@ornexus/neocortex 4.60.73 → 4.60.74

package/packages/client/dist/continuity/continuity-client-state-store.js

@@ -1,1587 +1 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P180.05 -- Thin-client continuity state snapshots and operation-log apply.
- */
-import { existsSync } from 'node:fs';
-import { createHash } from 'node:crypto';
-import { deriveProjectIdentity } from '../runner/project-identity.js';
-import { recordAutonomousGovernance, } from './autonomous-governance.js';
-import { CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE, ContinuitySqliteStoreError, continuitySqliteStorePath, isContinuityPublicStage, normalizeContinuityStageIteration, openContinuitySqliteStore, sanitizeContinuityStageHistory, } from './sqlite-store.js';
-export const CONTINUITY_CLIENT_SCHEMA_VERSION = 1;
-export const CONTINUITY_CLIENT_CONTRACT_VERSION = 'continuity-v1';
-export const CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT = 10;
-export const CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_POLL_INTERVAL_MS = 2_000;
-export const CONTINUITY_INVOKE_WATCH_DEFAULT_LIMIT = CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT;
-export const CONTINUITY_INVOKE_WATCH_DEFAULT_POLL_INTERVAL_MS = CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_POLL_INTERVAL_MS;
-export const CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_IDLE_POLLS = 3;
-export const CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_POLLS = 1_800;
-export const CONTINUITY_CLIENT_PORTAL_SYNC_ENVELOPE_VERSION = 1;
-export const CONTINUITY_CLIENT_REASON_CODES = Object.freeze({
-    OK: 'continuity-ok',
-    INVALID_SCHEMA_VERSION: 'invalid-schema-version',
-    INVALID_CONTRACT_VERSION: 'invalid-contract-version',
-    UNKNOWN_OPERATION_REQUIRED: 'unknown-operation-required',
-    UNKNOWN_OPERATION_IGNORED: 'unknown-operation-ignored',
-    DUPLICATE_OPERATION_ID: 'duplicate-operation-id',
-    IDEMPOTENCY_REPLAY: 'idempotency-replay',
-    UNSAFE_FIELD_REJECTED: 'unsafe-field-rejected',
-    SQLITE_ADAPTER_UNAVAILABLE: 'sqlite-adapter-unavailable',
-    SQLITE_INTEGRITY_FAILED: 'sqlite-integrity-failed',
-    SQLITE_MUTATION_FAILED: 'sqlite-mutation-failed',
-});
-const KNOWN_OPERATION_TYPES = new Set([
-    'create_job',
-    'update_job_status',
-    'append_event',
-    'append_receipt',
-    'upsert_goal_campaign',
-    'upsert_goal_ledger_item',
-    'upsert_verifier',
-    'upsert_review_gate',
-    'schedule_next_tick',
-    'acquire_lease',
-    'release_lease',
-    'compact_context',
-    'enqueue_outbox',
-    'append_outbox',
-    'enqueue_execution_attempt',
-    'claim_execution_attempt',
-    'heartbeat_execution_attempt',
-    'release_execution_attempt',
-    'complete_execution_attempt',
-    'append_execution_receipt',
-    'append_execution_summary',
-]);
-const ALLOWED_METADATA_KEYS = new Set([
-    'schemaVersion',
-    'contractVersion',
-    'eventType',
-    'executionId',
-    'jobId',
-    'operationId',
-    'idempotencyKey',
-    'goalId',
-    'loopId',
-    'campaignId',
-    'itemId',
-    'ledgerItemIds',
-    'verifierId',
-    'verifierIds',
-    'gateId',
-    'reviewGateIds',
-    'runnerId',
-    'leaseId',
-    'status',
-    'reasonCode',
-    'reasonCodes',
-    'runtimeId',
-    'modelId',
-    'runtimeSource',
-    'headlessRuntime',
-    'headlessModel',
-    'headlessRuntimeReasonCode',
-    'originRuntime',
-    'originModel',
-    'targetRef',
-    'attemptId',
-    'attemptStatus',
-    'directiveHash',
-    'timeoutMs',
-    'leaseExpiresAt',
-    'heartbeatAt',
-    'notBeforeAt',
-    'maxAttempts',
-    'counts',
-    'hashes',
-    'relativePaths',
-    'artifactRefs',
-    'evidenceRefs',
-    'validationRefs',
-    'registryRefs',
-    'storyIds',
-    'epicIds',
-    'debtIds',
-    'iteration',
-    'currentStage',
-    'stageHistory',
-    'durationMs',
-    'retryCount',
-    'nextTickAt',
-    'processingOutputSource',
-    'publicSummary',
-    'redactionEvidence',
-    'selectorKind',
-    'targetId',
-    'targetJobId',
-    'relatedJobIds',
-    'serverAccessToLocalhost',
-    'serverHeldStream',
-    'initialCursor',
-    'targetResolutionState',
-    'targetKind',
-    'relatedJobCount',
-    'snapshotStatus',
-    'snapshotGeneratedAt',
-    'renderedSummaryCount',
-    'cursorState',
-    'currentCursor',
-    'nextCursor',
-    'cursorAdvanced',
-    'eventId',
-    'latestEventId',
-    'watchStatus',
-    'stopReason',
-    'syncVersion',
-    'transportKind',
-    'envelopeId',
-    'workspaceId',
-    'workspaceLabel',
-    'projectId',
-    'projectLabel',
-    'snapshotId',
-    'syncCursor',
-    'previousSyncCursor',
-    'nextSyncCursor',
-    'commandId',
-    'receiptId',
-    'acknowledgedAt',
-    'observedAt',
-    'generatedAt',
-    'syncStatus',
-    'commandStatus',
-    'receiptStatus',
-    'actorType',
-    'actorId',
-    'tenantId',
-    'commandKind',
-    'auditStatus',
-    'redactionCount',
-]);
-const UNSAFE_METADATA_KEY_PATTERN = /(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i;
-const ABSOLUTE_URL_VALUE_PATTERN = /\bhttps?:\/\/\S+/i;
-const LOCAL_ABSOLUTE_PATH_VALUE_PATTERN = /(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)/i;
-const SECRET_VALUE_PATTERN = /(ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=)/i;
-const RAW_LOG_VALUE_PATTERN = /(raw[_-]?(?:logs?)\s*[:=]|transcript|stack trace|stderr:|stdout:)/i;
-const PROMPT_VALUE_PATTERN = /(prompt[_-]?body|system prompt|workflow body|step body)/i;
-const PROTECTED_VALUE_PATTERN = /(PROTECTED_|_PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH)|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY)|P192[_-]?SYNTHETIC[_-]?(?:PORTAL|RUNNER|SYNC))/i;
-const PUBLIC_TEXT_MAX_CHARS = 240;
-const COMPACTION_SUMMARY_MAX_CHARS = 2_400;
-const COMPACTION_RETAINED_REF_LIMIT = 40;
-const COMPACTION_ARTIFACT_REF_LIMIT = 20;
-const COMPACTION_EVIDENCE_REF_LIMIT = 40;
-const COMPACTION_DECISION_LOG_REF_LIMIT = 20;
-const COMPACTION_RELATIVE_PATH_LIMIT = 80;
-export class ContinuityClientStateStoreError extends Error {
-    reasonCodes;
-    redactions;
-    mutationBlocked;
-    constructor(message, reasonCodes, options = {}) {
-        super(message);
-        this.name = 'ContinuityClientStateStoreError';
-        this.reasonCodes = unique(reasonCodes);
-        this.redactions = options.redactions ?? [];
-        this.mutationBlocked = options.mutationBlocked ?? false;
-        this.cause = options.cause;
-    }
-}
-export function continuitySqliteExists(projectRoot) {
-    return existsSync(continuitySqliteStorePath(projectRoot));
-}
-export function createContinuityHardStopSnapshot(reasonCodes, nowIso = new Date().toISOString()) {
-    return {
-        schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-        contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-        generatedAt: nowIso,
-        hardStop: true,
-        reasonCodes: unique(reasonCodes),
-        publicSafe: true,
-    };
-}
-export async function openContinuityClientStateStore(options) {
-    const store = await openContinuitySqliteStore({
-        projectRoot: options.projectRoot,
-        adapter: options.adapter,
-        adapterLoader: options.adapterLoader,
-        now: options.now,
-        strictReadOnly: options.strictReadOnly,
-    });
-    return new ContinuityClientStateStore(store, options.now ?? (() => new Date().toISOString()), deriveProjectIdentity(options.projectRoot));
-}
-export class ContinuityClientStateStore {
-    store;
-    now;
-    projectIdentity;
-    constructor(store, now = () => new Date().toISOString(), projectIdentity) {
-        this.store = store;
-        this.now = now;
-        this.projectIdentity = projectIdentity;
-    }
-    close() {
-        this.store.close();
-    }
-    recordAutonomousGovernance(envelope, nowIso) {
-        try {
-            return recordAutonomousGovernance(this.store, envelope, nowIso);
-        }
-        catch (error) {
-            throw mapContinuityError(error, 'Failed to record autonomous governance envelope.');
-        }
-    }
-    collectSnapshot(options = {}) {
-        try {
-            const nowIso = options.nowIso ?? this.now();
-            const rows = this.store.collectSnapshotRows({
-                nowIso,
-                jobLimit: options.jobLimit ?? 20,
-                staleLeaseLimit: options.staleLeaseLimit ?? 10,
-                receiptLimit: options.receiptLimit ?? 10,
-                eventLimit: options.eventLimit ?? 10,
-                snapshotLimit: options.snapshotLimit ?? 5,
-            });
-            const dueRows = this.store.listDueJobs({
-                nowIso,
-                limit: options.dueJobLimit ?? 10,
-            });
-            const processingSummaryRows = this.store.listProcessingOutputSummaries({
-                limit: options.processingSummaryLimit ?? CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT,
-            });
-            const redactions = collectReceiptRedactions(rows.receipts).slice(0, 20);
-            const portalSync = toPortalSyncSnapshotSummary({
-                generatedAt: nowIso,
-                counts: rows.counts,
-                jobCount: rows.jobs.length,
-                dueJobCount: dueRows.length,
-                outboxPending: rows.outboxCounts.pending ?? 0,
-                redactions,
-            });
-            return {
-                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-                generatedAt: nowIso,
-                store: {
-                    schemaVersion: rows.schemaVersion,
-                    readable: true,
-                },
-                jobs: rows.jobs.map(toSnapshotJobSummary),
-                counts: rows.counts,
-                dueJobCount: rows.counts.dueJobs ?? 0,
-                dueJobs: dueRows.map(toSnapshotJobSummary),
-                staleLeases: rows.staleLeases.map((lease) => ({
-                    leaseId: boundPublicText(lease.lease_id, 100),
-                    jobId: boundPublicText(lease.job_id, 100),
-                    runnerId: boundPublicText(lease.runner_id, 100),
-                    expiresAt: boundPublicText(lease.expires_at, 80),
-                    publicSafe: true,
-                })),
-                outbox: {
-                    total: rows.counts.outbox ?? 0,
-                    pending: rows.outboxCounts.pending ?? 0,
-                    failed: rows.outboxCounts.failed ?? 0,
-                    deadLetter: rows.outboxCounts.dead_letter ?? 0,
-                    sent: rows.outboxCounts.sent ?? 0,
-                    acked: rows.outboxCounts.acked ?? 0,
-                },
-                queue: {
-                    depth: rows.queue.depth,
-                    queued: rows.queue.queued,
-                    running: rows.queue.running,
-                    retrying: rows.queue.retrying,
-                    deadLetter: rows.queue.deadLetter,
-                    capacity: rows.queue.capacity,
-                    available: rows.queue.available,
-                    backpressure: rows.queue.backpressure,
-                    generatedAt: boundPublicText(rows.queue.generatedAt, 80),
-                    ...(rows.queue.nextRetryAt ? { nextRetryAt: boundPublicText(rows.queue.nextRetryAt, 80) } : {}),
-                    ...(rows.queue.reasonCode ? { reasonCode: boundPublicText(rows.queue.reasonCode, 80) } : {}),
-                    publicSafe: true,
-                },
-                lastReceipts: rows.receipts.map((receipt) => ({
-                    receiptId: boundPublicText(receipt.receipt_id, 100),
-                    jobId: boundPublicText(receipt.job_id, 100),
-                    ...(receipt.operation_id ? { operationId: boundPublicText(receipt.operation_id, 100) } : {}),
-                    status: boundPublicText(receipt.status, 40),
-                    ...(receipt.reason_code ? { reasonCode: boundPublicText(receipt.reason_code, 80) } : {}),
-                    createdAt: boundPublicText(receipt.created_at, 80),
-                    publicSafe: true,
-                })),
-                lastEvents: rows.events.map((event) => {
-                    const metadata = normalizeSnapshotRecord(parsePublicMetadata(event.metadata_json));
-                    return {
-                        eventId: boundPublicText(event.event_id, 100),
-                        jobId: boundPublicText(event.job_id, 100),
-                        operationId: boundPublicText(event.operation_id, 100),
-                        type: boundPublicText(event.type, 80),
-                        publicSummary: boundPublicText(event.summary, PUBLIC_TEXT_MAX_CHARS),
-                        ...(event.reason_code ? { reasonCode: boundPublicText(event.reason_code, 80) } : {}),
-                        createdAt: boundPublicText(event.created_at, 80),
-                        ...(Object.keys(metadata).length > 0 ? { metadata } : {}),
-                        publicSafe: true,
-                    };
-                }),
-                processingSummaries: processingSummaryRows.map(toProcessingSummaryRef),
-                headlessExecutionAttempts: rows.headlessExecutionAttempts.map(toHeadlessExecutionAttemptRef),
-                compactContext: toCompactContextSnapshot(rows.stateSnapshots),
-                portalSync,
-                redactions,
-                publicSafe: true,
-            };
-        }
-        catch (error) {
-            throw mapContinuityError(error, 'Failed to collect continuity snapshot.');
-        }
-    }
-    collectProcessingOutputSummaryCursor(options = {}) {
-        try {
-            const result = this.store.pollProcessingOutputSummaries(options);
-            return {
-                summaries: result.summaries.map(toProcessingSummaryRef),
-                ...(result.nextCursor ? { nextCursor: result.nextCursor } : {}),
-                hasMore: result.hasMore,
-                publicSafe: true,
-            };
-        }
-        catch (error) {
-            throw mapContinuityError(error, 'Failed to collect processing summary cursor.');
-        }
-    }
-    applyStateUpdate(update) {
-        const logs = normalizeStateUpdate(update);
-        const appliedOperationIds = [];
-        const ignoredOperationIds = [];
-        const reasonCodes = [];
-        const redactions = [];
-        for (const log of logs) {
-            const result = this.applyOperationLog(log);
-            appliedOperationIds.push(...result.appliedOperationIds);
-            ignoredOperationIds.push(...result.ignoredOperationIds);
-            reasonCodes.push(...result.reasonCodes);
-            redactions.push(...result.redactions);
-        }
-        return {
-            ok: true,
-            appliedOperationIds: unique(appliedOperationIds),
-            ignoredOperationIds: unique(ignoredOperationIds),
-            reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [CONTINUITY_CLIENT_REASON_CODES.OK]),
-            redactions,
-            publicSafe: true,
-        };
-    }
-    applyOperationLog(log) {
-        const planned = planOperationLog(log);
-        const appliedOperationIds = [];
-        const ignoredOperationIds = [...planned.ignoredOperationIds];
-        const reasonCodes = [...planned.reasonCodes];
-        const redactions = [...planned.redactions];
-        try {
-            this.store.runInTransaction(() => {
-                for (const operation of planned.operations) {
-                    if (this.store.hasOperationRef(operation.operationId, operation.idempotencyKey)) {
-                        ignoredOperationIds.push(operation.operationId);
-                        reasonCodes.push(CONTINUITY_CLIENT_REASON_CODES.IDEMPOTENCY_REPLAY);
-                        continue;
-                    }
-                    this.applyKnownOperation(operation, planned.logMetadata);
-                    appliedOperationIds.push(operation.operationId);
-                    if (operation.type !== 'append_receipt') {
-                        this.recordAppliedAudit(operation);
-                    }
-                }
-                for (const skipped of planned.skippedOperations) {
-                    this.recordIgnoredAuditIfPossible(skipped, CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_IGNORED);
-                }
-            });
-        }
-        catch (error) {
-            throw mapContinuityError(error, 'Failed to apply continuity operation log atomically.');
-        }
-        return {
-            ok: true,
-            appliedOperationIds: unique(appliedOperationIds),
-            ignoredOperationIds: unique(ignoredOperationIds),
-            reasonCodes: unique(reasonCodes.length > 0 ? reasonCodes : [CONTINUITY_CLIENT_REASON_CODES.OK]),
-            redactions,
-            publicSafe: true,
-        };
-    }
-    applyKnownOperation(operation, logMetadata) {
-        switch (operation.type) {
-            case 'create_job':
-                this.applyCreateJob(operation, logMetadata);
-                return;
-            case 'update_job_status':
-                this.applyUpdateJobStatus(operation);
-                return;
-            case 'append_event':
-                this.applyAppendEvent(operation);
-                return;
-            case 'append_receipt':
-                this.applyAppendReceipt(operation);
-                return;
-            case 'upsert_goal_campaign':
-                this.applyUpsertGoalCampaign(operation);
-                return;
-            case 'schedule_next_tick':
-                this.store.scheduleNextTick({
-                    jobId: operation.jobId,
-                    scheduledAt: requiredString(operation, 'scheduledAt'),
-                    updatedAt: operation.createdAt,
-                    reasonCode: optionalString(operation, 'reasonCode'),
-                });
-                return;
-            case 'acquire_lease':
-                this.store.acquireLease({
-                    leaseId: requiredString(operation, 'leaseId'),
-                    jobId: operation.jobId,
-                    runnerId: requiredString(operation, 'runnerId'),
-                    acquiredAt: requiredString(operation, 'acquiredAt'),
-                    expiresAt: requiredString(operation, 'expiresAt'),
-                    operationId: operation.operationId,
-                    idempotencyKey: operation.idempotencyKey,
-                    metadata: sanitizeMetadataStrict(operation.metadata, 'operation.metadata'),
-                });
-                return;
-            case 'release_lease':
-                this.store.releaseLease({
-                    leaseId: requiredString(operation, 'leaseId'),
-                    releasedAt: requiredString(operation, 'releasedAt'),
-                    reasonCode: optionalString(operation, 'reasonCode'),
-                });
-                return;
-            case 'compact_context':
-                this.applyCompactContext(operation);
-                return;
-            case 'upsert_goal_ledger_item':
-                this.applyUpsertGoalLedgerItem(operation);
-                return;
-            case 'upsert_verifier':
-                this.applyUpsertVerifier(operation);
-                return;
-            case 'upsert_review_gate':
-                this.applyUpsertReviewGate(operation);
-                return;
-            case 'enqueue_outbox':
-            case 'append_outbox':
-                this.applyOutbox(operation);
-                return;
-            case 'enqueue_execution_attempt':
-                this.applyEnqueueExecutionAttempt(operation);
-                return;
-            case 'claim_execution_attempt':
-                this.store.claimHeadlessExecutionAttempt({
-                    attemptId: requiredString(operation, 'attemptId'),
-                    leaseId: requiredString(operation, 'leaseId'),
-                    runnerId: requiredString(operation, 'runnerId'),
-                    claimedAt: optionalString(operation, 'claimedAt') ?? operation.createdAt,
-                    leaseExpiresAt: requiredString(operation, 'leaseExpiresAt'),
-                    reasonCode: optionalString(operation, 'reasonCode'),
-                });
-                return;
-            case 'heartbeat_execution_attempt':
-                this.store.heartbeatHeadlessExecutionAttempt({
-                    attemptId: requiredString(operation, 'attemptId'),
-                    leaseId: requiredString(operation, 'leaseId'),
-                    runnerId: requiredString(operation, 'runnerId'),
-                    heartbeatAt: optionalString(operation, 'heartbeatAt') ?? operation.createdAt,
-                    leaseExpiresAt: optionalString(operation, 'leaseExpiresAt'),
-                });
-                return;
-            case 'release_execution_attempt':
-                this.store.releaseHeadlessExecutionAttempt({
-                    attemptId: requiredString(operation, 'attemptId'),
-                    leaseId: requiredString(operation, 'leaseId'),
-                    releasedAt: optionalString(operation, 'releasedAt') ?? operation.createdAt,
-                    status: optionalString(operation, 'status'),
-                    reasonCode: optionalString(operation, 'reasonCode'),
-                    notBeforeAt: optionalString(operation, 'notBeforeAt'),
-                    retryCount: optionalNumber(operation, 'retryCount'),
-                });
-                return;
-            case 'complete_execution_attempt':
-                this.applyCompleteExecutionAttempt(operation);
-                return;
-            case 'append_execution_receipt':
-                this.applyAppendExecutionReceipt(operation);
-                return;
-            case 'append_execution_summary':
-                this.applyAppendExecutionSummary(operation);
-                return;
-            default:
-                throw new ContinuityClientStateStoreError(`Unknown continuity operation ${operation.type}.`, [CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_REQUIRED], { mutationBlocked: true });
-        }
-    }
-    applyCompactContext(operation) {
-        const summaryHash = normalizeCompactionHash(requiredString(operation, 'summaryHash'), 'compact_context.summaryHash');
-        const retainedRefs = normalizeCompactionPaths(operation.retainedRefs, 'compact_context.retainedRefs', COMPACTION_RETAINED_REF_LIMIT);
-        const summary = normalizeCompactionSummary(optionalString(operation, 'publicSummary')
-            ?? `Context compacted with ${retainedRefs.length} retained public refs.`);
-        const artifactRefs = normalizeCompactionArtifactRefs(operation);
-        const evidenceRefs = normalizeCompactionEvidenceRefs(operation);
-        const decisionLogRefs = normalizeCompactionPaths(operation.decisionLogRefs, 'compact_context.decisionLogRefs', COMPACTION_DECISION_LOG_REF_LIMIT);
-        const checkpoint = normalizeCompactionCheckpoint(operation, retainedRefs, artifactRefs, evidenceRefs);
-        const relativePaths = unique([
-            ...retainedRefs,
-            ...decisionLogRefs,
-            ...artifactRefs.map((ref) => ref.relativePath),
-            ...evidenceRefs.map((ref) => ref.relativePath),
-        ]).slice(0, COMPACTION_RELATIVE_PATH_LIMIT);
-        const computedSummaryHash = sha256Hex(summary);
-        const reasonCode = optionalString(operation, 'reasonCode') ?? 'context-compacted';
-        const metadata = {
-            schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-            contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-            jobId: operation.jobId,
-            operationId: operation.operationId,
-            reasonCode,
-            publicSummary: summary,
-            counts: {
-                retainedRefs: retainedRefs.length,
-                artifactRefs: artifactRefs.length,
-                evidenceRefs: evidenceRefs.length,
-                decisionLogRefs: decisionLogRefs.length,
-                ...(optionalNumber(operation, 'inputTokens') !== undefined ? { inputContextUnits: optionalNumber(operation, 'inputTokens') } : {}),
-                ...(optionalNumber(operation, 'outputTokens') !== undefined ? { outputContextUnits: optionalNumber(operation, 'outputTokens') } : {}),
-                summaryChars: summary.length,
-            },
-            hashes: {
-                summary: summaryHash,
-                persistedSummary: computedSummaryHash,
-            },
-            relativePaths,
-            artifactRefs,
-            evidenceRefs,
-            validationRefs: decisionLogRefs,
-            redactionEvidence: operation.redactions ?? [],
-            checkpoint,
-        };
-        for (const [index, artifact] of artifactRefs.entries()) {
-            this.store.recordArtifact({
-                artifactId: `artifact-${safeId(operation.operationId)}-${index + 1}`,
-                jobId: operation.jobId,
-                kind: artifact.kind,
-                relativePath: artifact.relativePath,
-                sha256: artifact.sha256,
-                summary: artifact.publicSummary,
-                createdAt: operation.createdAt,
-                operationId: `${operation.operationId}:artifact:${index + 1}`,
-                idempotencyKey: operation.idempotencyKey ? `${operation.idempotencyKey}:artifact:${index + 1}` : undefined,
-                metadata: {
-                    schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-                    contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-                    jobId: operation.jobId,
-                    operationId: operation.operationId,
-                    reasonCode,
-                    hashes: artifact.sha256 ? { artifact: artifact.sha256 } : {},
-                    relativePaths: [artifact.relativePath],
-                    publicSummary: artifact.publicSummary,
-                },
-            });
-        }
-        this.store.recordStateSnapshot({
-            snapshotId: `snapshot-${safeId(operation.operationId)}`,
-            jobId: operation.jobId,
-            kind: 'context_compaction',
-            relativePath: artifactRefs.find((ref) => ref.kind === 'context_summary')?.relativePath,
-            sha256: summaryHash,
-            summary,
-            capturedAt: operation.createdAt,
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            metadata,
-        });
-        this.store.appendEvent({
-            eventId: `event-${safeId(operation.operationId)}-context-compacted`,
-            jobId: operation.jobId,
-            operationId: `${operation.operationId}:event`,
-            idempotencyKey: operation.idempotencyKey ? `${operation.idempotencyKey}:event` : undefined,
-            sequence: operation.sequence,
-            type: 'context_compacted',
-            summary: `Context compaction checkpoint ${checkpoint.checkpointId} persisted with ${relativePaths.length} public refs.`,
-            reasonCode,
-            createdAt: operation.createdAt,
-            metadata: {
-                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-                jobId: operation.jobId,
-                operationId: operation.operationId,
-                reasonCode,
-                counts: metadata.counts,
-                hashes: metadata.hashes,
-                relativePaths,
-                artifactRefs: artifactRefs.map((ref) => ref.relativePath),
-                evidenceRefs,
-                publicSummary: summary,
-            },
-        });
-    }
-    applyCreateJob(operation, logMetadata) {
-        const job = requiredRecord(operation, 'job');
-        this.store.recordJob({
-            jobId: requiredString(job, 'jobId'),
-            kind: requiredString(job, 'kind'),
-            status: requiredString(job, 'status'),
-            createdAt: requiredString(job, 'createdAt'),
-            updatedAt: requiredString(job, 'updatedAt'),
-            summary: optionalString(job, 'summary'),
-            reasonCode: optionalString(job, 'reasonCode'),
-            nextRunAt: optionalString(job, 'nextRunAt'),
-            goalId: optionalString(job, 'goalId'),
-            loopId: optionalString(job, 'loopId'),
-            campaignId: optionalString(job, 'campaignId'),
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            metadata: sanitizeMetadataStrict({
-                ...(optionalRecord(job, 'metadata') ?? optionalRecord(operation, 'metadata') ?? { ...logMetadata }),
-                ...projectIdentityMetadata(this.projectIdentity),
-            }, 'job.metadata'),
-        });
-    }
-    applyUpdateJobStatus(operation) {
-        this.store.updateJobStatus({
-            jobId: operation.jobId,
-            status: requiredString(operation, 'status'),
-            updatedAt: operation.createdAt,
-            reasonCode: optionalString(operation, 'reasonCode'),
-        });
-    }
-    applyAppendEvent(operation) {
-        const event = requiredRecord(operation, 'event');
-        const eventType = requiredString(event, 'type');
-        if (eventType === CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE) {
-            this.applyProcessingOutputSummaryEvent(operation, event);
-            return;
-        }
-        this.store.appendEvent({
-            eventId: requiredString(event, 'eventId'),
-            jobId: requiredString(event, 'jobId'),
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            sequence: operation.sequence,
-            type: eventType,
-            summary: requiredString(event, 'summary'),
-            reasonCode: optionalString(event, 'reasonCode'),
-            createdAt: requiredString(event, 'createdAt'),
-            metadata: sanitizeMetadataStrict(optionalRecord(event, 'metadata'), 'event.metadata'),
-        });
-    }
-    applyProcessingOutputSummaryEvent(operation, event) {
-        const summary = optionalRecord(event, 'processingOutputSummary') ?? event;
-        const executionId = optionalString(summary, 'executionId') ?? operation.operationId;
-        const jobId = optionalString(summary, 'jobId') ?? optionalString(event, 'jobId') ?? operation.jobId;
-        const publicSummary = optionalString(summary, 'publicSummary') ?? requiredString(event, 'summary');
-        const createdAt = optionalString(summary, 'createdAt') ?? optionalString(event, 'createdAt') ?? operation.createdAt;
-        const summaryMetadata = optionalRecord(summary, 'metadata');
-        const eventMetadata = optionalRecord(event, 'metadata');
-        this.store.recordProcessingOutputSummary({
-            eventId: optionalString(event, 'eventId'),
-            executionId,
-            jobId,
-            idempotencyKey: operation.idempotencyKey,
-            goalId: optionalString(summary, 'goalId') ?? optionalString(event, 'goalId'),
-            loopId: optionalString(summary, 'loopId') ?? optionalString(event, 'loopId'),
-            publicSummary,
-            reasonCode: optionalString(summary, 'reasonCode') ?? optionalString(event, 'reasonCode'),
-            createdAt,
-            source: optionalString(summary, 'source') ?? optionalString(event, 'source'),
-            metadata: {
-                ...(eventMetadata ?? {}),
-                ...(summaryMetadata ?? {}),
-            },
-        });
-    }
-    applyAppendReceipt(operation) {
-        const receipt = requiredRecord(operation, 'receipt');
-        const receiptOperationId = optionalString(receipt, 'operationId') ?? operation.operationId;
-        this.store.appendReceipt({
-            receiptId: requiredString(receipt, 'receiptId'),
-            jobId: requiredString(receipt, 'jobId'),
-            operationId: receiptOperationId,
-            idempotencyKey: operation.idempotencyKey,
-            status: requiredString(receipt, 'status'),
-            reasonCode: optionalString(receipt, 'reasonCode'),
-            appliedOperationIds: arrayOfStrings(receipt.appliedOperationIds),
-            ignoredOperationIds: arrayOfStrings(receipt.ignoredOperationIds),
-            createdAt: requiredString(receipt, 'createdAt'),
-            metadata: sanitizeMetadataStrict(optionalRecord(receipt, 'metadata'), 'receipt.metadata'),
-        });
-    }
-    applyUpsertGoalCampaign(operation) {
-        const campaign = requiredRecord(operation, 'campaign');
-        this.store.upsertGoalCampaign({
-            campaignId: requiredString(campaign, 'campaignId'),
-            jobId: requiredString(campaign, 'jobId'),
-            status: requiredString(campaign, 'status'),
-            title: optionalString(campaign, 'title'),
-            publicSummary: optionalString(campaign, 'publicSummary'),
-            reasonCode: optionalString(campaign, 'reasonCode'),
-            createdAt: requiredString(campaign, 'createdAt'),
-            updatedAt: requiredString(campaign, 'updatedAt'),
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            metadata: sanitizeMetadataStrict(optionalRecord(campaign, 'metadata'), 'campaign.metadata'),
-        });
-    }
-    applyUpsertGoalLedgerItem(operation) {
-        const item = requiredRecord(operation, 'item');
-        this.store.upsertGoalLedgerItem({
-            itemId: requiredString(item, 'itemId'),
-            campaignId: requiredString(item, 'campaignId'),
-            jobId: requiredString(item, 'jobId'),
-            itemType: requiredString(item, 'type'),
-            status: requiredString(item, 'status'),
-            summary: requiredString(item, 'publicSummary'),
-            reasonCode: optionalString(item, 'reasonCode'),
-            createdAt: operation.createdAt,
-            updatedAt: requiredString(item, 'updatedAt'),
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            metadata: sanitizeMetadataStrict(optionalRecord(item, 'metadata'), 'item.metadata'),
-        });
-    }
-    applyUpsertVerifier(operation) {
-        const verifier = requiredRecord(operation, 'verifier');
-        this.store.upsertGoalVerifier({
-            verifierId: requiredString(verifier, 'verifierId'),
-            campaignId: requiredString(verifier, 'campaignId'),
-            jobId: requiredString(verifier, 'jobId'),
-            kind: requiredString(verifier, 'kind'),
-            status: requiredString(verifier, 'status'),
-            summary: optionalString(verifier, 'publicSummary'),
-            reasonCode: optionalString(verifier, 'reasonCode'),
-            lastCheckedAt: optionalString(verifier, 'lastCheckedAt'),
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            metadata: sanitizeMetadataStrict(optionalRecord(verifier, 'metadata'), 'verifier.metadata'),
-        });
-    }
-    applyUpsertReviewGate(operation) {
-        const reviewGate = requiredRecord(operation, 'reviewGate');
-        this.store.upsertGoalReviewGate({
-            gateId: requiredString(reviewGate, 'gateId'),
-            campaignId: requiredString(reviewGate, 'campaignId'),
-            jobId: requiredString(reviewGate, 'jobId'),
-            status: requiredString(reviewGate, 'status'),
-            summary: optionalString(reviewGate, 'publicSummary'),
-            required: optionalBoolean(reviewGate, 'required') ?? true,
-            reasonCode: optionalString(reviewGate, 'reasonCode'),
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            metadata: sanitizeMetadataStrict(optionalRecord(reviewGate, 'metadata'), 'reviewGate.metadata'),
-        });
-    }
-    applyOutbox(operation) {
-        const outbox = optionalRecord(operation, 'outbox') ?? operation;
-        this.store.enqueueOutbox({
-            outboxId: optionalString(outbox, 'outboxId') ?? `outbox-${safeId(operation.operationId)}`,
-            jobId: optionalString(outbox, 'jobId') ?? operation.jobId,
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            type: optionalString(outbox, 'type') === operation.type ? 'continuity_event' : requiredString(outbox, 'type'),
-            status: optionalString(outbox, 'status'),
-            payload: sanitizeMetadataStrict(optionalRecord(outbox, 'payload') ?? optionalRecord(operation, 'metadata') ?? {}, 'outbox.payload'),
-            retryCount: optionalNumber(outbox, 'retryCount'),
-            nextAttemptAt: optionalString(outbox, 'nextAttemptAt'),
-            lastErrorCode: optionalString(outbox, 'lastErrorCode'),
-            createdAt: optionalString(outbox, 'createdAt') ?? operation.createdAt,
-            updatedAt: optionalString(outbox, 'updatedAt') ?? operation.createdAt,
-        });
-    }
-    applyEnqueueExecutionAttempt(operation) {
-        const attempt = optionalRecord(operation, 'attempt') ?? operation;
-        const metadata = sanitizeMetadataStrict(optionalRecord(attempt, 'metadata') ?? optionalRecord(operation, 'metadata'), 'executionAttempt.metadata');
-        this.store.enqueueHeadlessExecutionAttempt({
-            attemptId: requiredString(attempt, 'attemptId'),
-            executionId: requiredString(attempt, 'executionId'),
-            jobId: optionalString(attempt, 'jobId') ?? operation.jobId,
-            directiveHash: requiredString(attempt, 'directiveHash'),
-            directiveKind: requiredString(attempt, 'directiveKind'),
-            commandClass: requiredString(attempt, 'commandClass'),
-            targetKind: requiredString(attempt, 'targetKind'),
-            targetRef: requiredString(attempt, 'targetRef'),
-            storyId: optionalString(attempt, 'storyId'),
-            epicId: optionalString(attempt, 'epicId'),
-            runtimeId: optionalString(attempt, 'runtimeId'),
-            modelId: optionalString(attempt, 'modelId'),
-            runtimeSource: optionalString(attempt, 'runtimeSource'),
-            status: optionalString(attempt, 'status'),
-            reasonCode: optionalString(attempt, 'reasonCode'),
-            publicSummary: optionalString(attempt, 'publicSummary'),
-            enqueuedAt: optionalString(attempt, 'enqueuedAt') ?? operation.createdAt,
-            notBeforeAt: optionalString(attempt, 'notBeforeAt'),
-            retryCount: optionalNumber(attempt, 'retryCount'),
-            maxAttempts: optionalNumber(attempt, 'maxAttempts'),
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            counts: optionalRecord(attempt, 'counts'),
-            hashes: optionalRecord(attempt, 'hashes'),
-            redactionSummary: Array.isArray(attempt.redactionSummary) ? attempt.redactionSummary : undefined,
-            relativePaths: arrayOfStrings(attempt.relativePaths),
-            metadata,
-        });
-    }
-    applyCompleteExecutionAttempt(operation) {
-        const completion = optionalRecord(operation, 'completion') ?? operation;
-        this.store.completeHeadlessExecutionAttempt({
-            attemptId: requiredString(completion, 'attemptId'),
-            executionId: optionalString(completion, 'executionId'),
-            jobId: optionalString(completion, 'jobId') ?? operation.jobId,
-            leaseId: optionalString(completion, 'leaseId'),
-            runnerId: optionalString(completion, 'runnerId'),
-            status: requiredString(completion, 'status'),
-            completedAt: optionalString(completion, 'completedAt') ?? operation.createdAt,
-            durationMs: optionalNumber(completion, 'durationMs'),
-            reasonCode: optionalString(completion, 'reasonCode'),
-            publicSummary: optionalString(completion, 'publicSummary'),
-            notBeforeAt: optionalString(completion, 'notBeforeAt'),
-            retryCount: optionalNumber(completion, 'retryCount'),
-            counts: optionalRecord(completion, 'counts'),
-            hashes: optionalRecord(completion, 'hashes'),
-            redactionSummary: Array.isArray(completion.redactionSummary) ? completion.redactionSummary : undefined,
-            relativePaths: arrayOfStrings(completion.relativePaths),
-            metadata: sanitizeMetadataStrict(optionalRecord(completion, 'metadata'), 'executionCompletion.metadata'),
-        });
-    }
-    applyAppendExecutionReceipt(operation) {
-        const receipt = requiredRecord(operation, 'receipt');
-        this.store.recordHeadlessExecutionReceipt({
-            receiptId: requiredString(receipt, 'receiptId'),
-            attemptId: requiredString(receipt, 'attemptId'),
-            executionId: requiredString(receipt, 'executionId'),
-            jobId: optionalString(receipt, 'jobId') ?? operation.jobId,
-            status: requiredString(receipt, 'status'),
-            reasonCode: optionalString(receipt, 'reasonCode'),
-            createdAt: optionalString(receipt, 'createdAt') ?? operation.createdAt,
-            operationId: operation.operationId,
-            idempotencyKey: operation.idempotencyKey,
-            counts: optionalRecord(receipt, 'counts'),
-            hashes: optionalRecord(receipt, 'hashes'),
-            redactionSummary: Array.isArray(receipt.redactionSummary) ? receipt.redactionSummary : undefined,
-            relativePaths: arrayOfStrings(receipt.relativePaths),
-            metadata: sanitizeMetadataStrict(optionalRecord(receipt, 'metadata'), 'executionReceipt.metadata'),
-        });
-    }
-    applyAppendExecutionSummary(operation) {
-        const summary = optionalRecord(operation, 'summary') ?? operation;
-        this.store.recordHeadlessExecutionSummary({
-            eventId: optionalString(summary, 'eventId'),
-            attemptId: requiredString(summary, 'attemptId'),
-            executionId: requiredString(summary, 'executionId'),
-            jobId: optionalString(summary, 'jobId') ?? operation.jobId,
-            publicSummary: requiredString(summary, 'publicSummary'),
-            reasonCode: optionalString(summary, 'reasonCode'),
-            createdAt: optionalString(summary, 'createdAt') ?? operation.createdAt,
-            runtimeId: optionalString(summary, 'runtimeId'),
-            modelId: optionalString(summary, 'modelId'),
-            durationMs: optionalNumber(summary, 'durationMs'),
-            counts: optionalRecord(summary, 'counts'),
-            hashes: optionalRecord(summary, 'hashes'),
-            redactionSummary: Array.isArray(summary.redactionSummary) ? summary.redactionSummary : undefined,
-            relativePaths: arrayOfStrings(summary.relativePaths),
-            metadata: sanitizeMetadataStrict(optionalRecord(summary, 'metadata'), 'executionSummary.metadata'),
-        });
-    }
-    recordAppliedAudit(operation) {
-        this.store.recordOperationAudit({
-            receiptId: `receipt-${safeId(operation.operationId)}`,
-            jobId: operation.jobId,
-            operationId: operation.operationId,
-            idempotencyKey: `audit-${operation.idempotencyKey ?? operation.operationId}`,
-            status: 'applied',
-            reasonCode: CONTINUITY_CLIENT_REASON_CODES.OK,
-            appliedOperationIds: [operation.operationId],
-            createdAt: operation.createdAt,
-            metadata: {
-                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-                jobId: operation.jobId,
-                operationId: operation.operationId,
-                status: 'applied',
-                reasonCode: CONTINUITY_CLIENT_REASON_CODES.OK,
-            },
-        });
-    }
-    recordIgnoredAuditIfPossible(operation, reasonCode) {
-        if (!this.store.jobExists(operation.jobId))
-            return;
-        this.store.recordOperationAudit({
-            receiptId: `receipt-${safeId(operation.operationId)}-ignored`,
-            jobId: operation.jobId,
-            operationId: operation.operationId,
-            idempotencyKey: `audit-${operation.idempotencyKey ?? operation.operationId}-ignored`,
-            status: 'ignored',
-            reasonCode,
-            ignoredOperationIds: [operation.operationId],
-            createdAt: operation.createdAt,
-            metadata: {
-                schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-                contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-                jobId: operation.jobId,
-                operationId: operation.operationId,
-                status: 'ignored',
-                reasonCode,
-            },
-        });
-    }
-}
-function toSnapshotJobSummary(job) {
-    const counts = extractPublicJobCounts(job.metadata_json, job.iteration);
-    const rawMetadata = parsePublicMetadata(job.metadata_json);
-    const metadata = normalizeSnapshotRecord(rawMetadata);
-    // P195.04: read the additive stage projection from the raw metadata so a bounded
-    // `stageHistory` array survives the 20-key snapshot normalization; values are
-    // re-validated against the public stage allow-list and re-bounded here.
-    const currentStage = isContinuityPublicStage(rawMetadata.currentStage) ? rawMetadata.currentStage : undefined;
-    const stageHistory = sanitizeContinuityStageHistory(rawMetadata.stageHistory);
-    const iteration = normalizeContinuityStageIteration(rawMetadata.iteration)
-        ?? normalizeContinuityStageIteration(job.iteration);
-    addFiniteCount(counts, 'goalLedgerItems', 'goal_ledger_item_count' in job ? job.goal_ledger_item_count : undefined);
-    addFiniteCount(counts, 'blockedGoalLedgerItems', 'blocked_goal_ledger_item_count' in job ? job.blocked_goal_ledger_item_count : undefined);
-    addFiniteCount(counts, 'securityIssuesBlocked', 'security_issue_blocked_count' in job ? job.security_issue_blocked_count : undefined);
-    addFiniteCount(counts, 'goalVerifiers', 'goal_verifier_count' in job ? job.goal_verifier_count : undefined);
-    addFiniteCount(counts, 'failedVerifiers', 'failed_verifier_count' in job ? job.failed_verifier_count : undefined);
-    addFiniteCount(counts, 'unavailableVerifiers', 'unavailable_verifier_count' in job ? job.unavailable_verifier_count : undefined);
-    addFiniteCount(counts, 'goalReviewGates', 'goal_review_gate_count' in job ? job.goal_review_gate_count : undefined);
-    addFiniteCount(counts, 'failedRequiredReviewGates', 'failed_required_review_gate_count' in job ? job.failed_required_review_gate_count : undefined);
-    return {
-        jobId: boundPublicText(job.job_id, 80),
-        kind: boundPublicText(job.kind, 40),
-        status: boundPublicText(job.status, 40),
-        publicSummary: boundPublicText(job.summary ?? 'No public summary recorded.', PUBLIC_TEXT_MAX_CHARS),
-        createdAt: boundPublicText(job.created_at, 80),
-        updatedAt: boundPublicText(job.updated_at, 80),
-        ...(job.next_run_at ? { nextRunAt: boundPublicText(job.next_run_at, 80) } : {}),
-        ...(job.reason_code ? { reasonCode: boundPublicText(job.reason_code, 80) } : {}),
-        ...(Object.keys(counts).length > 0 ? { counts } : {}),
-        ...(currentStage ? { currentStage } : {}),
-        ...(stageHistory.length > 0 ? { stageHistory } : {}),
-        ...(iteration !== undefined ? { iteration } : {}),
-        ...extractHeadlessJobMetadata(metadata),
-        publicSafe: true,
-    };
-}
-function toPortalSyncSnapshotSummary(input) {
-    const counts = {
-        jobs: input.counts.jobs ?? input.jobCount,
-        dueJobs: input.counts.dueJobs ?? input.dueJobCount,
-        outboxPending: input.outboxPending,
-        redactions: input.redactions.length,
-    };
-    const hashInput = stableStringify({ generatedAt: input.generatedAt, counts });
-    return {
-        syncVersion: CONTINUITY_CLIENT_PORTAL_SYNC_ENVELOPE_VERSION,
-        transportKind: 'client_snapshot',
-        snapshotId: `snapshot-${safeId(sha256Hex(hashInput).replace(/^sha256:/, '').slice(0, 16))}`,
-        generatedAt: boundPublicText(input.generatedAt, 80),
-        publicSummary: `Client snapshot contains ${counts.jobs} public jobs and ${counts.outboxPending} pending outbox records.`,
-        counts,
-        hashes: { snapshot: sha256Hex(hashInput) },
-        redactionEvidence: input.redactions.slice(0, 20),
-        publicSafe: true,
-    };
-}
-function extractHeadlessJobMetadata(metadata) {
-    const runtimeSource = metadata.runtimeSource === 'explicit'
-        || metadata.runtimeSource === 'origin'
-        || metadata.runtimeSource === 'default'
-        || metadata.runtimeSource === 'fallback'
-        || metadata.runtimeSource === 'unspecified'
-        ? metadata.runtimeSource
-        : undefined;
-    return {
-        ...safeMetadataString(metadata, 'runtimeId', 80),
-        ...safeMetadataString(metadata, 'modelId', 120),
-        ...(runtimeSource ? { runtimeSource } : {}),
-        ...safeMetadataString(metadata, 'headlessRuntime', 80),
-        ...safeMetadataString(metadata, 'headlessModel', 120),
-        ...safeMetadataString(metadata, 'headlessRuntimeReasonCode', 100),
-        ...safeMetadataString(metadata, 'originRuntime', 80),
-        ...safeMetadataString(metadata, 'originModel', 120),
-        ...safeMetadataString(metadata, 'workspaceId', 120),
-        ...safeMetadataString(metadata, 'workspaceLabel', 80),
-        ...safeMetadataString(metadata, 'projectId', 120),
-        ...safeMetadataString(metadata, 'projectLabel', 80),
-    };
-}
-function projectIdentityMetadata(identity) {
-    return identity
-        ? {
-            workspaceId: identity.workspaceId,
-            workspaceLabel: identity.workspaceLabel,
-            projectId: identity.projectId,
-            projectLabel: identity.projectLabel,
-        }
-        : {};
-}
-function safeMetadataString(metadata, key, maxChars) {
-    const value = metadata[key];
-    return typeof value === 'string'
-        ? { [key]: boundPublicText(value, maxChars) }
-        : {};
-}
-function toProcessingSummaryRef(row) {
-    const metadata = normalizeSnapshotRecord(parsePublicMetadata(row.metadata_json));
-    const goalId = typeof metadata.goalId === 'string' ? boundPublicText(metadata.goalId, 100) : undefined;
-    const loopId = typeof metadata.loopId === 'string' ? boundPublicText(metadata.loopId, 100) : undefined;
-    return {
-        eventId: boundPublicText(row.event_id, 120),
-        jobId: boundPublicText(row.job_id, 100),
-        ...(goalId ? { goalId } : {}),
-        ...(loopId ? { loopId } : {}),
-        executionId: boundPublicText(row.execution_id, 120),
-        publicSummary: boundPublicText(row.public_summary, PUBLIC_TEXT_MAX_CHARS),
-        ...(row.reason_code ? { reasonCode: boundPublicText(row.reason_code, 80) } : {}),
-        createdAt: boundPublicText(row.created_at, 80),
-        cursor: boundPublicText(row.cursor, 260),
-        ...(Object.keys(metadata).length > 0 ? { metadata } : {}),
-        publicSafe: true,
-    };
-}
-function toHeadlessExecutionAttemptRef(row) {
-    return {
-        attemptId: boundPublicText(row.attempt_id, 120),
-        executionId: boundPublicText(row.execution_id, 120),
-        jobId: boundPublicText(row.job_id, 100),
-        status: boundPublicText(row.status, 40),
-        ...(row.reason_code ? { reasonCode: boundPublicText(row.reason_code, 80) } : {}),
-        ...(row.runtime_id ? { runtimeId: boundPublicText(row.runtime_id, 80) } : {}),
-        ...(row.model_id ? { modelId: boundPublicText(row.model_id, 120) } : {}),
-        retryCount: Math.max(0, Math.floor(row.retry_count)),
-        attemptCount: Math.max(0, Math.floor(row.attempt_count)),
-        maxAttempts: Math.max(1, Math.floor(row.max_attempts)),
-        queuePriority: Math.max(-100, Math.min(100, Math.floor(row.queue_priority))),
-        queueScope: row.queue_scope === 'workspace' ? 'workspace' : 'project',
-        ...(typeof row.duration_ms === 'number' && Number.isFinite(row.duration_ms) ? { durationMs: Math.max(0, Math.floor(row.duration_ms)) } : {}),
-        ...optionalPublicRecord('counts', parsePublicMetadata(row.counts_json)),
-        ...optionalPublicRecord('hashes', parsePublicMetadata(row.hashes_json)),
-        ...optionalPublicArray('redactionSummary', row.redaction_summary_json),
-        ...(row.lease_id ? { leaseId: boundPublicText(row.lease_id, 120) } : {}),
-        ...(row.runner_id ? { runnerId: boundPublicText(row.runner_id, 120) } : {}),
-        ...(row.lease_expires_at ? { leaseExpiresAt: boundPublicText(row.lease_expires_at, 80) } : {}),
-        ...(row.heartbeat_at ? { heartbeatAt: boundPublicText(row.heartbeat_at, 80) } : {}),
-        publicSummary: boundPublicText(row.public_summary ?? 'No public headless execution summary recorded.', PUBLIC_TEXT_MAX_CHARS),
-        enqueuedAt: boundPublicText(row.enqueued_at, 80),
-        ...(row.not_before_at ? { notBeforeAt: boundPublicText(row.not_before_at, 80) } : {}),
-        ...(row.next_retry_at ? { nextRetryAt: boundPublicText(row.next_retry_at, 80) } : {}),
-        ...(row.dead_lettered_at ? { deadLetteredAt: boundPublicText(row.dead_lettered_at, 80) } : {}),
-        ...(row.dead_letter_reason_code ? { deadLetterReasonCode: boundPublicText(row.dead_letter_reason_code, 80) } : {}),
-        publicSafe: true,
-    };
-}
-function addFiniteCount(counts, key, value) {
-    if (typeof value === 'number' && Number.isFinite(value) && value > 0) {
-        counts[key] = Math.floor(value);
-    }
-}
-function extractPublicJobCounts(metadataJson, iteration) {
-    const counts = {};
-    if (metadataJson) {
-        try {
-            const parsed = JSON.parse(metadataJson);
-            const metadataCounts = isRecord(parsed) && isRecord(parsed.counts) ? parsed.counts : undefined;
-            if (metadataCounts) {
-                for (const [key, value] of Object.entries(metadataCounts)) {
-                    if (typeof value === 'number' && Number.isFinite(value))
-                        counts[key] = Math.max(0, Math.floor(value));
-                }
-            }
-        }
-        catch {
-            // Corrupt metadata JSON is already guarded by SQLite json_valid; ignore any
-            // unexpected parse failure so snapshots remain bounded and public-safe.
-        }
-    }
-    if (typeof iteration === 'number' && Number.isFinite(iteration))
-        counts.iteration = Math.max(0, Math.floor(iteration));
-    return counts;
-}
-function toCompactContextSnapshot(rows) {
-    const summaries = rows.map(toCompactContextRef).filter((item) => Boolean(item));
-    return {
-        preferredSource: summaries.length > 0 ? 'compact_summary' : 'recent_events',
-        summaries,
-        publicSafe: true,
-    };
-}
-function toCompactContextRef(row) {
-    const metadata = parsePublicMetadata(row.metadata_json);
-    const hashes = isRecord(metadata.hashes) ? metadata.hashes : {};
-    const summaryHash = typeof hashes.summary === 'string' ? hashes.summary : row.sha256 ?? undefined;
-    const reasonCode = typeof metadata.reasonCode === 'string' ? boundPublicText(metadata.reasonCode, 80) : undefined;
-    return {
-        snapshotId: boundPublicText(row.snapshot_id, 120),
-        ...(row.job_id ? { jobId: boundPublicText(row.job_id, 100) } : {}),
-        ...(row.operation_id ? { operationId: boundPublicText(row.operation_id, 120) } : {}),
-        capturedAt: boundPublicText(row.captured_at, 80),
-        publicSummary: boundPublicText(row.summary ?? 'Context compacted with public-safe refs.', COMPACTION_SUMMARY_MAX_CHARS),
-        ...(summaryHash ? { summaryHash: boundPublicText(summaryHash, 120) } : {}),
-        ...(row.relative_path ? { relativePath: boundPublicText(row.relative_path, 240) } : {}),
-        retainedRefs: normalizeSnapshotRefArray(metadata.relativePaths),
-        artifactRefs: normalizeSnapshotUnknownArray(metadata.artifactRefs),
-        evidenceRefs: normalizeSnapshotUnknownArray(metadata.evidenceRefs),
-        ...(isRecord(metadata.checkpoint) ? { checkpoint: normalizeSnapshotRecord(metadata.checkpoint) } : {}),
-        ...(reasonCode ? { reasonCode } : {}),
-        publicSafe: true,
-    };
-}
-function parsePublicMetadata(metadataJson) {
-    if (!metadataJson)
-        return {};
-    try {
-        const parsed = JSON.parse(metadataJson);
-        return isRecord(parsed) ? parsed : {};
-    }
-    catch {
-        return {};
-    }
-}
-function optionalPublicRecord(key, value) {
-    const normalized = normalizeSnapshotRecord(value);
-    return Object.keys(normalized).length > 0 ? { [key]: normalized } : {};
-}
-function optionalPublicArray(key, json) {
-    if (!json)
-        return {};
-    try {
-        const parsed = JSON.parse(json);
-        const normalized = normalizeSnapshotUnknownArray(parsed);
-        return normalized.length > 0 ? { [key]: normalized } : {};
-    }
-    catch {
-        return {};
-    }
-}
-function normalizeSnapshotRefArray(value) {
-    return Array.isArray(value)
-        ? value.filter((item) => typeof item === 'string' && item.length > 0).map((item) => boundPublicText(item, 240)).slice(0, COMPACTION_RELATIVE_PATH_LIMIT)
-        : [];
-}
-function normalizeSnapshotUnknownArray(value) {
-    if (!Array.isArray(value))
-        return [];
-    return value.map(normalizeSnapshotValue).filter((item) => item !== undefined).slice(0, COMPACTION_RELATIVE_PATH_LIMIT);
-}
-function normalizeSnapshotRecord(value) {
-    const output = {};
-    for (const [key, child] of Object.entries(value).slice(0, 20)) {
-        if (UNSAFE_METADATA_KEY_PATTERN.test(key))
-            continue;
-        const normalized = normalizeSnapshotValue(child);
-        if (normalized !== undefined)
-            output[boundPublicText(key, 80)] = normalized;
-    }
-    return output;
-}
-function normalizeSnapshotValue(value) {
-    const reason = getUnsafeMetadataValueReason(value);
-    if (reason)
-        return undefined;
-    if (typeof value === 'string')
-        return boundPublicText(value, 240);
-    if (typeof value === 'number' && Number.isFinite(value))
-        return Math.floor(value);
-    if (typeof value === 'boolean' || value === null)
-        return value;
-    if (Array.isArray(value))
-        return value.map(normalizeSnapshotValue).filter((item) => item !== undefined).slice(0, 20);
-    if (isRecord(value))
-        return normalizeSnapshotRecord(value);
-    return undefined;
-}
-function normalizeStateUpdate(update) {
-    if (!isRecord(update))
-        return [];
-    if (Array.isArray(update.operationLogs))
-        return update.operationLogs.filter(isRecord);
-    if (isRecord(update.operationLog))
-        return [update.operationLog];
-    if (Array.isArray(update.operations))
-        return [update];
-    return [];
-}
-function planOperationLog(log) {
-    const reasonCodes = [];
-    const redactions = [];
-    const skippedOperations = [];
-    const ignoredOperationIds = [];
-    const accepted = [];
-    const seen = new Map();
-    if (log.schemaVersion !== CONTINUITY_CLIENT_SCHEMA_VERSION) {
-        throw new ContinuityClientStateStoreError('Invalid continuity operation log schema version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
-    }
-    if (log.contractVersion !== CONTINUITY_CLIENT_CONTRACT_VERSION) {
-        throw new ContinuityClientStateStoreError('Invalid continuity operation log contract version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_CONTRACT_VERSION], { mutationBlocked: true });
-    }
-    if (log.publicSafe !== true) {
-        throw new ContinuityClientStateStoreError('Continuity operation log is not marked public-safe.', [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { mutationBlocked: true });
-    }
-    const logMetadata = sanitizeMetadataStrict(optionalRecord(log, 'metadata'), 'log.metadata');
-    if (!Array.isArray(log.operations))
-        return { operations: [], skippedOperations, ignoredOperationIds, reasonCodes, redactions, logMetadata };
-    for (const rawOperation of [...log.operations].filter(isRecord).sort(compareOperationOrder)) {
-        const operation = normalizeOperation(rawOperation);
-        const canonical = stableStringify(operation);
-        const duplicatePayload = seen.get(operation.operationId);
-        if (duplicatePayload !== undefined) {
-            if (duplicatePayload === canonical) {
-                ignoredOperationIds.push(operation.operationId);
-                reasonCodes.push(CONTINUITY_CLIENT_REASON_CODES.IDEMPOTENCY_REPLAY);
-                continue;
-            }
-            redactions.push({
-                field: 'operationId',
-                reason: 'unknown_required_operation',
-                evidence: 'operation-denied',
-                publicSafe: true,
-            });
-            throw new ContinuityClientStateStoreError('Duplicate continuity operation ID with conflicting payload.', [CONTINUITY_CLIENT_REASON_CODES.DUPLICATE_OPERATION_ID], { redactions, mutationBlocked: true });
-        }
-        seen.set(operation.operationId, canonical);
-        sanitizeMetadataStrict(operation.metadata, 'operation.metadata');
-        if (!KNOWN_OPERATION_TYPES.has(operation.type)) {
-            const required = rawOperation.required === true;
-            if (rawOperation.forwardCompatible === true && !required) {
-                skippedOperations.push(operation);
-                ignoredOperationIds.push(operation.operationId);
-                reasonCodes.push(CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_IGNORED);
-                continue;
-            }
-            redactions.push({
-                field: operation.type,
-                reason: 'unknown_required_operation',
-                evidence: 'operation-denied',
-                publicSafe: true,
-            });
-            throw new ContinuityClientStateStoreError(`Unknown required continuity operation ${operation.type}.`, [CONTINUITY_CLIENT_REASON_CODES.UNKNOWN_OPERATION_REQUIRED], { redactions, mutationBlocked: true });
-        }
-        accepted.push(operation);
-    }
-    return { operations: accepted, skippedOperations, ignoredOperationIds, reasonCodes, redactions, logMetadata };
-}
-function normalizeOperation(raw) {
-    if (raw.schemaVersion !== CONTINUITY_CLIENT_SCHEMA_VERSION) {
-        throw new ContinuityClientStateStoreError('Invalid continuity operation schema version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
-    }
-    if (raw.contractVersion !== CONTINUITY_CLIENT_CONTRACT_VERSION) {
-        throw new ContinuityClientStateStoreError('Invalid continuity operation contract version.', [CONTINUITY_CLIENT_REASON_CODES.INVALID_CONTRACT_VERSION], { mutationBlocked: true });
-    }
-    if (raw.publicSafe !== true) {
-        throw new ContinuityClientStateStoreError('Continuity operation is not marked public-safe.', [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { mutationBlocked: true });
-    }
-    const type = requiredString(raw, 'type');
-    const operationId = requiredString(raw, 'operationId');
-    const jobId = requiredString(raw, 'jobId');
-    const sequence = requiredNumber(raw, 'sequence');
-    const createdAt = requiredString(raw, 'createdAt');
-    return {
-        ...raw,
-        type,
-        operationId,
-        jobId,
-        schemaVersion: CONTINUITY_CLIENT_SCHEMA_VERSION,
-        contractVersion: CONTINUITY_CLIENT_CONTRACT_VERSION,
-        sequence,
-        createdAt,
-        idempotencyKey: optionalString(raw, 'idempotencyKey'),
-        metadata: optionalRecord(raw, 'metadata'),
-        publicSafe: true,
-    };
-}
-function sanitizeMetadataStrict(input, path) {
-    if (!input)
-        return {};
-    const metadata = {};
-    const redactions = [];
-    for (const [key, value] of Object.entries(input)) {
-        const keyReason = getUnsafeMetadataKeyReason(key);
-        const valueReason = getUnsafeMetadataValueReason(value);
-        const reason = keyReason ?? valueReason;
-        if (reason) {
-            redactions.push({
-                field: `${path}.${key}`,
-                reason,
-                evidence: keyReason ? 'key-denied' : 'value-denied',
-                publicSafe: true,
-            });
-            continue;
-        }
-        metadata[key] = value;
-    }
-    if (redactions.length > 0) {
-        throw new ContinuityClientStateStoreError(`Continuity metadata rejected unsafe public fields at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { redactions, mutationBlocked: true });
-    }
-    return metadata;
-}
-function getUnsafeMetadataKeyReason(key) {
-    if (!ALLOWED_METADATA_KEYS.has(key) || UNSAFE_METADATA_KEY_PATTERN.test(key))
-        return 'unsafe_key';
-    return null;
-}
-function getUnsafeMetadataValueReason(value) {
-    if (typeof value === 'string') {
-        if (ABSOLUTE_URL_VALUE_PATTERN.test(value))
-            return 'private_url';
-        if (LOCAL_ABSOLUTE_PATH_VALUE_PATTERN.test(value))
-            return 'local_absolute_path';
-        if (SECRET_VALUE_PATTERN.test(value))
-            return 'secret';
-        if (PROMPT_VALUE_PATTERN.test(value))
-            return 'prompt_body';
-        if (RAW_LOG_VALUE_PATTERN.test(value))
-            return 'raw_log';
-        if (PROTECTED_VALUE_PATTERN.test(value))
-            return 'protected_field';
-        return null;
-    }
-    if (value === null || typeof value === 'number' || typeof value === 'boolean')
-        return null;
-    if (Array.isArray(value)) {
-        for (const item of value) {
-            const reason = getUnsafeMetadataValueReason(item);
-            if (reason)
-                return reason;
-        }
-        return null;
-    }
-    if (isRecord(value)) {
-        for (const [key, child] of Object.entries(value)) {
-            if (UNSAFE_METADATA_KEY_PATTERN.test(key))
-                return 'unsafe_key';
-            const reason = getUnsafeMetadataValueReason(child);
-            if (reason)
-                return reason;
-        }
-        return null;
-    }
-    return 'unsafe_key';
-}
-function collectReceiptRedactions(receipts) {
-    const redactions = [];
-    for (const receipt of receipts) {
-        if (!receipt.metadata_json)
-            continue;
-        try {
-            const metadata = JSON.parse(receipt.metadata_json);
-            const evidence = metadata.redactionEvidence;
-            if (!Array.isArray(evidence))
-                continue;
-            for (const item of evidence) {
-                if (!isRecord(item))
-                    continue;
-                if (typeof item.field !== 'string' || typeof item.reason !== 'string' || typeof item.evidence !== 'string')
-                    continue;
-                redactions.push({
-                    field: boundPublicText(item.field, 120),
-                    reason: item.reason,
-                    evidence: item.evidence,
-                    publicSafe: true,
-                });
-            }
-        }
-        catch {
-            // Ignore malformed metadata; SQLite json_valid already guards new rows.
-        }
-    }
-    return redactions;
-}
-function compareOperationOrder(left, right) {
-    const leftSequence = typeof left.sequence === 'number' ? left.sequence : 0;
-    const rightSequence = typeof right.sequence === 'number' ? right.sequence : 0;
-    if (leftSequence !== rightSequence)
-        return leftSequence - rightSequence;
-    const createdAt = String(left.createdAt ?? '').localeCompare(String(right.createdAt ?? ''));
-    if (createdAt !== 0)
-        return createdAt;
-    return String(left.operationId ?? '').localeCompare(String(right.operationId ?? ''));
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function requiredRecord(input, key) {
-    const value = input[key];
-    if (!isRecord(value)) {
-        throw new ContinuityClientStateStoreError(`Continuity operation missing object field ${key}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
-    }
-    return value;
-}
-function optionalRecord(input, key) {
-    const value = input[key];
-    return isRecord(value) ? value : undefined;
-}
-function requiredString(input, key) {
-    const value = input[key];
-    if (typeof value !== 'string' || value.length === 0) {
-        throw new ContinuityClientStateStoreError(`Continuity operation missing string field ${key}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
-    }
-    return value;
-}
-function optionalString(input, key) {
-    const value = input[key];
-    return typeof value === 'string' && value.length > 0 ? value : undefined;
-}
-function requiredNumber(input, key) {
-    const value = input[key];
-    if (typeof value !== 'number' || !Number.isFinite(value)) {
-        throw new ContinuityClientStateStoreError(`Continuity operation missing numeric field ${key}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
-    }
-    return value;
-}
-function optionalNumber(input, key) {
-    const value = input[key];
-    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
-}
-function optionalBoolean(input, key) {
-    const value = input[key];
-    return typeof value === 'boolean' ? value : undefined;
-}
-function arrayOfStrings(value) {
-    return Array.isArray(value) ? value.filter((item) => typeof item === 'string' && item.length > 0) : [];
-}
-function arrayOfRecords(value) {
-    return Array.isArray(value) ? value.filter(isRecord) : [];
-}
-function normalizeCompactionSummary(value) {
-    return normalizeSafePublicText(value, COMPACTION_SUMMARY_MAX_CHARS, 'compact_context.publicSummary');
-}
-function normalizeSafePublicText(value, maxChars, path) {
-    const trimmed = value.trim();
-    if (!trimmed) {
-        throw new ContinuityClientStateStoreError(`Continuity compaction missing public text at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.INVALID_SCHEMA_VERSION], { mutationBlocked: true });
-    }
-    const reason = getUnsafeMetadataValueReason(trimmed);
-    if (reason) {
-        throw new ContinuityClientStateStoreError(`Continuity compaction rejected unsafe public text at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { redactions: [{ field: path, reason, evidence: 'value-denied', publicSafe: true }], mutationBlocked: true });
-    }
-    return trimmed.length <= maxChars ? trimmed : `${trimmed.slice(0, maxChars)}…[TRUNCATED:${trimmed.length - maxChars}]`;
-}
-function normalizeCompactionHash(value, path) {
-    return normalizeSafePublicText(value, 120, path);
-}
-function normalizeCompactionPaths(value, path, limit) {
-    return unique(arrayOfStrings(value).map((item, index) => normalizeRepoRelativeRef(item, `${path}[${index}]`))).slice(0, limit);
-}
-function normalizeRepoRelativeRef(value, path) {
-    const normalized = normalizeSafePublicText(value, 240, path).replace(/\\/g, '/');
-    const segments = normalized.split('/').filter(Boolean);
-    const absoluteWindows = /^[A-Za-z]:\//.test(normalized);
-    if (normalized.startsWith('/') ||
-        normalized.startsWith('~') ||
-        normalized.includes('://') ||
-        absoluteWindows ||
-        segments.includes('..')) {
-        throw new ContinuityClientStateStoreError(`Continuity compaction rejected non-relative ref at ${path}.`, [CONTINUITY_CLIENT_REASON_CODES.UNSAFE_FIELD_REJECTED], { redactions: [{ field: path, reason: 'private_url', evidence: 'value-denied', publicSafe: true }], mutationBlocked: true });
-    }
-    return normalized;
-}
-function normalizeCompactionArtifactRefs(operation) {
-    const refs = [];
-    const summaryRef = optionalRecord(operation, 'summaryRef');
-    if (summaryRef)
-        refs.push(normalizeCompactionArtifactRef(summaryRef, 'compact_context.summaryRef', 'context_summary'));
-    for (const [index, ref] of arrayOfRecords(operation.artifactRefs).entries()) {
-        refs.push(normalizeCompactionArtifactRef(ref, `compact_context.artifactRefs[${index}]`));
-    }
-    const seen = new Set();
-    return refs.filter((ref) => {
-        const key = `${ref.kind}:${ref.relativePath}`;
-        if (seen.has(key))
-            return false;
-        seen.add(key);
-        return true;
-    }).slice(0, COMPACTION_ARTIFACT_REF_LIMIT);
-}
-function normalizeCompactionArtifactRef(input, path, fallbackKind = 'context_summary') {
-    const kind = normalizeSafePublicText(optionalString(input, 'kind') ?? fallbackKind, 60, `${path}.kind`);
-    const relativePath = normalizeRepoRelativeRef(requiredString(input, 'relativePath'), `${path}.relativePath`);
-    const sha = optionalString(input, 'sha256');
-    const publicSummary = optionalString(input, 'publicSummary');
-    return {
-        kind,
-        relativePath,
-        ...(sha ? { sha256: normalizeCompactionHash(sha, `${path}.sha256`) } : {}),
-        ...(publicSummary ? { publicSummary: normalizeSafePublicText(publicSummary, PUBLIC_TEXT_MAX_CHARS, `${path}.publicSummary`) } : {}),
-        publicSafe: true,
-    };
-}
-function normalizeCompactionEvidenceRefs(operation) {
-    return arrayOfRecords(operation.evidenceIndex).map((ref, index) => {
-        const path = `compact_context.evidenceIndex[${index}]`;
-        const relativePath = normalizeRepoRelativeRef(requiredString(ref, 'relativePath'), `${path}.relativePath`);
-        const refId = optionalString(ref, 'refId') ?? `evidence-${safeId(relativePath)}`;
-        const reasonCode = optionalString(ref, 'reasonCode') ?? optionalString(operation, 'reasonCode') ?? 'context-compacted';
-        const sha = optionalString(ref, 'sha256');
-        const publicSummary = optionalString(ref, 'publicSummary');
-        return {
-            refId: normalizeSafePublicText(refId, 120, `${path}.refId`),
-            relativePath,
-            reasonCode: normalizeSafePublicText(reasonCode, 80, `${path}.reasonCode`),
-            ...(sha ? { sha256: normalizeCompactionHash(sha, `${path}.sha256`) } : {}),
-            ...(publicSummary ? { publicSummary: normalizeSafePublicText(publicSummary, PUBLIC_TEXT_MAX_CHARS, `${path}.publicSummary`) } : {}),
-            publicSafe: true,
-        };
-    }).slice(0, COMPACTION_EVIDENCE_REF_LIMIT);
-}
-function normalizeCompactionCheckpoint(operation, retainedRefs, artifactRefs, evidenceRefs) {
-    const checkpoint = optionalRecord(operation, 'checkpoint') ?? {};
-    const checkpointId = optionalString(checkpoint, 'checkpointId') ?? `checkpoint-${safeId(operation.operationId)}`;
-    const capturedAt = optionalString(checkpoint, 'capturedAt') ?? operation.createdAt;
-    const normalized = {
-        checkpointId: normalizeSafePublicText(checkpointId, 120, 'compact_context.checkpoint.checkpointId'),
-        capturedAt: normalizeSafePublicText(capturedAt, 80, 'compact_context.checkpoint.capturedAt'),
-        retainedRefCount: retainedRefs.length,
-        artifactRefCount: artifactRefs.length,
-        evidenceRefCount: evidenceRefs.length,
-        publicSafe: true,
-    };
-    for (const key of ['eventCursor', 'receiptCursor']) {
-        const value = optionalString(checkpoint, key);
-        if (value)
-            normalized[key] = normalizeSafePublicText(value, 120, `compact_context.checkpoint.${key}`);
-    }
-    for (const key of ['recentEventCount', 'recentReceiptCount']) {
-        const value = optionalNumber(checkpoint, key);
-        if (value !== undefined)
-            normalized[key] = Math.max(0, Math.floor(value));
-    }
-    return normalized;
-}
-function sha256Hex(value) {
-    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
-}
-function unique(values) {
-    return Array.from(new Set(values));
-}
-function safeId(value) {
-    return value.replace(/[^a-z0-9_.:-]+/gi, '-').slice(0, 120);
-}
-function boundPublicText(value, maxChars) {
-    const redacted = redactPublicText(value);
-    return redacted.length <= maxChars ? redacted : `${redacted.slice(0, maxChars)}…[TRUNCATED:${redacted.length - maxChars}]`;
-}
-function redactPublicText(value) {
-    if (ABSOLUTE_URL_VALUE_PATTERN.test(value) ||
-        SECRET_VALUE_PATTERN.test(value) ||
-        RAW_LOG_VALUE_PATTERN.test(value) ||
-        PROMPT_VALUE_PATTERN.test(value) ||
-        PROTECTED_VALUE_PATTERN.test(value)) {
-        return '[REDACTED]';
-    }
-    return value;
-}
-function stableStringify(value) {
-    if (Array.isArray(value))
-        return `[${value.map(stableStringify).join(',')}]`;
-    if (isRecord(value)) {
-        return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${stableStringify(value[key])}`).join(',')}}`;
-    }
-    return JSON.stringify(value);
-}
-function mapContinuityError(error, fallbackMessage) {
-    if (error instanceof ContinuityClientStateStoreError)
-        return error;
-    if (error instanceof ContinuitySqliteStoreError) {
-        return new ContinuityClientStateStoreError(error.message, [error.reasonCode], { mutationBlocked: error.mutationBlocked, cause: error });
-    }
-    const message = error instanceof Error ? error.message : String(error);
-    return new ContinuityClientStateStoreError(`${fallbackMessage} ${message}`, [CONTINUITY_CLIENT_REASON_CODES.SQLITE_MUTATION_FAILED], { cause: error });
-}
+import{existsSync as se}from"node:fs";import{createHash as ie}from"node:crypto";import{deriveProjectIdentity as de}from"../runner/project-identity.js";import{recordAutonomousGovernance as ce}from"./autonomous-governance.js";import{CONTINUITY_PROCESSING_OUTPUT_SUMMARY_EVENT_TYPE as ue,ContinuitySqliteStoreError as pe,continuitySqliteStorePath as me,isContinuityPublicStage as le,normalizeContinuityStageIteration as Y,openContinuitySqliteStore as Ie,sanitizeContinuityStageHistory as _e}from"./sqlite-store.js";const S=1,g="continuity-v1",z=10,ye=2e3,Ze=z,et=ye,tt=3,nt=1800,fe=1,I=Object.freeze({OK:"continuity-ok",INVALID_SCHEMA_VERSION:"invalid-schema-version",INVALID_CONTRACT_VERSION:"invalid-contract-version",UNKNOWN_OPERATION_REQUIRED:"unknown-operation-required",UNKNOWN_OPERATION_IGNORED:"unknown-operation-ignored",DUPLICATE_OPERATION_ID:"duplicate-operation-id",IDEMPOTENCY_REPLAY:"idempotency-replay",UNSAFE_FIELD_REJECTED:"unsafe-field-rejected",SQLITE_ADAPTER_UNAVAILABLE:"sqlite-adapter-unavailable",SQLITE_INTEGRITY_FAILED:"sqlite-integrity-failed",SQLITE_MUTATION_FAILED:"sqlite-mutation-failed"}),he=new Set(["create_job","update_job_status","append_event","append_receipt","upsert_goal_campaign","upsert_goal_ledger_item","upsert_verifier","upsert_review_gate","schedule_next_tick","acquire_lease","release_lease","compact_context","enqueue_outbox","append_outbox","enqueue_execution_attempt","claim_execution_attempt","heartbeat_execution_attempt","release_execution_attempt","complete_execution_attempt","append_execution_receipt","append_execution_summary"]),Ae=new Set(["schemaVersion","contractVersion","eventType","executionId","jobId","operationId","idempotencyKey","goalId","loopId","campaignId","itemId","ledgerItemIds","verifierId","verifierIds","gateId","reviewGateIds","runnerId","leaseId","status","reasonCode","reasonCodes","runtimeId","modelId","runtimeSource","headlessRuntime","headlessModel","headlessRuntimeReasonCode","originRuntime","originModel","targetRef","attemptId","attemptStatus","directiveHash","timeoutMs","leaseExpiresAt","heartbeatAt","notBeforeAt","maxAttempts","counts","hashes","relativePaths","artifactRefs","evidenceRefs","validationRefs","registryRefs","storyIds","epicIds","debtIds","iteration","currentStage","stageHistory","durationMs","retryCount","nextTickAt","processingOutputSource","publicSummary","redactionEvidence","selectorKind","targetId","targetJobId","relatedJobIds","serverAccessToLocalhost","serverHeldStream","initialCursor","targetResolutionState","targetKind","relatedJobCount","snapshotStatus","snapshotGeneratedAt","renderedSummaryCount","cursorState","currentCursor","nextCursor","cursorAdvanced","eventId","latestEventId","watchStatus","stopReason","syncVersion","transportKind","envelopeId","workspaceId","workspaceLabel","projectId","projectLabel","snapshotId","syncCursor","previousSyncCursor","nextSyncCursor","commandId","receiptId","acknowledgedAt","observedAt","generatedAt","syncStatus","commandStatus","receiptStatus","actorType","actorId","tenantId","commandKind","auditStatus","redactionCount"]),K=/(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i,G=/\bhttps?:\/\/\S+/i,be=/(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)/i,J=/(ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=)/i,W=/(raw[_-]?(?:logs?)\s*[:=]|transcript|stack trace|stderr:|stdout:)/i,Q=/(prompt[_-]?body|system prompt|workflow body|step body)/i,X=/(PROTECTED_|_PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS|P180[_-]?SYNTHETIC[_-]?CONTINUITY|P185[_-]?SYNTHETIC[_-]?CONTINUITY|P187[_-]?SYNTHETIC[_-]?(?:CONTINUITY|RUNNER|WATCH)|P190[_-]?SYNTHETIC[_-]?(?:HEADLESS|CONTINUITY)|P192[_-]?SYNTHETIC[_-]?(?:PORTAL|RUNNER|SYNC))/i,k=240,Z=2400,Ce=40,Se=20,ge=40,Ee=20,D=80;class _ extends Error{reasonCodes;redactions;mutationBlocked;constructor(e,n,a={}){super(e),this.name="ContinuityClientStateStoreError",this.reasonCodes=E(n),this.redactions=a.redactions??[],this.mutationBlocked=a.mutationBlocked??!1,this.cause=a.cause}}function at(t){return se(me(t))}function ot(t,e=new Date().toISOString()){return{schemaVersion:S,contractVersion:g,generatedAt:e,hardStop:!0,reasonCodes:E(t),publicSafe:!0}}async function rt(t){const e=await Ie({projectRoot:t.projectRoot,adapter:t.adapter,adapterLoader:t.adapterLoader,now:t.now,strictReadOnly:t.strictReadOnly});return new Re(e,t.now??(()=>new Date().toISOString()),de(t.projectRoot))}class Re{store;now;projectIdentity;constructor(e,n=()=>new Date().toISOString(),a){this.store=e,this.now=n,this.projectIdentity=a}close(){this.store.close()}recordAutonomousGovernance(e,n){try{return ce(this.store,e,n)}catch(a){throw q(a,"Failed to record autonomous governance envelope.")}}collectSnapshot(e={}){try{const n=e.nowIso??this.now(),a=this.store.collectSnapshotRows({nowIso:n,jobLimit:e.jobLimit??20,staleLeaseLimit:e.staleLeaseLimit??10,receiptLimit:e.receiptLimit??10,eventLimit:e.eventLimit??10,snapshotLimit:e.snapshotLimit??5}),i=this.store.listDueJobs({nowIso:n,limit:e.dueJobLimit??10}),d=this.store.listProcessingOutputSummaries({limit:e.processingSummaryLimit??z}),u=Ke(a.receipts).slice(0,20),m=xe({generatedAt:n,counts:a.counts,jobCount:a.jobs.length,dueJobCount:i.length,outboxPending:a.outboxCounts.pending??0,redactions:u});return{schemaVersion:S,contractVersion:g,generatedAt:n,store:{schemaVersion:a.schemaVersion,readable:!0},jobs:a.jobs.map(ee),counts:a.counts,dueJobCount:a.counts.dueJobs??0,dueJobs:i.map(ee),staleLeases:a.staleLeases.map(c=>({leaseId:s(c.lease_id,100),jobId:s(c.job_id,100),runnerId:s(c.runner_id,100),expiresAt:s(c.expires_at,80),publicSafe:!0})),outbox:{total:a.counts.outbox??0,pending:a.outboxCounts.pending??0,failed:a.outboxCounts.failed??0,deadLetter:a.outboxCounts.dead_letter??0,sent:a.outboxCounts.sent??0,acked:a.outboxCounts.acked??0},queue:{depth:a.queue.depth,queued:a.queue.queued,running:a.queue.running,retrying:a.queue.retrying,deadLetter:a.queue.deadLetter,capacity:a.queue.capacity,available:a.queue.available,backpressure:a.queue.backpressure,generatedAt:s(a.queue.generatedAt,80),...a.queue.nextRetryAt?{nextRetryAt:s(a.queue.nextRetryAt,80)}:{},...a.queue.reasonCode?{reasonCode:s(a.queue.reasonCode,80)}:{},publicSafe:!0},lastReceipts:a.receipts.map(c=>({receiptId:s(c.receipt_id,100),jobId:s(c.job_id,100),...c.operation_id?{operationId:s(c.operation_id,100)}:{},status:s(c.status,40),...c.reason_code?{reasonCode:s(c.reason_code,80)}:{},createdAt:s(c.created_at,80),publicSafe:!0})),lastEvents:a.events.map(c=>{const l=P(v(c.metadata_json));return{eventId:s(c.event_id,100),jobId:s(c.job_id,100),operationId:s(c.operation_id,100),type:s(c.type,80),publicSummary:s(c.summary,k),...c.reason_code?{reasonCode:s(c.reason_code,80)}:{},createdAt:s(c.created_at,80),...Object.keys(l).length>0?{metadata:l}:{},publicSafe:!0}}),processingSummaries:d.map(te),headlessExecutionAttempts:a.headlessExecutionAttempts.map(Ne),compactContext:ke(a.stateSnapshots),portalSync:m,redactions:u,publicSafe:!0}}catch(n){throw q(n,"Failed to collect continuity snapshot.")}}collectProcessingOutputSummaryCursor(e={}){try{const n=this.store.pollProcessingOutputSummaries(e);return{summaries:n.summaries.map(te),...n.nextCursor?{nextCursor:n.nextCursor}:{},hasMore:n.hasMore,publicSafe:!0}}catch(n){throw q(n,"Failed to collect processing summary cursor.")}}applyStateUpdate(e){const n=Me(e),a=[],i=[],d=[],u=[];for(const m of n){const c=this.applyOperationLog(m);a.push(...c.appliedOperationIds),i.push(...c.ignoredOperationIds),d.push(...c.reasonCodes),u.push(...c.redactions)}return{ok:!0,appliedOperationIds:E(a),ignoredOperationIds:E(i),reasonCodes:E(d.length>0?d:[I.OK]),redactions:u,publicSafe:!0}}applyOperationLog(e){const n=Ue(e),a=[],i=[...n.ignoredOperationIds],d=[...n.reasonCodes],u=[...n.redactions];try{this.store.runInTransaction(()=>{for(const m of n.operations){if(this.store.hasOperationRef(m.operationId,m.idempotencyKey)){i.push(m.operationId),d.push(I.IDEMPOTENCY_REPLAY);continue}this.applyKnownOperation(m,n.logMetadata),a.push(m.operationId),m.type!=="append_receipt"&&this.recordAppliedAudit(m)}for(const m of n.skippedOperations)this.recordIgnoredAuditIfPossible(m,I.UNKNOWN_OPERATION_IGNORED)})}catch(m){throw q(m,"Failed to apply continuity operation log atomically.")}return{ok:!0,appliedOperationIds:E(a),ignoredOperationIds:E(i),reasonCodes:E(d.length>0?d:[I.OK]),redactions:u,publicSafe:!0}}applyKnownOperation(e,n){switch(e.type){case"create_job":this.applyCreateJob(e,n);return;case"update_job_status":this.applyUpdateJobStatus(e);return;case"append_event":this.applyAppendEvent(e);return;case"append_receipt":this.applyAppendReceipt(e);return;case"upsert_goal_campaign":this.applyUpsertGoalCampaign(e);return;case"schedule_next_tick":this.store.scheduleNextTick({jobId:e.jobId,scheduledAt:r(e,"scheduledAt"),updatedAt:e.createdAt,reasonCode:o(e,"reasonCode")});return;case"acquire_lease":this.store.acquireLease({leaseId:r(e,"leaseId"),jobId:e.jobId,runnerId:r(e,"runnerId"),acquiredAt:r(e,"acquiredAt"),expiresAt:r(e,"expiresAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(e.metadata,"operation.metadata")});return;case"release_lease":this.store.releaseLease({leaseId:r(e,"leaseId"),releasedAt:r(e,"releasedAt"),reasonCode:o(e,"reasonCode")});return;case"compact_context":this.applyCompactContext(e);return;case"upsert_goal_ledger_item":this.applyUpsertGoalLedgerItem(e);return;case"upsert_verifier":this.applyUpsertVerifier(e);return;case"upsert_review_gate":this.applyUpsertReviewGate(e);return;case"enqueue_outbox":case"append_outbox":this.applyOutbox(e);return;case"enqueue_execution_attempt":this.applyEnqueueExecutionAttempt(e);return;case"claim_execution_attempt":this.store.claimHeadlessExecutionAttempt({attemptId:r(e,"attemptId"),leaseId:r(e,"leaseId"),runnerId:r(e,"runnerId"),claimedAt:o(e,"claimedAt")??e.createdAt,leaseExpiresAt:r(e,"leaseExpiresAt"),reasonCode:o(e,"reasonCode")});return;case"heartbeat_execution_attempt":this.store.heartbeatHeadlessExecutionAttempt({attemptId:r(e,"attemptId"),leaseId:r(e,"leaseId"),runnerId:r(e,"runnerId"),heartbeatAt:o(e,"heartbeatAt")??e.createdAt,leaseExpiresAt:o(e,"leaseExpiresAt")});return;case"release_execution_attempt":this.store.releaseHeadlessExecutionAttempt({attemptId:r(e,"attemptId"),leaseId:r(e,"leaseId"),releasedAt:o(e,"releasedAt")??e.createdAt,status:o(e,"status"),reasonCode:o(e,"reasonCode"),notBeforeAt:o(e,"notBeforeAt"),retryCount:h(e,"retryCount")});return;case"complete_execution_attempt":this.applyCompleteExecutionAttempt(e);return;case"append_execution_receipt":this.applyAppendExecutionReceipt(e);return;case"append_execution_summary":this.applyAppendExecutionSummary(e);return;default:throw new _(`Unknown continuity operation ${e.type}.`,[I.UNKNOWN_OPERATION_REQUIRED],{mutationBlocked:!0})}}applyCompactContext(e){const n=w(r(e,"summaryHash"),"compact_context.summaryHash"),a=oe(e.retainedRefs,"compact_context.retainedRefs",Ce),i=we(o(e,"publicSummary")??`Context compacted with ${a.length} retained public refs.`),d=Fe(e),u=Be(e),m=oe(e.decisionLogRefs,"compact_context.decisionLogRefs",Ee),c=Ye(e,a,d,u),l=E([...a,...m,...d.map(A=>A.relativePath),...u.map(A=>A.relativePath)]).slice(0,D),U=B(i),N=o(e,"reasonCode")??"context-compacted",j={schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,reasonCode:N,publicSummary:i,counts:{retainedRefs:a.length,artifactRefs:d.length,evidenceRefs:u.length,decisionLogRefs:m.length,...h(e,"inputTokens")!==void 0?{inputContextUnits:h(e,"inputTokens")}:{},...h(e,"outputTokens")!==void 0?{outputContextUnits:h(e,"outputTokens")}:{},summaryChars:i.length},hashes:{summary:n,persistedSummary:U},relativePaths:l,artifactRefs:d,evidenceRefs:u,validationRefs:m,redactionEvidence:e.redactions??[],checkpoint:c};for(const[A,x]of d.entries())this.store.recordArtifact({artifactId:`artifact-${R(e.operationId)}-${A+1}`,jobId:e.jobId,kind:x.kind,relativePath:x.relativePath,sha256:x.sha256,summary:x.publicSummary,createdAt:e.createdAt,operationId:`${e.operationId}:artifact:${A+1}`,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:artifact:${A+1}`:void 0,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,reasonCode:N,hashes:x.sha256?{artifact:x.sha256}:{},relativePaths:[x.relativePath],publicSummary:x.publicSummary}});this.store.recordStateSnapshot({snapshotId:`snapshot-${R(e.operationId)}`,jobId:e.jobId,kind:"context_compaction",relativePath:d.find(A=>A.kind==="context_summary")?.relativePath,sha256:n,summary:i,capturedAt:e.createdAt,operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:j}),this.store.appendEvent({eventId:`event-${R(e.operationId)}-context-compacted`,jobId:e.jobId,operationId:`${e.operationId}:event`,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:event`:void 0,sequence:e.sequence,type:"context_compacted",summary:`Context compaction checkpoint ${c.checkpointId} persisted with ${l.length} public refs.`,reasonCode:N,createdAt:e.createdAt,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,reasonCode:N,counts:j.counts,hashes:j.hashes,relativePaths:l,artifactRefs:d.map(A=>A.relativePath),evidenceRefs:u,publicSummary:i}})}applyCreateJob(e,n){const a=T(e,"job");this.store.recordJob({jobId:r(a,"jobId"),kind:r(a,"kind"),status:r(a,"status"),createdAt:r(a,"createdAt"),updatedAt:r(a,"updatedAt"),summary:o(a,"summary"),reasonCode:o(a,"reasonCode"),nextRunAt:o(a,"nextRunAt"),goalId:o(a,"goalId"),loopId:o(a,"loopId"),campaignId:o(a,"campaignId"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f({...p(a,"metadata")??p(e,"metadata")??{...n},...Te(this.projectIdentity)},"job.metadata")})}applyUpdateJobStatus(e){this.store.updateJobStatus({jobId:e.jobId,status:r(e,"status"),updatedAt:e.createdAt,reasonCode:o(e,"reasonCode")})}applyAppendEvent(e){const n=T(e,"event"),a=r(n,"type");if(a===ue){this.applyProcessingOutputSummaryEvent(e,n);return}this.store.appendEvent({eventId:r(n,"eventId"),jobId:r(n,"jobId"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,sequence:e.sequence,type:a,summary:r(n,"summary"),reasonCode:o(n,"reasonCode"),createdAt:r(n,"createdAt"),metadata:f(p(n,"metadata"),"event.metadata")})}applyProcessingOutputSummaryEvent(e,n){const a=p(n,"processingOutputSummary")??n,i=o(a,"executionId")??e.operationId,d=o(a,"jobId")??o(n,"jobId")??e.jobId,u=o(a,"publicSummary")??r(n,"summary"),m=o(a,"createdAt")??o(n,"createdAt")??e.createdAt,c=p(a,"metadata"),l=p(n,"metadata");this.store.recordProcessingOutputSummary({eventId:o(n,"eventId"),executionId:i,jobId:d,idempotencyKey:e.idempotencyKey,goalId:o(a,"goalId")??o(n,"goalId"),loopId:o(a,"loopId")??o(n,"loopId"),publicSummary:u,reasonCode:o(a,"reasonCode")??o(n,"reasonCode"),createdAt:m,source:o(a,"source")??o(n,"source"),metadata:{...l??{},...c??{}}})}applyAppendReceipt(e){const n=T(e,"receipt"),a=o(n,"operationId")??e.operationId;this.store.appendReceipt({receiptId:r(n,"receiptId"),jobId:r(n,"jobId"),operationId:a,idempotencyKey:e.idempotencyKey,status:r(n,"status"),reasonCode:o(n,"reasonCode"),appliedOperationIds:L(n.appliedOperationIds),ignoredOperationIds:L(n.ignoredOperationIds),createdAt:r(n,"createdAt"),metadata:f(p(n,"metadata"),"receipt.metadata")})}applyUpsertGoalCampaign(e){const n=T(e,"campaign");this.store.upsertGoalCampaign({campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),status:r(n,"status"),title:o(n,"title"),publicSummary:o(n,"publicSummary"),reasonCode:o(n,"reasonCode"),createdAt:r(n,"createdAt"),updatedAt:r(n,"updatedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"campaign.metadata")})}applyUpsertGoalLedgerItem(e){const n=T(e,"item");this.store.upsertGoalLedgerItem({itemId:r(n,"itemId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),itemType:r(n,"type"),status:r(n,"status"),summary:r(n,"publicSummary"),reasonCode:o(n,"reasonCode"),createdAt:e.createdAt,updatedAt:r(n,"updatedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"item.metadata")})}applyUpsertVerifier(e){const n=T(e,"verifier");this.store.upsertGoalVerifier({verifierId:r(n,"verifierId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),kind:r(n,"kind"),status:r(n,"status"),summary:o(n,"publicSummary"),reasonCode:o(n,"reasonCode"),lastCheckedAt:o(n,"lastCheckedAt"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"verifier.metadata")})}applyUpsertReviewGate(e){const n=T(e,"reviewGate");this.store.upsertGoalReviewGate({gateId:r(n,"gateId"),campaignId:r(n,"campaignId"),jobId:r(n,"jobId"),status:r(n,"status"),summary:o(n,"publicSummary"),required:He(n,"required")??!0,reasonCode:o(n,"reasonCode"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,metadata:f(p(n,"metadata"),"reviewGate.metadata")})}applyOutbox(e){const n=p(e,"outbox")??e;this.store.enqueueOutbox({outboxId:o(n,"outboxId")??`outbox-${R(e.operationId)}`,jobId:o(n,"jobId")??e.jobId,operationId:e.operationId,idempotencyKey:e.idempotencyKey,type:o(n,"type")===e.type?"continuity_event":r(n,"type"),status:o(n,"status"),payload:f(p(n,"payload")??p(e,"metadata")??{},"outbox.payload"),retryCount:h(n,"retryCount"),nextAttemptAt:o(n,"nextAttemptAt"),lastErrorCode:o(n,"lastErrorCode"),createdAt:o(n,"createdAt")??e.createdAt,updatedAt:o(n,"updatedAt")??e.createdAt})}applyEnqueueExecutionAttempt(e){const n=p(e,"attempt")??e,a=f(p(n,"metadata")??p(e,"metadata"),"executionAttempt.metadata");this.store.enqueueHeadlessExecutionAttempt({attemptId:r(n,"attemptId"),executionId:r(n,"executionId"),jobId:o(n,"jobId")??e.jobId,directiveHash:r(n,"directiveHash"),directiveKind:r(n,"directiveKind"),commandClass:r(n,"commandClass"),targetKind:r(n,"targetKind"),targetRef:r(n,"targetRef"),storyId:o(n,"storyId"),epicId:o(n,"epicId"),runtimeId:o(n,"runtimeId"),modelId:o(n,"modelId"),runtimeSource:o(n,"runtimeSource"),status:o(n,"status"),reasonCode:o(n,"reasonCode"),publicSummary:o(n,"publicSummary"),enqueuedAt:o(n,"enqueuedAt")??e.createdAt,notBeforeAt:o(n,"notBeforeAt"),retryCount:h(n,"retryCount"),maxAttempts:h(n,"maxAttempts"),operationId:e.operationId,idempotencyKey:e.idempotencyKey,counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:a})}applyCompleteExecutionAttempt(e){const n=p(e,"completion")??e;this.store.completeHeadlessExecutionAttempt({attemptId:r(n,"attemptId"),executionId:o(n,"executionId"),jobId:o(n,"jobId")??e.jobId,leaseId:o(n,"leaseId"),runnerId:o(n,"runnerId"),status:r(n,"status"),completedAt:o(n,"completedAt")??e.createdAt,durationMs:h(n,"durationMs"),reasonCode:o(n,"reasonCode"),publicSummary:o(n,"publicSummary"),notBeforeAt:o(n,"notBeforeAt"),retryCount:h(n,"retryCount"),counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:f(p(n,"metadata"),"executionCompletion.metadata")})}applyAppendExecutionReceipt(e){const n=T(e,"receipt");this.store.recordHeadlessExecutionReceipt({receiptId:r(n,"receiptId"),attemptId:r(n,"attemptId"),executionId:r(n,"executionId"),jobId:o(n,"jobId")??e.jobId,status:r(n,"status"),reasonCode:o(n,"reasonCode"),createdAt:o(n,"createdAt")??e.createdAt,operationId:e.operationId,idempotencyKey:e.idempotencyKey,counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:f(p(n,"metadata"),"executionReceipt.metadata")})}applyAppendExecutionSummary(e){const n=p(e,"summary")??e;this.store.recordHeadlessExecutionSummary({eventId:o(n,"eventId"),attemptId:r(n,"attemptId"),executionId:r(n,"executionId"),jobId:o(n,"jobId")??e.jobId,publicSummary:r(n,"publicSummary"),reasonCode:o(n,"reasonCode"),createdAt:o(n,"createdAt")??e.createdAt,runtimeId:o(n,"runtimeId"),modelId:o(n,"modelId"),durationMs:h(n,"durationMs"),counts:p(n,"counts"),hashes:p(n,"hashes"),redactionSummary:Array.isArray(n.redactionSummary)?n.redactionSummary:void 0,relativePaths:L(n.relativePaths),metadata:f(p(n,"metadata"),"executionSummary.metadata")})}recordAppliedAudit(e){this.store.recordOperationAudit({receiptId:`receipt-${R(e.operationId)}`,jobId:e.jobId,operationId:e.operationId,idempotencyKey:`audit-${e.idempotencyKey??e.operationId}`,status:"applied",reasonCode:I.OK,appliedOperationIds:[e.operationId],createdAt:e.createdAt,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,status:"applied",reasonCode:I.OK}})}recordIgnoredAuditIfPossible(e,n){this.store.jobExists(e.jobId)&&this.store.recordOperationAudit({receiptId:`receipt-${R(e.operationId)}-ignored`,jobId:e.jobId,operationId:e.operationId,idempotencyKey:`audit-${e.idempotencyKey??e.operationId}-ignored`,status:"ignored",reasonCode:n,ignoredOperationIds:[e.operationId],createdAt:e.createdAt,metadata:{schemaVersion:S,contractVersion:g,jobId:e.jobId,operationId:e.operationId,status:"ignored",reasonCode:n}})}}function ee(t){const e=Le(t.metadata_json,t.iteration),n=v(t.metadata_json),a=P(n),i=le(n.currentStage)?n.currentStage:void 0,d=_e(n.stageHistory),u=Y(n.iteration)??Y(t.iteration);return O(e,"goalLedgerItems","goal_ledger_item_count"in t?t.goal_ledger_item_count:void 0),O(e,"blockedGoalLedgerItems","blocked_goal_ledger_item_count"in t?t.blocked_goal_ledger_item_count:void 0),O(e,"securityIssuesBlocked","security_issue_blocked_count"in t?t.security_issue_blocked_count:void 0),O(e,"goalVerifiers","goal_verifier_count"in t?t.goal_verifier_count:void 0),O(e,"failedVerifiers","failed_verifier_count"in t?t.failed_verifier_count:void 0),O(e,"unavailableVerifiers","unavailable_verifier_count"in t?t.unavailable_verifier_count:void 0),O(e,"goalReviewGates","goal_review_gate_count"in t?t.goal_review_gate_count:void 0),O(e,"failedRequiredReviewGates","failed_required_review_gate_count"in t?t.failed_required_review_gate_count:void 0),{jobId:s(t.job_id,80),kind:s(t.kind,40),status:s(t.status,40),publicSummary:s(t.summary??"No public summary recorded.",k),createdAt:s(t.created_at,80),updatedAt:s(t.updated_at,80),...t.next_run_at?{nextRunAt:s(t.next_run_at,80)}:{},...t.reason_code?{reasonCode:s(t.reason_code,80)}:{},...Object.keys(e).length>0?{counts:e}:{},...i?{currentStage:i}:{},...d.length>0?{stageHistory:d}:{},...u!==void 0?{iteration:u}:{},...Oe(a),publicSafe:!0}}function xe(t){const e={jobs:t.counts.jobs??t.jobCount,dueJobs:t.counts.dueJobs??t.dueJobCount,outboxPending:t.outboxPending,redactions:t.redactions.length},n=V({generatedAt:t.generatedAt,counts:e});return{syncVersion:fe,transportKind:"client_snapshot",snapshotId:`snapshot-${R(B(n).replace(/^sha256:/,"").slice(0,16))}`,generatedAt:s(t.generatedAt,80),publicSummary:`Client snapshot contains ${e.jobs} public jobs and ${e.outboxPending} pending outbox records.`,counts:e,hashes:{snapshot:B(n)},redactionEvidence:t.redactions.slice(0,20),publicSafe:!0}}function Oe(t){const e=t.runtimeSource==="explicit"||t.runtimeSource==="origin"||t.runtimeSource==="default"||t.runtimeSource==="fallback"||t.runtimeSource==="unspecified"?t.runtimeSource:void 0;return{...b(t,"runtimeId",80),...b(t,"modelId",120),...e?{runtimeSource:e}:{},...b(t,"headlessRuntime",80),...b(t,"headlessModel",120),...b(t,"headlessRuntimeReasonCode",100),...b(t,"originRuntime",80),...b(t,"originModel",120),...b(t,"workspaceId",120),...b(t,"workspaceLabel",80),...b(t,"projectId",120),...b(t,"projectLabel",80)}}function Te(t){return t?{workspaceId:t.workspaceId,workspaceLabel:t.workspaceLabel,projectId:t.projectId,projectLabel:t.projectLabel}:{}}function b(t,e,n){const a=t[e];return typeof a=="string"?{[e]:s(a,n)}:{}}function te(t){const e=P(v(t.metadata_json)),n=typeof e.goalId=="string"?s(e.goalId,100):void 0,a=typeof e.loopId=="string"?s(e.loopId,100):void 0;return{eventId:s(t.event_id,120),jobId:s(t.job_id,100),...n?{goalId:n}:{},...a?{loopId:a}:{},executionId:s(t.execution_id,120),publicSummary:s(t.public_summary,k),...t.reason_code?{reasonCode:s(t.reason_code,80)}:{},createdAt:s(t.created_at,80),cursor:s(t.cursor,260),...Object.keys(e).length>0?{metadata:e}:{},publicSafe:!0}}function Ne(t){return{attemptId:s(t.attempt_id,120),executionId:s(t.execution_id,120),jobId:s(t.job_id,100),status:s(t.status,40),...t.reason_code?{reasonCode:s(t.reason_code,80)}:{},...t.runtime_id?{runtimeId:s(t.runtime_id,80)}:{},...t.model_id?{modelId:s(t.model_id,120)}:{},retryCount:Math.max(0,Math.floor(t.retry_count)),attemptCount:Math.max(0,Math.floor(t.attempt_count)),maxAttempts:Math.max(1,Math.floor(t.max_attempts)),queuePriority:Math.max(-100,Math.min(100,Math.floor(t.queue_priority))),queueScope:t.queue_scope==="workspace"?"workspace":"project",...typeof t.duration_ms=="number"&&Number.isFinite(t.duration_ms)?{durationMs:Math.max(0,Math.floor(t.duration_ms))}:{},...ne("counts",v(t.counts_json)),...ne("hashes",v(t.hashes_json)),...Pe("redactionSummary",t.redaction_summary_json),...t.lease_id?{leaseId:s(t.lease_id,120)}:{},...t.runner_id?{runnerId:s(t.runner_id,120)}:{},...t.lease_expires_at?{leaseExpiresAt:s(t.lease_expires_at,80)}:{},...t.heartbeat_at?{heartbeatAt:s(t.heartbeat_at,80)}:{},publicSummary:s(t.public_summary??"No public headless execution summary recorded.",k),enqueuedAt:s(t.enqueued_at,80),...t.not_before_at?{notBeforeAt:s(t.not_before_at,80)}:{},...t.next_retry_at?{nextRetryAt:s(t.next_retry_at,80)}:{},...t.dead_lettered_at?{deadLetteredAt:s(t.dead_lettered_at,80)}:{},...t.dead_letter_reason_code?{deadLetterReasonCode:s(t.dead_letter_reason_code,80)}:{},publicSafe:!0}}function O(t,e,n){typeof n=="number"&&Number.isFinite(n)&&n>0&&(t[e]=Math.floor(n))}function Le(t,e){const n={};if(t)try{const a=JSON.parse(t),i=y(a)&&y(a.counts)?a.counts:void 0;if(i)for(const[d,u]of Object.entries(i))typeof u=="number"&&Number.isFinite(u)&&(n[d]=Math.max(0,Math.floor(u)))}catch{}return typeof e=="number"&&Number.isFinite(e)&&(n.iteration=Math.max(0,Math.floor(e))),n}function ke(t){const e=t.map(ve).filter(n=>!!n);return{preferredSource:e.length>0?"compact_summary":"recent_events",summaries:e,publicSafe:!0}}function ve(t){const e=v(t.metadata_json),n=y(e.hashes)?e.hashes:{},a=typeof n.summary=="string"?n.summary:t.sha256??void 0,i=typeof e.reasonCode=="string"?s(e.reasonCode,80):void 0;return{snapshotId:s(t.snapshot_id,120),...t.job_id?{jobId:s(t.job_id,100)}:{},...t.operation_id?{operationId:s(t.operation_id,120)}:{},capturedAt:s(t.captured_at,80),publicSummary:s(t.summary??"Context compacted with public-safe refs.",Z),...a?{summaryHash:s(a,120)}:{},...t.relative_path?{relativePath:s(t.relative_path,240)}:{},retainedRefs:je(e.relativePaths),artifactRefs:$(e.artifactRefs),evidenceRefs:$(e.evidenceRefs),...y(e.checkpoint)?{checkpoint:P(e.checkpoint)}:{},...i?{reasonCode:i}:{},publicSafe:!0}}function v(t){if(!t)return{};try{const e=JSON.parse(t);return y(e)?e:{}}catch{return{}}}function ne(t,e){const n=P(e);return Object.keys(n).length>0?{[t]:n}:{}}function Pe(t,e){if(!e)return{};try{const n=JSON.parse(e),a=$(n);return a.length>0?{[t]:a}:{}}catch{return{}}}function je(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"&&e.length>0).map(e=>s(e,240)).slice(0,D):[]}function $(t){return Array.isArray(t)?t.map(H).filter(e=>e!==void 0).slice(0,D):[]}function P(t){const e={};for(const[n,a]of Object.entries(t).slice(0,20)){if(K.test(n))continue;const i=H(a);i!==void 0&&(e[s(n,80)]=i)}return e}function H(t){if(!M(t)){if(typeof t=="string")return s(t,240);if(typeof t=="number"&&Number.isFinite(t))return Math.floor(t);if(typeof t=="boolean"||t===null)return t;if(Array.isArray(t))return t.map(H).filter(n=>n!==void 0).slice(0,20);if(y(t))return P(t)}}function Me(t){return y(t)?Array.isArray(t.operationLogs)?t.operationLogs.filter(y):y(t.operationLog)?[t.operationLog]:Array.isArray(t.operations)?[t]:[]:[]}function Ue(t){const e=[],n=[],a=[],i=[],d=[],u=new Map;if(t.schemaVersion!==S)throw new _("Invalid continuity operation log schema version.",[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});if(t.contractVersion!==g)throw new _("Invalid continuity operation log contract version.",[I.INVALID_CONTRACT_VERSION],{mutationBlocked:!0});if(t.publicSafe!==!0)throw new _("Continuity operation log is not marked public-safe.",[I.UNSAFE_FIELD_REJECTED],{mutationBlocked:!0});const m=f(p(t,"metadata"),"log.metadata");if(!Array.isArray(t.operations))return{operations:[],skippedOperations:a,ignoredOperationIds:i,reasonCodes:e,redactions:n,logMetadata:m};for(const c of[...t.operations].filter(y).sort(De)){const l=Ve(c),U=V(l),N=u.get(l.operationId);if(N!==void 0){if(N===U){i.push(l.operationId),e.push(I.IDEMPOTENCY_REPLAY);continue}throw n.push({field:"operationId",reason:"unknown_required_operation",evidence:"operation-denied",publicSafe:!0}),new _("Duplicate continuity operation ID with conflicting payload.",[I.DUPLICATE_OPERATION_ID],{redactions:n,mutationBlocked:!0})}if(u.set(l.operationId,U),f(l.metadata,"operation.metadata"),!he.has(l.type)){const j=c.required===!0;if(c.forwardCompatible===!0&&!j){a.push(l),i.push(l.operationId),e.push(I.UNKNOWN_OPERATION_IGNORED);continue}throw n.push({field:l.type,reason:"unknown_required_operation",evidence:"operation-denied",publicSafe:!0}),new _(`Unknown required continuity operation ${l.type}.`,[I.UNKNOWN_OPERATION_REQUIRED],{redactions:n,mutationBlocked:!0})}d.push(l)}return{operations:d,skippedOperations:a,ignoredOperationIds:i,reasonCodes:e,redactions:n,logMetadata:m}}function Ve(t){if(t.schemaVersion!==S)throw new _("Invalid continuity operation schema version.",[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});if(t.contractVersion!==g)throw new _("Invalid continuity operation contract version.",[I.INVALID_CONTRACT_VERSION],{mutationBlocked:!0});if(t.publicSafe!==!0)throw new _("Continuity operation is not marked public-safe.",[I.UNSAFE_FIELD_REJECTED],{mutationBlocked:!0});const e=r(t,"type"),n=r(t,"operationId"),a=r(t,"jobId"),i=$e(t,"sequence"),d=r(t,"createdAt");return{...t,type:e,operationId:n,jobId:a,schemaVersion:S,contractVersion:g,sequence:i,createdAt:d,idempotencyKey:o(t,"idempotencyKey"),metadata:p(t,"metadata"),publicSafe:!0}}function f(t,e){if(!t)return{};const n={},a=[];for(const[i,d]of Object.entries(t)){const u=qe(i),m=M(d),c=u??m;if(c){a.push({field:`${e}.${i}`,reason:c,evidence:u?"key-denied":"value-denied",publicSafe:!0});continue}n[i]=d}if(a.length>0)throw new _(`Continuity metadata rejected unsafe public fields at ${e}.`,[I.UNSAFE_FIELD_REJECTED],{redactions:a,mutationBlocked:!0});return n}function qe(t){return!Ae.has(t)||K.test(t)?"unsafe_key":null}function M(t){if(typeof t=="string")return G.test(t)?"private_url":be.test(t)?"local_absolute_path":J.test(t)?"secret":Q.test(t)?"prompt_body":W.test(t)?"raw_log":X.test(t)?"protected_field":null;if(t===null||typeof t=="number"||typeof t=="boolean")return null;if(Array.isArray(t)){for(const e of t){const n=M(e);if(n)return n}return null}if(y(t)){for(const[e,n]of Object.entries(t)){if(K.test(e))return"unsafe_key";const a=M(n);if(a)return a}return null}return"unsafe_key"}function Ke(t){const e=[];for(const n of t)if(n.metadata_json)try{const i=JSON.parse(n.metadata_json).redactionEvidence;if(!Array.isArray(i))continue;for(const d of i)y(d)&&(typeof d.field!="string"||typeof d.reason!="string"||typeof d.evidence!="string"||e.push({field:s(d.field,120),reason:d.reason,evidence:d.evidence,publicSafe:!0}))}catch{}return e}function De(t,e){const n=typeof t.sequence=="number"?t.sequence:0,a=typeof e.sequence=="number"?e.sequence:0;if(n!==a)return n-a;const i=String(t.createdAt??"").localeCompare(String(e.createdAt??""));return i!==0?i:String(t.operationId??"").localeCompare(String(e.operationId??""))}function y(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}function T(t,e){const n=t[e];if(!y(n))throw new _(`Continuity operation missing object field ${e}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function p(t,e){const n=t[e];return y(n)?n:void 0}function r(t,e){const n=t[e];if(typeof n!="string"||n.length===0)throw new _(`Continuity operation missing string field ${e}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function o(t,e){const n=t[e];return typeof n=="string"&&n.length>0?n:void 0}function $e(t,e){const n=t[e];if(typeof n!="number"||!Number.isFinite(n))throw new _(`Continuity operation missing numeric field ${e}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});return n}function h(t,e){const n=t[e];return typeof n=="number"&&Number.isFinite(n)?n:void 0}function He(t,e){const n=t[e];return typeof n=="boolean"?n:void 0}function L(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"&&e.length>0):[]}function ae(t){return Array.isArray(t)?t.filter(y):[]}function we(t){return C(t,Z,"compact_context.publicSummary")}function C(t,e,n){const a=t.trim();if(!a)throw new _(`Continuity compaction missing public text at ${n}.`,[I.INVALID_SCHEMA_VERSION],{mutationBlocked:!0});const i=M(a);if(i)throw new _(`Continuity compaction rejected unsafe public text at ${n}.`,[I.UNSAFE_FIELD_REJECTED],{redactions:[{field:n,reason:i,evidence:"value-denied",publicSafe:!0}],mutationBlocked:!0});return a.length<=e?a:`${a.slice(0,e)}\u2026[TRUNCATED:${a.length-e}]`}function w(t,e){return C(t,120,e)}function oe(t,e,n){return E(L(t).map((a,i)=>F(a,`${e}[${i}]`))).slice(0,n)}function F(t,e){const n=C(t,240,e).replace(/\\/g,"/"),a=n.split("/").filter(Boolean),i=/^[A-Za-z]:\//.test(n);if(n.startsWith("/")||n.startsWith("~")||n.includes("://")||i||a.includes(".."))throw new _(`Continuity compaction rejected non-relative ref at ${e}.`,[I.UNSAFE_FIELD_REJECTED],{redactions:[{field:e,reason:"private_url",evidence:"value-denied",publicSafe:!0}],mutationBlocked:!0});return n}function Fe(t){const e=[],n=p(t,"summaryRef");n&&e.push(re(n,"compact_context.summaryRef","context_summary"));for(const[i,d]of ae(t.artifactRefs).entries())e.push(re(d,`compact_context.artifactRefs[${i}]`));const a=new Set;return e.filter(i=>{const d=`${i.kind}:${i.relativePath}`;return a.has(d)?!1:(a.add(d),!0)}).slice(0,Se)}function re(t,e,n="context_summary"){const a=C(o(t,"kind")??n,60,`${e}.kind`),i=F(r(t,"relativePath"),`${e}.relativePath`),d=o(t,"sha256"),u=o(t,"publicSummary");return{kind:a,relativePath:i,...d?{sha256:w(d,`${e}.sha256`)}:{},...u?{publicSummary:C(u,k,`${e}.publicSummary`)}:{},publicSafe:!0}}function Be(t){return ae(t.evidenceIndex).map((e,n)=>{const a=`compact_context.evidenceIndex[${n}]`,i=F(r(e,"relativePath"),`${a}.relativePath`),d=o(e,"refId")??`evidence-${R(i)}`,u=o(e,"reasonCode")??o(t,"reasonCode")??"context-compacted",m=o(e,"sha256"),c=o(e,"publicSummary");return{refId:C(d,120,`${a}.refId`),relativePath:i,reasonCode:C(u,80,`${a}.reasonCode`),...m?{sha256:w(m,`${a}.sha256`)}:{},...c?{publicSummary:C(c,k,`${a}.publicSummary`)}:{},publicSafe:!0}}).slice(0,ge)}function Ye(t,e,n,a){const i=p(t,"checkpoint")??{},d=o(i,"checkpointId")??`checkpoint-${R(t.operationId)}`,u=o(i,"capturedAt")??t.createdAt,m={checkpointId:C(d,120,"compact_context.checkpoint.checkpointId"),capturedAt:C(u,80,"compact_context.checkpoint.capturedAt"),retainedRefCount:e.length,artifactRefCount:n.length,evidenceRefCount:a.length,publicSafe:!0};for(const c of["eventCursor","receiptCursor"]){const l=o(i,c);l&&(m[c]=C(l,120,`compact_context.checkpoint.${c}`))}for(const c of["recentEventCount","recentReceiptCount"]){const l=h(i,c);l!==void 0&&(m[c]=Math.max(0,Math.floor(l)))}return m}function B(t){return`sha256:${ie("sha256").update(t).digest("hex")}`}function E(t){return Array.from(new Set(t))}function R(t){return t.replace(/[^a-z0-9_.:-]+/gi,"-").slice(0,120)}function s(t,e){const n=ze(t);return n.length<=e?n:`${n.slice(0,e)}\u2026[TRUNCATED:${n.length-e}]`}function ze(t){return G.test(t)||J.test(t)||W.test(t)||Q.test(t)||X.test(t)?"[REDACTED]":t}function V(t){return Array.isArray(t)?`[${t.map(V).join(",")}]`:y(t)?`{${Object.keys(t).sort().map(e=>`${JSON.stringify(e)}:${V(t[e])}`).join(",")}}`:JSON.stringify(t)}function q(t,e){if(t instanceof _)return t;if(t instanceof pe)return new _(t.message,[t.reasonCode],{mutationBlocked:t.mutationBlocked,cause:t});const n=t instanceof Error?t.message:String(t);return new _(`${e} ${n}`,[I.SQLITE_MUTATION_FAILED],{cause:t})}export{g as CONTINUITY_CLIENT_CONTRACT_VERSION,fe as CONTINUITY_CLIENT_PORTAL_SYNC_ENVELOPE_VERSION,I as CONTINUITY_CLIENT_REASON_CODES,S as CONTINUITY_CLIENT_SCHEMA_VERSION,Ze as CONTINUITY_INVOKE_WATCH_DEFAULT_LIMIT,tt as CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_IDLE_POLLS,nt as CONTINUITY_INVOKE_WATCH_DEFAULT_MAX_POLLS,et as CONTINUITY_INVOKE_WATCH_DEFAULT_POLL_INTERVAL_MS,z as CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_LIMIT,ye as CONTINUITY_PROCESSING_SUMMARY_WATCH_DEFAULT_POLL_INTERVAL_MS,Re as ContinuityClientStateStore,_ as ContinuityClientStateStoreError,at as continuitySqliteExists,ot as createContinuityHardStopSnapshot,rt as openContinuityClientStateStore};