[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mosadek","name","project-brain-sc1-frozen-8076","path","val_native_executor_prod.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":36,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/mosadek/project-brain-sc1-frozen-8076/code/val_native_executor_prod.ts","extension","id","b0bbfca3-990f-4277-865f-a0405c3935a9","fileId","01a09976-87c5-7210-abe0-f38025a5d596","parentId","branchId","ed89cede-2a78-4ba8-9341-e74dc0bf776f","branchVersion",1,"latest",true,"createdAt",["D",1789281077028],"version",0,"fileType","script","content","import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst sqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { leaseOneSql } from \"./brain_bridge_worker.ts\";\nimport { classifyValidCoalesceResult } from \"./brain_bridge_readonly_coalesce_v4.ts\";\nimport { dispatchBrain, verifyBrainChain, verifyBrainClaimGraph } from \"./val_native_kernel_v1.ts\";\n\nconst JOB_TABLE=\"brain_bridge_jobs\";\nconst AUTH_TABLE=\"brain_control_plane_authority_v1\";\n// A unique module query-string creates an independent worker incarnation inside the\n// same Val runtime. The default preserves the canonical executor identity.\nconst moduleUrl=new URL(import.meta.url);\nconst WORKER=moduleUrl.searchParams.get(\"worker\")||\"project-brain-val-native-v1\";\nconst INSTANCE=moduleUrl.searchParams.get(\"instance\")||\"val-native-epoch2\";\nconst LEASE_SECONDS=180;\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst RUNTIME_TICK_TABLE=\"val_native_executor_runtime_v1\";\nconst RUNTIME_TICK_TTL_SECONDS=300;\nconst PRELEASE_RANK_RECEIPT_TABLE=\"brain_bridge_prelease_rank_receipts_v1\";\n// R8K2 installs in two phases: helpers first, then only enable after the exact\n// rebased source passes remote Deno/libSQL qualification and production readback.\nconst PRELEASE_READ_COALESCE_V1_ENABLED=false;\nasync function ensureMutationReceiptTable(db:any=sqlite){\n await db.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction safeSqlTableV1(t:string){\n if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(t))throw new Error(\"BAD_TABLE\");\n return t;\n}\nfunction canonicalJsonV1(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canonicalJsonV1).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canonicalJsonV1(x[k])).join(\",\")+\"}\";\n}\nexport async function ensurePreleaseRankReceiptTableV1(db:any=sqlite,table=PRELEASE_RANK_RECEIPT_TABLE){\n table=safeSqlTableV1(table);\n await db.execute(`CREATE TABLE IF NOT EXISTS ${table}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n rank0_id TEXT NOT NULL,\n rank1_id TEXT,\n rank_snapshot_sha256 TEXT NOT NULL,\n created_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nexport function orderedReadyTop2SqlV1(table=JOB_TABLE){\n table=safeSqlTableV1(table);\n const raw=leaseOneSql(table);\n const marker=`SELECT j.id FROM ${table} j`;\n const start=raw.indexOf(marker);\n const end=raw.indexOf(\"\\n LIMIT 1\",start);\n if(start<0||end<0)throw new Error(\"PRELEASE_SELECTOR_SHAPE_DRIFT\");\n const selector=raw.slice(start,end).replace(marker,`SELECT j.rowid AS queue_rowid,j.* FROM ${table} j`);\n if((selector.match(/\\?/g)||[]).length!==1)throw new Error(\"PRELEASE_SELECTOR_PLACEHOLDER_DRIFT\");\n return selector+\"\\n LIMIT 2\";\n}\nexport async function acquireWithPreleaseRankReceiptV1(db:any,opts:{qTable?:string;rTable?:string;worker:string;instance:string;attempt:string;injectReceiptFailure?:boolean}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const active:any=await tx.execute(`SELECT id FROM ${q} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id LIMIT 2`);\n const activeRows:any[]=active.rows||[];\n if(activeRows.length>1){await tx.rollback();done=true;return {kind:\"conflict\",active:activeRows}}\n if(activeRows.length===1){await tx.rollback();done=true;return {kind:\"busy\",active:activeRows[0]}}\n const ranked:any=await tx.execute({sql:orderedReadyTop2SqlV1(q),args:[opts.worker]});\n const rows:any[]=ranked.rows||[];\n if(!rows.length){await tx.rollback();done=true;return {kind:\"empty\"}}\n const leader=rows[0],follower=rows[1]??null;\n const u:any=await tx.execute({sql:`UPDATE ${q}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(SELECT 1 FROM ${q} x WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now'))\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[opts.worker,opts.instance,opts.attempt,String(leader.id)]});\n const leased:any=u.rows?.[0]??null;if(!leased)throw new Error(\"PRELEASE_LEASE_CAS_FAILED\");\n const snap={\n rank0:{id:String(leader.id),op:String(leader.op),payload_json:String(leader.payload_json),priority:Number(leader.priority),created_at:String(leader.created_at)},\n rank1:follower?{id:String(follower.id),op:String(follower.op),payload_json:String(follower.payload_json),priority:Number(follower.priority),created_at:String(follower.created_at)}:null,\n };\n const rankSnapshotSha256=await sha256Text(canonicalJsonV1(snap));\n await tx.execute({sql:`INSERT INTO ${r}(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,rank0_id,rank1_id,rank_snapshot_sha256,created_at)\n VALUES(?,?,?,?,?,?,?,?,datetime('now'))`,args:[String(leased.id),opts.attempt,opts.instance,opts.worker,Number(leased.transport_lease_generation),String(leader.id),follower?String(follower.id):null,opts.injectReceiptFailure?\"INVALID\":rankSnapshotSha256]});\n if(opts.injectReceiptFailure)throw new Error(\"INJECTED_PRELEASE_RECEIPT_FAILURE\");\n await tx.commit();done=true;\n return {kind:\"leased\",job:leased,rank0:String(leader.id),rank1:follower?String(follower.id):null,rank_snapshot_sha256:rankSnapshotSha256};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nfunction exactObjectKeysV1(v:any,keys:string[]){\n if(!v||typeof v!==\"object\"||Array.isArray(v))return false;\n const a=Object.keys(v).sort(),b=[...keys].sort();\n return a.length===b.length&&a.every((x,i)=>x===b[i]);\n}\nexport function classifyValNativeCoalesceResultV1(resultJson:string){\n let r:any;try{r=JSON.parse(resultJson)}catch{return null}\n if(!exactObjectKeysV1(r,[\"returncode\",\"stderr\",\"stdout\"]))return null;\n return classifyValidCoalesceResult(JSON.stringify({returncode:r.returncode,stdout:r.stdout,stderr:r.stderr,stdout_truncated:false,stderr_truncated:false}));\n}\nexport function preleaseReceiptBindingReasonV1(job:any,x:any){\n if(!x)return \"PRELEASE_RECEIPT_MISSING\";\n if(String(x.job_id)!==String(job.id)||String(x.rank0_id)!==String(job.id))return \"PRELEASE_RECEIPT_CORRUPT\";\n if(String(x.lease_owner)!==String(job.lease_owner)||String(x.lease_instance_id)!==String(job.lease_instance_id)||String(x.lease_attempt_id)!==String(job.lease_attempt_id)||Number(x.transport_lease_generation)!==Number(job.transport_lease_generation))return \"PRELEASE_RECEIPT_STALE_OR_MISBOUND\";\n if(!/^[0-9a-f]{64}$/.test(String(x.rank_snapshot_sha256)))return \"PRELEASE_RECEIPT_HASH_INVALID\";\n if(x.rank1_id==null)return \"PRELEASE_RECEIPT_NO_FOLLOWER\";\n return \"OK\";\n}\nexport async function finalizeLeaderOptionalPreleaseFollowerV1(db:any,opts:{qTable?:string;rTable?:string;job:any;expected:any}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const command=opts.expected?.state===\"COMPLETE\"&&opts.expected?.error_json==null&&typeof opts.expected?.result_json===\"string\"\n ? classifyValNativeCoalesceResultV1(opts.expected.result_json):null;\n const job=opts.job;\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const lr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')`,\n args:[String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n const leader:any=lr.rows?.[0]??null;\n if(!leader){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerId:string|null=null,receiptReason=\"NOT_COALESCIBLE\";\n if(command){\n const rr:any=await tx.execute({sql:`SELECT * FROM ${r} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const recs:any[]=rr.rows||[];\n if(recs.length!==1)receiptReason=recs.length>1?\"AMBIGUOUS_PRELEASE_RECEIPTS\":\"PRELEASE_RECEIPT_MISSING\";\n else{\n const x:any=recs[0];\n receiptReason=preleaseReceiptBindingReasonV1(job,x);\n if(receiptReason===\"OK\"){\n const fr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=?`,args:[String(x.rank1_id)]});\n const f:any=fr.rows?.[0]??null;\n if(f&&String(f.state)===\"READY\"&&String(f.op)===String(leader.op)&&String(f.payload_json)===String(leader.payload_json)&&Number(f.priority)===Number(leader.priority))followerId=String(f.id);\n else receiptReason=\"PRELEASE_FOLLOWER_NO_LONGER_EXACT_READY_MATCH\";\n }\n }\n }\n const lu:any=await tx.execute({sql:`UPDATE ${q}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(opts.expected.state),opts.expected.result_json??null,opts.expected.error_json??null,String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(lu.rows||[]).length){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerCompleted=false;\n if(followerId){\n const fu:any=await tx.execute({sql:`UPDATE ${q} SET state='COMPLETE',result_json=?,error_json=NULL,updated_at=datetime('now') WHERE id=? AND state='READY' AND op=? AND payload_json=? AND priority=? RETURNING id`,\n args:[opts.expected.result_json,followerId,String(leader.op),String(leader.payload_json),Number(leader.priority)]});\n followerCompleted=(fu.rows||[]).length===1;\n }\n await tx.commit();done=true;\n return {ok:true,id:String(job.id),state:String(opts.expected.state),command,receipt_reason:receiptReason,follower_completed:followerCompleted,follower_id:followerCompleted?followerId:null};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\n\nfunction legacyEnvelope(v:any){return JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify(v)+\"\\n\"})}\nasync function sha256Text(s:string){\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nasync function authority(){\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTH_TABLE} WHERE id=1`);\n return r.rows?.[0]??null;\n}\nconst RESULT_FINALIZATION_HELPER_V1_SHA256=\"b82e4f00c3f7b3eb721871e780d0f7c43180e32516b9a5c87112a956e550677f\";\nconst RESULT_FINALIZATION_HELPER_V1_SOURCE=String.raw`// RESULT_FINALIZATION_EXACT_ATTEMPT_RECONCILIATION_V1\n// Candidate-only pure helper. It never dispatches/re-dispatches a Brain command.\n// Production integration supplies narrowly-scoped queue/authority/receipt operations.\n\nexport const READ_ONLY_COMMANDS_V1 = new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\n\nexport function canonV1(x) {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canonV1).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k => JSON.stringify(k) + \":\" + canonV1(x[k])).join(\",\") + \"}\";\n}\n\nexport function legacyEnvelopeV1(v) {\n return JSON.stringify({returncode:0, stderr:\"\", stdout:JSON.stringify(v) + \"\\n\"});\n}\n\nexport async function sha256TextV1(s) {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x => x.toString(16).padStart(2,\"0\")).join(\"\");\n}\n\nfunction errText(e) {\n return e instanceof Error ? e.message : String(e);\n}\n\nfunction authorityMatches(a, epoch, mode) {\n return !!a &&\n Number(a.epoch) === Number(epoch) &&\n String(a.writer) === \"val_native\" &&\n String(a.mode) === String(mode);\n}\n\nfunction expectedTerminal(dispatchOk, dispatchValue) {\n return dispatchOk\n ? {state:\"COMPLETE\", result_json:legacyEnvelopeV1(dispatchValue), error_json:null}\n : {state:\"FAILED\", result_json:null, error_json:JSON.stringify(dispatchValue)};\n}\n\nfunction sameNullable(a,b) {\n return (a ?? null) === (b ?? null);\n}\n\nfunction exactStaticJobBinding(row, job) {\n return !!row &&\n String(row.id) === String(job.id) &&\n String(row.op) === String(job.op) &&\n String(row.payload_json) === String(job.payload_json) &&\n Number(row.transport_lease_generation) === Number(job.transport_lease_generation);\n}\n\nfunction exactLiveAttempt(row, job) {\n return exactStaticJobBinding(row, job) &&\n String(row.lease_instance_id) === String(job.lease_instance_id) &&\n String(row.lease_attempt_id) === String(job.lease_attempt_id);\n}\n\nfunction exactTerminal(row, job, expected) {\n return exactLiveAttempt(row, job) &&\n String(row.state) === expected.state &&\n sameNullable(row.result_json, expected.result_json) &&\n sameNullable(row.error_json, expected.error_json) &&\n row.lease_owner == null &&\n row.lease_expires_at == null;\n}\n\nfunction leaseUnexpired(row, nowIso) {\n return !!row?.lease_expires_at && String(row.lease_expires_at) > String(nowIso);\n}\n\nfunction isExpiryUnknown(row) {\n if (!row || String(row.state) !== \"FAILED\" || row.result_json != null) return false;\n try {\n const e = JSON.parse(String(row.error_json || \"{}\"));\n return e?.classification === \"TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION\";\n } catch {\n return false;\n }\n}\n\nasync function exactReceipt(receipts, job, expectedEpoch, command, dispatchValue) {\n if (!Array.isArray(receipts) || receipts.length !== 1) return {ok:false, reason:receipts?.length > 1 ? \"AMBIGUOUS_MUTATION_RECEIPTS\" : \"MUTATION_RECEIPT_MISSING\"};\n const r = receipts[0];\n const payloadSha = await sha256TextV1(String(job.payload_json));\n if (String(r.job_id) !== String(job.id)) return {ok:false,reason:\"RECEIPT_JOB_MISMATCH\"};\n if (String(r.lease_attempt_id) !== String(job.lease_attempt_id)) return {ok:false,reason:\"RECEIPT_ATTEMPT_MISMATCH\"};\n if (String(r.lease_instance_id) !== String(job.lease_instance_id)) return {ok:false,reason:\"RECEIPT_INSTANCE_MISMATCH\"};\n if (String(r.lease_owner) !== String(job.lease_owner)) return {ok:false,reason:\"RECEIPT_OWNER_MISMATCH\"};\n if (Number(r.transport_lease_generation) !== Number(job.transport_lease_generation)) return {ok:false,reason:\"RECEIPT_GENERATION_MISMATCH\"};\n if (Number(r.authority_epoch) !== Number(expectedEpoch)) return {ok:false,reason:\"RECEIPT_AUTHORITY_EPOCH_MISMATCH\"};\n if (String(r.command) !== String(command)) return {ok:false,reason:\"RECEIPT_COMMAND_MISMATCH\"};\n if (String(r.payload_sha256) !== payloadSha) return {ok:false,reason:\"RECEIPT_PAYLOAD_MISMATCH\"};\n if (String(r.result_json) !== canonV1(dispatchValue)) return {ok:false,reason:\"RECEIPT_RESULT_MISMATCH\"};\n return {ok:true, receipt:r, payload_sha256:payloadSha};\n}\n\nasync function readOnlyStillFresh(command, preDispatchGeneration, deps) {\n if (!READ_ONLY_COMMANDS_V1.has(command)) return {ok:true};\n if (!Number.isInteger(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_PRE_DISPATCH_GENERATION_REQUIRED\"};\n const g = await deps.readCanonicalGeneration();\n if (Number(g) !== Number(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_CANONICAL_GENERATION_DRIFT\",expected:preDispatchGeneration,actual:Number(g)};\n return {ok:true};\n}\n\n/**\n * deps contract:\n * - readAuthority()\n * - readJob(id)\n * - readCanonicalGeneration()\n * - finishOncePreservingAttempt(job, expected) // exact attempt UPDATE; at most called twice total: initial + one retry\n * - readMutationReceipts(jobId, attemptId)\n * - finalizeExpiredMutationFromReceipt(job, expected, receipt)\n * - nowIso()\n *\n * No dispatch/re-dispatch function is accepted by this helper.\n */\nexport async function finalizeExactAttemptV1({\n job,\n expectedAuthorityEpoch,\n expectedAuthorityMode,\n command,\n dispatchOk,\n dispatchValue,\n preDispatchGeneration,\n deps,\n}) {\n const expected = expectedTerminal(dispatchOk, dispatchValue);\n const readOnly = READ_ONLY_COMMANDS_V1.has(command);\n const trace = [];\n let finishCalls = 0;\n\n const a0 = await deps.readAuthority();\n if (!authorityMatches(a0, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_PRE\",trace,finish_calls:finishCalls};\n }\n const fresh0 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh0.ok) return {...fresh0,trace,finish_calls:finishCalls};\n\n // Normal path. Candidate production finishOnce must preserve lease_instance_id and\n // lease_attempt_id on terminal rows so a client-unknown finish can be read back\n // as the exact attempt rather than merely the same job id.\n try {\n finishCalls++;\n const f = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_initial\",returned:f});\n if (f?.ok === true) {\n const rb = await deps.readJob(job.id);\n if (!exactTerminal(rb,job,expected)) return {ok:false,reason:\"FINISH_SUCCESS_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n return {ok:true,reconciled:false,path:\"INITIAL_FINISH\",trace,finish_calls:finishCalls};\n }\n trace.push({phase:\"finish_initial_nonok\",value:f});\n } catch (e) {\n trace.push({phase:\"finish_initial_throw\",error:errText(e)});\n }\n\n // Outcome-aware reconciliation begins. Re-read authority after the uncertain client outcome.\n const a1 = await deps.readAuthority();\n if (!authorityMatches(a1, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_RECONCILE\",trace,finish_calls:finishCalls};\n }\n const fresh1 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh1.ok) return {...fresh1,trace,finish_calls:finishCalls};\n\n let row = await deps.readJob(job.id);\n if (!row || !exactStaticJobBinding(row,job)) {\n return {ok:false,reason:\"QUEUE_JOB_BINDING_MISMATCH\",trace,finish_calls:finishCalls};\n }\n\n // Case A: UPDATE committed but client threw. Terminal readback itself proves completion,\n // but only because candidate finish preserves exact attempt identity.\n if (exactTerminal(row,job,expected)) {\n return {ok:true,reconciled:true,path:\"TERMINAL_EXACT_READBACK\",trace,finish_calls:finishCalls};\n }\n\n // Case B: UPDATE did not commit. Retry the exact finish at most once, only while this\n // exact attempt is still leased and unexpired.\n if (String(row.state) === \"LEASED\" && exactLiveAttempt(row,job) && String(row.lease_owner) === String(job.lease_owner) && leaseUnexpired(row,deps.nowIso())) {\n try {\n finishCalls++;\n const f2 = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_retry_once\",returned:f2});\n } catch (e) {\n trace.push({phase:\"finish_retry_once_throw\",error:errText(e)});\n }\n const fresh2 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh2.ok) return {...fresh2,trace,finish_calls:finishCalls};\n const rb2 = await deps.readJob(job.id);\n if (exactTerminal(rb2,job,expected)) {\n return {ok:true,reconciled:true,path:\"ONE_EXACT_FINISH_RETRY\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"ONE_FINISH_RETRY_EXHAUSTED\",trace,finish_calls:finishCalls};\n }\n\n // Read-only results may never be resurrected after lease expiry/reassignment, and they\n // may never cross canonical generation drift.\n if (readOnly) {\n return {ok:false,reason:\"READ_ONLY_RESULT_NOT_SAFE_TO_RECONCILE\",trace,finish_calls:finishCalls};\n }\n\n // A mutation receipt is not a license to reinterpret a still-LEASED row from another\n // attempt/instance. Receipt-bound recovery below is only for the exact known\n // expiry-terminalization state, never for a live/reassigned lease.\n if (String(row.state) === \"LEASED\") {\n if (!exactLiveAttempt(row,job)) {\n return {ok:false,reason:\"LIVE_ATTEMPT_IDENTITY_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"LEASED_ATTEMPT_EXPIRED_OR_UNSAFE_AFTER_ONE_RETRY\",trace,finish_calls:finishCalls};\n }\n\n // Case C: mutation dispatch is canonically known from the exact bound receipt.\n // This may repair the historical FAILED/OUTCOME_UNKNOWN transport row without\n // re-dispatching the canonical mutation.\n if (dispatchOk !== true) {\n return {ok:false,reason:\"MUTATION_DISPATCH_EXCEPTION_HAS_NO_SAFE_RECEIPT_ASSUMPTION\",trace,finish_calls:finishCalls};\n }\n const receipts = await deps.readMutationReceipts(job.id,job.lease_attempt_id);\n const rr = await exactReceipt(receipts,job,expectedAuthorityEpoch,command,dispatchValue);\n if (!rr.ok) return {...rr,trace,finish_calls:finishCalls};\n\n // Only the exact known expiry terminalization is repairable after expiry. Transport\n // generation equality proves no later lease generation was issued for this job.\n if (!isExpiryUnknown(row) || Number(row.transport_lease_generation) !== Number(job.transport_lease_generation)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_NOT_ELIGIBLE\",trace,finish_calls:finishCalls};\n }\n if (row.lease_owner != null || row.lease_expires_at != null) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_STILL_OWNED\",trace,finish_calls:finishCalls};\n }\n // Historical recovery cleared attempt/instance. If present, they must still match.\n if (row.lease_attempt_id != null && String(row.lease_attempt_id) !== String(job.lease_attempt_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_ATTEMPT_CONFLICT\",trace,finish_calls:finishCalls};\n }\n if (row.lease_instance_id != null && String(row.lease_instance_id) !== String(job.lease_instance_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_INSTANCE_CONFLICT\",trace,finish_calls:finishCalls};\n }\n\n const rec = await deps.finalizeExpiredMutationFromReceipt(job,expected,rr.receipt);\n trace.push({phase:\"receipt_bound_expiry_recovery\",returned:rec});\n const a2 = await deps.readAuthority();\n if (!authorityMatches(a2, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_POST_RECEIPT\",trace,finish_calls:finishCalls};\n }\n const rb3 = await deps.readJob(job.id);\n if (!exactTerminal(rb3,job,expected)) {\n return {ok:false,reason:\"RECEIPT_RECOVERY_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:true,reconciled:true,path:\"EXACT_MUTATION_RECEIPT_EXPIRY_RECOVERY\",trace,finish_calls:finishCalls};\n}\n`;\nlet resultFinalizationHelperV1Promise:Promise|null=null;\nasync function resultFinalizationHelperV1(){\n const h=await sha256Text(RESULT_FINALIZATION_HELPER_V1_SOURCE);\n if(h!==RESULT_FINALIZATION_HELPER_V1_SHA256)throw new Error(\"RESULT_FINALIZATION_HELPER_INTEGRITY_MISMATCH\");\n if(!resultFinalizationHelperV1Promise){\n resultFinalizationHelperV1Promise=import(\"data:text/javascript;charset=utf-8,\"+encodeURIComponent(RESULT_FINALIZATION_HELPER_V1_SOURCE));\n }\n return await resultFinalizationHelperV1Promise;\n}\n\nasync function canonicalAnchor(){\n const r:any=await sqlite.execute(\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const row:any=r.rows?.[0]??null;\n const g=Number(row?.generation),head=String(row?.event_head_hash??\"\");\n if(!Number.isInteger(g)||g<0||!/^[0-9a-f]{64}$/.test(head))throw new Error(\"CANONICAL_ANCHOR_UNAVAILABLE\");\n return {generation:g,event_head_hash:head};\n}\nasync function canonicalGeneration(){return (await canonicalAnchor()).generation;}\nasync function normalizedFinalizationAuthority(){\n const g:any=await admit();\n if(g?.ok===true)return {epoch:Number(g.epoch),writer:\"val_native\",mode:String(g.mode)};\n const a:any=g?.authority??await authority();\n return {epoch:Number(a?.epoch),writer:String(a?.writer??\"\"),mode:String(a?.mode)===\"PREPARED\"?\"PREPARED_READ_ONLY\":String(a?.mode??\"\")};\n}\n\nasync function emitRuntimeTick(){\n const a:any=await authority();\n if(!a||String(a.writer)!==\"val_native\"||![\"ACTIVE\",\"PREPARED\"].includes(String(a.mode))){\n return {ok:false,emitted:false,reason:\"VAL_NATIVE_NOT_SELECTED\",authority:a??null};\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNTIME_TICK_TABLE}(\n id TEXT PRIMARY KEY,\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n state TEXT NOT NULL,\n tick_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n metadata_json TEXT NOT NULL\n )`);\n const metadata=JSON.stringify({\n classification:\"NONAUTHORITY_EXECUTOR_RUNTIME_TICK\",\n grants_brain_authority:false,\n extends_canonical_lease:false,\n source:\"val_native_executor_prod.drain\"\n });\n await sqlite.execute({\n sql:`INSERT INTO ${RUNTIME_TICK_TABLE}(id,worker_id,instance_id,authority_epoch,state,tick_at,expires_at,metadata_json)\n VALUES('val-native-executor',?,?,?,'RUNNING',datetime('now'),datetime('now','+${RUNTIME_TICK_TTL_SECONDS} seconds'),?)\n ON CONFLICT(id) DO UPDATE SET\n worker_id=excluded.worker_id,\n instance_id=excluded.instance_id,\n authority_epoch=excluded.authority_epoch,\n state='RUNNING',\n tick_at=excluded.tick_at,\n expires_at=excluded.expires_at,\n metadata_json=excluded.metadata_json`,\n args:[WORKER,INSTANCE,Number(a.epoch),metadata]\n });\n return {ok:true,emitted:true,authority_epoch:Number(a.epoch),ttl_seconds:RUNTIME_TICK_TTL_SECONDS};\n}\nasync function admit(){\n const a:any=await authority();\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\",authority:null};\n if(String(a.writer)!==\"val_native\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n const mode=String(a.mode);\n if(mode===\"ACTIVE\")return {ok:true,epoch:Number(a.epoch),mode:\"ACTIVE\",authority:a};\n if(mode===\"PREPARED\")return {ok:true,epoch:Number(a.epoch),mode:\"PREPARED_READ_ONLY\",authority:a};\n return {ok:false,reason:\"AUTHORITY_MODE_NOT_ADMITTED\",authority:a};\n}\nconst ACQUIRE_RECONCILE_ATTEMPTS_R2=3;\ntype LeaseReconcileResultR2=\n | {kind:\"leased\";job:any;epoch:number;mode:string;acquisition_reconciled:true;acquisition_error:string}\n | {kind:\"none\";attempt_id:string}\n | {kind:\"outcome_unknown\";attempt_id:string;errors:string[]};\nexport async function reconcileExactLeaseAttemptR2(\n attempt:string,\n expectedEpoch:number,\n expectedMode:string,\n acquisitionError:unknown,\n):Promise{\n const errors:string[]=[];\n for(let i=0;i=1\n AND lease_expires_at>datetime('now')\n ORDER BY id`,args:[WORKER,INSTANCE,attempt]});\n const rows:any[]=r.rows||[];\n if(rows.length===0)return {kind:\"none\",attempt_id:attempt};\n if(rows.length!==1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,`ATTEMPT_CARDINALITY_CONFLICT_${rows.length}`]};\n }\n const job=rows[0];\n if(String(job.lease_instance_id)!==INSTANCE||String(job.lease_attempt_id)!==attempt||Number(job.transport_lease_generation)<1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,\"ATTEMPT_IDENTITY_POSTCONDITION_FAILED\"]};\n }\n return {\n kind:\"leased\",\n job,\n epoch:expectedEpoch,\n mode:expectedMode,\n acquisition_reconciled:true,\n acquisition_error:acquisitionError instanceof Error?acquisitionError.message:String(acquisitionError),\n };\n }catch(e){\n errors.push(e instanceof Error?e.message:String(e));\n }\n }\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors};\n}\nasync function recoverExpiredTransport(){\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const r:any=await tx.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at<=datetime('now') ORDER BY id`);\n const outcomes:any[]=[];\n for(const j of (r.rows||[])){\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION',\n 'receipt_policy','SIDE_RECEIPTS_DIAGNOSTIC_ONLY_NOT_COMPLETION_AUTHORITY',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner IS ? AND lease_instance_id IS ? AND lease_attempt_id IS ? AND transport_lease_generation=? AND lease_expires_at<=datetime('now')\n RETURNING id`,\n args:[j.id,j.lease_owner,j.lease_instance_id,j.lease_attempt_id,j.transport_lease_generation]});\n if((u.rows||[]).length)outcomes.push({id:j.id,state:\"FAILED\",reconciled_from_receipt:false,outcome_unknown:true});\n }\n await tx.commit();done=true;return{ok:true,outcomes};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function activeLeases(){\n const r:any=await sqlite.execute(`SELECT id,lease_owner,lease_instance_id,lease_attempt_id,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id`);\n return r.rows||[];\n}\nfunction atomicizeLeaseSql(sql:string){\n const setNeedle=`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')`;\n const retNeedle=\"RETURNING id,op,payload_json,priority,lease_expires_at\";\n if(sql.split(setNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_SET_SHAPE_DRIFT\");\n if(sql.split(retNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_RETURNING_SHAPE_DRIFT\");\n return sql.replace(setNeedle,`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')`)\n .replace(retNeedle,\"RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\");\n}\nasync function leaseOne(){\n const gate=await admit();if(!gate.ok)return {kind:\"fenced\",gate} as const;\n await recoverExpiredTransport();\n const active=await activeLeases();\n if(active.length>1)return {kind:\"conflict\",active} as const;\n if(active.length===1)return {kind:\"busy\",active:active[0]} as const;\n const preparedReadOnly=gate.mode===\"PREPARED_READ_ONLY\";\n const attempt=crypto.randomUUID();\n const expectedMode=String(gate.mode);\n let core:any;\n try{\n if(!preparedReadOnly&&!EMERGENCY_MUTATIONS_FROZEN&&PRELEASE_READ_COALESCE_V1_ENABLED){\n const acq:any=await acquireWithPreleaseRankReceiptV1(sqlite,{worker:WORKER,instance:INSTANCE,attempt});\n if(acq.kind===\"leased\"){\n const j:any=acq.job;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode,prelease_receipt:{rank0:acq.rank0,rank1:acq.rank1,rank_snapshot_sha256:acq.rank_snapshot_sha256}} as const;\n }\n return acq;\n }\n core=preparedReadOnly\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${JOB_TABLE} j\n WHERE j.state='READY' AND j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND 120\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE} x\n WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now')\n )\n ORDER BY\n CASE json_extract(j.payload_json,'$.args[0]')\n WHEN 'status' THEN 0\n WHEN 'verify-chain' THEN 1\n WHEN 'verify-claim-graph' THEN 2\n ELSE 3\n END,\n CASE WHEN j.priority>1000000000 THEN 1000000000 ELSE j.priority END DESC,\n j.created_at,j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt]})\n : EMERGENCY_MUTATIONS_FROZEN\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at>datetime('now')\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt,EMERGENCY_MUTATION_CANARY_JOB_ID,WORKER]})\n : await sqlite.execute({sql:atomicizeLeaseSql(leaseOneSql(JOB_TABLE)),args:[WORKER,INSTANCE,attempt,WORKER]});\n }catch(e){\n const rr=await reconcileExactLeaseAttemptR2(attempt,gate.epoch,expectedMode,e);\n if(rr.kind===\"leased\")return rr;\n if(rr.kind===\"none\")return {\n kind:\"acquisition_failed_no_bound_lease\",\n attempt_id:attempt,\n reason:e instanceof Error?e.message:String(e),\n } as const;\n return {kind:\"acquisition_outcome_unknown\",attempt_id:attempt,errors:rr.errors} as const;\n }\n const j:any=core.rows?.[0]??null;if(!j)return {kind:\"empty\"} as const;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode} as const;\n}\nasync function readQueueJob(id:string){\n const r:any=await sqlite.execute({sql:`SELECT * FROM ${JOB_TABLE} WHERE id=?`,args:[id]});\n return r.rows?.[0]??null;\n}\nasync function finishOncePreservingAttempt(job:any,expected:any){\n if(PRELEASE_READ_COALESCE_V1_ENABLED&&expected?.state===\"COMPLETE\"&&expected?.error_json==null&&typeof expected?.result_json===\"string\"&&classifyValNativeCoalesceResultV1(expected.result_json)){\n return await finalizeLeaderOptionalPreleaseFollowerV1(sqlite,{job:{...job,lease_owner:String(job.lease_owner||WORKER)},expected});\n }\n const r:any=await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,job.id,String(job.lease_owner||WORKER),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(r.rows||[]).length)return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"};\n return {ok:true,id:job.id,state:String(expected.state)};\n}\nasync function readMutationReceiptsExact(jobId:string,attemptId:string){\n await ensureMutationReceiptTable();\n const r:any=await sqlite.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE}\n WHERE job_id=? AND lease_attempt_id=?\n ORDER BY committed_at,job_id,lease_attempt_id`,args:[jobId,attemptId]});\n return r.rows||[];\n}\nfunction sameReceiptRow(a:any,b:any){\n const keys=[\"job_id\",\"lease_attempt_id\",\"lease_instance_id\",\"lease_owner\",\"transport_lease_generation\",\"authority_epoch\",\"command\",\"payload_sha256\",\"committed_generation\",\"event_head_hash\",\"result_json\",\"committed_at\"];\n return keys.every(k=>String(a?.[k]??\"\")===String(b?.[k]??\"\"));\n}\nasync function finalizeExpiredMutationFromReceiptExact(job:any,expected:any,receipt:any){\n await ensureMutationReceiptTable();\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const rr:any=await tx.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const rows:any[]=rr.rows||[];\n if(rows.length!==1||!sameReceiptRow(rows[0],receipt)){\n await tx.rollback();done=true;\n return {ok:false,reason:rows.length>1?\"AMBIGUOUS_MUTATION_RECEIPTS\":\"MUTATION_RECEIPT_CHANGED_OR_MISSING\"};\n }\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,\n lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='FAILED' AND op=? AND payload_json=? AND transport_lease_generation=?\n AND result_json IS NULL AND lease_owner IS NULL AND lease_expires_at IS NULL\n AND (lease_instance_id IS NULL OR lease_instance_id=?)\n AND (lease_attempt_id IS NULL OR lease_attempt_id=?)\n AND json_valid(error_json)=1\n AND json_extract(error_json,'$.classification')='TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION'\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,String(job.lease_instance_id),String(job.lease_attempt_id),\n String(job.id),String(job.op),String(job.payload_json),Number(job.transport_lease_generation),String(job.lease_instance_id),String(job.lease_attempt_id)]});\n if((u.rows||[]).length!==1){\n await tx.rollback();done=true;\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_UPDATE_REJECTED\"};\n }\n await tx.commit();done=true;\n return {ok:true,receipt_job_id:String(receipt.job_id)};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function finalizeJobExactAttempt(job:any,epoch:number,mode:string,command:string,dispatchOk:boolean,dispatchValue:any,preDispatchGeneration:number|undefined){\n const helper:any=await resultFinalizationHelperV1();\n const boundJob={...job,lease_owner:WORKER,lease_instance_id:String(job.lease_instance_id),lease_attempt_id:String(job.lease_attempt_id)};\n return await helper.finalizeExactAttemptV1({\n job:boundJob,\n expectedAuthorityEpoch:Number(epoch),\n expectedAuthorityMode:String(mode),\n command:String(command),\n dispatchOk:dispatchOk===true,\n dispatchValue,\n preDispatchGeneration,\n deps:{\n readAuthority:normalizedFinalizationAuthority,\n readJob:readQueueJob,\n readCanonicalGeneration:canonicalGeneration,\n finishOncePreservingAttempt,\n readMutationReceipts:readMutationReceiptsExact,\n finalizeExpiredMutationFromReceipt:finalizeExpiredMutationFromReceiptExact,\n nowIso:()=>new Date().toISOString().replace(\"Z\",\"+00:00\")\n }\n });\n}\nconst CHAIN_FAILURE_READ_ONLY=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; kernel allowlist still fences every unqualified mutator.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nfunction brainCommand(raw:string){\n try{const p=JSON.parse(raw);return Array.isArray(p?.args)?String(p.args[0]||\"\"):\"\"}catch{return \"\"}\n}\nasync function chainCircuitBreaker(raw:string,jobId:string){\n const command=brainCommand(raw);\n if(CHAIN_FAILURE_READ_ONLY.has(command))return {allow:true,command,integrity:null};\n const emergencyCanary=EMERGENCY_MUTATIONS_FROZEN&&jobId===EMERGENCY_MUTATION_CANARY_JOB_ID&&command===\"register-agent\";\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary)return {allow:false,command,integrity:{ok:false,reason:\"EPOCH2_MUTATIONS_EMERGENCY_FROZEN_PENDING_ATOMICITY_REPAIR\"}};\n let chain:any,graph:any;\n try{chain=await verifyBrainChain()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CHAIN_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n if(chain?.ok!==true)return {allow:false,command,integrity:{chain,graph:null}};\n try{graph=await verifyBrainClaimGraph()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CLAIM_GRAPH_EXCEPTION\",detail:e instanceof Error?e.message:String(e),chain}}}\n if(graph?.ok!==true)return {allow:false,command,integrity:{chain,graph}};\n return {allow:true,command,integrity:{chain,graph}};\n}\nfunction parseArr(v:any){try{const x=JSON.parse(String(v??\"[]\"));return Array.isArray(x)?x:[]}catch{return []}}\nasync function localCommitSnapshot(taskId:string,agent:string){\n const t:any=(await sqlite.execute({sql:`SELECT id,workstream,state,lease_owner,lease_generation,lease_expires_at,context_manifest,success_condition,decision_value,depends_json,requires_json,writes_json,guards_json\n FROM brainvn_tasks WHERE id=?`,args:[taskId]})).rows?.[0]??null;\n if(!t)return{ok:false,reason:\"TASK_MISSING\"};\n if(String(t.state)!==\"LEASED\"||String(t.lease_owner)!==agent)return{ok:false,reason:\"LEASE_CHANGED\",task:t};\n if(t.lease_expires_at&&String(t.lease_expires_at)<=new Date().toISOString().replace(\"Z\",\"+00:00\"))return{ok:false,reason:\"LEASE_EXPIRED\",task:t};\n const deps=parseArr(t.depends_json),guards=parseArr(t.guards_json);\n const depRows:any[]=[];\n for(const id of deps){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(id)]})).rows?.[0]??null;\n depRows.push(r??{id:String(id),state:\"MISSING\"});\n }\n const guardRows:any[]=[];\n let retryGuardSnapshotComplete=true;\n for(const g of guards){\n if(g?.type===\"task_complete\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),state:\"MISSING\"}});\n }else if(g?.type===\"claim_verified\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,status,updated_at FROM brainvn_claims WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),status:\"MISSING\"}});\n }else{\n retryGuardSnapshotComplete=false;\n guardRows.push({guard:g,resolved:null});\n }\n }\n const ws:any=(await sqlite.execute({sql:\"SELECT id,mission,verified_state FROM brainvn_workstreams WHERE id=?\",args:[String(t.workstream)]})).rows?.[0]??null;\n const stable={\n task:{id:t.id,workstream:t.workstream,state:t.state,lease_owner:t.lease_owner,lease_generation:t.lease_generation,\n context_manifest:t.context_manifest,success_condition:t.success_condition,decision_value:t.decision_value,\n depends_json:t.depends_json,requires_json:t.requires_json,writes_json:t.writes_json,guards_json:t.guards_json},\n dependencies:depRows,guards:guardRows,workstream_semantics:ws\n };\n return{ok:true,stable,lease_expires_at:t.lease_expires_at,workstream:String(t.workstream),retry_guard_snapshot_complete:retryGuardSnapshotComplete};\n}\nfunction sameSnapshot(a:any,b:any){return JSON.stringify(a?.stable)===JSON.stringify(b?.stable)}\nfunction mutationFields(args:any[]){\n let agent=\"\",task=\"\";\n for(let i=1;i{\n let found:number|null=null;\n for(let i=1;iJSON.stringify(k)+\":\"+cohortCanon(x[k])).join(\",\")+\"}\";\n}\nfunction cohortStrictJson(s:any,kind:string){\n try{return JSON.parse(String(s))}\n catch{throw new Error(\"COHORT_BAD_JSON_\"+kind)}\n}\nfunction cohortStrictObjectJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!v||typeof v!==\"object\"||Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_OBJECT\");\n return v;\n}\nfunction cohortStrictListJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_LIST\");\n return v;\n}\nfunction cohortStrictStringListJson(s:any,kind:string){\n const v=cohortStrictListJson(s,kind);\n if(v.some((x:any)=>typeof x!==\"string\"||!x))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_STRING_LIST\");\n return v;\n}\nfunction cohortCleanCaps(x:any){\n if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v))throw new Error(\"COHORT_BAD_CAPS\");\n return [...new Set(x)].sort();\n}\nfunction cohortFlagMap(args:any[],start:number,allowed:Set){\n if(!Array.isArray(args)||args.some(x=>typeof x!==\"string\"))return null;\n if((args.length-start)%2!==0)return null;\n const out:any={};\n for(let i=start;i=args.length)return null;\n const name=k.slice(2);\n if(!allowed.has(name)||Object.prototype.hasOwnProperty.call(out,name))return null;\n out[name]=String(args[i+1]);\n }\n return out;\n}\nfunction cohortExactEnvelope(row:any){\n if(String(row?.op)!==\"brain\")return null;\n let q:any;\n try{q=JSON.parse(String(row.payload_json))}\n catch{return null}\n if(!q||typeof q!==\"object\"||Array.isArray(q))return null;\n const keys=Object.keys(q).sort();\n if(keys.length!==2||keys[0]!==\"args\"||keys[1]!==\"timeout\")return null;\n if(!Array.isArray(q.args)||!Number.isInteger(q.timeout)||q.timeout<1||q.timeout>120)return null;\n return q;\n}\nfunction cohortParseRegister(row:any){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"register-agent\"||typeof q.args[1]!==\"string\"||!q.args[1])return null;\n const f=cohortFlagMap(q.args,2,new Set([\"workstream\",\"role\",\"type\",\"capabilities\"]));if(!f)return null;\n if(f.workstream!==\"global\"||!f.role||f.type!==\"CHAT_UNPROVEN\"||typeof f.capabilities!==\"string\")return null;\n let caps:any;try{caps=cohortCleanCaps(JSON.parse(f.capabilities))}catch{return null}\n return {row,q,member:{id:String(q.args[1]),workstream:\"global\",role:String(f.role),type:\"CHAT_UNPROVEN\",parent:null,capabilities:caps}};\n}\nfunction cohortParseClaim(row:any,agentId:string){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"claim\")return null;\n const f=cohortFlagMap(q.args,1,new Set([\"agent\",\"mode\",\"lease-seconds\",\"constitution-version\",\"constitution-sha256\",\"registry-version\"]));if(!f)return null;\n if(f.agent!==agentId)return null;\n if(f.mode!==undefined&&f.mode!==\"INTERACTIVE\")return null;\n if(f[\"lease-seconds\"]!==undefined&&f[\"lease-seconds\"]!==\"1800\")return null;\n return {row,q};\n}\nfunction cohortIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\"prevent_self_review\",\"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n return ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\";\n}\nasync function cohortTxRows(tx:any,sql:string,args:any[]=[]){\n const r:any=await tx.execute({sql,args});return r.rows||[];\n}\nasync function cohortTxOne(tx:any,sql:string,args:any[]=[]){\n return (await cohortTxRows(tx,sql,args))[0]??null;\n}\nasync function cohortSnapshot(tx:any){\n return {\n workstreams:await cohortTxRows(tx,\"SELECT * FROM brainvn_workstreams ORDER BY id\"),\n agents:await cohortTxRows(tx,\"SELECT * FROM brainvn_agents ORDER BY id\"),\n tasks:await cohortTxRows(tx,\"SELECT * FROM brainvn_tasks ORDER BY id\"),\n claims:await cohortTxRows(tx,\"SELECT * FROM brainvn_claims ORDER BY id\"),\n deps:await cohortTxRows(tx,\"SELECT * FROM brainvn_claim_deps ORDER BY parent_claim,child_claim\"),\n artifacts:await cohortTxRows(tx,\"SELECT * FROM brainvn_artifacts ORDER BY sha256\")\n };\n}\nfunction cohortParseTask(t:any){\n return {\n row:t,\n ctx:cohortStrictObjectJson(t.context_manifest,\"CTX\"),\n req:cohortStrictStringListJson(t.requires_json,\"REQ\"),\n deps:cohortStrictListJson(t.depends_json,\"DEPS\"),\n guards:cohortStrictListJson(t.guards_json,\"GUARDS\"),\n writes:cohortStrictStringListJson(t.writes_json,\"WRITES\")\n };\n}\nfunction cohortOverlap(a:string[],b:string[]){const B=new Set(b);return a.some(x=>B.has(x))}\nasync function cohortActivationOk(tx:any){\n const meta:any=await cohortTxOne(tx,\"SELECT predecessor_event_count FROM brainvn_epoch_meta WHERE id=1\");\n const t:any=await cohortTxOne(tx,\"SELECT state,result_event_id FROM brainvn_tasks WHERE id=?\",[COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK]);\n if(!meta||!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return false;\n const localSeq=Number(t.result_event_id)-Number(meta.predecessor_event_count);\n if(!Number.isInteger(localSeq)||localSeq<1)return false;\n const ev:any=await cohortTxOne(tx,\"SELECT agent_id,type,task_id FROM brainvn_epoch_events WHERE local_seq=?\",[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK||!ev.agent_id)return false;\n const a:any=await cohortTxOne(tx,\"SELECT type FROM brainvn_agents WHERE id=?\",[String(ev.agent_id)]);\n return !!a&&String(a.type)!==\"CHAT_UNPROVEN\";\n}\nfunction cohortOrderedReadySql(){\n const raw=leaseOneSql(JOB_TABLE);\n const start=raw.indexOf(\"SELECT j.id FROM \");\n const limit=raw.indexOf(\"LIMIT 1\",start);\n if(start<0||limit<0)throw new Error(\"COHORT_LEASE_ORDER_SHAPE_DRIFT\");\n let inner=raw.slice(start,limit)+\"LIMIT \"+COHORT_ADMISSION_FASTPATH_V3R2R1_SCAN_JOBS;\n inner=inner.replace(\"SELECT j.id FROM \",\"SELECT j.rowid AS queue_rowid,j.* FROM \");\n const qCount=(inner.match(/\\?/g)||[]).length;\n if(qCount!==1)throw new Error(\"COHORT_LEASE_ORDER_PLACEHOLDER_DRIFT_\"+qCount);\n return inner;\n}\nasync function cohortBaseReceipt(){\n const chain:any=await verifyBrainChain();\n if(chain?.ok!==true)return {ok:false,reason:\"CHAIN_NOT_VERIFIED\",chain};\n const graph:any=await verifyBrainClaimGraph();\n if(graph?.ok!==true)return {ok:false,reason:\"CLAIM_GRAPH_NOT_VERIFIED\",graph};\n const tx:any=await (sqlite as any).transaction(\"read\");let done=false;\n try{\n const meta:any=await cohortTxOne(tx,\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const authority:any=await cohortTxOne(tx,\"SELECT epoch,writer,mode,source_generation,source_head FROM \"+AUTH_TABLE+\" WHERE id=1\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||Number(meta.generation)!==Number(chain.generation)||String(meta.event_head_hash)!==String(chain.stored_head)){\n await tx.rollback();done=true;return {ok:false,reason:\"CHAIN_RECEIPT_STALE\"};\n }\n if(!authority||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n await tx.rollback();done=true;return {ok:false,reason:\"AUTHORITY_NOT_ACTIVE\"};\n }\n await tx.commit();done=true;\n return {ok:true,generation:Number(meta.generation),head:String(meta.event_head_hash),admission_digest:digest,\n authority:{epoch:Number(authority.epoch),writer:String(authority.writer),mode:String(authority.mode),\n source_generation:Number(authority.source_generation),source_head:String(authority.source_head)}};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}return {ok:false,reason:e instanceof Error?e.message:String(e)}}\n}\nfunction cohortEventBody(e:any){\n return cohortCanon({event_uuid:e.event_uuid,ts:e.ts,workstream:e.workstream,agent_id:e.agent_id,task_id:e.task_id,type:e.type,payload:e.payload,prev_hash:e.prev_hash});\n}\nasync function cohortEventHash(e:any){return await sha256Text(cohortEventBody(e))}\nfunction cohortNow(ms=Date.now()){return new Date(ms).toISOString().replace(\"Z\",\"+00:00\")}\nasync function tryCohortAdmissionFastpathV3R2R1(maxPairs:number){\n if(!COHORT_ADMISSION_FASTPATH_V3R2R1_ENABLED||maxPairsdatetime('now') ORDER BY id LIMIT 2\");\n if(activeInside.length){await tx.rollback();done=true;return {kind:\"not_applicable\"} as const}\n const meta:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_epoch_meta WHERE id=1\");\n const ws:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_workstreams WHERE id='global'\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||!ws||Number(meta.generation)!==Number(base.generation)||String(meta.event_head_hash)!==String(base.head)||digest!==String(base.admission_digest)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_BASE_DRIFT\"} as const;\n }\n if(!(await cohortActivationOk(tx))){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_ACTIVATION_NOT_VERIFIED\"} as const;\n }\n const ordered:any[]=await cohortTxRows(tx,cohortOrderedReadySql(),[WORKER]);\n const pairs:any[]=[];const seen=new Set();\n const pairCap=Math.min(COHORT_ADMISSION_FASTPATH_V3R2R1_MAX_PAIRS,maxPairs);\n for(let i=0;i+1[String(a.id),a]));\n for(const p of pairs)if(existing.has(p.reg.member.id)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_EXISTING_AGENT\"} as const;\n }\n let ready:any[],leased:any[];\n try{\n ready=state.tasks.filter((t:any)=>String(t.workstream)===\"global\"&&String(t.state)===\"READY\")\n .sort((a:any,b:any)=>Number(b.priority)-Number(a.priority)||String(a.id).localeCompare(String(b.id)))\n .map((t:any)=>cohortParseTask(t));\n leased=state.tasks.filter((t:any)=>String(t.state)===\"LEASED\").map((t:any)=>cohortParseTask(t));\n }catch{\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_SCHEDULER_SHAPE_FALLBACK\"} as const;\n }\n const used=new Set(),activeWrites:string[][]=leased.map((p:any)=>p.writes),assignments:any[]=[];\n for(const p of pairs){\n const m=p.reg.member,C=new Set(m.capabilities);let chosen:any=null;\n for(const t0 of ready){\n const t=t0.row;\n if(used.has(String(t.id)))continue;\n if(!t.dedupe_key)continue;\n if(t.assigned_agent!==null&&String(t.assigned_agent)!==m.id)continue;\n if(t0.ctx.execution_allowed===false)continue;\n const sensitive=cohortIndependenceSensitive(new Set(t0.req),t0.ctx);\n if(sensitive&&(m.type===\"CHAT_UNPROVEN\"||COHORT_EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true))continue;\n if(t0.req.some((x:string)=>COHORT_NON_AGENT_CAPS.has(x)))continue;\n if(t0.req.some((x:string)=>!C.has(x)))continue;\n if(t0.deps.length||t0.guards.length){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_DYNAMIC_CAUSAL_FALLBACK\"} as const;\n }\n if(activeWrites.some((x:string[])=>cohortOverlap(t0.writes,x)))continue;\n chosen=t0;used.add(String(t.id));activeWrites.push(t0.writes);break;\n }\n if(!chosen){await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_NO_READY_FALLBACK\"} as const}\n assignments.push({pair:p,member:m,task:chosen});\n }\n\n const queueAttempts:any[]=[];\n for(const a of assignments){\n for(const kind of [\"reg\",\"claim\"]){\n const qr=a.pair[kind].row,attempt=crypto.randomUUID();\n const u:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+\"+LEASE_SECONDS+\" seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now') WHERE rowid=? AND id=? AND state='READY' AND op=? AND payload_json=? RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\",\n args:[WORKER,INSTANCE,attempt,Number(qr.queue_rowid),String(qr.id),String(qr.op),String(qr.payload_json)]});\n const row:any=u.rows?.[0]??null;if(!row)throw new Error(\"COHORT_QUEUE_CAS_FAILED_\"+String(qr.id));\n queueAttempts.push({...row,kind,agent_id:a.member.id});\n }\n }\n\n const startGen=Number(meta.generation),startHead=String(meta.event_head_hash);\n let g=startGen,head=startHead;\n const maxSeq:any=await cohortTxOne(tx,\"SELECT COALESCE(MAX(local_seq),0) n FROM brainvn_epoch_events\");\n let seq=Number(maxSeq?.n??0);\n const events:any[]=[],agents:any[]=[],taskUpdates:any[]=[],results:any[]=[];\n const baseMs=Date.now();\n for(let i=0;iArray.from({length:count},()=>(\"(\" + Array.from({length:n},()=>\"?\").join(\",\") + \")\")).join(\",\");\n const aArgs:any[]=[];for(const a of agents)aArgs.push(a.id,a.parent_id,a.type,a.workstream,a.role,a.status,a.boot_generation,a.last_generation,a.last_seen,a.capabilities_json);\n await tx.execute({sql:\"INSERT INTO brainvn_agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES \"+valueRows(10,agents.length),args:aArgs});\n const taskIds=taskUpdates.map(x=>x.id);\n const ownerCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),genCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),expCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),updCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \");\n const tArgs:any[]=[];for(const t of taskUpdates)tArgs.push(t.id,t.owner);for(const t of taskUpdates)tArgs.push(t.id,t.lease_generation);for(const t of taskUpdates)tArgs.push(t.id,t.lease_expires_at);for(const t of taskUpdates)tArgs.push(t.id,t.updated_at);tArgs.push(...taskIds);\n const tu:any=await tx.execute({sql:\"UPDATE brainvn_tasks SET state='LEASED',lease_owner=CASE id \"+ownerCase+\" END,lease_mode='INTERACTIVE',lease_generation=CASE id \"+genCase+\" END,lease_expires_at=CASE id \"+expCase+\" END,updated_at=CASE id \"+updCase+\" END WHERE id IN (\"+taskIds.map(()=>\"?\").join(\",\")+\") AND state='READY' RETURNING id\",args:tArgs});\n if((tu.rows||[]).length!==taskUpdates.length)throw new Error(\"COHORT_TASK_BULK_CAS_MISMATCH\");\n const eArgs:any[]=[];for(const e of events)eArgs.push(e.local_seq,e.event_uuid,e.ts,e.workstream,e.agent_id,e.task_id,e.type,e.payload_json,e.prev_hash,e.event_hash,e.transaction_generation);\n await tx.execute({sql:\"INSERT INTO brainvn_epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation) VALUES \"+valueRows(11,events.length),args:eArgs});\n const mu:any=await tx.execute({sql:\"UPDATE brainvn_epoch_meta SET generation=?,event_head_hash=?,new_event_count=new_event_count+? WHERE id=1 AND generation=? AND event_head_hash=? RETURNING generation\",args:[g,head,events.length,startGen,startHead]});\n if(!(mu.rows||[]).length)throw new Error(\"COHORT_META_CAS_MISMATCH\");\n await tx.execute({sql:\"UPDATE brainvn_workstreams SET head_generation=?,updated_at=? WHERE id='global'\",args:[g,cohortNow()]});\n\n const byAgent=new Map(results.map(x=>[x.agent_id,x]));\n const outputItems:any[]=[];\n for(const q of queueAttempts){\n const rr:any=byAgent.get(q.agent_id),result=q.kind===\"reg\"?rr.regResult:rr.claimResult;\n const committedGeneration=q.kind===\"reg\"?rr.regGeneration:rr.claimGeneration;\n const committedHead=q.kind===\"reg\"?rr.regHead:rr.claimHead;\n const committedAt=q.kind===\"reg\"?rr.regTs:rr.claimTs;\n const payloadSha=await sha256Text(String(q.payload_json));\n await tx.execute({sql:\"INSERT INTO \"+MUTATION_RECEIPT_TABLE+\"(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\",\n args:[String(q.id),String(q.lease_attempt_id),String(q.lease_instance_id),WORKER,Number(q.transport_lease_generation),Number(authority.epoch),\n q.kind===\"reg\"?\"register-agent\":\"claim\",payloadSha,committedGeneration,committedHead,cohortCanon(result),committedAt]});\n const fq:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? RETURNING id,state\",\n args:[legacyEnvelope(result),String(q.id),WORKER,String(q.lease_instance_id),String(q.lease_attempt_id),Number(q.transport_lease_generation),String(q.op),String(q.payload_json)]});\n if((fq.rows||[]).length!==1)throw new Error(\"COHORT_QUEUE_FINALIZE_CAS_FAILED_\"+String(q.id));\n outputItems.push({id:String(q.id),transport_lease_generation:Number(q.transport_lease_generation),attempt_id:String(q.lease_attempt_id),\n dispatch_ok:true,result,finish:{ok:true,id:String(q.id),state:\"COMPLETE\",path:\"COHORT_ATOMIC_SAME_DB\"},\n cohort_fastpath:{schema:\"COHORT_ADMISSION_FASTPATH_V3R2R1_PRODUCTION_V1\",candidate_sha256:COHORT_ADMISSION_FASTPATH_V3R2R1_CANDIDATE_SHA256,\n pair_count:assignments.length,atomic_same_db:true,serial_pairwise_prefix:true}});\n }\n\n await tx.commit();done=true;\n const postChain:any=await verifyBrainChain(),postGraph:any=await verifyBrainClaimGraph();\n return {kind:\"completed\",items:outputItems,pairs:assignments.length,post_integrity:{chain_ok:postChain?.ok===true,claim_graph_ok:postGraph?.ok===true,\n generation:postChain?.generation,head:postChain?.stored_head},base_generation:startGen,post_generation:g} as const;\n }catch(e){\n if(!done){try{await tx.rollback()}catch{}}\n return {kind:\"not_applicable\",reason:e instanceof Error?e.message:String(e)} as const;\n }\n}\n\nasync function executeJob(job:any,epoch:number){\n const raw=String(job.payload_json);\n const fallbackCommand=brainCommand(raw);\n let command=fallbackCommand;\n let preDispatchGeneration:number|undefined=undefined;\n if(String(job.op)!==\"brain\")return {ok:false,value:{classification:\"VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP\",op:String(job.op)},command,preDispatchGeneration};\n try{\n const gate=await chainCircuitBreaker(raw,String(job.id));\n command=String(gate.command||fallbackCommand||\"\");\n if(!gate.allow)return {ok:false,value:{\n classification:\"VAL_NATIVE_CHAIN_INTEGRITY_CIRCUIT_BREAKER\",\n command:command||\"UNKNOWN\",\n integrity:gate.integrity,\n retry_policy:\"RESTORE_VERIFIED_CHAIN_THEN_SUBMIT_NEW_JOB_ID\",\n canonical_dispatch_performed:false\n },command,preDispatchGeneration};\n if(CHAIN_FAILURE_READ_ONLY.has(command))preDispatchGeneration=await canonicalGeneration();\n const value=await dispatchWithStableMutationRetry(raw,boundTransportContext(job,epoch));\n return {ok:true,value,command,preDispatchGeneration};\n }catch(e){\n return {ok:false,value:{type:e instanceof Error?e.name:\"Error\",detail:e instanceof Error?e.message:String(e)},command,preDispatchGeneration};\n }\n}\nexport async function drain(maxJobs=32){\n const started=new Date().toISOString(),items:any[]=[];\n let runtime_tick:any=null;\n try{runtime_tick=await emitRuntimeTick();}\n catch(e){runtime_tick={ok:false,emitted:false,reason:\"RUNTIME_TICK_WRITE_FAILED\",detail:e instanceof Error?e.message:String(e)};}\n while(items.length=COHORT_ADMISSION_FASTPATH_V3R2R1_MIN_PAIRS*2){\n const cohort:any=await tryCohortAdmissionFastpathV3R2R1(Math.floor(remaining/2));\n if(cohort.kind===\"completed\"){\n items.push(...cohort.items);\n if(cohort.post_integrity?.chain_ok!==true||cohort.post_integrity?.claim_graph_ok!==true){\n return {ok:false,started,finished:new Date().toISOString(),runtime_tick,\n stop:{kind:\"cohort_post_integrity_failed\",post_integrity:cohort.post_integrity},processed:items.length,items};\n }\n continue;\n }\n }\n const l:any=await leaseOne();\n if(l.kind!==\"leased\"){\n const acquisitionFault=l.kind===\"acquisition_failed_no_bound_lease\"||l.kind===\"acquisition_outcome_unknown\";\n return {ok:!acquisitionFault&&l.kind!==\"conflict\"&&l.kind!==\"fenced\",started,finished:new Date().toISOString(),runtime_tick,stop:l,processed:items.length,items};\n }\n const ex=await executeJob(l.job,l.epoch);\n const fin=await finalizeJobExactAttempt(l.job,l.epoch,String(l.mode),String(ex.command||brainCommand(String(l.job.payload_json))),ex.ok,ex.value,ex.preDispatchGeneration);\n items.push({id:l.job.id,transport_lease_generation:l.job.transport_lease_generation,attempt_id:l.job.lease_attempt_id,dispatch_ok:ex.ok,result:ex.value,finish:fin});\n if(!fin.ok)return {ok:false,started,finished:new Date().toISOString(),runtime_tick,stop:fin,processed:items.length,items};\n }\n return {ok:true,started,finished:new Date().toISOString(),runtime_tick,stop:{kind:\"max_jobs\"},processed:items.length,items};\n}\nexport default drain;\n","deleted",false,"label",[14],"28272fcb-c8c0-4b64-acbe-b2aa0115d676",["D",1789281077028],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","SC1 frozen exact-kernel verification clone","imageUrl","userId","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","01a09976-87c5-7210-abe1-53a4eb6312e0","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","28272fcbc8c04b64acbeb2aa0115d676","tursoHostname","28272fcbc8c04b64acbeb2aa0115d676-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789542643120],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",3,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":36,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]