[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_102":103,"_104":105},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mosadek","name","chat-unproven-activation-guard-a2","path","kernel.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":-5,"_58":42,"_59":-5,"_60":-5,"_61":36,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/mosadek/chat-unproven-activation-guard-a2/code/kernel.ts","extension","id","2a4b725a-5337-4de0-a7a9-396a400e6a99","fileId","c75ec606-abc3-11f1-93f6-1607ee4eb77e","parentId","branchId","4581412f-a0c5-4175-81fd-0dd7337e347e","branchVersion",1,"latest",true,"createdAt",["D",1788899277694],"version",0,"fileType","script","content","import { sqlite as rootSqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\",\"migrate-task-invariants\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nconst CHAT_UNPROVEN_PROTOCOL_V4_ACTIVATION_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908\";\nasync function chatUnprovenProtocolV4Activation(){\n const t:any=await one(`SELECT state,result_event_id FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_PROTOCOL_V4_ACTIVATION_TASK]);\n if(!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return{active:false,reason:\"ACTIVATION_TASK_NOT_AUTHORIZED_COMPLETE\"};\n const localSeq=Number(t.result_event_id)-PREDECESSOR_EVENTS;\n if(!Number.isInteger(localSeq)||localSeq<1)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_INVALID\"};\n const ev:any=await one(`SELECT agent_id,type FROM ${P}epoch_events WHERE local_seq=?`,[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||!ev.agent_id)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_MISSING\"};\n const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[String(ev.agent_id)]);\n if(!a||String(a.type)===\"CHAT_UNPROVEN\")return{active:false,reason:\"CIRCULAR_CHAT_UNPROVEN_ACTIVATION_FORBIDDEN\",activator_agent_id:String(ev.agent_id)};\n return{active:true,reason:null,activator_agent_id:String(ev.agent_id),activator_type:String(a.type)};\n}\nasync function requireChatUnprovenProtocolV4Active(){\n const a:any=await chatUnprovenProtocolV4Activation();\n return a.active===true?null:{ok:false,reason:\"CHAT_UNPROVEN_PROTOCOL_V4_NOT_ACTIVE\",activation:a,activation_task_id:CHAT_UNPROVEN_PROTOCOL_V4_ACTIVATION_TASK,generation:await generation()};\n}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n for(const r of q.rows||[]){\n if(!r.dedupe_key)continue;if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId)continue;\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n if(ctx.execution_allowed===false)continue;if(unproven&&unprovenIndependenceSensitive(req,ctx))continue;if([...req].some(x=>NON_AGENT.has(x)))continue;if([...req].some(x=>!C.has(x)))continue;\n if(!await depsSatisfied(r)||!await guardsSatisfied(r,agentId)||await writeConflict(r))continue;return r\n }return null\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nasync function register(args:string[]){\n if(args.length<2)throw new Error(\"REGISTER_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),role=String(f.role||\"\"),type=String(f.type||\"\"),parent=f.parent??null,caps=cleanCaps(parseJson(f.capabilities||\"[]\",\"CAPS\"));\n if(!ws||!role||!type)throw new Error(\"REGISTER_FIELDS_REQUIRED\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(type===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenProtocolV4Active();if(blocked)return blocked}\n if(parent){if(String(parent)===id)throw new Error(\"AGENT_CANNOT_PARENT_SELF\");const pr:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[parent]);if(!pr)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(String(pr.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_PARENT\")}\n const ex:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(ex){const same=String(ex.workstream)===ws&&String(ex.role)===role&&String(ex.type)===type&&(ex.parent_id??null)===(parent??null)&&String(ex.capabilities_json)===canon(caps);if(!same)throw new Error(\"AGENT_REJOIN_IDENTITY_MISMATCH\");await sqlite.execute({sql:`UPDATE ${P}agents SET last_seen=? WHERE id=?`,args:[now(),id]});return{ok:true,created:false,agent_id:id,generation:await generation()}}\n const g0=await generation();await sqlite.execute({sql:`INSERT INTO ${P}agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES(?,?,?,?,?,'READY',?,?,?,?)`,args:[id,parent,type,ws,role,g0,g0,now(),canon(caps)]});await appendEvent(ws,id,null,\"AGENT_REGISTERED\",{type,role,parent,boot_generation:g0,capabilities:caps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=? WHERE id=?`,args:[ng,id]});return{ok:true,created:true,agent_id:id,generation:ng}\n}\nasync function ensureTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");if(!ws||!dedupe)throw new Error(\"ENSURE_FIELDS_REQUIRED\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));\n if(!Array.isArray(deps)||!ctx||Array.isArray(ctx)||!Array.isArray(req))throw new Error(\"BAD_JSON_SHAPE\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing)return{ok:true,created:false,task_id:existing.id,state:existing.state,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe};\n if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority);if(!Number.isFinite(priority))throw new Error(\"BAD_PRIORITY\");\n await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,NULL,NULL,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,canon(writes),canon(guards)]});\n await appendEvent(ws,f.agent??null,id,\"TASK_CREATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe}\n}\nasync function claim(args:string[]){\n const f=flags(args,1),id=String(f.agent||\"\"),mode=String(f.mode||\"INTERACTIVE\"),secs=f[\"lease-seconds\"]===undefined?(mode===\"INTERACTIVE\"?1800:900):Number(f[\"lease-seconds\"]);if(!id)throw new Error(\"AGENT_REQUIRED\");if(![\"INTERACTIVE\",\"PROCESS\"].includes(mode)||secs<60||secs>7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");const g0=await generation();if(String(ag.type)===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenProtocolV4Active();if(blocked)return blocked}const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task===CHAT_UNPROVEN_PROTOCOL_V4_ACTIVATION_TASK){const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agent]);if(String(a?.type||\"\")===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenProtocolV4Active();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\"}}}if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_PROTOCOL_V4_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenProtocolV4Active();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,claim_id:id,statement_sha256:h,generation:ng}\n}\nasync function invalidateClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),reason=String(f.reason||\"\"),agent=f.agent??null;const root:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[id]);if(!root)throw new Error(\"UNKNOWN_CLAIM\");const todo=[id],seen=new Set(),changed:any[]=[];\n while(todo.length){const q=String(todo.pop());if(seen.has(q))continue;seen.add(q);const row:any=await one(`SELECT status FROM ${P}claims WHERE id=?`,[q]);if(row&&![\"FALSIFIED\",\"STALE\"].includes(String(row.status))){const ns=q===id?\"FALSIFIED\":\"STALE\";await sqlite.execute({sql:`UPDATE ${P}claims SET status=?,invalidated_by=?,updated_at=? WHERE id=?`,args:[ns,id,now(),q]});changed.push([q,ns])}const kids:any[]=(await sqlite.execute({sql:`SELECT child_claim FROM ${P}claim_deps WHERE parent_claim=?`,args:[q]})).rows as any[];for(const k of kids)todo.push(String(k.child_claim))}\n await appendEvent(String(root.workstream),agent,null,\"CLAIM_INVALIDATED\",{root_claim:id,reason,affected:changed});const propagated=await propagateImpossible(String(root.workstream),agent,{type:\"claim_invalidated\",claim_id:id,reason});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),root.workstream]});return{ok:true,root_claim:id,affected:changed,generation:ng,propagated_blocked:propagated}\n}\nasync function recordExternalArtifact(args:string[]){\n const spec=parseExternalArtifactSpec(args);\n const ws:any=await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[spec.workstream]);if(!ws)throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(spec.agent!==null){const a:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[spec.agent]);if(!a)throw new Error(\"UNKNOWN_ARTIFACT_AGENT\");if(String(a.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_AGENT\")}\n if(spec.task!==null){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[spec.task]);if(!t)throw new Error(\"UNKNOWN_ARTIFACT_TASK\");if(String(t.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_TASK\")}\n const integrity=await verifyExternalArtifactBlobBytes(spec);\n const found:any=await sqlite.execute({sql:`SELECT sha256,size,logical_name,producer_agent,task_id,storage_json FROM ${P}artifacts WHERE lower(sha256)=?`,args:[spec.sha256]});\n const rows:any[]=found.rows||[];if(rows.length>1)throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_CANONICAL_ROWS\");\n const decision=externalArtifactExistingDecision(rows[0]??null,spec);\n if(decision.kind===\"CONFLICT\")throw new Error(decision.reason);\n if(decision.kind===\"ALREADY_RECORDED\")return{ok:true,created:false,already_recorded:true,sha256:spec.sha256,generation:await generation(),semantic_generation_unchanged:true,integrity};\n const t=now();\n await sqlite.execute({sql:`INSERT INTO ${P}artifacts(sha256,size,logical_name,producer_agent,task_id,storage_json,created_at) VALUES(?,?,?,?,?,?,?)`,\n args:[spec.sha256,spec.size,spec.name,spec.agent,spec.task,canon([spec.uri]),t]});\n const payload={sha256:spec.sha256,size:spec.size,logical_name:spec.name,storage_uri:spec.uri,producer_agent:spec.agent,task_id:spec.task};\n const ev=await appendEvent(spec.workstream,spec.agent,spec.task,\"EXTERNAL_ARTIFACT_RECORDED\",payload);\n const ng=await bump();\n await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),spec.workstream]});\n return{ok:true,created:true,already_recorded:false,sha256:spec.sha256,generation:ng,event_id:PREDECESSOR_EVENTS+Number(ev.seq),event_hash:ev.event_hash,integrity};\n}\n\nasync function commitFull(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId||![\"COMPLETE\",\"INVALID\",\"BLOCKED\"].includes(state))throw new Error(\"BAD_COMMIT\");const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT_FORBIDDEN\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_PROTOCOL_V4_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenProtocolV4Active();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)