[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","oromaskevic23","name","imperial-nca-31day-runtime","path","execution_bridge.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/oromaskevic23/imperial-nca-31day-runtime/code/execution_bridge.ts","extension","id","60051f01-58e6-43e9-a70e-6999acf93636","fileId","4ca6bf4a-a2ae-11f1-a3f0-1607ee4eb77e","parentId","branchId","9599e79a-1b06-4a25-a590-49e65a500be3","branchVersion",122,"latest",true,"createdAt",["D",1787951518053],"version",19,"fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst POLICY_VERSION = \"IMPERIAL-EXECUTION-BRIDGE-2.0.0\";\nconst MISSION_ID = \"IC-IMPERIAL-NCA-31DAY-COMMERCIAL-RUNTIME-001\";\nconst SERVICE_ID = \"VAL_TOWN_CODEX_CONNECTOR\";\nconst PASSPORT_ID = \"AI-PASSPORT-HANTER-EXECUTION-CONNECTOR-001\";\nconst SERVICE_EXPIRES_AT = \"2026-09-27T22:42:37.000Z\";\nconst APPROVAL_EXPIRES_AT = \"2026-09-27T22:42:37.000Z\";\nconst MAX_BODY_BYTES = 16 * 1024;\nconst MAX_TASK_CHARS = 4096;\nconst ALLOWED_PERMISSION_REASON = \"STANDING_DELEGATION_L1_OR_PREPARATION\";\nconst CAPABILITIES = new Set([\n \"QUEUE_READ\",\n \"QUEUE_AUDIT_READ\",\n \"QUEUE_CLAIM\",\n \"QUEUE_COMPLETE\",\n \"QUEUE_FAIL\",\n \"QUEUE_RELEASE\",\n]);\nconst DOMAINS = new Map([\n [\"Kids Media\", [\"ORCH-KIDS-MEDIA-001\", \"RD-KIDS-MEDIA-001\"]],\n [\"Dropshipping Commerce\", [\"ORCH-DROPSHIPPING-001\", \"RD-DROPSHIPPING-001\"]],\n [\"AI Automation\", [\"ORCH-AI-AUTOMATION-001\", \"RD-AI-AUTOMATION-001\"]],\n [\"B2B Revenue\", [\"ORCH-B2B-REVENUE-001\", \"RD-B2B-REVENUE-001\"]],\n [\"Creative & Digital\", [\"ORCH-CREATIVE-DIGITAL-001\", \"RD-CREATIVE-DIGITAL-001\"]],\n [\"Education\", [\"ORCH-EDUCATION-001\", \"RD-EDUCATION-001\"]],\n [\"Data & Market Intelligence\", [\"ORCH-DATA-MARKET-001\", \"RD-DATA-MARKET-001\"]],\n [\"SME Services\", [\"ORCH-SME-SERVICES-001\", \"RD-SME-SERVICES-001\"]],\n]);\nconst INJECTION_PATTERNS = [\n /ignore (?:all |any )?(?:previous|prior|system) instructions/i,\n /(?:this is |treat (?:this|the following) as )(?:a )?system message/i,\n /(?:the )?architect (?:has )?approved/i,\n /reveal (?:the )?(?:system prompt|secrets?|credentials?)/i,\n /(?:execute|run) (?:this |the )?(?:command|code|script)/i,\n /bypass (?:the )?(?:approval|guardian|security|policy)/i,\n];\n\ntype Capability = \"QUEUE_READ\" | \"QUEUE_CLAIM\" | \"QUEUE_COMPLETE\" | \"QUEUE_FAIL\" | \"QUEUE_RELEASE\" | \"QUEUE_AUDIT_READ\";\ntype AuditType =\n | \"QUEUE_READY_READ\"\n | \"QUEUE_AUDIT_READ\"\n | \"QUEUE_ITEM_CLAIMED\"\n | \"QUEUE_CLAIM_REJECTED\"\n | \"QUEUE_ITEM_COMPLETED\"\n | \"QUEUE_ITEM_FAILED\"\n | \"QUEUE_ITEM_RELEASED\"\n | \"QUEUE_CLAIM_EXPIRED\"\n | \"AUTHORIZATION_DENIED\";\n\nfunction secret(): string {\n const value = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\n if (!value) throw new Error(\"SERVER_AUTH_UNAVAILABLE\");\n return value;\n}\n\nfunction utf8(value: string): Uint8Array {\n return new TextEncoder().encode(value);\n}\n\nasync function sha256(value: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", utf8(value));\n return \"sha256:\" + [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function hmac(value: string): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n utf8(secret()),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, utf8(value));\n return [...new Uint8Array(signature)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction constantTimeEqual(left: string, right: string): boolean {\n if (left.length !== right.length || !/^[a-f0-9]+$/.test(left) || !/^[a-f0-9]+$/.test(right)) return false;\n let difference = 0;\n for (let index = 0; index < left.length; index += 1) {\n difference |= left.charCodeAt(index) ^ right.charCodeAt(index);\n }\n return difference === 0;\n}\n\nfunction json(data: unknown, status = 200): Response {\n return Response.json(data, {\n status,\n headers: {\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n}\n\nfunction exactObject(value: unknown, required: string[], optional: string[] = []): Record | null {\n if (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n const object = value as Record;\n const allowed = new Set([...required, ...optional]);\n if (required.some((key) => !Object.hasOwn(object, key))) return null;\n if (Object.keys(object).some((key) => !allowed.has(key))) return null;\n return object;\n}\n\nfunction safeIdentifier(value: unknown, minimum = 8, maximum = 128): string | null {\n if (typeof value !== \"string\" || value.length < minimum || value.length > maximum) return null;\n return /^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(value) ? value : null;\n}\n\nfunction safeEvidenceRef(value: unknown): string | null {\n if (typeof value !== \"string\" || value.length > 2048) return null;\n return /^(?:urn:evidence:|https:\\/\\/)[^\\s]{8,2048}$/.test(value) ? value : null;\n}\n\nfunction safeHash(value: unknown): string | null {\n return typeof value === \"string\" && /^sha256:[a-f0-9]{64}$/.test(value) ? value : null;\n}\n\nfunction sanitizeTask(value: unknown) {\n const original = typeof value === \"string\" ? value : \"\";\n const normalized = original\n .replace(/[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/g, \" \")\n .trim();\n const text = normalized.slice(0, MAX_TASK_CHARS);\n return {\n text,\n trust: \"UNTRUSTED_TASK_DATA\",\n authority: \"NONE\",\n prompt_injection_detected: INJECTION_PATTERNS.some((pattern) => pattern.test(text)),\n truncated: normalized.length > MAX_TASK_CHARS,\n };\n}\n\nasync function addColumn(name: string, definition: string) {\n try {\n await sqlite.execute(`ALTER TABLE execution_queue ADD COLUMN ${name} ${definition}`);\n } catch (error) {\n if (!String(error).toLowerCase().includes(\"duplicate column\")) throw error;\n }\n}\n\nasync function ensureSchema() {\n await addColumn(\"mission_id\", \"TEXT\");\n await addColumn(\"orchestrator_id\", \"TEXT\");\n await addColumn(\"runtime_domain\", \"TEXT\");\n await addColumn(\"guardian_state\", \"TEXT\");\n await addColumn(\"approval_state\", \"TEXT\");\n await addColumn(\"approval_decision_id\", \"TEXT\");\n await addColumn(\"approval_expires_at\", \"TEXT\");\n await addColumn(\"approval_revoked_at\", \"TEXT\");\n await addColumn(\"policy_version\", \"TEXT\");\n await addColumn(\"retriable\", \"INTEGER NOT NULL DEFAULT 1\");\n await addColumn(\"authorization_binding\", \"TEXT\");\n await addColumn(\"claim_id\", \"TEXT\");\n await addColumn(\"claimed_by\", \"TEXT\");\n await addColumn(\"claimed_at\", \"TEXT\");\n await addColumn(\"claim_expires_at\", \"TEXT\");\n await addColumn(\"authorization_decision_id\", \"TEXT\");\n await addColumn(\"failure_reason\", \"TEXT\");\n await addColumn(\"failure_retriable\", \"INTEGER\");\n await addColumn(\"completion_request_id\", \"TEXT\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_claims (\n claim_id TEXT PRIMARY KEY,\n queue_item_id INTEGER NOT NULL,\n claimed_by TEXT NOT NULL,\n passport_id TEXT NOT NULL,\n agent_id TEXT NOT NULL,\n orchestrator_id TEXT NOT NULL,\n runtime_domain TEXT NOT NULL,\n claimed_at TEXT NOT NULL,\n claim_expires_at TEXT NOT NULL,\n authorization_decision_id TEXT NOT NULL,\n state TEXT NOT NULL,\n retriable INTEGER NOT NULL,\n completed_at TEXT,\n failure_reason TEXT\n )`);\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS execution_bridge_one_active_claim\n ON execution_bridge_claims(queue_item_id) WHERE state='ACTIVE'`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_nonces (\n nonce TEXT PRIMARY KEY,\n service_id TEXT NOT NULL,\n capability TEXT NOT NULL,\n used_at TEXT NOT NULL,\n expires_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_requests (\n request_id TEXT PRIMARY KEY,\n operation TEXT NOT NULL,\n claim_id TEXT NOT NULL,\n service_id TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_audit (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id TEXT NOT NULL UNIQUE,\n event_type TEXT NOT NULL,\n timestamp TEXT NOT NULL,\n queue_item_id INTEGER,\n claim_id TEXT,\n request_id TEXT,\n service_id TEXT NOT NULL,\n passport_id TEXT NOT NULL,\n agent_id TEXT,\n orchestrator_id TEXT,\n runtime_domain TEXT,\n authorization_decision_id TEXT NOT NULL,\n previous_state TEXT,\n new_state TEXT,\n result TEXT NOT NULL,\n reason_code TEXT NOT NULL,\n evidence_ref TEXT,\n evidence_sha256 TEXT,\n event_hash TEXT NOT NULL,\n event_signature TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS execution_bridge_audit_no_update\n BEFORE UPDATE ON execution_bridge_audit BEGIN SELECT RAISE(ABORT, 'AUDIT_IMMUTABLE'); END`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS execution_bridge_audit_no_delete\n BEFORE DELETE ON execution_bridge_audit BEGIN SELECT RAISE(ABORT, 'AUDIT_IMMUTABLE'); END`);\n await bindUnboundQueueItems();\n}\n\nfunction domainBinding(domain: string): [string, string] | null {\n return (DOMAINS.get(domain) as [string, string] | undefined) ?? null;\n}\n\nasync function queueBinding(row: Record, orchestratorId: string, runtimeDomain: string): Promise {\n const missionId = typeof row.mission_id === \"string\" ? row.mission_id : MISSION_ID;\n const guardianState = typeof row.guardian_state === \"string\" ? row.guardian_state : \"PASS\";\n const approvalState = typeof row.approval_state === \"string\" ? row.approval_state : \"ACTIVE\";\n const approvalDecisionId = typeof row.approval_decision_id === \"string\"\n ? row.approval_decision_id\n : `PM-${row.id}-${row.created_at}`;\n const approvalExpiresAt = typeof row.approval_expires_at === \"string\" ? row.approval_expires_at : APPROVAL_EXPIRES_AT;\n const policyVersion = typeof row.policy_version === \"string\" ? row.policy_version : POLICY_VERSION;\n return await hmac(JSON.stringify([\n \"QUEUE_AUTHORIZATION_BINDING_V2\",\n row.id,\n row.agent_id,\n row.action_stage,\n row.next_action,\n row.connector,\n row.created_at,\n row.permission_decision,\n row.permission_reason,\n missionId,\n orchestratorId,\n runtimeDomain,\n guardianState,\n approvalState,\n approvalDecisionId,\n approvalExpiresAt,\n policyVersion,\n ]));\n}\n\nasync function bindUnboundQueueItems() {\n const rows = await sqlite.execute(`SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.created_at,\n q.permission_decision,q.permission_reason,a.domain\n FROM execution_queue q JOIN agents a ON a.agent_id=q.agent_id\n WHERE q.authorization_binding IS NULL`);\n for (const row of rows.rows as Record[]) {\n if (row.permission_decision !== \"ALLOW\" || row.permission_reason !== ALLOWED_PERMISSION_REASON) continue;\n const binding = domainBinding(String(row.domain));\n if (!binding) continue;\n const [orchestratorId, runtimeDomain] = binding;\n const approvalDecisionId = `PM-${row.id}-${row.created_at}`;\n const authorizationBinding = await queueBinding(row, orchestratorId, runtimeDomain);\n await sqlite.execute({\n sql: `UPDATE execution_queue SET mission_id=?,orchestrator_id=?,runtime_domain=?,guardian_state='PASS',\n approval_state='ACTIVE',approval_decision_id=?,approval_expires_at=?,approval_revoked_at=NULL,\n policy_version=?,retriable=1,authorization_binding=?\n WHERE id=? AND authorization_binding IS NULL AND permission_decision='ALLOW' AND permission_reason=?`,\n args: [\n MISSION_ID,\n orchestratorId,\n runtimeDomain,\n approvalDecisionId,\n APPROVAL_EXPIRES_AT,\n POLICY_VERSION,\n authorizationBinding,\n row.id,\n ALLOWED_PERMISSION_REASON,\n ],\n });\n }\n}\n\nasync function verifyQueueBinding(row: Record): Promise {\n const expected = await queueBinding(row, String(row.orchestrator_id), String(row.runtime_domain));\n return typeof row.authorization_binding === \"string\" && constantTimeEqual(expected, row.authorization_binding);\n}\n\nasync function eventMaterial(input: {\n eventType: AuditType;\n timestamp: string;\n queueItemId: number | null;\n claimId: string | null;\n requestId: string | null;\n serviceId: string;\n agentId: string | null;\n orchestratorId: string | null;\n runtimeDomain: string | null;\n authorizationDecisionId: string;\n previousState: string | null;\n newState: string | null;\n result: \"PASS\" | \"DENY\";\n reasonCode: string;\n evidenceRef: string | null;\n evidenceSha256: string | null;\n}) {\n const eventId = crypto.randomUUID();\n const ordered = [\n eventId,\n input.eventType,\n input.timestamp,\n input.queueItemId,\n input.claimId,\n input.requestId,\n input.serviceId,\n PASSPORT_ID,\n input.agentId,\n input.orchestratorId,\n input.runtimeDomain,\n input.authorizationDecisionId,\n input.previousState,\n input.newState,\n input.result,\n input.reasonCode,\n input.evidenceRef,\n input.evidenceSha256,\n ];\n const eventHash = await sha256(JSON.stringify(ordered));\n const eventSignature = await hmac(eventHash);\n return { ...input, eventId, eventHash, eventSignature };\n}\n\nfunction auditInsert(event: Awaited>) {\n return {\n sql: `INSERT INTO execution_bridge_audit(\n event_id,event_type,timestamp,queue_item_id,claim_id,request_id,service_id,passport_id,\n agent_id,orchestrator_id,runtime_domain,authorization_decision_id,previous_state,new_state,\n result,reason_code,evidence_ref,evidence_sha256,event_hash,event_signature\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [\n event.eventId,\n event.eventType,\n event.timestamp,\n event.queueItemId,\n event.claimId,\n event.requestId,\n event.serviceId,\n PASSPORT_ID,\n event.agentId,\n event.orchestratorId,\n event.runtimeDomain,\n event.authorizationDecisionId,\n event.previousState,\n event.newState,\n event.result,\n event.reasonCode,\n event.evidenceRef,\n event.evidenceSha256,\n event.eventHash,\n event.eventSignature,\n ],\n };\n}\n\nfunction conditionalClaimAuditInsert(\n event: Awaited>,\n claimId: string,\n) {\n const base = auditInsert(event);\n const valuesIndex = base.sql.indexOf(\" VALUES(\");\n const header = base.sql.slice(0, valuesIndex);\n return {\n sql: `${header} SELECT ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?\n WHERE EXISTS(SELECT 1 FROM execution_bridge_claims WHERE claim_id=? AND state='ACTIVE')`,\n args: [...base.args, claimId],\n };\n}\n\nfunction conditionalFinalizeAuditInsert(\n event: Awaited>,\n requestId: string,\n claimId: string,\n claimState: string,\n queueState: string,\n) {\n const base = auditInsert(event);\n const valuesIndex = base.sql.indexOf(\" VALUES(\");\n const header = base.sql.slice(0, valuesIndex);\n return {\n sql: `${header} SELECT ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?\n WHERE EXISTS(\n SELECT 1 FROM execution_bridge_requests r\n JOIN execution_bridge_claims c ON c.claim_id=r.claim_id\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE r.request_id=? AND r.claim_id=? AND c.state=?\n AND q.execution_state=? AND q.completion_request_id=?\n )`,\n args: [...base.args, requestId, claimId, claimState, queueState, requestId],\n };\n}\n\nasync function appendDenied(reasonCode: string, serviceId = \"UNVERIFIED_CALLER\") {\n try {\n await ensureSchema();\n const timestamp = new Date().toISOString();\n const event = await eventMaterial({\n eventType: \"AUTHORIZATION_DENIED\",\n timestamp,\n queueItemId: null,\n claimId: null,\n requestId: null,\n serviceId: serviceId === SERVICE_ID ? serviceId : \"UNVERIFIED_CALLER\",\n agentId: null,\n orchestratorId: null,\n runtimeDomain: null,\n authorizationDecisionId: await sha256(JSON.stringify([\"DENY\", timestamp, reasonCode])),\n previousState: null,\n newState: null,\n result: \"DENY\",\n reasonCode,\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n } catch {\n // Authorization response remains fail-closed even if audit storage is unavailable.\n }\n}\n\nasync function authenticate(req: Request, body: string, required: Capability) {\n const serviceId = req.headers.get(\"x-imperial-service-id\") ?? \"\";\n const capability = req.headers.get(\"x-imperial-capability\") ?? \"\";\n const timestamp = req.headers.get(\"x-imperial-timestamp\") ?? \"\";\n const nonce = req.headers.get(\"x-imperial-nonce\") ?? \"\";\n const signature = req.headers.get(\"x-imperial-signature\") ?? \"\";\n\n if (\n serviceId !== SERVICE_ID ||\n capability !== required ||\n !CAPABILITIES.has(capability) ||\n !/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/.test(timestamp) ||\n !/^[A-Za-z0-9_-]{16,128}$/.test(nonce) ||\n !/^[a-f0-9]{64}$/.test(signature)\n ) {\n await appendDenied(\"SIGNED_CAPABILITY_REQUIRED\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n const age = Math.abs(Date.now() - Date.parse(timestamp));\n if (!Number.isFinite(age) || age > 60_000 || Date.parse(SERVICE_EXPIRES_AT) <= Date.now()) {\n await appendDenied(\"SIGNED_CAPABILITY_EXPIRED\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n\n const url = new URL(req.url);\n const bodyHash = await sha256(body);\n const canonical = [\n req.method.toUpperCase(),\n url.pathname + url.search,\n timestamp,\n nonce,\n serviceId,\n capability,\n bodyHash,\n ].join(\"\\n\");\n const expected = await hmac(canonical);\n if (!constantTimeEqual(expected, signature)) {\n await appendDenied(\"SIGNATURE_INVALID\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n\n await ensureSchema();\n await sqlite.execute({\n sql: \"DELETE FROM execution_bridge_nonces WHERE expires_at < ?\",\n args: [new Date().toISOString()],\n });\n const inserted = await sqlite.execute({\n sql: `INSERT OR IGNORE INTO execution_bridge_nonces(nonce,service_id,capability,used_at,expires_at)\n VALUES(?,?,?,?,?)`,\n args: [\n nonce,\n serviceId,\n capability,\n timestamp,\n new Date(Date.parse(timestamp) + 5 * 60_000).toISOString(),\n ],\n });\n if (inserted.rowsAffected !== 1) {\n await appendDenied(\"REPLAY_DENIED\", serviceId);\n return { ok: false as const, status: 409, reason: \"REPLAY_DENIED\" };\n }\n\n return {\n ok: true as const,\n serviceId,\n capability: capability as Capability,\n authorizationDecisionId: await sha256(JSON.stringify([\n POLICY_VERSION,\n PASSPORT_ID,\n serviceId,\n capability,\n timestamp,\n nonce,\n bodyHash,\n ])),\n };\n}\n\nasync function expireClaims() {\n const now = new Date().toISOString();\n const expired = await sqlite.execute({\n sql: `SELECT c.claim_id,c.queue_item_id,c.claimed_by,c.agent_id,c.orchestrator_id,\n c.runtime_domain,c.authorization_decision_id,c.retriable,q.execution_state\n FROM execution_bridge_claims c JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.state='ACTIVE' AND c.claim_expires_at<=?`,\n args: [now],\n });\n for (const row of expired.rows as Record[]) {\n const newState = Number(row.retriable) === 1 ? \"READY\" : \"FAILED\";\n const event = await eventMaterial({\n eventType: \"QUEUE_CLAIM_EXPIRED\",\n timestamp: now,\n queueItemId: Number(row.queue_item_id),\n claimId: String(row.claim_id),\n requestId: null,\n serviceId: String(row.claimed_by),\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId: String(row.authorization_decision_id),\n previousState: \"CLAIMED\",\n newState,\n result: \"PASS\",\n reasonCode: \"CLAIM_LEASE_EXPIRED\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.batch([\n {\n sql: `UPDATE execution_bridge_claims SET state='EXPIRED'\n WHERE claim_id=? AND state='ACTIVE' AND claim_expires_at<=?`,\n args: [row.claim_id, now],\n },\n {\n sql: `UPDATE execution_queue SET execution_state=?,claim_id=NULL,claimed_by=NULL,\n claimed_at=NULL,claim_expires_at=NULL,updated_at=?\n WHERE id=? AND execution_state='CLAIMED' AND claim_id=?`,\n args: [newState, now, row.queue_item_id, row.claim_id],\n },\n auditInsert(event),\n ]);\n }\n return expired.rows.length;\n}\n\nfunction rowEligible(row: Record, now: string): boolean {\n return row.execution_state === \"READY\" &&\n row.permission_decision === \"ALLOW\" &&\n row.permission_reason === ALLOWED_PERMISSION_REASON &&\n row.guardian_state === \"PASS\" &&\n row.approval_state === \"ACTIVE\" &&\n row.approval_revoked_at === null &&\n typeof row.approval_expires_at === \"string\" &&\n Date.parse(row.approval_expires_at) > Date.parse(now) &&\n row.policy_version === POLICY_VERSION &&\n typeof row.runtime_domain === \"string\" &&\n [...DOMAINS.values()].some((entry) => entry[1] === row.runtime_domain) &&\n !sanitizeTask(row.next_action).prompt_injection_detected;\n}\n\nasync function readyItems(limit: number) {\n const now = new Date().toISOString();\n const result = await sqlite.execute({\n sql: `SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.execution_state,q.created_at,\n q.permission_decision,q.permission_reason,q.mission_id,q.orchestrator_id,q.runtime_domain,\n q.guardian_state,q.approval_state,q.approval_decision_id,q.approval_expires_at,\n q.approval_revoked_at,q.policy_version,q.retriable,q.authorization_binding\n FROM execution_queue q\n WHERE q.execution_state='READY' AND q.permission_decision='ALLOW'\n AND q.approval_state='ACTIVE' AND q.approval_revoked_at IS NULL\n AND q.approval_expires_at>? AND q.policy_version=?\n ORDER BY q.id LIMIT ?`,\n args: [now, POLICY_VERSION, Math.min(100, Math.max(1, limit * 3))],\n });\n const output = [];\n for (const row of result.rows as Record[]) {\n if (!rowEligible(row, now) || !(await verifyQueueBinding(row))) continue;\n output.push({\n queue_item_id: Number(row.id),\n mission_id: String(row.mission_id),\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n task_type: String(row.connector),\n sanitized_task_payload: sanitizeTask(row.next_action),\n approval_decision_id: String(row.approval_decision_id),\n approval_state: String(row.approval_state),\n created_at: String(row.created_at),\n expires_at: String(row.approval_expires_at),\n policy_version: String(row.policy_version),\n evidence_refs: [],\n });\n if (output.length >= limit) break;\n }\n return output;\n}\n\nasync function readBody(req: Request): Promise {\n const length = Number(req.headers.get(\"content-length\") ?? \"0\");\n if (Number.isFinite(length) && length > MAX_BODY_BYTES) return null;\n const text = await req.text();\n return utf8(text).byteLength <= MAX_BODY_BYTES ? text : null;\n}\n\nasync function handleReady(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_READ\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const url = new URL(req.url);\n const requested = Number(url.searchParams.get(\"limit\") ?? \"20\");\n const limit = Number.isInteger(requested) ? Math.min(100, Math.max(1, requested)) : 20;\n const items = await readyItems(limit);\n const timestamp = new Date().toISOString();\n const event = await eventMaterial({\n eventType: \"QUEUE_READY_READ\",\n timestamp,\n queueItemId: null,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: null,\n orchestratorId: null,\n runtimeDomain: null,\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: null,\n newState: null,\n result: \"PASS\",\n reasonCode: \"AUTHORIZED_FILTERED_READ\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n return json({\n bridge: POLICY_VERSION,\n caller: auth.serviceId,\n passport_id: PASSPORT_ID,\n secret_exposed: false,\n count: items.length,\n items,\n });\n}\n\nasync function getQueueRow(id: number) {\n const result = await sqlite.execute({\n sql: `SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.execution_state,q.created_at,\n q.permission_decision,q.permission_reason,q.mission_id,q.orchestrator_id,q.runtime_domain,\n q.guardian_state,q.approval_state,q.approval_decision_id,q.approval_expires_at,\n q.approval_revoked_at,q.policy_version,q.retriable,q.authorization_binding,q.claim_id\n FROM execution_queue q WHERE q.id=?`,\n args: [id],\n });\n return (result.rows[0] as Record | undefined) ?? null;\n}\n\nasync function handleClaim(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_CLAIM\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const parsed = JSON.parse(body || \"{}\");\n const input = exactObject(parsed, [\"queue_item_id\"], [\"lease_seconds\"]);\n const queueItemId = Number(input?.queue_item_id);\n const leaseSeconds = Number(input?.lease_seconds ?? 300);\n if (!input || !Number.isInteger(queueItemId) || !Number.isInteger(leaseSeconds) || leaseSeconds < 30 || leaseSeconds > 900) {\n return json({ error: \"MALFORMED_CLAIM_REQUEST\" }, 400);\n }\n\n const row = await getQueueRow(queueItemId);\n const now = new Date().toISOString();\n if (!row || !rowEligible(row, now) || !(await verifyQueueBinding(row))) {\n const event = await eventMaterial({\n eventType: \"QUEUE_CLAIM_REJECTED\",\n timestamp: now,\n queueItemId,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: row ? String(row.agent_id) : null,\n orchestratorId: row ? String(row.orchestrator_id) : null,\n runtimeDomain: row ? String(row.runtime_domain) : null,\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: row ? String(row.execution_state) : null,\n newState: row ? String(row.execution_state) : null,\n result: \"DENY\",\n reasonCode: \"ITEM_NOT_EXECUTABLE\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n return json({ claimed: false, error: \"ITEM_NOT_EXECUTABLE\" }, 409);\n }\n\n const claimId = crypto.randomUUID();\n const expiresAt = new Date(Date.now() + leaseSeconds * 1000).toISOString();\n const authorizationDecisionId = await sha256(JSON.stringify([\n auth.authorizationDecisionId,\n queueItemId,\n row.agent_id,\n row.runtime_domain,\n row.approval_decision_id,\n claimId,\n now,\n expiresAt,\n ]));\n const event = await eventMaterial({\n eventType: \"QUEUE_ITEM_CLAIMED\",\n timestamp: now,\n queueItemId,\n claimId,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId,\n previousState: \"READY\",\n newState: \"CLAIMED\",\n result: \"PASS\",\n reasonCode: \"ATOMIC_COMPARE_AND_SET\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n\n try {\n await sqlite.batch([\n {\n sql: `INSERT INTO execution_bridge_claims(\n claim_id,queue_item_id,claimed_by,passport_id,agent_id,orchestrator_id,runtime_domain,\n claimed_at,claim_expires_at,authorization_decision_id,state,retriable\n )\n SELECT ?,q.id,?,?,?,?,?,?,?,?,?,q.retriable\n FROM execution_queue q\n WHERE q.id=? AND q.execution_state='READY' AND q.permission_decision='ALLOW'\n AND q.guardian_state='PASS' AND q.approval_state='ACTIVE'\n AND q.approval_revoked_at IS NULL AND q.approval_expires_at>?\n AND q.policy_version=? AND q.authorization_binding=?`,\n args: [\n claimId,\n auth.serviceId,\n PASSPORT_ID,\n row.agent_id,\n row.orchestrator_id,\n row.runtime_domain,\n now,\n expiresAt,\n authorizationDecisionId,\n \"ACTIVE\",\n queueItemId,\n now,\n POLICY_VERSION,\n row.authorization_binding,\n ],\n },\n {\n sql: `UPDATE execution_queue SET execution_state='CLAIMED',claim_id=?,claimed_by=?,\n claimed_at=?,claim_expires_at=?,authorization_decision_id=?,updated_at=?\n WHERE id=? AND execution_state='READY'\n AND EXISTS(SELECT 1 FROM execution_bridge_claims c WHERE c.claim_id=? AND c.state='ACTIVE')`,\n args: [claimId, auth.serviceId, now, expiresAt, authorizationDecisionId, now, queueItemId, claimId],\n },\n conditionalClaimAuditInsert(event, claimId),\n ]);\n } catch {\n const rejected = await eventMaterial({\n eventType: \"QUEUE_CLAIM_REJECTED\",\n timestamp: new Date().toISOString(),\n queueItemId,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId,\n previousState: \"READY\",\n newState: \"READY\",\n result: \"DENY\",\n reasonCode: \"CONCURRENT_OR_DUPLICATE_CLAIM\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(rejected));\n return json({ claimed: false, error: \"ALREADY_CLAIMED\" }, 409);\n }\n\n const claimed = await sqlite.execute({\n sql: \"SELECT claim_id FROM execution_bridge_claims WHERE claim_id=? AND state='ACTIVE'\",\n args: [claimId],\n });\n if (!claimed.rows.length) return json({ claimed: false, error: \"ALREADY_CLAIMED\" }, 409);\n\n return json({\n claimed: true,\n secret_exposed: false,\n claim: {\n claim_id: claimId,\n queue_item_id: queueItemId,\n claimed_by: auth.serviceId,\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n claimed_at: now,\n claim_expires_at: expiresAt,\n authorization_decision_id: authorizationDecisionId,\n task_type: String(row.connector),\n sanitized_task_payload: sanitizeTask(row.next_action),\n },\n }, 201);\n}\n\nasync function getClaim(claimId: string) {\n const result = await sqlite.execute({\n sql: `SELECT c.*,q.execution_state,q.permission_decision,q.permission_reason,q.guardian_state,\n q.approval_state,q.approval_expires_at,q.approval_revoked_at,q.policy_version,\n q.authorization_binding,q.next_action\n FROM execution_bridge_claims c JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.claim_id=?`,\n args: [claimId],\n });\n return (result.rows[0] as Record | undefined) ?? null;\n}\n\nfunction activeClaim(row: Record, serviceId: string, now: string): boolean {\n return row.state === \"ACTIVE\" &&\n row.execution_state === \"CLAIMED\" &&\n row.claimed_by === serviceId &&\n row.permission_decision === \"ALLOW\" &&\n row.permission_reason === ALLOWED_PERMISSION_REASON &&\n row.guardian_state === \"PASS\" &&\n row.approval_state === \"ACTIVE\" &&\n row.approval_revoked_at === null &&\n typeof row.approval_expires_at === \"string\" &&\n Date.parse(row.approval_expires_at) > Date.parse(now) &&\n typeof row.claim_expires_at === \"string\" &&\n Date.parse(row.claim_expires_at) > Date.parse(now) &&\n row.policy_version === POLICY_VERSION;\n}\n\nasync function handleFinalize(req: Request, body: string, operation: \"complete\" | \"fail\" | \"release\") {\n const capability = ({\n complete: \"QUEUE_COMPLETE\",\n fail: \"QUEUE_FAIL\",\n release: \"QUEUE_RELEASE\",\n } as const)[operation];\n const auth = await authenticate(req, body, capability);\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n\n const parsed = JSON.parse(body || \"{}\");\n const required = operation === \"release\"\n ? [\"claim_id\", \"request_id\", \"reason\"]\n : operation === \"fail\"\n ? [\"claim_id\", \"request_id\", \"evidence_ref\", \"evidence_sha256\", \"failure_reason\", \"retriable\"]\n : [\"claim_id\", \"request_id\", \"evidence_ref\", \"evidence_sha256\"];\n const input = exactObject(parsed, required);\n if (!input) return json({ error: \"MALFORMED_FINALIZE_REQUEST\" }, 400);\n const claimId = safeIdentifier(input.claim_id);\n const requestId = safeIdentifier(input.request_id);\n const evidenceRef = operation === \"release\" ? null : safeEvidenceRef(input.evidence_ref);\n const evidenceSha256 = operation === \"release\" ? null : safeHash(input.evidence_sha256);\n const failureReason = operation === \"fail\"\n ? (typeof input.failure_reason === \"string\" && /^[A-Z0-9_:-]{3,128}$/.test(input.failure_reason) ? input.failure_reason : null)\n : null;\n const releaseReason = operation === \"release\"\n ? (typeof input.reason === \"string\" && /^[A-Z0-9_:-]{3,128}$/.test(input.reason) ? input.reason : null)\n : null;\n const retriable = operation === \"fail\" && typeof input.retriable === \"boolean\" ? input.retriable : false;\n if (!claimId || !requestId || (operation !== \"release\" && (!evidenceRef || !evidenceSha256)) ||\n (operation === \"fail\" && !failureReason) || (operation === \"release\" && !releaseReason)) {\n return json({ error: \"FINALIZE_FIELDS_INVALID\" }, 400);\n }\n\n await expireClaims();\n const claim = await getClaim(claimId);\n const now = new Date().toISOString();\n if (!claim || !activeClaim(claim, auth.serviceId, now) ||\n (operation === \"release\" && Number(claim.retriable) !== 1)) {\n return json({ updated: false, error: \"ACTIVE_AUTHORIZED_CLAIM_REQUIRED\" }, 409);\n }\n\n const queueItemId = Number(claim.queue_item_id);\n const newState = operation === \"complete\" ? \"COMPLETED\" : operation === \"fail\" ? \"FAILED\" : \"READY\";\n const claimState = operation === \"complete\" ? \"COMPLETED\" : operation === \"fail\" ? \"FAILED\" : \"RELEASED\";\n const eventType: AuditType = operation === \"complete\"\n ? \"QUEUE_ITEM_COMPLETED\"\n : operation === \"fail\"\n ? \"QUEUE_ITEM_FAILED\"\n : \"QUEUE_ITEM_RELEASED\";\n const reasonCode = operation === \"complete\" ? \"COMPLETION_EVIDENCE_PERSISTED\" : operation === \"fail\"\n ? failureReason!\n : releaseReason!;\n const event = await eventMaterial({\n eventType,\n timestamp: now,\n queueItemId,\n claimId,\n requestId,\n serviceId: auth.serviceId,\n agentId: String(claim.agent_id),\n orchestratorId: String(claim.orchestrator_id),\n runtimeDomain: String(claim.runtime_domain),\n authorizationDecisionId: String(claim.authorization_decision_id),\n previousState: \"CLAIMED\",\n newState,\n result: \"PASS\",\n reasonCode,\n evidenceRef,\n evidenceSha256,\n });\n\n const batch = [\n {\n sql: `INSERT INTO execution_bridge_requests(request_id,operation,claim_id,service_id,created_at)\n SELECT ?,?,?,?,? WHERE EXISTS(\n SELECT 1 FROM execution_bridge_claims c\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.claim_id=? AND c.state='ACTIVE' AND c.claimed_by=?\n AND c.claim_expires_at>? AND q.execution_state='CLAIMED' AND q.claim_id=?\n )`,\n args: [\n requestId,\n operation.toUpperCase(),\n claimId,\n auth.serviceId,\n now,\n claimId,\n auth.serviceId,\n now,\n claimId,\n ],\n },\n {\n sql: `UPDATE execution_bridge_claims SET state=?,completed_at=?,failure_reason=?\n WHERE claim_id=? AND state='ACTIVE' AND claimed_by=? AND claim_expires_at>?\n AND EXISTS(SELECT 1 FROM execution_bridge_requests WHERE request_id=? AND claim_id=?)`,\n args: [claimState, now, failureReason, claimId, auth.serviceId, now, requestId, claimId],\n },\n {\n sql: `UPDATE execution_queue SET execution_state=?,evidence_ref=?,updated_at=?,\n failure_reason=?,failure_retriable=?,completion_request_id=?,\n claim_id=CASE WHEN ?='READY' THEN NULL ELSE claim_id END,\n claimed_by=CASE WHEN ?='READY' THEN NULL ELSE claimed_by END,\n claimed_at=CASE WHEN ?='READY' THEN NULL ELSE claimed_at END,\n claim_expires_at=CASE WHEN ?='READY' THEN NULL ELSE claim_expires_at END\n WHERE id=? AND execution_state='CLAIMED' AND claim_id=?\n AND EXISTS(SELECT 1 FROM execution_bridge_requests WHERE request_id=?)`,\n args: [\n newState,\n evidenceRef,\n now,\n failureReason,\n operation === \"fail\" ? (retriable ? 1 : 0) : null,\n requestId,\n newState,\n newState,\n newState,\n newState,\n queueItemId,\n claimId,\n requestId,\n ],\n },\n ];\n if (operation === \"complete\") {\n batch.push({\n sql: `UPDATE agent_progress SET\n stage_index=CASE WHEN stage_index<7 THEN stage_index+1 ELSE 0 END,\n stage_state='WAITING_FOR_EVIDENCE',\n evidence_count=evidence_count+1,\n last_evidence_ref=?,\n last_advanced_at=?\n WHERE agent_id=? AND EXISTS(\n SELECT 1 FROM execution_queue q\n WHERE q.id=? AND q.execution_state='COMPLETED' AND q.completion_request_id=?\n )`,\n args: [evidenceRef, now, claim.agent_id, queueItemId, requestId],\n });\n batch.push({\n sql: `UPDATE revenue_navigator_state SET\n current_checkpoint=CASE current_checkpoint\n WHEN 'DEFINE_OFFER' THEN 'BUILD_PROOF'\n WHEN 'BUILD_PROOF' THEN 'QUALIFY_BUYERS'\n WHEN 'QUALIFY_BUYERS' THEN 'PREPARE_APPROVED_OUTREACH'\n WHEN 'PREPARE_APPROVED_OUTREACH' THEN 'HANDLE_RESPONSE_OR_RESEARCH_NEXT'\n WHEN 'HANDLE_RESPONSE_OR_RESEARCH_NEXT' THEN 'PREPARE_PROPOSAL_OR_PAID_DIAGNOSTIC'\n WHEN 'PREPARE_PROPOSAL_OR_PAID_DIAGNOSTIC' THEN 'DELIVER_OR_IMPROVE_PROOF'\n WHEN 'DELIVER_OR_IMPROVE_PROOF' THEN 'VERIFY_EVIDENCE_AND_REPLAN'\n ELSE 'DEFINE_OFFER' END,\n next_action=CASE current_checkpoint\n WHEN 'DEFINE_OFFER' THEN 'Build and fact-check the proof asset for the locked primary lane.'\n WHEN 'BUILD_PROOF' THEN 'Build a small qualified buyer queue matching the defined buyer profile; no mass spam.'\n WHEN 'QUALIFY_BUYERS' THEN 'Prepare personalized factual outreach drafts for qualified buyers; external send remains approval-gated.'\n WHEN 'PREPARE_APPROVED_OUTREACH' THEN 'Process verified buyer replies if any; otherwise improve qualification using evidence, not volume.'\n WHEN 'HANDLE_RESPONSE_OR_RESEARCH_NEXT' THEN 'Prepare a concrete paid diagnostic or proposal aligned to the primary lane and monetization path.'\n WHEN 'PREPARE_PROPOSAL_OR_PAID_DIAGNOSTIC' THEN 'If a paid engagement exists, deliver the governed scope; otherwise strengthen proof and buyer fit.'\n WHEN 'DELIVER_OR_IMPROVE_PROOF' THEN 'Verify external evidence, reject pipeline-as-revenue, then keep the primary route or switch to fallback only on evidence.'\n ELSE 'Re-evaluate one lawful primary offer and its evidence plan.' END,\n last_verified_at=?\n WHERE agent_id=? AND EXISTS(\n SELECT 1 FROM execution_queue q\n WHERE q.id=? AND q.execution_state='COMPLETED' AND q.completion_request_id=?\n )`,\n args: [now, claim.agent_id, queueItemId, requestId],\n });\n }\n batch.push(conditionalFinalizeAuditInsert(event, requestId, claimId, claimState, newState));\n\n try {\n await sqlite.batch(batch);\n } catch {\n return json({ updated: false, error: \"REPLAY_OR_STATE_CONFLICT\" }, 409);\n }\n\n const finalized = await sqlite.execute({\n sql: `SELECT r.request_id FROM execution_bridge_requests r\n JOIN execution_bridge_claims c ON c.claim_id=r.claim_id\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE r.request_id=? AND r.claim_id=? AND c.state=?\n AND q.execution_state=? AND q.completion_request_id=?`,\n args: [requestId, claimId, claimState, newState, requestId],\n });\n if (!finalized.rows.length) {\n return json({ updated: false, error: \"REPLAY_OR_STATE_CONFLICT\" }, 409);\n }\n\n return json({\n updated: true,\n operation: operation.toUpperCase(),\n queue_item_id: queueItemId,\n claim_id: claimId,\n state: newState,\n agent_progress_updated: operation === \"complete\",\n secret_exposed: false,\n audit_event_id: event.eventId,\n audit_event_hash: event.eventHash,\n });\n}\n\nasync function handleAuditRead(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_AUDIT_READ\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const url = new URL(req.url);\n const rawIds = url.searchParams.get(\"queue_item_ids\") ?? \"\";\n const rawParts = rawIds.split(\",\");\n const ids = [...new Set(rawParts.map((value) => Number(value.trim())).filter((value) => Number.isInteger(value) && value > 0))];\n const requestedLimit = Number(url.searchParams.get(\"limit\") ?? \"100\");\n const limit = Number.isInteger(requestedLimit) ? Math.min(200, Math.max(1, requestedLimit)) : 100;\n if (\n !ids.length ||\n ids.length > 20 ||\n ids.join(\",\") !== rawParts.map((value) => String(Number(value.trim()))).join(\",\")\n ) {\n return json({ error: \"VALID_QUEUE_ITEM_IDS_REQUIRED\" }, 400);\n }\n\n const placeholders = ids.map(() => \"?\").join(\",\");\n const now = new Date().toISOString();\n const candidates = await sqlite.execute({\n sql: `SELECT id,agent_id,action_stage,next_action,connector,execution_state,created_at,updated_at,\n evidence_ref,permission_decision,permission_reason,mission_id,orchestrator_id,runtime_domain,\n guardian_state,approval_state,approval_decision_id,approval_expires_at,approval_revoked_at,\n policy_version,retriable,authorization_binding,claim_id,claimed_by,claimed_at,claim_expires_at,\n completion_request_id,failure_reason,failure_retriable\n FROM execution_queue\n WHERE id IN (${placeholders}) AND permission_decision='ALLOW'\n AND guardian_state='PASS' AND approval_state='ACTIVE'\n AND approval_revoked_at IS NULL AND approval_expires_at>? AND policy_version=?\n ORDER BY id`,\n args: [...ids, now, POLICY_VERSION],\n });\n const visibleRows: Record[] = [];\n for (const row of candidates.rows as Record[]) {\n if (await verifyQueueBinding(row)) visibleRows.push(row);\n }\n if (!visibleRows.length) {\n await appendDenied(\"AUDIT_ITEM_SCOPE_DENIED\", auth.serviceId);\n return json({ error: \"NO_AUTHORIZED_AUDIT_RECORDS\" }, 404);\n }\n\n const visibleIds = visibleRows.map((row) => Number(row.id));\n const visiblePlaceholders = visibleIds.map(() => \"?\").join(\",\");\n const claims = await sqlite.execute({\n sql: `SELECT claim_id,queue_item_id,claimed_by,passport_id,agent_id,orchestrator_id,runtime_domain,\n claimed_at,claim_expires_at,state,retriable,completed_at,failure_reason\n FROM execution_bridge_claims\n WHERE queue_item_id IN (${visiblePlaceholders})\n ORDER BY queue_item_id,claimed_at`,\n args: visibleIds,\n });\n const events = await sqlite.execute({\n sql: `SELECT event_id,event_type,timestamp,queue_item_id,claim_id,request_id,service_id,passport_id,\n agent_id,orchestrator_id,runtime_domain,authorization_decision_id,previous_state,new_state,result,\n reason_code,evidence_ref,evidence_sha256,event_hash\n FROM execution_bridge_audit\n WHERE queue_item_id IN (${visiblePlaceholders})\n ORDER BY id DESC LIMIT ?`,\n args: [...visibleIds, limit],\n });\n\n const auditEvents = [];\n for (const row of visibleRows) {\n auditEvents.push(await eventMaterial({\n eventType: \"QUEUE_AUDIT_READ\",\n timestamp: now,\n queueItemId: Number(row.id),\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: String(row.execution_state),\n newState: String(row.execution_state),\n result: \"PASS\",\n reasonCode: \"AUTHORIZED_SCOPED_AUDIT_READ\",\n evidenceRef: typeof row.evidence_ref === \"string\" ? row.evidence_ref : null,\n evidenceSha256: null,\n }));\n }\n await sqlite.batch(auditEvents.map((event) => auditInsert(event)));\n return json({\n bridge: POLICY_VERSION,\n caller: auth.serviceId,\n passport_id: PASSPORT_ID,\n secret_exposed: false,\n authorized_queue_item_ids: visibleIds,\n queue_rows: visibleRows.map((row) => ({\n queue_item_id: Number(row.id),\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n execution_state: String(row.execution_state),\n evidence_ref: row.evidence_ref,\n claim_id: row.claim_id,\n claimed_by: row.claimed_by,\n claimed_at: row.claimed_at,\n claim_expires_at: row.claim_expires_at,\n completion_request_id: row.completion_request_id,\n failure_reason: row.failure_reason,\n failure_retriable: row.failure_retriable,\n updated_at: row.updated_at,\n })),\n claims: claims.rows,\n events: events.rows,\n audit_read_events: auditEvents.map((event) => ({\n queue_item_id: event.queueItemId,\n event_id: event.eventId,\n event_hash: event.eventHash,\n })),\n });\n}\n\nfunction legacyAuthorized(req: Request): boolean {\n const value = req.headers.get(\"authorization\");\n if (!value?.startsWith(\"Bearer \")) return false;\n return constantTimeEqual(value.slice(7), secret());\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return json({\n service: \"IMPERIAL_EXECUTION_BRIDGE\",\n version: POLICY_VERSION,\n status: \"UP\",\n secret_configured: Boolean(Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\")),\n secret_exposed: false,\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/readiness\") {\n try {\n await ensureSchema();\n return json({ service: \"IMPERIAL_EXECUTION_BRIDGE\", ready: true, policy: POLICY_VERSION });\n } catch {\n return json({ service: \"IMPERIAL_EXECUTION_BRIDGE\", ready: false, error: \"STORAGE_UNAVAILABLE\" }, 503);\n }\n }\n\n const legacy = new Set([\"/queue\", \"/ready\", \"/claim\", \"/complete\", \"/status\"]);\n if (legacy.has(url.pathname)) {\n if (!legacyAuthorized(req)) return json({ error: \"UNAUTHORIZED\" }, 401);\n return json({ error: \"LEGACY_ENDPOINT_DISABLED_USE_GOVERNED_CAPABILITY\" }, 410);\n }\n\n const body = await readBody(req);\n if (body === null) return json({ error: \"PAYLOAD_TOO_LARGE\" }, 413);\n\n try {\n if (req.method === \"GET\" && url.pathname === \"/execution-bridge/ready\") {\n return await handleReady(req, body);\n }\n if (req.method === \"GET\" && url.pathname === \"/execution-bridge/audit\") {\n return await handleAuditRead(req, body);\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/claim\") {\n return await handleClaim(req, body);\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/complete\") {\n return await handleFinalize(req, body, \"complete\");\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/fail\") {\n return await handleFinalize(req, body, \"fail\");\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/release\") {\n return await handleFinalize(req, body, \"release\");\n }\n return json({ error: \"NOT_FOUND\" }, 404);\n } catch (error) {\n const code = String(error).includes(\"SERVER_AUTH_UNAVAILABLE\")\n ? \"SERVER_AUTH_UNAVAILABLE\"\n : String(error).includes(\"JSON\")\n ? \"MALFORMED_JSON\"\n : \"INTERNAL_ERROR\";\n return json({ error: code }, code === \"SERVER_AUTH_UNAVAILABLE\" ? 503 : code === \"MALFORMED_JSON\" ? 400 : 500);\n }\n}\n","deleted",false,"label",[14],"80b8839b-de86-40ee-8340-1df5edf7503f",["D",1787871527621],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","100-NCA 31-day bootstrap runtime","imageUrl","userId","fe39b163-4b50-466e-82d1-8bd01133e4b6","pinnedFileId","d8315798-a2ac-11f1-ac46-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03585-eb44-758d-92a4-77db1a9a243c","tursoName","80b8839bde8640ee83401df5edf7503f","tursoHostname","80b8839bde8640ee83401df5edf7503f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789526460011],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_55":56,"_103":104,"_105":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",173,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Олександр Ромаскевич","avatar","https://lh3.googleusercontent.com/a/ACg8ocIo1MJ3hDjpQrinMIRok3d2YY1vpHgehs8m2u1_vc7pmFovRGI=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":32,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]