created_at DESC, event_id ASC
          LIMIT ?
-      `).all(e.eventLimit),stateSnapshots:this.db.prepare(`
+      `).all(options.eventLimit),
+            stateSnapshots: this.db.prepare(`
         SELECT snapshot_id, job_id, kind, relative_path, sha256, summary,
                captured_at, operation_id, metadata_json
           FROM state_snapshots
          WHERE kind = 'context_compaction'
          ORDER BY captured_at DESC, snapshot_id ASC
          LIMIT ?
-      `).all(e.snapshotLimit),headlessExecutionAttempts:this.db.prepare(`
+      `).all(options.snapshotLimit),
+            headlessExecutionAttempts: this.db.prepare(`
         SELECT attempt_id, execution_id, job_id, status, reason_code, runtime_id,
                model_id, retry_count, max_attempts, lease_id, runner_id,
                 lease_expires_at, heartbeat_at, public_summary, enqueued_at,
@@ -557,19 +2879,90 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
           FROM headless_execution_attempts
          ORDER BY enqueued_at DESC, attempt_id ASC
          LIMIT ?
-      `).all(e.jobLimit),counts:{jobs:t("SELECT COUNT(*) AS count FROM jobs"),activeJobs:t("SELECT COUNT(*) AS count FROM jobs WHERE status IN ('planned', 'active', 'running', 'waiting_external', 'waiting_human', 'backoff', 'paused', 'blocked')"),activeLeases:t("SELECT COUNT(*) AS count FROM job_leases WHERE released_at IS NULL"),dueJobs:t("SELECT COUNT(*) AS count FROM jobs WHERE next_run_at IS NOT NULL AND next_run_at <= ? AND status NOT IN ('completed', 'aborted', 'cancelled')",e.nowIso),staleLeases:t("SELECT COUNT(*) AS count FROM job_leases WHERE released_at IS NULL AND expires_at <= ?",e.nowIso),receipts:t("SELECT COUNT(*) AS count FROM job_receipts"),events:t("SELECT COUNT(*) AS count FROM job_events"),processingOutputSummaries:t("SELECT COUNT(*) AS count FROM job_events WHERE type = ?",O),goalLedgerItems:t("SELECT COUNT(*) AS count FROM goal_ledger_items"),goalVerifiers:t("SELECT COUNT(*) AS count FROM goal_verifiers"),goalReviewGates:t("SELECT COUNT(*) AS count FROM goal_review_gates"),stateSnapshots:t("SELECT COUNT(*) AS count FROM state_snapshots"),headlessExecutionAttempts:t("SELECT COUNT(*) AS count FROM headless_execution_attempts"),headlessQueuedAttempts:t("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status IN ('queued', 'backoff')"),headlessRunningAttempts:t("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'running'"),headlessRetryingAttempts:l,headlessDeadLetterAttempts:y,staleHeadlessExecutionAttempts:t("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'running' AND lease_released_at IS NULL AND lease_expires_at <= ?",e.nowIso),outbox:t("SELECT COUNT(*) AS count FROM outbox")},outboxCounts:s,queue:{depth:f,queued:o,running:I,retrying:l,deadLetter:y,capacity:d.maxItems,available:Math.max(0,d.maxItems-f),backpressure:f>=d.maxItems,generatedAt:e.nowIso,...u?{nextRetryAt:u}:{},...f>=d.maxItems?{reasonCode:k.CAP_REACHED}:{},publicSafe:!0}}}listProcessingOutputSummaries(e={}){const t=ye(e.limit),r=pe(e),s=`
+      `).all(options.jobLimit),
+            counts: {
+                jobs: countRows('SELECT COUNT(*) AS count FROM jobs'),
+                activeJobs: countRows("SELECT COUNT(*) AS count FROM jobs WHERE status IN ('planned', 'active', 'running', 'waiting_external', 'waiting_human', 'backoff', 'paused', 'blocked')"),
+                activeLeases: countRows('SELECT COUNT(*) AS count FROM job_leases WHERE released_at IS NULL'),
+                dueJobs: countRows("SELECT COUNT(*) AS count FROM jobs WHERE next_run_at IS NOT NULL AND next_run_at <= ? AND status NOT IN ('completed', 'aborted', 'cancelled')", options.nowIso),
+                staleLeases: countRows('SELECT COUNT(*) AS count FROM job_leases WHERE released_at IS NULL AND expires_at <= ?', options.nowIso),
+                receipts: countRows('SELECT COUNT(*) AS count FROM job_receipts'),
+                events: countRows('SELECT COUNT(*) AS count FROM job_events'),
+                processingOutputSummaries: countRows('SELECT COUNT(*) AS count FROM job_events WHERE type = ?', CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE),
+                goalLedgerItems: countRows('SELECT COUNT(*) AS count FROM goal_ledger_items'),
+                goalVerifiers: countRows('SELECT COUNT(*) AS count FROM goal_verifiers'),
+                goalReviewGates: countRows('SELECT COUNT(*) AS count FROM goal_review_gates'),
+                stateSnapshots: countRows('SELECT COUNT(*) AS count FROM state_snapshots'),
+                headlessExecutionAttempts: countRows('SELECT COUNT(*) AS count FROM headless_execution_attempts'),
+                headlessQueuedAttempts: countRows("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status IN ('queued', 'backoff')"),
+                headlessRunningAttempts: countRows("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'running'"),
+                headlessRetryingAttempts: queueRetrying,
+                headlessDeadLetterAttempts: queueDeadLetter,
+                staleHeadlessExecutionAttempts: countRows("SELECT COUNT(*) AS count FROM headless_execution_attempts WHERE status = 'running' AND lease_released_at IS NULL AND lease_expires_at <= ?", options.nowIso),
+                outbox: countRows('SELECT COUNT(*) AS count FROM outbox'),
+            },
+            outboxCounts,
+            queue: {
+                depth: queueDepth,
+                queued: queueQueued,
+                running: queueRunning,
+                retrying: queueRetrying,
+                deadLetter: queueDeadLetter,
+                capacity: queuePolicy.maxItems,
+                available: Math.max(0, queuePolicy.maxItems - queueDepth),
+                backpressure: queueDepth >= queuePolicy.maxItems,
+                generatedAt: options.nowIso,
+                ...(nextRetryAt ? { nextRetryAt } : {}),
+                ...(queueDepth >= queuePolicy.maxItems ? { reasonCode: CONTINUITY_QUEUE_REASON_CODES.CAP_REACHED } : {}),
+                publicSafe: true,
+            },
+        };
+    }
+    listProcessingOutputSummaries(options = {}) {
+        const limit = normalizeProcessingSummaryLimit(options.limit);
+        const targetPredicate = processingSummaryTargetPredicate(options);
+        const selectSql = `
       SELECT event_id, job_id, operation_id, summary, reason_code, created_at, metadata_json
         FROM job_events
-       WHERE type = ?${r.sql}
+       WHERE type = ?${targetPredicate.sql}
        ORDER BY created_at DESC, event_id DESC
        LIMIT ?
-    `;return this.db.prepare(`SELECT * FROM (${s}) ORDER BY created_at ASC, event_id ASC`).all(O,...r.params,t).map(be)}pollProcessingOutputSummaries(e={}){const t=ye(e.limit),r=lt(e.cursor),s=pe(e),n=r?" AND (created_at > ? OR (created_at = ? AND event_id > ?))":"",d=`
+    `;
+        const rows = this.db.prepare(`SELECT * FROM (${selectSql}) ORDER BY created_at ASC, event_id ASC`).all(CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE, ...targetPredicate.params, limit);
+        return rows.map(toProcessingOutputSummaryRow);
+    }
+    pollProcessingOutputSummaries(options = {}) {
+        const limit = normalizeProcessingSummaryLimit(options.limit);
+        const decodedCursor = decodeProcessingSummaryCursor(options.cursor);
+        const targetPredicate = processingSummaryTargetPredicate(options);
+        const cursorPredicate = decodedCursor
+            ? ' AND (created_at > ? OR (created_at = ? AND event_id > ?))'
+            : '';
+        const sql = `
       SELECT event_id, job_id, operation_id, summary, reason_code, created_at, metadata_json
         FROM job_events
-       WHERE type = ?${s.sql}${n}
+       WHERE type = ?${targetPredicate.sql}${cursorPredicate}
        ORDER BY created_at ASC, event_id ASC
        LIMIT ?
-    `,o=[O];o.push(...s.params),r&&o.push(r.createdAt,r.createdAt,r.eventId),o.push(t+1);const l=this.db.prepare(d).all(...o),I=l.slice(0,t).map(be),y=I[I.length-1];return{summaries:I,...y?{nextCursor:y.cursor}:e.cursor?{nextCursor:e.cursor}:{},hasMore:l.length>t,publicSafe:!0}}listDueJobs(e){const t=Math.max(1,Math.min(50,Math.floor(e.limit)));return this.db.prepare(`
+    `;
+        const params = [CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE];
+        params.push(...targetPredicate.params);
+        if (decodedCursor)
+            params.push(decodedCursor.createdAt, decodedCursor.createdAt, decodedCursor.eventId);
+        params.push(limit + 1);
+        const rows = this.db.prepare(sql).all(...params);
+        const summaries = rows.slice(0, limit).map(toProcessingOutputSummaryRow);
+        const last = summaries[summaries.length - 1];
+        return {
+            summaries,
+            ...(last ? { nextCursor: last.cursor } : options.cursor ? { nextCursor: options.cursor } : {}),
+            hasMore: rows.length > limit,
+            publicSafe: true,
+        };
+    }
+    listDueJobs(options) {
+        const limit = Math.max(1, Math.min(50, Math.floor(options.limit)));
+        return this.db.prepare(`
       SELECT j.job_id, j.kind, j.status, j.summary, j.reason_code, j.created_at,
              j.updated_at, j.next_run_at, j.metadata_json,
              (SELECT COUNT(*)
@@ -587,19 +2980,63 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
          AND j.status NOT IN ('waiting_external', 'waiting_human', 'paused', 'blocked', 'completed', 'aborted', 'cancelled')
        ORDER BY j.next_run_at ASC, j.job_id ASC
        LIMIT ?
-    `).all(e.nowIso,t)}recoverStaleLeases(e){this.assertCanMutate();const t=Date.parse(e.nowIso);if(!Number.isFinite(t))throw new i("sqlite-public-safety-rejected","Continuity SQLite stale lease recovery received an invalid timestamp.");const r=Math.max(0,Math.floor(e.staleAfterMs)),s=Math.max(1,Math.min(100,Math.floor(e.limit))),n=new Date(t-r).toISOString();try{return this.runInTransaction(()=>{const o=this.db.prepare(`
+    `).all(options.nowIso, limit);
+    }
+    recoverStaleLeases(options) {
+        this.assertCanMutate();
+        const nowMs = Date.parse(options.nowIso);
+        if (!Number.isFinite(nowMs)) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Continuity SQLite stale lease recovery received an invalid timestamp.');
+        }
+        const staleAfterMs = Math.max(0, Math.floor(options.staleAfterMs));
+        const limit = Math.max(1, Math.min(100, Math.floor(options.limit)));
+        const safeExpiredAtOrBefore = new Date(nowMs - staleAfterMs).toISOString();
+        try {
+            return this.runInTransaction(() => {
+                const rows = this.db.prepare(`
           SELECT lease_id
             FROM job_leases
            WHERE released_at IS NULL
              AND expires_at <= ?
            ORDER BY expires_at ASC, lease_id ASC
            LIMIT ?
-        `).all(n,s).map(y=>y.lease_id).filter(y=>typeof y=="string"&&y.length>0);if(o.length===0)return{recoveredLeaseIds:[],safeExpiredAtOrBefore:n,changes:0};const l=o.map(()=>"?").join(", "),I=this.db.prepare(`
+        `).all(safeExpiredAtOrBefore, limit);
+                const recoveredLeaseIds = rows
+                    .map((row) => row.lease_id)
+                    .filter((leaseId) => typeof leaseId === 'string' && leaseId.length > 0);
+                if (recoveredLeaseIds.length === 0) {
+                    return { recoveredLeaseIds: [], safeExpiredAtOrBefore, changes: 0 };
+                }
+                const placeholders = recoveredLeaseIds.map(() => '?').join(', ');
+                const result = this.db.prepare(`
           UPDATE job_leases
              SET status = 'expired', released_at = ?
            WHERE released_at IS NULL
-             AND lease_id IN (${l})
-        `).run(e.nowIso,...o);return{recoveredLeaseIds:o,safeExpiredAtOrBefore:n,changes:I.changes}})}catch(d){throw m(d,"sqlite-mutation-failed")}}recoverStaleHeadlessExecutionAttempts(e){this.assertCanMutate();const t=Date.parse(e.nowIso);if(!Number.isFinite(t))throw new i("sqlite-public-safety-rejected","Continuity SQLite headless stale recovery received an invalid timestamp.");const r=Math.max(0,Math.floor(e.staleAfterMs)),s=Math.max(1,Math.min(100,Math.floor(e.limit))),n=new Date(t-r).toISOString();try{return this.runInTransaction(()=>{const d=this.db.prepare(`
+             AND lease_id IN (${placeholders})
+        `).run(options.nowIso, ...recoveredLeaseIds);
+                return {
+                    recoveredLeaseIds,
+                    safeExpiredAtOrBefore,
+                    changes: result.changes,
+                };
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    recoverStaleHeadlessExecutionAttempts(options) {
+        this.assertCanMutate();
+        const nowMs = Date.parse(options.nowIso);
+        if (!Number.isFinite(nowMs)) {
+            throw new ContinuitySqliteStoreError('sqlite-public-safety-rejected', 'Continuity SQLite headless stale recovery received an invalid timestamp.');
+        }
+        const staleAfterMs = Math.max(0, Math.floor(options.staleAfterMs));
+        const limit = Math.max(1, Math.min(100, Math.floor(options.limit)));
+        const safeExpiredAtOrBefore = new Date(nowMs - staleAfterMs).toISOString();
+        try {
+            return this.runInTransaction(() => {
+                const rows = this.db.prepare(`
           SELECT attempt_id, retry_count, max_attempts, attempt_count
             FROM headless_execution_attempts
            WHERE status = 'running'
@@ -607,7 +3044,30 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
              AND lease_expires_at <= ?
            ORDER BY lease_expires_at ASC, attempt_id ASC
            LIMIT ?
-        `).all(n,s),o=[],l=[],I=B(e.policy);for(const _ of d){if(typeof _.attempt_id!="string"||_.attempt_id.length===0)continue;const u=typeof _.retry_count=="number"?_.retry_count:0,p=typeof _.max_attempts=="number"?_.max_attempts:1,x=typeof _.attempt_count=="number"?_.attempt_count:0;Math.max(x,u+1)>=p?l.push(_.attempt_id):o.push({attemptId:_.attempt_id,nextRetryAt:Ue(e.nowIso,u+1,I)})}let y=0;for(const _ of o)y+=this.db.prepare(`
+        `).all(safeExpiredAtOrBefore, limit);
+                const retryableAttempts = [];
+                const deadLetteredAttemptIds = [];
+                const policy = normalizeContinuityQueuePolicy(options.policy);
+                for (const row of rows) {
+                    if (typeof row.attempt_id !== 'string' || row.attempt_id.length === 0)
+                        continue;
+                    const retryCount = typeof row.retry_count === 'number' ? row.retry_count : 0;
+                    const maxAttempts = typeof row.max_attempts === 'number' ? row.max_attempts : 1;
+                    const attemptCount = typeof row.attempt_count === 'number' ? row.attempt_count : 0;
+                    const consumedAttempts = Math.max(attemptCount, retryCount + 1);
+                    if (consumedAttempts >= maxAttempts) {
+                        deadLetteredAttemptIds.push(row.attempt_id);
+                    }
+                    else {
+                        retryableAttempts.push({
+                            attemptId: row.attempt_id,
+                            nextRetryAt: computeContinuityQueueRetryAt(options.nowIso, retryCount + 1, policy),
+                        });
+                    }
+                }
+                let changes = 0;
+                for (const retryable of retryableAttempts) {
+                    changes += this.db.prepare(`
             UPDATE headless_execution_attempts
                SET status = 'backoff',
                    retry_count = retry_count + 1,
@@ -618,7 +3078,11 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
              WHERE attempt_id = ?
                 AND status = 'running'
                 AND lease_released_at IS NULL
-          `).run(k.LEASE_TIMEOUT_RETRY,e.nowIso,_.nextRetryAt,_.nextRetryAt,_.attemptId).changes;if(l.length>0){const _=l.map(()=>"?").join(", ");y+=this.db.prepare(`
+          `).run(CONTINUITY_QUEUE_REASON_CODES.LEASE_TIMEOUT_RETRY, options.nowIso, retryable.nextRetryAt, retryable.nextRetryAt, retryable.attemptId).changes;
+                }
+                if (deadLetteredAttemptIds.length > 0) {
+                    const placeholders = deadLetteredAttemptIds.map(() => '?').join(', ');
+                    changes += this.db.prepare(`
             UPDATE headless_execution_attempts
                SET status = 'failed',
                    retry_count = retry_count + 1,
@@ -628,18 +3092,85 @@ import{Buffer as J}from"node:buffer";import{createHash as M}from"node:crypto";im
                     dead_lettered_at = ?,
                     dead_letter_reason_code = ?,
                     next_retry_at = NULL
-              WHERE attempt_id IN (${_})
+              WHERE attempt_id IN (${placeholders})
                 AND status = 'running'
                 AND lease_released_at IS NULL
-          `).run(k.ATTEMPTS_EXHAUSTED,e.nowIso,e.nowIso,e.nowIso,k.ATTEMPTS_EXHAUSTED,...l).changes}const f=o.map(_=>_.attemptId);return{recoveredAttemptIds:[...f,...l],failedAttemptIds:l,retryingAttemptIds:f,deadLetteredAttemptIds:l,safeExpiredAtOrBefore:n,changes:y,publicSafe:!0}})}catch(d){throw m(d,"sqlite-mutation-failed")}}ensureGoalCampaign(e,t,r,s){this.db.prepare(`
+          `).run(CONTINUITY_QUEUE_REASON_CODES.ATTEMPTS_EXHAUSTED, options.nowIso, options.nowIso, options.nowIso, CONTINUITY_QUEUE_REASON_CODES.ATTEMPTS_EXHAUSTED, ...deadLetteredAttemptIds).changes;
+                }
+                const retryingAttemptIds = retryableAttempts.map((attempt) => attempt.attemptId);
+                return {
+                    recoveredAttemptIds: [...retryingAttemptIds, ...deadLetteredAttemptIds],
+                    failedAttemptIds: deadLetteredAttemptIds,
+                    retryingAttemptIds,
+                    deadLetteredAttemptIds,
+                    safeExpiredAtOrBefore,
+                    changes,
+                    publicSafe: true,
+                };
+            });
+        }
+        catch (error) {
+            throw mapSqliteError(error, 'sqlite-mutation-failed');
+        }
+    }
+    ensureGoalCampaign(campaignId, jobId, createdAt, updatedAt) {
+        this.db.prepare(`
       INSERT OR IGNORE INTO goal_campaigns (
         campaign_id, job_id, status, public_summary, created_at, updated_at
       ) VALUES (?, ?, 'active', 'Public goal campaign summary unavailable', ?, ?)
-    `).run(e,t,r,s)}configureConnection(){const e=String(w(this.db.pragma("journal_mode = WAL",{simple:!0}))??"").toLowerCase();if(e!=="wal")throw new i("sqlite-migration-failed",`Continuity SQLite journal_mode did not switch to WAL (observed ${e||"unknown"}).`);if(this.db.pragma("foreign_keys = ON"),this.db.pragma(`busy_timeout = ${this.busyTimeoutMs}`),Number(w(this.db.pragma("foreign_keys",{simple:!0}))??0)!==1)throw new i("sqlite-migration-failed","Continuity SQLite foreign_keys pragma is not enabled.")}ensureMigrationTable(){this.db.exec(`
+    `).run(campaignId, jobId, createdAt, updatedAt);
+    }
+    configureConnection() {
+        const journalMode = String(asSinglePragmaValue(this.db.pragma('journal_mode = WAL', { simple: true })) ?? '').toLowerCase();
+        if (journalMode !== 'wal') {
+            throw new ContinuitySqliteStoreError('sqlite-migration-failed', `Continuity SQLite journal_mode did not switch to WAL (observed ${journalMode || 'unknown'}).`);
+        }
+        this.db.pragma('foreign_keys = ON');
+        this.db.pragma(`busy_timeout = ${this.busyTimeoutMs}`);
+        const foreignKeys = Number(asSinglePragmaValue(this.db.pragma('foreign_keys', { simple: true })) ?? 0);
+        if (foreignKeys !== 1) {
+            throw new ContinuitySqliteStoreError('sqlite-migration-failed', 'Continuity SQLite foreign_keys pragma is not enabled.');
+        }
+    }
+    ensureMigrationTable() {
+        this.db.exec(`
       CREATE TABLE IF NOT EXISTS continuity_migrations (
         version INTEGER PRIMARY KEY,
         name TEXT NOT NULL,
         checksum TEXT NOT NULL,
         applied_at TEXT NOT NULL
       );
-    `)}applyMigrations(){this.db.transaction(()=>{for(const t of Je){const r=st(t.sql),s=this.db.prepare("SELECT version, name, checksum FROM continuity_migrations WHERE version = ?").get(t.version);if(s){if(s.checksum!==r||s.name!==t.name)throw new i("sqlite-migration-conflict",`Continuity SQLite migration ${t.version} checksum conflict.`);continue}this.db.exec(t.sql),this.db.prepare("INSERT INTO continuity_migrations (version, name, checksum, applied_at) VALUES (?, ?, ?, ?)").run(t.version,t.name,r,this.now()),this.db.pragma(`user_version = ${t.version}`)}})()}assertCanMutate(){if(this.mutationBlocked)throw new i("sqlite-mutation-blocked","Continuity SQLite mutation is blocked after integrity failure.",{mutationBlocked:!0})}toWriteResult(e){const t=e.changes>0;return{inserted:t,replay:!t,changes:e.changes}}}export{O as CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE,Be as CONTINUITY_PROCESSING_OUTPUT_SUMMARY_MAX_CHARS,Ye as CONTINUITY_PUBLIC_STAGES,We as CONTINUITY_SQLITE_FILENAME,ne as CONTINUITY_SQLITE_RELATIVE_DIR,kt as CONTINUITY_SQLITE_SCHEMA_VERSION,ce as CONTINUITY_STAGE_HISTORY_MAX,ft as ContinuitySqliteStore,i as ContinuitySqliteStoreError,de as DEFAULT_CONTINUITY_PROCESSING_SUMMARY_LIMIT,Fe as DEFAULT_CONTINUITY_SQLITE_BUSY_TIMEOUT_MS,$e as MAX_CONTINUITY_PROCESSING_SUMMARY_LIMIT,ie as SQLITE_ADAPTER_INSTALL_GUIDANCE,Ee as continuitySqliteStorePath,le as isContinuityPublicStage,It as loadBetterSqlite3Adapter,Qe as normalizeContinuityStageIteration,Ut as openContinuitySqliteReadOnly,Dt as openContinuitySqliteStore,Ge as sanitizeContinuityStageHistory,ue as sanitizeContinuityStageTimestamp};
+    `);
+    }
+    applyMigrations() {
+        const apply = this.db.transaction(() => {
+            for (const migration of CONTINUITY_MIGRATIONS) {
+                const checksum = checksumMigration(migration.sql);
+                const existing = this.db.prepare('SELECT version, name, checksum FROM continuity_migrations WHERE version = ?').get(migration.version);
+                if (existing) {
+                    if (existing.checksum !== checksum || existing.name !== migration.name) {
+                        throw new ContinuitySqliteStoreError('sqlite-migration-conflict', `Continuity SQLite migration ${migration.version} checksum conflict.`);
+                    }
+                    continue;
+                }
+                this.db.exec(migration.sql);
+                this.db.prepare('INSERT INTO continuity_migrations (version, name, checksum, applied_at) VALUES (?, ?, ?, ?)').run(migration.version, migration.name, checksum, this.now());
+                this.db.pragma(`user_version = ${migration.version}`);
+            }
+        });
+        apply();
+    }
+    assertCanMutate() {
+        if (this.mutationBlocked) {
+            throw new ContinuitySqliteStoreError('sqlite-mutation-blocked', 'Continuity SQLite mutation is blocked after integrity failure.', { mutationBlocked: true });
+        }
+    }
+    toWriteResult(result) {
+        const inserted = result.changes > 0;
+        return {
+            inserted,
+            replay: !inserted,
+            changes: result.changes,
+        };
+    }
+}