[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","ClaudeAssistant","name","palantir-herald","path","reconciler.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":-5,"_58":42,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/ClaudeAssistant/palantir-herald/code/reconciler.ts","extension","id","1ede9ca2-cacc-4e02-9cfd-719c23b64aea","fileId","fc9bb990-acb4-11f1-836c-1607ee4eb77e","parentId","branchId","cc31caf5-d2e1-4af9-b0dd-bd82fa3e53fe","branchVersion",96,"latest",true,"createdAt",["D",1789173219532],"version",3,"fileType","interval","content","/**\n * THE RECONCILER — the missed-slot reconciler, piece 1 of the cold path (task #220, 10 Sep 2026).\n *\n * The fleet runs on Alexandr's PC. When the machine is off, an agent's slot is skipped and nothing\n * says so — the scheduler's own catch-up is partial (reports/BUILD-cold-path-2026-09-09.md). This\n * interval runs in the val, which is always on. Twice a day, 11:00 and 20:00 Europe/Amsterdam, it\n * reads the roster the desktop last pushed (snapshot.data.fleet.agents), asks the journal which daily\n * agents owed a run and have no line since their due instant, and for the ones it may recover\n * unattended (CATCHUP_OK) it puts one CATCH-UP job on the agent bus, for Rex to run when the desktop\n * next wakes. Nothing else.\n *\n * The pattern is herald-fallback.ts's: a Val Town interval on a coarse UTC cron, a local-time gate\n * doing the real work so summer and winter time both land on the same local hours, deterministic\n * (no model is ever called, so a pass costs nothing), idempotent, and journalling its stand-down.\n *\n * No Telegram message leaves this file. The bus is its only outbound channel; the one reply here is\n * coldPathCommand, which answers a /coldpath Alexandr just typed.\n *\n * The flag is settings key `flag.reconciler`, and \"on\" is the only truthy value. Off — the default —\n * a pass still runs the whole assessment and journals exactly what it would have queued, so the off\n * week is evidence rather than silence. Piece 3 (herald-fallback's line naming who did not run) has\n * its own flag, `flag.herald_names_missing`, and reads namesMissingLine below.\n *\n * Schedule: `0 8-10,17-19 * * *` UTC, set by hand in the Val Town UI (the API cannot read or set it).\n * The gate takes the wake that is 11:00 or 20:00 local; the pass: guard row lets only the first wake\n * inside a window act. Idempotency (Law 6) is one INSERT OR IGNORE on reconciler_log's primary key,\n * claimed before the bus is touched, so a double-fired interval or a lost response can only cost a\n * catch-up, never double one. A forced pass (the route's force:true) gets its own pass key, so it can\n * never take the day's window from the interval; the job: keys are shared, so it cannot double a job.\n * Once the window is claimed, whatever dies is journalled with the step it died at — a pass that\n * throws must never be indistinguishable from a pass that had nothing to say.\n *\n * Mounted by palantir-routes.ts: mountColdPath(app, sqlite, PULL_SECRET, busAuth)\n * GET /coldpath ?secret= → flags, roster, the assessment as of now, last passes. Reads only.\n * POST /coldpath/flag {flag:\"reconciler\"|\"names\", on:true|false} → writes the flag, journals it\n * POST /coldpath/run {window:\"11\"|\"20\", force?, dry?, at?, sink?:\"selftest\", brief_line?} → one pass\n * POST /coldpath/forget {key} | {prefix:\"test:…\"} | {forced:true, date?:\"YYYY-MM-DD\"} → deletes guard\n * rows, journals which. The undo, in three named modes: one real row by its exact\n * key; test rows by prefix (never real rows by prefix); or the forced-pass rows —\n * all of them, or one date's — the only real rows a bulk delete may reach, because\n * ':forced:' occurs in a pass key only and never in a job: key.\n * Bot: /coldpath [reconciler|names on|off] — coldPathCommand, called from palantir-routes' handleCommand.\n * `at` and `sink` are test parameters: `at` is refused unless dry:true or sink:\"selftest\", and every\n * forced, dry or sunk pass says so in its journal summary. palantir-routes.ts imports this file\n * statically (routes must register synchronously); herald-fallback.ts imports it lazily, inside a\n * try, so the rescue brief cannot fail to load because of anything in here.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst EP = Deno.env.get(\"PALANTIR_EP\") ?? \"https://ClaudeAssistant--6922aaa67e8e11f1a5911607ee4eb77e.web.val.run\";\nconst SECRET = Deno.env.get(\"PULL_SECRET\") ?? \"\";\nconst TZ = \"Europe/Amsterdam\";\nconst SOURCE = \"reconciler\";\nconst DAYS = [\"Sun\", \"Mon\", \"Tue\", \"Wed\", \"Thu\", \"Fri\", \"Sat\"];\nconst WINDOWS = [\"11\", \"20\"] as const;\ntype Window = typeof WINDOWS[number];\nconst FLAG_KEY: Record = { reconciler: \"flag.reconciler\", names: \"flag.herald_names_missing\", news: \"flag.news_fetch_val\" };\n\nexport const MAX_PER_PASS = 5; // catch-ups one pass may queue\nexport const MAX_QUEUED = 8; // undrained CATCH-UP jobs already on the bus at which a pass queues nothing more\nexport const MAX_GRACE_H = 24; // a grace at or past the 24 h lookback drop can never produce `missing`: an every-day\n // slot is under 24 h old whenever it is the most recent one, so 24 parks the agent for good\n\n// Mirrors bot-webhook.ts:809-810. GET /agent/jobs re-serves a job that has sat 'running' past this,\n// so a pile of stale catch-ups is a pile Rex will be handed again — exactly what the breaker exists\n// to stop. Not imported: bot-webhook.ts is the HTTP entry and importing it here would run its whole\n// top-level on every interval wake. Change it there, change it here.\nconst STALE_CLAIM_HOURS = 2;\nconst SERVABLE_SQL =\n `(status='queued' OR (status='running' AND COALESCE(claimed_at, ts) < datetime('now','-${STALE_CLAIM_HOURS} hours')))`;\n\n// current id → retired ids, inverted from scripts/check_agent_silence.py's ALIASES. Journal rows\n// written before the 3 Sep 2026 rename carry the old ids; a source is matched by prefix on any of them.\nexport const ALIASES: Record = {\n \"bruno-economist\": [\"economist\", \"coin-counter\"],\n \"nina-news-editor\": [\"news-scribe\"],\n \"mei-archivist\": [\"archivist\"],\n \"kofi-librarian\": [\"loremaster\"],\n \"amara-morning-brief\": [\"morning-herald\"],\n \"priya-dispatcher\": [\"day-forger\"],\n \"rex-runner\": [\"errand-runner\"],\n \"casper-scout\": [\"watcher\"],\n \"yuki-auditor\": [\"steward\"],\n \"bolt-mechanic\": [\"wright\"],\n \"ze-monday-report\": [\"axioma-warden\"],\n \"rosa-friday-toast\": [\"axioma-friday-toast\"],\n};\n\n// Which missed slots are safe to recover unattended, and in which window. This is not a roster —\n// the roster is the snapshot — it answers a different question, and an agent that is missing but not\n// listed here is still named in every journal line and in /coldpath. Reporting is free; acting is not.\n// amara-morning-brief — herald-fallback already covers the morning; a catch-up brief would be a second brief.\n// nina-news-editor — an edition is a Telegram message, so 11:00 only: never a second edition in the evening.\n// yuki-auditor, bolt-mechanic — Bolt commits code; an unattended repair pass on a Monday is a new decision.\n// priya-dispatcher, rex-runner — pollers; Rex draining the queue is the catch-up.\nexport const CATCHUP_OK: Record = {\n \"bruno-economist\": [\"11\", \"20\"],\n \"nina-news-editor\": [\"11\"],\n \"kofi-librarian\": [\"11\", \"20\"],\n \"mei-archivist\": [\"11\", \"20\"],\n \"casper-scout\": [\"11\", \"20\"],\n};\n\nexport async function init(db: any = sqlite) {\n // An interval val does not import bot-webhook.ts, so on a cold instance its tables may not exist yet.\n // Byte-identical to bot-webhook's declaration; whichever runs first wins.\n await db.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY, value TEXT)`);\n // The guard. key is `job::` (one catch-up per agent per missed slot, forever) or\n // `pass::` (one acting pass per window per day — the interval's double-fire guard);\n // a forced pass adds `:forced:` so it never collides with the interval's key, and a\n // self-test prefixes everything with `test:`. The claim is INSERT OR IGNORE on this primary key and nothing else.\n await db.execute(`CREATE TABLE IF NOT EXISTS reconciler_log (\n key TEXT PRIMARY KEY, ts TEXT DEFAULT (datetime('now')), kind TEXT, agent TEXT, due_date TEXT, job_id INTEGER, detail TEXT)`);\n}\n\n// ---------- time ----------\nconst pad = (n: number) => String(n).padStart(2, \"0\");\n\n// Local wall clock in TZ. `wd` is the weekday as Sun=0: the snapshot's schedule.days are cron numbering\n// (Sun=0) and so is JS getDay(), so the index comes from the civil date and never from Intl's weekday name.\nexport function localParts(d: Date) {\n const f = new Intl.DateTimeFormat(\"en-GB\", { timeZone: TZ, hour12: false,\n year: \"numeric\", month: \"2-digit\", day: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\", weekday: \"short\" });\n const p: any = {};\n for (const x of f.formatToParts(d)) p[x.type] = x.value;\n const y = Number(p.year), m = Number(p.month), day = Number(p.day);\n return { y, m, d: day, date: `${p.year}-${p.month}-${p.day}`, hour: Number(p.hour), minute: Number(p.minute),\n weekday: String(p.weekday), wd: new Date(Date.UTC(y, m - 1, day)).getUTCDay(),\n hhmm: `${p.hour}:${p.minute}` };\n}\n\n// Minutes TZ is ahead of UTC at instant d: +120 in summer, +60 in winter. Derived from Intl itself, so\n// nothing here encodes an offset or a switch date. The instant is floored to the minute first — Intl\n// gives no seconds, and 45 s of drift would otherwise round the offset down by a minute.\nexport function offsetMinutes(d: Date): number {\n const base = Math.floor(d.getTime() / 60000) * 60000;\n const p = localParts(new Date(base));\n return Math.round((Date.UTC(p.y, p.m - 1, p.d, p.hour, p.minute) - base) / 60000);\n}\n\n// The UTC instant of a local wall-clock time. Two passes: the offset is read at the target instant, not\n// at `now`, so a slot on the far side of a clock change (the 2-day lookback crosses one twice a year)\n// lands on the right hour.\nexport function localToUtcMs(y: number, m: number, d: number, hour: number, minute: number): number {\n const naive = Date.UTC(y, m - 1, d, hour, minute);\n const guess = naive - offsetMinutes(new Date(naive)) * 60000;\n return naive - offsetMinutes(new Date(guess)) * 60000;\n}\n\n// journal.ts is SQLite's datetime('now'): 'YYYY-MM-DD HH:MM:SS', UTC. It is compared as text, so the\n// shape must match exactly — a 'T' in the wrong place is a silent ordering bug.\nexport function sqlStamp(ms: number): string {\n return new Date(ms).toISOString().slice(0, 19).replace(\"T\", \" \");\n}\n\nconst localStamp = (ms: number) => { const p = localParts(new Date(ms)); return `${p.weekday} ${p.date} ${p.hhmm}`; };\n\n// The dashboard stamp (\"2026-09-10 02:27\") is Amsterdam wall-clock time.\nfunction stampAgeH(stamp: string, now: Date): number | null {\n const m = String(stamp ?? \"\").match(/^(\\d{4})-(\\d\\d)-(\\d\\d)[ T](\\d\\d):(\\d\\d)/);\n if (!m) return null;\n const ms = localToUtcMs(Number(m[1]), Number(m[2]), Number(m[3]), Number(m[4]), Number(m[5]));\n return Math.round((now.getTime() - ms) / 360000) / 10;\n}\n\n// A replay at `at` can be older than the roster it reads; say so rather than print a negative age.\nconst ageText = (h: number | null) => h == null ? \"age unknown\" : h < 0 ? `stamped ${-h} h after this instant` : `${h} h old`;\n\n// ---------- flags ----------\nconst isOn = (v: any) => String(v ?? \"\").trim().toLowerCase() === \"on\";\n\nexport async function readFlags(db: any = sqlite): Promise<{ reconciler: \"on\" | \"off\"; herald_names_missing: \"on\" | \"off\"; news_fetch_val: \"on\" | \"off\" }> {\n const r = await db.execute(\"SELECT key, value FROM settings WHERE key LIKE 'flag.%'\");\n const raw: Record = {};\n for (const row of r.rows as any[]) raw[String(row.key)] = row.value;\n return { reconciler: isOn(raw[FLAG_KEY.reconciler]) ? \"on\" : \"off\",\n herald_names_missing: isOn(raw[FLAG_KEY.names]) ? \"on\" : \"off\",\n news_fetch_val: isOn(raw[FLAG_KEY.news]) ? \"on\" : \"off\" };\n}\n\n// A flag flipped without a receipt is the failure this system keeps relearning: every write journals.\nasync function setFlag(db: any, which: string, on: boolean, by: string) {\n const key = FLAG_KEY[which];\n const value = on ? \"on\" : \"off\";\n await db.execute({ sql: \"INSERT OR REPLACE INTO settings (key, value) VALUES (?, ?)\", args: [key, value] });\n await journal(db, `${key} set to ${value} by ${by}`, `Written to settings by ${by}. \"on\" is the only value that arms it; anything else is off.`);\n return { key, value };\n}\n\nasync function journal(db: any, summary: string, details: string) {\n await db.execute({ sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [SOURCE, summary.slice(0, 400), details.slice(0, 3500)] });\n}\n\n// ---------- the assessment ----------\n// \"Bruno the Economist — live balances…\" → \"Bruno the Economist\". Cut on the shape of the name, not on\n// the dash: the snapshot's text arrives mojibaked, so only ASCII is matched anywhere in this file.\nfunction displayName(a: any): string {\n const m = String(a?.does ?? \"\").match(/\\b([A-Z][^\\s]* the [A-Z][a-z]+(?: [A-Z][a-z]+)*)/);\n return m ? m[1] : String(a?.name ?? \"\");\n}\nconst firstName = (display: string) => display.split(\" \")[0];\n\nconst allowedIn = (agent: string, window: Window | null | undefined) =>\n window == null ? (CATCHUP_OK[agent] ?? []).length > 0 : (CATCHUP_OK[agent] ?? []).includes(window);\n\n// Did the agent (or any of its retired ids) journal between its due instant and now? Prefix match,\n// anchored left: 'casper-scout%' catches 'casper-scout-daily'; 'archivist%' does not catch 'mei-archivist'.\n// The upper bound is what lets a replay at `at` see the journal as it was then. `%` and `_` in an id\n// are escaped so the id is matched as text, never as a pattern (an id of `_` would otherwise match everything).\nconst likePrefix = (id: string) => id.replace(/[\\\\%_]/g, (ch) => \"\\\\\" + ch) + \"%\";\nasync function ranSince(db: any, ids: string[], dueUtc: string, nowUtc: string) {\n const where = ids.map(() => \"source LIKE ? ESCAPE '\\\\'\").join(\" OR \");\n const args: any[] = [dueUtc, nowUtc, ...ids.map(likePrefix)];\n const r = await db.execute({ sql: `SELECT ts, source FROM journal WHERE ts >= ? AND ts <= ? AND (${where}) ORDER BY id LIMIT 1`, args });\n return r.rows.length ? { ts: String((r.rows[0] as any).ts), source: String((r.rows[0] as any).source) } : null;\n}\n\n/** The single implementation of the roster + signal rule, shared with herald-fallback.\n *\n * The roster is snapshot.data.fleet.agents with schedule.kind === \"daily\" — one roster, agents/README.md,\n * one parser, update_dashboard_data.py — and nothing is hard-coded. No usable roster means stand down,\n * never a built-in list. Roster age is reported and never gated on: a week-old roster is still right,\n * and the verdict comes from the journal, which is always live.\n *\n * Per agent: the most recent slot in the last two days (today, else yesterday — a 19:00 slot with a\n * 3 h grace is only ever caught the next morning); a slot older than 24 h is yesterday's audit trail,\n * not today's alarm; `ran` if a journal line exists since the due instant; otherwise `notYetDue` while\n * inside grace (when respectGrace) and `missing` after it. Everything is compared as UTC instants.\n */\nexport async function assess(db: any, now: Date, opts: { respectGrace: boolean; window?: Window | null }) {\n const nowMs = now.getTime();\n const lp = localParts(now);\n const out: any = { ok: false, reason: null as string | null, local: `${lp.weekday} ${lp.date} ${lp.hhmm}`, offsetMin: offsetMinutes(now),\n rosterStamp: \"\", rosterAgeH: null as number | null, agentsTotal: 0, dailyCount: 0,\n owed: [] as string[], ran: [] as any[], missing: [] as any[], notYetDue: [] as any[], paused: [] as string[], skipped: [] as any[], wouldQueue: [] as any[] };\n\n const snapRow = await db.execute(\"SELECT data, stamp FROM snapshot WHERE key='dashboard'\");\n if (!snapRow.rows.length) { out.reason = \"no snapshot: the PC has never pushed one\"; return out; }\n let data: any = null;\n try { data = JSON.parse(String((snapRow.rows[0] as any).data)); } catch { out.reason = \"the snapshot is not JSON\"; return out; }\n out.rosterStamp = String((snapRow.rows[0] as any).stamp ?? data?.generatedAt ?? \"\");\n out.rosterAgeH = stampAgeH(out.rosterStamp, now);\n const fleet = data?.fleet;\n if (fleet?.ok !== true || !Array.isArray(fleet.agents) || !fleet.agents.length) {\n out.reason = \"the snapshot has no usable roster (fleet.ok is not true, or fleet.agents is empty)\"; return out;\n }\n\n // Pause is not a field. Two tests, ASCII only: the watchdog's waiting[] entries whose reason starts\n // with \"paused\", and an uppercase PAUSED in the agent's own description (the README's convention).\n const pausedSet = new Set();\n for (const w of (fleet.watch?.waiting ?? []) as any[]) if (/^paused/i.test(String(w?.why ?? \"\").trim())) pausedSet.add(String(w?.agent ?? \"\"));\n\n for (const a of fleet.agents as any[]) {\n const name = String(a?.name ?? \"\").trim();\n if (!name) continue;\n out.agentsTotal++;\n const s = a?.schedule;\n if (!s || typeof s !== \"object\") { out.skipped.push({ agent: name, why: \"no cron schedule in the roster\" }); continue; }\n if (s.kind === \"poller\") { out.skipped.push({ agent: name, why: \"poller\" }); continue; }\n if (s.kind !== \"daily\") { out.skipped.push({ agent: name, why: `schedule kind ${String(s.kind)}` }); continue; }\n out.dailyCount++;\n if (pausedSet.has(name) || /\\bPAUSED\\b/.test(String(a?.does ?? \"\"))) { out.paused.push(name); continue; }\n const days: number[] = Array.isArray(s.days) ? s.days.map(Number) : [];\n const hour = Number(s.hour), minute = Number(s.minute ?? 0), graceH = Number(s.grace_h ?? 3);\n // Every field the arithmetic below touches is checked here, the same way: a `grace_h` of \"three\"\n // or a `minute` of \"half\" is a malformed roster line to report, not a NaN to throw on later.\n const bad = !days.length || days.some((x) => !Number.isFinite(x)) ? \"days\"\n : !Number.isFinite(hour) || hour < 0 || hour > 23 ? \"hour\"\n : !Number.isFinite(minute) || minute < 0 || minute > 59 ? \"minute\"\n : !Number.isFinite(graceH) || graceH < 0 || graceH >= MAX_GRACE_H ? \"grace_h\" : null;\n if (bad) { out.skipped.push({ agent: name, why: `schedule.${bad} is missing, not a number, or out of range` }); continue; }\n\n let due: { ms: number; date: string; wd: number } | null = null;\n const tried: string[] = [];\n for (const back of [0, 1]) {\n const c = new Date(Date.UTC(lp.y, lp.m - 1, lp.d - back));\n const wd = c.getUTCDay();\n tried.push(DAYS[wd]);\n if (!days.includes(wd)) continue;\n const ms = localToUtcMs(c.getUTCFullYear(), c.getUTCMonth() + 1, c.getUTCDate(), hour, minute);\n if (ms <= nowMs) { due = { ms, date: c.toISOString().slice(0, 10), wd }; break; }\n }\n if (!due) { out.skipped.push({ agent: name, why: `no slot on ${tried.join(\" or \")}` }); continue; }\n if (nowMs - due.ms > 24 * 3600000) { out.skipped.push({ agent: name, why: `last slot (${due.date}) is older than 24 h` }); continue; }\n\n const deadlineMs = due.ms + graceH * 3600000;\n const dueUtc = sqlStamp(due.ms);\n const item = { agent: name, display: displayName(a), due_date: due.date, dueUtc, dueLocal: `${DAYS[due.wd]} ${due.date} ${pad(hour)}:${pad(minute)}`,\n deadlineUtc: sqlStamp(deadlineMs), deadlineLocal: localStamp(deadlineMs), graceH, windows: CATCHUP_OK[name] ?? [] };\n const seen = await ranSince(db, [name, ...(ALIASES[name] ?? [])], dueUtc, sqlStamp(nowMs));\n out.owed.push(name);\n if (seen) out.ran.push({ agent: name, due_date: due.date, dueUtc, seenTs: seen.ts, seenSource: seen.source });\n else if (opts.respectGrace && nowMs < deadlineMs) out.notYetDue.push(item);\n else out.missing.push(item);\n }\n out.wouldQueue = out.missing.filter((m: any) => allowedIn(m.agent, opts.window));\n out.ok = true;\n return out;\n}\n\n// The brief copies the shape of bus job 43 (9 Sep 2026), which Rex has already run. `CATCH-UP ` is the\n// tag the queue-depth breaker counts, and the idempotency sentence is the third independent stop.\nfunction catchUpBrief(w: any): string {\n return `CATCH-UP for ${w.due_date}: ${w.display} did not run (queued by the val's missed-slot reconciler, task #220 — the desktop was not up by ${w.deadlineLocal}). ` +\n `Run the pass that was due ${w.dueLocal} from ${w.agent}'s live prompt and journal it as source ${w.agent} with a note that this was a catch-up run. ` +\n `IDEMPOTENCY (Law 6): first GET $EP/journal and stop if a ${w.agent} line exists with ts >= ${w.dueUtc} (UTC). One Telegram message at most. ` +\n `If the pass cannot run, say exactly which step died in your result — do not retry blind.`;\n}\n\nconst names = (xs: any[]) => xs.map((x) => x.agent ?? x).join(\", \") || \"none\";\n\n/** One pass. The whole decision as an object, so POST /coldpath/run can prove the same code path the\n * interval runs. dry: assess only, nothing written anywhere. force: skip the local-hour gate (the\n * route's caller chose the window). sink \"selftest\": jobs go to agent `reconciler-selftest`, which\n * nothing claims, and every guard key is prefixed `test:`. */\nexport async function reconcileOnce(o: { window: Window; now?: Date; dry?: boolean; force?: boolean; sink?: string; db?: any }) {\n const db = o.db ?? sqlite;\n await init(db);\n const window = o.window;\n const now = o.now ?? new Date();\n const lp = localParts(now);\n const test = o.sink === \"selftest\";\n const prefix = test ? \"test:\" : \"\";\n // The lane this pass writes to — and the only lane its breaker reads. Rex claims rex-runner (and\n // errand-runner) and nothing claims reconciler-selftest, so a self-test's rows stay queued until the\n // tester closes them; counted against the real lane they would have stood the reconciler down for good.\n const busAgent = test ? \"reconciler-selftest\" : \"rex-runner\";\n const marks = [o.force ? \"forced\" : \"\", o.dry ? \"dry\" : \"\", test ? \"SELFTEST\" : \"\", o.now ? `at ${now.toISOString()}` : \"\"].filter(Boolean);\n const tag = marks.length ? ` [${marks.join(\", \")}]` : \"\";\n const base: any = { ok: true, window, local: `${lp.weekday} ${lp.date} ${lp.hhmm}`, forced: !!o.force, dry: !!o.dry, sink: test ? \"selftest\" : null, at: o.now ? now.toISOString() : null };\n\n // A dry pass is the assessment alone: nothing is claimed, queued or journalled.\n if (o.dry) {\n const a = await assess(db, now, { respectGrace: true, window });\n return { ...base, flag: (await readFlags(db)).reconciler, writes: \"none\", would_queue: a.wouldQueue.map((w: any) => ({ agent: busAgent, for: w.agent, brief: catchUpBrief(w) })), assessment: a };\n }\n\n // Law 6: the window is claimed with one statement before anything else happens. The interval's key is\n // pass:: — one per window per day, its double-fire guard. A forced pass is a deliberate\n // act and gets its own key, stamped with the wall clock: it can never take the day's window from the\n // interval (which would then journal nothing for that day), and it never refuses a second forced run.\n // The job: keys are shared, so a forced pass still cannot double a catch-up.\n const passKey = o.force\n ? `${prefix}pass:${lp.date}:${window}:forced:${new Date().toISOString().replace(/[-:.]/g, \"\")}`\n : `${prefix}pass:${lp.date}:${window}`;\n const claim = await db.execute({ sql: \"INSERT OR IGNORE INTO reconciler_log (key, kind, agent, due_date, detail) VALUES (?,?,?,?,?)\",\n args: [passKey, \"pass\", null, lp.date, `window ${window}:00${tag}`] });\n if ((claim.rowsAffected ?? 0) === 0) return { ...base, skipped: \"pass already recorded\", pass_key: passKey };\n\n // From here the window is spent. Whatever dies below is journalled with the step it died at: a pass\n // that throws must never be indistinguishable from a pass that had nothing to say.\n // Hoisted out of the try so the death receipt can name what did reach the bus before the throw.\n // The job that threw is precisely the one whose guard row never got its job_id, so this array is\n // the only surviving record of it.\n const queued: any[] = [], guardKeys: string[] = [];\n let step = \"reading the flags\";\n try {\n const flags = await readFlags(db);\n step = \"assessing the roster against the journal\";\n const a = await assess(db, now, { respectGrace: true, window });\n const head = `Window ${window}:00 ${TZ}, ${a.local}.`;\n const roster = a.ok ? ` Roster: ${a.dailyCount} daily agents of ${a.agentsTotal} from snapshot fleet.agents (stamp ${a.rosterStamp || \"none\"}, ${ageText(a.rosterAgeH)}).` : \"\";\n const foot = ` Signal: journal rows with ts between each agent's due instant and now, source matched by prefix and alias. No model called.${tag}`;\n\n if (!a.ok) {\n step = \"journalling the stand-down\";\n await journal(db, `stood down — ${a.reason}${tag}`, `${head} ${a.reason}. Nothing was written to the bus and no roster was assumed.${foot}`);\n return { ...base, flag: flags.reconciler, queued: 0, journalled: 1, stood_down: a.reason, pass_key: passKey };\n }\n const picture = ` Missing past grace: ${names(a.missing)}. Ran: ${names(a.ran)}. Still inside grace: ${names(a.notYetDue)}. Paused: ${a.paused.join(\", \") || \"none\"}.` +\n ` Not covered: ${a.skipped.map((s: any) => `${s.agent} (${s.why})`).join(\"; \") || \"none\"}.`;\n\n if (flags.reconciler !== \"on\") {\n const would = a.wouldQueue.map((w: any) => w.agent);\n step = \"journalling the stand-down\";\n await journal(db, `stood down — flag off (would have queued ${would.length}${would.length ? \": \" + would.join(\", \") : \"\"})${tag}`,\n `${head} flag.reconciler is off, so nothing was written to the bus.${roster}${picture}${foot}`);\n return { ...base, flag: \"off\", queued: 0, journalled: 1, pass_key: passKey, would_queue: would, assessment: a };\n }\n\n // The breaker. A week away with the PC off would otherwise queue ~8 catch-ups a day, most of them for\n // days already spent. Undrained means the desktop has not been up; while that holds, stop adding.\n // Undrained is what GET /agent/jobs would still hand Rex — queued, or claimed and stale (SERVABLE_SQL).\n // Counted in this pass's own lane only: what Rex will drain is rex-runner's queue, and a self-test's\n // rows in reconciler-selftest must never stand the real pass down (nor be ignored by a self-test).\n step = \"counting undrained catch-ups on the bus\";\n const depth = await db.execute({ sql: `SELECT COUNT(*) AS n FROM agent_jobs WHERE agent = ? AND ${SERVABLE_SQL} AND brief LIKE 'CATCH-UP %'`, args: [busAgent] });\n const undrained = Number((depth.rows[0] as any)?.n ?? 0);\n if (undrained >= MAX_QUEUED) {\n step = \"journalling the stand-down\";\n await journal(db, `stood down — the bus already holds ${undrained} undrained catch-ups for ${busAgent}${tag}`,\n `${head} ${undrained} CATCH-UP jobs for ${busAgent} would still be served by GET /agent/jobs (queued, or claimed and stale past ${STALE_CLAIM_HOURS} h) (limit ${MAX_QUEUED}): the desktop has not drained them; not adding more. Would have queued: ${names(a.wouldQueue)}.${roster}${picture}${foot}`);\n return { ...base, flag: \"on\", queued: 0, journalled: 1, breaker: undrained, lane: busAgent, pass_key: passKey, would_queue: a.wouldQueue.map((w: any) => w.agent), assessment: a };\n }\n\n step = \"claiming job keys and posting to the bus\";\n const todo = a.wouldQueue.slice(0, MAX_PER_PASS);\n const deferred = a.wouldQueue.slice(MAX_PER_PASS).map((w: any) => w.agent);\n const skippedExisting: string[] = [], failed: any[] = [];\n for (const w of todo) {\n // The job key is claimed first. If the bus POST then fails, the row stays and no job exists — a\n // missed catch-up, undone by POST /coldpath/forget. The reverse order risks a doubled job, which is not.\n const jobKey = `${prefix}job:${w.due_date}:${w.agent}`;\n const r = await db.execute({ sql: \"INSERT OR IGNORE INTO reconciler_log (key, kind, agent, due_date, detail) VALUES (?,?,?,?,?)\",\n args: [jobKey, \"job\", w.agent, w.due_date, `claimed in window ${window}:00${tag}`] });\n if ((r.rowsAffected ?? 0) === 0) { skippedExisting.push(w.agent); continue; }\n guardKeys.push(jobKey);\n let detail = \"\", jobId: number | null = null;\n try {\n const resp = await fetch(`${EP}/agent/job?secret=${encodeURIComponent(SECRET)}`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify({ agent: busAgent, brief: catchUpBrief(w), packs: [] }) });\n const j: any = await resp.json().catch(() => null);\n if (resp.ok && j?.ok && j.id != null) {\n jobId = Number(j.id);\n // The bus warns on every catch-up (findJobTwin sees last week's run of the same agent) and inserts\n // anyway. It is recorded, never retried: a warning on the first catch-up of a day means the guard leaked.\n const dup = j.duplicate_warning ? { job: j.duplicate_warning.job, status: j.duplicate_warning.status } : null;\n detail = `job ${jobId} → ${busAgent}${dup ? `; duplicate_warning: job ${dup.job} (${dup.status})` : \"\"}`;\n queued.push({ agent: w.agent, job_id: jobId, duplicate_warning: dup });\n } else {\n detail = `bus POST answered ${resp.status}: ${JSON.stringify(j ?? null).slice(0, 160)}`;\n failed.push({ agent: w.agent, key: jobKey, error: detail });\n }\n } catch (e) {\n detail = `bus POST failed: ${String(e).slice(0, 160)}`;\n failed.push({ agent: w.agent, key: jobKey, error: detail });\n }\n await db.execute({ sql: \"UPDATE reconciler_log SET job_id=?, detail=? WHERE key=?\", args: [jobId, detail, jobKey] });\n }\n\n step = \"journalling the result\";\n const notListed = a.missing.filter((m: any) => !allowedIn(m.agent, window)).map((m: any) => m.agent);\n const summary = queued.length\n ? `queued ${queued.length} catch-up${queued.length === 1 ? \"\" : \"s\"}: ${queued.map((q) => `${q.agent} (job ${q.job_id})`).join(\", \")}`\n : a.missing.length ? `nothing queued — missing: ${names(a.missing)}` : \"nothing to queue — everyone who owed a run has reported\";\n await journal(db, `${summary}${tag}`,\n `${head}${roster} Queued: ${queued.map((q) => `${q.agent} → job ${q.job_id}${q.duplicate_warning ? \" (duplicate_warning)\" : \"\"}`).join(\", \") || \"none\"}.` +\n ` Already claimed by an earlier pass: ${skippedExisting.join(\", \") || \"none\"}. Bus failures: ${failed.map((f) => `${f.agent}: ${f.error}`).join(\"; \") || \"none\"}.` +\n ` Deferred over the ${MAX_PER_PASS}-per-pass cap: ${deferred.join(\", \") || \"none\"}. Missing but not on the catch-up list for this window: ${notListed.join(\", \") || \"none\"}.${picture}${foot}`);\n return { ...base, flag: \"on\", queued: queued.length, job_ids: queued.map((q) => q.job_id), jobs: queued, guard_keys: guardKeys, lane: busAgent,\n skipped_existing: skippedExisting.length, skipped_existing_agents: skippedExisting, failed, deferred, not_listed: notListed, journalled: 1, pass_key: passKey, assessment: a };\n } catch (e) {\n // The window is claimed and the pass died. Write the receipt that says so, with the step, and mark\n // the pass row; if even the receipt cannot be written, rethrow so Val Town's own run log shows red.\n const error = String(e).slice(0, 300);\n const reached = queued.length\n ? `${queued.length} catch-up${queued.length === 1 ? \"\" : \"s\"} had already been posted to the bus by this pass and stand: `\n + `${queued.map((q) => `${q.agent} (job ${q.job_id})`).join(\", \")} — their guard rows exist, so nothing re-queues them`\n : \"nothing was written to the bus by it\";\n try {\n await journal(db, `pass DIED while ${step}: ${error.slice(0, 160)}${tag}`,\n `Window ${window}:00 ${TZ}, ${lp.weekday} ${lp.date} ${lp.hhmm}. The pass row ${passKey} was claimed, then the pass threw while ${step}; nothing after that step ran, and ${reached}. ${String((e as any)?.stack ?? e).slice(0, 900)} No model called.${tag}`);\n await db.execute({ sql: \"UPDATE reconciler_log SET detail = COALESCE(detail, '') || ? WHERE key = ?\", args: [` — DIED while ${step}`, passKey] });\n } catch { throw e; }\n return { ...base, ok: false, died: step, error, journalled: 1, pass_key: passKey,\n queued: queued.length, jobs: queued, job_ids: queued.map((q) => q.job_id), guard_keys: guardKeys };\n }\n}\n\n/** Piece 3 — the lite brief's one line about the desktop, behind flag.herald_names_missing. null when the\n * flag is off, so herald-fallback's message is unchanged until it is switched on. Grace is not respected\n * here: at 08:30 every morning agent is still inside grace, so the honest question is \"due earlier today\n * and no line yet\". Amara is left out because the brief's first line already says she did not run. Nothing\n * is claimed \"queued\" — at 08:30 the 11:00 window has not run. */\nexport async function namesMissingLine(db: any, now: Date, o: { preview?: boolean } = {}): Promise {\n await init(db);\n const flags = await readFlags(db);\n if (flags.herald_names_missing !== \"on\" && !o.preview) return null;\n const a = await assess(db, now, { respectGrace: false, window: \"11\" });\n if (!a.ok) return null;\n const today = localParts(now).date;\n const missing = a.missing.filter((m: any) => m.due_date === today && m.agent !== \"amara-morning-brief\");\n if (!missing.length) return \"• Every agent that owed a run this morning has reported.\";\n const bold = missing.map((m: any) => `*${firstName(m.display)}*`).join(\", \");\n if (flags.reconciler !== \"on\") return `• Not run today: ${bold} — no catch-up is queued (the reconciler is off).`;\n const q = missing.filter((m: any) => m.windows.includes(\"11\"));\n if (q.length === missing.length) return `• Not run today: ${bold} — the reconciler queues catch-up at 11:00.`;\n if (!q.length) return `• Not run today: ${bold} — not on the reconciler's catch-up list.`;\n return `• Not run today: ${bold} — the reconciler queues catch-up at 11:00 for ${q.map((m: any) => `*${firstName(m.display)}*`).join(\", \")}.`;\n}\n\n// ---------- the interval ----------\nexport default async function (_interval: { lastRunAt?: Date }) {\n const lp = localParts(new Date());\n // The gate. The cron is a UTC band (08–10 and 17–19); only the wake that is 11:00 or 20:00 local acts,\n // and a pass outside the window writes nothing at all.\n const window: Window | null = lp.hour === 11 ? \"11\" : lp.hour === 20 ? \"20\" : null;\n if (!window) return;\n return await reconcileOnce({ window });\n}\n\n// ---------- the bot command ----------\nconst esc = (s: any) => String(s ?? \"\").replace(/[_*`\\[]/g, (m) => \"\\\\\" + m); // Telegram Markdown v1\n\n// Which window's rule the status applies. \"Any window\" would list Nina at 20:30 although the 20:00 pass\n// rightly declined her (11:00 only). Before 11:00 the 11:00 pass is next; from then on the 20:00 rule\n// holds — and after 20:00 the label says the day's passes are done, so the list reads as a rule, not a promise.\nexport function statusWindow(lp: { hour: number }): { window: Window; label: string } {\n if (lp.hour < 11) return { window: \"11\", label: \"the 11:00 pass\" };\n if (lp.hour < 20) return { window: \"20\", label: \"the 20:00 pass\" };\n return { window: \"20\", label: \"the 20:00 rule (today's passes are done; tomorrow's 11:00 drops slots older than a day)\" };\n}\n\n// Which of the missing already have a catch-up claimed. An agent stays \"missing\" until Rex has run the\n// job and journalled, so without this the status would look as if the reconciler had done nothing.\nasync function claimedFor(db: any, missing: any[]): Promise<{ agent: string; job_id: number | null; detail: string }[]> {\n if (!missing.length) return [];\n const keys = missing.map((m: any) => `job:${m.due_date}:${m.agent}`);\n const r = await db.execute({ sql: `SELECT agent, job_id, detail FROM reconciler_log WHERE key IN (${keys.map(() => \"?\").join(\",\")})`, args: keys });\n return (r.rows as any[]).map((x) => ({ agent: String(x.agent), job_id: x.job_id == null ? null : Number(x.job_id), detail: String(x.detail ?? \"\") }));\n}\n\n// The assessment as the status pages show it; the reply must still say something when it throws.\nasync function statusAssessment(db: any, now: Date) {\n const lp = localParts(now);\n const sw = statusWindow(lp);\n let a: any;\n try { a = await assess(db, now, { respectGrace: true, window: sw.window }); }\n catch (e) { a = { ok: false, reason: `the assessment threw: ${String(e).slice(0, 160)}`, local: `${lp.weekday} ${lp.date} ${lp.hhmm}`, missing: [] }; }\n const claimed = a.ok ? await claimedFor(db, a.missing) : [];\n return { a, sw, claimed };\n}\n\nasync function statusText(db: any): Promise {\n const now = new Date();\n const flags = await readFlags(db);\n const { a, sw, claimed } = await statusAssessment(db, now);\n const L: string[] = [\"🧊 *The cold path*\"];\n L.push(`• Missed-slot reconciler: *${flags.reconciler}* — \\`/coldpath reconciler ${flags.reconciler === \"on\" ? \"off\" : \"on\"}\\``);\n L.push(`• Names in the lite brief: *${flags.herald_names_missing}* — \\`/coldpath names ${flags.herald_names_missing === \"on\" ? \"off\" : \"on\"}\\``);\n L.push(`• News fetch (val): *${flags.news_fetch_val}* — \\`/coldpath news ${flags.news_fetch_val === \"on\" ? \"off\" : \"on\"}\\``);\n L.push(\"\");\n if (!a.ok) {\n L.push(`*As of ${esc(a.local)}:* ${esc(a.reason)} — the reconciler stands down and queues nothing.`);\n } else {\n L.push(`*As of ${esc(a.local)}* _(roster: ${a.dailyCount} daily agents, snapshot ${ageText(a.rosterAgeH)})_`);\n // Three headers over the claimed rows, each true of what follows it. job_id is written by the UPDATE\n // that runs after the bus has answered (the loop in reconcileOnce), so a row with no job_id is one of\n // two things, and its detail says which. `bus POST failed: …` or `bus POST answered `: the\n // bus refused or never got the request, no job was made, and forgetting the key is the documented undo\n // (the claim-first order in that loop). Anything else — `claimed in window …` left untouched because\n // the pass died (or is still running) between its POST and the UPDATE, or a 2xx whose body carried no\n // id — may have a live job on the bus that Rex will find. That row is never told to be forgotten here:\n // a forgotten key is re-claimed by the next pass, which posts a second CATCH-UP for the same agent and\n // day — the doubled job the claim-first order exists to prevent, and the guard row is its primary stop.\n const noJobMade = (detail: string) => /^bus POST (failed:|answered [^2])/.test(detail);\n const onBus = claimed.filter((c) => c.job_id != null);\n const postFailed = claimed.filter((c) => c.job_id == null && noJobMade(c.detail));\n const unrecorded = claimed.filter((c) => c.job_id == null && !noJobMade(c.detail));\n L.push(a.missing.length\n ? `• Owed a run, no line, past grace: ${a.missing.map((m: any) => `*${esc(firstName(m.display))}*`).join(\", \")} — on the catch-up list for ${esc(sw.label)}: ${a.wouldQueue.length ? esc(names(a.wouldQueue)) : \"none of them\"}` +\n (onBus.length ? `; already on the bus: ${esc(onBus.map((c) => `${c.agent} (job ${c.job_id})`).join(\", \"))}` : \"\") +\n (postFailed.length ? `; bus POST refused or unreachable, no job made: ${esc(postFailed.map((c) => c.agent).join(\", \"))} (forget the guard key to let it queue again)` : \"\") +\n (unrecorded.length ? `; claimed, outcome not recorded: ${esc(unrecorded.map((c) => c.agent).join(\", \"))} (the job may be on the bus — find it on GET /agent/status before touching the guard row)` : \"\")\n : \"• Everyone who owed a run has reported.\");\n if (a.notYetDue.length) L.push(`• Still inside grace: ${esc(a.notYetDue.map((m: any) => firstName(m.display)).join(\", \"))}`);\n if (a.paused.length) L.push(`• Paused: ${esc(a.paused.join(\", \"))}`);\n }\n const last = await db.execute({ sql: \"SELECT ts, summary FROM journal WHERE source=? ORDER BY id DESC LIMIT 4\", args: [SOURCE] });\n if (last.rows.length) {\n L.push(\"\");\n L.push(\"*Last passes* _(UTC)_\");\n for (const r of last.rows as any[]) L.push(`• ${esc(String(r.ts).slice(5, 16))} — ${esc(String(r.summary).slice(0, 140))}`);\n }\n return L.join(\"\\n\").slice(0, 3900);\n}\n\n/** /coldpath → both flags and the assessment as of now. /coldpath reconciler|names on|off → writes the\n * flag, journals it, confirms in one line. Private chats are owner-gated before this is reached. */\nexport async function coldPathCommand(db: any, chatId: number, text: string, send: (chatId: number, text: string, kind?: string) => Promise): Promise {\n const m = String(text ?? \"\").trim().match(/^\\/coldpath(?:@\\w+)?(?:\\s+(.*?))?\\s*$/i);\n if (!m) return false;\n await init(db);\n const args = String(m[1] ?? \"\").trim();\n if (!args) { await send(chatId, await statusText(db), \"command\"); return true; }\n const w = args.match(/^(reconciler|names|news)\\s+(on|off)$/i);\n if (!w) { await send(chatId, \"Usage: `/coldpath` · `/coldpath reconciler on|off` · `/coldpath names on|off` · `/coldpath news on|off`\", \"command\"); return true; }\n const which = w[1].toLowerCase(), on = w[2].toLowerCase() === \"on\";\n const label = which === \"reconciler\" ? \"The missed-slot reconciler\" : which === \"names\" ? \"Naming who did not run in the lite brief\" : \"The news-fetch val\";\n await setFlag(db, which, on, \"/coldpath\");\n await send(chatId, on\n ? `✅ ${label} is now *on*. Undo: \\`/coldpath ${which} off\\`. \\`/coldpath\\` shows what it sees.`\n : `⏹ ${label} is now *off*.`, \"command\");\n return true;\n}\n\n// ---------- the routes ----------\nexport function mountColdPath(app: any, db: any, PULL_SECRET: string, busAuth: any) {\n const ready = init(db);\n const auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n\n app.get(\"/coldpath\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const now = new Date();\n const flags = await readFlags(db);\n const { a, sw, claimed } = await statusAssessment(db, now);\n // A forced pass is a test or a hand-run, never the schedule. Twenty of them hide the interval's own\n // rows, which are the ones this list exists to show. Counted, never silently dropped.\n const last = await db.execute(\n \"SELECT key, ts, kind, agent, due_date, job_id, detail FROM reconciler_log WHERE instr(key, ':forced:') = 0 ORDER BY ts DESC, key DESC LIMIT 20\");\n const forcedN = await db.execute(\"SELECT COUNT(*) AS n FROM reconciler_log WHERE instr(key, ':forced:') > 0\");\n const lines = await db.execute({ sql: \"SELECT id, ts, summary FROM journal WHERE source=? ORDER BY id DESC LIMIT 10\", args: [SOURCE] });\n return c.json({ ok: true, now: now.toISOString(), local: a.local, flags,\n roster: { ok: a.ok, reason: a.reason, stamp: a.rosterStamp, ageHours: a.rosterAgeH, dailyCount: a.dailyCount, agents: a.agentsTotal },\n // wouldQueue is what the named window's rule would queue from today's missing — a rule, not a promise.\n assessment: { window: sw.window, windowLabel: sw.label, owed: a.owed, ran: a.ran, missing: a.missing, notYetDue: a.notYetDue, paused: a.paused, skipped: a.skipped, wouldQueue: a.wouldQueue, claimed },\n limits: { MAX_PER_PASS, MAX_QUEUED, MAX_GRACE_H }, catchupOk: CATCHUP_OK, lastPasses: last.rows, forcedPasses: Number((forcedN.rows[0] as any)?.n ?? 0), lastJournal: lines.rows });\n });\n\n app.post(\"/coldpath/flag\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const which = String(b.flag ?? \"\");\n if (!FLAG_KEY[which]) return c.json({ ok: false, error: 'flag must be \"reconciler\", \"names\" or \"news\"' }, 400);\n if (typeof b.on !== \"boolean\") return c.json({ ok: false, error: \"on must be true or false\" }, 400);\n const w = await setFlag(db, which, b.on, \"POST /coldpath/flag\");\n return c.json({ ok: true, ...w, flags: await readFlags(db) });\n });\n\n // The same code path the interval runs, on demand — the schedule cannot be read from any API, so the\n // proof that the reconciler works is a pass with a recorded decision, not a deploy that returned 200.\n app.post(\"/coldpath/run\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const window = String(b.window ?? \"\");\n if (!(WINDOWS as readonly string[]).includes(window)) return c.json({ ok: false, error: 'window must be \"11\" or \"20\"' }, 400);\n const dry = b.dry === true, force = b.force === true;\n if (b.sink !== undefined && b.sink !== \"selftest\") return c.json({ ok: false, error: 'sink may only be \"selftest\"' }, 400);\n let at: Date | undefined;\n if (b.at !== undefined) {\n // A production pass may never be told what time it is.\n if (!dry && b.sink !== \"selftest\") return c.json({ ok: false, error: 'at is a test parameter: pass dry:true or sink:\"selftest\" with it' }, 400);\n at = new Date(String(b.at));\n if (isNaN(at.getTime())) return c.json({ ok: false, error: \"at is not a date\" }, 400);\n }\n const now = at ?? new Date();\n if (!dry && !force && localParts(now).hour !== Number(window)) {\n return c.json({ ok: true, skipped: `outside the ${window}:00 window`, local: localStamp(now.getTime()), hint: \"force:true runs it anyway\" });\n }\n const res: any = await reconcileOnce({ window: window as Window, now: at, dry, force, sink: b.sink, db });\n if (b.brief_line === true) res.brief_line = await namesMissingLine(db, now, { preview: true });\n return c.json(res);\n });\n\n // The undo for guard rows, in three named modes: one real row by its exact key; test rows by prefix;\n // or the forced-pass rows ({forced:true}, optionally one date's). A prefix delete can reach test rows\n // only: {\"prefix\":\"job:\"} or {\"prefix\":\"pass\"} would empty the whole guard table in one call and let\n // the next pass re-queue every catch-up it holds. The forced mode is a named mode, not a loosened\n // prefix rule: ':forced:' occurs only in a pass key (built in reconcileOnce), never in a job: key, so\n // it can never reach a row whose deletion would re-queue a catch-up. Real job rows go one at a time, by key.\n app.post(\"/coldpath/forget\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const key = b.key === undefined ? \"\" : String(b.key), prefix = b.prefix === undefined ? \"\" : String(b.prefix);\n const forced = b.forced === true, date = b.date === undefined ? \"\" : String(b.date);\n const modes = [key ? \"key\" : \"\", prefix ? \"prefix\" : \"\", forced ? \"forced\" : \"\"].filter(Boolean);\n if (modes.length > 1) return c.json({ ok: false, error: `one mode only, not ${modes.join(\" and \")}: key, prefix, or forced:true` }, 400);\n if (!modes.length) return c.json({ ok: false, error: 'key (one real row, exact), prefix (test rows only: must start with \"test:\"), or forced:true (the forced-pass rows; add date:\"YYYY-MM-DD\" for one day)' }, 400);\n if (prefix && !prefix.startsWith(\"test:\")) return c.json({ ok: false, error: 'a prefix delete is for test rows only: the prefix must start with \"test:\"; delete a real row by its exact key' }, 400);\n if (date && !forced) return c.json({ ok: false, error: \"date goes with forced:true only\" }, 400);\n if (date && !/^\\d{4}-\\d\\d-\\d\\d$/.test(date)) return c.json({ ok: false, error: \"date must be YYYY-MM-DD\" }, 400);\n // substr and instr, not LIKE: a prefix must never be a pattern.\n const where = key ? { sql: \"key = ?\", args: [key] as any[] }\n : prefix ? { sql: \"substr(key, 1, ?) = ?\", args: [prefix.length, prefix] as any[] }\n : { sql: `kind = 'pass' AND instr(key, ':forced:') > 0${date ? \" AND due_date = ?\" : \"\"}`, args: (date ? [date] : []) as any[] };\n const rows = (await db.execute({ sql: `SELECT key FROM reconciler_log WHERE ${where.sql}`, args: where.args })).rows as any[];\n const keys = rows.map((r) => String(r.key));\n if (keys.length) {\n await db.execute({ sql: `DELETE FROM reconciler_log WHERE ${where.sql}`, args: where.args });\n const what = key ? \"key \" + key : prefix ? \"prefix \" + prefix : `forced passes${date ? \", \" + date : \"\"}`;\n const effect = forced ? \"Forced pass rows only; every job: guard row is untouched, so this re-queues no catch-up.\"\n : \"The slots they guarded can be queued again.\";\n await journal(db, `forgot ${keys.length} guard row${keys.length === 1 ? \"\" : \"s\"} (${what})`,\n `Deleted from reconciler_log by POST /coldpath/forget: ${keys.join(\", \")}. ${effect}`);\n }\n return c.json({ ok: true, deleted: keys });\n });\n}\n","deleted",false,"label",[14],"8754a5f7-f359-4e36-abb1-c12689a1658c",["D",1783928553221],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Palantír Herald — Telegram capture + pings","imageUrl","userId","3ed96798-6351-4c0c-a152-1db6ab7640c9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f5a68-d0b6-75de-80af-2b23ea5ed456","tursoName","8754a5f7f3594e36abb1c12689a1658c","tursoHostname","8754a5f7f3594e36abb1c12689a1658c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",100,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Alexandr Stakhov","avatar","https://lh3.googleusercontent.com/a/ACg8ocKCA_6NlmBdn2fDI25kVPZAGM3tPMEmD7U1Na63L8rtZj8kBQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]