[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_108":109,"_110":111},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mosadek","name","project-brain-exec-verifier-v1","path","scratch/chatgpt2316_canary_candidate_v1.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":-5,"_61":44,"_62":-5,"_63":-5,"_64":38,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/mosadek/project-brain-exec-verifier-v1/code/scratch/chatgpt2316_canary_candidate_v1.ts","extension","id","e23a575c-79b5-42ac-b84a-fbe6e6c28164","chatgpt2316_canary_candidate_v1.ts","fileId","15379a74-abce-11f1-ae04-1607ee4eb77e","parentId","b6adfc3c-db2c-4062-aa79-e344a5a6982a","branchId","30f4acb2-d8e9-4831-b180-c720577be90f","branchVersion",86,"latest",true,"createdAt",["D",1788903703248],"version",0,"fileType","script","content","import { sqlite as rootSqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst CHAT_UNPROVEN_ACTIVATION_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-STRUCTURAL-ACTIVATION-GATE-P0-V1-20260908\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_AGENT=\"chat-unproven-structural-canary-v1-20260908\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_ROLE=\"activation-canary\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_CAP=\"chat_unproven_activation_canary_v1\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-STRUCTURAL-ACTIVATION-POSITIVE-CANARY-V1-20260908\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_TASK_DEDUPE=\"global:first-superhero:chat-unproven:structural-activation:positive-canary:v1\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_REGISTER_JOB=\"system-chat-unproven-activation-canary-register-v1-20260908\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_CLAIM_JOB=\"system-chat-unproven-activation-canary-claim-v1-20260908\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_GATE_OWNER=\"chat-unproven-gpt56sol-20260908-2312-a17dv\";\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_GATE_LEASE_GENERATION=4216;\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_REGISTER_ARGS=[\n \"register-agent\",CHAT_UNPROVEN_PREACTIVATION_CANARY_AGENT,\n \"--workstream\",\"global\",\"--role\",CHAT_UNPROVEN_PREACTIVATION_CANARY_ROLE,\n \"--type\",\"CHAT_UNPROVEN\",\"--capabilities\",JSON.stringify([CHAT_UNPROVEN_PREACTIVATION_CANARY_CAP])\n];\nconst CHAT_UNPROVEN_PREACTIVATION_CANARY_CLAIM_ARGS=[\n \"claim\",\"--agent\",CHAT_UNPROVEN_PREACTIVATION_CANARY_AGENT,\n \"--mode\",\"INTERACTIVE\",\"--lease-seconds\",\"300\",\n \"--constitution-version\",\"4\",\n \"--constitution-sha256\",\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\",\n \"--registry-version\",\"5\"\n];\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\",\"migrate-task-invariants\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\nasync function chatUnprovenActivationComplete(){\n const t:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_ACTIVATION_TASK]);\n return String(t?.state||\"\")===\"COMPLETE\"\n}\nasync function requireChatUnprovenActivation(){if(!await chatUnprovenActivationComplete())throw new Error(\"CHAT_UNPROVEN_ACTIVATION_PENDING\")}\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n for(const r of q.rows||[]){\n if(!r.dedupe_key)continue;if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId)continue;\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n if(ctx.execution_allowed===false)continue;if((unproven||EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)&&unprovenIndependenceSensitive(req,ctx))continue;if([...req].some(x=>NON_AGENT.has(x)))continue;if([...req].some(x=>!C.has(x)))continue;\n if(!await depsSatisfied(r)||!await guardsSatisfied(r,agentId)||await writeConflict(r))continue;return r\n }return null\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nfunction exactStringArray(a:any,b:string[]){return Array.isArray(a)&&a.length===b.length&&a.every((x:any,i:number)=>typeof x===\"string\"&&x===b[i])}\nasync function chatUnprovenPreactivationGateReady(){\n const t:any=await one(`SELECT state,lease_owner,lease_generation,lease_expires_at FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_ACTIVATION_TASK]);\n return !!t&&String(t.state)===\"LEASED\"&&String(t.lease_owner||\"\")===CHAT_UNPROVEN_PREACTIVATION_CANARY_GATE_OWNER&&\n Number(t.lease_generation)===CHAT_UNPROVEN_PREACTIVATION_CANARY_GATE_LEASE_GENERATION&&\n !!t.lease_expires_at&&Number.isFinite(Date.parse(String(t.lease_expires_at)))&&Date.parse(String(t.lease_expires_at))>Date.now();\n}\nfunction chatUnprovenPreactivationTransportOk(tc:BoundTransportContext|undefined,jobId:string){\n return !!tc&&transportContextShapeOk(tc)&&tc.job_id===jobId&&tc.transport_lease_generation===1;\n}\nasync function chatUnprovenPreactivationRegisterAllowed(args:string[],tc?:BoundTransportContext){\n return exactStringArray(args,CHAT_UNPROVEN_PREACTIVATION_CANARY_REGISTER_ARGS)&&\n chatUnprovenPreactivationTransportOk(tc,CHAT_UNPROVEN_PREACTIVATION_CANARY_REGISTER_JOB)&&\n await chatUnprovenPreactivationGateReady();\n}\nasync function chatUnprovenPreactivationRegisterReceiptOk(){\n const expectedPayload=JSON.stringify({args:CHAT_UNPROVEN_PREACTIVATION_CANARY_REGISTER_ARGS,timeout:60});\n const expectedSha=await sha(expectedPayload);\n const rr:any=(await sqlite.execute({sql:`SELECT result_json,payload_sha256,transport_lease_generation FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND command='register-agent' AND transport_lease_generation=1 ORDER BY committed_at DESC`,args:[CHAT_UNPROVEN_PREACTIVATION_CANARY_REGISTER_JOB]})).rows||[];\n if(rr.length!==1||String(rr[0].payload_sha256)!==expectedSha)return false;\n let result:any=null;try{result=JSON.parse(String(rr[0].result_json))}catch{return false}\n return result?.ok===true&&String(result?.agent_id||\"\")===CHAT_UNPROVEN_PREACTIVATION_CANARY_AGENT;\n}\nasync function chatUnprovenPreactivationClaimAllowed(args:string[],tc:BoundTransportContext|undefined,ag:any){\n return String(ag?.id||\"\")===CHAT_UNPROVEN_PREACTIVATION_CANARY_AGENT&&\n exactStringArray(args,CHAT_UNPROVEN_PREACTIVATION_CANARY_CLAIM_ARGS)&&\n chatUnprovenPreactivationTransportOk(tc,CHAT_UNPROVEN_PREACTIVATION_CANARY_CLAIM_JOB)&&\n await chatUnprovenPreactivationGateReady()&&await chatUnprovenPreactivationRegisterReceiptOk();\n}\nasync function claimChatUnprovenPreactivationCanary(_ag:any,mode:string,secs:number){\n const agentId=CHAT_UNPROVEN_PREACTIVATION_CANARY_AGENT;\n const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[agentId]);\n const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");const preactivationCanary=String(ag.type)===\"CHAT_UNPROVEN\"&&await chatUnprovenPreactivationClaimAllowed(args,transportContext,ag);if(String(ag.type)===\"CHAT_UNPROVEN\"&&!preactivationCanary)await requireChatUnprovenActivation();if(preactivationCanary)return await claimChatUnprovenPreactivationCanary(ag,mode,secs);const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{o","deleted",false,"label",[47,24],"scratch","64676147-4dc1-4e29-9d97-073f095ed566",["D",1788893945554],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","External worker admission shadow verifier","imageUrl","userId","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","646761474dc14e299d97073f095ed566","tursoHostname","646761474dc14e299d97073f095ed566-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_107":103},"org",{"_9":10,"_100":101,"_102":103,"_58":59,"_104":105,"_106":44},"branch",{"_37":90,"_11":91,"_22":30,"_92":48,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":12,"_99":10},"isOwned",92,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_83":-5,"_141":142,"_143":144,"_145":146,"_147":44,"_148":44,"_149":44,"_150":34,"_151":-5,"_152":-7,"_153":-7,"_154":38,"_155":44,"_156":44,"_157":-5,"_158":44,"_159":44,"_160":44,"_161":-5},"ENV",{"_112":113,"_114":115,"_116":91,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]