[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_105":106,"_107":108},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mosadek","name","project-brain-exec-verifier-v1","path","cand_abandoned_v4r1.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":-5,"_58":42,"_59":-5,"_60":-5,"_61":36,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/mosadek/project-brain-exec-verifier-v1/code/cand_abandoned_v4r1.ts","extension","id","9efabcd0-ec4b-4a63-b68c-f0db673d6f68","fileId","9f14b74c-abc7-11f1-beb6-1607ee4eb77e","parentId","branchId","30f4acb2-d8e9-4831-b180-c720577be90f","branchVersion",75,"latest",true,"createdAt",["D",1788900928085],"version",0,"fileType","script","content","// CANDIDATE_NONAUTHORITY_PREINTEGRATION — V4 transactional abandoned-lease takeover\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { leaseOneSql } from \"https://esm.town/v/mosadek/project-brain-live-v1-durable/brain_bridge_worker.ts\";\nimport { dispatchBrain, verifyBrainChain, verifyBrainClaimGraph } from \"https://esm.town/v/mosadek/project-brain-live-v1-durable/val_native_kernel_v1.ts\";\n\nconst JOB_TABLE=\"brain_bridge_jobs\";\nconst AUTH_TABLE=\"brain_control_plane_authority_v1\";\nconst WORKER=\"project-brain-val-native-v1\";\nconst INSTANCE=\"val-native-epoch2\";\nconst LEASE_SECONDS=180;\nconst ATTEMPT_HEARTBEAT_INTERVAL_MS=10000;\nconst ATTEMPT_HEARTBEAT_STALE_MS=35000;\nconst ATTEMPT_HEARTBEAT_INITIAL_GRACE_MS=20000;\nconst ATTEMPT_HEARTBEAT_FUTURE_SKEW_MS=5000;\nconst ATTEMPT_HEARTBEAT_PREFIX=\"runtime/brain_bridge_attempt_heartbeats/v1\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst RUNTIME_TICK_TABLE=\"val_native_executor_runtime_v1\";\nconst RUNTIME_TICK_TTL_SECONDS=300;\nasync function ensureMutationReceiptTable(db:any=sqlite){\n await db.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction legacyEnvelope(v:any){return JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify(v)+\"\\n\"})}\nasync function sha256Text(s:string){\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nasync function authority(){\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTH_TABLE} WHERE id=1`);\n return r.rows?.[0]??null;\n}\nasync function emitRuntimeTick(){\n const a:any=await authority();\n if(!a||String(a.writer)!==\"val_native\"||![\"ACTIVE\",\"PREPARED\"].includes(String(a.mode))){\n return {ok:false,emitted:false,reason:\"VAL_NATIVE_NOT_SELECTED\",authority:a??null};\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNTIME_TICK_TABLE}(\n id TEXT PRIMARY KEY,\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n state TEXT NOT NULL,\n tick_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n metadata_json TEXT NOT NULL\n )`);\n const metadata=JSON.stringify({\n classification:\"NONAUTHORITY_EXECUTOR_RUNTIME_TICK\",\n grants_brain_authority:false,\n extends_canonical_lease:false,\n source:\"val_native_executor_prod.drain\"\n });\n await sqlite.execute({\n sql:`INSERT INTO ${RUNTIME_TICK_TABLE}(id,worker_id,instance_id,authority_epoch,state,tick_at,expires_at,metadata_json)\n VALUES('val-native-executor',?,?,?,'RUNNING',datetime('now'),datetime('now','+${RUNTIME_TICK_TTL_SECONDS} seconds'),?)\n ON CONFLICT(id) DO UPDATE SET\n worker_id=excluded.worker_id,\n instance_id=excluded.instance_id,\n authority_epoch=excluded.authority_epoch,\n state='RUNNING',\n tick_at=excluded.tick_at,\n expires_at=excluded.expires_at,\n metadata_json=excluded.metadata_json`,\n args:[WORKER,INSTANCE,Number(a.epoch),metadata]\n });\n return {ok:true,emitted:true,authority_epoch:Number(a.epoch),ttl_seconds:RUNTIME_TICK_TTL_SECONDS};\n}\nasync function admit(){\n const a:any=await authority();\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\",authority:null};\n if(String(a.writer)!==\"val_native\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n const mode=String(a.mode);\n if(mode===\"ACTIVE\")return {ok:true,epoch:Number(a.epoch),mode:\"ACTIVE\",authority:a};\n if(mode===\"PREPARED\")return {ok:true,epoch:Number(a.epoch),mode:\"PREPARED_READ_ONLY\",authority:a};\n return {ok:false,reason:\"AUTHORITY_MODE_NOT_ADMITTED\",authority:a};\n}\nconst ACQUIRE_RECONCILE_ATTEMPTS_R2=3;\ntype LeaseReconcileResultR2=\n | {kind:\"leased\";job:any;epoch:number;mode:string;acquisition_reconciled:true;acquisition_error:string}\n | {kind:\"none\";attempt_id:string}\n | {kind:\"outcome_unknown\";attempt_id:string;errors:string[]};\nexport async function reconcileExactLeaseAttemptR2(\n attempt:string,\n expectedEpoch:number,\n expectedMode:string,\n acquisitionError:unknown,\n):Promise{\n const errors:string[]=[];\n for(let i=0;i=1\n AND lease_expires_at>datetime('now')\n ORDER BY id`,args:[WORKER,INSTANCE,attempt]});\n const rows:any[]=r.rows||[];\n if(rows.length===0)return {kind:\"none\",attempt_id:attempt};\n if(rows.length!==1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,`ATTEMPT_CARDINALITY_CONFLICT_${rows.length}`]};\n }\n const job=rows[0];\n if(String(job.lease_instance_id)!==INSTANCE||String(job.lease_attempt_id)!==attempt||Number(job.transport_lease_generation)<1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,\"ATTEMPT_IDENTITY_POSTCONDITION_FAILED\"]};\n }\n return {\n kind:\"leased\",\n job,\n epoch:expectedEpoch,\n mode:expectedMode,\n acquisition_reconciled:true,\n acquisition_error:acquisitionError instanceof Error?acquisitionError.message:String(acquisitionError),\n };\n }catch(e){\n errors.push(e instanceof Error?e.message:String(e));\n }\n }\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors};\n}\nasync function recoverExpiredTransport(){\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const r:any=await tx.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at<=datetime('now') ORDER BY id`);\n const outcomes:any[]=[];\n for(const j of (r.rows||[])){\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION',\n 'receipt_policy','SIDE_RECEIPTS_DIAGNOSTIC_ONLY_NOT_COMPLETION_AUTHORITY',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,lease_expires_at=NULL,lease_instance_id=NULL,lease_attempt_id=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner IS ? AND lease_instance_id IS ? AND lease_attempt_id IS ? AND transport_lease_generation=? AND lease_expires_at<=datetime('now')\n RETURNING id`,\n args:[j.id,j.lease_owner,j.lease_instance_id,j.lease_attempt_id,j.transport_lease_generation]});\n if((u.rows||[]).length)outcomes.push({id:j.id,state:\"FAILED\",reconciled_from_receipt:false,outcome_unknown:true});\n }\n await tx.commit();done=true;return{ok:true,outcomes};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nfunction parseUtcMs(v:any){\n const s=String(v??\"\");\n const z=/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}$/.test(s)?s.replace(\" \",\"T\")+\"Z\":s;\n const ms=Date.parse(z);return Number.isFinite(ms)?ms:null;\n}\nasync function attemptHeartbeatKey(job:any,authorityEpoch:number){\n const identity=[String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),String(job.transport_lease_generation),String(authorityEpoch)].join(\"\\n\");\n return ATTEMPT_HEARTBEAT_PREFIX+\"/\"+await sha256Text(identity)+\".json\";\n}\nasync function heartbeatEnvelope(job:any,authorityEpoch:number){\n return {schema:\"BRAIN_BRIDGE_ATTEMPT_HEARTBEAT_V2\",classification:\"NONAUTHORITY_TRANSPORT_LIVENESS_ONLY\",grants_brain_authority:false,job_id:String(job.id),lease_owner:WORKER,lease_instance_id:INSTANCE,lease_attempt_id:String(job.lease_attempt_id),transport_lease_generation:Number(job.transport_lease_generation),authority_epoch:Number(authorityEpoch),op:String(job.op),payload_sha256:await sha256Text(String(job.payload_json)),heartbeat_at:new Date().toISOString()};\n}\nasync function writeAttemptHeartbeat(job:any,authorityEpoch:number){const key=await attemptHeartbeatKey(job,authorityEpoch);const envelope=await heartbeatEnvelope(job,authorityEpoch);await blob.set(key,JSON.stringify(envelope));return {key,heartbeat_at:envelope.heartbeat_at,authority_epoch:Number(authorityEpoch)};}\nasync function readAttemptHeartbeat(job:any,authorityEpoch:number){\n const key=await attemptHeartbeatKey(job,authorityEpoch);\n try{\n const rb:any=await blob.get(key);if(!rb)return {kind:\"missing\",key} as const;\n const raw=await rb.text();let p:any;try{p=JSON.parse(raw)}catch{return {kind:\"invalid\",key,reason:\"HEARTBEAT_JSON_INVALID\"} as const}\n const expectedPayloadSha=await sha256Text(String(job.payload_json));\n const exact=p?.schema===\"BRAIN_BRIDGE_ATTEMPT_HEARTBEAT_V2\"&&p?.classification===\"NONAUTHORITY_TRANSPORT_LIVENESS_ONLY\"&&p?.grants_brain_authority===false&&String(p?.job_id)===String(job.id)&&String(p?.lease_owner)===WORKER&&String(p?.lease_instance_id)===INSTANCE&&String(p?.lease_attempt_id)===String(job.lease_attempt_id)&&Number(p?.transport_lease_generation)===Number(job.transport_lease_generation)&&Number(p?.authority_epoch)===Number(authorityEpoch)&&String(p?.op)===String(job.op)&&String(p?.payload_sha256)===expectedPayloadSha;\n if(!exact)return {kind:\"invalid\",key,reason:\"HEARTBEAT_BINDING_MISMATCH\"} as const;\n const at=parseUtcMs(p.heartbeat_at);if(at===null)return {kind:\"invalid\",key,reason:\"HEARTBEAT_TIME_INVALID\"} as const;\n const age_ms=Date.now()-at;if(age_ms < -ATTEMPT_HEARTBEAT_FUTURE_SKEW_MS)return {kind:\"invalid\",key,reason:\"HEARTBEAT_FROM_FUTURE\",age_ms} as const;\n return {kind:\"valid\",key,age_ms,heartbeat_at:String(p.heartbeat_at)} as const;\n }catch(e){return {kind:\"missing\",key,read_error:e instanceof Error?e.message:String(e)} as const;}\n}\nasync function deleteAttemptHeartbeatBestEffort(job:any,authorityEpoch:number){try{const key=await attemptHeartbeatKey(job,authorityEpoch);const b:any=blob as any;if(typeof b.delete===\"function\")await b.delete(key);return {ok:true,key};}catch(e){return {ok:false,error:e instanceof Error?e.message:String(e)}}}\nasync function activeLeases(){\n const r:any=await sqlite.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at,updated_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id`);\n return r.rows||[];\n}\nasync function failAbandonedActiveLease(job:any,liveness:any,expectedEpoch:number,expectedMode:string){\n if(String(job.lease_owner)!==WORKER||String(job.lease_instance_id)!==INSTANCE)return {reclaimed:false,reason:\"FOREIGN_ACTIVE_LEASE_FAIL_CLOSED\",liveness};\n const payloadSha=await sha256Text(String(job.payload_json));const expectedAuthorityMode=expectedMode===\"PREPARED_READ_ONLY\"?\"PREPARED\":expectedMode;\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const ar:any=(await tx.execute({sql:`SELECT epoch,writer,mode FROM ${AUTH_TABLE} WHERE id=1`})).rows?.[0]??null;\n if(!ar||Number(ar.epoch)!==Number(expectedEpoch)||String(ar.writer)!==\"val_native\"||String(ar.mode)!==expectedAuthorityMode){await tx.rollback();done=true;return {reclaimed:false,reason:\"RECLAIM_AUTHORITY_FENCED\",authority:ar??null,liveness};}\n const exact:any=(await tx.execute({sql:`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation FROM ${JOB_TABLE} WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')`,args:[job.id,WORKER,INSTANCE,job.lease_attempt_id,job.transport_lease_generation,String(job.op),String(job.payload_json)]})).rows?.[0]??null;\n if(!exact){await tx.rollback();done=true;return {reclaimed:false,reason:\"EXACT_ATTEMPT_CHANGED_OR_TERMINAL\",liveness};}\n const receipt:any=(await tx.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,result_json FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]})).rows?.[0]??null;\n if(receipt){\n const receiptExact=String(receipt.job_id)===String(job.id)&&String(receipt.lease_attempt_id)===String(job.lease_attempt_id)&&String(receipt.lease_instance_id)===INSTANCE&&String(receipt.lease_owner)===WORKER&&Number(receipt.transport_lease_generation)===Number(job.transport_lease_generation)&&Number(receipt.authority_epoch)===Number(expectedEpoch)&&String(receipt.command)===brainCommand(String(job.payload_json))&&String(receipt.payload_sha256)===payloadSha;\n if(!receiptExact){await tx.rollback();done=true;return {reclaimed:false,reason:\"RECEIPT_BINDING_CONFLICT\",liveness};}\n let parsed:any;try{parsed=JSON.parse(String(receipt.result_json))}catch{await tx.rollback();done=true;return {reclaimed:false,reason:\"RECEIPT_RESULT_JSON_INVALID\",liveness};}\n const q:any=await tx.execute({sql:`UPDATE ${JOB_TABLE} SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,lease_instance_id=NULL,lease_attempt_id=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? RETURNING id`,args:[legacyEnvelope(parsed),job.id,WORKER,INSTANCE,job.lease_attempt_id,job.transport_lease_generation,String(job.op),String(job.payload_json)]});\n if(!(q.rows||[]).length){await tx.rollback();done=true;return {reclaimed:false,reason:\"RECEIPT_RECONCILE_CAS_LOST\",liveness};}\n await tx.commit();done=true;const cleanup=await deleteAttemptHeartbeatBestEffort(job,expectedEpoch);return {reclaimed:true,reconciled_from_receipt:true,terminal_state:\"COMPLETE\",liveness,cleanup};\n }\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE} SET state='FAILED',result_json=NULL,error_json=json_object('classification','ABANDONED_TRANSPORT_ATTEMPT_FENCED_NO_CANONICAL_RECEIPT','receipt_policy','EXACT_ATTEMPT_RECEIPT_RECONCILED_BEFORE_FENCING','retry_policy','SUBMIT_NEW_JOB_ID_AFTER_CANONICAL_STATE_RECONCILIATION','liveness_reason',?),lease_owner=NULL,lease_expires_at=NULL,lease_instance_id=NULL,lease_attempt_id=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now') RETURNING id`,args:[String(liveness.reason),job.id,WORKER,INSTANCE,job.lease_attempt_id,job.transport_lease_generation,String(job.op),String(job.payload_json)]});\n if(!(u.rows||[]).length){await tx.rollback();done=true;return {reclaimed:false,reason:\"NO_RECEIPT_FENCE_CAS_LOST\",liveness};}\n await tx.commit();done=true;const cleanup=await deleteAttemptHeartbeatBestEffort(job,expectedEpoch);return {reclaimed:true,reconciled_from_receipt:false,terminal_state:\"FAILED\",liveness,cleanup};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function maybeReclaimAbandonedActiveLease(job:any,expectedEpoch:number,expectedMode:string){\n if(String(job.lease_owner)!==WORKER||String(job.lease_instance_id)!==INSTANCE)return {reclaimed:false,reason:\"FOREIGN_ACTIVE_LEASE_FAIL_CLOSED\"};\n const acquired=parseUtcMs(job.updated_at);if(acquired===null)return {reclaimed:false,reason:\"ACTIVE_LEASE_TIME_INVALID_FAIL_CLOSED\"};\n const lease_age_ms=Date.now()-acquired;if(lease_age_ms{try{value=await executeJob(job,epoch)}catch(e){failed=e}finally{done=true}})();\n const errors:string[]=[];let pulses=0;\n while(!done){\n const outcome=await Promise.race([\n execution.then(()=>\"done\" as const),\n new Promise<\"tick\">(resolve=>setTimeout(()=>resolve(\"tick\"),ATTEMPT_HEARTBEAT_INTERVAL_MS))\n ]);\n if(outcome===\"done\"||done)break;\n try{await writeAttemptHeartbeat(job,epoch);pulses++}\n catch(e){errors.push(e instanceof Error?e.message:String(e))}\n }\n await execution;if(failed)throw failed;\n return {execution:value,transport_heartbeat:{initialized:true,first,pulses,errors}};\n}\nfunction atomicizeLeaseSql(sql:string){\n const setNeedle=`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')`;\n const retNeedle=\"RETURNING id,op,payload_json,priority,lease_expires_at\";\n if(sql.split(setNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_SET_SHAPE_DRIFT\");\n if(sql.split(retNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_RETURNING_SHAPE_DRIFT\");\n return sql.replace(setNeedle,`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')`)\n .replace(retNeedle,\"RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\");\n}\nasync function leaseOne(){\n const gate=await admit();if(!gate.ok)return {kind:\"fenced\",gate} as const;\n await recoverExpiredTransport();\n let active=await activeLeases();\n if(active.length>1)return {kind:\"conflict\",active} as const;\n if(active.length===1){\n const liveness:any=await maybeReclaimAbandonedActiveLease(active[0],Number(gate.epoch),String(gate.mode));\n if(!liveness.reclaimed)return {kind:\"busy\",active:active[0],liveness} as const;\n active=await activeLeases();\n if(active.length>0)return {kind:\"conflict_after_liveness_reclaim\",active,liveness} as const;\n }\n const preparedReadOnly=gate.mode===\"PREPARED_READ_ONLY\";\n const attempt=crypto.randomUUID();\n const expectedMode=String(gate.mode);\n let core:any;\n try{\n core=preparedReadOnly\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${JOB_TABLE} j\n WHERE j.state='READY' AND j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND 120\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE} x\n WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now')\n )\n ORDER BY\n CASE json_extract(j.payload_json,'$.args[0]')\n WHEN 'status' THEN 0\n WHEN 'verify-chain' THEN 1\n WHEN 'verify-claim-graph' THEN 2\n ELSE 3\n END,\n CASE WHEN j.priority>1000000000 THEN 1000000000 ELSE j.priority END DESC,\n j.created_at,j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt]})\n : EMERGENCY_MUTATIONS_FROZEN\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at>datetime('now')\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt,EMERGENCY_MUTATION_CANARY_JOB_ID,WORKER]})\n : await sqlite.execute({sql:atomicizeLeaseSql(leaseOneSql(JOB_TABLE)),args:[WORKER,INSTANCE,attempt,WORKER]});\n }catch(e){\n const rr=await reconcileExactLeaseAttemptR2(attempt,gate.epoch,expectedMode,e);\n if(rr.kind===\"leased\")return rr;\n if(rr.kind===\"none\")return {\n kind:\"acquisition_failed_no_bound_lease\",\n attempt_id:attempt,\n reason:e instanceof Error?e.message:String(e),\n } as const;\n return {kind:\"acquisition_outcome_unknown\",attempt_id:attempt,errors:rr.errors} as const;\n }\n const j:any=core.rows?.[0]??null;if(!j)return {kind:\"empty\"} as const;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch} as const;\n}\nasync function finish(job:any,epoch:number,ok:boolean,value:any){\n const gate=await admit();\n if(!gate.ok||Number(gate.epoch)!==epoch){\n return {ok:false,reason:\"CONTROL_PLANE_RESULT_FENCED\",authority:gate.authority??null};\n }\n const result=ok?legacyEnvelope(value):null;\n const error=ok?null:JSON.stringify(value);\n const r:any=await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,lease_instance_id=NULL,lease_attempt_id=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state`,\n args:[ok?\"COMPLETE\":\"FAILED\",result,error,job.id,WORKER,INSTANCE,job.lease_attempt_id,job.transport_lease_generation,String(job.op),String(job.payload_json)]});\n if(!(r.rows||[]).length)return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"};\n const cleanup=await deleteAttemptHeartbeatBestEffort(job,epoch);\n return {ok:true,id:job.id,state:ok?\"COMPLETE\":\"FAILED\",heartbeat_cleanup:cleanup};\n}\nconst CHAIN_FAILURE_READ_ONLY=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; kernel allowlist still fences every unqualified mutator.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nfunction brainCommand(raw:string){\n try{const p=JSON.parse(raw);return Array.isArray(p?.args)?String(p.args[0]||\"\"):\"\"}catch{return \"\"}\n}\nasync function chainCircuitBreaker(raw:string,jobId:string){\n const command=brainCommand(raw);\n if(CHAIN_FAILURE_READ_ONLY.has(command))return {allow:true,command,integrity:null};\n const emergencyCanary=EMERGENCY_MUTATIONS_FROZEN&&jobId===EMERGENCY_MUTATION_CANARY_JOB_ID&&command===\"register-agent\";\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary)return {allow:false,command,integrity:{ok:false,reason:\"EPOCH2_MUTATIONS_EMERGENCY_FROZEN_PENDING_ATOMICITY_REPAIR\"}};\n let chain:any,graph:any;\n try{chain=await verifyBrainChain()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CHAIN_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n if(chain?.ok!==true)return {allow:false,command,integrity:{chain,graph:null}};\n try{graph=await verifyBrainClaimGraph()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CLAIM_GRAPH_EXCEPTION\",detail:e instanceof Error?e.message:String(e),chain}}}\n if(graph?.ok!==true)return {allow:false,command,integrity:{chain,graph}};\n return {allow:true,command,integrity:{chain,graph}};\n}\nfunction parseArr(v:any){try{const x=JSON.parse(String(v??\"[]\"));return Array.isArray(x)?x:[]}catch{return []}}\nasync function localCommitSnapshot(taskId:string,agent:string){\n const t:any=(await sqlite.execute({sql:`SELECT id,workstream,state,lease_owner,lease_generation,lease_expires_at,context_manifest,success_condition,decision_value,depends_json,requires_json,writes_json,guards_json\n FROM brainvn_tasks WHERE id=?`,args:[taskId]})).rows?.[0]??null;\n if(!t)return{ok:false,reason:\"TASK_MISSING\"};\n if(String(t.state)!==\"LEASED\"||String(t.lease_owner)!==agent)return{ok:false,reason:\"LEASE_CHANGED\",task:t};\n if(t.lease_expires_at&&String(t.lease_expires_at)<=new Date().toISOString().replace(\"Z\",\"+00:00\"))return{ok:false,reason:\"LEASE_EXPIRED\",task:t};\n const deps=parseArr(t.depends_json),guards=parseArr(t.guards_json);\n const depRows:any[]=[];\n for(const id of deps){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(id)]})).rows?.[0]??null;\n depRows.push(r??{id:String(id),state:\"MISSING\"});\n }\n const guardRows:any[]=[];\n let retryGuardSnapshotComplete=true;\n for(const g of guards){\n if(g?.type===\"task_complete\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),state:\"MISSING\"}});\n }else if(g?.type===\"claim_verified\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,status,updated_at FROM brainvn_claims WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),status:\"MISSING\"}});\n }else{\n retryGuardSnapshotComplete=false;\n guardRows.push({guard:g,resolved:null});\n }\n }\n const ws:any=(await sqlite.execute({sql:\"SELECT id,mission,verified_state FROM brainvn_workstreams WHERE id=?\",args:[String(t.workstream)]})).rows?.[0]??null;\n const stable={\n task:{id:t.id,workstream:t.workstream,state:t.state,lease_owner:t.lease_owner,lease_generation:t.lease_generation,\n context_manifest:t.context_manifest,success_condition:t.success_condition,decision_value:t.decision_value,\n depends_json:t.depends_json,requires_json:t.requires_json,writes_json:t.writes_json,guards_json:t.guards_json},\n dependencies:depRows,guards:guardRows,workstream_semantics:ws\n };\n return{ok:true,stable,lease_expires_at:t.lease_expires_at,workstream:String(t.workstream),retry_guard_snapshot_complete:retryGuardSnapshotComplete};\n}\nfunction sameSnapshot(a:any,b:any){return JSON.stringify(a?.stable)===JSON.stringify(b?.stable)}\nfunction mutationFields(args:any[]){\n let agent=\"\",task=\"\";\n for(let i=1;i{\n let found:number|null=null;\n for(let i=1;i