Function normalize_last_runtime 

pub fn normalize_last_runtime(raw: &str) -> Result<String, String>

Validate and canonicalise a remembered runtime before it is stored: '' clears; otherwise a JSON object of non-empty strings under the known keys only (permissionMode, model, effort), each bounded. Anything else is rejected, so the column can only ever hold something the launch path knows how to read.