${code ? \"✅ Consent received\" : err ? \"⚠️ \" + err : \"Nothing here\"}

${code ? \"The Palantír has it. You can close this tab.\" : \"You can close this tab.\"}

`);\n});\napp.get(\"/banking/code\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banking_codes (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n code TEXT, state TEXT, taken INTEGER DEFAULT 0)`);\n const r = await sqlite.execute(\"SELECT * FROM banking_codes WHERE taken=0 ORDER BY id DESC LIMIT 1\");\n if (!r.rows.length) return c.json({ ok: false, code: null });\n const row = r.rows[0] as any;\n await sqlite.execute({ sql: \"UPDATE banking_codes SET taken=1, code='' WHERE id=?\", args: [row.id] });\n return c.json({ ok: true, code: row.code, state: row.state, ts: row.ts });\n});\n\n// Privacy + terms pages for the Enable Banking production app registration (their portal\n// requires a Privacy URL). Honest and accurate: personal single-user application; the sole\n// user IS the data subject; data is processed on his own machine and shared with no one.\napp.get(\"/banking/privacy\", (c) => c.html(`Privacy — Palantir Finance Reader

Privacy Policy — Palantir Finance Reader

Last updated: 30 August 2026

Palantir Finance Reader is a personal, single-user application operated by its sole user, Alexandr Stakhov. It exists to display the user's own bank account information to the user himself.

What data is processed

Account balances and transaction data for the user's own payment accounts, retrieved read-only via Enable Banking (a licensed AISP) with the user's explicit PSD2 consent, given in his own bank's interface.

How it is used and stored

Data is transferred to and processed on the user's own private computer. It is used solely to render the user's private financial dashboard and records. It is not shared with, sold to, or made accessible to any third party. No analytics, no advertising, no profiling of anyone other than the user by the user.

Consent and revocation

Consents are valid for up to 90 days and can be revoked at any time in the bank's own app or by contacting the address below. Revocation stops all further data retrieval.

Contact

Data protection matters: stakhov.alexandr@gmail.com

`));\napp.get(\"/banking/terms\", (c) => c.html(`Terms — Palantir Finance Reader

Terms of Use — Palantir Finance Reader

Last updated: 30 August 2026

Palantir Finance Reader is a personal application with exactly one authorised user: its operator, Alexandr Stakhov. It provides read-only access to the operator's own bank account information for private financial overview purposes. It initiates no payments, offers no services to any other person, and grants no third party access to any data. Use by anyone other than the operator is not offered and not permitted.

Contact: stakhov.alexandr@gmail.com

`));\n\n}\n",["D",1788121469111],"branchVersion","label",[18],"pulls","branches",1,"forks","envVars",{"_159":161,"_162":26},"connections",{"_159":26,"_160":26},"count","unfilledCount",8,"emptyCount",{"_32":144,"_13":18,"_61":62,"_42":-5,"_34":35,"_148":39,"_182":139,"_36":299,"_38":26,"_63":64,"_145":146,"_65":24,"_149":-5,"_186":300,"_17":301},{"_32":290,"_13":291,"_61":292,"_42":-5,"_34":35,"_148":107,"_182":139,"_36":293,"_38":294,"_63":295,"_145":296,"_65":24,"_149":-5,"_186":297,"_17":298},{"_32":282,"_13":283,"_61":284,"_42":-5,"_34":35,"_148":285,"_182":139,"_36":286,"_38":153,"_63":64,"_145":287,"_65":24,"_149":-5,"_186":288,"_17":289},{"_32":274,"_13":275,"_61":276,"_42":-5,"_34":35,"_148":277,"_182":139,"_36":278,"_38":194,"_63":64,"_145":279,"_65":24,"_149":-5,"_186":280,"_17":281},{"_32":266,"_13":267,"_61":268,"_42":-5,"_34":35,"_148":269,"_182":139,"_36":270,"_38":237,"_63":64,"_145":271,"_65":24,"_149":-5,"_186":272,"_17":273},{"_32":257,"_13":258,"_61":259,"_42":-5,"_34":35,"_148":260,"_182":139,"_36":261,"_38":262,"_63":203,"_145":263,"_65":24,"_149":-5,"_186":264,"_17":265},{"_32":249,"_13":250,"_61":251,"_42":-5,"_34":35,"_148":252,"_182":139,"_36":253,"_38":26,"_63":64,"_145":254,"_65":24,"_149":-5,"_186":255,"_17":256},{"_32":241,"_13":242,"_61":243,"_42":-5,"_34":35,"_148":244,"_182":139,"_36":245,"_38":237,"_63":64,"_145":246,"_65":24,"_149":-5,"_186":247,"_17":248},{"_32":232,"_13":233,"_61":234,"_42":-5,"_34":35,"_148":235,"_182":139,"_36":236,"_38":237,"_63":203,"_145":238,"_65":24,"_149":-5,"_186":239,"_17":240},{"_32":224,"_13":225,"_61":226,"_42":-5,"_34":35,"_148":227,"_182":139,"_36":228,"_38":153,"_63":64,"_145":229,"_65":24,"_149":-5,"_186":230,"_17":231},{"_32":216,"_13":217,"_61":218,"_42":-5,"_34":35,"_148":219,"_182":139,"_36":220,"_38":153,"_63":203,"_145":221,"_65":24,"_149":-5,"_186":222,"_17":223},{"_32":207,"_13":208,"_61":209,"_42":-5,"_34":35,"_148":210,"_182":139,"_36":211,"_38":212,"_63":64,"_145":213,"_65":24,"_149":-5,"_186":214,"_17":215},{"_32":198,"_13":199,"_61":200,"_42":-5,"_34":35,"_148":201,"_182":139,"_36":202,"_38":194,"_63":203,"_145":204,"_65":24,"_149":-5,"_186":205,"_17":206},{"_32":189,"_13":190,"_61":191,"_42":-5,"_34":35,"_148":192,"_182":139,"_36":193,"_38":194,"_63":64,"_145":195,"_65":24,"_149":-5,"_186":196,"_17":197},{"_32":178,"_13":179,"_61":180,"_42":-5,"_34":35,"_148":181,"_182":139,"_36":183,"_38":184,"_63":64,"_145":185,"_65":24,"_149":-5,"_186":187,"_17":188},"08d0ff1c-8e71-4a96-9650-5eef14e0e04b","warden-shared.ts","96d7544c-8749-11f1-a009-1607ee4eb77e",69,"latest",["D",1788639069006],6,"// Shared logic for the cloud wardens (Monday scroll / Friday toast).\n// Runs only when ANTHROPIC_API_KEY is set. Ledger lives in sqlite (team_ledger).\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ================= AXIOMA PAUSED (Alexandr's order, 5 Sep 2026 — task #184) =================\n// \"Stop all Axioma work and disconnect everything from the group; no replies to anything there.\"\n// One constant, because a pause spread over four call sites is a pause that half-lifts by accident.\n// While this is true: the wardens are hard no-ops, the group gate refuses EVERY post whoever asks\n// (the gate is the single outbound door — see below), and the webhook stops turning @mentions into\n// quests. Inbound logging continues: listening was never the thing he asked to stop, and losing the\n// group_log would cost the record without buying any silence.\n// To resume: set this to false and redeploy. Nothing else needs touching.\nexport const AXIOMA_PAUSED = true;\n\nexport async function runWarden(mode: \"monday\" | \"friday\", lastRunAt?: Date) {\n if (AXIOMA_PAUSED) {\n console.log(`AXIOMA paused (5 Sep 2026) — ${mode} warden is a no-op`);\n await journalOutcome(mode, \"no-op — AXIOMA paused\", \"AXIOMA_PAUSED is set in warden-shared.ts (his order of 5 Sep 2026, task #184). Nothing read, nothing posted.\");\n return;\n }\n const KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n const BOT = Deno.env.get(\"TELEGRAM_BOT_TOKEN\")!;\n if (!KEY) { console.log(\"brain not armed — warden idle\"); return; }\n\n // ---- HARD GUARDS: correct weekday+hour window (UTC), and never twice per day ----\n const now = new Date();\n const day = now.getUTCDay(), hour = now.getUTCHours();\n const inWindow = mode === \"monday\" ? (day === 1 && hour >= 5 && hour <= 8)\n : (day === 5 && hour >= 14 && hour <= 17);\n if (!inWindow && Deno.env.get(\"WARDEN_FORCE\") !== \"1\") { console.log(`outside ${mode} window (utc day ${day} hour ${hour}) — skip`); return; }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS warden_log (date TEXT, mode TEXT, PRIMARY KEY (date, mode))`);\n const today = now.toISOString().slice(0, 10);\n const ran = await sqlite.execute({ sql: \"SELECT 1 FROM warden_log WHERE date=? AND mode=?\", args: [today, mode] });\n if (ran.rows.length) { console.log(\"already ran today — skip\"); return; }\n await sqlite.execute({ sql: \"INSERT INTO warden_log (date, mode) VALUES (?,?)\", args: [today, mode] });\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS team_ledger (\n id INTEGER PRIMARY KEY AUTOINCREMENT, person TEXT, task TEXT,\n promised_on TEXT, status TEXT DEFAULT 'open', done_on TEXT)`);\n\n const since = new Date(Date.now() - 8 * 86400e3).toISOString().slice(0, 19).replace(\"T\", \" \");\n const msgs = await sqlite.execute({\n sql: \"SELECT ts,from_name,text FROM group_log WHERE kind='text' AND ts >= ? ORDER BY id\",\n args: [since] });\n const ledger = await sqlite.execute(\"SELECT * FROM team_ledger WHERE status='open'\");\n const groupRow = await sqlite.execute(\"SELECT chat_id FROM group_log ORDER BY id DESC LIMIT 1\");\n const groupChat = groupRow.rows[0]?.chat_id;\n if (!groupChat) { console.log(\"no group known\"); return; }\n\n const sys = `You are the AXIOMA Warden — commitment tracker for a small friendly team (Alexandr, his father Sergey, colleagues; the Maraletto e-commerce team). Chat may be Russian and/or English.\nLANGUAGE RULE — ABSOLUTE: every word you write for the group post is ENGLISH. The group's\nmessages are often Russian (\"беру на себя\", \"готово\") — you READ those fine, but the AXIOMA\ngroup NEVER speaks Russian and a Russian post is a hard failure (happened 17 Aug 2026; never\nagain). Translate names of tasks into English when quoting them.\nFrom the week's messages: extract NEW promises (\"I'll do X\", \"that's on me\", \"беру на себя\", \"сделаю\", \"отправлю\" — real commitments only, be conservative, dedupe against the existing ledger), and detect completions (\"done\",\"готово\",\"отправил\" or clearly fulfilled).\nThen write the ${mode === \"monday\" ? \"Monday-morning report: per person, open items (oldest first, mark items open >1 week). If nothing open: a short varied celebration line.\" : \"Friday-evening check: if NOTHING is open for anyone, write a short (<=50 words) warm beer-toast celebrating the clean week. If anything IS open, the post must be EMPTY (silent Friday).\"}\nTone: warm, relaxed, one small joke max, never at anyone's expense, <=120 words. ENGLISH — see the language rule above; \"the chat's dominant language\" is NOT a consideration and never was.\nFORMAT — Telegram Markdown, and it is a LIST, never a paragraph (Alexandr, 20 Aug 2026:\n\"messages are hard to read, almost one plain text in a paragraph — I want bullet points and\nwell-marked text\"). ${mode === \"monday\" ? `Monday shape:\n*🗓 Week of *\n\n**\n• — since **\n• — since ** ⚠️ (only if open >1 week)\n\n**\n• — since **\nOne item per bullet, never joined into a sentence. Bold names and dates. A person with nothing open is simply omitted. Optionally ONE warm closing line after a blank line.` : `Friday shape: the toast is 1-3 short lines, no bullets needed — it is a celebration, not a report.`}\nRespond ONLY with JSON, no fences:\n{\"new_open\":[{\"person\":\"...\",\"task\":\"...\",\"promised_on\":\"YYYY-MM-DD\"}],\"completed_ids\":[ledger ids now done],\"post\":\"group message or empty string\"}\nEXISTING OPEN LEDGER: ${JSON.stringify(ledger.rows)}\nWEEK'S MESSAGES: ${JSON.stringify(msgs.rows)}`;\n\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": KEY, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 1200,\n system: sys, messages: [{ role: \"user\", content: `Run the ${mode} warden now.` }] }),\n });\n if (!r.ok) { console.error(\"anthropic\", r.status, await r.text()); return; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n let j: any;\n try { j = JSON.parse(out); } catch (e) { console.error(\"bad json\", out.slice(0, 200)); return; }\n\n for (const n of j.new_open ?? []) {\n await sqlite.execute({ sql: \"INSERT INTO team_ledger (person, task, promised_on) VALUES (?,?,?)\",\n args: [n.person, n.task, n.promised_on ?? new Date().toISOString().slice(0, 10)] });\n }\n for (const id of j.completed_ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE team_ledger SET status='done', done_on=date('now') WHERE id=?\", args: [Number(id)] });\n }\n const post = (j.post ?? \"\").trim();\n // F6 (12 Aug): journal the REAL outcome, not just window-skips\n if (post) { await journalOutcome(mode, \"posted to group\", post.slice(0, 300)); }\n else { await journalOutcome(mode, \"ran, nothing to post\", \"\"); }\n if (post) {\n // parse_mode added 20 Aug 2026: the report is now written as a bulleted Markdown list,\n // and without this the *bold* markers would reach the group as literal asterisks.\n // Telegram rejects unbalanced markers with a 400, so a plain-text retry is the safety net:\n // a slightly ugly report reaching the group beats a silent Monday.\n const send = (body: Record) =>\n fetch(`https://api.telegram.org/bot${BOT}/sendMessage`, {\n method: \"POST\", headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n // The gate is the single door into the group (see groupGate below).\n const gate = await groupGate(post, `warden:${mode}`);\n if (!gate.allow) {\n await journalOutcome(mode, \"BLOCKED by the group gate\", `${gate.why} — text kept: ${post.slice(0, 200)}`);\n console.log(\"group gate refused:\", gate.why);\n return;\n }\n let r = await send({ chat_id: groupChat, text: post, parse_mode: \"Markdown\" });\n if (!r.ok) {\n console.error(\"markdown send failed\", r.status, (await r.text()).slice(0, 200));\n r = await send({ chat_id: groupChat, text: post });\n await journalOutcome(mode, \"markdown rejected — posted as plain text\", post.slice(0, 300));\n }\n console.log(r.ok ? \"posted to group\" : \"POST FAILED both ways\");\n } else {\n console.log(\"nothing to post (silent by design)\");\n }\n}\n\n// Wright pass 2026-08-12 (audit W31+W32 \"unverifiable\"): every warden outcome is now journaled,\n// so silence becomes falsifiable. /group only logs inbound humans; this is the wardens' own voice.\nexport async function journalOutcome(mode: string, outcome: string, detail: string) {\n try {\n const ep = Deno.env.get(\"SELF_ENDPOINT\") ?? \"\";\n const secret = Deno.env.get(\"PULL_SECRET\") ?? \"\";\n if (!ep) return;\n await fetch(`${ep}/journal?secret=${secret}`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ source: `axioma-${mode}-warden`, summary: outcome, details: detail.slice(0, 800) }),\n });\n } catch (_) { /* journaling must never break the warden */ }\n}\n\n// ================= THE GROUP GATE (3 Sep 2026, Alexandr's decision) =================\n// Three independent things can post into the AXIOMA partner group: the Monday report and the\n// Friday toast (this file, posting straight to the Telegram API) and axioma-payments-check,\n// which lives in ANOTHER project's scheduler and reaches Telegram through the val's POST /send.\n// They shared no lock and no ledger, so nothing in the system could see the whole picture — the\n// outbox showed the payments check posting on FIVE consecutive mornings while its own charter\n// says silent runs are the normal case. Two doors, no coordination, a partner-facing group.\n//\n// Every door now passes through here. The gate does not write content and cannot change what an\n// agent says (Law 3 is intact) — it only refuses a repeat and refuses a flood, and it never\n// refuses quietly: a blocked post is journaled and Alexandr is told privately the same minute.\nexport async function groupGate(text: string, source: string): Promise<{ allow: boolean; why?: string }> {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS group_posts (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n source TEXT, hash TEXT, chars INTEGER, allowed INTEGER, why TEXT, preview TEXT)`);\n\n const norm = String(text ?? \"\").replace(/\\s+/g, \" \").trim().toLowerCase();\n let h = 0;\n for (let i = 0; i < norm.length; i++) h = (Math.imul(h, 31) + norm.charCodeAt(i)) | 0;\n const hash = String(h);\n\n const record = async (allowed: boolean, why: string) => {\n await sqlite.execute({\n sql: \"INSERT INTO group_posts (source, hash, chars, allowed, why, preview) VALUES (?,?,?,?,?,?)\",\n args: [source, hash, norm.length, allowed ? 1 : 0, why, String(text ?? \"\").slice(0, 200)] });\n };\n\n // 0) the pause outranks every other rule. Refused here rather than at each caller, because the\n // gate is the one place every door already passes through — including POST /send, which is\n // how a scheduler in ANOTHER project reaches this group. The refusal is still recorded and\n // still told to Alexandr privately, so a paused post is visible, not vanished.\n if (AXIOMA_PAUSED) {\n const why = \"AXIOMA paused by Alexandr on 5 Sep 2026 — the group is disconnected\";\n await record(false, why);\n await tellAlexandr(`⏸ AXIOMA group post refused — *${source}*\\n• ${why}\\n• text: ${String(text).slice(0, 140)}`);\n return { allow: false, why };\n }\n\n // 1) the same message twice — the failure mode a repeating deadline alert produces\n const dup = await sqlite.execute({\n sql: \"SELECT source, ts FROM group_posts WHERE hash=? AND allowed=1 AND ts > datetime('now','-3 days') ORDER BY id DESC LIMIT 1\",\n args: [hash] });\n if (dup.rows.length) {\n const d: any = dup.rows[0];\n const why = `duplicate of what ${d.source} already posted at ${d.ts}`;\n await record(false, why);\n await tellAlexandr(`🚫 AXIOMA group post blocked — *${source}*\\n• ${why}\\n• text: ${String(text).slice(0, 140)}`);\n return { allow: false, why };\n }\n\n // 2) volume — two bot messages a day into a partner group is already a lot\n const today = await sqlite.execute(\n \"SELECT COUNT(*) AS n FROM group_posts WHERE allowed=1 AND ts > datetime('now','-1 day')\");\n const n = Number((today.rows[0] as any)?.n ?? 0);\n if (n >= 2) {\n const why = `daily cap reached (${n} bot posts in the group in 24h)`;\n await record(false, why);\n await tellAlexandr(`🚫 AXIOMA group post blocked — *${source}*\\n• ${why}\\n• text: ${String(text).slice(0, 140)}`);\n return { allow: false, why };\n }\n\n await record(true, \"\");\n return { allow: true };\n}\n\n// A refusal must never become silence (Law 9). The gate speaks to Alexandr privately, never to the group.\nasync function tellAlexandr(msg: string) {\n try {\n const BOT = Deno.env.get(\"TELEGRAM_BOT_TOKEN\");\n if (!BOT) return;\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chat = (own.rows[0] as any)?.chat_id;\n if (!chat) return;\n await fetch(`https://api.telegram.org/bot${BOT}/sendMessage`, {\n method: \"POST\", headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ chat_id: chat, text: msg, parse_mode: \"Markdown\" }) });\n } catch (_) { /* never let the warning break the caller */ }\n}\n","children",[],[179],"3c9ebcec-dd1d-463d-b793-ef3b002369d0","vault-routes.ts","2512f662-a504-11f1-9322-1607ee4eb77e",68,["D",1788639068632],3,"// Vault feed routes (split 31 Aug 2026 — bot-webhook.ts sits at the 80k limit).\n// /note: any session captures knowledge → Archivist files it into Obsidian at 07:00.\n// /chatlog: read-only feed of the private-chat log (kind='chatlog', processed=1 by design so\n// /pull never serves chatter to the forger) — the Archivist's daily-digest source.\n// Mounted by bot-webhook.ts: mountVaultRoutes(app, sqlite, PULL_SECRET, busAuth).\n// A note's destination becomes a file path that a desktop agent writes to, so it is validated\n// here rather than trusted there. Returns a clean vault-relative path, or \"\" if the input cannot\n// be made into one — the caller turns \"\" into a 400 rather than silently filing to the inbox,\n// because a note that quietly went somewhere else is worse than a note that was refused.\n// Rejected: absolute paths, drive letters, UNC paths, any \"..\", anything that is not .md.\nfunction normalisePage(raw: unknown): string {\n let p = String(raw ?? \"\").trim().replace(/\\\\/g, \"/\");\n if (!p) return \"\";\n // Order matters: a UNC path is \"//server/share/…\", so this has to be judged BEFORE the leading\n // slashes are stripped — otherwise it quietly reads as a relative path and is accepted.\n if (/^[a-z]:/i.test(p) || p.startsWith(\"//\")) return \"\";\n p = p.replace(/^\\/+/, \"\").replace(/^vault\\//i, \"\");\n const parts = p.split(\"/\").filter(Boolean);\n if (!parts.length || parts.length > 8) return \"\";\n for (const seg of parts) {\n if (seg === \".\" || seg === \"..\") return \"\";\n if (!/^[\\w .()\\-À-ɏЀ-ӿ]+$/u.test(seg)) return \"\";\n }\n const clean = parts.join(\"/\");\n if (!/\\.md$/i.test(clean) || clean.length > 200) return \"\";\n return clean;\n}\n\nexport function mountVaultRoutes(app: any, sqlite: any, PULL_SECRET: string, busAuth: any) {\n app.post(\"/note\", async (c: any) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const text = String(body.text ?? \"\").trim();\n if (!text) return c.json({ ok: false, error: \"text required\" }, 400);\n const ctx = String(body.context ?? \"\").slice(0, 300);\n const src = String(body.source ?? \"session\").slice(0, 60);\n\n // Optional destination (task #172, 5 Sep 2026). Without it a note goes to the inbox and Mei\n // decides where it belongs. With it, the note names its own page — which is what makes the\n // Brain tab's \"add to this page\" composer real rather than decorative: the reader is already\n // looking at the page, so asking an archivist to guess the destination is throwing away the\n // one fact we have. Mei appends to that exact file instead of filing from the inbox.\n const page = normalisePage(body.page ?? body.target ?? \"\");\n if ((body.page ?? body.target) && !page) {\n return c.json({ ok: false, error: \"page must be a .md path inside the vault, e.g. 'areas/portugal.md'\" }, 400);\n }\n\n // The row stays kind='note'. A second kind would have been tidier to read and would have made\n // the note invisible to Mei, whose charter takes ONLY kind:\"note\" — and to her self-test, which\n // passes when no note rows remain. The destination rides the payload as one more bracket marker,\n // the same shape as [context:] and [via:] beside it.\n const payload = `${text}${ctx ? `\\n[context: ${ctx}]` : \"\"}\\n[via: ${src}]${page ? `\\n[page: ${page}]` : \"\"}`;\n const r = await sqlite.execute({\n sql: \"INSERT INTO inbox (kind, text) VALUES ('note', ?) RETURNING id\",\n args: [payload] });\n const id = Number((r.rows[0] as any).id ?? (r.rows[0] as any)[0]);\n return c.json({ ok: true, id, page: page || null,\n queued_for: page ? `Mei the Archivist, 07:00 — appended to ${page}` : \"Mei the Archivist, 07:00\" });\n });\n\n app.get(\"/chatlog\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const since = c.req.query(\"since\") ?? new Date(Date.now() - 48 * 3600e3).toISOString().slice(0, 19).replace(\"T\", \" \");\n const limit = Math.min(Number(c.req.query(\"limit\") ?? 200), 500);\n const r = await sqlite.execute({\n sql: \"SELECT id, ts, text FROM inbox WHERE kind='chatlog' AND ts >= ? ORDER BY id LIMIT ?\",\n args: [since, limit] });\n return c.json({ ok: true, since, rows: r.rows });\n });\n\n // ---- DUES: which recurring obligations have actually been satisfied (4 Sep 2026) ----\n // scripts/dues.json is a calendar of recurring obligations with a due DATE and no DONE state,\n // so the Attention tile kept nagging about a SAF-T Alexandr had already filed. A due is now\n // satisfied per PERIOD (\"2026-09\"), because the obligation returns every month — closing it\n // once must not silence it forever.\n app.post(\"/dues/done\", async (c: any) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const key = String(body.key ?? \"\").trim(); // the due's `what`, verbatim\n const period = String(body.period ?? \"\").trim(); // \"YYYY-MM\"\n if (!key || !/^\\d{4}-\\d{2}$/.test(period)) return c.json({ ok: false, error: \"key and period (YYYY-MM) required\" }, 400);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS dues_done (\n key TEXT, period TEXT, ts TEXT DEFAULT (datetime('now')), who TEXT, PRIMARY KEY (key, period))`);\n if (body.undo) {\n await sqlite.execute({ sql: \"DELETE FROM dues_done WHERE key=? AND period=?\", args: [key, period] });\n return c.json({ ok: true, key, period, done: false });\n }\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO dues_done (key, period, who) VALUES (?,?,?)\",\n args: [key, period, String(body.who ?? \"alexandr\").slice(0, 40)] });\n return c.json({ ok: true, key, period, done: true });\n });\n\n app.get(\"/dues/done\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS dues_done (\n key TEXT, period TEXT, ts TEXT DEFAULT (datetime('now')), who TEXT, PRIMARY KEY (key, period))`);\n const r = await sqlite.execute(\"SELECT key, period, ts, who FROM dues_done ORDER BY ts DESC LIMIT 400\");\n return c.json({ ok: true, rows: r.rows });\n });\n}\n",[],[190],"1ede9ca2-cacc-4e02-9cfd-719c23b64aea","reconciler.ts","fc9bb990-acb4-11f1-836c-1607ee4eb77e",96,["D",1789173219532],"interval","/**\n * THE RECONCILER — the missed-slot reconciler, piece 1 of the cold path (task #220, 10 Sep 2026).\n *\n * The fleet runs on Alexandr's PC. When the machine is off, an agent's slot is skipped and nothing\n * says so — the scheduler's own catch-up is partial (reports/BUILD-cold-path-2026-09-09.md). This\n * interval runs in the val, which is always on. Twice a day, 11:00 and 20:00 Europe/Amsterdam, it\n * reads the roster the desktop last pushed (snapshot.data.fleet.agents), asks the journal which daily\n * agents owed a run and have no line since their due instant, and for the ones it may recover\n * unattended (CATCHUP_OK) it puts one CATCH-UP job on the agent bus, for Rex to run when the desktop\n * next wakes. Nothing else.\n *\n * The pattern is herald-fallback.ts's: a Val Town interval on a coarse UTC cron, a local-time gate\n * doing the real work so summer and winter time both land on the same local hours, deterministic\n * (no model is ever called, so a pass costs nothing), idempotent, and journalling its stand-down.\n *\n * No Telegram message leaves this file. The bus is its only outbound channel; the one reply here is\n * coldPathCommand, which answers a /coldpath Alexandr just typed.\n *\n * The flag is settings key `flag.reconciler`, and \"on\" is the only truthy value. Off — the default —\n * a pass still runs the whole assessment and journals exactly what it would have queued, so the off\n * week is evidence rather than silence. Piece 3 (herald-fallback's line naming who did not run) has\n * its own flag, `flag.herald_names_missing`, and reads namesMissingLine below.\n *\n * Schedule: `0 8-10,17-19 * * *` UTC, set by hand in the Val Town UI (the API cannot read or set it).\n * The gate takes the wake that is 11:00 or 20:00 local; the pass: guard row lets only the first wake\n * inside a window act. Idempotency (Law 6) is one INSERT OR IGNORE on reconciler_log's primary key,\n * claimed before the bus is touched, so a double-fired interval or a lost response can only cost a\n * catch-up, never double one. A forced pass (the route's force:true) gets its own pass key, so it can\n * never take the day's window from the interval; the job: keys are shared, so it cannot double a job.\n * Once the window is claimed, whatever dies is journalled with the step it died at — a pass that\n * throws must never be indistinguishable from a pass that had nothing to say.\n *\n * Mounted by palantir-routes.ts: mountColdPath(app, sqlite, PULL_SECRET, busAuth)\n * GET /coldpath ?secret= → flags, roster, the assessment as of now, last passes. Reads only.\n * POST /coldpath/flag {flag:\"reconciler\"|\"names\", on:true|false} → writes the flag, journals it\n * POST /coldpath/run {window:\"11\"|\"20\", force?, dry?, at?, sink?:\"selftest\", brief_line?} → one pass\n * POST /coldpath/forget {key} | {prefix:\"test:…\"} | {forced:true, date?:\"YYYY-MM-DD\"} → deletes guard\n * rows, journals which. The undo, in three named modes: one real row by its exact\n * key; test rows by prefix (never real rows by prefix); or the forced-pass rows —\n * all of them, or one date's — the only real rows a bulk delete may reach, because\n * ':forced:' occurs in a pass key only and never in a job: key.\n * Bot: /coldpath [reconciler|names on|off] — coldPathCommand, called from palantir-routes' handleCommand.\n * `at` and `sink` are test parameters: `at` is refused unless dry:true or sink:\"selftest\", and every\n * forced, dry or sunk pass says so in its journal summary. palantir-routes.ts imports this file\n * statically (routes must register synchronously); herald-fallback.ts imports it lazily, inside a\n * try, so the rescue brief cannot fail to load because of anything in here.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst EP = Deno.env.get(\"PALANTIR_EP\") ?? \"https://ClaudeAssistant--6922aaa67e8e11f1a5911607ee4eb77e.web.val.run\";\nconst SECRET = Deno.env.get(\"PULL_SECRET\") ?? \"\";\nconst TZ = \"Europe/Amsterdam\";\nconst SOURCE = \"reconciler\";\nconst DAYS = [\"Sun\", \"Mon\", \"Tue\", \"Wed\", \"Thu\", \"Fri\", \"Sat\"];\nconst WINDOWS = [\"11\", \"20\"] as const;\ntype Window = typeof WINDOWS[number];\nconst FLAG_KEY: Record = { reconciler: \"flag.reconciler\", names: \"flag.herald_names_missing\", news: \"flag.news_fetch_val\" };\n\nexport const MAX_PER_PASS = 5; // catch-ups one pass may queue\nexport const MAX_QUEUED = 8; // undrained CATCH-UP jobs already on the bus at which a pass queues nothing more\nexport const MAX_GRACE_H = 24; // a grace at or past the 24 h lookback drop can never produce `missing`: an every-day\n // slot is under 24 h old whenever it is the most recent one, so 24 parks the agent for good\n\n// Mirrors bot-webhook.ts:809-810. GET /agent/jobs re-serves a job that has sat 'running' past this,\n// so a pile of stale catch-ups is a pile Rex will be handed again — exactly what the breaker exists\n// to stop. Not imported: bot-webhook.ts is the HTTP entry and importing it here would run its whole\n// top-level on every interval wake. Change it there, change it here.\nconst STALE_CLAIM_HOURS = 2;\nconst SERVABLE_SQL =\n `(status='queued' OR (status='running' AND COALESCE(claimed_at, ts) < datetime('now','-${STALE_CLAIM_HOURS} hours')))`;\n\n// current id → retired ids, inverted from scripts/check_agent_silence.py's ALIASES. Journal rows\n// written before the 3 Sep 2026 rename carry the old ids; a source is matched by prefix on any of them.\nexport const ALIASES: Record = {\n \"bruno-economist\": [\"economist\", \"coin-counter\"],\n \"nina-news-editor\": [\"news-scribe\"],\n \"mei-archivist\": [\"archivist\"],\n \"kofi-librarian\": [\"loremaster\"],\n \"amara-morning-brief\": [\"morning-herald\"],\n \"priya-dispatcher\": [\"day-forger\"],\n \"rex-runner\": [\"errand-runner\"],\n \"casper-scout\": [\"watcher\"],\n \"yuki-auditor\": [\"steward\"],\n \"bolt-mechanic\": [\"wright\"],\n \"ze-monday-report\": [\"axioma-warden\"],\n \"rosa-friday-toast\": [\"axioma-friday-toast\"],\n};\n\n// Which missed slots are safe to recover unattended, and in which window. This is not a roster —\n// the roster is the snapshot — it answers a different question, and an agent that is missing but not\n// listed here is still named in every journal line and in /coldpath. Reporting is free; acting is not.\n// amara-morning-brief — herald-fallback already covers the morning; a catch-up brief would be a second brief.\n// nina-news-editor — an edition is a Telegram message, so 11:00 only: never a second edition in the evening.\n// yuki-auditor, bolt-mechanic — Bolt commits code; an unattended repair pass on a Monday is a new decision.\n// priya-dispatcher, rex-runner — pollers; Rex draining the queue is the catch-up.\nexport const CATCHUP_OK: Record = {\n \"bruno-economist\": [\"11\", \"20\"],\n \"nina-news-editor\": [\"11\"],\n \"kofi-librarian\": [\"11\", \"20\"],\n \"mei-archivist\": [\"11\", \"20\"],\n \"casper-scout\": [\"11\", \"20\"],\n};\n\nexport async function init(db: any = sqlite) {\n // An interval val does not import bot-webhook.ts, so on a cold instance its tables may not exist yet.\n // Byte-identical to bot-webhook's declaration; whichever runs first wins.\n await db.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY, value TEXT)`);\n // The guard. key is `job::` (one catch-up per agent per missed slot, forever) or\n // `pass::` (one acting pass per window per day — the interval's double-fire guard);\n // a forced pass adds `:forced:` so it never collides with the interval's key, and a\n // self-test prefixes everything with `test:`. The claim is INSERT OR IGNORE on this primary key and nothing else.\n await db.execute(`CREATE TABLE IF NOT EXISTS reconciler_log (\n key TEXT PRIMARY KEY, ts TEXT DEFAULT (datetime('now')), kind TEXT, agent TEXT, due_date TEXT, job_id INTEGER, detail TEXT)`);\n}\n\n// ---------- time ----------\nconst pad = (n: number) => String(n).padStart(2, \"0\");\n\n// Local wall clock in TZ. `wd` is the weekday as Sun=0: the snapshot's schedule.days are cron numbering\n// (Sun=0) and so is JS getDay(), so the index comes from the civil date and never from Intl's weekday name.\nexport function localParts(d: Date) {\n const f = new Intl.DateTimeFormat(\"en-GB\", { timeZone: TZ, hour12: false,\n year: \"numeric\", month: \"2-digit\", day: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\", weekday: \"short\" });\n const p: any = {};\n for (const x of f.formatToParts(d)) p[x.type] = x.value;\n const y = Number(p.year), m = Number(p.month), day = Number(p.day);\n return { y, m, d: day, date: `${p.year}-${p.month}-${p.day}`, hour: Number(p.hour), minute: Number(p.minute),\n weekday: String(p.weekday), wd: new Date(Date.UTC(y, m - 1, day)).getUTCDay(),\n hhmm: `${p.hour}:${p.minute}` };\n}\n\n// Minutes TZ is ahead of UTC at instant d: +120 in summer, +60 in winter. Derived from Intl itself, so\n// nothing here encodes an offset or a switch date. The instant is floored to the minute first — Intl\n// gives no seconds, and 45 s of drift would otherwise round the offset down by a minute.\nexport function offsetMinutes(d: Date): number {\n const base = Math.floor(d.getTime() / 60000) * 60000;\n const p = localParts(new Date(base));\n return Math.round((Date.UTC(p.y, p.m - 1, p.d, p.hour, p.minute) - base) / 60000);\n}\n\n// The UTC instant of a local wall-clock time. Two passes: the offset is read at the target instant, not\n// at `now`, so a slot on the far side of a clock change (the 2-day lookback crosses one twice a year)\n// lands on the right hour.\nexport function localToUtcMs(y: number, m: number, d: number, hour: number, minute: number): number {\n const naive = Date.UTC(y, m - 1, d, hour, minute);\n const guess = naive - offsetMinutes(new Date(naive)) * 60000;\n return naive - offsetMinutes(new Date(guess)) * 60000;\n}\n\n// journal.ts is SQLite's datetime('now'): 'YYYY-MM-DD HH:MM:SS', UTC. It is compared as text, so the\n// shape must match exactly — a 'T' in the wrong place is a silent ordering bug.\nexport function sqlStamp(ms: number): string {\n return new Date(ms).toISOString().slice(0, 19).replace(\"T\", \" \");\n}\n\nconst localStamp = (ms: number) => { const p = localParts(new Date(ms)); return `${p.weekday} ${p.date} ${p.hhmm}`; };\n\n// The dashboard stamp (\"2026-09-10 02:27\") is Amsterdam wall-clock time.\nfunction stampAgeH(stamp: string, now: Date): number | null {\n const m = String(stamp ?? \"\").match(/^(\\d{4})-(\\d\\d)-(\\d\\d)[ T](\\d\\d):(\\d\\d)/);\n if (!m) return null;\n const ms = localToUtcMs(Number(m[1]), Number(m[2]), Number(m[3]), Number(m[4]), Number(m[5]));\n return Math.round((now.getTime() - ms) / 360000) / 10;\n}\n\n// A replay at `at` can be older than the roster it reads; say so rather than print a negative age.\nconst ageText = (h: number | null) => h == null ? \"age unknown\" : h < 0 ? `stamped ${-h} h after this instant` : `${h} h old`;\n\n// ---------- flags ----------\nconst isOn = (v: any) => String(v ?? \"\").trim().toLowerCase() === \"on\";\n\nexport async function readFlags(db: any = sqlite): Promise<{ reconciler: \"on\" | \"off\"; herald_names_missing: \"on\" | \"off\"; news_fetch_val: \"on\" | \"off\" }> {\n const r = await db.execute(\"SELECT key, value FROM settings WHERE key LIKE 'flag.%'\");\n const raw: Record = {};\n for (const row of r.rows as any[]) raw[String(row.key)] = row.value;\n return { reconciler: isOn(raw[FLAG_KEY.reconciler]) ? \"on\" : \"off\",\n herald_names_missing: isOn(raw[FLAG_KEY.names]) ? \"on\" : \"off\",\n news_fetch_val: isOn(raw[FLAG_KEY.news]) ? \"on\" : \"off\" };\n}\n\n// A flag flipped without a receipt is the failure this system keeps relearning: every write journals.\nasync function setFlag(db: any, which: string, on: boolean, by: string) {\n const key = FLAG_KEY[which];\n const value = on ? \"on\" : \"off\";\n await db.execute({ sql: \"INSERT OR REPLACE INTO settings (key, value) VALUES (?, ?)\", args: [key, value] });\n await journal(db, `${key} set to ${value} by ${by}`, `Written to settings by ${by}. \"on\" is the only value that arms it; anything else is off.`);\n return { key, value };\n}\n\nasync function journal(db: any, summary: string, details: string) {\n await db.execute({ sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [SOURCE, summary.slice(0, 400), details.slice(0, 3500)] });\n}\n\n// ---------- the assessment ----------\n// \"Bruno the Economist — live balances…\" → \"Bruno the Economist\". Cut on the shape of the name, not on\n// the dash: the snapshot's text arrives mojibaked, so only ASCII is matched anywhere in this file.\nfunction displayName(a: any): string {\n const m = String(a?.does ?? \"\").match(/\\b([A-Z][^\\s]* the [A-Z][a-z]+(?: [A-Z][a-z]+)*)/);\n return m ? m[1] : String(a?.name ?? \"\");\n}\nconst firstName = (display: string) => display.split(\" \")[0];\n\nconst allowedIn = (agent: string, window: Window | null | undefined) =>\n window == null ? (CATCHUP_OK[agent] ?? []).length > 0 : (CATCHUP_OK[agent] ?? []).includes(window);\n\n// Did the agent (or any of its retired ids) journal between its due instant and now? Prefix match,\n// anchored left: 'casper-scout%' catches 'casper-scout-daily'; 'archivist%' does not catch 'mei-archivist'.\n// The upper bound is what lets a replay at `at` see the journal as it was then. `%` and `_` in an id\n// are escaped so the id is matched as text, never as a pattern (an id of `_` would otherwise match everything).\nconst likePrefix = (id: string) => id.replace(/[\\\\%_]/g, (ch) => \"\\\\\" + ch) + \"%\";\nasync function ranSince(db: any, ids: string[], dueUtc: string, nowUtc: string) {\n const where = ids.map(() => \"source LIKE ? ESCAPE '\\\\'\").join(\" OR \");\n const args: any[] = [dueUtc, nowUtc, ...ids.map(likePrefix)];\n const r = await db.execute({ sql: `SELECT ts, source FROM journal WHERE ts >= ? AND ts <= ? AND (${where}) ORDER BY id LIMIT 1`, args });\n return r.rows.length ? { ts: String((r.rows[0] as any).ts), source: String((r.rows[0] as any).source) } : null;\n}\n\n/** The single implementation of the roster + signal rule, shared with herald-fallback.\n *\n * The roster is snapshot.data.fleet.agents with schedule.kind === \"daily\" — one roster, agents/README.md,\n * one parser, update_dashboard_data.py — and nothing is hard-coded. No usable roster means stand down,\n * never a built-in list. Roster age is reported and never gated on: a week-old roster is still right,\n * and the verdict comes from the journal, which is always live.\n *\n * Per agent: the most recent slot in the last two days (today, else yesterday — a 19:00 slot with a\n * 3 h grace is only ever caught the next morning); a slot older than 24 h is yesterday's audit trail,\n * not today's alarm; `ran` if a journal line exists since the due instant; otherwise `notYetDue` while\n * inside grace (when respectGrace) and `missing` after it. Everything is compared as UTC instants.\n */\nexport async function assess(db: any, now: Date, opts: { respectGrace: boolean; window?: Window | null }) {\n const nowMs = now.getTime();\n const lp = localParts(now);\n const out: any = { ok: false, reason: null as string | null, local: `${lp.weekday} ${lp.date} ${lp.hhmm}`, offsetMin: offsetMinutes(now),\n rosterStamp: \"\", rosterAgeH: null as number | null, agentsTotal: 0, dailyCount: 0,\n owed: [] as string[], ran: [] as any[], missing: [] as any[], notYetDue: [] as any[], paused: [] as string[], skipped: [] as any[], wouldQueue: [] as any[] };\n\n const snapRow = await db.execute(\"SELECT data, stamp FROM snapshot WHERE key='dashboard'\");\n if (!snapRow.rows.length) { out.reason = \"no snapshot: the PC has never pushed one\"; return out; }\n let data: any = null;\n try { data = JSON.parse(String((snapRow.rows[0] as any).data)); } catch { out.reason = \"the snapshot is not JSON\"; return out; }\n out.rosterStamp = String((snapRow.rows[0] as any).stamp ?? data?.generatedAt ?? \"\");\n out.rosterAgeH = stampAgeH(out.rosterStamp, now);\n const fleet = data?.fleet;\n if (fleet?.ok !== true || !Array.isArray(fleet.agents) || !fleet.agents.length) {\n out.reason = \"the snapshot has no usable roster (fleet.ok is not true, or fleet.agents is empty)\"; return out;\n }\n\n // Pause is not a field. Two tests, ASCII only: the watchdog's waiting[] entries whose reason starts\n // with \"paused\", and an uppercase PAUSED in the agent's own description (the README's convention).\n const pausedSet = new Set();\n for (const w of (fleet.watch?.waiting ?? []) as any[]) if (/^paused/i.test(String(w?.why ?? \"\").trim())) pausedSet.add(String(w?.agent ?? \"\"));\n\n for (const a of fleet.agents as any[]) {\n const name = String(a?.name ?? \"\").trim();\n if (!name) continue;\n out.agentsTotal++;\n const s = a?.schedule;\n if (!s || typeof s !== \"object\") { out.skipped.push({ agent: name, why: \"no cron schedule in the roster\" }); continue; }\n if (s.kind === \"poller\") { out.skipped.push({ agent: name, why: \"poller\" }); continue; }\n if (s.kind !== \"daily\") { out.skipped.push({ agent: name, why: `schedule kind ${String(s.kind)}` }); continue; }\n out.dailyCount++;\n if (pausedSet.has(name) || /\\bPAUSED\\b/.test(String(a?.does ?? \"\"))) { out.paused.push(name); continue; }\n const days: number[] = Array.isArray(s.days) ? s.days.map(Number) : [];\n const hour = Number(s.hour), minute = Number(s.minute ?? 0), graceH = Number(s.grace_h ?? 3);\n // Every field the arithmetic below touches is checked here, the same way: a `grace_h` of \"three\"\n // or a `minute` of \"half\" is a malformed roster line to report, not a NaN to throw on later.\n const bad = !days.length || days.some((x) => !Number.isFinite(x)) ? \"days\"\n : !Number.isFinite(hour) || hour < 0 || hour > 23 ? \"hour\"\n : !Number.isFinite(minute) || minute < 0 || minute > 59 ? \"minute\"\n : !Number.isFinite(graceH) || graceH < 0 || graceH >= MAX_GRACE_H ? \"grace_h\" : null;\n if (bad) { out.skipped.push({ agent: name, why: `schedule.${bad} is missing, not a number, or out of range` }); continue; }\n\n let due: { ms: number; date: string; wd: number } | null = null;\n const tried: string[] = [];\n for (const back of [0, 1]) {\n const c = new Date(Date.UTC(lp.y, lp.m - 1, lp.d - back));\n const wd = c.getUTCDay();\n tried.push(DAYS[wd]);\n if (!days.includes(wd)) continue;\n const ms = localToUtcMs(c.getUTCFullYear(), c.getUTCMonth() + 1, c.getUTCDate(), hour, minute);\n if (ms <= nowMs) { due = { ms, date: c.toISOString().slice(0, 10), wd }; break; }\n }\n if (!due) { out.skipped.push({ agent: name, why: `no slot on ${tried.join(\" or \")}` }); continue; }\n if (nowMs - due.ms > 24 * 3600000) { out.skipped.push({ agent: name, why: `last slot (${due.date}) is older than 24 h` }); continue; }\n\n const deadlineMs = due.ms + graceH * 3600000;\n const dueUtc = sqlStamp(due.ms);\n const item = { agent: name, display: displayName(a), due_date: due.date, dueUtc, dueLocal: `${DAYS[due.wd]} ${due.date} ${pad(hour)}:${pad(minute)}`,\n deadlineUtc: sqlStamp(deadlineMs), deadlineLocal: localStamp(deadlineMs), graceH, windows: CATCHUP_OK[name] ?? [] };\n const seen = await ranSince(db, [name, ...(ALIASES[name] ?? [])], dueUtc, sqlStamp(nowMs));\n out.owed.push(name);\n if (seen) out.ran.push({ agent: name, due_date: due.date, dueUtc, seenTs: seen.ts, seenSource: seen.source });\n else if (opts.respectGrace && nowMs < deadlineMs) out.notYetDue.push(item);\n else out.missing.push(item);\n }\n out.wouldQueue = out.missing.filter((m: any) => allowedIn(m.agent, opts.window));\n out.ok = true;\n return out;\n}\n\n// The brief copies the shape of bus job 43 (9 Sep 2026), which Rex has already run. `CATCH-UP ` is the\n// tag the queue-depth breaker counts, and the idempotency sentence is the third independent stop.\nfunction catchUpBrief(w: any): string {\n return `CATCH-UP for ${w.due_date}: ${w.display} did not run (queued by the val's missed-slot reconciler, task #220 — the desktop was not up by ${w.deadlineLocal}). ` +\n `Run the pass that was due ${w.dueLocal} from ${w.agent}'s live prompt and journal it as source ${w.agent} with a note that this was a catch-up run. ` +\n `IDEMPOTENCY (Law 6): first GET $EP/journal and stop if a ${w.agent} line exists with ts >= ${w.dueUtc} (UTC). One Telegram message at most. ` +\n `If the pass cannot run, say exactly which step died in your result — do not retry blind.`;\n}\n\nconst names = (xs: any[]) => xs.map((x) => x.agent ?? x).join(\", \") || \"none\";\n\n/** One pass. The whole decision as an object, so POST /coldpath/run can prove the same code path the\n * interval runs. dry: assess only, nothing written anywhere. force: skip the local-hour gate (the\n * route's caller chose the window). sink \"selftest\": jobs go to agent `reconciler-selftest`, which\n * nothing claims, and every guard key is prefixed `test:`. */\nexport async function reconcileOnce(o: { window: Window; now?: Date; dry?: boolean; force?: boolean; sink?: string; db?: any }) {\n const db = o.db ?? sqlite;\n await init(db);\n const window = o.window;\n const now = o.now ?? new Date();\n const lp = localParts(now);\n const test = o.sink === \"selftest\";\n const prefix = test ? \"test:\" : \"\";\n // The lane this pass writes to — and the only lane its breaker reads. Rex claims rex-runner (and\n // errand-runner) and nothing claims reconciler-selftest, so a self-test's rows stay queued until the\n // tester closes them; counted against the real lane they would have stood the reconciler down for good.\n const busAgent = test ? \"reconciler-selftest\" : \"rex-runner\";\n const marks = [o.force ? \"forced\" : \"\", o.dry ? \"dry\" : \"\", test ? \"SELFTEST\" : \"\", o.now ? `at ${now.toISOString()}` : \"\"].filter(Boolean);\n const tag = marks.length ? ` [${marks.join(\", \")}]` : \"\";\n const base: any = { ok: true, window, local: `${lp.weekday} ${lp.date} ${lp.hhmm}`, forced: !!o.force, dry: !!o.dry, sink: test ? \"selftest\" : null, at: o.now ? now.toISOString() : null };\n\n // A dry pass is the assessment alone: nothing is claimed, queued or journalled.\n if (o.dry) {\n const a = await assess(db, now, { respectGrace: true, window });\n return { ...base, flag: (await readFlags(db)).reconciler, writes: \"none\", would_queue: a.wouldQueue.map((w: any) => ({ agent: busAgent, for: w.agent, brief: catchUpBrief(w) })), assessment: a };\n }\n\n // Law 6: the window is claimed with one statement before anything else happens. The interval's key is\n // pass:: — one per window per day, its double-fire guard. A forced pass is a deliberate\n // act and gets its own key, stamped with the wall clock: it can never take the day's window from the\n // interval (which would then journal nothing for that day), and it never refuses a second forced run.\n // The job: keys are shared, so a forced pass still cannot double a catch-up.\n const passKey = o.force\n ? `${prefix}pass:${lp.date}:${window}:forced:${new Date().toISOString().replace(/[-:.]/g, \"\")}`\n : `${prefix}pass:${lp.date}:${window}`;\n const claim = await db.execute({ sql: \"INSERT OR IGNORE INTO reconciler_log (key, kind, agent, due_date, detail) VALUES (?,?,?,?,?)\",\n args: [passKey, \"pass\", null, lp.date, `window ${window}:00${tag}`] });\n if ((claim.rowsAffected ?? 0) === 0) return { ...base, skipped: \"pass already recorded\", pass_key: passKey };\n\n // From here the window is spent. Whatever dies below is journalled with the step it died at: a pass\n // that throws must never be indistinguishable from a pass that had nothing to say.\n // Hoisted out of the try so the death receipt can name what did reach the bus before the throw.\n // The job that threw is precisely the one whose guard row never got its job_id, so this array is\n // the only surviving record of it.\n const queued: any[] = [], guardKeys: string[] = [];\n let step = \"reading the flags\";\n try {\n const flags = await readFlags(db);\n step = \"assessing the roster against the journal\";\n const a = await assess(db, now, { respectGrace: true, window });\n const head = `Window ${window}:00 ${TZ}, ${a.local}.`;\n const roster = a.ok ? ` Roster: ${a.dailyCount} daily agents of ${a.agentsTotal} from snapshot fleet.agents (stamp ${a.rosterStamp || \"none\"}, ${ageText(a.rosterAgeH)}).` : \"\";\n const foot = ` Signal: journal rows with ts between each agent's due instant and now, source matched by prefix and alias. No model called.${tag}`;\n\n if (!a.ok) {\n step = \"journalling the stand-down\";\n await journal(db, `stood down — ${a.reason}${tag}`, `${head} ${a.reason}. Nothing was written to the bus and no roster was assumed.${foot}`);\n return { ...base, flag: flags.reconciler, queued: 0, journalled: 1, stood_down: a.reason, pass_key: passKey };\n }\n const picture = ` Missing past grace: ${names(a.missing)}. Ran: ${names(a.ran)}. Still inside grace: ${names(a.notYetDue)}. Paused: ${a.paused.join(\", \") || \"none\"}.` +\n ` Not covered: ${a.skipped.map((s: any) => `${s.agent} (${s.why})`).join(\"; \") || \"none\"}.`;\n\n if (flags.reconciler !== \"on\") {\n const would = a.wouldQueue.map((w: any) => w.agent);\n step = \"journalling the stand-down\";\n await journal(db, `stood down — flag off (would have queued ${would.length}${would.length ? \": \" + would.join(\", \") : \"\"})${tag}`,\n `${head} flag.reconciler is off, so nothing was written to the bus.${roster}${picture}${foot}`);\n return { ...base, flag: \"off\", queued: 0, journalled: 1, pass_key: passKey, would_queue: would, assessment: a };\n }\n\n // The breaker. A week away with the PC off would otherwise queue ~8 catch-ups a day, most of them for\n // days already spent. Undrained means the desktop has not been up; while that holds, stop adding.\n // Undrained is what GET /agent/jobs would still hand Rex — queued, or claimed and stale (SERVABLE_SQL).\n // Counted in this pass's own lane only: what Rex will drain is rex-runner's queue, and a self-test's\n // rows in reconciler-selftest must never stand the real pass down (nor be ignored by a self-test).\n step = \"counting undrained catch-ups on the bus\";\n const depth = await db.execute({ sql: `SELECT COUNT(*) AS n FROM agent_jobs WHERE agent = ? AND ${SERVABLE_SQL} AND brief LIKE 'CATCH-UP %'`, args: [busAgent] });\n const undrained = Number((depth.rows[0] as any)?.n ?? 0);\n if (undrained >= MAX_QUEUED) {\n step = \"journalling the stand-down\";\n await journal(db, `stood down — the bus already holds ${undrained} undrained catch-ups for ${busAgent}${tag}`,\n `${head} ${undrained} CATCH-UP jobs for ${busAgent} would still be served by GET /agent/jobs (queued, or claimed and stale past ${STALE_CLAIM_HOURS} h) (limit ${MAX_QUEUED}): the desktop has not drained them; not adding more. Would have queued: ${names(a.wouldQueue)}.${roster}${picture}${foot}`);\n return { ...base, flag: \"on\", queued: 0, journalled: 1, breaker: undrained, lane: busAgent, pass_key: passKey, would_queue: a.wouldQueue.map((w: any) => w.agent), assessment: a };\n }\n\n step = \"claiming job keys and posting to the bus\";\n const todo = a.wouldQueue.slice(0, MAX_PER_PASS);\n const deferred = a.wouldQueue.slice(MAX_PER_PASS).map((w: any) => w.agent);\n const skippedExisting: string[] = [], failed: any[] = [];\n for (const w of todo) {\n // The job key is claimed first. If the bus POST then fails, the row stays and no job exists — a\n // missed catch-up, undone by POST /coldpath/forget. The reverse order risks a doubled job, which is not.\n const jobKey = `${prefix}job:${w.due_date}:${w.agent}`;\n const r = await db.execute({ sql: \"INSERT OR IGNORE INTO reconciler_log (key, kind, agent, due_date, detail) VALUES (?,?,?,?,?)\",\n args: [jobKey, \"job\", w.agent, w.due_date, `claimed in window ${window}:00${tag}`] });\n if ((r.rowsAffected ?? 0) === 0) { skippedExisting.push(w.agent); continue; }\n guardKeys.push(jobKey);\n let detail = \"\", jobId: number | null = null;\n try {\n const resp = await fetch(`${EP}/agent/job?secret=${encodeURIComponent(SECRET)}`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify({ agent: busAgent, brief: catchUpBrief(w), packs: [] }) });\n const j: any = await resp.json().catch(() => null);\n if (resp.ok && j?.ok && j.id != null) {\n jobId = Number(j.id);\n // The bus warns on every catch-up (findJobTwin sees last week's run of the same agent) and inserts\n // anyway. It is recorded, never retried: a warning on the first catch-up of a day means the guard leaked.\n const dup = j.duplicate_warning ? { job: j.duplicate_warning.job, status: j.duplicate_warning.status } : null;\n detail = `job ${jobId} → ${busAgent}${dup ? `; duplicate_warning: job ${dup.job} (${dup.status})` : \"\"}`;\n queued.push({ agent: w.agent, job_id: jobId, duplicate_warning: dup });\n } else {\n detail = `bus POST answered ${resp.status}: ${JSON.stringify(j ?? null).slice(0, 160)}`;\n failed.push({ agent: w.agent, key: jobKey, error: detail });\n }\n } catch (e) {\n detail = `bus POST failed: ${String(e).slice(0, 160)}`;\n failed.push({ agent: w.agent, key: jobKey, error: detail });\n }\n await db.execute({ sql: \"UPDATE reconciler_log SET job_id=?, detail=? WHERE key=?\", args: [jobId, detail, jobKey] });\n }\n\n step = \"journalling the result\";\n const notListed = a.missing.filter((m: any) => !allowedIn(m.agent, window)).map((m: any) => m.agent);\n const summary = queued.length\n ? `queued ${queued.length} catch-up${queued.length === 1 ? \"\" : \"s\"}: ${queued.map((q) => `${q.agent} (job ${q.job_id})`).join(\", \")}`\n : a.missing.length ? `nothing queued — missing: ${names(a.missing)}` : \"nothing to queue — everyone who owed a run has reported\";\n await journal(db, `${summary}${tag}`,\n `${head}${roster} Queued: ${queued.map((q) => `${q.agent} → job ${q.job_id}${q.duplicate_warning ? \" (duplicate_warning)\" : \"\"}`).join(\", \") || \"none\"}.` +\n ` Already claimed by an earlier pass: ${skippedExisting.join(\", \") || \"none\"}. Bus failures: ${failed.map((f) => `${f.agent}: ${f.error}`).join(\"; \") || \"none\"}.` +\n ` Deferred over the ${MAX_PER_PASS}-per-pass cap: ${deferred.join(\", \") || \"none\"}. Missing but not on the catch-up list for this window: ${notListed.join(\", \") || \"none\"}.${picture}${foot}`);\n return { ...base, flag: \"on\", queued: queued.length, job_ids: queued.map((q) => q.job_id), jobs: queued, guard_keys: guardKeys, lane: busAgent,\n skipped_existing: skippedExisting.length, skipped_existing_agents: skippedExisting, failed, deferred, not_listed: notListed, journalled: 1, pass_key: passKey, assessment: a };\n } catch (e) {\n // The window is claimed and the pass died. Write the receipt that says so, with the step, and mark\n // the pass row; if even the receipt cannot be written, rethrow so Val Town's own run log shows red.\n const error = String(e).slice(0, 300);\n const reached = queued.length\n ? `${queued.length} catch-up${queued.length === 1 ? \"\" : \"s\"} had already been posted to the bus by this pass and stand: `\n + `${queued.map((q) => `${q.agent} (job ${q.job_id})`).join(\", \")} — their guard rows exist, so nothing re-queues them`\n : \"nothing was written to the bus by it\";\n try {\n await journal(db, `pass DIED while ${step}: ${error.slice(0, 160)}${tag}`,\n `Window ${window}:00 ${TZ}, ${lp.weekday} ${lp.date} ${lp.hhmm}. The pass row ${passKey} was claimed, then the pass threw while ${step}; nothing after that step ran, and ${reached}. ${String((e as any)?.stack ?? e).slice(0, 900)} No model called.${tag}`);\n await db.execute({ sql: \"UPDATE reconciler_log SET detail = COALESCE(detail, '') || ? WHERE key = ?\", args: [` — DIED while ${step}`, passKey] });\n } catch { throw e; }\n return { ...base, ok: false, died: step, error, journalled: 1, pass_key: passKey,\n queued: queued.length, jobs: queued, job_ids: queued.map((q) => q.job_id), guard_keys: guardKeys };\n }\n}\n\n/** Piece 3 — the lite brief's one line about the desktop, behind flag.herald_names_missing. null when the\n * flag is off, so herald-fallback's message is unchanged until it is switched on. Grace is not respected\n * here: at 08:30 every morning agent is still inside grace, so the honest question is \"due earlier today\n * and no line yet\". Amara is left out because the brief's first line already says she did not run. Nothing\n * is claimed \"queued\" — at 08:30 the 11:00 window has not run. */\nexport async function namesMissingLine(db: any, now: Date, o: { preview?: boolean } = {}): Promise {\n await init(db);\n const flags = await readFlags(db);\n if (flags.herald_names_missing !== \"on\" && !o.preview) return null;\n const a = await assess(db, now, { respectGrace: false, window: \"11\" });\n if (!a.ok) return null;\n const today = localParts(now).date;\n const missing = a.missing.filter((m: any) => m.due_date === today && m.agent !== \"amara-morning-brief\");\n if (!missing.length) return \"• Every agent that owed a run this morning has reported.\";\n const bold = missing.map((m: any) => `*${firstName(m.display)}*`).join(\", \");\n if (flags.reconciler !== \"on\") return `• Not run today: ${bold} — no catch-up is queued (the reconciler is off).`;\n const q = missing.filter((m: any) => m.windows.includes(\"11\"));\n if (q.length === missing.length) return `• Not run today: ${bold} — the reconciler queues catch-up at 11:00.`;\n if (!q.length) return `• Not run today: ${bold} — not on the reconciler's catch-up list.`;\n return `• Not run today: ${bold} — the reconciler queues catch-up at 11:00 for ${q.map((m: any) => `*${firstName(m.display)}*`).join(\", \")}.`;\n}\n\n// ---------- the interval ----------\nexport default async function (_interval: { lastRunAt?: Date }) {\n const lp = localParts(new Date());\n // The gate. The cron is a UTC band (08–10 and 17–19); only the wake that is 11:00 or 20:00 local acts,\n // and a pass outside the window writes nothing at all.\n const window: Window | null = lp.hour === 11 ? \"11\" : lp.hour === 20 ? \"20\" : null;\n if (!window) return;\n return await reconcileOnce({ window });\n}\n\n// ---------- the bot command ----------\nconst esc = (s: any) => String(s ?? \"\").replace(/[_*`\\[]/g, (m) => \"\\\\\" + m); // Telegram Markdown v1\n\n// Which window's rule the status applies. \"Any window\" would list Nina at 20:30 although the 20:00 pass\n// rightly declined her (11:00 only). Before 11:00 the 11:00 pass is next; from then on the 20:00 rule\n// holds — and after 20:00 the label says the day's passes are done, so the list reads as a rule, not a promise.\nexport function statusWindow(lp: { hour: number }): { window: Window; label: string } {\n if (lp.hour < 11) return { window: \"11\", label: \"the 11:00 pass\" };\n if (lp.hour < 20) return { window: \"20\", label: \"the 20:00 pass\" };\n return { window: \"20\", label: \"the 20:00 rule (today's passes are done; tomorrow's 11:00 drops slots older than a day)\" };\n}\n\n// Which of the missing already have a catch-up claimed. An agent stays \"missing\" until Rex has run the\n// job and journalled, so without this the status would look as if the reconciler had done nothing.\nasync function claimedFor(db: any, missing: any[]): Promise<{ agent: string; job_id: number | null; detail: string }[]> {\n if (!missing.length) return [];\n const keys = missing.map((m: any) => `job:${m.due_date}:${m.agent}`);\n const r = await db.execute({ sql: `SELECT agent, job_id, detail FROM reconciler_log WHERE key IN (${keys.map(() => \"?\").join(\",\")})`, args: keys });\n return (r.rows as any[]).map((x) => ({ agent: String(x.agent), job_id: x.job_id == null ? null : Number(x.job_id), detail: String(x.detail ?? \"\") }));\n}\n\n// The assessment as the status pages show it; the reply must still say something when it throws.\nasync function statusAssessment(db: any, now: Date) {\n const lp = localParts(now);\n const sw = statusWindow(lp);\n let a: any;\n try { a = await assess(db, now, { respectGrace: true, window: sw.window }); }\n catch (e) { a = { ok: false, reason: `the assessment threw: ${String(e).slice(0, 160)}`, local: `${lp.weekday} ${lp.date} ${lp.hhmm}`, missing: [] }; }\n const claimed = a.ok ? await claimedFor(db, a.missing) : [];\n return { a, sw, claimed };\n}\n\nasync function statusText(db: any): Promise {\n const now = new Date();\n const flags = await readFlags(db);\n const { a, sw, claimed } = await statusAssessment(db, now);\n const L: string[] = [\"🧊 *The cold path*\"];\n L.push(`• Missed-slot reconciler: *${flags.reconciler}* — \\`/coldpath reconciler ${flags.reconciler === \"on\" ? \"off\" : \"on\"}\\``);\n L.push(`• Names in the lite brief: *${flags.herald_names_missing}* — \\`/coldpath names ${flags.herald_names_missing === \"on\" ? \"off\" : \"on\"}\\``);\n L.push(`• News fetch (val): *${flags.news_fetch_val}* — \\`/coldpath news ${flags.news_fetch_val === \"on\" ? \"off\" : \"on\"}\\``);\n L.push(\"\");\n if (!a.ok) {\n L.push(`*As of ${esc(a.local)}:* ${esc(a.reason)} — the reconciler stands down and queues nothing.`);\n } else {\n L.push(`*As of ${esc(a.local)}* _(roster: ${a.dailyCount} daily agents, snapshot ${ageText(a.rosterAgeH)})_`);\n // Three headers over the claimed rows, each true of what follows it. job_id is written by the UPDATE\n // that runs after the bus has answered (the loop in reconcileOnce), so a row with no job_id is one of\n // two things, and its detail says which. `bus POST failed: …` or `bus POST answered `: the\n // bus refused or never got the request, no job was made, and forgetting the key is the documented undo\n // (the claim-first order in that loop). Anything else — `claimed in window …` left untouched because\n // the pass died (or is still running) between its POST and the UPDATE, or a 2xx whose body carried no\n // id — may have a live job on the bus that Rex will find. That row is never told to be forgotten here:\n // a forgotten key is re-claimed by the next pass, which posts a second CATCH-UP for the same agent and\n // day — the doubled job the claim-first order exists to prevent, and the guard row is its primary stop.\n const noJobMade = (detail: string) => /^bus POST (failed:|answered [^2])/.test(detail);\n const onBus = claimed.filter((c) => c.job_id != null);\n const postFailed = claimed.filter((c) => c.job_id == null && noJobMade(c.detail));\n const unrecorded = claimed.filter((c) => c.job_id == null && !noJobMade(c.detail));\n L.push(a.missing.length\n ? `• Owed a run, no line, past grace: ${a.missing.map((m: any) => `*${esc(firstName(m.display))}*`).join(\", \")} — on the catch-up list for ${esc(sw.label)}: ${a.wouldQueue.length ? esc(names(a.wouldQueue)) : \"none of them\"}` +\n (onBus.length ? `; already on the bus: ${esc(onBus.map((c) => `${c.agent} (job ${c.job_id})`).join(\", \"))}` : \"\") +\n (postFailed.length ? `; bus POST refused or unreachable, no job made: ${esc(postFailed.map((c) => c.agent).join(\", \"))} (forget the guard key to let it queue again)` : \"\") +\n (unrecorded.length ? `; claimed, outcome not recorded: ${esc(unrecorded.map((c) => c.agent).join(\", \"))} (the job may be on the bus — find it on GET /agent/status before touching the guard row)` : \"\")\n : \"• Everyone who owed a run has reported.\");\n if (a.notYetDue.length) L.push(`• Still inside grace: ${esc(a.notYetDue.map((m: any) => firstName(m.display)).join(\", \"))}`);\n if (a.paused.length) L.push(`• Paused: ${esc(a.paused.join(\", \"))}`);\n }\n const last = await db.execute({ sql: \"SELECT ts, summary FROM journal WHERE source=? ORDER BY id DESC LIMIT 4\", args: [SOURCE] });\n if (last.rows.length) {\n L.push(\"\");\n L.push(\"*Last passes* _(UTC)_\");\n for (const r of last.rows as any[]) L.push(`• ${esc(String(r.ts).slice(5, 16))} — ${esc(String(r.summary).slice(0, 140))}`);\n }\n return L.join(\"\\n\").slice(0, 3900);\n}\n\n/** /coldpath → both flags and the assessment as of now. /coldpath reconciler|names on|off → writes the\n * flag, journals it, confirms in one line. Private chats are owner-gated before this is reached. */\nexport async function coldPathCommand(db: any, chatId: number, text: string, send: (chatId: number, text: string, kind?: string) => Promise): Promise {\n const m = String(text ?? \"\").trim().match(/^\\/coldpath(?:@\\w+)?(?:\\s+(.*?))?\\s*$/i);\n if (!m) return false;\n await init(db);\n const args = String(m[1] ?? \"\").trim();\n if (!args) { await send(chatId, await statusText(db), \"command\"); return true; }\n const w = args.match(/^(reconciler|names|news)\\s+(on|off)$/i);\n if (!w) { await send(chatId, \"Usage: `/coldpath` · `/coldpath reconciler on|off` · `/coldpath names on|off` · `/coldpath news on|off`\", \"command\"); return true; }\n const which = w[1].toLowerCase(), on = w[2].toLowerCase() === \"on\";\n const label = which === \"reconciler\" ? \"The missed-slot reconciler\" : which === \"names\" ? \"Naming who did not run in the lite brief\" : \"The news-fetch val\";\n await setFlag(db, which, on, \"/coldpath\");\n await send(chatId, on\n ? `✅ ${label} is now *on*. Undo: \\`/coldpath ${which} off\\`. \\`/coldpath\\` shows what it sees.`\n : `⏹ ${label} is now *off*.`, \"command\");\n return true;\n}\n\n// ---------- the routes ----------\nexport function mountColdPath(app: any, db: any, PULL_SECRET: string, busAuth: any) {\n const ready = init(db);\n const auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n\n app.get(\"/coldpath\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const now = new Date();\n const flags = await readFlags(db);\n const { a, sw, claimed } = await statusAssessment(db, now);\n // A forced pass is a test or a hand-run, never the schedule. Twenty of them hide the interval's own\n // rows, which are the ones this list exists to show. Counted, never silently dropped.\n const last = await db.execute(\n \"SELECT key, ts, kind, agent, due_date, job_id, detail FROM reconciler_log WHERE instr(key, ':forced:') = 0 ORDER BY ts DESC, key DESC LIMIT 20\");\n const forcedN = await db.execute(\"SELECT COUNT(*) AS n FROM reconciler_log WHERE instr(key, ':forced:') > 0\");\n const lines = await db.execute({ sql: \"SELECT id, ts, summary FROM journal WHERE source=? ORDER BY id DESC LIMIT 10\", args: [SOURCE] });\n return c.json({ ok: true, now: now.toISOString(), local: a.local, flags,\n roster: { ok: a.ok, reason: a.reason, stamp: a.rosterStamp, ageHours: a.rosterAgeH, dailyCount: a.dailyCount, agents: a.agentsTotal },\n // wouldQueue is what the named window's rule would queue from today's missing — a rule, not a promise.\n assessment: { window: sw.window, windowLabel: sw.label, owed: a.owed, ran: a.ran, missing: a.missing, notYetDue: a.notYetDue, paused: a.paused, skipped: a.skipped, wouldQueue: a.wouldQueue, claimed },\n limits: { MAX_PER_PASS, MAX_QUEUED, MAX_GRACE_H }, catchupOk: CATCHUP_OK, lastPasses: last.rows, forcedPasses: Number((forcedN.rows[0] as any)?.n ?? 0), lastJournal: lines.rows });\n });\n\n app.post(\"/coldpath/flag\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const which = String(b.flag ?? \"\");\n if (!FLAG_KEY[which]) return c.json({ ok: false, error: 'flag must be \"reconciler\", \"names\" or \"news\"' }, 400);\n if (typeof b.on !== \"boolean\") return c.json({ ok: false, error: \"on must be true or false\" }, 400);\n const w = await setFlag(db, which, b.on, \"POST /coldpath/flag\");\n return c.json({ ok: true, ...w, flags: await readFlags(db) });\n });\n\n // The same code path the interval runs, on demand — the schedule cannot be read from any API, so the\n // proof that the reconciler works is a pass with a recorded decision, not a deploy that returned 200.\n app.post(\"/coldpath/run\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const window = String(b.window ?? \"\");\n if (!(WINDOWS as readonly string[]).includes(window)) return c.json({ ok: false, error: 'window must be \"11\" or \"20\"' }, 400);\n const dry = b.dry === true, force = b.force === true;\n if (b.sink !== undefined && b.sink !== \"selftest\") return c.json({ ok: false, error: 'sink may only be \"selftest\"' }, 400);\n let at: Date | undefined;\n if (b.at !== undefined) {\n // A production pass may never be told what time it is.\n if (!dry && b.sink !== \"selftest\") return c.json({ ok: false, error: 'at is a test parameter: pass dry:true or sink:\"selftest\" with it' }, 400);\n at = new Date(String(b.at));\n if (isNaN(at.getTime())) return c.json({ ok: false, error: \"at is not a date\" }, 400);\n }\n const now = at ?? new Date();\n if (!dry && !force && localParts(now).hour !== Number(window)) {\n return c.json({ ok: true, skipped: `outside the ${window}:00 window`, local: localStamp(now.getTime()), hint: \"force:true runs it anyway\" });\n }\n const res: any = await reconcileOnce({ window: window as Window, now: at, dry, force, sink: b.sink, db });\n if (b.brief_line === true) res.brief_line = await namesMissingLine(db, now, { preview: true });\n return c.json(res);\n });\n\n // The undo for guard rows, in three named modes: one real row by its exact key; test rows by prefix;\n // or the forced-pass rows ({forced:true}, optionally one date's). A prefix delete can reach test rows\n // only: {\"prefix\":\"job:\"} or {\"prefix\":\"pass\"} would empty the whole guard table in one call and let\n // the next pass re-queue every catch-up it holds. The forced mode is a named mode, not a loosened\n // prefix rule: ':forced:' occurs only in a pass key (built in reconcileOnce), never in a job: key, so\n // it can never reach a row whose deletion would re-queue a catch-up. Real job rows go one at a time, by key.\n app.post(\"/coldpath/forget\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const key = b.key === undefined ? \"\" : String(b.key), prefix = b.prefix === undefined ? \"\" : String(b.prefix);\n const forced = b.forced === true, date = b.date === undefined ? \"\" : String(b.date);\n const modes = [key ? \"key\" : \"\", prefix ? \"prefix\" : \"\", forced ? \"forced\" : \"\"].filter(Boolean);\n if (modes.length > 1) return c.json({ ok: false, error: `one mode only, not ${modes.join(\" and \")}: key, prefix, or forced:true` }, 400);\n if (!modes.length) return c.json({ ok: false, error: 'key (one real row, exact), prefix (test rows only: must start with \"test:\"), or forced:true (the forced-pass rows; add date:\"YYYY-MM-DD\" for one day)' }, 400);\n if (prefix && !prefix.startsWith(\"test:\")) return c.json({ ok: false, error: 'a prefix delete is for test rows only: the prefix must start with \"test:\"; delete a real row by its exact key' }, 400);\n if (date && !forced) return c.json({ ok: false, error: \"date goes with forced:true only\" }, 400);\n if (date && !/^\\d{4}-\\d\\d-\\d\\d$/.test(date)) return c.json({ ok: false, error: \"date must be YYYY-MM-DD\" }, 400);\n // substr and instr, not LIKE: a prefix must never be a pattern.\n const where = key ? { sql: \"key = ?\", args: [key] as any[] }\n : prefix ? { sql: \"substr(key, 1, ?) = ?\", args: [prefix.length, prefix] as any[] }\n : { sql: `kind = 'pass' AND instr(key, ':forced:') > 0${date ? \" AND due_date = ?\" : \"\"}`, args: (date ? [date] : []) as any[] };\n const rows = (await db.execute({ sql: `SELECT key FROM reconciler_log WHERE ${where.sql}`, args: where.args })).rows as any[];\n const keys = rows.map((r) => String(r.key));\n if (keys.length) {\n await db.execute({ sql: `DELETE FROM reconciler_log WHERE ${where.sql}`, args: where.args });\n const what = key ? \"key \" + key : prefix ? \"prefix \" + prefix : `forced passes${date ? \", \" + date : \"\"}`;\n const effect = forced ? \"Forced pass rows only; every job: guard row is untouched, so this re-queues no catch-up.\"\n : \"The slots they guarded can be queued again.\";\n await journal(db, `forgot ${keys.length} guard row${keys.length === 1 ? \"\" : \"s\"} (${what})`,\n `Deleted from reconciler_log by POST /coldpath/forget: ${keys.join(\", \")}. ${effect}`);\n }\n return c.json({ ok: true, deleted: keys });\n });\n}\n",[],[199],"75fdd5fe-5e3c-47db-9b42-8ff22effa87b","palantir-routes.ts","61b2d050-a64f-11f1-86de-1607ee4eb77e",90,["D",1789004711694],15,"// Palantír routes (HQ, 1–2 Sep 2026) — the dashboard's data in the val, the bot as a citizen.\n// Split into its own file: bot-webhook.ts sits at Val Town's 80k limit.\n//\n// /snapshot POST (bus auth) the PC pushes a SECRET-FREE copy of dashboard/data.js after every\n// regeneration; GET returns it. Quest #110: every fact the dashboard shows, askable.\n// /dayselection POST {date?, picks:[{task_id,state}]} — the battle picker on the page (quest #98).\n// /forge POST {mode:\"desktop\"|\"cloud\"} — same two paths the Telegram keyboard offers.\n// /presence POST {session, minutes, note} heartbeat of the desktop Gatekeeper; GET who is awake.\n// /gate/pull GET queued private messages, claimed for the caller (quest #112).\n// /gate/answer POST {id, text} → Telegram reply + row answered. /gate/release POST {id}.\n// handleCommand /money /fleet /tasks (alias /quests) /today /road /news /shelf /deeds /journal /who /help — free, no LLM.\n// gateRoute present → queue for the Gatekeeper; absent → \"the stone is dark\" (+ /ask to push credits).\n// snapshotContext what the cloud brain (/ask) gets to see beyond open quests.\n// applyBrainActions structured actions the brain may return: create_tasks, note, dispatch.\n// Mounted by bot-webhook.ts: mountPalantir(app, sqlite, PULL_SECRET, busAuth, { send, tg, forgePlan, forgePlanBrain }).\n// /mirror/* the Mirror tab's answers (task #232, 9 Sep 2026) — lives in mirror-routes.ts, mounted from here.\n// /coldpath/* the missed-slot reconciler's status and switches (task #220, 10 Sep 2026) — lives in reconciler.ts,\n// mounted from here; /coldpath in the bot is coldPathCommand from the same file.\n\nimport { mountMirror } from \"./mirror-routes.ts\";\n// Static on purpose: mountColdPath must register its routes while the app is being built, and\n// coldPathCommand sits in the webhook's request path. herald-fallback.ts imports the same file lazily\n// instead, inside a try — the rescue brief must never fail to load because of this module.\nimport { mountColdPath, coldPathCommand } from \"./reconciler.ts\";\n\nconst STAMP = () => new Date().toISOString().slice(0, 19).replace(\"T\", \" \");\nconst esc = (s: any) => String(s ?? \"\").replace(/[_*`\\[]/g, (m) => \"\\\\\" + m); // Telegram Markdown v1 escapes\nconst eur = (v: any) => (v == null || isNaN(Number(v))) ? \"—\" : \"€\" + Number(v).toFixed(2).replace(/\\B(?=(\\d{3})+(?!\\d))/g, \" \").replace(\".\", \",\");\nconst eur0 = (v: any) => (v == null || isNaN(Number(v))) ? \"—\" : \"€\" + Math.round(Number(v)).toLocaleString(\"en\").replace(/,/g, \" \");\n\nlet deps: any = {};\nlet db: any = null;\n\nasync function init(sqlite: any) {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS snapshot (\n key TEXT PRIMARY KEY, data TEXT, stamp TEXT, ts TEXT DEFAULT (datetime('now')))`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS presence (\n session TEXT PRIMARY KEY, until TEXT, note TEXT, ts TEXT DEFAULT (datetime('now')))`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS gate_queue (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, text TEXT, status TEXT DEFAULT 'queued',\n claimed_by TEXT, claimed_at TEXT, answered_at TEXT, answer_chars INTEGER)`);\n // Quest #98: deadlines were free text (\"due Mon 31 Aug\") — a column the page, the herald and the\n // beacons can read. ISO date, nullable.\n try { await sqlite.execute(\"ALTER TABLE tasks ADD COLUMN due TEXT\"); } catch (_) { /* already there */ }\n // The night watch's tables are declared here too, identically to night-watch.ts.\n // Whichever of the two runs first wins, and the reader never 500s on a table the\n // writer has not created yet — the interval may not have fired since deploy.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS balance_history (\n day TEXT PRIMARY KEY, business_eur REAL, currency TEXT, source TEXT, ts TEXT)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS nightwatch_runs (\n ts TEXT PRIMARY KEY, job TEXT, status TEXT, detail TEXT)`);\n}\n\n// ---------- snapshot ----------\nasync function getSnapshot(sqlite: any): Promise<{ data: any, stamp: string } | null> {\n const r = await sqlite.execute(\"SELECT data, stamp FROM snapshot WHERE key='dashboard'\");\n if (!r.rows.length) return null;\n try { return { data: JSON.parse(r.rows[0].data as string), stamp: String(r.rows[0].stamp ?? \"\") }; }\n catch { return null; }\n}\n\nfunction stripSecrets(d: any): any {\n if (!d || typeof d !== \"object\") return d;\n const out: any = Array.isArray(d) ? [] : {};\n for (const k of Object.keys(d)) {\n if (k === \"api\" || k === \"secret\" || /token|secret|password/i.test(k)) continue;\n const v = d[k];\n out[k] = (v && typeof v === \"object\") ? stripSecrets(v) : v;\n }\n return out;\n}\n\n// ---------- presence + gate ----------\nasync function whoIsAwake(sqlite: any): Promise {\n const r = await sqlite.execute(\"SELECT session, until, note, ts FROM presence WHERE until > datetime('now') ORDER BY until DESC\");\n return r.rows as any[];\n}\n\nfunction ageOf(stamp: string): string {\n if (!stamp) return \"no stamp\";\n const d = new Date(stamp.replace(\" \", \"T\") + (/[zZ]|[+-]\\d\\d:?\\d\\d$/.test(stamp) ? \"\" : \"+02:00\"));\n if (isNaN(d.getTime())) return stamp;\n const m = Math.round((Date.now() - d.getTime()) / 60000);\n if (m < 1) return \"just now\";\n if (m < 60) return `${m} min ago`;\n if (m < 48 * 60) return `${Math.round(m / 60)} h ago`;\n return `${Math.round(m / 1440)} d ago`;\n}\n\nfunction localHHMM(d: Date): string {\n return d.toLocaleTimeString(\"en-GB\", { hour: \"2-digit\", minute: \"2-digit\", timeZone: \"Europe/Amsterdam\" });\n}\n\n// ---------- the free commands ----------\nconst HELP = `🔮 *Palantír in the pocket* — no credits, straight from the dashboard's last refresh:\n/money — the pot, Wise, this month, standing orders\n/fleet — who reported, who is silent, the bus\n/quests — open quests by tier (with #ids)\n/today — calendar + the battle plan\n/road — the next 14 days\n/news — today's heat map\n/shelf — Rivendell today\n/deeds — closed this week\n/journal — the last 10 lines\n/who — is a session awake?\n/coldpath — what did not run while the PC was off, and the two switches\n/ask — wake the cloud brain ⚡ (credits)`;\n\nasync function renderCommand(sqlite: any, cmd: string): Promise {\n const snap = await getSnapshot(sqlite);\n const D = snap?.data ?? {};\n const age = snap ? `_as of ${esc(snap.stamp)} · ${ageOf(snap.stamp)}_` : \"_no snapshot yet — the PC has not pushed one_\";\n const list = (arr: any[], f: (x: any) => string, max = 12) => arr.slice(0, max).map(f).join(\"\\n\") || \"—\";\n\n if (cmd === \"help\" || cmd === \"start\") return HELP;\n\n if (cmd === \"money\") {\n const ML = D?.money?.live ?? {}, MS = D?.money?.spend ?? {}, B = D?.business ?? {};\n // #159 (4 Sep 2026) — the name comes from ACCOUNT_LABELS in update_dashboard_data.py, the same\n // map the console reads. bank + last four stays as provenance and fallback, never as the headline.\n const accts = (ML.accounts ?? []).map((a: any) =>\n `• *${esc(a.label ?? `${a.bank} …${a.tail}`)}* (${esc(a.bank)} …${esc(a.tail)}): *${eur(a.balance)}* — as of ${esc(a.as_of ?? \"?\")}`).join(\"\\n\");\n const cats = (MS.monthCategories ?? []).slice(0, 6).map((c: any) => `• ${esc(c.cat)} ${eur0(c.eur)}`).join(\"\\n\");\n const bk = MS.book?.totals ?? {};\n const bop = MS.businessOnPersonal ?? {};\n const PM = MS.previousMonth ?? null;\n const moved = [MS.monthMovedAssets ? `${eur0(MS.monthMovedAssets)} into crypto/investing` : \"\", MS.monthMovedInternal ? `${eur0(MS.monthMovedInternal)} between own accounts` : \"\"].filter(Boolean).join(\", \");\n return `💰 *Money*\\n*Personal pot: ${eur(ML.personalTotal)}* (ABN + Revolut, one pot)\\n${accts || \"• no live balances\"}\\n` +\n `*Business (Wise): ${eur0(B.coffersEUR)}* ${B.coffersSource ? \"· \" + esc(B.coffersSource) : \"\"}\\n\\n` +\n `*This month so far* (${esc(MS.monthLabel ?? \"?\")}): *${eur(MS.monthTotalOut)} consumed*${moved ? ` — not counted: ${moved}` : \"\"}\\n${cats}\\n` +\n (PM && PM.out != null ? `\\n*${esc(PM.label)}:* ${eur(PM.out)} consumed · ${eur0(PM.assets)} into crypto/investing · ${eur0(PM.internal)} moved between own accounts · ${eur0(PM.income)} came in${PM.family ? ` (${eur0(PM.family)} of it from Sergey — yours)` : \"\"}\\n` +\n (PM.categories ?? []).slice(0, 6).map((c: any) => `• ${esc(c.cat)} ${eur0(c.eur)}`).join(\"\\n\") + \"\\n\" : \"\") + \"\\n\" +\n `*Standing orders:* ${eur(bk.liveMonthly)}/month · ${bk.liveCount ?? \"?\"} live · ${eur(bk.byDuty?.free)} your choice · ${bk.checkCount ?? 0} need a check\\n` +\n (bop.core_maraletto != null ? `*Maraletto owes you:* ${eur(bop.core_maraletto)}\\n` : \"\") +\n `\\n${age}`;\n }\n\n if (cmd === \"fleet\") {\n const FL = D?.fleet ?? {}, W = FL.watch ?? {};\n const awake = await whoIsAwake(sqlite);\n const st = await sqlite.execute(\"SELECT status, COUNT(*) AS n FROM agent_jobs GROUP BY status\");\n const counts: Record = {}; for (const r of st.rows as any[]) counts[String(r.status)] = Number(r.n);\n const stranded = await sqlite.execute(\"SELECT id, agent FROM agent_jobs WHERE status='running' AND COALESCE(claimed_at, ts) < datetime('now','-2 hours')\");\n const blocked = await sqlite.execute(\"SELECT COUNT(*) AS n FROM agent_blocked WHERE resolved=0\");\n const ok = (W.ok ?? []).map((a: any) => esc(a.agent)).join(\", \") || \"—\";\n const silent = (W.silent ?? []).map((a: any) => `${esc(a.agent)} (${esc(a.why ?? \"\")})`).join(\", \");\n const waiting = (W.waiting ?? []).map((a: any) => esc(a.agent)).join(\", \");\n const last = await sqlite.execute(\"SELECT ts, source, summary FROM journal ORDER BY id DESC LIMIT 3\");\n return `🏰 *The Citadel*\\n` +\n `*Reporting:* ${ok}\\n` + (silent ? `*SILENT:* ${silent}\\n` : `*Silent:* none\\n`) + (waiting ? `*Waiting/outside window:* ${waiting}\\n` : \"\") +\n `*Bus:* ${counts.queued ?? 0} queued · ${counts.running ?? 0} running · ${stranded.rows.length} stranded\\n` +\n `*Blocked runs open:* ${Number((blocked.rows[0] as any)?.n ?? 0)}\\n` +\n `*Awake now:* ${awake.length ? awake.map((a) => esc(a.session)).join(\", \") : \"no session — the stone is dark\"}\\n\\n` +\n `*Last journal:*\\n${list(last.rows as any[], (r: any) => `• ${esc(String(r.ts).slice(11, 16))} ${esc(r.source)}: ${esc(String(r.summary).slice(0, 110))}`)}\\n\\n${age}`;\n }\n\n if (cmd === \"quests\" || cmd === \"tasks\") { // \"tasks\" is the plain-English name (3 Sep 2026); \"quests\" kept so old muscle memory still works\n const r = await sqlite.execute(\"SELECT id, title, tier, due FROM tasks WHERE status='open' AND COALESCE(owner,'alexandr')='alexandr' ORDER BY CASE tier WHEN 'balrog' THEN 0 WHEN 'nazgul' THEN 1 WHEN 'fellowship' THEN 2 ELSE 3 END, ord, id\");\n const byTier: Record = {};\n for (const t of r.rows as any[]) (byTier[String(t.tier)] = byTier[String(t.tier)] ?? []).push(t);\n const names: Record = { balrog: \"🔥 Urgent\", nazgul: \"⚔️ Due soon\", fellowship: \"🧭 Active\", shire: \"🌿 Someday\" };\n let out = `📜 *Quest Log — ${r.rows.length} open*\\n`;\n for (const k of [\"balrog\", \"nazgul\", \"fellowship\", \"shire\"]) {\n const items = byTier[k] ?? []; if (!items.length) continue;\n out += `\\n*${names[k]}* (${items.length})\\n` + items.slice(0, 15).map((t: any) => `#${t.id} ${esc(String(t.title).slice(0, 80))}${t.due ? ` · due ${esc(t.due)}` : \"\"}`).join(\"\\n\") + (items.length > 15 ? `\\n… ${items.length - 15} more` : \"\") + \"\\n\";\n }\n return out + \"\\n_live from the val_\";\n }\n\n if (cmd === \"today\") {\n const dl = D?.daily ?? {};\n const date = new Date().toISOString().slice(0, 10);\n const picks = await sqlite.execute({ sql: \"SELECT dp.task_id, dp.state, t.title FROM day_plan dp LEFT JOIN tasks t ON t.id=dp.task_id WHERE dp.date=? AND dp.state!='none'\", args: [date] });\n const plan = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date=?\", args: [date] });\n const cal = list(dl.calendar ?? [], (c: any) => `• ${esc(c.when || \"\")} ${esc(c.title)}${c.cal && c.cal !== \"own\" ? ` (${esc(c.cal)})` : \"\"}`);\n const pk = list(picks.rows as any[], (p: any) => `• ${p.state === \"done\" ? \"✅\" : \"📅\"} #${p.task_id} ${esc(String(p.title ?? \"\").slice(0, 70))}`);\n const pl = String(plan.rows[0]?.plan ?? \"\");\n return `☀️ *Today*\\n*Calendar:*\\n${cal}\\n\\n*Battles chosen:*\\n${picks.rows.length ? pk : \"none yet — pick on the dashboard or in the morning form\"}\\n\\n*Plan:* ${pl ? (pl.startsWith(\"AWAITING\") ? \"chosen, forge pending\" : esc(pl.slice(0, 900))) : \"not forged\"}\\n\\n${age}`;\n }\n\n if (cmd === \"road\") {\n const up = D?.daily?.upcoming ?? [];\n const dues = await sqlite.execute(\"SELECT id, title, due FROM tasks WHERE status='open' AND due IS NOT NULL AND due != '' ORDER BY due LIMIT 15\");\n const days: Record = {};\n for (const e of up) (days[e.day ?? \"?\"] = days[e.day ?? \"?\"] ?? []).push(`• ${esc(e.time || \"\")} ${esc(e.title)}${e.cal && e.cal !== \"own\" ? ` (${esc(e.cal)})` : \"\"}`);\n let out = \"🛤 *The Road Ahead — 14 days*\\n\";\n for (const d of Object.keys(days).slice(0, 14)) out += `\\n*${esc(d)}*\\n${days[d].join(\"\\n\")}\\n`;\n if (dues.rows.length) out += `\\n*Quest deadlines:*\\n` + list(dues.rows as any[], (t: any) => `• ${esc(t.due)} — #${t.id} ${esc(String(t.title).slice(0, 60))}`);\n return out + `\\n\\n${age}`;\n }\n\n if (cmd === \"news\") {\n const K = D?.knowledge ?? {}, dd = K.daily ?? {};\n const blocks: [string, string][] = [[\"trending\", \"🔥 Trending\"], [\"react\", \"🎯 Might need your reaction\"], [\"tech\", \"⚗️ Tech & science\"], [\"know\", \"📖 Good to know\"], [\"curious\", \"✨ Curious\"]];\n let out = `📰 *Heat Map* ${K.generatedAt ? \"· \" + esc(K.generatedAt) : \"\"}\\n`;\n for (const [k, name] of blocks) {\n const items = dd[k] ?? []; if (!items.length) continue;\n out += `\\n*${name}*\\n` + items.slice(0, 4).map((t: any) => `• ${t.url ? `[${esc(String(t.title).slice(0, 80))}](${t.url})` : esc(String(t.title).slice(0, 80))}`).join(\"\\n\") + \"\\n\";\n }\n return out + `\\n${age}`;\n }\n\n if (cmd === \"shelf\") {\n const RV = D?.rivendell ?? {};\n const item = (t: any) => `• ${t.url ? `[${esc(String(t.title).slice(0, 70))}](${t.url})` : esc(String(t.title).slice(0, 70))} _(${esc(t.source ?? \"\")}, ~${t.readMinutes ?? \"?\"} min)_`;\n return `🏛 *Rivendell today*\\n*The Athenaeum*\\n${list(RV.athenaeum ?? [], item)}\\n\\n*The Frontier*\\n${list(RV.frontier ?? [], item)}\\n\\n_archive: ${RV.archiveCount ?? \"?\"} pieces_\\n${age}`;\n }\n\n if (cmd === \"deeds\") {\n const r = await sqlite.execute(\"SELECT id, title, done_at FROM tasks WHERE status='done' AND done_at > datetime('now','-7 days') AND COALESCE(owner,'alexandr')='alexandr' ORDER BY done_at DESC LIMIT 20\");\n const jobs = await sqlite.execute(\"SELECT id, agent, done_at, substr(brief,1,70) AS brief FROM agent_jobs WHERE status='done' AND done_at > datetime('now','-7 days') ORDER BY id DESC LIMIT 8\");\n return `✅ *Deeds — last 7 days*\\n*Quests closed (${r.rows.length}):*\\n${list(r.rows as any[], (t: any) => `• ${esc(String(t.done_at).slice(5, 10))} #${t.id} ${esc(String(t.title).slice(0, 70))}`, 20)}\\n\\n*Errands delivered (${jobs.rows.length}):*\\n${list(jobs.rows as any[], (j: any) => `• #${j.id} ${esc(j.agent)}: ${esc(j.brief)}…`)}\\n\\n_live from the val_`;\n }\n\n if (cmd === \"journal\") {\n const r = await sqlite.execute(\"SELECT ts, source, summary FROM journal ORDER BY id DESC LIMIT 10\");\n return `📓 *The Chronicle — last 10*\\n` + list(r.rows as any[], (x: any) => `• ${esc(String(x.ts).slice(5, 16))} *${esc(x.source)}* — ${esc(String(x.summary).slice(0, 140))}`, 10) + \"\\n\\n_live from the val (UTC stamps)_\";\n }\n\n if (cmd === \"who\") {\n const awake = await whoIsAwake(sqlite);\n const q = await sqlite.execute(\"SELECT COUNT(*) AS n FROM gate_queue WHERE status IN ('queued','claimed')\");\n return awake.length\n ? `🟢 *Awake:* ${awake.map((a) => `${esc(a.session)} (until ${esc(String(a.until).slice(11, 16))} UTC${a.note ? \", \" + esc(a.note) : \"\"})`).join(\"; \")}\\n_${Number((q.rows[0] as any)?.n ?? 0)} message(s) waiting at the gate_`\n : `🌑 *The stone is dark* — no desktop session is awake. Captures still work; questions wait, or /ask wakes the cloud brain ⚡ (credits).`;\n }\n return null;\n}\n\n// ---------- brain context (for /ask) ----------\nasync function snapshotContext(sqlite: any): Promise {\n const snap = await getSnapshot(sqlite);\n if (!snap) return \"DASHBOARD SNAPSHOT: none pushed yet.\";\n const D = snap.data ?? {};\n const ML = D.money?.live ?? {}, MS = D.money?.spend ?? {}, B = D.business ?? {}, dl = D.daily ?? {}, W = D.fleet?.watch ?? {};\n const short = (arr: any[], f: (x: any) => string, n = 8) => (arr ?? []).slice(0, n).map(f).join(\"; \");\n return `DASHBOARD SNAPSHOT (as of ${snap.stamp}, ${ageOf(snap.stamp)}):\nMONEY personal pot ${ML.personalTotal ?? \"?\"} EUR = ${short(ML.accounts ?? [], (a: any) => `${a.label ?? `${a.bank} …${a.tail}`} (${a.bank} …${a.tail}) ${a.balance} as of ${a.as_of}`)}; business Wise ${B.coffersEUR ?? \"?\"} EUR; month ${MS.monthLabel ?? \"?\"} out ${MS.monthTotalOut ?? \"?\"}: ${short(MS.monthCategories ?? [], (c: any) => `${c.cat} ${c.eur}`)}; standing orders ${MS.book?.totals?.liveMonthly ?? \"?\"}/mo (${MS.book?.totals?.liveCount ?? \"?\"} live); Maraletto owes ${MS.businessOnPersonal?.core_maraletto ?? \"?\"}.\nCALENDAR today: ${short(dl.calendar ?? [], (c: any) => `${c.when} ${c.title}`)}. NEXT DAYS: ${short(dl.upcoming ?? [], (e: any) => `${e.day} ${e.time} ${e.title}`, 14)}.\nAGENTS ok: ${(W.ok ?? []).map((a: any) => a.agent).join(\",\")}; silent: ${(W.silent ?? []).map((a: any) => a.agent).join(\",\") || \"none\"}; waiting: ${(W.waiting ?? []).map((a: any) => a.agent).join(\",\") || \"none\"}.\nNEWS today: ${short(Object.values(dl ? (D.knowledge?.daily ?? {}) : {}).flat() as any[], (t: any) => t.title, 10)}.\nRIVENDELL: ${short([...(D.rivendell?.athenaeum ?? []), ...(D.rivendell?.frontier ?? [])], (t: any) => t.title, 9)}.\nDECISIONS pending: ${short(D.vault?.decisions ?? [], (d: any) => d.title)}.`;\n}\n\n// ---------- structured actions the brain may return ----------\nasync function applyBrainActions(sqlite: any, j: any, chatId: number): Promise {\n const did: string[] = [];\n for (const t of (Array.isArray(j.create_tasks) ? j.create_tasks : []).slice(0, 5)) {\n const title = String(t?.title ?? t ?? \"\").slice(0, 160); if (title.length < 3) continue;\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [t?.tier ?? \"fellowship\"] });\n await sqlite.execute({ sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner, due) VALUES (?,?,?,?,?,?,?)\",\n args: [title, \"via /ask \" + new Date().toISOString().slice(0, 10), t?.tier ?? \"fellowship\", t?.area ?? \"\", mx.rows[0].o,\n /^\\s*(HQ[:\\/]|RUMO-ORCH|\\[CHANGE REQUEST\\]|Wright[:\\/ ]|Bolt[:\\/ ]|Palantir defect|Build:)/i.test(title) ? \"system\" : \"alexandr\",\n t?.due ?? null] });\n did.push(`quest: ${title.slice(0, 50)}`);\n }\n if (j.note && String(j.note).trim().length > 3) {\n await sqlite.execute({ sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"note\", String(j.note).slice(0, 1500) + \"\\n[via: /ask cloud brain]\"] });\n did.push(\"note → vault\");\n }\n if (j.dispatch && j.dispatch.brief) {\n await sqlite.execute({ sql: \"INSERT INTO agent_jobs (agent, brief, packs) VALUES (?,?,?)\",\n args: [String(j.dispatch.agent ?? \"rex-runner\"), String(j.dispatch.brief).slice(0, 1500) + \"\\n\\n(dispatched by the cloud brain on Alexandr's /ask)\", \"[]\"] });\n did.push(`errand → ${j.dispatch.agent ?? \"rex-runner\"}`);\n }\n if (did.length) await sqlite.execute({ sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [\"cloud brain (/ask)\", \"acted on /ask: \" + did.join(\", \"), JSON.stringify(j).slice(0, 1500)] });\n return did;\n}\n\n// ---------- routing when a human writes ----------\n// Returns true when the message was handled here (command, or queued for the gate, or dark-stone answer).\nasync function gateRoute(sqlite: any, chatId: number, text: string, isChatIntent: boolean): Promise {\n const awake = await whoIsAwake(sqlite);\n if (awake.length) {\n await sqlite.execute({ sql: \"INSERT INTO gate_queue (chat_id, text) VALUES (?,?)\", args: [chatId, text.slice(0, 4000)] });\n await deps.tg(\"sendChatAction\", { chat_id: chatId, action: \"typing\" });\n // stale rows from a session that died mid-way: say so once, then let the gatekeeper's next pull handle them\n const stale = await sqlite.execute(\"SELECT COUNT(*) AS n FROM gate_queue WHERE status IN ('queued','claimed') AND ts < datetime('now','-6 minutes')\");\n if (Number((stale.rows[0] as any)?.n ?? 0) > 0) {\n await deps.send(chatId, `⏳ ${(stale.rows[0] as any).n} earlier message(s) are still waiting at the gate — the session may have gone quiet. /who to check, /ask to push the cloud brain ⚡.`);\n }\n return true;\n }\n if (!isChatIntent) return false; // captures (task / note / directive / hq) keep their free path when nobody is awake\n await deps.send(chatId, \"🌑 *The stone is dark* — no desktop session is awake, so this waits for the next watch. Urgent? Reply `/ask` + your question to wake the cloud brain ⚡ (credits).\");\n return true;\n}\n\nexport function mountPalantir(app: any, sqlite: any, PULL_SECRET: string, busAuth: any, d: any) {\n deps = d; db = sqlite;\n const ready = init(sqlite);\n const auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n mountMirror(app, sqlite, PULL_SECRET, busAuth); // HQ 9 Sep 2026 (#232): /mirror/answer, /mirror/answers, /mirror/applied\n mountColdPath(app, sqlite, PULL_SECRET, busAuth); // Ada 10 Sep 2026 (#220): GET /coldpath, POST /coldpath/{flag,run,forget}\n\n app.post(\"/snapshot\", async (c: any) => {\n await ready;\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const data = stripSecrets(body.data ?? body);\n delete data.secret;\n const txt = JSON.stringify(data);\n if (txt.indexOf(PULL_SECRET) >= 0) return c.json({ ok: false, error: \"the payload contains the write secret — refused\" }, 400);\n if (txt.length > 900_000) return c.json({ ok: false, error: \"snapshot too large\" }, 413);\n const stamp = String(data.generatedAt ?? STAMP());\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO snapshot (key, data, stamp, ts) VALUES ('dashboard', ?, ?, datetime('now'))\", args: [txt, stamp] });\n const back = await sqlite.execute(\"SELECT length(data) AS n, stamp FROM snapshot WHERE key='dashboard'\");\n return c.json({ ok: true, bytes: Number((back.rows[0] as any)?.n ?? 0), stamp: (back.rows[0] as any)?.stamp });\n });\n app.get(\"/snapshot\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const s = await getSnapshot(sqlite);\n return c.json(s ? { ok: true, stamp: s.stamp, age: ageOf(s.stamp), data: s.data } : { ok: false, error: \"no snapshot yet\" });\n });\n\n // #134 (5 Sep 2026) — undo for an accidentally closed task, as its own verb so callers cannot get it\n // half right: status back to open AND done_at forgotten, or the console keeps counting it as closed.\n // Lives here because bot-webhook.ts sits at Val Town's 80k limit.\n app.post(\"/tasks/:id/reopen\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const id = Number(c.req.param(\"id\"));\n const row = await sqlite.execute({ sql: \"SELECT id, status FROM tasks WHERE id=?\", args: [id] });\n if (!row.rows.length) return c.json({ ok: false, error: `no task ${id}` }, 404);\n await sqlite.execute({ sql: \"UPDATE tasks SET status='open', done_at=NULL WHERE id=?\", args: [id] });\n const back = await sqlite.execute({ sql: \"SELECT * FROM tasks WHERE id=?\", args: [id] });\n return c.json({ ok: true, task: back.rows[0] ?? null });\n });\n\n // the battle picker on the page — same table the Telegram keyboard writes\n app.post(\"/dayselection\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n const date = String(b.date ?? new Date().toISOString().slice(0, 10)).slice(0, 10);\n const picks = Array.isArray(b.picks) ? b.picks : [];\n let n = 0;\n for (const p of picks) {\n const id = Number(p.task_id), state = String(p.state ?? \"none\");\n if (!id || ![\"none\", \"today\", \"done\"].includes(state)) continue;\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan (date, task_id, state) VALUES (?,?,?)\", args: [date, id, state] });\n n++;\n }\n const r = await sqlite.execute({ sql: \"SELECT dp.task_id, dp.state, t.title FROM day_plan dp LEFT JOIN tasks t ON t.id=dp.task_id WHERE dp.date=? AND dp.state!='none'\", args: [date] });\n return c.json({ ok: true, date, written: n, picks: r.rows });\n });\n\n // forge from the page: \"desktop\" = the free path (journal + AWAITING mark, the forger picks it up),\n // \"cloud\" = the ⚡ brain now. Both send the same Telegram messages the keyboard would.\n app.post(\"/forge\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n const date = String(b.date ?? new Date().toISOString().slice(0, 10)).slice(0, 10);\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" }, 400);\n if (b.mode === \"cloud\") await deps.forgePlanBrain(chatId, date); else await deps.forgePlan(chatId, date);\n const plan = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date=?\", args: [date] });\n return c.json({ ok: true, date, mode: b.mode === \"cloud\" ? \"cloud\" : \"desktop\", plan: plan.rows[0]?.plan ?? null });\n });\n\n // ---- presence + the gate (quest #112) ----\n app.post(\"/presence\", async (c: any) => {\n await ready;\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const session = String(body.session ?? \"gatekeeper\").slice(0, 60);\n const minutes = Math.min(Math.max(Number(body.minutes ?? 5), 1), 120);\n if (body.off) { await sqlite.execute({ sql: \"DELETE FROM presence WHERE session=?\", args: [session] }); return c.json({ ok: true, session, off: true }); }\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO presence (session, until, note, ts) VALUES (?, datetime('now', ?), ?, datetime('now'))\",\n args: [session, `+${minutes} minutes`, String(body.note ?? \"\").slice(0, 120)] });\n const q = await sqlite.execute(\"SELECT COUNT(*) AS n FROM gate_queue WHERE status='queued'\");\n return c.json({ ok: true, session, minutes, waiting: Number((q.rows[0] as any)?.n ?? 0) });\n });\n app.get(\"/presence\", async (c: any) => { await ready; if (!auth(c)) return c.text(\"forbidden\", 401); return c.json({ ok: true, awake: await whoIsAwake(sqlite) }); });\n\n app.get(\"/gate/pull\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const who = String(c.req.query(\"session\") ?? \"gatekeeper\").slice(0, 60);\n const r = await sqlite.execute(\"SELECT * FROM gate_queue WHERE status='queued' OR (status='claimed' AND claimed_at < datetime('now','-10 minutes')) ORDER BY id LIMIT 10\");\n for (const row of r.rows as any[]) {\n await sqlite.execute({ sql: \"UPDATE gate_queue SET status='claimed', claimed_by=?, claimed_at=datetime('now') WHERE id=?\", args: [who, row.id] });\n }\n return c.json({ ok: true, messages: r.rows });\n });\n app.post(\"/gate/answer\", async (c: any) => {\n await ready;\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const row = await sqlite.execute({ sql: \"SELECT * FROM gate_queue WHERE id=?\", args: [Number(body.id)] });\n if (!row.rows.length) return c.json({ ok: false, error: `no message ${body.id}` }, 404);\n const chatId = Number((row.rows[0] as any).chat_id);\n const text = String(body.text ?? \"\").slice(0, 3900);\n if (!text.trim()) return c.json({ ok: false, error: \"text required\" }, 400);\n const res = await deps.send(chatId, text, \"gate\");\n if (res.ok) await sqlite.execute({ sql: \"UPDATE gate_queue SET status='answered', answered_at=datetime('now'), answer_chars=? WHERE id=?\", args: [text.length, Number(body.id)] });\n return c.json({ ok: res.ok, message_id: res.message_id, error: res.error }, res.ok ? 200 : 502);\n });\n app.post(\"/gate/release\", async (c: any) => {\n await ready;\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n await sqlite.execute({ sql: \"UPDATE gate_queue SET status='queued', claimed_by=NULL, claimed_at=NULL WHERE id=? AND status='claimed'\", args: [Number(body.id)] });\n return c.json({ ok: true });\n });\n app.get(\"/gate/status\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT status, COUNT(*) AS n FROM gate_queue GROUP BY status\");\n const recent = await sqlite.execute(\"SELECT id, ts, status, claimed_by, answered_at, substr(text,1,80) AS text FROM gate_queue ORDER BY id DESC LIMIT 20\");\n return c.json({ ok: true, counts: r.rows, recent: recent.rows, awake: await whoIsAwake(sqlite) });\n });\n\n // --- the night watch's record, read back by the desktop (task #179) ----------\n // telegram/night-watch.ts captures the Wise business balance on an interval so a\n // sleeping PC does not put a hole in the money history. These two routes are how\n // update_dashboard_data.py collects what was captured while the machine was off.\n // Read-only: the val captures, the desktop reconciles. Nothing here interprets.\n app.get(\"/nightwatch/balances\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const since = String(c.req.query(\"since\") ?? \"\").slice(0, 10);\n const r = since\n ? await sqlite.execute({\n sql: \"SELECT day, business_eur, currency, source, ts FROM balance_history WHERE day >= ? ORDER BY day\",\n args: [since],\n })\n : await sqlite.execute(\"SELECT day, business_eur, currency, source, ts FROM balance_history ORDER BY day\");\n return c.json({ ok: true, days: r.rows });\n });\n\n // Force one pass of the watch. Same code path the interval runs, and idempotent,\n // so this can never disagree with the scheduled run about the same day.\n app.post(\"/nightwatch/run\", async (c: any) => {\n await ready;\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { captureAll } = await import(\"./night-watch.ts\");\n return c.json({ ok: true, result: await captureAll() });\n });\n\n // The receipts. A gap here is the evidence that the watch itself was down —\n // which is the whole reason it writes a heartbeat even when there is nothing to do.\n app.get(\"/nightwatch/runs\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT ts, job, status, detail FROM nightwatch_runs ORDER BY ts DESC LIMIT 50\");\n return c.json({ ok: true, runs: r.rows });\n });\n\n // register the command menu with Telegram (the deploy script calls this once after each deploy)\n app.post(\"/bot/menu\", async (c: any) => {\n await ready;\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const r = await deps.tg(\"setMyCommands\", { commands: MENU });\n return c.json({ ok: !!r, commands: MENU.length });\n });\n\n return {\n ready,\n handleCommand: async (chatId: number, text: string): Promise => {\n await ready;\n // /coldpath takes arguments, which the match below rejects, so it is asked first (#220).\n if (await coldPathCommand(sqlite, chatId, text, deps.send)) return true;\n const m = String(text ?? \"\").trim().match(/^\\/(money|fleet|quests|today|road|news|shelf|deeds|journal|who|help|start)(?:@\\w+)?\\s*$/i);\n if (!m) return false;\n const out = await renderCommand(sqlite, m[1].toLowerCase());\n if (out == null) return false;\n await deps.send(chatId, out.slice(0, 3900), \"command\");\n return true;\n },\n gateRoute: async (chatId: number, text: string, isChatIntent: boolean) => { await ready; return gateRoute(sqlite, chatId, text, isChatIntent); },\n isAwake: async () => { await ready; return (await whoIsAwake(sqlite)).length > 0; },\n snapshotContext: async () => { await ready; return snapshotContext(sqlite); },\n applyBrainActions: async (j: any, chatId: number) => { await ready; return applyBrainActions(sqlite, j, chatId); },\n commandMenu: MENU,\n };\n}\nconst MENU = [\n { command: \"money\", description: \"The pot, Wise, this month, standing orders\" },\n { command: \"fleet\", description: \"Agents: who reported, who is silent, the bus\" },\n { command: \"tasks\", description: \"Open tasks by urgency, with #ids\" },\n { command: \"today\", description: \"Calendar + today's plan\" },\n { command: \"road\", description: \"The next 14 days\" },\n { command: \"news\", description: \"Today's news edition\" },\n { command: \"shelf\", description: \"Today's reading shelves\" },\n { command: \"deeds\", description: \"Closed this week\" },\n { command: \"journal\", description: \"The last 10 journal lines\" },\n { command: \"who\", description: \"Is a session awake?\" },\n { command: \"ask\", description: \"Wake the cloud brain ⚡ (credits)\" },\n { command: \"forge\", description: \"Forge today's plan in the cloud ⚡\" },\n { command: \"pro\", description: \"2 h of deeper counsel (Sonnet)\" },\n { command: \"eco\", description: \"Back to economy mode\" },\n { command: \"coldpath\", description: \"The cold path: what did not run, and the two switches\" },\n { command: \"help\", description: \"What the assistant can do\" },\n];\n",[],[208],"57a7a039-ac58-4c78-859b-e2d3b5ca8516","night-watch.ts","7ca044ae-a971-11f1-965c-1607ee4eb77e",73,["D",1788644148257],"// NIGHT WATCH — the capture that does not sleep (task #179, Claude OS phase 5)\n//\n// WHY THIS EXISTS\n// Every agent in the fleet runs on Alexandr's PC. When the PC sleeps, twelve agents\n// miss their slot, and the ones that only ever *fetched a number* miss it for no\n// reason at all: they needed an HTTP call and some arithmetic, not a model.\n// A sleeping PC should cost a day of judgement. It must never cost a day of capture.\n//\n// So the model-free half of the work moves here, into the val, where it runs 24/7:\n// * the Wise business balance — Bruno's one job that is pure HTTP + arithmetic;\n// * a daily heartbeat row, so a gap in the record is visible as a gap.\n//\n// WHAT DOES *NOT* BELONG HERE — read this before adding anything\n// Nothing that needs a model, and nothing that reads personal bank data. Bruno's\n// charter draws the line and it is not negotiable: statements, line items,\n// counterparties and IBANs never leave scripts/private/, and nothing financial is\n// ever sent to a cloud LLM. What runs here is the BUSINESS balance only (Wise,\n// COTTONPASSION LDA) — a single aggregate figure the dashboard already shows — and\n// it is stored, never interpreted. The moment a change here would need judgement,\n// it belongs on the desktop instead.\n//\n// It is also silent by design. Coin pings were retired on 11 Aug 2026 (\"the bank app\n// already notifies him\"); this val posts nothing to Telegram, ever. It writes rows.\n//\n// DEPLOY: type \"interval\" in scripts/deploy_telegram_bot.py's FILES list.\n// Val Town crons run in UTC.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst WISE_TOKEN = Deno.env.get(\"WISE_TOKEN\");\nconst WISE_PROFILE = Deno.env.get(\"WISE_PROFILE\") ?? \"77905384\"; // COTTONPASSION LDA\n\nasync function init() {\n // One row per calendar day. The PRIMARY KEY on day is the idempotency guard\n // (Law 6): the interval may fire many times a day, or be retried after a\n // failure, and the record must not grow a second opinion about a Tuesday.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS balance_history (\n day TEXT PRIMARY KEY, business_eur REAL, currency TEXT, source TEXT, ts TEXT)`);\n // The receipt. The Constitution requires a line for EVERY run, including a\n // failed or refused one — silence and success must not look the same. The PC's\n // $W/ledger/runs.jsonl is unreachable from here, so this table IS the receipt,\n // and GET /nightwatch/runs is how the desktop reads it back.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS nightwatch_runs (\n ts TEXT PRIMARY KEY, job TEXT, status TEXT, detail TEXT)`);\n}\n\nasync function receipt(job: string, status: string, detail: string) {\n try {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO nightwatch_runs (ts, job, status, detail) VALUES (?, ?, ?, ?)\",\n args: [new Date().toISOString(), job, status, String(detail).slice(0, 300)],\n });\n } catch (_) { /* a receipt that fails must not take the run down with it */ }\n}\n\n/** The Wise business balance, pulled exactly the way the desktop pulls it.\n *\n * The arithmetic deliberately mirrors get_wise_data() in\n * scripts/update_dashboard_data.py: the EUR entry of /v4/.../balances?types=STANDARD,\n * amount.value, no conversion, no summing across currencies. Two places computing\n * \"the business balance\" two ways is how a dashboard starts disagreeing with itself\n * — audit defects 19/20 were exactly that, and this file is not going to add a third\n * definition. If that endpoint or that field changes, change BOTH or neither.\n */\nasync function pullWiseBalance(day: string) {\n if (!WISE_TOKEN) {\n // Not an error: the token is only in the val env when Alexandr has opted in.\n await receipt(\"wise-balance\", \"skipped\", \"WISE_TOKEN not set in the val environment\");\n return { ok: false, reason: \"no-token\" };\n }\n\n const existing = await sqlite.execute({\n sql: \"SELECT business_eur FROM balance_history WHERE day = ?\",\n args: [day],\n });\n if ((existing.rows ?? []).length) {\n await receipt(\"wise-balance\", \"already-have\", `${day} already recorded`);\n return { ok: true, reason: \"idempotent\" };\n }\n\n try {\n const r = await fetch(\n `https://api.wise.com/v4/profiles/${WISE_PROFILE}/balances?types=STANDARD`,\n { headers: { Authorization: `Bearer ${WISE_TOKEN}` } },\n );\n if (!r.ok) {\n await receipt(\"wise-balance\", \"failed\", `Wise HTTP ${r.status}`);\n return { ok: false, reason: `http-${r.status}` };\n }\n const balances = await r.json();\n const eur = (Array.isArray(balances) ? balances : []).find((b: any) => b?.currency === \"EUR\");\n const value = eur?.amount?.value;\n\n // A missing figure is recorded as missing. Writing 0.0 would be inventing a\n // claim about his money, and a zero balance is a thing that can actually happen\n // — so the two must never be spelled the same way.\n if (typeof value !== \"number\") {\n await receipt(\"wise-balance\", \"failed\", \"no EUR balance in the Wise response\");\n return { ok: false, reason: \"no-eur-balance\" };\n }\n\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO balance_history (day, business_eur, currency, source, ts)\n VALUES (?, ?, 'EUR', 'wise-v4-standard', ?)`,\n args: [day, value, new Date().toISOString()],\n });\n await receipt(\"wise-balance\", \"ok\", `${day} recorded`);\n return { ok: true, day };\n } catch (e) {\n await receipt(\"wise-balance\", \"failed\", String(e));\n return { ok: false, reason: \"exception\" };\n }\n}\n\n/** One pass of the watch. Exported so it can be proved.\n *\n * Val Town's REST API exposes no route for reading or setting an interval's cron\n * expression, so the schedule is set once by hand in the val's UI. That left the\n * capture unverifiable from a session — and an unverified backup is a guess\n * (Law 5). palantir-routes.ts mounts POST /nightwatch/run on this function, which\n * makes the same code path runnable on demand: the proof that the watch works is\n * then a real Wise figure in the table, not a deploy that returned 200.\n *\n * It is idempotent, so a manual run and a scheduled run on the same day cannot\n * produce two answers about that day.\n */\nexport async function captureAll() {\n await init();\n const day = new Date().toISOString().slice(0, 10);\n const wise = await pullWiseBalance(day);\n // The heartbeat is what makes a hole in the record legible. Without it, \"the val\n // was down\" and \"there was nothing to record\" leave the same trace: nothing.\n await receipt(\"heartbeat\", \"ok\", `day=${day} wise=${wise.ok ? \"ok\" : wise.reason}`);\n return { day, wise };\n}\n\nexport default async function () {\n return await captureAll();\n}\n",[],[217],"4a777bf9-dcc0-4cbf-86ad-462958c5d0c2","news-routes.ts","607433b4-a988-11f1-a173-1607ee4eb77e",94,["D",1789173217642],"// News feedback + reaction endpoints, split out of bot-webhook.ts (6 Sep 2026) —\n// that file crossed Val Town's 80,000-char single-file limit again (same reason\n// banking.ts and vault-routes.ts were split out on 31 Aug). No behavior changed:\n// same routes, same tables, same tokens. Mounted by bot-webhook.ts: mountNews(app, sqlite, PULL_SECRET, tg).\nimport { mountNewsFetch } from \"./news-fetch.ts\";\n\nexport function mountNews(app: any, sqlite: any, PULL_SECRET: string, tg: (method: string, params: any) => Promise) {\n mountNewsFetch(app, sqlite, PULL_SECRET);\n\n// NEWS FEEDBACK — the Scribe registers items, Alexandr taps verdicts, HQ/Scribe learn from them\napp.post(\"/news/register\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { items } = await c.req.json(); // [{key,title,source,topic}]\n for (const i of items ?? []) {\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO news_items (key,title,source,topic) VALUES (?,?,?,?)\",\n args: [i.key, i.title ?? \"\", i.source ?? \"\", i.topic ?? \"\"] });\n }\n return c.json({ ok: true, n: (items ?? []).length });\n});\napp.get(\"/news/feedback\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const all = c.req.query(\"all\") === \"1\";\n const r = await sqlite.execute(all\n ? \"SELECT * FROM news_feedback ORDER BY id DESC LIMIT 200\"\n : \"SELECT * FROM news_feedback WHERE applied = 0 ORDER BY id\");\n return c.json(r.rows);\n});\napp.post(\"/news/feedback/applied\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) await sqlite.execute({ sql: \"UPDATE news_feedback SET applied=1 WHERE id=?\", args: [Number(id)] });\n return c.json({ ok: true });\n});\n// Send one digest item with feedback buttons (called by the Scribe)\napp.post(\"/news/send\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { text, key } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" });\n await tg(\"sendMessage\", { chat_id: chatId, text, parse_mode: \"Markdown\",\n disable_web_page_preview: true,\n reply_markup: key ? { inline_keyboard: [[\n { text: \"👍\", callback_data: `n:up:${key}` },\n { text: \"👎\", callback_data: `n:down:${key}` },\n { text: \"⭐\", callback_data: `n:star:${key}` },\n { text: \"🚫\", callback_data: `n:block:${key}` },\n ]] } : undefined });\n return c.json({ ok: true });\n});\n\n// IN-ARTICLE REACTIONS — the Morning Edition (telegra.ph) ends every story with 👍👎⭐🚫 links.\n// The article is public, so links carry an HMAC token derived from PULL_SECRET instead of any\n// secret itself. Recording happens via a JS POST from the confirmation page, never on GET —\n// crawlers and link-prefetchers that fetch a URL must not be able to write feedback\n// (robots.txt below is the first fence, no-JS-no-write is the second, the HMAC is the third).\n// Tokens never expire by design: Alexandr reads old editions days later and reactions still count.\nasync function newsToken(key: string, v: string): Promise {\n const enc = new TextEncoder();\n const k = await crypto.subtle.importKey(\"raw\", enc.encode(PULL_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\", k, enc.encode(`${key}:${v}`));\n return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\").slice(0, 20);\n}\nconst V_EMOJI: Record = { up: \"👍\", down: \"👎\", star: \"⭐\", block: \"🚫\" };\nconst V_LABEL: Record = {\n up: \"More like this — noted\", down: \"Less of this — noted\",\n star: \"Marked important\", block: \"Never again — banished\",\n};\nconst esc = (s: string) => s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n\nfunction reactShell(inner: string): string {\n return `\n\nPalantír

${inner}

`;\n}\n\napp.get(\"/robots.txt\", (c: any) => c.text(\"User-agent: *\\nDisallow: /\\n\"));\n\napp.get(\"/news/react\", async (c: any) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) {\n return c.html(reactShell(`

🌫

The stone does not know this sign

Stale or invalid reaction link.

`), 403);\n }\n const it = await sqlite.execute({ sql: \"SELECT title FROM news_items WHERE key=?\", args: [key] });\n const title = esc((it.rows[0]?.title as string) || key);\n const others = (await Promise.all(Object.keys(V_EMOJI).filter((x) => x !== v).map(async (x) =>\n `${V_EMOJI[x]}`,\n ))).join(\"\");\n return c.html(reactShell(`

${V_EMOJI[v]}

Recording…

“${title}”

${others}

\nChanged your mind? Tap another sign above.
Otherwise just close this page and return to the article.\n\n`));\n});\n\napp.post(\"/news/react\", async (c: any) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) return c.json({ ok: false }, 403);\n // Reloading the page re-POSTs; don't let one opinion count twice while unapplied.\n const dup = await sqlite.execute({\n sql: \"SELECT id FROM news_feedback WHERE item_key=? AND verdict=? AND applied=0\", args: [key, v] });\n if (dup.rows.length) return c.json({ ok: true, dup: true });\n const it = await sqlite.execute({ sql: \"SELECT * FROM news_items WHERE key=?\", args: [key] });\n const row: any = it.rows[0] ?? {};\n await sqlite.execute({\n sql: \"INSERT INTO news_feedback (item_key,title,source,topic,verdict) VALUES (?,?,?,?,?)\",\n args: [key, row.title ?? \"\", row.source ?? \"\", row.topic ?? \"\", v] });\n return c.json({ ok: true });\n});\n\n// MORNING EDITION (mini-app) — the sender posts the day's edition, Telegram opens\n// /edition/:date as a web app: he reads and reacts IN PLACE (no page switch — the\n// telegra.ph round-trip through a confirmation page lasted exactly one morning, 11 Aug).\napp.post(\"/news/edition\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n if (!b.date || !Array.isArray(b.blocks)) return c.json({ ok: false, error: \"date and blocks required\" });\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO editions (date,title,data) VALUES (?,?,?)\",\n args: [b.date, b.title ?? \"Morning Edition\", JSON.stringify(b)] });\n await sqlite.execute(\"DELETE FROM editions WHERE date < date('now','-120 days')\");\n const n = (b.blocks as any[]).reduce((a, x) => a + (x.items?.length ?? 0), 0);\n return c.json({ ok: true, stories: n });\n});\n\n// One message + one button that opens the edition as a mini-app.\napp.post(\"/news/announce\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { date, text } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" });\n const base = new URL(c.req.url).origin;\n const r = await tg(\"sendMessage\", { chat_id: chatId, text, parse_mode: \"Markdown\",\n reply_markup: { inline_keyboard: [[{ text: \"📖 Open the Morning Edition\",\n web_app: { url: `${base}/edition/${date}` } }]] } });\n return c.json({ ok: !!r, message_id: r?.message_id });\n});\n\napp.get(\"/edition/:date\", async (c: any) => {\n const date = c.req.param(\"date\");\n const r = await sqlite.execute({ sql: \"SELECT title, data FROM editions WHERE date=?\", args: [date] });\n if (!r.rows.length) {\n return c.html(`\n\n

🌫 No edition for ${esc(date)}.

`, 404);\n }\n const ed = JSON.parse(r.rows[0].data as string);\n const keys: string[] = ed.blocks.flatMap((b: any) => (b.items ?? []).map((i: any) => i.key));\n const cur: Record = {};\n if (keys.length) {\n const fb = await sqlite.execute({\n sql: `SELECT item_key, verdict FROM news_feedback WHERE item_key IN (${keys.map(() => \"?\").join(\",\")}) ORDER BY id`,\n args: keys });\n for (const row of fb.rows as any[]) cur[row.item_key as string] = row.verdict as string;\n }\n let body = \"\";\n for (const b of ed.blocks) {\n body += `

${esc(b.title)}

\\n`;\n for (const it of b.items ?? []) {\n const btns = (await Promise.all([\"up\", \"down\", \"star\", \"block\"].map(async (v) =>\n ``,\n ))).join(\"\");\n body += `

${esc(it.title)}

\\n`\n + (it.paras ?? []).map((p: string) => `

${p}

`).join(\"\\n\")\n + `\\n

${esc(it.source)} ↗

${btns}

\\n`;\n }\n }\n const page = `\n\n${esc(ed.title)}\n\n

${esc(ed.title)}

\n${ed.stats ? `

${esc(ed.stats)}

` : \"\"}\n${ed.learned ? `

${esc(ed.learned)}

` : \"\"}\n${body}\n

👍 more like this · 👎 less · ⭐ important · 🚫 never again — every tap teaches the Palantír, even days later. Tap again to change your mind.

\n`;\n return c.html(page);\n});\n\n}\n",[],[225],"890002d1-9851-48b4-96db-115344042c2e","news-fetch.ts","99de6ef4-ae41-11f1-ab49-1607ee4eb77e",99,["D",1789173917809],2,"/**\n * NEWS FETCH — the val-side news fetcher, piece 2 of the cold path (task #220, 12 Sep 2026).\n *\n * Nina the News Editor runs on Alexandr's PC at 06:45 and curates what scripts/news_fetch.py fetched.\n * When the PC is off nothing is fetched, and the morning has no edition at all. Fetching is plain HTTP —\n * RSS feeds and public Telegram channel previews — and belongs in the val, which is always on; curating\n * is judgement and stays on the desktop. This file fetches on an hourly interval, stores what it finds,\n * and serves it back as rows the desktop can read exactly as if news_fetch.py had fetched them itself.\n * A morning with the PC off then costs a LATE edition instead of a MISSING one.\n *\n * It is a port of news_fetch.py's get / clean / parse_rss / parse_telegram, behaviour for behaviour,\n * because the two must produce the SAME item from the same feed: the desktop dedupes on\n * url + \"|\" + title[:80] (news_seen.json), and an item whose title differs by one character on the val\n * publishes twice. The gotchas that follow from that:\n * - Python slices strings by code point; JS .slice() by UTF-16 code unit. An emoji is one code point\n * and two code units, and 42 of the 59 sources are Telegram channels whose posts open with 🇷🇺 ⚡️ 🔥.\n * Every truncation here goes through cut(), which slices by code point, and the 40-character floor\n * on a Telegram post counts code points too (Python's len()).\n * - Python reads 200000 BYTES and then decodes; the cap here is applied to the byte stream before\n * TextDecoder, never to the decoded string.\n * - Python's html.unescape knows 2231 named entities; Deno has none. unescape() below handles every\n * numeric form (with the HTML5 remap of €–Ÿ to their cp1252 meanings) and a table of the\n * names that occur in feeds. The residual gap is a rare named entity left as written, in the title\n * and therefore in the key — see the comment on unescape().\n *\n * What it must never do: call a model; send a Telegram message; filter by age (MAX_AGE_DAYS stays in\n * news_fetch.py so both modes run ONE implementation — the `iso` column is advisory and never served);\n * touch feedback, preferences, selection or scoring; or consume anything: a pull is a pure window read,\n * nothing is marked, moved or deleted, and news_seen.json on the desktop stays the single authority on\n * what has been shown.\n *\n * The flag is settings key `flag.news_fetch_val`, \"on\" the only truthy value. It governs the DESKTOP\n * (whether news_fetch.py pulls from here instead of fetching itself); this file only reads and reports\n * it, never writes it, and fetches and stores identically either way — the off-period data is the\n * evidence for switching it on, exactly as reconciler.ts runs its full assessment while off.\n *\n * Schedule: `20 * * * *` UTC, set by hand in the Val Town UI (the API cannot read or set it). Every\n * wake does work (unlike the reconciler, no hour is skipped): a SLICE of 16 sources, least recently\n * tried first, so 59 sources rotate in under four hours; and at 05 and 06 Europe/Amsterdam a FULL\n * sweep, so fresh items are in hand just before Nina's 06:45 — 06:00 local is 04:00 UTC in summer and\n * 05:00 UTC in winter, which is why the gate is local. Two full hours so a deadline-truncated 05:20\n * sweep gets its second chance at 06:20. The file stays correct with the cron unset — deployed but\n * never firing — because the routes need no pass to have run and POST /news/fetch/run proves the code path.\n *\n * Idempotency (Law 6): one INSERT OR IGNORE on news_fetch_log's primary key, claimed before any HTTP —\n * pass:: for the interval, run: for a hand run (so it can never take the\n * hour's key from the interval), day: for the day's journal line. Items are INSERT OR IGNORE\n * on their key. A pass that throws once claimed writes a DIED receipt naming the step it died at, so it\n * is never indistinguishable from a pass that had nothing to say.\n *\n * Journal (Law 7): ONE line per local day, from the hour-6 pass — 24 lines a day would be noise; the\n * per-pass record is news_fetch_log. Source `news-fetch-val`: reconciler.ts's silence matcher looks for\n * 'nina-news-editor%' and 'news-scribe%', and this matches neither, so these lines can never be read as\n * Nina having run.\n *\n * Deployed twice from one file, like reconciler.ts: as its own interval val (the default export; its\n * import graph is this file and std/sqlite, nothing else), and imported statically by the HTTP val for\n * the routes: mountNewsFetch(app, sqlite, PULL_SECRET). Every route is ?secret=, none is flag-gated\n * (all must be exercisable while off). Stamps in responses are SQLite's 'YYYY-MM-DD HH:MM:SS' UTC\n * unless the key says otherwise (`now` is ISO).\n * GET /news/fetch/status → flag, sources, last pass, what is held, failing sources\n * GET /news/fetch/items?hours=120&limit=500&before=&debug=0\n * → rows of EXACTLY {source, topic, title, url, summary, when}, newest first: a drop-in for\n * news_raw.json[\"items\"] before the desktop's iso_of() runs. debug=1 adds _key and _first_seen.\n * POST /news/fetch/sources {sources:[…news_sources.json entries…], stamp?}\n * → upsert by name; a name absent from the push is retired (present=0, enabled=0), never deleted;\n * fewer than 5 entries is refused (400) so a truncated push can never blind the cold path.\n * POST /news/fetch/run {dry?, scope?:\"slice\"|\"full\", only?:[names], at?} → one pass, the interval's code path\n * POST /news/fetch/prune {before:\"YYYY-MM-DD\"} | {days:N}, force? → deletes held items, journals it\n * The sources are pushed by the desktop, never built in: no push means a pass tries nothing and says so.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TZ = \"Europe/Amsterdam\";\nconst SOURCE = \"news-fetch-val\";\nconst FLAG_KEY = \"flag.news_fetch_val\";\nexport const CRON = \"20 * * * *\"; // UTC, hourly at :20 — set by hand in the Val Town UI; reported by /news/fetch/status\n\nexport const SLICE_N = 16; // sources per hourly slice: 59 rotate in under four hours\nexport const CONCURRENCY = 6; // sources in flight at once\nexport const SOURCE_TIMEOUT_MS = 12_000; // one source's whole GET, connect to last byte\nexport const DEADLINE_MS = 45_000; // one pass's FETCH budget: a batch that cannot fetch inside it is not started.\n // The per-source store, the log row and hour 6's day line ride on top of it.\nexport const BODY_LIMIT = 200_000; // bytes read per source, before decoding — news_fetch.py's r.read(200000)\n// The desktop pulls GET /news/fetch/items?hours=120 (scripts/news_fetch.py) — five days. RETENTION_DAYS must\n// stay >= that window, or a PC that was off for a week comes back to find its window already pruned.\nexport const RETENTION_DAYS = 14;\nconst DESKTOP_WINDOW_H = 120;\nconst LOG_RETENTION_DAYS = 90; // news_fetch_log rows: ~24 a day, kept a quarter\n\n// news_fetch.py:12 — the same UA string, so a feed that answers Chrome answers both fetchers the same way.\nconst UA = { \"User-Agent\": \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120 Safari/537.36\" };\n\ntype Scope = \"slice\" | \"full\";\ntype Item = { source: string; topic: string; title: string; url: string; summary: string; when: string };\ntype Src = { name: string; type: string; url: string; handle: string; topic: string; lim: number };\ntype SourceResult = { name: string; type: string; n: number; stored: number; ms: number; error: string };\n\nexport async function init(db: any = sqlite) {\n // An interval val may run before bot-webhook.ts has created anything. Byte-identical to reconciler.ts's\n // (and bot-webhook's) declaration; whichever runs first wins. The journal table is bot-webhook's and is\n // assumed to exist, as reconciler.ts assumes it.\n await db.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY, value TEXT)`);\n // What was fetched. key is the desktop's dedupe key, url + \"|\" + cut(title, 80) — private to the val and\n // never served, so the desktop keeps computing its own from the six fields it is given. `when` is a\n // SQLite keyword, hence when_text. iso is a date parse of when_text, advisory and never served:\n // staleness is the desktop's call (MAX_AGE_DAYS in news_fetch.py), and there must be one implementation of it.\n await db.execute(`CREATE TABLE IF NOT EXISTS news_fetched (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n key TEXT UNIQUE NOT NULL,\n source TEXT NOT NULL, topic TEXT NOT NULL DEFAULT '',\n title TEXT NOT NULL, url TEXT NOT NULL DEFAULT '', summary TEXT NOT NULL DEFAULT '',\n when_text TEXT NOT NULL DEFAULT '',\n iso TEXT NOT NULL DEFAULT '',\n first_seen TEXT NOT NULL DEFAULT (datetime('now')),\n pass_key TEXT)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS news_fetched_seen ON news_fetched(first_seen, id)`);\n // The roster as the desktop last pushed it (scripts/news_sources.json entries, verbatim). `limit` is a\n // SQL keyword, hence lim. present=0 is a name the last push no longer carried: retired, never deleted,\n // so its history and last_error survive a mistaken push. last_try is stamped on an actual attempt only —\n // the queue is ORDER BY last_try ASC NULLS FIRST, so whatever a truncated pass did not reach is tried first next hour.\n await db.execute(`CREATE TABLE IF NOT EXISTS news_fetch_sources (\n name TEXT PRIMARY KEY, type TEXT NOT NULL, url TEXT NOT NULL DEFAULT '',\n handle TEXT NOT NULL DEFAULT '', topic TEXT NOT NULL DEFAULT '',\n lim INTEGER NOT NULL DEFAULT 8,\n enabled INTEGER NOT NULL DEFAULT 1, present INTEGER NOT NULL DEFAULT 1,\n pushed_at TEXT, last_try TEXT, last_ok TEXT,\n last_error TEXT NOT NULL DEFAULT '', last_n INTEGER NOT NULL DEFAULT 0,\n stored_total INTEGER NOT NULL DEFAULT 0)`);\n // The guard and the per-pass record in one row. key: 'pass::' (the interval),\n // 'run:' (a hand run), 'day:' (the day's journal line); 'test:…' is reserved\n // for a self-test and excluded from every summary. The claim is INSERT OR IGNORE on this key and nothing else.\n await db.execute(`CREATE TABLE IF NOT EXISTS news_fetch_log (\n key TEXT PRIMARY KEY,\n ts TEXT NOT NULL DEFAULT (datetime('now')), kind TEXT NOT NULL,\n local TEXT, scope TEXT,\n tried INTEGER DEFAULT 0, ok_n INTEGER DEFAULT 0, fetched INTEGER DEFAULT 0,\n stored INTEGER DEFAULT 0, errors INTEGER DEFAULT 0, ms INTEGER DEFAULT 0,\n truncated INTEGER DEFAULT 0, detail TEXT DEFAULT '')`);\n}\n\n// ---------- time ----------\n// localParts and sqlStamp are copied from reconciler.ts, not imported: an interval val must not load that\n// file's whole module graph on every wake (reconciler.ts:66 sets the precedent). Change it there, change it here.\nconst pad = (n: number) => String(n).padStart(2, \"0\");\n\n// Local wall clock in TZ. `wd` is the weekday as Sun=0: the snapshot's schedule.days are cron numbering\n// (Sun=0) and so is JS getDay(), so the index comes from the civil date and never from Intl's weekday name.\nexport function localParts(d: Date) {\n const f = new Intl.DateTimeFormat(\"en-GB\", { timeZone: TZ, hour12: false,\n year: \"numeric\", month: \"2-digit\", day: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\", weekday: \"short\" });\n const p: any = {};\n for (const x of f.formatToParts(d)) p[x.type] = x.value;\n const y = Number(p.year), m = Number(p.month), day = Number(p.day);\n return { y, m, d: day, date: `${p.year}-${p.month}-${p.day}`, hour: Number(p.hour), minute: Number(p.minute),\n weekday: String(p.weekday), wd: new Date(Date.UTC(y, m - 1, day)).getUTCDay(),\n hhmm: `${p.hour}:${p.minute}` };\n}\n\n// journal.ts is SQLite's datetime('now'): 'YYYY-MM-DD HH:MM:SS', UTC. It is compared as text, so the\n// shape must match exactly — a 'T' in the wrong place is a silent ordering bug.\nexport function sqlStamp(ms: number): string {\n return new Date(ms).toISOString().slice(0, 19).replace(\"T\", \" \");\n}\n\nconst localText = (lp: { weekday: string; date: string; hhmm: string }) => `${lp.weekday} ${lp.date} ${lp.hhmm}`;\n\n// Hours from a SQL stamp to `now`, one decimal; null when there is no stamp or it is not one.\nfunction ageH(stamp: any, now: Date): number | null {\n const s = String(stamp ?? \"\");\n if (!/^\\d{4}-\\d\\d-\\d\\d \\d\\d:\\d\\d:\\d\\d$/.test(s)) return null;\n return Math.round((now.getTime() - Date.parse(s.replace(\" \", \"T\") + \"Z\")) / 360000) / 10;\n}\n\n// ---------- strings: the code-point rule ----------\n// Python s[:n] slices by code point; JS .slice(0, n) by UTF-16 code unit. A title that opens with an emoji\n// would be cut one character short of the desktop's, get a different key, and publish twice. Every\n// truncation in this file goes through cut(), and every length that Python takes with len() through cpLen().\nexport const cut = (s: string, n: number) => [...s].slice(0, n).join(\"\");\nconst cpLen = (s: string) => [...s].length;\n\n// ---------- html.unescape ----------\n// Deno has no html.unescape. Numeric references are handled in full: decimal and hex, the semicolon\n// optional as in Python, €–Ÿ remapped to their cp1252 meanings (HTML5's rule, Python's\n// _invalid_charrefs — sloppy feeds write – for an en dash), surrogates and > U+10FFFF → U+FFFD, and\n// the control ranges HTML5 drops. Names: the table below (~120 of the 2231 Python knows) with the\n// semicolon required, plus the handful browsers accept bare (& < > " © ®).\n// THE RESIDUAL GAP, in two parts. A named entity outside the table (Ž ∴ …) stays as\n// written, in the title and therefore in the key — that item's key would differ from the desktop's.\n// And Python's html.unescape resolves ~106 names WITHOUT the semicolon by longest-prefix match, where\n// this resolves 7; a bare é would decode there and not here. Neither occurs in the 59 sources,\n// and a bare entity is invalid XML besides. If a feed starts writing one, add the name here.\nconst CP1252: Record = {\n 0x00: \"\\uFFFD\", 0x0D: \"\\r\",\n 0x80: \"\\u20AC\", 0x81: \"\\x81\", 0x82: \"\\u201A\", 0x83: \"\\u0192\", 0x84: \"\\u201E\", 0x85: \"\\u2026\", 0x86: \"\\u2020\", 0x87: \"\\u2021\",\n 0x88: \"\\u02C6\", 0x89: \"\\u2030\", 0x8A: \"\\u0160\", 0x8B: \"\\u2039\", 0x8C: \"\\u0152\", 0x8D: \"\\x8D\", 0x8E: \"\\u017D\", 0x8F: \"\\x8F\",\n 0x90: \"\\x90\", 0x91: \"\\u2018\", 0x92: \"\\u2019\", 0x93: \"\\u201C\", 0x94: \"\\u201D\", 0x95: \"\\u2022\", 0x96: \"\\u2013\", 0x97: \"\\u2014\",\n 0x98: \"\\u02DC\", 0x99: \"\\u2122\", 0x9A: \"\\u0161\", 0x9B: \"\\u203A\", 0x9C: \"\\u0153\", 0x9D: \"\\x9D\", 0x9E: \"\\u017E\", 0x9F: \"\\u0178\",\n};\nconst NAMED: Record = {\n amp: \"&\", lt: \"<\", gt: \">\", quot: \"\\\"\", apos: \"'\", nbsp: \"\\u00A0\",\n ndash: \"\\u2013\", mdash: \"\\u2014\", hellip: \"\\u2026\", lsquo: \"\\u2018\", rsquo: \"\\u2019\", sbquo: \"\\u201A\",\n ldquo: \"\\u201C\", rdquo: \"\\u201D\", bdquo: \"\\u201E\", laquo: \"\\u00AB\", raquo: \"\\u00BB\", lsaquo: \"\\u2039\", rsaquo: \"\\u203A\",\n bull: \"\\u2022\", middot: \"\\u00B7\", times: \"\\u00D7\", divide: \"\\u00F7\", minus: \"\\u2212\", plusmn: \"\\u00B1\", deg: \"\\u00B0\",\n euro: \"\\u20AC\", pound: \"\\u00A3\", yen: \"\\u00A5\", cent: \"\\u00A2\", curren: \"\\u00A4\", copy: \"\\u00A9\", reg: \"\\u00AE\", trade: \"\\u2122\",\n sect: \"\\u00A7\", para: \"\\u00B6\", dagger: \"\\u2020\", Dagger: \"\\u2021\", permil: \"\\u2030\", prime: \"\\u2032\", Prime: \"\\u2033\",\n frac12: \"\\u00BD\", frac14: \"\\u00BC\", frac34: \"\\u00BE\", sup1: \"\\u00B9\", sup2: \"\\u00B2\", sup3: \"\\u00B3\", micro: \"\\u00B5\",\n iexcl: \"\\u00A1\", iquest: \"\\u00BF\", ordf: \"\\u00AA\", ordm: \"\\u00BA\", brvbar: \"\\u00A6\", not: \"\\u00AC\", shy: \"\\u00AD\",\n macr: \"\\u00AF\", acute: \"\\u00B4\", cedil: \"\\u00B8\", uml: \"\\u00A8\",\n ensp: \"\\u2002\", emsp: \"\\u2003\", thinsp: \"\\u2009\", zwnj: \"\\u200C\", zwj: \"\\u200D\", lrm: \"\\u200E\", rlm: \"\\u200F\",\n larr: \"\\u2190\", uarr: \"\\u2191\", rarr: \"\\u2192\", darr: \"\\u2193\", harr: \"\\u2194\", infin: \"\\u221E\", ne: \"\\u2260\", le: \"\\u2264\", ge: \"\\u2265\",\n hearts: \"\\u2665\", spades: \"\\u2660\", clubs: \"\\u2663\", diams: \"\\u2666\",\n agrave: \"\\u00E0\", aacute: \"\\u00E1\", acirc: \"\\u00E2\", atilde: \"\\u00E3\", auml: \"\\u00E4\", aring: \"\\u00E5\", aelig: \"\\u00E6\", ccedil: \"\\u00E7\",\n egrave: \"\\u00E8\", eacute: \"\\u00E9\", ecirc: \"\\u00EA\", euml: \"\\u00EB\", igrave: \"\\u00EC\", iacute: \"\\u00ED\", icirc: \"\\u00EE\", iuml: \"\\u00EF\",\n ntilde: \"\\u00F1\", ograve: \"\\u00F2\", oacute: \"\\u00F3\", ocirc: \"\\u00F4\", otilde: \"\\u00F5\", ouml: \"\\u00F6\", oslash: \"\\u00F8\",\n ugrave: \"\\u00F9\", uacute: \"\\u00FA\", ucirc: \"\\u00FB\", uuml: \"\\u00FC\", yacute: \"\\u00FD\", yuml: \"\\u00FF\", szlig: \"\\u00DF\", eth: \"\\u00F0\", thorn: \"\\u00FE\",\n Agrave: \"\\u00C0\", Aacute: \"\\u00C1\", Acirc: \"\\u00C2\", Atilde: \"\\u00C3\", Auml: \"\\u00C4\", Aring: \"\\u00C5\", AElig: \"\\u00C6\", Ccedil: \"\\u00C7\",\n Egrave: \"\\u00C8\", Eacute: \"\\u00C9\", Ecirc: \"\\u00CA\", Euml: \"\\u00CB\", Igrave: \"\\u00CC\", Iacute: \"\\u00CD\", Icirc: \"\\u00CE\", Iuml: \"\\u00CF\",\n Ntilde: \"\\u00D1\", Ograve: \"\\u00D2\", Oacute: \"\\u00D3\", Ocirc: \"\\u00D4\", Otilde: \"\\u00D5\", Ouml: \"\\u00D6\", Oslash: \"\\u00D8\",\n Ugrave: \"\\u00D9\", Uacute: \"\\u00DA\", Ucirc: \"\\u00DB\", Uuml: \"\\u00DC\", Yacute: \"\\u00DD\", ETH: \"\\u00D0\", THORN: \"\\u00DE\",\n OElig: \"\\u0152\", oelig: \"\\u0153\", Scaron: \"\\u0160\", scaron: \"\\u0161\", Yuml: \"\\u0178\", fnof: \"\\u0192\", circ: \"\\u02C6\", tilde: \"\\u02DC\",\n};\nconst BARE = new Set([\"amp\", \"lt\", \"gt\", \"quot\", \"nbsp\", \"copy\", \"reg\"]);\nconst ENTITY_RE = /&(#[0-9]+;?|#[xX][0-9a-fA-F]+;?|[A-Za-z][A-Za-z0-9]{0,31};?)/g;\n\nexport function unescape(s: string): string {\n if (!s.includes(\"&\")) return s;\n return s.replace(ENTITY_RE, (m: string, body: string) => {\n if (body[0] === \"#\") {\n const hex = body[1] === \"x\" || body[1] === \"X\";\n const num = parseInt(body.slice(hex ? 2 : 1).replace(/;$/, \"\"), hex ? 16 : 10);\n if (num in CP1252) return CP1252[num];\n if (!Number.isFinite(num) || num > 0x10FFFF || (num >= 0xD800 && num <= 0xDFFF)) return \"\\uFFFD\";\n if ((num >= 0x1 && num <= 0x8) || num === 0xB || (num >= 0xE && num <= 0x1F) || (num >= 0x7F && num <= 0x9F)\n || (num >= 0xFDD0 && num <= 0xFDEF) || (num & 0xFFFE) === 0xFFFE) return \"\";\n return String.fromCodePoint(num);\n }\n const semi = body.endsWith(\";\");\n const name = semi ? body.slice(0, -1) : body;\n if (semi && name in NAMED) return NAMED[name];\n if (!semi && BARE.has(name)) return NAMED[name];\n return m;\n });\n}\n\n// news_fetch.py:19 — the same four steps in the same order. `\\s` and trim() cover U+00A0 in both languages,\n// so an ends as one space on either side. Note the order: an entity that decodes to a tag\n// (<b>) is decoded AFTER the tag strip and so survives as text — in Python too.\nexport function clean(s: string | null | undefined): string {\n let t = s ?? \"\";\n t = t.replace(//gs, \"$1\"); // unwrap CDATA (Economist et al.)\n t = t.replace(/<[^>]+>/g, \" \");\n t = unescape(t);\n return t.replace(/\\s+/g, \" \").trim();\n}\n\n// ---------- fetching ----------\n// Deno's fetch error names the URL (\"error sending request for url (https://…): dns error\"), which would\n// fill the desktop's 80-character error slot with the URL. The clause is dropped; the source name says what failed.\nconst errText = (e: any) => String(e?.message ?? e).replace(/ for url \$[^)]*\$/, \"\").trim();\n\n// news_fetch.py:14 — one GET with the Chrome UA, at most BODY_LIMIT bytes, decoded as UTF-8. The cap is on\n// BYTES before decoding, as Python's r.read(200000).decode(\"utf-8\",\"ignore\") is; capping the decoded string\n// would let a feed of multibyte text run to a different place. Two known, harmless differences: TextDecoder\n// writes U+FFFD where Python's \"ignore\" drops a bad byte (a real feed is valid UTF-8, so this can only hit\n// the character the cap cuts in half — inside the trailing partial , which both parsers drop for lack\n// of a closing tag); and the timeout is a 12 s total, not urllib's 25 s per read. A non-2xx status is\n// thrown in urllib's words, \"HTTP Error 403: Forbidden\", so a last_error reads the same on both sides.\nexport async function get(url: string, limit = BODY_LIMIT): Promise {\n const ctl = new AbortController();\n const timer = setTimeout(() => ctl.abort(), SOURCE_TIMEOUT_MS);\n try {\n const r = await fetch(url, { headers: UA, signal: ctl.signal, redirect: \"follow\" });\n if (!r.ok) {\n await r.body?.cancel().catch(() => {});\n throw new Error(`HTTP Error ${r.status}: ${r.statusText}`.trim());\n }\n if (!r.body) return \"\";\n const reader = r.body.getReader();\n const chunks: Uint8Array[] = [];\n let n = 0, done = false;\n while (n < limit) {\n const x = await reader.read();\n if (x.done) { done = true; break; }\n chunks.push(x.value); n += x.value.byteLength;\n }\n if (!done) reader.cancel().catch(() => {}); // the rest of the body is not wanted; free the connection\n const buf = new Uint8Array(Math.min(n, limit));\n let off = 0;\n for (const c of chunks) {\n const take = Math.min(c.byteLength, buf.length - off);\n if (take <= 0) break;\n buf.set(c.subarray(0, take), off); off += take;\n }\n return new TextDecoder(\"utf-8\", { fatal: false }).decode(buf);\n } catch (e) {\n if (ctl.signal.aborted) throw new Error(`timed out after ${SOURCE_TIMEOUT_MS} ms`);\n throw e;\n } finally {\n clearTimeout(timer);\n }\n}\n\n// news_fetch.py:26 — regex parsing, not an XML parser, because the desktop does it this way and the two\n// must agree on every title. The block regex takes or ; Atom's is tried\n// before RSS's text; the first title, description and date in the block win, as in Python.\nexport function parseRss(xml: string, source: string, topic: string, limit: number): Item[] {\n const out: Item[] = [];\n const blocks = Array.from(xml.matchAll(/<(?:item|entry)\\b.*?<\\/(?:item|entry)>/gs), (m) => m[0]);\n for (const b of blocks.slice(0, limit)) {\n const t = b.match(/]*>(.*?)<\\/title>/s);\n const l = b.match(/]*href=\"([^\"]+)\"/) ?? b.match(/]*>(.*?)<\\/link>/s);\n const d = b.match(/<(?:description|summary|content)[^>]*>(.*?)<\\/(?:description|summary|content)>/s);\n const p = b.match(/<(?:pubDate|published|updated)[^>]*>(.*?)<\\/(?:pubDate|published|updated)>/s);\n if (!t) continue;\n out.push({ source, topic, title: cut(clean(t[1]), 180),\n url: l ? clean(l[1]) : \"\", summary: d ? cut(clean(d[1]), 400) : \"\",\n when: p ? cut(clean(p[1]), 31) : \"\" });\n }\n return out;\n}\n\n// news_fetch.py:40 — the public preview page t.me/s/. The last `limit` messages on the page,\n// newest first; each paired with a counted from the END of the page's time tags, as\n// Python does (times[-(i+1)]). A post under 40 code points is a sticker, a caption or a forward header,\n// not news — the floor is cpLen, Python's len(). The url is the channel, not the post: Python's choice.\nexport async function parseTelegram(hn: string, source: string, topic: string, limit: number): Promise {\n const url = `https://t.me/s/${hn}`;\n const body = await get(url);\n const msgs = Array.from(body.matchAll(/

]*>(.*?)<\\/div>/gs), (m) => m[1]);\n const times = Array.from(body.matchAll(/ m[1]);\n const out: Item[] = [];\n const tail = msgs.slice(-limit).reverse(); // Python: reversed(msgs[-limit:])\n for (let i = 0; i < tail.length; i++) {\n const txt = clean(tail[i]);\n if (cpLen(txt) < 40) continue;\n out.push({ source, topic, title: cut(txt, 150), url, summary: cut(txt, 600),\n when: i < times.length ? cut(times[times.length - 1 - i], 10) : \"\" });\n }\n return out;\n}\n\nasync function fetchSource(s: Src): Promise {\n if (s.type === \"rss\") return parseRss(await get(s.url), s.name, s.topic, s.lim);\n if (s.type === \"telegram\") return await parseTelegram(s.handle, s.name, s.topic, s.lim);\n throw new Error(`unknown source type \"${s.type}\"`);\n}\n\n// ---------- storing ----------\n// news_fetch.py:86 — the desktop's dedupe key. Private to the val: the desktop keeps computing its own\n// from the six served fields, which is the whole point of serving them unchanged.\nexport const keyOf = (it: Item) => (it.url || \"\") + \"|\" + cut(it.title, 80);\n\n// Advisory only, never served. news_fetch.py's iso_of() takes the date in the pubDate's own zone; Date's\n// is UTC, so the two can differ by a day around midnight — one more reason the desktop keeps its own.\nfunction isoOf(w: string): string {\n const s = (w ?? \"\").trim();\n if (/^\\d{4}-\\d{2}-\\d{2}/.test(s)) return s.slice(0, 10);\n const ms = Date.parse(s);\n return Number.isFinite(ms) ? new Date(ms).toISOString().slice(0, 10) : \"\";\n}\n\n// One INSERT OR IGNORE for the whole source (at most `limit` rows), not one round trip per item:\n// rowsAffected counts only the rows actually inserted, which is exactly `stored`. A key already held keeps\n// its first_seen, so re-seeing an item never moves it inside the desktop's window a second time.\nasync function store(db: any, items: Item[], passKey: string): Promise {\n if (!items.length) return 0;\n const sql = \"INSERT OR IGNORE INTO news_fetched (key, source, topic, title, url, summary, when_text, iso, pass_key) VALUES \"\n + items.map(() => \"(?,?,?,?,?,?,?,?,?)\").join(\",\");\n const args = items.flatMap((it) => [keyOf(it), it.source, it.topic, it.title, it.url, it.summary, it.when, isoOf(it.when), passKey]);\n const r = await db.execute({ sql, args });\n return Number(r.rowsAffected ?? 0);\n}\n\n// ---------- flag, journal ----------\nconst isOn = (v: any) => String(v ?? \"\").trim().toLowerCase() === \"on\";\n\n// Read and reported, never written: the flag is the desktop's switch, and a flag flipped from here would\n// be a flag flipped without the desktop's receipt.\nexport async function readFlag(db: any = sqlite): Promise<\"on\" | \"off\"> {\n const r = await db.execute({ sql: \"SELECT value FROM settings WHERE key = ?\", args: [FLAG_KEY] });\n return r.rows.length && isOn((r.rows[0] as any).value) ? \"on\" : \"off\";\n}\n\nasync function journal(db: any, summary: string, details: string) {\n await db.execute({ sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [SOURCE, cut(summary, 400), cut(details, 3500)] });\n}\n\n// ---------- the pass ----------\n// The queue: enabled and present, least recently tried first, never-tried before all. A negative LIMIT is\n// SQLite for \"no limit\" (the full sweep). `only` names sources by hand; dry, it may reach a disabled or\n// retired source to probe it — storing from one is never allowed, so a real run keeps the enabled/present test.\nasync function selectSources(db: any, scope: Scope, only: string[] | undefined, dry: boolean): Promise {\n const limit = scope === \"full\" ? -1 : SLICE_N;\n let where = \"enabled=1 AND present=1\", args: any[] = [];\n if (only && only.length) {\n where = `name IN (${only.map(() => \"?\").join(\",\")})` + (dry ? \"\" : \" AND enabled=1 AND present=1\");\n args = only;\n }\n const r = await db.execute({ sql: `SELECT name, type, url, handle, topic, lim FROM news_fetch_sources WHERE ${where} ORDER BY last_try ASC NULLS FIRST, name LIMIT ?`,\n args: [...args, limit] });\n return (r.rows as any[]).map((x) => ({ name: String(x.name), type: String(x.type), url: String(x.url ?? \"\"),\n handle: String(x.handle ?? \"\"), topic: String(x.topic ?? \"\"), lim: Number(x.lim ?? 8) }));\n}\n\n// One source. A fetch or parse failure is the SOURCE's error: recorded on its row, returned, counted. A\n// database failure is thrown, because that is the PASS dying, not the source — the caller writes the\n// receipt. Dry: the attempt is made and reported, and no row anywhere is touched (not even last_try).\nasync function attempt(db: any, s: Src, passKey: string, dry: boolean): Promise {\n const t = Date.now();\n const out: SourceResult = { name: s.name, type: s.type, n: 0, stored: 0, ms: 0, error: \"\" };\n let items: Item[] = [];\n try { items = await fetchSource(s); } catch (e) { out.error = cut(errText(e), 300); }\n out.n = items.length;\n out.ms = Date.now() - t;\n if (dry) return out;\n const stamp = sqlStamp(Date.now());\n if (out.error) {\n await db.execute({ sql: \"UPDATE news_fetch_sources SET last_try=?, last_error=?, last_n=0 WHERE name=?\", args: [stamp, out.error, s.name] });\n } else {\n out.stored = await store(db, items, passKey);\n await db.execute({ sql: \"UPDATE news_fetch_sources SET last_try=?, last_ok=?, last_error='', last_n=?, stored_total=stored_total+? WHERE name=?\",\n args: [stamp, stamp, out.n, out.stored, s.name] });\n }\n return out;\n}\n\nexport const scopeFor = (localHour: number): Scope => localHour === 5 || localHour === 6 ? \"full\" : \"slice\";\n\n/** One pass — the single implementation the interval and POST /news/fetch/run share, so a hand run proves\n * the interval's code path. kind \"pass\" is the interval: guard key pass::, scope from the\n * local hour unless given, and at hour 6 the day's journal line. kind \"run\" is a hand run: guard key\n * run:, never the day line. dry: fetch and report, claim nothing, store nothing, journal\n * nothing. at: a test instant (the route admits it with dry only). */\nexport async function fetchOnce(o: { kind: \"pass\" | \"run\"; scope?: Scope; dry?: boolean; only?: string[]; at?: Date; db?: any }) {\n const db = o.db ?? sqlite;\n await init(db);\n const now = o.at ?? new Date();\n const lp = localParts(now);\n const local = localText(lp);\n const scope: Scope = o.scope ?? scopeFor(lp.hour);\n const dry = o.dry === true;\n const daily = o.kind === \"pass\" && lp.hour === 6;\n const passKey = o.kind === \"pass\" ? `pass:${lp.date}:${pad(lp.hour)}` : `run:${new Date().toISOString().replace(/[-:.]/g, \"\")}`;\n const t0 = Date.now();\n const marks = [dry ? \"dry\" : \"\", o.only?.length ? `only ${o.only.length}` : \"\", o.at ? `at ${now.toISOString()}` : \"\"].filter(Boolean);\n const tag = marks.length ? ` [${marks.join(\", \")}]` : \"\";\n const base: any = { ok: true, kind: o.kind, scope, local, dry, at: o.at ? now.toISOString() : null };\n\n const flag = await readFlag(db);\n const queue = await selectSources(db, scope, o.only, dry);\n\n // Law 6: the key is claimed with one statement before any HTTP. A dry pass claims nothing.\n if (!dry) {\n const claim = await db.execute({ sql: \"INSERT OR IGNORE INTO news_fetch_log (key, kind, local, scope, detail) VALUES (?,?,?,?,?)\",\n args: [passKey, o.kind, local, scope, `${queue.length} sources queued${tag}`] });\n if ((claim.rowsAffected ?? 0) === 0) return { ...base, flag, skipped: \"pass already recorded\", pass_key: passKey };\n }\n\n // From here the key is spent. Whatever dies below is journalled with the step it died at. `results` is\n // hoisted out of the try so the receipt can say how far the pass got.\n const results: SourceResult[] = [];\n let truncated = 0, step = \"fetching sources\";\n const storedSoFar = () => results.reduce((a, r) => a + r.stored, 0);\n try {\n // Batches of CONCURRENCY. A batch starts only if its worst case — one source running to the full\n // timeout — still ends inside DEADLINE_MS; otherwise `truncated` is set and the pass stops rather than\n // overrunning. What was not reached kept its old last_try and heads the next hour's queue.\n for (let i = 0; i < queue.length; i += CONCURRENCY) {\n if (Date.now() - t0 + SOURCE_TIMEOUT_MS > DEADLINE_MS) { truncated = 1; break; }\n const batch = queue.slice(i, i + CONCURRENCY);\n const settled = await Promise.allSettled(batch.map((s) => attempt(db, s, passKey, dry)));\n for (const r of settled) if (r.status === \"fulfilled\") results.push(r.value);\n const dead = settled.find((r) => r.status === \"rejected\") as PromiseRejectedResult | undefined;\n if (dead) throw dead.reason; // attempt() rejects on a database failure only — the pass's death, not a source's\n }\n const sum = { tried: results.length, ok_n: results.filter((r) => !r.error).length,\n fetched: results.reduce((a, r) => a + r.n, 0), stored: storedSoFar(), errors: results.filter((r) => r.error).length };\n const failed = results.filter((r) => r.error).map((r) => `${r.name}: ${cut(r.error, 80)}`);\n const ms = Date.now() - t0;\n let day: string | null = null;\n if (!dry) {\n step = \"recording the pass\";\n const detail = `${queue.length} queued, ${sum.tried} tried${truncated ? ` (deadline: ${queue.length - sum.tried} not reached)` : \"\"}; failed: ${failed.join(\"; \") || \"none\"}${tag}`;\n await db.execute({ sql: \"UPDATE news_fetch_log SET tried=?, ok_n=?, fetched=?, stored=?, errors=?, ms=?, truncated=?, detail=? WHERE key=?\",\n args: [sum.tried, sum.ok_n, sum.fetched, sum.stored, sum.errors, ms, truncated, cut(detail, 1500), passKey] });\n if (daily) { step = \"writing the day's journal line\"; day = await dayLine(db, now, flag); }\n }\n return { ...base, flag, ...sum, ms, truncated, queued: queue.length, not_reached: queue.length - sum.tried,\n pass_key: dry ? null : passKey, journalled: day ? 1 : 0, sources: results };\n } catch (e) {\n const error = cut(String(e), 300);\n if (dry) return { ...base, ok: false, flag, died: step, error, tried: results.length, sources: results };\n // The key is claimed and the pass died. Write the receipt that says so, with the step, and mark the\n // pass row; if even the receipt cannot be written, rethrow so Val Town's own run log shows red.\n const reached = `${results.length} of ${queue.length} sources had been tried and the ${storedSoFar()} items they stored stand`;\n try {\n await journal(db, `pass DIED while ${step}: ${cut(error, 160)}${tag}`,\n `${o.kind} ${passKey}, scope ${scope}, ${local} ${TZ}. The key was claimed, then the pass threw while ${step}; nothing after that step ran, and ${reached}. `\n + `${cut(String((e as any)?.stack ?? e), 900)} No model called, no message sent.${tag}`);\n await db.execute({ sql: \"UPDATE news_fetch_log SET tried=?, stored=?, detail = COALESCE(detail, '') || ? WHERE key = ?\",\n args: [results.length, storedSoFar(), ` — DIED while ${step}: ${cut(error, 200)}`, passKey] });\n } catch { throw e; }\n return { ...base, ok: false, flag, died: step, error, journalled: 1, pass_key: passKey, tried: results.length, stored: storedSoFar(), sources: results };\n }\n}\n\n/** The day's one journal line, from the hour-6 pass. Guard key day:, so a double-fired hour\n * writes it once. Prunes past RETENTION_DAYS first, so `held` is what remains. Returns the summary, or\n * null when the day already has its line. */\nasync function dayLine(db: any, now: Date, flag: \"on\" | \"off\"): Promise {\n const lp = localParts(now);\n const key = `day:${lp.date}`;\n const claim = await db.execute({ sql: \"INSERT OR IGNORE INTO news_fetch_log (key, kind, local, scope) VALUES (?,?,?,?)\", args: [key, \"day\", localText(lp), \"day\"] });\n if ((claim.rowsAffected ?? 0) === 0) return null;\n const pruned = Number((await db.execute({ sql: \"DELETE FROM news_fetched WHERE first_seen < datetime('now', ?)\", args: [`-${RETENTION_DAYS} days`] })).rowsAffected ?? 0);\n await db.execute({ sql: \"DELETE FROM news_fetch_log WHERE ts < datetime('now', ?) AND key NOT LIKE 'test:%'\", args: [`-${LOG_RETENTION_DAYS} days`] });\n const s = await summarize(db, now);\n const d: any = (await db.execute(\"SELECT COUNT(*) AS n, COALESCE(SUM(tried),0) AS tried, COALESCE(SUM(errors),0) AS errs, COALESCE(SUM(truncated),0) AS trunc \"\n + \"FROM news_fetch_log WHERE kind IN ('pass','run') AND key NOT LIKE 'test:%' AND ts >= datetime('now','-24 hours')\")).rows[0] ?? {};\n const failing = s.failing.map((f) => f.name);\n const summary = `day ${lp.date}: ${d.n} passes in 24 h, ${d.tried} source fetches, ${s.stored24h} new items; failing: ${failing.join(\", \") || \"none\"}; `\n + `flag.news_fetch_val ${flag}; held: ${s.storedTotal} items, oldest ${s.oldestHeld ?? \"none\"}, newest ${s.newestHeld ?? \"none\"}`;\n const details = `${localText(lp)} ${TZ}, the hour-6 pass. Sources: ${s.sources.enabled} enabled of ${s.sources.present} present (${s.sources.rss} rss, ${s.sources.telegram} telegram), `\n + `last pushed ${s.sources.pushedAt ?? \"never — POST /news/fetch/sources has not been called\"}. `\n + `Passes in 24 h: ${d.n} (${d.trunc} hit the deadline), ${d.tried} source fetches, ${d.errs} failed. Failing now: ${s.errors.join(\"; \") || \"none\"}. `\n + `Pruned ${pruned} items older than ${RETENTION_DAYS} days. Held: ${s.storedTotal} items (oldest ${s.oldestHeld ?? \"none\"}, newest ${s.newestHeld ?? \"none\"}), ${s.stored24h} new in 24 h. `\n + `flag.news_fetch_val is ${flag}: ${flag === \"on\" ? \"the desktop pulls from here\" : \"the desktop still fetches itself; this is the evidence for switching\"}. `\n + `Cron ${CRON} UTC. No model called, no message sent.`;\n await journal(db, summary, details);\n await db.execute({ sql: \"UPDATE news_fetch_log SET tried=?, stored=?, errors=?, detail=? WHERE key=?\", args: [Number(d.tried), s.stored24h, failing.length, cut(summary, 1500), key] });\n return summary;\n}\n\n// ---------- the picture ----------\n/** What status, items and the day line all report, from one place. `errors` is the desktop's exact shape,\n * news_fetch.py:66 — \"{name}: {msg[:80]}\" — for the sources whose LAST attempt failed. */\nasync function summarize(db: any, now: Date) {\n const flag = await readFlag(db);\n const src: any = (await db.execute(\"SELECT COUNT(*) AS present, COALESCE(SUM(enabled),0) AS enabled, \"\n + \"COALESCE(SUM(CASE WHEN enabled=1 AND type='rss' THEN 1 ELSE 0 END),0) AS rss, \"\n + \"COALESCE(SUM(CASE WHEN enabled=1 AND type='telegram' THEN 1 ELSE 0 END),0) AS telegram, \"\n + \"MAX(pushed_at) AS pushed_at FROM news_fetch_sources WHERE present=1\")).rows[0] ?? {};\n const last: any = (await db.execute(\"SELECT key, ts, local, scope, tried, ok_n, fetched, stored, errors, ms, truncated FROM news_fetch_log \"\n + \"WHERE kind IN ('pass','run') AND key NOT LIKE 'test:%' ORDER BY ts DESC, key DESC LIMIT 1\")).rows[0] ?? null;\n const p24: any = (await db.execute(\"SELECT COUNT(*) AS n FROM news_fetch_log WHERE kind IN ('pass','run') AND key NOT LIKE 'test:%' AND ts >= datetime('now','-24 hours')\")).rows[0] ?? {};\n const held: any = (await db.execute(\"SELECT COUNT(*) AS n, MIN(first_seen) AS oldest, MAX(first_seen) AS newest, \"\n + \"COALESCE(SUM(CASE WHEN first_seen >= datetime('now','-24 hours') THEN 1 ELSE 0 END),0) AS d1 FROM news_fetched\")).rows[0] ?? {};\n const fail = (await db.execute(\"SELECT name, type, last_error, last_ok FROM news_fetch_sources WHERE present=1 AND enabled=1 AND last_error != '' ORDER BY name\")).rows as any[];\n const failing = fail.map((f) => ({ name: String(f.name), type: String(f.type), error: String(f.last_error), lastOk: f.last_ok ?? null }));\n return {\n flag,\n sources: { present: Number(src.present ?? 0), enabled: Number(src.enabled ?? 0), rss: Number(src.rss ?? 0), telegram: Number(src.telegram ?? 0),\n pushedAt: src.pushed_at ?? null, pushAgeH: ageH(src.pushed_at, now) },\n lastPass: last ? { key: String(last.key), ts: String(last.ts), local: last.local ?? null, scope: last.scope ?? null, tried: Number(last.tried ?? 0), ok: Number(last.ok_n ?? 0),\n fetched: Number(last.fetched ?? 0), stored: Number(last.stored ?? 0), errors: Number(last.errors ?? 0), ms: Number(last.ms ?? 0), truncated: Number(last.truncated ?? 0) } : null,\n lastPassAgeH: last ? ageH(last.ts, now) : null,\n passes24h: Number(p24.n ?? 0),\n stored24h: Number(held.d1 ?? 0), storedTotal: Number(held.n ?? 0),\n oldestHeld: held.oldest ?? null, newestHeld: held.newest ?? null,\n failing,\n errors: failing.map((f) => `${f.name}: ${cut(f.error, 80)}`),\n };\n}\n\n// ---------- the interval ----------\nexport default async function (_interval: { lastRunAt?: Date }) {\n // Every wake works: a slice, or the full sweep at 05 and 06 local; the day's journal line rides the\n // hour-6 pass — after the second full sweep, before Nina's 06:45. Scope, key and the day line all\n // follow from the local hour inside fetchOnce, so the interval and a hand run cannot disagree about them.\n return await fetchOnce({ kind: \"pass\" });\n}\n\n// ---------- the routes ----------\nconst clampInt = (v: any, dflt: number, lo: number, hi: number) => {\n if (v === undefined || v === null || v === \"\") return dflt;\n const n = Math.floor(Number(v));\n return Number.isFinite(n) ? Math.min(hi, Math.max(lo, n)) : dflt;\n};\n\nexport function mountNewsFetch(app: any, db: any, PULL_SECRET: string) {\n const ready = init(db);\n const auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n const limits = { SLICE_N, CONCURRENCY, SOURCE_TIMEOUT_MS, DEADLINE_MS, BODY_LIMIT, RETENTION_DAYS };\n\n app.get(\"/news/fetch/status\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const now = new Date();\n const s = await summarize(db, now);\n return c.json({ ok: true, flag: s.flag, now: now.toISOString(), local: localText(localParts(now)), cron: CRON,\n sources: s.sources, lastPass: s.lastPass, lastPassAgeH: s.lastPassAgeH, passes24h: s.passes24h,\n stored24h: s.stored24h, storedTotal: s.storedTotal, oldestHeld: s.oldestHeld, newestHeld: s.newestHeld,\n retentionDays: RETENTION_DAYS, failing: s.failing, errors: s.errors, limits });\n });\n\n // The pull. A row is EXACTLY {source, topic, title, url, summary, when}, in that order — an element of\n // news_raw.json[\"items\"] before iso_of() runs. No id, key, iso or first_seen: the desktop computes its own\n // key from these six and its own iso from `when`, so one implementation of each keeps running. The read\n // is pure: nothing is marked, moved or deleted by it. `next` is the last id when the page was full.\n app.get(\"/news/fetch/items\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const now = new Date();\n const hours = clampInt(c.req.query(\"hours\"), 120, 1, 336);\n const limit = clampInt(c.req.query(\"limit\"), 500, 1, 1000);\n const before = Math.floor(Number(c.req.query(\"before\")));\n const paged = Number.isFinite(before) && before > 0;\n const debug = c.req.query(\"debug\") === \"1\";\n // The window is first_seen >= now − hours. The same stamp goes into the WHERE and into the response, so\n // the window reported is the window applied (first_seen is datetime('now') text, sqlStamp's shape).\n const sinceUtc = sqlStamp(now.getTime() - hours * 3600000);\n const r = await db.execute({ sql: `SELECT id, source, topic, title, url, summary, when_text, key, first_seen FROM news_fetched WHERE first_seen >= ?${paged ? \" AND id < ?\" : \"\"} ORDER BY id DESC LIMIT ?`,\n args: paged ? [sinceUtc, before, limit] : [sinceUtc, limit] });\n const raw = r.rows as any[];\n const rows = raw.map((x) => {\n const row: any = { source: String(x.source), topic: String(x.topic ?? \"\"), title: String(x.title), url: String(x.url ?? \"\"), summary: String(x.summary ?? \"\"), when: String(x.when_text ?? \"\") };\n if (debug) { row._key = x.key; row._first_seen = x.first_seen; }\n return row;\n });\n const s = await summarize(db, now);\n // lastPassAgeH and passes24h ride the pull as well as /status, so one call tells the desktop both what\n // it is holding and how fresh the val is. news_fetch.py's freshness gate and its `via val:` line both\n // read them from here; without them the provenance line prints \"? passes/24 h\".\n return c.json({ ok: true, flag: s.flag, window: { hours, sinceUtc }, n: rows.length, rows,\n next: rows.length === limit && raw.length ? Number(raw[raw.length - 1].id) : null,\n errors: s.errors, lastPass: s.lastPass, lastPassAgeH: s.lastPassAgeH, passes24h: s.passes24h,\n sources: s.sources });\n });\n\n // The roster push, from the desktop, entries of scripts/news_sources.json verbatim. Upsert by name; a\n // name the push no longer carries is retired (present=0, enabled=0), never deleted. Fewer than five\n // entries is an empty or truncated push, and one of those must never blind the cold path: refused,\n // nothing touched. A malformed entry is skipped and named, not a reason to refuse the 58 good ones.\n app.post(\"/news/fetch/sources\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n if (!Array.isArray(b.sources) || b.sources.length < 5) {\n return c.json({ ok: false, error: \"sources must be an array of at least 5 entries — a shorter push is treated as truncated and refused\" }, 400);\n }\n const pushedAt = sqlStamp(Date.now());\n const have = new Map();\n for (const x of (await db.execute(\"SELECT name, present FROM news_fetch_sources\")).rows as any[]) have.set(String(x.name), Number(x.present));\n const pushed = new Set();\n const invalid: string[] = [];\n let added = 0, updated = 0;\n for (const e of b.sources as any[]) {\n const name = String(e?.name ?? \"\").trim(), type = String(e?.type ?? \"\").trim();\n const url = String(e?.url ?? \"\").trim(), handle = String(e?.handle ?? \"\").trim();\n if (!name || (type !== \"rss\" && type !== \"telegram\") || (type === \"rss\" && !url) || (type === \"telegram\" && !handle) || pushed.has(name)) {\n invalid.push(name || \"(unnamed)\"); continue;\n }\n // news_fetch.py's defaults, lines 62 and 64: limit 8 for rss and 10 for telegram; topic \"\"; enabled true.\n const rawLim = Number(e?.limit);\n const lim = e?.limit != null && e?.limit !== \"\" && Number.isFinite(rawLim) ? Math.floor(rawLim) : (type === \"telegram\" ? 10 : 8);\n const enabled = e?.enabled === false ? 0 : 1;\n const topic = String(e?.topic ?? \"\");\n pushed.add(name);\n if (have.has(name)) {\n await db.execute({ sql: \"UPDATE news_fetch_sources SET type=?, url=?, handle=?, topic=?, lim=?, enabled=?, present=1, pushed_at=? WHERE name=?\",\n args: [type, url, handle, topic, lim, enabled, pushedAt, name] });\n updated++;\n } else {\n await db.execute({ sql: \"INSERT INTO news_fetch_sources (name, type, url, handle, topic, lim, enabled, present, pushed_at) VALUES (?,?,?,?,?,?,?,1,?)\",\n args: [name, type, url, handle, topic, lim, enabled, pushedAt] });\n added++;\n }\n }\n // Retired = was present, not in this push. Computed from the names, never from a stamp comparison, so a\n // re-sent push can neither retire nor resurrect by accident.\n const gone = [...have].filter(([n, present]) => present === 1 && !pushed.has(n)).map(([n]) => n);\n let retired = 0;\n if (gone.length) {\n const r = await db.execute({ sql: `UPDATE news_fetch_sources SET present=0, enabled=0 WHERE name IN (${gone.map(() => \"?\").join(\",\")})`, args: gone });\n retired = Number(r.rowsAffected ?? 0);\n }\n // Journalled when the roster changed shape; a same-again push is not news.\n if (added || retired) {\n await journal(db, `roster push: ${pushed.size} sources (${added} new, ${retired} retired)`,\n `POST /news/fetch/sources${b.stamp !== undefined ? ` (desktop stamp ${String(b.stamp)})` : \"\"}: ${pushed.size} names, ${added} added, ${updated} updated, ${retired} retired`\n + ` (present=0, enabled=0, never deleted)${gone.length ? `: ${gone.join(\", \")}` : \"\"}. Invalid entries skipped: ${invalid.join(\", \") || \"none\"}.`);\n }\n const out: any = { ok: true, n: pushed.size, added, updated, retired, pushedAt };\n if (invalid.length) out.invalid = invalid;\n return c.json(out);\n });\n\n // The same code path the interval runs, on demand — the schedule cannot be read from any API, so the\n // proof that fetching works is a pass with a recorded result, not a deploy that returned 200. Its guard\n // key is run:, so it can never take the hour's pass: key from the interval. scope defaults\n // to the interval's rule for the instant; `at` is a test parameter and is refused unless dry.\n app.post(\"/news/fetch/run\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n const dry = b.dry === true;\n if (b.scope !== undefined && b.scope !== \"slice\" && b.scope !== \"full\") return c.json({ ok: false, error: 'scope must be \"slice\" or \"full\"' }, 400);\n if (b.only !== undefined && (!Array.isArray(b.only) || !b.only.length || !b.only.every((x: any) => typeof x === \"string\"))) {\n return c.json({ ok: false, error: \"only must be a non-empty array of source names\" }, 400);\n }\n let at: Date | undefined;\n if (b.at !== undefined) {\n // A production pass may never be told what time it is.\n if (!dry) return c.json({ ok: false, error: \"at is a test parameter: pass dry:true with it\" }, 400);\n at = new Date(String(b.at));\n if (isNaN(at.getTime())) return c.json({ ok: false, error: \"at is not a date\" }, 400);\n }\n return c.json(await fetchOnce({ kind: \"run\", scope: b.scope, only: b.only, dry, at, db }));\n });\n\n // The manual prune: before:\"YYYY-MM-DD\" (a UTC day boundary) or days:N. The hour-6 pass already prunes\n // past RETENTION_DAYS; this is for a hand decision. A cut inside the desktop's 120 h pull window would\n // empty what the desktop is about to read, so that takes force:true, said deliberately. news_seen.json\n // is untouched by any of this — the desktop's memory of what was shown is its own.\n app.post(\"/news/fetch/prune\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n const hasBefore = b.before !== undefined, hasDays = b.days !== undefined;\n if (hasBefore === hasDays) return c.json({ ok: false, error: 'exactly one of before:\"YYYY-MM-DD\" or days:N' }, 400);\n let cutoff: string;\n if (hasBefore) {\n if (!/^\\d{4}-\\d\\d-\\d\\d$/.test(String(b.before))) return c.json({ ok: false, error: \"before must be YYYY-MM-DD\" }, 400);\n cutoff = `${b.before} 00:00:00`;\n } else {\n const days = Number(b.days);\n if (!Number.isFinite(days) || days < 1) return c.json({ ok: false, error: \"days must be a number >= 1\" }, 400);\n cutoff = sqlStamp(Date.now() - days * 86400000);\n }\n const cutMs = Date.parse(cutoff.replace(\" \", \"T\") + \"Z\");\n if (!Number.isFinite(cutMs)) return c.json({ ok: false, error: \"before is not a date\" }, 400);\n if (cutMs > Date.now() - DESKTOP_WINDOW_H * 3600000 && b.force !== true) {\n return c.json({ ok: false, error: `the cut ${cutoff} is inside the desktop's ${DESKTOP_WINDOW_H} h pull window; pass force:true to prune it anyway` }, 400);\n }\n const r = await db.execute({ sql: \"DELETE FROM news_fetched WHERE first_seen < ?\", args: [cutoff] });\n const deleted = Number(r.rowsAffected ?? 0);\n await journal(db, `pruned ${deleted} held items first seen before ${cutoff}${b.force === true ? \" [forced, inside the pull window]\" : \"\"}`,\n `POST /news/fetch/prune ${hasBefore ? `before ${b.before}` : `days ${b.days}`}: ${deleted} rows deleted from news_fetched with first_seen < ${cutoff} UTC. Nothing else touched; news_seen.json on the desktop is unaffected.`);\n return c.json({ ok: true, deleted, before: cutoff });\n });\n}\n",[],[233],"cb76b92c-f605-4baa-812a-d2167f693cdb","monday-scroll.ts","97465266-8749-11f1-89d0-1607ee4eb77e",30,["D",1786527835897],"// Cloud warden — Monday scroll. Cron (UTC): 30 6 * * 1 (~08:30 Amsterdam in summer)\nimport { journalOutcome, runWarden } from \"./warden-shared.ts\";\nexport default async function (interval: Interval) {\n await runWarden(\"monday\", interval.lastRunAt);\n}\n",[],[242],"84995cf6-ffd4-4ced-9bc6-122bb000be1c","mirror-routes.ts","f49afb54-ac67-11f1-a4c5-1607ee4eb77e",80,["D",1788969791046],"// The Mirror routes (HQ desktop session, 9 Sep 2026, task #232) — where Alexandr's answers to the\n// console's Mirror tab land, and where Iris the Mirror collects them at 07:10.\n// Split into its own file like news-routes.ts: bot-webhook.ts and palantir-routes.ts both sit near\n// Val Town's 80k single-file limit. Mounted by palantir-routes.ts: mountMirror(app, sqlite, PULL_SECRET, busAuth).\n//\n// POST /mirror/answer {id, answer, text?, type, page, section, claim, question}\n// → upsert into mirror_answers. Same id again = UPDATE, applied reset to 0 (Law 6:\n// he may change his mind before Iris files it; the last answer wins, once).\n// GET /mirror/answers ?since=ISO (optional) → rows with applied=0, oldest first. ?all=1 → last 200 of everything.\n// POST /mirror/applied {ids:[...]} → applied=1 for each id (Iris, after the vault pages are written).\n//\n// The table is the contract mirror_queue.py `apply` reads: the `card` column is the whole card the page\n// held when he answered, so a card that has since moved or been rebuilt can still be filed.\nexport function mountMirror(app: any, sqlite: any, PULL_SECRET: string, busAuth: any) {\n const ready = sqlite.execute(`CREATE TABLE IF NOT EXISTS mirror_answers (\n id TEXT PRIMARY KEY, answer TEXT, text TEXT, card TEXT, at TEXT, applied INTEGER DEFAULT 0)`);\n const auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n\n app.post(\"/mirror/answer\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const id = String(b.id ?? \"\").trim().slice(0, 40);\n const answer = String(b.answer ?? \"\").trim().toLowerCase().slice(0, 20);\n if (!id || !answer) return c.json({ ok: false, error: \"id and answer are required\" }, 400);\n const text = String(b.text ?? \"\").trim().slice(0, 2000);\n const card: any = {};\n for (const k of [\"type\", \"page\", \"section\", \"claim\", \"question\", \"status\", \"date\", \"source\", \"slot\"]) if (b[k] !== undefined) card[k] = b[k];\n const at = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO mirror_answers (id, answer, text, card, at, applied) VALUES (?,?,?,?,?,0)\n ON CONFLICT(id) DO UPDATE SET answer=excluded.answer, text=excluded.text, card=excluded.card, at=excluded.at, applied=0`,\n args: [id, answer, text, JSON.stringify(card).slice(0, 8000), at] });\n return c.json({ ok: true, id, answer, at });\n });\n\n app.get(\"/mirror/answers\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const since = String(c.req.query(\"since\") ?? \"\").slice(0, 40);\n const all = c.req.query(\"all\") === \"1\";\n const r = all\n ? await sqlite.execute(\"SELECT id, answer, text, card, at, applied FROM mirror_answers ORDER BY at DESC LIMIT 200\")\n : since\n ? await sqlite.execute({ sql: \"SELECT id, answer, text, card, at, applied FROM mirror_answers WHERE applied=0 AND at >= ? ORDER BY at\", args: [since] })\n : await sqlite.execute(\"SELECT id, answer, text, card, at, applied FROM mirror_answers WHERE applied=0 ORDER BY at\");\n const rows = (r.rows as any[]).map((x) => {\n let card: any = null; try { card = JSON.parse(String(x.card ?? \"{}\")); } catch { card = {}; }\n return { id: x.id, answer: x.answer, text: x.text, at: x.at, applied: Number(x.applied), ...card };\n });\n return c.json({ ok: true, n: rows.length, answers: rows });\n });\n\n app.post(\"/mirror/applied\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const ids = Array.isArray(b.ids) ? b.ids.map((x: any) => String(x).slice(0, 40)) : [];\n if (!ids.length) return c.json({ ok: false, error: \"ids required\" }, 400);\n let n = 0;\n for (const id of ids) {\n const r = await sqlite.execute({ sql: \"UPDATE mirror_answers SET applied=1 WHERE id=? AND applied=0\", args: [id] });\n n += Number(r.rowsAffected ?? 0);\n }\n return c.json({ ok: true, applied: n, ids });\n });\n}\n",[],[250],"f6810490-b462-4508-b8d5-e3d31fae2e89","herald-fallback.ts","8b9efcda-a722-11f1-9bca-1607ee4eb77e",91,["D",1789004713687],5,"/**\n * THE HERALD'S FALLBACK — the val's own answer to the sleeping PC (quest #87, root cause #79).\n *\n * Amara the Morning Brief (formerly the morning-herald) runs on the desktop at 07:30. When the machine is asleep the brief simply\n * never arrives and nothing says so. This interval runs in the val, which is always on, and at\n * 08:30 Amsterdam time sends a LITE brief built only from what the val itself holds — open quests,\n * today's picks, unacked captures, and the last snapshot the PC pushed, every figure carrying its\n * age. It is deliberately deterministic: no model is called, so a rescued morning costs nothing.\n *\n * Law 6 (idempotency): the journal line is written BEFORE the send, and both the desktop herald's\n * line and this one are checked first — the fallback never doubles a brief that already went out.\n * Law 7: the first pass INSIDE the window journals whatever it decides, send or stand-down, so a\n * quiet fallback is visibly quiet rather than indistinguishable from a dead one. Passes outside\n * the window write nothing — the interval wakes hourly and 20 of those wakes have nothing to say.\n *\n * Built 3 Sep 2026 by HQ. Schedule: hourly 06–09 UTC; the local-time gate does the real work,\n * so summer and winter time both land on 08:30 local.\n *\n * 10 Sep 2026 (#220, piece 3): behind flag.herald_names_missing, one Quests line names the agents that\n * owed a run this morning and have no journal line — namesMissingLine in reconciler.ts, the same\n * roster and signal the reconciler uses. Flag off, the brief is byte-for-byte what it was. That module\n * is imported lazily, inside the try below, never at the top of this file: a static import would make\n * this file unloadable if reconciler.ts ever failed to load, and Val Town only finds that out when the\n * interval fires — on a morning with no brief. This file's one job is to send when nothing else will.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst EP = Deno.env.get(\"PALANTIR_EP\") ?? \"https://ClaudeAssistant--6922aaa67e8e11f1a5911607ee4eb77e.web.val.run\";\nconst SECRET = Deno.env.get(\"PULL_SECRET\") ?? \"\";\nconst TZ = \"Europe/Amsterdam\";\n\nfunction localParts(d = new Date()) {\n const f = new Intl.DateTimeFormat(\"en-GB\", { timeZone: TZ, hour12: false,\n year: \"numeric\", month: \"2-digit\", day: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\", weekday: \"short\" });\n const p: any = {};\n for (const x of f.formatToParts(d)) p[x.type] = x.value;\n return { date: `${p.year}-${p.month}-${p.day}`, hour: Number(p.hour), minute: Number(p.minute), weekday: p.weekday };\n}\nconst eur = (v: number | null | undefined) =>\n v == null || isNaN(Number(v)) ? \"—\" : \"€\" + Number(v).toFixed(2).replace(/\\B(?=(\\d{3})+(?!\\d)\\.)/g, \" \").replace(\".\", \",\");\n\nasync function journal(summary: string, details: string) {\n await sqlite.execute({ sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [\"herald-fallback\", summary, details] });\n}\n\nexport default async function (interval: { lastRunAt?: Date }) {\n const now = localParts();\n // ---- the gate: one window a day, and only when the desktop has had its chance ----\n if (now.hour < 8 || (now.hour === 8 && now.minute < 30) || now.hour >= 12) return;\n\n // ---- has a brief already gone out today? (the desktop herald, or an earlier fallback) ----\n const seen = await sqlite.execute({\n // The desktop herald became Amara the Morning Brief on 3 Sep 2026 and journals as 'amara-morning-brief';\n // for two mornings this guard only knew the old name, so it doubled her brief and blamed a sleeping PC.\n sql: `SELECT source FROM journal WHERE date(ts) = ? AND (source LIKE 'morning-herald%' OR source LIKE 'amara%' OR source = 'herald-fallback') LIMIT 1`,\n args: [now.date] });\n if (seen.rows.length) {\n // A brief already went out today. Say so once — silence is what a broken interval looks like.\n const who = String((seen.rows[0] as any).source ?? \"\");\n if (who !== \"herald-fallback\") {\n await journal(`stood down — ${who} already sent today's brief`,\n `The fallback woke inside its window (${now.weekday} ${now.date}, ${String(now.hour).padStart(2, \"0\")}:${String(now.minute).padStart(2, \"0\")} Amsterdam), found a ${who} entry for today and sent nothing. This is the healthy case: the desktop was awake.`);\n }\n return;\n }\n\n // ---- what the val itself knows ----\n const openRows = await sqlite.execute(\n `SELECT id, title, tier, area, due FROM tasks WHERE status='open' AND (owner IS NULL OR owner='alexandr')`);\n const open = openRows.rows as any[];\n const byTier = (t: string) => open.filter((r) => r.tier === t).length;\n const late = open.filter((r) => r.due && String(r.due) < now.date);\n const picksRow = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date = ?\", args: [now.date] });\n const picks = picksRow.rows as any[];\n const capRow = await sqlite.execute(\"SELECT COUNT(*) AS n FROM inbox WHERE processed = 0\");\n const captures = Number((capRow.rows[0] as any)?.n ?? 0);\n const snapRow = await sqlite.execute(\"SELECT data, stamp FROM snapshot WHERE key='dashboard'\");\n let snap: any = null, snapStamp = \"\";\n if (snapRow.rows.length) {\n try { snap = JSON.parse(String((snapRow.rows[0] as any).data)); snapStamp = String((snapRow.rows[0] as any).stamp ?? \"\"); } catch (_) {}\n }\n const pot = snap?.money?.live?.personalTotal ?? null;\n const wise = snap?.business?.coffersEUR ?? null;\n const cal = (snap?.daily?.calendar ?? []) as any[];\n const upcoming = (snap?.daily?.upcoming ?? []) as any[];\n\n // ---- the brief: house style, one fact per bullet, questions last ----\n const L: string[] = [];\n L.push(`*⚡ ${now.weekday} ${now.date.slice(8)} — lite brief*`);\n L.push(\"• The PC was asleep at 07:30, so this comes from the val alone.\");\n L.push(\"\");\n L.push(\"*🗡 Quests*\");\n L.push(`• *${open.length}* open — *${byTier(\"balrog\")}* urgent, *${byTier(\"nazgul\")}* due soon`);\n if (late.length) L.push(`• 🔴 *${late.length}* past their date: ` + late.slice(0, 3).map((r) => `*#${r.id}* ${String(r.title).slice(0, 44)}`).join(\" · \"));\n L.push(`• Picks for today: ${picks.length ? picks.map((p) => `*#${p.task_id}*`).join(\" \") : \"_none chosen_\"}`);\n if (captures) L.push(`• *${captures}* capture${captures === 1 ? \"\" : \"s\"} waiting for the archivist`);\n // Who did not run (#220 piece 3). Wrapped so nothing in it can cost him the brief: this file's one job\n // is to send when nothing else will. A failure here is noted in the journal line below instead. The\n // import is inside the guard on purpose (see the header) — the pattern palantir-routes.ts uses for\n // POST /nightwatch/run — so a module that will not load is a missing line, not a missing brief.\n let namesNote = \"\";\n try {\n const { namesMissingLine } = await import(\"./reconciler.ts\");\n const line = await namesMissingLine(sqlite, new Date());\n if (line) L.push(line);\n } catch (e) { namesNote = ` The names-missing line failed and was left out: ${String(e).slice(0, 120)}.`; }\n if (pot != null || wise != null) {\n L.push(\"\");\n L.push(\"*💰 Money*\");\n if (pot != null) L.push(`• Personal pot *${eur(pot)}*`);\n if (wise != null) L.push(`• Business (Wise) *${eur(wise)}*`);\n L.push(`• _as of the last push, ${snapStamp || \"unknown\"}_`);\n }\n if (cal.length || upcoming.length) {\n L.push(\"\");\n L.push(\"*📅 From the last calendar read* _(may be a day old)_\");\n for (const e of cal.slice(0, 3)) L.push(`• *${e.when ?? \"\"}* — ${e.title}`);\n for (const e of upcoming.slice(0, 3)) L.push(`• *${e.day ?? \"\"}* ${e.time ?? \"\"} — ${e.title}`);\n }\n L.push(\"\");\n L.push(\"🖥 _Calendar and mail could not be read live — the desktop is asleep. The full brief follows when it wakes._\");\n const text = L.join(\"\\n\").slice(0, 3500);\n\n // ---- Law 6: the receipt is written before the message goes out ----\n await journal(`lite brief sent — ${open.length} open, ${late.length} late, ${picks.length} picked`,\n `The desktop herald had not journalled by 08:30 ${TZ}. Deterministic brief from the val: tasks + day_plan + inbox + snapshot (${snapStamp || \"no snapshot\"}). No model called.${namesNote}`);\n\n const r = await fetch(`${EP}/send?secret=${encodeURIComponent(SECRET)}`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify({ text }) });\n const j = await r.json().catch(() => null);\n if (!j?.ok) {\n await journal(\"lite brief FAILED to send\", `POST /send answered ${r.status}: ${JSON.stringify(j)?.slice(0, 200)}`);\n }\n}\n",[],[258],"11e6162b-975b-415c-99c9-91b5e2ee958e","friday-toast.ts","97bde344-8749-11f1-b372-1607ee4eb77e",31,["D",1786527836389],"// Cloud warden — Friday toast. Cron (UTC): 30 15 * * 5 (~17:30 Amsterdam in summer)\nimport { journalOutcome, runWarden } from \"./warden-shared.ts\";\nexport default async function (interval: Interval) {\n await runWarden(\"friday\", interval.lastRunAt);\n}\n",[],[267],"ebb37546-577f-4c33-bf38-9e5caaaef4ec","export-routes.ts","90965366-acac-11f1-836a-1607ee4eb77e",95,["D",1789173218292],"// Raw table export for the desktop mirror (task #186, 9 Sep 2026). One read-only route,\n// GET /export, that pages any allowlisted table out of the val's SQLite so the PC can keep\n// a local copy without the val ever being the only place a row lives.\n// Mounted by bot-webhook.ts: mountExport(app, sqlite, PULL_SECRET).\n//\n// GET /export?secret=… → { ok, tables:[…] }\n// GET /export?secret=…&table=journal&before=401&limit=200 → { ok, table, key, n, rows, next }\n// (a non-pageable table also carries `truncated`: true when it hit the 5000-row one-shot cap)\n// GET /export?secret=…&table=nope → 400 { ok:false, error:\"unknown table\" }\n//\n// rows come DESC by the table's key; `next` is the last row's key when the page was full\n// (there may be more — pass it back as `before`), else null.\n//\n// Nothing from the query string reaches SQL except through the TABLES map below: the table\n// name and key column are copied out of the map, `before` and `limit` are parameters.\n// banking_codes (live one-time bank consent codes) and settings (opaque key/value that may\n// hold tokens) are NOT in the map on purpose, and the 400 does not distinguish \"excluded\"\n// from \"never existed\".\nexport function mountExport(app: any, sqlite: any, PULL_SECRET: string) {\n\n// name → { key: the column to page on, num: key is INTEGER (cursor is parsed as a number),\n// pageable: false when the key is not unique (composite PK) — whole table, one shot }\nconst TABLES: Record = {\n // id INTEGER PRIMARY KEY AUTOINCREMENT\n journal: { key: \"id\", num: true, pageable: true },\n tasks: { key: \"id\", num: true, pageable: true },\n inbox: { key: \"id\", num: true, pageable: true },\n group_log: { key: \"id\", num: true, pageable: true },\n agent_jobs: { key: \"id\", num: true, pageable: true },\n agent_blocked: { key: \"id\", num: true, pageable: true },\n news_feedback: { key: \"id\", num: true, pageable: true },\n gate_queue: { key: \"id\", num: true, pageable: true },\n group_posts: { key: \"id\", num: true, pageable: true },\n team_ledger: { key: \"id\", num: true, pageable: true },\n outbox: { key: \"id\", num: true, pageable: true },\n // TEXT PRIMARY KEY\n news_items: { key: \"key\", pageable: true },\n snapshot: { key: \"key\", pageable: true },\n chats: { key: \"chat_id\", num: true, pageable: true },\n editions: { key: \"date\", pageable: true },\n day_plan_text: { key: \"date\", pageable: true },\n balance_history: { key: \"day\", pageable: true },\n nightwatch_runs: { key: \"ts\", pageable: true },\n presence: { key: \"session\", pageable: true },\n reconciler_log: { key: \"key\", pageable: true }, // #220: the reconciler's guard rows. settings stays out on purpose (see above).\n news_fetched: { key: \"id\", num: true, pageable: true },\n news_fetch_sources: { key: \"name\", pageable: true },\n news_fetch_log: { key: \"key\", pageable: true },\n // composite PRIMARY KEY — key column alone is not unique, so no cursor\n day_plan: { key: \"date\", pageable: false },\n warden_log: { key: \"date\", pageable: false },\n dues_done: { key: \"key\", pageable: false },\n};\nconst DEFAULT_LIMIT = 200, MAX_LIMIT = 500, WHOLE_TABLE_LIMIT = 5000;\n\napp.get(\"/export\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n\n const name = c.req.query(\"table\");\n if (name === undefined || name === \"\") return c.json({ ok: true, tables: Object.keys(TABLES) });\n\n // Object.prototype.hasOwnProperty, not `in`: \"constructor\" must not resolve to a table.\n if (!Object.prototype.hasOwnProperty.call(TABLES, name)) return c.json({ ok: false, error: \"unknown table\" }, 400);\n const t = TABLES[name];\n\n // limit: junk or absent → default; otherwise clamp to 1..MAX. Number(\"abc\") is NaN and\n // Math.min(NaN, 500) is NaN, which would become `LIMIT NaN` — hence the isFinite guard first.\n // An ABSENT or EMPTY limit means \"the default\". Number(\"\") is 0, which is finite, so without\n // the empty check `?limit=` would clamp to 1 and turn a 4-request sweep into 662.\n const limitRaw = String(c.req.query(\"limit\") ?? \"\").trim();\n let limit = limitRaw === \"\" ? DEFAULT_LIMIT : Number(limitRaw);\n limit = Number.isFinite(limit) ? Math.max(1, Math.min(Math.floor(limit), MAX_LIMIT)) : DEFAULT_LIMIT;\n\n // Whole-table tables: no cursor, one shot, capped.\n if (!t.pageable) {\n // Ask for one row more than the cap so a full table can be told apart from a capped one:\n // a mirror must never mistake a truncated answer for the whole table.\n const r = await run(`SELECT * FROM ${name} ORDER BY ${t.key} DESC LIMIT ?`, [WHOLE_TABLE_LIMIT + 1]);\n const truncated = r.length > WHOLE_TABLE_LIMIT;\n const rows = truncated ? r.slice(0, WHOLE_TABLE_LIMIT) : r;\n return c.json({ ok: true, table: name, key: t.key, n: rows.length, rows, next: null, truncated });\n }\n\n const beforeRaw = c.req.query(\"before\");\n let sql = `SELECT * FROM ${name}`, args: any[] = [];\n if (beforeRaw !== undefined && beforeRaw !== \"\") {\n let before: any = beforeRaw;\n if (t.num) {\n before = Number(beforeRaw);\n if (!Number.isFinite(before)) return c.json({ ok: false, error: \"bad cursor\" }, 400);\n }\n sql += ` WHERE ${t.key} < ?`; args.push(before);\n }\n sql += ` ORDER BY ${t.key} DESC LIMIT ?`; args.push(limit);\n const rows = await run(sql, args);\n const next = rows.length === limit ? (rows[rows.length - 1] as any)[t.key] ?? null : null;\n return c.json({ ok: true, table: name, key: t.key, n: rows.length, rows, next });\n});\n\n// Several tables are created lazily by the code that first writes them (dues_done, warden_log,\n// team_ledger, group_posts, the night watch's two). A mirror asking before that first write\n// should get an empty page, not a 500.\nasync function run(sql: string, args: any[]): Promise {\n try {\n const r = await sqlite.execute({ sql, args });\n return r.rows as any[];\n } catch (e: any) {\n if (/no such table/i.test(String(e?.message ?? e))) return [];\n throw e;\n }\n}\n\n}\n",[],[275],"926c9a2f-b86b-41f8-9903-2186643f123b","coin-watcher.ts","69902324-7e8e-11f1-90d7-1607ee4eb77e",27,["D",1786485045527],"// Coin Watcher — RETIRED 11 Aug 2026 on Alexandr's order (HQ cloud session).\n// Was: a */15 interval val pinging Telegram for every new completed Wise transaction\n// (\"🪙 Coin moves in Erebor\"). Retired because the bank app already notifies him —\n// coin moves are DASHBOARD-ONLY now: Erebor's Coffers + recent-movements module\n// (dashboard/palantir.html ← dashboard/data.js ← scripts/update_dashboard_data.py, Wise read-only).\n// Deployed UNSCHEDULED (type \"script\", see scripts/deploy_telegram_bot.py) and inert.\n// To re-enable: git show 8616772:telegram/coin-watcher.ts > telegram/coin-watcher.ts, set type back to \"interval\", redeploy.\n\nexport default async function () {\n return; // intentionally inert — no Telegram pings for coin moves (dashboard-only policy)\n}\n",[],[283],"c3372dd5-4a92-441f-82f8-6c6502a352e0","bot-webhook.ts","6922aaa6-7e8e-11f1-a591-1607ee4eb77e",["D",1789316959570],41,"http","// Palantír Herald — Telegram bot webhook (Val Town HTTP val)\n// Routes: POST /webhook (Telegram), GET /pull + POST /ack (Claude sessions), POST /send (outbound pings)\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { AXIOMA_PAUSED, groupGate } from \"./warden-shared.ts\";\n\nconst BOT = Deno.env.get(\"TELEGRAM_BOT_TOKEN\")!;\nconst WEBHOOK_SECRET = Deno.env.get(\"WEBHOOK_SECRET\")!;\nconst PULL_SECRET = Deno.env.get(\"PULL_SECRET\")!;\n\n// Machine work never lands on his board (3 Sep 2026). A title that starts with one of these is\n// work for the system — an HQ build, a change request to an agent, a defect, an orchestrator\n// hand-off — so it is filed to owner='system' whichever agent or session created it. GET /tasks\n// returns his lane only, so this is the one place that has to be right. If the machine finishes\n// something that then needs HIM, it files a SEPARATE task in his lane with the exact steps.\nconst MACHINE_TITLE = /^\\s*(HQ[:\\/]|RUMO-ORCH|\\[CHANGE REQUEST\\]|Wright[:\\/ ]|Bolt[:\\/ ]|Palantir defect|Build:)/i;\nconst laneFor = (title: string, owner?: string) =>\n owner ? owner : (MACHINE_TITLE.test(String(title ?? \"\")) ? \"system\" : \"alexandr\");\n\nconst API = `https://api.telegram.org/bot${BOT}`;\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS inbox (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, kind TEXT, text TEXT, file_id TEXT, processed INTEGER DEFAULT 0)`);\n// Telegram delivers a forwarded ALBUM as one separate webhook call per photo, all sharing\n// media_group_id. Without this column each photo looked like its own message: one caption\n// reply plus one \"saved, no caption\" reply per extra photo — a single forward that read as\n// three (task #195 follow-up, 6 Sep 2026: \"I forwarded, it worked, but sent the message twice\").\ntry { await sqlite.execute(\"ALTER TABLE inbox ADD COLUMN group_id TEXT\"); } catch (_) { /* already there */ }\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS tasks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL, note TEXT DEFAULT '', tier TEXT DEFAULT 'fellowship',\n area TEXT DEFAULT '', ord REAL DEFAULT 0, status TEXT DEFAULT 'open',\n comments TEXT DEFAULT '[]',\n created TEXT DEFAULT (datetime('now')), done_at TEXT)`);\n// AXIOMA team tasks live in the SAME table (one source of truth) but carry an owner.\n// The dashboard Quest Log shows only Alexandr's; the AXIOMA board shows the team's.\n// Without this separation, logging a task for Danny would pollute his personal day.\ntry { await sqlite.execute(\"ALTER TABLE tasks ADD COLUMN owner TEXT DEFAULT 'alexandr'\"); } catch (_) { /* already there */ }\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS group_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, chat_title TEXT, from_name TEXT, kind TEXT, text TEXT, file_id TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_jobs (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n agent TEXT, brief TEXT, packs TEXT, status TEXT DEFAULT 'queued',\n result TEXT, done_at TEXT)`);\n// Claim bookkeeping. The old staleness test compared the job's CREATION time, so a\n// job older than two hours could be stolen from a runner that had just claimed it,\n// while a freshly created one could wedge forever. claimed_at is the honest clock.\ntry { await sqlite.execute(\"ALTER TABLE agent_jobs ADD COLUMN claimed_at TEXT\"); } catch (_) { /* already there */ }\ntry { await sqlite.execute(\"ALTER TABLE agent_jobs ADD COLUMN worker TEXT\"); } catch (_) { /* already there */ }\n// Blocked runs (20 Aug 2026): where a policy refusal goes so it cannot vanish with the\n// session that hit it. `resolved` is 1 when one rephrased retry got through — kept anyway,\n// because a step that needs rewriting every day is a brief to fix, not a quirk to route around.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_blocked (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n agent TEXT, step TEXT, brief TEXT, retry TEXT, note TEXT,\n attempts INTEGER DEFAULT 1, resolved INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS news_feedback (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n item_key TEXT, title TEXT, source TEXT, topic TEXT, verdict TEXT, applied INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS news_items (\n key TEXT PRIMARY KEY, title TEXT, source TEXT, topic TEXT, ts TEXT DEFAULT (datetime('now')))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS journal (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n source TEXT, summary TEXT, details TEXT, filed INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY, value TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS day_plan (\n date TEXT, task_id INTEGER, state TEXT DEFAULT 'none', PRIMARY KEY (date, task_id))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS day_plan_text (\n date TEXT PRIMARY KEY, plan TEXT)`);\n// Every outbound Telegram message, with its real outcome. Before this, send()\n// only console.error'd a failure and the endpoint still answered {ok:true}: a\n// Markdown-malformed brief vanished while the run self-reported success. Law 5\n// needs something readable back, so delivery is now a row, not a hope.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS outbox (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, kind TEXT DEFAULT 'send', chars INTEGER,\n ok INTEGER, message_id INTEGER, error TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS chats (\n chat_id INTEGER PRIMARY KEY, username TEXT, first_seen TEXT DEFAULT (datetime('now')))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS editions (\n date TEXT PRIMARY KEY, title TEXT, data TEXT, ts TEXT DEFAULT (datetime('now')))`);\n\nasync function logOut(chatId: number, kind: string, chars: number, ok: boolean, messageId: number | null, error: string | null) {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO outbox (chat_id, kind, chars, ok, message_id, error) VALUES (?,?,?,?,?,?)\",\n args: [chatId ?? 0, kind, chars, ok ? 1 : 0, messageId, error] });\n } catch (e) { console.error(\"outbox write failed\", String(e)); }\n}\n\n// Telegram answers 200-with-ok:false for a bad Markdown entity, so r.ok alone was\n// never proof of anything. Read the body once, judge on body.ok, and record it.\nasync function tg(method: string, params: any) {\n let status = 0, body: any = null, error: string | null = null;\n try {\n const r = await fetch(`${API}/${method}`, { method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify(params) });\n status = r.status;\n body = await r.json().catch(() => null);\n } catch (e) { error = String(e).slice(0, 200); }\n const good = !error && status === 200 && body?.ok === true;\n if (!good) {\n error = error ?? `HTTP ${status} ${String(body?.description ?? \"no body\").slice(0, 200)}`;\n console.error(method, error);\n }\n if (method === \"sendMessage\") {\n await logOut(params?.chat_id, params?.reply_markup ? \"keyboard\" : \"send\",\n String(params?.text ?? \"\").length, good, body?.result?.message_id ?? null, good ? null : error);\n }\n return good ? body.result : null;\n}\n\n// Returns the outcome instead of swallowing it. A Markdown failure is retried once\n// as plain text — a brief that trips on one stray underscore should still arrive,\n// and the outbox records that it took the fallback.\nasync function send(chatId: number, text: string, kind = \"send\") {\n const attempt = async (markdown: boolean) => {\n const body: any = { chat_id: chatId, text };\n if (markdown) body.parse_mode = \"Markdown\";\n try {\n const r = await fetch(`${API}/sendMessage`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify(body) });\n const j = await r.json().catch(() => null);\n if (r.status === 200 && j?.ok === true) return { ok: true, message_id: j.result?.message_id ?? null, error: null };\n return { ok: false, message_id: null, error: `HTTP ${r.status} ${String(j?.description ?? \"no body\").slice(0, 200)}` };\n } catch (e) { return { ok: false, message_id: null, error: String(e).slice(0, 200) }; }\n };\n let res = await attempt(true);\n let usedFallback = false;\n if (!res.ok && /parse|entit|markdown/i.test(res.error ?? \"\")) {\n const plain = await attempt(false);\n if (plain.ok) { usedFallback = true; res = plain; }\n }\n if (!res.ok) console.error(\"sendMessage failed\", res.error);\n await logOut(chatId, usedFallback ? kind + \"/plain-fallback\" : kind, text?.length ?? 0, res.ok, res.message_id, res.error);\n return res;\n}\n\n\n// ---------- the Brain (active only when ANTHROPIC_API_KEY is set) ----------\nconst BRAIN_KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n\nasync function proActive(): Promise {\n const r = await sqlite.execute(\"SELECT value FROM settings WHERE key='pro_until'\");\n return !!r.rows[0] && new Date(r.rows[0].value as string) > new Date();\n}\nconst API_MARK = \"\\n\\n\\u26a1api\";\n\n// A plain text capture becomes real quest(s) IMMEDIATELY — no LLM, free (25 Jul: no more inbox-only\n// lies; 12 Aug: newlines / bullets / \"1.\" / \" ; \" split into separate quests).\n// ---------- intent routing (17 Aug 2026) ----------\n// Not everything Alexandr types is HIS to-do. Three kinds of private message:\n// 1. TASKS — \"add these to the task list: …\" → quests on his board.\n// 2. DIRECTIVES — \"re-forge the plan\", \"check X\", \"remove the last two\" → work FOR CLAUDE.\n// These go to the inbox as kind='directive' and the day-forger (polling every 30 min)\n// EXECUTES them. Before this, \"This was not a quest\" itself became a quest.\n// 3. Plain captures — a noun phrase, a thought → a quest (old behaviour).\nconst ADD_INTENT = /\\b(add|put|log|save|запиши|добавь)\\b[\\s\\S]{0,40}\\b(tasks?|quests?|list|задач)/i;\nconst DIRECTIVE = new RegExp(\n \"^(could you|can you|would you|please (re|go|check|do|fix|update|remove|show|explain)|\" +\n \"regenerate|re-?forge|re-?do|remove|delete|undo|update|check|fix|investigate|show me|explain|\" +\n \"answer|perform|research|find out|what (is|about|happened)|why (is|did|do)|how (is|did|do)|\" +\n \"сделай|проверь|убери|удали|обнови|перегенерируй|разберись|что (с|там|случилось)|почему|\" +\n \"this was not a quest|это не задача)\", \"i\");\nfunction isDirective(raw: string): boolean {\n const t = raw.trim();\n if (ADD_INTENT.test(t)) return false; // explicit task-list intent wins\n if (DIRECTIVE.test(t)) return true;\n if (/\\?\\s*$/.test(t) && /\\b(you|your|ты|тебе)\\b/i.test(t)) return true; // question at the bot\n return false;\n}\n\nfunction splitTasks(raw: string): string[] {\n let body = raw.trim()\n .replace(/^(also\\s+)?(please\\s+)?(let'?s\\s+)?(add|put|log|save)\\s+(these|this|the following)?[\\s\\S]{0,80}?\\b(tasks?|quests?|list)\\b[^\\n]*[:\\n-]?/i, \"\")\n .trim();\n let parts = body.split(/\\r?\\n+/).map((l) => l.trim()).filter(Boolean);\n if (parts.length === 1) parts = body.split(/\\s*;\\s*/).map((l) => l.trim()).filter(Boolean);\n return parts\n .map((l) => l.replace(/^\\s*(?:[-*•·—]|\\d{1,2}[.)])\\s*/, \"\").trim())\n .map((l) => l.replace(/^(todo|task|напомни|добавь(\\s+задачу)?|запиши)[:,\\s-]*/i, \"\").trim())\n // instruction prose is not a task: drop leftover meta-lines when real items exist\n .filter((l, _i, arr) => !(arr.length > 1 && /\\b(task list|forge plan|you can|straight away|где ты можешь)\\b/i.test(l)))\n .filter((l) => l.length > 2)\n .slice(0, 12);\n}\n\n// ── Smart routing (31 Aug 2026, Alexandr: \"broaden its understanding — it should creatively\n// understand whether it's a task, or something to remember in Obsidian\") ─────────────────────\n// Every private message: (1) logged as chatlog for the Archivist → vault daily notes,\n// (2) classified by Haiku when the brain is armed (tiny prompt, ~300 tokens — his explicit\n// 31 Aug authorisation), (3) legacy regex path is the free fast-path and the fallback.\nasync function classify(raw: string): Promise {\n const KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!KEY) return null;\n const sys = `Route one Telegram message from Alexandr to his assistant system. Respond ONLY with JSON, no fences.\nIntents:\n- \"task\": something HE must do later (errand, fix, buy, call...). Extract clean imperative titles, split multiple. {\"intent\":\"task\",\"titles\":[\"...\"],\"reply\":\"<=1 line confirmation\"}\n- \"note\": knowledge/interest to REMEMBER (a thought, link, fact, \"interesting\", \"read later\", \"запомни\") → goes to his Obsidian vault. {\"intent\":\"note\",\"text\":\"\",\"reply\":\"<=1 line\"}\n- \"directive\": an instruction for the ASSISTANT to do/fix/check something now. {\"intent\":\"directive\",\"reply\":\"<=1 line\"}\n- \"hq\": feedback/design/architecture for the HQ session (\"tell HQ...\", system redesign wishes). {\"intent\":\"hq\",\"title\":\"HQ: \",\"reply\":\"<=1 line\"}\n- \"chat\": a question/conversation needing an answer. {\"intent\":\"chat\"}\nRules: he writes EN/RU; titles in the message's language; \"add to tasks X\" = task with title X (strip the meta-words); when torn between task and note: concrete action = task, information = note. Never invent content.`;\n try {\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": KEY, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 400,\n system: sys, messages: [{ role: \"user\", content: raw.slice(0, 1500) }] }),\n });\n if (!r.ok) { console.error(\"classify api\", r.status); return null; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n return JSON.parse(out);\n } catch (e) { console.error(\"classify fail\", String(e).slice(0, 120)); return null; }\n}\n\nasync function makeTasks(chatId: number, titles: string[], viaBrain: boolean) {\n const made: string[] = [], dupes: string[] = [];\n for (const t of titles.slice(0, 12)) {\n const clean = (t.charAt(0).toUpperCase() + t.slice(1)).trim();\n if (clean.length < 3) continue;\n const twin = await findTwin(clean);\n if (twin) { dupes.push(clean.slice(0, 60)); continue; }\n const mx = await sqlite.execute({\n sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [\"fellowship\"] });\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [clean.slice(0, 160), \"captured from Telegram \" + new Date().toISOString().slice(0, 10),\n \"fellowship\", \"\", mx.rows[0].o, laneFor(clean)] });\n made.push(clean.slice(0, 70));\n }\n let msg = made.length\n ? (made.length === 1 ? \"⚔️ Added to the Quest Log:\\n\" : `⚔️ Added ${made.length} quests:\\n`) +\n made.map((t) => \"• \" + t).join(\"\\n\")\n : \"Nothing new — all of those are already on the board.\";\n if (dupes.length) msg += `\\n\\n(skipped as already open: ${dupes.join(\"; \")})`;\n if (made.length) msg += viaBrain ? \"\\n\\nOn the dashboard now.\" : \"\\n\\nOn the dashboard now.\";\n await send(chatId, msg);\n}\n\nasync function smartCapture(chatId: number, text: string) {\n const raw = text.trim();\n // (1) everything is logged for the Archivist → vault daily notes (his 31 Aug rule)\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,1)\",\n args: [chatId, \"chatlog\", raw] });\n // (2) free fast-path: unambiguous regex hits skip the API\n if (ADD_INTENT.test(raw)) {\n const titles = splitTasks(raw);\n if (titles.length) { await makeTasks(chatId, titles, false); return; }\n }\n // (2b) a desktop Gatekeeper is awake → it answers as Claude, on the subscription (quest #112)\n if (await PAL.isAwake()) { await PAL.gateRoute(chatId, raw, true); return; }\n // (3) the brain decides\n const c = await classify(raw);\n if (c?.intent === \"task\" && Array.isArray(c.titles) && c.titles.length) {\n await makeTasks(chatId, c.titles, true); return;\n }\n if (c?.intent === \"note\" ) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"note\", String(c.text ?? raw)] });\n await send(chatId, c.reply || \"🍃 Noted — the Archivist files it into Obsidian by morning.\");\n return;\n }\n if (c?.intent === \"hq\") {\n const title = String(c.title ?? (\"HQ: \" + raw.slice(0, 120)));\n const twin = await findTwin(title);\n if (!twin) await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [title.slice(0, 160), \"for the HQ session — filed from Telegram \" + new Date().toISOString().slice(0, 10),\n \"nazgul\", \"palantir\", 0, \"system\"] });\n await send(chatId, c.reply || \"🏰 Filed for the HQ session — it reads its inbox at every boot.\");\n return;\n }\n if (c?.intent === \"directive\") {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"directive\", raw] });\n await send(chatId, c.reply || \"🧝 Taken as an errand for me — the forge picks it up within the half-hour.\");\n return;\n }\n if (c?.intent === \"chat\") { await PAL.gateRoute(chatId, raw, true); return; } // dark stone: no credits unless /ask\n // (4) brain unarmed or failed → the legacy path\n await captureFallback(chatId, raw);\n}\n\nasync function captureFallback(chatId: number, text: string) {\n const raw = text.trim();\n if (isDirective(raw)) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"directive\", raw],\n });\n await send(chatId, \"🧝 Taken as an errand for me, not a quest for you.\\nThe forge picks it up within the half-hour\" +\n \" — I'll report back when it's done.\");\n return;\n }\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,1)\",\n args: [chatId, \"text\", raw],\n });\n const titles = splitTasks(raw);\n if (!titles.length) { await send(chatId, \"I could not read a task in that — try again?\"); return; }\n\n const made: string[] = [], dupes: string[] = [];\n for (const t of titles) {\n const clean = t.charAt(0).toUpperCase() + t.slice(1);\n const twin = await findTwin(clean);\n if (twin) { dupes.push(clean.slice(0, 60)); continue; }\n const mx = await sqlite.execute({\n sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [\"fellowship\"],\n });\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [clean.slice(0, 160), \"captured from Telegram \" + new Date().toISOString().slice(0, 10),\n \"fellowship\", \"\", mx.rows[0].o, laneFor(clean)],\n });\n made.push(clean.slice(0, 70));\n }\n let msg = made.length\n ? (made.length === 1 ? \"⚔️ Added to the Quest Log:\\n\" : `⚔️ Added ${made.length} quests:\\n`) +\n made.map((t) => \"• \" + t).join(\"\\n\")\n : \"Nothing new — all of those are already on the board.\";\n if (dupes.length) msg += `\\n\\n(skipped as already open: ${dupes.join(\"; \")})`;\n if (made.length) msg += \"\\n\\nOn the dashboard now.\";\n await send(chatId, msg);\n}\n\nasync function brain(chatId: number, text: string) {\n const open = await sqlite.execute(\"SELECT id,title,tier,area,note FROM tasks WHERE status='open' ORDER BY tier,ord\");\n const grp = await sqlite.execute(\"SELECT ts,from_name,text FROM group_log WHERE kind='text' ORDER BY id DESC LIMIT 60\");\n const sys = `You are the Palantír Herald — Alexandr's personal assistant bot on Telegram. Concise, warm, light Lord-of-the-Rings flavor (never overdone). Answer in the user's language — EXCEPT anything posted to the AXIOMA group chat, which is ALWAYS English regardless of the question's language (team rule, no exceptions).\nFacts: Maraletto = family e-commerce business (Shopify; legal entity COTTONPASSION LDA; formerly named Artograph; run with father Sergey). AXIOMA = the work project and its team group chat, which you silently scribe.\nSelf-knowledge: you (this same bot) DO post to the AXIOMA group in exactly two cases — the Monday open-tasks report and the Friday clean-week toast (plus rare messages Alexandr explicitly requests). On 24 Jul a scheduling bug caused duplicated posts; it was fixed with once-per-day guards. If Alexandr reports bot misbehavior, acknowledge honestly and suggest he tell desktop Claude to investigate — never deny actions your other components may have taken.\nClassify the user's message and respond ONLY with JSON, no fences:\n- a task/thought to capture -> {\"action\":\"task\",\"title\":\"...\",\"tier\":\"balrog|nazgul|fellowship|shire\",\"area\":\"Maraletto|Finance|Family|Consulting|Other\",\"reply\":\"one-line confirmation\"}\n- anything else (question, status check, completing tasks, chat) -> {\"action\":\"answer\",\"reply\":\"markdown answer, <=200 words\",\"complete_task_ids\":[ids to mark done, optional]}\nTier guide: balrog=urgent/overdue, nazgul=has deadline, fellowship=this week, shire=someday.\n- anything else may ALSO carry, when he clearly asks for it: \"create_tasks\":[{\"title\",\"tier\",\"area\",\"due\":\"YYYY-MM-DD\"}], \"note\":\"knowledge to remember in his vault\", \"dispatch\":{\"agent\":\"errand-runner\",\"brief\":\"work for a desktop agent, with what done looks like\"}. Never dispatch money moves or AXIOMA posts.\nOPEN QUESTS: ${JSON.stringify(open.rows)}\nRECENT AXIOMA GROUP LOG (newest first): ${JSON.stringify(grp.rows)}\n${await PAL.snapshotContext()}`;\n const pro = await proActive();\n const model = pro ? (Deno.env.get(\"BRAIN_MODEL_PRO\") ?? \"claude-sonnet-4-5\") : (Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\");\n const sysFinal = sys + (pro ? \"\" : \"\\nECONOMY MODE: keep answers brief (<=100 words) — API credits are precious. Depth only when truly needed.\");\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": BRAIN_KEY!, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model, max_tokens: pro ? 2000 : 500,\n system: sysFinal, messages: [{ role: \"user\", content: text }] }),\n });\n if (!r.ok) { console.error(\"anthropic\", r.status, await r.text()); await captureFallback(chatId, text); return; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n let j: any;\n try { j = JSON.parse(out); } catch { await send(chatId, out.slice(0, 3900) || \"🌫 The stone is clouded.\"); return; }\n if (j.action === \"task\" && j.title) {\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [j.tier ?? \"fellowship\"] });\n await sqlite.execute({ sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [j.title, \"via bot \" + new Date().toISOString().slice(0,10), j.tier ?? \"fellowship\", j.area ?? \"\", mx.rows[0].o, laneFor(j.title)] });\n await send(chatId, (j.reply || \"⚔️ Taken to the Quest Log.\") + API_MARK);\n } else {\n for (const id of j.complete_task_ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE tasks SET status='done', done_at=datetime('now') WHERE id=?\", args: [Number(id)] });\n }\n const did = await PAL.applyBrainActions(j, chatId);\n await send(chatId, ((j.reply || \"…\") + (did.length ? \"\\n\\n✅ \" + did.join(\" · \") : \"\") + API_MARK).slice(0, 3900));\n }\n}\n\n\n// ---------- interactive morning form ----------\nconst STATES = [\"none\", \"today\", \"done\"];\nconst ICON: Record = { none: \"⬜\", today: \"📅\", done: \"✅\" };\n\n// Normalised title used for duplicate detection. The Herald re-imported five\n// already-completed tasks on 2026-07-26 because nothing checked whether an\n// equivalent task existed. Titles drift slightly (\"Review Palantir dashboard\n// preview\" -> \"... v4\"), so compare on significant words, not exact strings.\nfunction titleKey(t: string, width = 6): string {\n return String(t || \"\").toLowerCase()\n .replace(/[^a-z0-9\\u0400-\\u04ff ]+/g, \" \")\n .split(/\\s+/)\n .map((w) => w.replace(/s$/, \"\")) // crude stem: \"lists\" == \"list\", \"forms\" == \"form\"\n .filter((w) => w.length > 3 && ![\"from\",\"with\",\"that\",\"this\",\"your\",\"the\",\"and\",\"for\",\"new\",\"page\",\"fro\"].includes(w))\n .sort().slice(0, width).join(\" \");\n}\nasync function findTwin(title: string): Promise {\n const key = titleKey(title);\n if (!key) return null;\n const r = await sqlite.execute(\n \"SELECT id,title,status,done_at FROM tasks WHERE done_at IS NULL OR done_at > datetime('now','-21 days')\");\n for (const row of r.rows as any[]) {\n const k2 = titleKey(row.title as string);\n if (!k2) continue;\n const a = new Set(key.split(\" \")), b = new Set(k2.split(\" \"));\n let hit = 0; a.forEach((w) => { if (b.has(w)) hit++; });\n const overlap = hit / Math.max(a.size, b.size);\n if (overlap >= 0.6) return row;\n }\n return null;\n}\n\n// Telegram accepts far more rows than this; 10 was the arbitrary cap that made the\n// two newest quests (#54, #55) impossible to tick on 19 Aug while the rollover had\n// already pre-selected one of them — the keyboard and the day plan openly disagreed.\n// Re-ordering could not fix it: promoting any quest into the ten pushed another out.\nconst KEYBOARD_MAX_ROWS = 40;\n\nasync function buildKeyboard(date: string) {\n const tasks = await sqlite.execute(\"SELECT id,title FROM tasks WHERE status='open' AND COALESCE(owner,'alexandr')='alexandr' ORDER BY CASE tier WHEN 'balrog' THEN 0 WHEN 'nazgul' THEN 1 WHEN 'fellowship' THEN 2 ELSE 3 END, ord\");\n const st = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date=?\", args: [date] });\n const map: Record = {};\n for (const r of st.rows) map[r.task_id as number] = r.state as string;\n // Anything he picked yesterday and did not finish is already marked 'today'\n // by the rollover, so it sorts to the top and arrives pre-selected. Before\n // this, unfinished picks simply vanished at midnight.\n const carried = new Set();\n const y = await sqlite.execute({\n sql: `SELECT dp.task_id FROM day_plan dp JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = date(?, '-1 day') AND dp.state = 'today' AND t.status = 'open'`,\n args: [date] });\n for (const r of y.rows as any[]) carried.add(r.task_id as number);\n // Anything already carried or already ticked must be reachable, so it sorts first;\n // the tier/ord order below it is untouched (Array.sort is stable).\n const priority = (t: any) => (carried.has(t.id) ? 2 : 0) + ((map[t.id] && map[t.id] !== \"none\") ? 1 : 0);\n const sorted = (tasks.rows as any[]).slice().sort((a, b) => priority(b) - priority(a));\n const shown = sorted.slice(0, KEYBOARD_MAX_ROWS);\n const rows = shown.map((tk: any) => [{\n text: `${ICON[map[tk.id] ?? \"none\"]}${carried.has(tk.id) ? \" ↻\" : \"\"} ${String(tk.title).slice(0, 40)}`,\n callback_data: `t:${tk.id}`,\n }]);\n // If a cap is ever hit again, say so on the keyboard itself rather than dropping\n // quests in silence — a truncation nobody can see reads as \"that is all there is\".\n if (sorted.length > shown.length) {\n rows.push([{ text: `… ${sorted.length - shown.length} more open, not shown`, callback_data: \"noop\" }]);\n }\n rows.push([{ text: \"🏁 Forge the plan\", callback_data: \"forge\" }]);\n return { inline_keyboard: rows };\n}\n\nasync function forgePlanBrain(chatId: number, date: string) {\n const forceBrain = true;\n return forgePlanInner(chatId, date, forceBrain);\n}\n\nasync function forgePlan(chatId: number, date: string) {\n return forgePlanInner(chatId, date, false);\n}\n\nasync function forgePlanInner(chatId: number, date: string, forceBrain: boolean) {\n const st = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date=?\", args: [date] });\n const doneIds = st.rows.filter((r: any) => r.state === \"done\").map((r: any) => r.task_id);\n const todayIds = st.rows.filter((r: any) => r.state === \"today\").map((r: any) => r.task_id);\n for (const id of doneIds) {\n await sqlite.execute({ sql: \"UPDATE tasks SET status='done', done_at=datetime('now') WHERE id=?\", args: [id] });\n }\n if (!todayIds.length) { await send(chatId, doneIds.length ? \"✅ Marked done. No battles chosen for today — a quiet day, then.\" : \"No battles chosen. The stone rests.\"); return; }\n const q = await sqlite.execute({ sql: `SELECT id,title,tier,area,note FROM tasks WHERE id IN (${todayIds.map(() => \"?\").join(\",\")})`, args: todayIds });\n\n // FREE PATH (default): record the choice, tell desktop Claude to forge the plan and start working.\n if (!forceBrain && Deno.env.get(\"FORGE_MODE\") !== \"brain\") {\n const titles = q.rows.map((r: any) => \"• \" + r.title).join(\"\\n\");\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\",\n args: [date, \"AWAITING_DESKTOP_FORGE\\n\" + titles],\n });\n await sqlite.execute({\n sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [\"morning form\", `Alexandr chose ${todayIds.length} quest(s) for ${date}`,\n \"CHOSEN:\\n\" + q.rows.map((r: any) => `#${r.id} ${r.title} [${r.tier}/${r.area}] ${r.note ?? \"\"}`).join(\"\\n\") +\n (doneIds.length ? `\\nMARKED DONE: ${doneIds.join(\", \")}` : \"\") +\n \"\\nACTION: forge the day plan (order, time slots, 🤝 what Claude takes vs 🗡 yours alone), send it via /send, and START the items Claude can take.\"],\n });\n await send(chatId, \"🗺 *Chosen for today:*\\n\" + titles +\n \"\\n\\nDesktop Claude will forge the plan and begin what it can take — free of API credits. (Need it forged right now in the cloud? send `/forge` ⚡)\");\n return;\n }\n if (!BRAIN_KEY) { await send(chatId, \"Plan chosen: \" + q.rows.map((r: any) => r.title).join(\" · \")); return; }\n const sys = `You are the Palantír Herald, planning Alexandr's day. Light LOTR flavor, concise. He runs Maraletto (family e-commerce, Shopify, with father Sergey) and works as an AI consultant.\nGiven his chosen tasks for today, produce a short battle plan (<=180 words):\n1) sensible order with rough time slots (morning/midday/evening),\n2) \"🤝 I can take:\" — parts Claude/the Herald can do autonomously or draft (research, analysis, documents, reconciliation, outreach drafts),\n3) \"🗡 Yours alone:\" — payments, calls, physical-world, decisions.\nEnd with one short encouraging line.`;\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\", headers: { \"x-api-key\": BRAIN_KEY!, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 700, system: sys,\n messages: [{ role: \"user\", content: \"Today's chosen tasks: \" + JSON.stringify(q.rows) }] }),\n });\n let plan = \"Plan for today: \" + q.rows.map((r: any) => r.title).join(\" · \");\n if (r.ok) plan = ((await r.json()).content?.[0]?.text ?? plan).trim();\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\", args: [date, plan] });\n await send(chatId, \"🗺 *The day's battle plan*\\n\\n\" + plan.slice(0, 3700) + API_MARK);\n}\n\nasync function handleCallback(cb: any) {\n const date = new Date().toISOString().slice(0, 10);\n const chatId = cb.message?.chat?.id;\n try {\n if (String(cb.data).startsWith(\"n:\")) {\n const [, verdict, key] = String(cb.data).split(\":\");\n const it = await sqlite.execute({ sql: \"SELECT * FROM news_items WHERE key=?\", args: [key] });\n const row: any = it.rows[0] ?? {};\n await sqlite.execute({\n sql: \"INSERT INTO news_feedback (item_key,title,source,topic,verdict) VALUES (?,?,?,?,?)\",\n args: [key, row.title ?? \"\", row.source ?? \"\", row.topic ?? \"\", verdict] });\n const label: Record = { up:\"👍 more like this\", down:\"👎 less of this\", star:\"⭐ important\", block:\"🚫 never again\" };\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: label[verdict] ?? \"noted\" });\n return;\n }\n if (cb.data === \"noop\") { await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"Reorder those quests to bring them onto the list.\" }); return; }\n if (cb.data === \"forge\") {\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"Forging…\" });\n await forgePlan(chatId, date);\n return;\n }\n if (String(cb.data).startsWith(\"t:\")) {\n const id = Number(String(cb.data).slice(2));\n const cur = await sqlite.execute({ sql: \"SELECT state FROM day_plan WHERE date=? AND task_id=?\", args: [date, id] });\n const next = STATES[(STATES.indexOf((cur.rows[0]?.state as string) ?? \"none\") + 1) % STATES.length];\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan (date, task_id, state) VALUES (?,?,?)\", args: [date, id, next] });\n await tg(\"editMessageReplyMarkup\", { chat_id: chatId, message_id: cb.message.message_id, reply_markup: await buildKeyboard(date) });\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id });\n }\n } catch (e) { console.error(\"callback\", e); await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"hiccup — try again\" }); }\n}\n\n// Forwarded posts and bare media carry no m.text (only m.caption, or nothing at\n// all) — before these three helpers existed, such a message fell through every\n// branch of the private-chat handler and vanished with nothing written to inbox\n// (task #191, 5 Sep 2026: he forwarded a post, only his own follow-up chat line\n// survived). These pull out whatever payload the message DOES carry.\nfunction extractForwardInfo(m: any): string | null {\n const fo = m.forward_origin;\n if (!fo) return null;\n const when = fo.date ? new Date(fo.date * 1000).toISOString().slice(0, 16).replace(\"T\", \" \") : \"\";\n const stamp = when ? ` · ${when}` : \"\";\n if (fo.type === \"channel\") return `forwarded from channel \"${fo.chat?.title ?? \"?\"}\"${stamp}`;\n if (fo.type === \"chat\") return `forwarded from chat \"${fo.sender_chat?.title ?? \"?\"}\"${stamp}`;\n if (fo.type === \"user\") return `forwarded from ${fo.sender_user?.first_name ?? \"?\"} ${fo.sender_user?.last_name ?? \"\"}`.trim() + stamp;\n if (fo.type === \"hidden_user\") return `forwarded from ${fo.sender_user_name ?? \"a hidden user\"}${stamp}`;\n return `forwarded${stamp}`;\n}\nfunction extractLinks(text: string, entities: any[] | undefined): string[] {\n const out: string[] = [];\n for (const e of entities ?? []) {\n if (e.type === \"text_link\" && e.url) out.push(e.url);\n else if (e.type === \"url\" && text) out.push(text.slice(e.offset, e.offset + e.length));\n }\n return out;\n}\nfunction mediaKind(m: any): { kind: string; fileId: string } | null {\n if (m.photo?.length) return { kind: \"photo\", fileId: m.photo[m.photo.length - 1].file_id };\n if (m.video) return { kind: \"video\", fileId: m.video.file_id };\n if (m.document) return { kind: \"document\", fileId: m.document.file_id };\n if (m.animation) return { kind: \"animation\", fileId: m.animation.file_id };\n if (m.sticker) return { kind: \"sticker\", fileId: m.sticker.file_id };\n return null;\n}\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\napp.post(\"/webhook\", async (c) => {\n if (c.req.header(\"X-Telegram-Bot-Api-Secret-Token\") !== WEBHOOK_SECRET) return c.text(\"forbidden\", 401);\n const u = await c.req.json();\n if (u.callback_query) { await handleCallback(u.callback_query); return c.text(\"ok\"); }\n const m = u.message;\n if (!m) return c.text(\"ok\");\n const chatId = m.chat.id;\n\n // ---- group chats: listen silently, never reply ----\n if (m.chat.type === \"group\" || m.chat.type === \"supergroup\") {\n const from = [m.from?.first_name, m.from?.last_name].filter(Boolean).join(\" \") || m.from?.username || \"?\";\n const kind = m.voice || m.audio ? \"voice\" : (m.text ? \"text\" : \"other\");\n const fid = (m.voice ?? m.audio)?.file_id ?? null;\n await sqlite.execute({\n sql: \"INSERT INTO group_log (chat_id, chat_title, from_name, kind, text, file_id) VALUES (?,?,?,?,?,?)\",\n args: [chatId, m.chat.title ?? \"\", from, kind, m.text ?? m.caption ?? \"\", fid],\n });\n await sqlite.execute(\"DELETE FROM group_log WHERE ts < datetime('now','-45 days')\");\n\n // AXIOMA PAUSED (5 Sep 2026, task #184): the log above still runs — he asked for silence,\n // not amnesia — but nothing below it does. An @mention gets no quest and no reply.\n if (AXIOMA_PAUSED) return c.text(\"ok\");\n\n // Law 3 says never speak in AXIOMA UNASKED. An explicit @mention is being asked.\n // Approved by Alexandr 2026-07-31 (quest #33). Free: no LLM, plain parsing.\n const txt = (m.text ?? m.caption ?? \"\").trim();\n const MENTION = /@calude_assistant_bot|@claude_assistant_bot/i;\n const WANTS_TASK = /\\b(log|add|record|note|запиши|залогируй|добавь)\\b.{0,20}\\b(task|todo|задач)/i;\n if (MENTION.test(txt) && WANTS_TASK.test(txt)) {\n // The task text is either after the verb, or — the common case — the message\n // being replied to (\"Need to be filled by Danny\" ← \"@bot log this task for Danny\").\n const replied = (m.reply_to_message?.text ?? m.reply_to_message?.caption ?? \"\").trim();\n let body = txt.replace(MENTION, \"\")\n .replace(/\\b(please\\s+)?(log|add|record|note|запиши|залогируй|добавь)\\b\\s*(this\\s+)?(task|todo|задачу|задача)?\\s*/i, \"\")\n .trim();\n // \"for Danny\" / \"для Дэнни\" → owner, and strip it from the title\n let owner = \"unassigned\";\n const who = body.match(/\\b(?:for|для)\\s+([A-Za-z\\u0400-\\u04ff]+)/i);\n if (who) { owner = who[1].toLowerCase(); body = body.replace(who[0], \"\").trim(); }\n const ROSTER: Record = { danny: \"danny\", дэнни: \"danny\", дени: \"danny\",\n sergey: \"sergey\", sergio: \"sergey\", сергей: \"sergey\", серхио: \"sergey\",\n alex: \"alexandr\", alexandr: \"alexandr\", саша: \"alexandr\", алексадр: \"alexandr\" };\n owner = ROSTER[owner] ?? owner;\n const title = (body && body.length > 3) ? body : replied;\n if (!title) {\n await send(chatId, \"I can log it — reply to the message that describes the task, or write it after the mention.\");\n return c.text(\"ok\");\n }\n const twin = await findTwin(title);\n if (twin) {\n await send(chatId, `Already on the board: “${String(twin.title).slice(0, 70)}”.`);\n return c.text(\"ok\");\n }\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier='fellowship'\" });\n const r = await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?) RETURNING id\",\n args: [title.slice(0, 160), `AXIOMA group · asked by ${from} · ${new Date().toISOString().slice(0, 10)}`,\n \"fellowship\", \"axioma\", mx.rows[0].o, owner] });\n await send(chatId, `📋 Logged for *${owner === \"unassigned\" ? \"the team\" : owner}*: ${title.slice(0, 90)}\\n_#${r.rows[0].id} · it will appear in Monday's report._`);\n return c.text(\"ok\");\n }\n return c.text(\"ok\"); // otherwise: listen silently, never reply\n }\n\n // ---- private chats: only the owner (first registered) is served ----\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const ownerId = own.rows[0]?.chat_id;\n if (ownerId && chatId !== ownerId) return c.text(\"ok\"); // strangers: silent ignore\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO chats (chat_id, username) VALUES (?,?)\", args: [chatId, m.from?.username ?? \"\"] });\n\n if (m.voice || m.audio) {\n const f = m.voice ?? m.audio;\n await sqlite.execute({ sql: \"INSERT INTO inbox (chat_id, kind, text, file_id) VALUES (?,?,?,?)\", args: [chatId, \"voice\", m.caption ?? \"\", f.file_id] });\n await send(chatId, \"🎙 Heard. The scribes will transcribe it at the next watch.\");\n return c.text(\"ok\");\n }\n if (m.text === \"/pro\") {\n const until = new Date(Date.now() + 2 * 3600e3).toISOString();\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO settings (key, value) VALUES ('pro_until', ?)\", args: [until] });\n await send(chatId, \"🔥 Pro mode for 2 hours — deeper counsel, higher cost. /eco to end early.\");\n return c.text(\"ok\");\n }\n if (m.text === \"/forge\") {\n const date = new Date().toISOString().slice(0, 10);\n await send(chatId, \"⚡ Forging in the cloud…\");\n const prev = Deno.env.get(\"FORGE_MODE\");\n await forgePlanBrain(chatId, date);\n return c.text(\"ok\");\n }\n if (m.text === \"/eco\") {\n await sqlite.execute(\"DELETE FROM settings WHERE key='pro_until'\");\n await send(chatId, \"🌿 Economy mode — brief and thrifty.\");\n return c.text(\"ok\");\n }\n if (m.text) {\n // API COST POLICY: brain only when clearly addressed — question mark, /ask, or \"bot ...\" prefix.\n // Everything else = free capture; the desktop Herald processes it on subscription.\n const txt = m.text.trim();\n if (await PAL.handleCommand(chatId, txt)) return c.text(\"ok\"); // /money /fleet … — free, no LLM\n // COST POLICY: the cloud brain wakes ONLY on an explicit /ask (or \"bot:\" prefix) — credits.\n const explicit = /^\\/ask\\b/i.test(txt) || /^(bot|бот)[,:]/i.test(txt);\n if (BRAIN_KEY && explicit) {\n await brain(chatId, txt.replace(/^(\\/ask|bot|бот)[,:]?\\s*/i, \"\"));\n } else {\n // 31 Aug 2026: every private message goes through the smart router (Haiku classify:\n // task / note→Obsidian / directive / HQ / chat) — his explicit authorisation. The old\n // \"questions wait for the next watch\" economy path is retired; chatlog rows feed the vault.\n await smartCapture(chatId, txt);\n }\n return c.text(\"ok\");\n }\n\n // No m.text: a forwarded post, a media message, or a link-only share. Extract\n // whatever is there (forward origin, url entities, media caption) so it lands\n // in inbox instead of vanishing — see extractForwardInfo/extractLinks/mediaKind above.\n const fwdMedia = mediaKind(m);\n const fwdInfo = extractForwardInfo(m);\n const fwdLinks = extractLinks(m.caption ?? \"\", m.caption_entities);\n const fwdCaption = (m.caption ?? \"\").trim();\n if (fwdMedia || fwdInfo || fwdLinks.length) {\n // An album is delivered as several separate updates sharing media_group_id, usually with\n // the caption on only one of them. Every item is still saved (so every file_id survives),\n // but only the first one seen replies/routes — otherwise one forward reads as several.\n const groupId: string | null = m.media_group_id ?? null;\n let alreadySeen = false;\n if (groupId) {\n const dup = await sqlite.execute({ sql: \"SELECT id FROM inbox WHERE group_id=? LIMIT 1\", args: [groupId] });\n alreadySeen = dup.rows.length > 0;\n }\n const parts: string[] = [];\n if (fwdCaption) parts.push(fwdCaption);\n if (fwdLinks.length) parts.push(\"Link: \" + fwdLinks.join(\" \"));\n if (fwdInfo) parts.push(fwdInfo);\n if (fwdMedia) parts.push(`[attached: ${fwdMedia.kind}]`);\n const combined = parts.join(\"\\n\");\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, file_id, group_id) VALUES (?,?,?,?,?)\",\n args: [chatId, fwdMedia?.kind ?? \"forward\", combined, fwdMedia?.fileId ?? null, groupId],\n });\n if (alreadySeen) return c.text(\"ok\");\n if (fwdCaption || fwdLinks.length) {\n await smartCapture(chatId, combined);\n } else {\n await send(chatId, `📎 Saved${fwdInfo ? \" — \" + fwdInfo : \"\"}${fwdMedia ? ` (${fwdMedia.kind}, no caption — kept, but I can't read it yet)` : \"\"}.`);\n }\n return c.text(\"ok\");\n }\n\n await send(chatId, \"The stone does not yet understand this kind of message — send text or a voice note.\");\n return c.text(\"ok\");\n});\n\n// Morning Herald: deliver brief + interactive task picker to the owner\napp.post(\"/morning-form\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { brief } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" }, 400);\n const briefRes = brief ? await send(chatId, String(brief).slice(0, 3900), \"brief\")\n : { ok: true, message_id: null, error: null };\n const date = new Date().toISOString().slice(0, 10);\n const picker = await tg(\"sendMessage\", { chat_id: chatId, text: \"🗡 Choose today's battles — tap to cycle: ⬜ skip · 📅 today · ✅ already done. Then forge the plan.\",\n reply_markup: await buildKeyboard(date) });\n // The Herald could not prove its own brief arrived: this endpoint answered {ok:true}\n // whatever Telegram said. Now ok means both messages are really in the chat.\n const good = briefRes.ok && !!picker;\n return c.json({ ok: good, brief_message_id: briefRes.message_id,\n picker_message_id: picker?.message_id ?? null,\n error: good ? null : (briefRes.error ?? \"picker message was rejected by Telegram\") },\n good ? 200 : 502);\n});\napp.get(\"/dayplan\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM day_plan_text ORDER BY date DESC LIMIT 1\");\n return c.json(r.rows[0] ?? {});\n});\n\n// Today's choices from the morning form — any session can read what Alexandr picked\napp.get(\"/dayselection\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const date = c.req.query(\"date\") ?? new Date().toISOString().slice(0, 10);\n const r = await sqlite.execute({\n sql: `SELECT dp.task_id, dp.state, t.title, t.tier, t.area, t.note\n FROM day_plan dp LEFT JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = ? AND dp.state != 'none'`, args: [date] });\n const plan = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date = ?\", args: [date] });\n return c.json({ date, picks: r.rows, plan: plan.rows[0]?.plan ?? null });\n});\n// The plan column is text, but the palantir skill and the day-forger charter both\n// document an OBJECT ({slots,claude,yours,notes}). Binding that straight into SQLite\n// stored the literal string \"[object Object]\" and still answered {ok:true} — the day\n// plan was destroyed and the dashboard showed garbage, three mornings running. The\n// val now renders the documented shape instead of arguing with the documentation.\nfunction renderPlan(plan: any): string {\n if (plan == null) return \"\";\n if (typeof plan === \"string\") return plan;\n if (typeof plan !== \"object\") return String(plan);\n const out: string[] = [];\n for (const slot of (Array.isArray(plan.slots) ? plan.slots : [])) {\n const when = slot?.when ?? slot?.time ?? slot?.label ?? \"\";\n if (when) out.push(String(when));\n for (const it of (Array.isArray(slot?.items) ? slot.items : [])) out.push(\"• \" + it);\n out.push(\"\");\n }\n const block = (title: string, arr: any) => {\n if (!Array.isArray(arr) || !arr.length) return;\n out.push(title);\n for (const it of arr) out.push(\"• \" + it);\n out.push(\"\");\n };\n block(\"🤝 Claude takes\", plan.claude);\n block(\"🗡 Yours alone\", plan.yours);\n block(\"📝 Notes\", plan.notes);\n const text = out.join(\"\\n\").replace(/\\n{3,}/g, \"\\n\\n\").trim();\n // An object shaped like nothing we know is still better kept than silently lost.\n return text || JSON.stringify(plan);\n}\n\n// Desktop session stores the forged plan (free) so it shows on the dashboard\napp.post(\"/dayplan\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { date, plan } = await c.req.json();\n const text = renderPlan(plan);\n if (!text.trim()) return c.json({ ok: false, error: \"plan is empty — nothing was stored\" }, 400);\n const d = date ?? new Date().toISOString().slice(0, 10);\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\", args: [d, text] });\n // Read it back here so a caller does not have to do Law 5 by hand every morning.\n const back = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date=?\", args: [d] });\n const stored = String(back.rows[0]?.plan ?? \"\");\n return c.json({ ok: stored === text, date: d, chars: stored.length, preview: stored.slice(0, 140) },\n stored === text ? 200 : 500);\n});\n\n// AGENT BUS — HQ dispatches jobs, specialists claim and answer them.\n// A job claimed but never finished used to be listed by NOTHING: /agent/jobs served\n// only 'queued', /agent/results only 'done'/'failed'. Jobs 6-10 sat in 'running' for\n// two days while six runner passes reported \"queue empty\", and one of them carried\n// the accountant email with a same-day deadline. Anything abandoned now comes back.\nconst STALE_CLAIM_HOURS = 2;\nconst STALE_SQL = `(status='running' AND COALESCE(claimed_at, ts) < datetime('now','-${STALE_CLAIM_HOURS} hours'))`;\n\n// Both the secret in ?secret= (what every other endpoint uses) and in the body are\n// accepted here: the generated runner prompt sent it in the body, every claim 401'd,\n// and the bus was dead on arrival in complete silence.\nasync function busAuth(c: any, body?: any) {\n if (c.req.query(\"secret\") === PULL_SECRET) return true;\n return !!body && body.secret === PULL_SECRET;\n}\n\n// A brief that repeats work already delivered. Jobs 2-5 (17 Aug) and 11-13 (19 Aug)\n// were all duplicate dispatches, caught only because a human read reports/day/ by hand.\nasync function findJobTwin(agent: string, brief: string) {\n const key = titleKey(brief, 14);\n const quests = String(brief).match(/#\\d{1,4}/g) ?? [];\n const r = await sqlite.execute({\n sql: `SELECT id, ts, status, done_at, substr(brief,1,220) AS brief, substr(COALESCE(result,''),1,400) AS result\n FROM agent_jobs WHERE agent=? AND status IN ('done','running')\n AND ts > datetime('now','-14 days') ORDER BY id DESC LIMIT 40`,\n args: [agent] });\n for (const row of r.rows as any[]) {\n const q2 = String(row.brief).match(/#\\d{1,4}/g) ?? [];\n if (quests.length && q2.length && quests.some((q) => q2.includes(q))) return row;\n const k2 = titleKey(String(row.brief), 14);\n if (!key || !k2) continue;\n const a = new Set(key.split(\" \")), b = new Set(k2.split(\" \"));\n let hit = 0; a.forEach((w) => { if (b.has(w)) hit++; });\n if (hit / Math.max(a.size, b.size) >= 0.6) return row;\n }\n return null;\n}\n\napp.post(\"/agent/job\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { agent, brief, packs } = body;\n if (!agent || !brief) return c.json({ ok: false, error: \"agent and brief required\" }, 400);\n const twin = await findJobTwin(agent, String(brief));\n const r = await sqlite.execute({ sql: \"INSERT INTO agent_jobs (agent, brief, packs) VALUES (?,?,?) RETURNING id\",\n args: [agent, brief, JSON.stringify(packs ?? [])] });\n return c.json({\n ok: true, id: r.rows[0].id,\n duplicate_warning: twin ? {\n job: twin.id, status: twin.status, dispatched: twin.ts, done_at: twin.done_at,\n brief: twin.brief, result: twin.result,\n note: \"A very similar brief was already dispatched to this agent. Read that job's result before running this one, or close this job as a duplicate.\",\n } : null,\n });\n});\n\napp.get(\"/agent/jobs\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const agent = c.req.query(\"agent\");\n const r = agent\n ? await sqlite.execute({ sql: `SELECT * FROM agent_jobs WHERE (status='queued' OR ${STALE_SQL}) AND agent=? ORDER BY id`, args: [agent] })\n : await sqlite.execute(`SELECT * FROM agent_jobs WHERE status='queued' OR ${STALE_SQL} ORDER BY id`);\n return c.json(r.rows);\n});\n\n// The window that did not exist: every job, whatever its status, plus an explicit\n// stranded list. One call now answers \"is anything stuck?\" — it used to be unanswerable.\napp.get(\"/agent/status\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const counts = await sqlite.execute(\"SELECT status, COUNT(*) AS n FROM agent_jobs GROUP BY status\");\n const stranded = await sqlite.execute(\n `SELECT id, ts, claimed_at, agent, worker, substr(brief,1,200) AS brief FROM agent_jobs WHERE ${STALE_SQL} ORDER BY id`);\n const running = await sqlite.execute(\n \"SELECT id, ts, claimed_at, agent, worker, substr(brief,1,200) AS brief FROM agent_jobs WHERE status='running' ORDER BY id\");\n const recent = await sqlite.execute(\n \"SELECT id, ts, agent, status, claimed_at, worker, done_at, substr(brief,1,160) AS brief FROM agent_jobs ORDER BY id DESC LIMIT 50\");\n const byStatus: Record = {};\n for (const r of counts.rows as any[]) byStatus[String(r.status)] = Number(r.n);\n return c.json({ counts: byStatus, stranded_hours: STALE_CLAIM_HOURS,\n stranded: stranded.rows, running: running.rows, recent: recent.rows });\n});\n\nimport { mountBanking } from \"./banking.ts\";\nimport { mountVaultRoutes } from \"./vault-routes.ts\";\nimport { mountPalantir } from \"./palantir-routes.ts\";\nimport { mountNews } from \"./news-routes.ts\";\nimport { mountExport } from \"./export-routes.ts\";\nmountBanking(app, sqlite, PULL_SECRET);\nmountVaultRoutes(app, sqlite, PULL_SECRET, busAuth);\nmountNews(app, sqlite, PULL_SECRET, tg);\nmountExport(app, sqlite, PULL_SECRET); // #186: full-history export routes\n// HQ 1-2 Sep 2026: snapshot + free commands (#110), page picker/forge (#98), presence + gate (#112)\nconst PAL = mountPalantir(app, sqlite, PULL_SECRET, busAuth, { send, tg, forgePlan, forgePlanBrain });\n\n// ── Blocked runs (20 Aug 2026) ────────────────────────────────────────────────\n// Alexandr: \"some of our agents are stuck because the model flagged their attempts as\n// violating the policies… let's implement a loop that solves such problems.\"\n// A refused run is the one failure that leaves NO trace: the refusal happens before the\n// agent reaches its journal/runs.jsonl step, so the ledger shows nothing and the silence\n// looks like a quiet day. This table is where a block goes to survive its own session.\n// Doctrine lives in memory/packs/when-blocked.md — one rephrased retry, never a third.\napp.post(\"/agent/blocked\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { agent, step, brief, retry, note } = body;\n const attempts = Number(body.attempts ?? 1);\n const resolved = body.resolved ? 1 : 0;\n if (!agent || !step) return c.json({ ok: false, error: \"agent and step are required\" }, 400);\n const r = await sqlite.execute({\n sql: `INSERT INTO agent_blocked (agent, step, brief, retry, note, attempts, resolved)\n VALUES (?,?,?,?,?,?,?) RETURNING id`,\n args: [String(agent), String(step), String(brief ?? \"\"), String(retry ?? \"\"),\n String(note ?? \"\"), attempts, resolved],\n });\n const id = Number((r.rows[0] as any).id ?? (r.rows[0] as any)[0]);\n // A block that the rewrite rescued is bookkeeping, not news — it is recorded so the\n // Wright can see a brief that needs rephrasing EVERY day and fix it at the source,\n // but it must never interrupt him. Only an unresolved block is worth a nudge.\n return c.json({ ok: true, id, resolved: !!resolved, notify: !resolved });\n});\n\n// Open blocks, newest first. The Herald reads this each morning; the Steward audits it.\napp.get(\"/agent/blocked\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const open = await sqlite.execute(\n \"SELECT * FROM agent_blocked WHERE resolved=0 ORDER BY id DESC LIMIT 50\");\n // Repeat offenders: the same step blocking again and again is a badly written brief,\n // not bad luck. Surfacing the count is what turns a workaround into a real fix.\n const repeats = await sqlite.execute(\n `SELECT agent, step, COUNT(*) AS n, MAX(ts) AS last FROM agent_blocked\n GROUP BY agent, step HAVING n > 1 ORDER BY n DESC LIMIT 20`);\n return c.json({ open: open.rows, repeat_offenders: repeats.rows });\n});\n\n// Close one out — the Wright after fixing the brief, or Alexandr deciding it is a real no.\napp.post(\"/agent/blocked/resolve\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, note } = body;\n await sqlite.execute({\n sql: \"UPDATE agent_blocked SET resolved=1, note=COALESCE(NULLIF(?,''), note) WHERE id=?\",\n args: [String(note ?? \"\"), Number(id)] });\n const back = await sqlite.execute({ sql: \"SELECT * FROM agent_blocked WHERE id=?\", args: [Number(id)] });\n return c.json({ ok: true, row: back.rows[0] ?? null });\n});\n\n// Claim = the missing piece for a polling worker: without it, two overlapping runner\n// passes would both execute the same job. First claim wins; a claim older than 2h is\n// considered abandoned and can be re-claimed (a crashed run must not wedge the queue).\n// Staleness is measured from the CLAIM, not from job creation — the old test let a\n// two-hour-old job be stolen from a runner that had only just picked it up.\napp.post(\"/agent/claim\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, worker } = body;\n const exists = await sqlite.execute({ sql: \"SELECT status FROM agent_jobs WHERE id=?\", args: [Number(id)] });\n if (!exists.rows.length) return c.json({ ok: false, error: `no job ${id}` }, 404);\n const r = await sqlite.execute({\n sql: `UPDATE agent_jobs SET status='running', claimed_at=datetime('now'), worker=?\n WHERE id=? AND (status='queued' OR ${STALE_SQL})`,\n args: [String(worker ?? \"runner\"), Number(id)] });\n const claimed = (r.rowsAffected ?? 0) > 0;\n return c.json({ ok: true, claimed, id: Number(id),\n was: exists.rows[0].status,\n reason: claimed ? null : `job is ${exists.rows[0].status} and not stale — not claimable` });\n});\n\napp.post(\"/agent/result\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, result, ok } = body;\n const before = await sqlite.execute({ sql: \"SELECT status FROM agent_jobs WHERE id=?\", args: [Number(id)] });\n if (!before.rows.length) return c.json({ ok: false, error: `no job ${id}` }, 404);\n const status = ok === false ? \"failed\" : \"done\";\n await sqlite.execute({ sql: \"UPDATE agent_jobs SET status=?, result=?, done_at=datetime('now') WHERE id=?\",\n args: [status, result ?? \"\", Number(id)] });\n return c.json({ ok: true, id: Number(id), was: before.rows[0].status, now: status });\n});\n\n// #186: paging for GET /agent/results and GET /journal?all=1 — ?limit= (clamped 1..500)\n// and ?before= (rows with id < before). Same guard as briefCap below: Number(\"abc\") is\n// NaN and Math.min(NaN, 500) is NaN → \"LIMIT NaN\", so anything that is not a finite integer\n// >= 1 falls back to the route's own default — never 0 rows, never NaN. A junk `before` is\n// ignored (as if absent). Both values go to SQL as bound args, never into the query text.\nconst pageLimit = (c: any, dflt: number) => {\n const raw = String(c.req.query(\"limit\") ?? \"\").trim();\n if (raw === \"\") return dflt;\n const n = Math.trunc(Number(raw));\n return Number.isFinite(n) && n >= 1 ? Math.min(500, n) : dflt;\n};\nconst pageBefore = (c: any): number | null => {\n const raw = String(c.req.query(\"before\") ?? \"\").trim();\n if (raw === \"\") return null;\n const n = Number(raw);\n return Number.isInteger(n) ? n : null;\n};\n\napp.get(\"/agent/results\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const limit = pageLimit(c, 30);\n const before = pageBefore(c);\n // The status filter is load-bearing: the dashboard and the runner depend on it.\n const r = await sqlite.execute(before == null\n ? { sql: \"SELECT * FROM agent_jobs WHERE status IN ('done','failed') ORDER BY id DESC LIMIT ?\", args: [limit] }\n : { sql: \"SELECT * FROM agent_jobs WHERE status IN ('done','failed') AND id < ? ORDER BY id DESC LIMIT ?\", args: [before, limit] });\n // Shape stays a plain array on purpose — callers parse it unattended. Stranded work\n // is surfaced by /agent/jobs (it comes back into the queue) and by /agent/status.\n return c.json(r.rows);\n});\n\n// SHARED JOURNAL — every session logs what it did here; the main HQ session files it into JOURNAL/\napp.post(\"/journal\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { source, summary, details } = await c.req.json();\n if (!summary) return c.json({ ok: false, error: \"summary required\" });\n await sqlite.execute({\n sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [source ?? \"unknown session\", summary, details ?? \"\"],\n });\n return c.json({ ok: true });\n});\n\n// ?brief=1 on GET /journal and GET /tasks: same rows, same order, long text (details / note)\n// cut to ¬e= chars, 0..2000, default 600. summary and title are never cut.\n// 13 Sep 2026 (#216): the default was 200 and Alexandr ruled it too thin — \"let them read more, but\n// less often\". 200 characters is a title and a half: enough to CHOOSE an item, not enough to know\n// what it asks for, so an agent that picked one had to fetch the full board again anyway. 600 is\n// three sentences, which is where a brief stops being a menu and starts being a brief. Cost, measured\n// on the live board of 46 rows: ~17 KB at 200, ~29 KB at 600, against 111 KB unbriefed. The other\n// half of his ruling — read less often — is the console's poll interval and Priya's cadence.\n// detailsFull / noteFull is true when the text WAS cut, i.e. there is more than you are holding;\n// detailsChars / noteChars is the untruncated length, for a caller that misreads the boolean.\n// A brief task row has commentCount and deliberately no `comments` key: the console parses\n// t.comments as a JSON array and a number under that name would corrupt its threads silently.\n// Without brief=1 both routes answer byte-identically to before, on purpose: the console and the bot read them.\nconst briefOn = (c: any) => c.req.query(\"brief\") === \"1\";\nconst briefCap = (c: any) => {\n const raw = String(c.req.query(\"note\") ?? \"\").trim();\n if (raw === \"\") return 600; // Number(\"\") is 0, and an empty ¬e= is not a request for 0\n const n = Number(raw);\n return Number.isFinite(n) ? Math.min(2000, Math.max(0, Math.trunc(n))) : 600;\n};\nconst briefText = (s: unknown, cap: number) => {\n const t = s == null ? null : String(s);\n return {\n // cap 0 drops the text entirely (null, not \"…\"): full/chars below still say what was dropped\n text: t == null ? null : cap === 0 ? null : t.length > cap ? t.slice(0, cap) + \"…\" : t,\n full: t != null && t.length > cap,\n chars: t == null ? 0 : t.length,\n };\n};\nconst briefJournal = (j: any, cap: number) => {\n const d = briefText(j.details, cap);\n return { id: j.id ?? null, ts: j.ts ?? null, source: j.source ?? null, summary: j.summary ?? null,\n filed: j.filed ?? null, details: d.text, detailsFull: d.full, detailsChars: d.chars };\n};\nconst briefTask = (t: any, cap: number) => {\n const n = briefText(t.note, cap);\n let commentCount = 0;\n try { const p = JSON.parse(t.comments ?? \"[]\"); commentCount = Array.isArray(p) ? p.length : 0; } catch (_) { commentCount = 0; }\n return { id: t.id ?? null, title: t.title ?? null, tier: t.tier ?? null, due: t.due ?? null,\n owner: t.owner ?? \"alexandr\", area: t.area ?? null, status: t.status ?? null,\n note: n.text, noteFull: n.full, noteChars: n.chars, commentCount };\n};\n\napp.get(\"/journal\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const all = c.req.query(\"all\") === \"1\";\n // #186: ?limit= and ?before= apply to the all=1 branch only; the unfiled branch is untouched.\n const limit = pageLimit(c, 100);\n const before = pageBefore(c);\n const r = await sqlite.execute(!all\n ? \"SELECT * FROM journal WHERE filed = 0 ORDER BY id\"\n : before == null\n ? { sql: \"SELECT * FROM journal ORDER BY id DESC LIMIT ?\", args: [limit] }\n : { sql: \"SELECT * FROM journal WHERE id < ? ORDER BY id DESC LIMIT ?\", args: [before, limit] });\n const cap = briefCap(c);\n if (briefOn(c)) return c.json(r.rows.map((j: any) => briefJournal(j, cap)));\n return c.json(r.rows);\n});\napp.post(\"/journal/filed\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE journal SET filed = 1 WHERE id = ?\", args: [Number(id)] });\n }\n return c.json({ ok: true });\n});\n\n// Claude sessions: read the work-group scribe log (owner's eyes only)\napp.get(\"/group\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const since = c.req.query(\"since\") ?? \"1970-01-01\";\n const limit = Math.min(Number(c.req.query(\"limit\") ?? 200), 500);\n const r = await sqlite.execute({\n sql: \"SELECT * FROM group_log WHERE ts >= ? ORDER BY id DESC LIMIT ?\",\n args: [since, limit],\n });\n return c.json(r.rows);\n});\n\n// Claude sessions: fetch unprocessed captures\napp.get(\"/pull\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM inbox WHERE processed = 0 ORDER BY id\");\n return c.json(r.rows);\n});\n// Claude sessions: mark processed\napp.post(\"/ack\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE inbox SET processed = 1 WHERE id = ?\", args: [id] });\n }\n return c.json({ ok: true });\n});\n// Outbound ping from Claude (desktop sessions, Herald, crons)\napp.post(\"/send\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { text, chat_id } = await c.req.json();\n let target = chat_id;\n if (!target) {\n const r = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n target = r.rows[0]?.chat_id;\n }\n if (!target) return c.json({ ok: false, error: \"no chat registered — /start the bot first\" }, 400);\n if (Number(target) < 0) { // a group: one door, one ledger (see groupGate in warden-shared.ts)\n const g = await groupGate(String(text), c.req.query(\"source\") ?? \"unknown\");\n if (!g.allow) return c.json({ ok: false, blocked: g.why, chat_id: target }, 409);\n }\n const res = await send(target as number, text);\n // {ok:true} used to be returned even when Telegram refused the message. It now\n // means Telegram accepted it and message_id is the proof (GET /outbox to re-read).\n return c.json({ ok: res.ok, message_id: res.message_id, chat_id: target, error: res.error },\n res.ok ? 200 : 502);\n});\n\n\n// ---------- Quest Log CRUD (dashboard + Claude sessions) ----------\nconst auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n\napp.get(\"/tasks\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n // Default = Alexandr's own quests only. The dashboard Quest Log calls this bare,\n // so team tasks can never crowd his personal day. ?owner=all|danny|sergey for the board.\n const who = c.req.query(\"owner\") ?? \"alexandr\";\n const sqlOwner = who === \"all\" ? \"\" : \" AND COALESCE(owner,'alexandr') = ?\";\n const r = await sqlite.execute({\n sql: \"SELECT * FROM tasks WHERE status='open'\" + sqlOwner +\n \" ORDER BY CASE tier WHEN 'balrog' THEN 0 WHEN 'nazgul' THEN 1 WHEN 'fellowship' THEN 2 ELSE 3 END, ord, id\",\n args: who === \"all\" ? [] : [who] });\n const cap = briefCap(c);\n if (briefOn(c)) return c.json(r.rows.map((t: any) => briefTask(t, cap)));\n return c.json(r.rows);\n});\napp.get(\"/tasks/all\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM tasks ORDER BY status, tier, ord LIMIT 300\");\n return c.json(r.rows);\n});\n// One task, the full row, so a brief-mode caller can re-read a single item\n// without pulling the whole board. Registered after /tasks/all on purpose.\napp.get(\"/tasks/:id\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const raw = c.req.param(\"id\");\n // plain digits only: Number() would also take \"1e2\" (100) and \"0x10\" (16), and silently serve the wrong task\n if (!/^\\d+$/.test(raw)) return c.json({ ok: false, error: `no task ${raw}` }, 404);\n const id = Number(raw);\n const r = await sqlite.execute({ sql: \"SELECT * FROM tasks WHERE id=?\", args: [id] });\n if (!r.rows.length) return c.json({ ok: false, error: `no task ${id}` }, 404);\n return c.json(r.rows[0]);\n});\napp.post(\"/tasks\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n if (!b.force) {\n const twin = await findTwin(b.title);\n if (twin) return c.json({ ok: false, duplicate: true, existing: twin,\n hint: \"An equivalent task already exists. Reopen or comment on it, or resend with force:true.\" }, 409);\n }\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [b.tier ?? \"fellowship\"] });\n const r = await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner, due) VALUES (?,?,?,?,?,?,?) RETURNING *\",\n args: [b.title, b.note ?? \"\", b.tier ?? \"fellowship\", b.area ?? \"\", b.ord ?? mx.rows[0].o,\n laneFor(b.title, b.owner), b.due ?? null],\n });\n return c.json(r.rows[0]);\n});\napp.post(\"/tasks/bulk\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const items = await c.req.json();\n let n = 0;\n const skipped: any[] = [];\n for (const b of items) {\n if (!b.force) {\n const twin = await findTwin(b.title);\n if (twin) { skipped.push({ title: b.title, existing: twin }); continue; }\n }\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [b.title, b.note ?? \"\", b.tier ?? \"fellowship\", b.area ?? \"\", (n + 1) * 10, laneFor(b.title, b.owner)],\n });\n n++;\n }\n return c.json({ ok: true, inserted: n, skippedAsDuplicate: skipped });\n});\napp.patch(\"/tasks/:id\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n const allowed = [\"title\", \"note\", \"tier\", \"area\", \"ord\", \"status\", \"owner\", \"due\"];\n const exists = await sqlite.execute({ sql: \"SELECT 1 FROM tasks WHERE id=?\", args: [id] });\n if (!exists.rows.length) return c.json({ ok: false, error: `no task ${id}` }, 404);\n // Unknown keys used to be dropped in silence behind a 200 and the row echoed back,\n // which is indistinguishable from success: a quest comment sent as {comment:...}\n // simply ceased to exist. Same 2xx-proves-nothing family as the bus defects.\n const unknown = Object.keys(b).filter((k) => !allowed.includes(k));\n if (unknown.length) {\n return c.json({ ok: false, error: `unknown field(s): ${unknown.join(\", \")} — nothing was written`,\n allowed, hint: \"comments go to POST /tasks/:id/comment {\\\"text\\\":\\\"...\\\"}\" }, 400);\n }\n const touched = allowed.filter((k) => k in b);\n if (!touched.length) return c.json({ ok: false, error: \"nothing to update\", allowed }, 400);\n for (const k of touched) {\n await sqlite.execute({ sql: `UPDATE tasks SET ${k}=? WHERE id=?`, args: [b[k], id] });\n }\n if (b.status === \"done\") {\n await sqlite.execute({ sql: \"UPDATE tasks SET done_at=datetime('now') WHERE id=?\", args: [id] });\n }\n const r = await sqlite.execute({ sql: \"SELECT * FROM tasks WHERE id=?\", args: [id] });\n return c.json({ ok: true, updated: touched, task: r.rows[0] ?? null });\n});\napp.post(\"/tasks/:id/comment\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const id = Number(c.req.param(\"id\"));\n const { text } = await c.req.json();\n const r = await sqlite.execute({ sql: \"SELECT comments FROM tasks WHERE id=?\", args: [id] });\n const comments = JSON.parse((r.rows[0]?.comments as string) ?? \"[]\");\n comments.push({ text, ts: new Date().toISOString().slice(0, 16).replace(\"T\", \" \") });\n await sqlite.execute({ sql: \"UPDATE tasks SET comments=? WHERE id=?\", args: [JSON.stringify(comments), id] });\n return c.json({ ok: true, count: comments.length });\n});\n\n// Warden triggers — called by the desktop scheduler (or manually); in-code window guards still apply\napp.get(\"/warden/:mode\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const mode = c.req.param(\"mode\");\n if (mode !== \"monday\" && mode !== \"friday\") return c.text(\"unknown mode\", 400);\n const { runWarden } = await import(\"./warden-shared.ts\");\n await runWarden(mode as \"monday\" | \"friday\");\n return c.json({ ok: true, paused: AXIOMA_PAUSED,\n note: AXIOMA_PAUSED ? \"AXIOMA is paused (5 Sep 2026) — the warden was a no-op\"\n : \"ran with window guards — check logs for skip/post\" });\n});\n\n// Roll yesterday's unfinished picks into today. Without this, choosing eight\n// battles and finishing three left the other five stranded — off the plan, off\n// the dashboard, remembered only by Alexandr.\napp.post(\"/day/rollover\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const date = (await c.req.json().catch(() => ({}))).date ?? new Date().toISOString().slice(0, 10);\n const y = await sqlite.execute({\n sql: `SELECT dp.task_id, t.title FROM day_plan dp JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = date(?, '-1 day') AND dp.state = 'today' AND t.status = 'open'`,\n args: [date] });\n const carried: string[] = [];\n for (const r of y.rows as any[]) {\n const has = await sqlite.execute({\n sql: \"SELECT 1 FROM day_plan WHERE date=? AND task_id=?\", args: [date, r.task_id] });\n if (has.rows.length) continue;\n await sqlite.execute({\n sql: \"INSERT INTO day_plan (date, task_id, state) VALUES (?,?,'today')\",\n args: [date, r.task_id] });\n carried.push(r.title as string);\n }\n return c.json({ ok: true, date, carried: carried.length, titles: carried });\n});\n\n// Promises made in a plan become executable work items. Before 17 Aug the plan's\n// \"🤝 I take\" list was prose nobody re-read: the forger's later passes saw \"already\n// forged\" and exited, so promised work silently never happened (quest #44, coffee).\napp.post(\"/directive\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n const items: string[] = Array.isArray(b.items) ? b.items : [b.text].filter(Boolean);\n let n = 0;\n for (const t of items) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (0,'directive',?,0)\",\n args: [String(t).slice(0, 500)] });\n n++;\n }\n return c.json({ ok: true, queued: n });\n});\n\n// Delivery proof. Any agent can end a run by reading its own message back instead of\n// trusting a 2xx, and a silent failure leaves a row with ok=0 and Telegram's reason.\napp.get(\"/outbox\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const limit = Math.min(Math.max(Number(c.req.query(\"limit\") ?? 20), 1), 200);\n const failedOnly = c.req.query(\"failed\") === \"1\";\n const r = await sqlite.execute({\n sql: `SELECT * FROM outbox ${failedOnly ? \"WHERE ok=0\" : \"\"} ORDER BY id DESC LIMIT ?`,\n args: [limit] });\n const f = await sqlite.execute(\"SELECT COUNT(*) AS n FROM outbox WHERE ok=0 AND ts > datetime('now','-7 days')\");\n return c.json({ failed_last_7d: Number((f.rows[0] as any)?.n ?? 0), messages: r.rows });\n});\n\napp.get(\"/\", (c) => c.text(\"🔮 Palantír Herald stands watch.\"));\nexport default app.fetch;\n",[],[291],["D",1788121469111],[],[18],["D",1783928553221],["D",1789525245864],{"_11":12,"_121":68},{"_11":12,"_116":117,"_67":68,"_30":66,"_118":119,"_120":24},{"_38":107,"_13":16,"_32":35,"_108":70,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":14,"_115":12},"ctx",{"_51":-5,"_141":340,"_341":342,"_343":344,"_345":24,"_346":24,"_347":24,"_348":139,"_349":-5,"_350":-7,"_351":-7,"_352":26,"_353":24,"_354":24,"_355":-5,"_356":24,"_357":24,"_358":24,"_359":-5},"ENV",{"_311":312,"_313":314,"_315":16,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331,"_332":333,"_334":335,"_336":337,"_338":339},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · banking.ts