[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_232":233,"_234":235},"routes/_app.x.$handle.$name",{"_96":95,"_31":43,"_105":86,"_26":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":24,"_120":121,"_122":123,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":24},"version",47,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","vault-routes.ts","latestPath","fileId","2512f662-a504-11f1-9322-1607ee4eb77e","name","fileType","script","content","// Vault feed routes (split 31 Aug 2026 — bot-webhook.ts sits at the 80k limit).\n// /note: any session captures knowledge → Archivist files it into Obsidian at 07:00.\n// /chatlog: read-only feed of the private-chat log (kind='chatlog', processed=1 by design so\n// /pull never serves chatter to the forger) — the Archivist's daily-digest source.\n// Mounted by bot-webhook.ts: mountVaultRoutes(app, sqlite, PULL_SECRET, busAuth).\nexport function mountVaultRoutes(app: any, sqlite: any, PULL_SECRET: string, busAuth: any) {\n app.post(\"/note\", async (c: any) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const text = String(body.text ?? \"\").trim();\n if (!text) return c.json({ ok: false, error: \"text required\" }, 400);\n const ctx = String(body.context ?? \"\").slice(0, 300);\n const src = String(body.source ?? \"session\").slice(0, 60);\n const payload = `${text}${ctx ? `\\n[context: ${ctx}]` : \"\"}\\n[via: ${src}]`;\n const r = await sqlite.execute({\n sql: \"INSERT INTO inbox (kind, text) VALUES ('note', ?) RETURNING id\",\n args: [payload] });\n const id = Number((r.rows[0] as any).id ?? (r.rows[0] as any)[0]);\n return c.json({ ok: true, id, queued_for: \"archivist 07:00\" });\n });\n\n app.get(\"/chatlog\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const since = c.req.query(\"since\") ?? new Date(Date.now() - 48 * 3600e3).toISOString().slice(0, 19).replace(\"T\", \" \");\n const limit = Math.min(Number(c.req.query(\"limit\") ?? 200), 500);\n const r = await sqlite.execute({\n sql: \"SELECT id, ts, text FROM inbox WHERE kind='chatlog' AND ts >= ? ORDER BY id LIMIT ?\",\n args: [since, limit] });\n return c.json({ ok: true, since, rows: r.rows });\n });\n}\n","createdAt",["D",1788157264555],"branchVersion","branchId","cc31caf5-d2e1-4af9-b0dd-bd82fa3e53fe","id","8754a5f7-f359-4e36-abb1-c12689a1658c","palantir-herald",["D",1783928553221],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Palantír Herald — Telegram capture + pings","imageUrl","3ed96798-6351-4c0c-a152-1db6ab7640c9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f5a68-d0b6-75de-80af-2b23ea5ed456","tursoName","8754a5f7f3594e36abb1c12689a1658c","tursoHostname","8754a5f7f3594e36abb1c12689a1658c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":53,"_101":102,"_103":24},"branch",{"_13":85,"_31":86,"_41":40,"_87":42,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":43,"_94":95},"isOwned",100,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ClaudeAssistant","handle","displayName","Alexandr Stakhov","avatar","https://lh3.googleusercontent.com/a/ACg8ocKCA_6NlmBdn2fDI25kVPZAGM3tPMEmD7U1Na63L8rtZj8kBQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":227,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":63,"_64":65,"_66":228,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":229,"_80":230,"_82":231,"_84":24},"tree",[198,199,200,201,202,203,204],"files",[198,199,200,201,202,203,204],"counts",{"_187":59,"_188":169,"_189":59,"_190":191,"_192":193},"contents",[128,129,130,131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_41":180,"_31":181,"_29":182,"_138":-5,"_39":40,"_38":183,"_140":123,"_36":184,"_13":59,"_32":33,"_34":185,"_23":24,"_144":-5,"_26":186},{"_41":172,"_31":173,"_29":174,"_138":-5,"_39":40,"_38":175,"_140":24,"_36":176,"_13":160,"_32":177,"_34":178,"_23":24,"_144":-5,"_26":179},{"_41":164,"_31":165,"_29":166,"_138":-5,"_39":40,"_38":167,"_140":123,"_36":168,"_13":169,"_32":33,"_34":170,"_23":24,"_144":-5,"_26":171},{"_41":157,"_31":158,"_29":159,"_138":-5,"_39":40,"_38":160,"_140":123,"_36":161,"_13":154,"_32":33,"_34":162,"_23":24,"_144":-5,"_26":163},{"_41":149,"_31":150,"_29":151,"_138":-5,"_39":40,"_38":152,"_140":123,"_36":153,"_13":154,"_32":33,"_34":155,"_23":24,"_144":-5,"_26":156},{"_41":146,"_31":27,"_29":30,"_138":-5,"_39":40,"_38":14,"_140":24,"_36":147,"_13":59,"_32":33,"_34":35,"_23":24,"_144":-5,"_26":148},{"_41":135,"_31":136,"_29":137,"_138":-5,"_39":40,"_38":139,"_140":24,"_36":141,"_13":142,"_32":33,"_34":143,"_23":24,"_144":-5,"_26":145},"e404ae12-86d2-42a6-9555-7164d5ac660b","warden-shared.ts","96d7544c-8749-11f1-a009-1607ee4eb77e","parentId",38,"latest",["D",1787216156697],4,"// Shared logic for the cloud wardens (Monday scroll / Friday toast).\n// Runs only when ANTHROPIC_API_KEY is set. Ledger lives in sqlite (team_ledger).\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runWarden(mode: \"monday\" | \"friday\", lastRunAt?: Date) {\n const KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n const BOT = Deno.env.get(\"TELEGRAM_BOT_TOKEN\")!;\n if (!KEY) { console.log(\"brain not armed — warden idle\"); return; }\n\n // ---- HARD GUARDS: correct weekday+hour window (UTC), and never twice per day ----\n const now = new Date();\n const day = now.getUTCDay(), hour = now.getUTCHours();\n const inWindow = mode === \"monday\" ? (day === 1 && hour >= 5 && hour <= 8)\n : (day === 5 && hour >= 14 && hour <= 17);\n if (!inWindow && Deno.env.get(\"WARDEN_FORCE\") !== \"1\") { console.log(`outside ${mode} window (utc day ${day} hour ${hour}) — skip`); return; }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS warden_log (date TEXT, mode TEXT, PRIMARY KEY (date, mode))`);\n const today = now.toISOString().slice(0, 10);\n const ran = await sqlite.execute({ sql: \"SELECT 1 FROM warden_log WHERE date=? AND mode=?\", args: [today, mode] });\n if (ran.rows.length) { console.log(\"already ran today — skip\"); return; }\n await sqlite.execute({ sql: \"INSERT INTO warden_log (date, mode) VALUES (?,?)\", args: [today, mode] });\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS team_ledger (\n id INTEGER PRIMARY KEY AUTOINCREMENT, person TEXT, task TEXT,\n promised_on TEXT, status TEXT DEFAULT 'open', done_on TEXT)`);\n\n const since = new Date(Date.now() - 8 * 86400e3).toISOString().slice(0, 19).replace(\"T\", \" \");\n const msgs = await sqlite.execute({\n sql: \"SELECT ts,from_name,text FROM group_log WHERE kind='text' AND ts >= ? ORDER BY id\",\n args: [since] });\n const ledger = await sqlite.execute(\"SELECT * FROM team_ledger WHERE status='open'\");\n const groupRow = await sqlite.execute(\"SELECT chat_id FROM group_log ORDER BY id DESC LIMIT 1\");\n const groupChat = groupRow.rows[0]?.chat_id;\n if (!groupChat) { console.log(\"no group known\"); return; }\n\n const sys = `You are the AXIOMA Warden — commitment tracker for a small friendly team (Alexandr, his father Sergey, colleagues; the Maraletto e-commerce team). Chat may be Russian and/or English.\nLANGUAGE RULE — ABSOLUTE: every word you write for the group post is ENGLISH. The group's\nmessages are often Russian (\"беру на себя\", \"готово\") — you READ those fine, but the AXIOMA\ngroup NEVER speaks Russian and a Russian post is a hard failure (happened 17 Aug 2026; never\nagain). Translate names of tasks into English when quoting them.\nFrom the week's messages: extract NEW promises (\"I'll do X\", \"that's on me\", \"беру на себя\", \"сделаю\", \"отправлю\" — real commitments only, be conservative, dedupe against the existing ledger), and detect completions (\"done\",\"готово\",\"отправил\" or clearly fulfilled).\nThen write the ${mode === \"monday\" ? \"Monday-morning report: per person, open items (oldest first, mark items open >1 week). If nothing open: a short varied celebration line.\" : \"Friday-evening check: if NOTHING is open for anyone, write a short (<=50 words) warm beer-toast celebrating the clean week. If anything IS open, the post must be EMPTY (silent Friday).\"}\nTone: warm, relaxed, one small joke max, never at anyone's expense, <=120 words. ENGLISH — see the language rule above; \"the chat's dominant language\" is NOT a consideration and never was.\nFORMAT — Telegram Markdown, and it is a LIST, never a paragraph (Alexandr, 20 Aug 2026:\n\"messages are hard to read, almost one plain text in a paragraph — I want bullet points and\nwell-marked text\"). ${mode === \"monday\" ? `Monday shape:\n*🗓 Week of *\n\n**\n• — since **\n• — since ** ⚠️ (only if open >1 week)\n\n**\n• — since **\nOne item per bullet, never joined into a sentence. Bold names and dates. A person with nothing open is simply omitted. Optionally ONE warm closing line after a blank line.` : `Friday shape: the toast is 1-3 short lines, no bullets needed — it is a celebration, not a report.`}\nRespond ONLY with JSON, no fences:\n{\"new_open\":[{\"person\":\"...\",\"task\":\"...\",\"promised_on\":\"YYYY-MM-DD\"}],\"completed_ids\":[ledger ids now done],\"post\":\"group message or empty string\"}\nEXISTING OPEN LEDGER: ${JSON.stringify(ledger.rows)}\nWEEK'S MESSAGES: ${JSON.stringify(msgs.rows)}`;\n\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": KEY, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 1200,\n system: sys, messages: [{ role: \"user\", content: `Run the ${mode} warden now.` }] }),\n });\n if (!r.ok) { console.error(\"anthropic\", r.status, await r.text()); return; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n let j: any;\n try { j = JSON.parse(out); } catch (e) { console.error(\"bad json\", out.slice(0, 200)); return; }\n\n for (const n of j.new_open ?? []) {\n await sqlite.execute({ sql: \"INSERT INTO team_ledger (person, task, promised_on) VALUES (?,?,?)\",\n args: [n.person, n.task, n.promised_on ?? new Date().toISOString().slice(0, 10)] });\n }\n for (const id of j.completed_ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE team_ledger SET status='done', done_on=date('now') WHERE id=?\", args: [Number(id)] });\n }\n const post = (j.post ?? \"\").trim();\n // F6 (12 Aug): journal the REAL outcome, not just window-skips\n if (post) { await journalOutcome(mode, \"posted to group\", post.slice(0, 300)); }\n else { await journalOutcome(mode, \"ran, nothing to post\", \"\"); }\n if (post) {\n // parse_mode added 20 Aug 2026: the report is now written as a bulleted Markdown list,\n // and without this the *bold* markers would reach the group as literal asterisks.\n // Telegram rejects unbalanced markers with a 400, so a plain-text retry is the safety net:\n // a slightly ugly report reaching the group beats a silent Monday.\n const send = (body: Record) =>\n fetch(`https://api.telegram.org/bot${BOT}/sendMessage`, {\n method: \"POST\", headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n let r = await send({ chat_id: groupChat, text: post, parse_mode: \"Markdown\" });\n if (!r.ok) {\n console.error(\"markdown send failed\", r.status, (await r.text()).slice(0, 200));\n r = await send({ chat_id: groupChat, text: post });\n await journalOutcome(mode, \"markdown rejected — posted as plain text\", post.slice(0, 300));\n }\n console.log(r.ok ? \"posted to group\" : \"POST FAILED both ways\");\n } else {\n console.log(\"nothing to post (silent by design)\");\n }\n}\n\n// Wright pass 2026-08-12 (audit W31+W32 \"unverifiable\"): every warden outcome is now journaled,\n// so silence becomes falsifiable. /group only logs inbound humans; this is the wardens' own voice.\nexport async function journalOutcome(mode: string, outcome: string, detail: string) {\n try {\n const ep = Deno.env.get(\"SELF_ENDPOINT\") ?? \"\";\n const secret = Deno.env.get(\"PULL_SECRET\") ?? \"\";\n if (!ep) return;\n await fetch(`${ep}/journal?secret=${secret}`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ source: `axioma-${mode}-warden`, summary: outcome, details: detail.slice(0, 800) }),\n });\n } catch (_) { /* journaling must never break the warden */ }\n}\n","label",[136],"d8a27f23-fd3a-4870-ac0b-0089ad76365c",["D",1788157264555],[27],"cb76b92c-f605-4baa-812a-d2167f693cdb","monday-scroll.ts","97465266-8749-11f1-89d0-1607ee4eb77e",30,["D",1786527835897],2,"// Cloud warden — Monday scroll. Cron (UTC): 30 6 * * 1 (~08:30 Amsterdam in summer)\nimport { journalOutcome, runWarden } from \"./warden-shared.ts\";\nexport default async function (interval: Interval) {\n await runWarden(\"monday\", interval.lastRunAt);\n}\n",[150],"11e6162b-975b-415c-99c9-91b5e2ee958e","friday-toast.ts","97bde344-8749-11f1-b372-1607ee4eb77e",31,["D",1786527836389],"// Cloud warden — Friday toast. Cron (UTC): 30 15 * * 5 (~17:30 Amsterdam in summer)\nimport { journalOutcome, runWarden } from \"./warden-shared.ts\";\nexport default async function (interval: Interval) {\n await runWarden(\"friday\", interval.lastRunAt);\n}\n",[158],"926c9a2f-b86b-41f8-9903-2186643f123b","coin-watcher.ts","69902324-7e8e-11f1-90d7-1607ee4eb77e",27,["D",1786485045527],1,"// Coin Watcher — RETIRED 11 Aug 2026 on Alexandr's order (HQ cloud session).\n// Was: a */15 interval val pinging Telegram for every new completed Wise transaction\n// (\"🪙 Coin moves in Erebor\"). Retired because the bank app already notifies him —\n// coin moves are DASHBOARD-ONLY now: Erebor's Coffers + recent-movements module\n// (dashboard/palantir.html ← dashboard/data.js ← scripts/update_dashboard_data.py, Wise read-only).\n// Deployed UNSCHEDULED (type \"script\", see scripts/deploy_telegram_bot.py) and inert.\n// To re-enable: git show 8616772:telegram/coin-watcher.ts > telegram/coin-watcher.ts, set type back to \"interval\", redeploy.\n\nexport default async function () {\n return; // intentionally inert — no Telegram pings for coin moves (dashboard-only policy)\n}\n",[165],"164f4fc2-bb06-4a4f-ac6b-6c37243a65ea","bot-webhook.ts","6922aaa6-7e8e-11f1-a591-1607ee4eb77e",46,["D",1788157262093],"http","// Palantír Herald — Telegram bot webhook (Val Town HTTP val)\n// Routes: POST /webhook (Telegram), GET /pull + POST /ack (Claude sessions), POST /send (outbound pings)\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst BOT = Deno.env.get(\"TELEGRAM_BOT_TOKEN\")!;\nconst WEBHOOK_SECRET = Deno.env.get(\"WEBHOOK_SECRET\")!;\nconst PULL_SECRET = Deno.env.get(\"PULL_SECRET\")!;\nconst API = `https://api.telegram.org/bot${BOT}`;\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS inbox (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, kind TEXT, text TEXT, file_id TEXT, processed INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS tasks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL, note TEXT DEFAULT '', tier TEXT DEFAULT 'fellowship',\n area TEXT DEFAULT '', ord REAL DEFAULT 0, status TEXT DEFAULT 'open',\n comments TEXT DEFAULT '[]',\n created TEXT DEFAULT (datetime('now')), done_at TEXT)`);\n// AXIOMA team tasks live in the SAME table (one source of truth) but carry an owner.\n// The dashboard Quest Log shows only Alexandr's; the AXIOMA board shows the team's.\n// Without this separation, logging a task for Danny would pollute his personal day.\ntry { await sqlite.execute(\"ALTER TABLE tasks ADD COLUMN owner TEXT DEFAULT 'alexandr'\"); } catch (_) { /* already there */ }\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS group_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, chat_title TEXT, from_name TEXT, kind TEXT, text TEXT, file_id TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_jobs (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n agent TEXT, brief TEXT, packs TEXT, status TEXT DEFAULT 'queued',\n result TEXT, done_at TEXT)`);\n// Claim bookkeeping. The old staleness test compared the job's CREATION time, so a\n// job older than two hours could be stolen from a runner that had just claimed it,\n// while a freshly created one could wedge forever. claimed_at is the honest clock.\ntry { await sqlite.execute(\"ALTER TABLE agent_jobs ADD COLUMN claimed_at TEXT\"); } catch (_) { /* already there */ }\ntry { await sqlite.execute(\"ALTER TABLE agent_jobs ADD COLUMN worker TEXT\"); } catch (_) { /* already there */ }\n// Blocked runs (20 Aug 2026): where a policy refusal goes so it cannot vanish with the\n// session that hit it. `resolved` is 1 when one rephrased retry got through — kept anyway,\n// because a step that needs rewriting every day is a brief to fix, not a quirk to route around.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_blocked (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n agent TEXT, step TEXT, brief TEXT, retry TEXT, note TEXT,\n attempts INTEGER DEFAULT 1, resolved INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS news_feedback (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n item_key TEXT, title TEXT, source TEXT, topic TEXT, verdict TEXT, applied INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS news_items (\n key TEXT PRIMARY KEY, title TEXT, source TEXT, topic TEXT, ts TEXT DEFAULT (datetime('now')))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS journal (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n source TEXT, summary TEXT, details TEXT, filed INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY, value TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS day_plan (\n date TEXT, task_id INTEGER, state TEXT DEFAULT 'none', PRIMARY KEY (date, task_id))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS day_plan_text (\n date TEXT PRIMARY KEY, plan TEXT)`);\n// Every outbound Telegram message, with its real outcome. Before this, send()\n// only console.error'd a failure and the endpoint still answered {ok:true}: a\n// Markdown-malformed brief vanished while the run self-reported success. Law 5\n// needs something readable back, so delivery is now a row, not a hope.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS outbox (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, kind TEXT DEFAULT 'send', chars INTEGER,\n ok INTEGER, message_id INTEGER, error TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS chats (\n chat_id INTEGER PRIMARY KEY, username TEXT, first_seen TEXT DEFAULT (datetime('now')))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS editions (\n date TEXT PRIMARY KEY, title TEXT, data TEXT, ts TEXT DEFAULT (datetime('now')))`);\n\nasync function logOut(chatId: number, kind: string, chars: number, ok: boolean, messageId: number | null, error: string | null) {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO outbox (chat_id, kind, chars, ok, message_id, error) VALUES (?,?,?,?,?,?)\",\n args: [chatId ?? 0, kind, chars, ok ? 1 : 0, messageId, error] });\n } catch (e) { console.error(\"outbox write failed\", String(e)); }\n}\n\n// Telegram answers 200-with-ok:false for a bad Markdown entity, so r.ok alone was\n// never proof of anything. Read the body once, judge on body.ok, and record it.\nasync function tg(method: string, params: any) {\n let status = 0, body: any = null, error: string | null = null;\n try {\n const r = await fetch(`${API}/${method}`, { method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify(params) });\n status = r.status;\n body = await r.json().catch(() => null);\n } catch (e) { error = String(e).slice(0, 200); }\n const good = !error && status === 200 && body?.ok === true;\n if (!good) {\n error = error ?? `HTTP ${status} ${String(body?.description ?? \"no body\").slice(0, 200)}`;\n console.error(method, error);\n }\n if (method === \"sendMessage\") {\n await logOut(params?.chat_id, params?.reply_markup ? \"keyboard\" : \"send\",\n String(params?.text ?? \"\").length, good, body?.result?.message_id ?? null, good ? null : error);\n }\n return good ? body.result : null;\n}\n\n// Returns the outcome instead of swallowing it. A Markdown failure is retried once\n// as plain text — a brief that trips on one stray underscore should still arrive,\n// and the outbox records that it took the fallback.\nasync function send(chatId: number, text: string, kind = \"send\") {\n const attempt = async (markdown: boolean) => {\n const body: any = { chat_id: chatId, text };\n if (markdown) body.parse_mode = \"Markdown\";\n try {\n const r = await fetch(`${API}/sendMessage`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify(body) });\n const j = await r.json().catch(() => null);\n if (r.status === 200 && j?.ok === true) return { ok: true, message_id: j.result?.message_id ?? null, error: null };\n return { ok: false, message_id: null, error: `HTTP ${r.status} ${String(j?.description ?? \"no body\").slice(0, 200)}` };\n } catch (e) { return { ok: false, message_id: null, error: String(e).slice(0, 200) }; }\n };\n let res = await attempt(true);\n let usedFallback = false;\n if (!res.ok && /parse|entit|markdown/i.test(res.error ?? \"\")) {\n const plain = await attempt(false);\n if (plain.ok) { usedFallback = true; res = plain; }\n }\n if (!res.ok) console.error(\"sendMessage failed\", res.error);\n await logOut(chatId, usedFallback ? kind + \"/plain-fallback\" : kind, text?.length ?? 0, res.ok, res.message_id, res.error);\n return res;\n}\n\n\n// ---------- the Brain (active only when ANTHROPIC_API_KEY is set) ----------\nconst BRAIN_KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n\nasync function proActive(): Promise {\n const r = await sqlite.execute(\"SELECT value FROM settings WHERE key='pro_until'\");\n return !!r.rows[0] && new Date(r.rows[0].value as string) > new Date();\n}\nconst API_MARK = \"\\n\\n\\u26a1api\";\n\n// A plain text capture becomes a real quest IMMEDIATELY — no LLM, just an insert,\n// so it is free. Before 2026-07-25 this only wrote to the inbox and the quest was\n// created hours later by the Morning Herald, while the bot already claimed\n// \"Taken to the Quest Log\" — so Alexandr looked at the dashboard and found nothing.\n// The inbox row is still written (marked processed) as an audit trail; the Herald\n// enriches tier/area/note on its next run rather than creating a duplicate.\n// A plain text capture becomes real quest(s) IMMEDIATELY — no LLM, just inserts, so it is free.\n// Two fixes live here:\n// 25 Jul — it used to write only to `inbox`, while replying \"Taken to the Quest Log\". The quest\n// appeared hours later via the Herald, so the dashboard looked empty and the bot had lied.\n// 12 Aug — one message listing several tasks became ONE quest. Alexandr asked whether he could\n// just tell the bot \"these, this and that\" and see them all in the Palantír. Now he can:\n// newlines, bullets, \"1.\" numbering and \" ; \" each split into separate quests.\n// ---------- intent routing (17 Aug 2026) ----------\n// Not everything Alexandr types is HIS to-do. Three kinds of private message:\n// 1. TASKS — \"add these to the task list: …\" → quests on his board.\n// 2. DIRECTIVES — \"re-forge the plan\", \"check X\", \"remove the last two\" → work FOR CLAUDE.\n// These go to the inbox as kind='directive' and the day-forger (polling every 30 min)\n// EXECUTES them. Before this, \"This was not a quest\" itself became a quest.\n// 3. Plain captures — a noun phrase, a thought → a quest (old behaviour).\nconst ADD_INTENT = /\\b(add|put|log|save|запиши|добавь)\\b[\\s\\S]{0,40}\\b(tasks?|quests?|list|задач)/i;\nconst DIRECTIVE = new RegExp(\n \"^(could you|can you|would you|please (re|go|check|do|fix|update|remove|show|explain)|\" +\n \"regenerate|re-?forge|re-?do|remove|delete|undo|update|check|fix|investigate|show me|explain|\" +\n \"answer|perform|research|find out|what (is|about|happened)|why (is|did|do)|how (is|did|do)|\" +\n \"сделай|проверь|убери|удали|обнови|перегенерируй|разберись|что (с|там|случилось)|почему|\" +\n \"this was not a quest|это не задача)\", \"i\");\nfunction isDirective(raw: string): boolean {\n const t = raw.trim();\n if (ADD_INTENT.test(t)) return false; // explicit task-list intent wins\n if (DIRECTIVE.test(t)) return true;\n if (/\\?\\s*$/.test(t) && /\\b(you|your|ты|тебе)\\b/i.test(t)) return true; // question at the bot\n return false;\n}\n\nfunction splitTasks(raw: string): string[] {\n let body = raw.trim()\n .replace(/^(also\\s+)?(please\\s+)?(let'?s\\s+)?(add|put|log|save)\\s+(these|this|the following)?[\\s\\S]{0,80}?\\b(tasks?|quests?|list)\\b[^\\n]*[:\\n-]?/i, \"\")\n .trim();\n let parts = body.split(/\\r?\\n+/).map((l) => l.trim()).filter(Boolean);\n if (parts.length === 1) parts = body.split(/\\s*;\\s*/).map((l) => l.trim()).filter(Boolean);\n return parts\n .map((l) => l.replace(/^\\s*(?:[-*•·—]|\\d{1,2}[.)])\\s*/, \"\").trim())\n .map((l) => l.replace(/^(todo|task|напомни|добавь(\\s+задачу)?|запиши)[:,\\s-]*/i, \"\").trim())\n // instruction prose is not a task: drop leftover meta-lines when real items exist\n .filter((l, _i, arr) => !(arr.length > 1 && /\\b(task list|forge plan|you can|straight away|где ты можешь)\\b/i.test(l)))\n .filter((l) => l.length > 2)\n .slice(0, 12);\n}\n\n// ── Smart routing (31 Aug 2026, Alexandr: \"broaden its understanding — it should creatively\n// understand whether it's a task, or something to remember in Obsidian\") ─────────────────────\n// Every private message: (1) logged as chatlog for the Archivist → vault daily notes,\n// (2) classified by Haiku when the brain is armed (tiny prompt, ~300 tokens — his explicit\n// 31 Aug authorisation), (3) legacy regex path is the free fast-path and the fallback.\nasync function classify(raw: string): Promise {\n const KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!KEY) return null;\n const sys = `Route one Telegram message from Alexandr to his assistant system. Respond ONLY with JSON, no fences.\nIntents:\n- \"task\": something HE must do later (errand, fix, buy, call...). Extract clean imperative titles, split multiple. {\"intent\":\"task\",\"titles\":[\"...\"],\"reply\":\"<=1 line confirmation\"}\n- \"note\": knowledge/interest to REMEMBER (a thought, link, fact, \"interesting\", \"read later\", \"запомни\") → goes to his Obsidian vault. {\"intent\":\"note\",\"text\":\"\",\"reply\":\"<=1 line\"}\n- \"directive\": an instruction for the ASSISTANT to do/fix/check something now. {\"intent\":\"directive\",\"reply\":\"<=1 line\"}\n- \"hq\": feedback/design/architecture for the HQ session (\"tell HQ...\", system redesign wishes). {\"intent\":\"hq\",\"title\":\"HQ: \",\"reply\":\"<=1 line\"}\n- \"chat\": a question/conversation needing an answer. {\"intent\":\"chat\"}\nRules: he writes EN/RU; titles in the message's language; \"add to tasks X\" = task with title X (strip the meta-words); when torn between task and note: concrete action = task, information = note. Never invent content.`;\n try {\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": KEY, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 400,\n system: sys, messages: [{ role: \"user\", content: raw.slice(0, 1500) }] }),\n });\n if (!r.ok) { console.error(\"classify api\", r.status); return null; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n return JSON.parse(out);\n } catch (e) { console.error(\"classify fail\", String(e).slice(0, 120)); return null; }\n}\n\nasync function makeTasks(chatId: number, titles: string[], viaBrain: boolean) {\n const made: string[] = [], dupes: string[] = [];\n for (const t of titles.slice(0, 12)) {\n const clean = (t.charAt(0).toUpperCase() + t.slice(1)).trim();\n if (clean.length < 3) continue;\n const twin = await findTwin(clean);\n if (twin) { dupes.push(clean.slice(0, 60)); continue; }\n const mx = await sqlite.execute({\n sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [\"fellowship\"] });\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [clean.slice(0, 160), \"captured from Telegram \" + new Date().toISOString().slice(0, 10),\n \"fellowship\", \"\", mx.rows[0].o, \"alexandr\"] });\n made.push(clean.slice(0, 70));\n }\n let msg = made.length\n ? (made.length === 1 ? \"⚔️ Added to the Quest Log:\\n\" : `⚔️ Added ${made.length} quests:\\n`) +\n made.map((t) => \"• \" + t).join(\"\\n\")\n : \"Nothing new — all of those are already on the board.\";\n if (dupes.length) msg += `\\n\\n(skipped as already open: ${dupes.join(\"; \")})`;\n if (made.length) msg += viaBrain ? \"\\n\\nOn the dashboard now.\" : \"\\n\\nOn the dashboard now.\";\n await send(chatId, msg);\n}\n\nasync function smartCapture(chatId: number, text: string) {\n const raw = text.trim();\n // (1) everything is logged for the Archivist → vault daily notes (his 31 Aug rule)\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,1)\",\n args: [chatId, \"chatlog\", raw] });\n // (2) free fast-path: unambiguous regex hits skip the API\n if (ADD_INTENT.test(raw)) {\n const titles = splitTasks(raw);\n if (titles.length) { await makeTasks(chatId, titles, false); return; }\n }\n // (3) the brain decides\n const c = await classify(raw);\n if (c?.intent === \"task\" && Array.isArray(c.titles) && c.titles.length) {\n await makeTasks(chatId, c.titles, true); return;\n }\n if (c?.intent === \"note\" ) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"note\", String(c.text ?? raw)] });\n await send(chatId, c.reply || \"🍃 Noted — the Archivist files it into Obsidian by morning.\");\n return;\n }\n if (c?.intent === \"hq\") {\n const title = String(c.title ?? (\"HQ: \" + raw.slice(0, 120)));\n const twin = await findTwin(title);\n if (!twin) await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [title.slice(0, 160), \"for the HQ session — filed from Telegram \" + new Date().toISOString().slice(0, 10),\n \"nazgul\", \"palantir\", 0, \"alexandr\"] });\n await send(chatId, c.reply || \"🏰 Filed for the HQ session — it reads its inbox at every boot.\");\n return;\n }\n if (c?.intent === \"directive\") {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"directive\", raw] });\n await send(chatId, c.reply || \"🧝 Taken as an errand for me — the forge picks it up within the half-hour.\");\n return;\n }\n if (c?.intent === \"chat\") { await brain(chatId, raw); return; }\n // (4) brain unarmed or failed → the legacy path\n await captureFallback(chatId, raw);\n}\n\nasync function captureFallback(chatId: number, text: string) {\n const raw = text.trim();\n if (isDirective(raw)) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"directive\", raw],\n });\n await send(chatId, \"🧝 Taken as an errand for me, not a quest for you.\\nThe forge picks it up within the half-hour\" +\n \" — I'll report back when it's done.\");\n return;\n }\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,1)\",\n args: [chatId, \"text\", raw],\n });\n const titles = splitTasks(raw);\n if (!titles.length) { await send(chatId, \"I could not read a task in that — try again?\"); return; }\n\n const made: string[] = [], dupes: string[] = [];\n for (const t of titles) {\n const clean = t.charAt(0).toUpperCase() + t.slice(1);\n const twin = await findTwin(clean);\n if (twin) { dupes.push(clean.slice(0, 60)); continue; }\n const mx = await sqlite.execute({\n sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [\"fellowship\"],\n });\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [clean.slice(0, 160), \"captured from Telegram \" + new Date().toISOString().slice(0, 10),\n \"fellowship\", \"\", mx.rows[0].o, \"alexandr\"],\n });\n made.push(clean.slice(0, 70));\n }\n let msg = made.length\n ? (made.length === 1 ? \"⚔️ Added to the Quest Log:\\n\" : `⚔️ Added ${made.length} quests:\\n`) +\n made.map((t) => \"• \" + t).join(\"\\n\")\n : \"Nothing new — all of those are already on the board.\";\n if (dupes.length) msg += `\\n\\n(skipped as already open: ${dupes.join(\"; \")})`;\n if (made.length) msg += \"\\n\\nOn the dashboard now.\";\n await send(chatId, msg);\n}\n\nasync function brain(chatId: number, text: string) {\n const open = await sqlite.execute(\"SELECT id,title,tier,area,note FROM tasks WHERE status='open' ORDER BY tier,ord\");\n const grp = await sqlite.execute(\"SELECT ts,from_name,text FROM group_log WHERE kind='text' ORDER BY id DESC LIMIT 60\");\n const sys = `You are the Palantír Herald — Alexandr's personal assistant bot on Telegram. Concise, warm, light Lord-of-the-Rings flavor (never overdone). Answer in the user's language — EXCEPT anything posted to the AXIOMA group chat, which is ALWAYS English regardless of the question's language (team rule, no exceptions).\nFacts: Maraletto = family e-commerce business (Shopify; legal entity COTTONPASSION LDA; formerly named Artograph; run with father Sergey). AXIOMA = the work project and its team group chat, which you silently scribe.\nSelf-knowledge: you (this same bot) DO post to the AXIOMA group in exactly two cases — the Monday open-tasks report and the Friday clean-week toast (plus rare messages Alexandr explicitly requests). On 24 Jul a scheduling bug caused duplicated posts; it was fixed with once-per-day guards. If Alexandr reports bot misbehavior, acknowledge honestly and suggest he tell desktop Claude to investigate — never deny actions your other components may have taken.\nClassify the user's message and respond ONLY with JSON, no fences:\n- a task/thought to capture -> {\"action\":\"task\",\"title\":\"...\",\"tier\":\"balrog|nazgul|fellowship|shire\",\"area\":\"Maraletto|Finance|Family|Consulting|Other\",\"reply\":\"one-line confirmation\"}\n- anything else (question, status check, completing tasks, chat) -> {\"action\":\"answer\",\"reply\":\"markdown answer, <=200 words\",\"complete_task_ids\":[ids to mark done, optional]}\nTier guide: balrog=urgent/overdue, nazgul=has deadline, fellowship=this week, shire=someday.\nOPEN QUESTS: ${JSON.stringify(open.rows)}\nRECENT AXIOMA GROUP LOG (newest first): ${JSON.stringify(grp.rows)}`;\n const pro = await proActive();\n const model = pro ? (Deno.env.get(\"BRAIN_MODEL_PRO\") ?? \"claude-sonnet-4-5\") : (Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\");\n const sysFinal = sys + (pro ? \"\" : \"\\nECONOMY MODE: keep answers brief (<=100 words) — API credits are precious. Depth only when truly needed.\");\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": BRAIN_KEY!, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model, max_tokens: pro ? 2000 : 500,\n system: sysFinal, messages: [{ role: \"user\", content: text }] }),\n });\n if (!r.ok) { console.error(\"anthropic\", r.status, await r.text()); await captureFallback(chatId, text); return; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n let j: any;\n try { j = JSON.parse(out); } catch { await send(chatId, out.slice(0, 3900) || \"🌫 The stone is clouded.\"); return; }\n if (j.action === \"task\" && j.title) {\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [j.tier ?? \"fellowship\"] });\n await sqlite.execute({ sql: \"INSERT INTO tasks (title, note, tier, area, ord) VALUES (?,?,?,?,?)\",\n args: [j.title, \"via bot \" + new Date().toISOString().slice(0,10), j.tier ?? \"fellowship\", j.area ?? \"\", mx.rows[0].o] });\n await send(chatId, (j.reply || \"⚔️ Taken to the Quest Log.\") + API_MARK);\n } else {\n for (const id of j.complete_task_ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE tasks SET status='done', done_at=datetime('now') WHERE id=?\", args: [Number(id)] });\n }\n await send(chatId, ((j.reply || \"…\") + API_MARK).slice(0, 3900));\n }\n}\n\n\n// ---------- interactive morning form ----------\nconst STATES = [\"none\", \"today\", \"done\"];\nconst ICON: Record = { none: \"⬜\", today: \"📅\", done: \"✅\" };\n\n// Normalised title used for duplicate detection. The Herald re-imported five\n// already-completed tasks on 2026-07-26 because nothing checked whether an\n// equivalent task existed. Titles drift slightly (\"Review Palantir dashboard\n// preview\" -> \"... v4\"), so compare on significant words, not exact strings.\nfunction titleKey(t: string, width = 6): string {\n return String(t || \"\").toLowerCase()\n .replace(/[^a-z0-9\\u0400-\\u04ff ]+/g, \" \")\n .split(/\\s+/)\n .map((w) => w.replace(/s$/, \"\")) // crude stem: \"lists\" == \"list\", \"forms\" == \"form\"\n .filter((w) => w.length > 3 && ![\"from\",\"with\",\"that\",\"this\",\"your\",\"the\",\"and\",\"for\",\"new\",\"page\",\"fro\"].includes(w))\n .sort().slice(0, width).join(\" \");\n}\nasync function findTwin(title: string): Promise {\n const key = titleKey(title);\n if (!key) return null;\n const r = await sqlite.execute(\n \"SELECT id,title,status,done_at FROM tasks WHERE done_at IS NULL OR done_at > datetime('now','-21 days')\");\n for (const row of r.rows as any[]) {\n const k2 = titleKey(row.title as string);\n if (!k2) continue;\n const a = new Set(key.split(\" \")), b = new Set(k2.split(\" \"));\n let hit = 0; a.forEach((w) => { if (b.has(w)) hit++; });\n const overlap = hit / Math.max(a.size, b.size);\n if (overlap >= 0.6) return row;\n }\n return null;\n}\n\n// Telegram accepts far more rows than this; 10 was the arbitrary cap that made the\n// two newest quests (#54, #55) impossible to tick on 19 Aug while the rollover had\n// already pre-selected one of them — the keyboard and the day plan openly disagreed.\n// Re-ordering could not fix it: promoting any quest into the ten pushed another out.\nconst KEYBOARD_MAX_ROWS = 40;\n\nasync function buildKeyboard(date: string) {\n const tasks = await sqlite.execute(\"SELECT id,title FROM tasks WHERE status='open' AND COALESCE(owner,'alexandr')='alexandr' ORDER BY CASE tier WHEN 'balrog' THEN 0 WHEN 'nazgul' THEN 1 WHEN 'fellowship' THEN 2 ELSE 3 END, ord\");\n const st = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date=?\", args: [date] });\n const map: Record = {};\n for (const r of st.rows) map[r.task_id as number] = r.state as string;\n // Anything he picked yesterday and did not finish is already marked 'today'\n // by the rollover, so it sorts to the top and arrives pre-selected. Before\n // this, unfinished picks simply vanished at midnight.\n const carried = new Set();\n const y = await sqlite.execute({\n sql: `SELECT dp.task_id FROM day_plan dp JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = date(?, '-1 day') AND dp.state = 'today' AND t.status = 'open'`,\n args: [date] });\n for (const r of y.rows as any[]) carried.add(r.task_id as number);\n // Anything already carried or already ticked must be reachable, so it sorts first;\n // the tier/ord order below it is untouched (Array.sort is stable).\n const priority = (t: any) => (carried.has(t.id) ? 2 : 0) + ((map[t.id] && map[t.id] !== \"none\") ? 1 : 0);\n const sorted = (tasks.rows as any[]).slice().sort((a, b) => priority(b) - priority(a));\n const shown = sorted.slice(0, KEYBOARD_MAX_ROWS);\n const rows = shown.map((tk: any) => [{\n text: `${ICON[map[tk.id] ?? \"none\"]}${carried.has(tk.id) ? \" ↻\" : \"\"} ${String(tk.title).slice(0, 40)}`,\n callback_data: `t:${tk.id}`,\n }]);\n // If a cap is ever hit again, say so on the keyboard itself rather than dropping\n // quests in silence — a truncation nobody can see reads as \"that is all there is\".\n if (sorted.length > shown.length) {\n rows.push([{ text: `… ${sorted.length - shown.length} more open, not shown`, callback_data: \"noop\" }]);\n }\n rows.push([{ text: \"🏁 Forge the plan\", callback_data: \"forge\" }]);\n return { inline_keyboard: rows };\n}\n\nasync function forgePlanBrain(chatId: number, date: string) {\n const forceBrain = true;\n return forgePlanInner(chatId, date, forceBrain);\n}\n\nasync function forgePlan(chatId: number, date: string) {\n return forgePlanInner(chatId, date, false);\n}\n\nasync function forgePlanInner(chatId: number, date: string, forceBrain: boolean) {\n const st = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date=?\", args: [date] });\n const doneIds = st.rows.filter((r: any) => r.state === \"done\").map((r: any) => r.task_id);\n const todayIds = st.rows.filter((r: any) => r.state === \"today\").map((r: any) => r.task_id);\n for (const id of doneIds) {\n await sqlite.execute({ sql: \"UPDATE tasks SET status='done', done_at=datetime('now') WHERE id=?\", args: [id] });\n }\n if (!todayIds.length) { await send(chatId, doneIds.length ? \"✅ Marked done. No battles chosen for today — a quiet day, then.\" : \"No battles chosen. The stone rests.\"); return; }\n const q = await sqlite.execute({ sql: `SELECT id,title,tier,area,note FROM tasks WHERE id IN (${todayIds.map(() => \"?\").join(\",\")})`, args: todayIds });\n\n // FREE PATH (default): record the choice, tell desktop Claude to forge the plan and start working.\n if (!forceBrain && Deno.env.get(\"FORGE_MODE\") !== \"brain\") {\n const titles = q.rows.map((r: any) => \"• \" + r.title).join(\"\\n\");\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\",\n args: [date, \"AWAITING_DESKTOP_FORGE\\n\" + titles],\n });\n await sqlite.execute({\n sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [\"morning form\", `Alexandr chose ${todayIds.length} quest(s) for ${date}`,\n \"CHOSEN:\\n\" + q.rows.map((r: any) => `#${r.id} ${r.title} [${r.tier}/${r.area}] ${r.note ?? \"\"}`).join(\"\\n\") +\n (doneIds.length ? `\\nMARKED DONE: ${doneIds.join(\", \")}` : \"\") +\n \"\\nACTION: forge the day plan (order, time slots, 🤝 what Claude takes vs 🗡 yours alone), send it via /send, and START the items Claude can take.\"],\n });\n await send(chatId, \"🗺 *Chosen for today:*\\n\" + titles +\n \"\\n\\nDesktop Claude will forge the plan and begin what it can take — free of API credits. (Need it forged right now in the cloud? send `/forge` ⚡)\");\n return;\n }\n if (!BRAIN_KEY) { await send(chatId, \"Plan chosen: \" + q.rows.map((r: any) => r.title).join(\" · \")); return; }\n const sys = `You are the Palantír Herald, planning Alexandr's day. Light LOTR flavor, concise. He runs Maraletto (family e-commerce, Shopify, with father Sergey) and works as an AI consultant.\nGiven his chosen tasks for today, produce a short battle plan (<=180 words):\n1) sensible order with rough time slots (morning/midday/evening),\n2) \"🤝 I can take:\" — parts Claude/the Herald can do autonomously or draft (research, analysis, documents, reconciliation, outreach drafts),\n3) \"🗡 Yours alone:\" — payments, calls, physical-world, decisions.\nEnd with one short encouraging line.`;\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\", headers: { \"x-api-key\": BRAIN_KEY!, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 700, system: sys,\n messages: [{ role: \"user\", content: \"Today's chosen tasks: \" + JSON.stringify(q.rows) }] }),\n });\n let plan = \"Plan for today: \" + q.rows.map((r: any) => r.title).join(\" · \");\n if (r.ok) plan = ((await r.json()).content?.[0]?.text ?? plan).trim();\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\", args: [date, plan] });\n await send(chatId, \"🗺 *The day's battle plan*\\n\\n\" + plan.slice(0, 3700) + API_MARK);\n}\n\nasync function handleCallback(cb: any) {\n const date = new Date().toISOString().slice(0, 10);\n const chatId = cb.message?.chat?.id;\n try {\n if (String(cb.data).startsWith(\"n:\")) {\n const [, verdict, key] = String(cb.data).split(\":\");\n const it = await sqlite.execute({ sql: \"SELECT * FROM news_items WHERE key=?\", args: [key] });\n const row: any = it.rows[0] ?? {};\n await sqlite.execute({\n sql: \"INSERT INTO news_feedback (item_key,title,source,topic,verdict) VALUES (?,?,?,?,?)\",\n args: [key, row.title ?? \"\", row.source ?? \"\", row.topic ?? \"\", verdict] });\n const label: Record = { up:\"👍 more like this\", down:\"👎 less of this\", star:\"⭐ important\", block:\"🚫 never again\" };\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: label[verdict] ?? \"noted\" });\n return;\n }\n if (cb.data === \"noop\") { await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"Reorder those quests to bring them onto the list.\" }); return; }\n if (cb.data === \"forge\") {\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"Forging…\" });\n await forgePlan(chatId, date);\n return;\n }\n if (String(cb.data).startsWith(\"t:\")) {\n const id = Number(String(cb.data).slice(2));\n const cur = await sqlite.execute({ sql: \"SELECT state FROM day_plan WHERE date=? AND task_id=?\", args: [date, id] });\n const next = STATES[(STATES.indexOf((cur.rows[0]?.state as string) ?? \"none\") + 1) % STATES.length];\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan (date, task_id, state) VALUES (?,?,?)\", args: [date, id, next] });\n await tg(\"editMessageReplyMarkup\", { chat_id: chatId, message_id: cb.message.message_id, reply_markup: await buildKeyboard(date) });\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id });\n }\n } catch (e) { console.error(\"callback\", e); await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"hiccup — try again\" }); }\n}\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\napp.post(\"/webhook\", async (c) => {\n if (c.req.header(\"X-Telegram-Bot-Api-Secret-Token\") !== WEBHOOK_SECRET) return c.text(\"forbidden\", 401);\n const u = await c.req.json();\n if (u.callback_query) { await handleCallback(u.callback_query); return c.text(\"ok\"); }\n const m = u.message;\n if (!m) return c.text(\"ok\");\n const chatId = m.chat.id;\n\n // ---- group chats: listen silently, never reply ----\n if (m.chat.type === \"group\" || m.chat.type === \"supergroup\") {\n const from = [m.from?.first_name, m.from?.last_name].filter(Boolean).join(\" \") || m.from?.username || \"?\";\n const kind = m.voice || m.audio ? \"voice\" : (m.text ? \"text\" : \"other\");\n const fid = (m.voice ?? m.audio)?.file_id ?? null;\n await sqlite.execute({\n sql: \"INSERT INTO group_log (chat_id, chat_title, from_name, kind, text, file_id) VALUES (?,?,?,?,?,?)\",\n args: [chatId, m.chat.title ?? \"\", from, kind, m.text ?? m.caption ?? \"\", fid],\n });\n await sqlite.execute(\"DELETE FROM group_log WHERE ts < datetime('now','-45 days')\");\n\n // Law 3 says never speak in AXIOMA UNASKED. An explicit @mention is being asked.\n // Approved by Alexandr 2026-07-31 (quest #33). Free: no LLM, plain parsing.\n const txt = (m.text ?? m.caption ?? \"\").trim();\n const MENTION = /@calude_assistant_bot|@claude_assistant_bot/i;\n const WANTS_TASK = /\\b(log|add|record|note|запиши|залогируй|добавь)\\b.{0,20}\\b(task|todo|задач)/i;\n if (MENTION.test(txt) && WANTS_TASK.test(txt)) {\n // The task text is either after the verb, or — the common case — the message\n // being replied to (\"Need to be filled by Danny\" ← \"@bot log this task for Danny\").\n const replied = (m.reply_to_message?.text ?? m.reply_to_message?.caption ?? \"\").trim();\n let body = txt.replace(MENTION, \"\")\n .replace(/\\b(please\\s+)?(log|add|record|note|запиши|залогируй|добавь)\\b\\s*(this\\s+)?(task|todo|задачу|задача)?\\s*/i, \"\")\n .trim();\n // \"for Danny\" / \"для Дэнни\" → owner, and strip it from the title\n let owner = \"unassigned\";\n const who = body.match(/\\b(?:for|для)\\s+([A-Za-z\\u0400-\\u04ff]+)/i);\n if (who) { owner = who[1].toLowerCase(); body = body.replace(who[0], \"\").trim(); }\n const ROSTER: Record = { danny: \"danny\", дэнни: \"danny\", дени: \"danny\",\n sergey: \"sergey\", sergio: \"sergey\", сергей: \"sergey\", серхио: \"sergey\",\n alex: \"alexandr\", alexandr: \"alexandr\", саша: \"alexandr\", алексадр: \"alexandr\" };\n owner = ROSTER[owner] ?? owner;\n const title = (body && body.length > 3) ? body : replied;\n if (!title) {\n await send(chatId, \"I can log it — reply to the message that describes the task, or write it after the mention.\");\n return c.text(\"ok\");\n }\n const twin = await findTwin(title);\n if (twin) {\n await send(chatId, `Already on the board: “${String(twin.title).slice(0, 70)}”.`);\n return c.text(\"ok\");\n }\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier='fellowship'\" });\n const r = await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?) RETURNING id\",\n args: [title.slice(0, 160), `AXIOMA group · asked by ${from} · ${new Date().toISOString().slice(0, 10)}`,\n \"fellowship\", \"axioma\", mx.rows[0].o, owner] });\n await send(chatId, `📋 Logged for *${owner === \"unassigned\" ? \"the team\" : owner}*: ${title.slice(0, 90)}\\n_#${r.rows[0].id} · it will appear in Monday's report._`);\n return c.text(\"ok\");\n }\n return c.text(\"ok\"); // otherwise: listen silently, never reply\n }\n\n // ---- private chats: only the owner (first registered) is served ----\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const ownerId = own.rows[0]?.chat_id;\n if (ownerId && chatId !== ownerId) return c.text(\"ok\"); // strangers: silent ignore\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO chats (chat_id, username) VALUES (?,?)\", args: [chatId, m.from?.username ?? \"\"] });\n\n if (m.text === \"/start\") {\n await send(chatId, \"🔮 *The Palantír hears you.*\\nSpeak a task, a thought, or a voice note — it shall be carried to the Quest Log and sorted by the scribes.\");\n return c.text(\"ok\");\n }\n if (m.voice || m.audio) {\n const f = m.voice ?? m.audio;\n await sqlite.execute({ sql: \"INSERT INTO inbox (chat_id, kind, text, file_id) VALUES (?,?,?,?)\", args: [chatId, \"voice\", m.caption ?? \"\", f.file_id] });\n await send(chatId, \"🎙 Heard. The scribes will transcribe it at the next watch.\");\n return c.text(\"ok\");\n }\n if (m.text === \"/pro\") {\n const until = new Date(Date.now() + 2 * 3600e3).toISOString();\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO settings (key, value) VALUES ('pro_until', ?)\", args: [until] });\n await send(chatId, \"🔥 Pro mode for 2 hours — deeper counsel, higher cost. /eco to end early.\");\n return c.text(\"ok\");\n }\n if (m.text === \"/forge\") {\n const date = new Date().toISOString().slice(0, 10);\n await send(chatId, \"⚡ Forging in the cloud…\");\n const prev = Deno.env.get(\"FORGE_MODE\");\n await forgePlanBrain(chatId, date);\n return c.text(\"ok\");\n }\n if (m.text === \"/eco\") {\n await sqlite.execute(\"DELETE FROM settings WHERE key='pro_until'\");\n await send(chatId, \"🌿 Economy mode — brief and thrifty.\");\n return c.text(\"ok\");\n }\n if (m.text) {\n // API COST POLICY: brain only when clearly addressed — question mark, /ask, or \"bot ...\" prefix.\n // Everything else = free capture; the desktop Herald processes it on subscription.\n const txt = m.text.trim();\n // COST POLICY: the cloud brain costs API credits (no subscription exists outside the desktop app).\n // It wakes ONLY on an explicit /ask (or \"bot:\" prefix). Everything else is captured for FREE\n // and answered later by desktop Claude on the subscription.\n const explicit = /^\\/ask\\b/i.test(txt) || /^(bot|бот)[,:]/i.test(txt);\n if (BRAIN_KEY && explicit) {\n await brain(chatId, txt.replace(/^(\\/ask|bot|бот)[,:]?\\s*/i, \"\"));\n } else {\n // 31 Aug 2026: every private message goes through the smart router (Haiku classify:\n // task / note→Obsidian / directive / HQ / chat) — his explicit authorisation. The old\n // \"questions wait for the next watch\" economy path is retired; chatlog rows feed the vault.\n await smartCapture(chatId, txt);\n }\n return c.text(\"ok\");\n }\n await send(chatId, \"The stone does not yet understand this kind of message — send text or a voice note.\");\n return c.text(\"ok\");\n});\n\n// Morning Herald: deliver brief + interactive task picker to the owner\napp.post(\"/morning-form\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { brief } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" }, 400);\n const briefRes = brief ? await send(chatId, String(brief).slice(0, 3900), \"brief\")\n : { ok: true, message_id: null, error: null };\n const date = new Date().toISOString().slice(0, 10);\n const picker = await tg(\"sendMessage\", { chat_id: chatId, text: \"🗡 Choose today's battles — tap to cycle: ⬜ skip · 📅 today · ✅ already done. Then forge the plan.\",\n reply_markup: await buildKeyboard(date) });\n // The Herald could not prove its own brief arrived: this endpoint answered {ok:true}\n // whatever Telegram said. Now ok means both messages are really in the chat.\n const good = briefRes.ok && !!picker;\n return c.json({ ok: good, brief_message_id: briefRes.message_id,\n picker_message_id: picker?.message_id ?? null,\n error: good ? null : (briefRes.error ?? \"picker message was rejected by Telegram\") },\n good ? 200 : 502);\n});\napp.get(\"/dayplan\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM day_plan_text ORDER BY date DESC LIMIT 1\");\n return c.json(r.rows[0] ?? {});\n});\n\n// Today's choices from the morning form — any session can read what Alexandr picked\napp.get(\"/dayselection\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const date = c.req.query(\"date\") ?? new Date().toISOString().slice(0, 10);\n const r = await sqlite.execute({\n sql: `SELECT dp.task_id, dp.state, t.title, t.tier, t.area, t.note\n FROM day_plan dp LEFT JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = ? AND dp.state != 'none'`, args: [date] });\n const plan = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date = ?\", args: [date] });\n return c.json({ date, picks: r.rows, plan: plan.rows[0]?.plan ?? null });\n});\n// The plan column is text, but the palantir skill and the day-forger charter both\n// document an OBJECT ({slots,claude,yours,notes}). Binding that straight into SQLite\n// stored the literal string \"[object Object]\" and still answered {ok:true} — the day\n// plan was destroyed and the dashboard showed garbage, three mornings running. The\n// val now renders the documented shape instead of arguing with the documentation.\nfunction renderPlan(plan: any): string {\n if (plan == null) return \"\";\n if (typeof plan === \"string\") return plan;\n if (typeof plan !== \"object\") return String(plan);\n const out: string[] = [];\n for (const slot of (Array.isArray(plan.slots) ? plan.slots : [])) {\n const when = slot?.when ?? slot?.time ?? slot?.label ?? \"\";\n if (when) out.push(String(when));\n for (const it of (Array.isArray(slot?.items) ? slot.items : [])) out.push(\"• \" + it);\n out.push(\"\");\n }\n const block = (title: string, arr: any) => {\n if (!Array.isArray(arr) || !arr.length) return;\n out.push(title);\n for (const it of arr) out.push(\"• \" + it);\n out.push(\"\");\n };\n block(\"🤝 Claude takes\", plan.claude);\n block(\"🗡 Yours alone\", plan.yours);\n block(\"📝 Notes\", plan.notes);\n const text = out.join(\"\\n\").replace(/\\n{3,}/g, \"\\n\\n\").trim();\n // An object shaped like nothing we know is still better kept than silently lost.\n return text || JSON.stringify(plan);\n}\n\n// Desktop session stores the forged plan (free) so it shows on the dashboard\napp.post(\"/dayplan\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { date, plan } = await c.req.json();\n const text = renderPlan(plan);\n if (!text.trim()) return c.json({ ok: false, error: \"plan is empty — nothing was stored\" }, 400);\n const d = date ?? new Date().toISOString().slice(0, 10);\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\", args: [d, text] });\n // Read it back here so a caller does not have to do Law 5 by hand every morning.\n const back = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date=?\", args: [d] });\n const stored = String(back.rows[0]?.plan ?? \"\");\n return c.json({ ok: stored === text, date: d, chars: stored.length, preview: stored.slice(0, 140) },\n stored === text ? 200 : 500);\n});\n\n// AGENT BUS — HQ dispatches jobs, specialists claim and answer them.\n// A job claimed but never finished used to be listed by NOTHING: /agent/jobs served\n// only 'queued', /agent/results only 'done'/'failed'. Jobs 6-10 sat in 'running' for\n// two days while six runner passes reported \"queue empty\", and one of them carried\n// the accountant email with a same-day deadline. Anything abandoned now comes back.\nconst STALE_CLAIM_HOURS = 2;\nconst STALE_SQL = `(status='running' AND COALESCE(claimed_at, ts) < datetime('now','-${STALE_CLAIM_HOURS} hours'))`;\n\n// Both the secret in ?secret= (what every other endpoint uses) and in the body are\n// accepted here: the generated runner prompt sent it in the body, every claim 401'd,\n// and the bus was dead on arrival in complete silence.\nasync function busAuth(c: any, body?: any) {\n if (c.req.query(\"secret\") === PULL_SECRET) return true;\n return !!body && body.secret === PULL_SECRET;\n}\n\n// A brief that repeats work already delivered. Jobs 2-5 (17 Aug) and 11-13 (19 Aug)\n// were all duplicate dispatches, caught only because a human read reports/day/ by hand.\nasync function findJobTwin(agent: string, brief: string) {\n const key = titleKey(brief, 14);\n const quests = String(brief).match(/#\\d{1,4}/g) ?? [];\n const r = await sqlite.execute({\n sql: `SELECT id, ts, status, done_at, substr(brief,1,220) AS brief, substr(COALESCE(result,''),1,400) AS result\n FROM agent_jobs WHERE agent=? AND status IN ('done','running')\n AND ts > datetime('now','-14 days') ORDER BY id DESC LIMIT 40`,\n args: [agent] });\n for (const row of r.rows as any[]) {\n const q2 = String(row.brief).match(/#\\d{1,4}/g) ?? [];\n if (quests.length && q2.length && quests.some((q) => q2.includes(q))) return row;\n const k2 = titleKey(String(row.brief), 14);\n if (!key || !k2) continue;\n const a = new Set(key.split(\" \")), b = new Set(k2.split(\" \"));\n let hit = 0; a.forEach((w) => { if (b.has(w)) hit++; });\n if (hit / Math.max(a.size, b.size) >= 0.6) return row;\n }\n return null;\n}\n\napp.post(\"/agent/job\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { agent, brief, packs } = body;\n if (!agent || !brief) return c.json({ ok: false, error: \"agent and brief required\" }, 400);\n const twin = await findJobTwin(agent, String(brief));\n const r = await sqlite.execute({ sql: \"INSERT INTO agent_jobs (agent, brief, packs) VALUES (?,?,?) RETURNING id\",\n args: [agent, brief, JSON.stringify(packs ?? [])] });\n return c.json({\n ok: true, id: r.rows[0].id,\n duplicate_warning: twin ? {\n job: twin.id, status: twin.status, dispatched: twin.ts, done_at: twin.done_at,\n brief: twin.brief, result: twin.result,\n note: \"A very similar brief was already dispatched to this agent. Read that job's result before running this one, or close this job as a duplicate.\",\n } : null,\n });\n});\n\napp.get(\"/agent/jobs\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const agent = c.req.query(\"agent\");\n const r = agent\n ? await sqlite.execute({ sql: `SELECT * FROM agent_jobs WHERE (status='queued' OR ${STALE_SQL}) AND agent=? ORDER BY id`, args: [agent] })\n : await sqlite.execute(`SELECT * FROM agent_jobs WHERE status='queued' OR ${STALE_SQL} ORDER BY id`);\n return c.json(r.rows);\n});\n\n// The window that did not exist: every job, whatever its status, plus an explicit\n// stranded list. One call now answers \"is anything stuck?\" — it used to be unanswerable.\napp.get(\"/agent/status\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const counts = await sqlite.execute(\"SELECT status, COUNT(*) AS n FROM agent_jobs GROUP BY status\");\n const stranded = await sqlite.execute(\n `SELECT id, ts, claimed_at, agent, worker, substr(brief,1,200) AS brief FROM agent_jobs WHERE ${STALE_SQL} ORDER BY id`);\n const running = await sqlite.execute(\n \"SELECT id, ts, claimed_at, agent, worker, substr(brief,1,200) AS brief FROM agent_jobs WHERE status='running' ORDER BY id\");\n const recent = await sqlite.execute(\n \"SELECT id, ts, agent, status, claimed_at, worker, done_at, substr(brief,1,160) AS brief FROM agent_jobs ORDER BY id DESC LIMIT 50\");\n const byStatus: Record = {};\n for (const r of counts.rows as any[]) byStatus[String(r.status)] = Number(r.n);\n return c.json({ counts: byStatus, stranded_hours: STALE_CLAIM_HOURS,\n stranded: stranded.rows, running: running.rows, recent: recent.rows });\n});\n\nimport { mountBanking } from \"./banking.ts\";\nimport { mountVaultRoutes } from \"./vault-routes.ts\";\nmountBanking(app, sqlite, PULL_SECRET);\nmountVaultRoutes(app, sqlite, PULL_SECRET, busAuth);\n\n// ── Blocked runs (20 Aug 2026) ────────────────────────────────────────────────\n// Alexandr: \"some of our agents are stuck because the model flagged their attempts as\n// violating the policies… let's implement a loop that solves such problems.\"\n// A refused run is the one failure that leaves NO trace: the refusal happens before the\n// agent reaches its journal/runs.jsonl step, so the ledger shows nothing and the silence\n// looks like a quiet day. This table is where a block goes to survive its own session.\n// Doctrine lives in memory/packs/when-blocked.md — one rephrased retry, never a third.\napp.post(\"/agent/blocked\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { agent, step, brief, retry, note } = body;\n const attempts = Number(body.attempts ?? 1);\n const resolved = body.resolved ? 1 : 0;\n if (!agent || !step) return c.json({ ok: false, error: \"agent and step are required\" }, 400);\n const r = await sqlite.execute({\n sql: `INSERT INTO agent_blocked (agent, step, brief, retry, note, attempts, resolved)\n VALUES (?,?,?,?,?,?,?) RETURNING id`,\n args: [String(agent), String(step), String(brief ?? \"\"), String(retry ?? \"\"),\n String(note ?? \"\"), attempts, resolved],\n });\n const id = Number((r.rows[0] as any).id ?? (r.rows[0] as any)[0]);\n // A block that the rewrite rescued is bookkeeping, not news — it is recorded so the\n // Wright can see a brief that needs rephrasing EVERY day and fix it at the source,\n // but it must never interrupt him. Only an unresolved block is worth a nudge.\n return c.json({ ok: true, id, resolved: !!resolved, notify: !resolved });\n});\n\n// Open blocks, newest first. The Herald reads this each morning; the Steward audits it.\napp.get(\"/agent/blocked\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const open = await sqlite.execute(\n \"SELECT * FROM agent_blocked WHERE resolved=0 ORDER BY id DESC LIMIT 50\");\n // Repeat offenders: the same step blocking again and again is a badly written brief,\n // not bad luck. Surfacing the count is what turns a workaround into a real fix.\n const repeats = await sqlite.execute(\n `SELECT agent, step, COUNT(*) AS n, MAX(ts) AS last FROM agent_blocked\n GROUP BY agent, step HAVING n > 1 ORDER BY n DESC LIMIT 20`);\n return c.json({ open: open.rows, repeat_offenders: repeats.rows });\n});\n\n// Close one out — the Wright after fixing the brief, or Alexandr deciding it is a real no.\napp.post(\"/agent/blocked/resolve\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, note } = body;\n await sqlite.execute({\n sql: \"UPDATE agent_blocked SET resolved=1, note=COALESCE(NULLIF(?,''), note) WHERE id=?\",\n args: [String(note ?? \"\"), Number(id)] });\n const back = await sqlite.execute({ sql: \"SELECT * FROM agent_blocked WHERE id=?\", args: [Number(id)] });\n return c.json({ ok: true, row: back.rows[0] ?? null });\n});\n\n// Claim = the missing piece for a polling worker: without it, two overlapping runner\n// passes would both execute the same job. First claim wins; a claim older than 2h is\n// considered abandoned and can be re-claimed (a crashed run must not wedge the queue).\n// Staleness is measured from the CLAIM, not from job creation — the old test let a\n// two-hour-old job be stolen from a runner that had only just picked it up.\napp.post(\"/agent/claim\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, worker } = body;\n const exists = await sqlite.execute({ sql: \"SELECT status FROM agent_jobs WHERE id=?\", args: [Number(id)] });\n if (!exists.rows.length) return c.json({ ok: false, error: `no job ${id}` }, 404);\n const r = await sqlite.execute({\n sql: `UPDATE agent_jobs SET status='running', claimed_at=datetime('now'), worker=?\n WHERE id=? AND (status='queued' OR ${STALE_SQL})`,\n args: [String(worker ?? \"runner\"), Number(id)] });\n const claimed = (r.rowsAffected ?? 0) > 0;\n return c.json({ ok: true, claimed, id: Number(id),\n was: exists.rows[0].status,\n reason: claimed ? null : `job is ${exists.rows[0].status} and not stale — not claimable` });\n});\n\napp.post(\"/agent/result\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, result, ok } = body;\n const before = await sqlite.execute({ sql: \"SELECT status FROM agent_jobs WHERE id=?\", args: [Number(id)] });\n if (!before.rows.length) return c.json({ ok: false, error: `no job ${id}` }, 404);\n const status = ok === false ? \"failed\" : \"done\";\n await sqlite.execute({ sql: \"UPDATE agent_jobs SET status=?, result=?, done_at=datetime('now') WHERE id=?\",\n args: [status, result ?? \"\", Number(id)] });\n return c.json({ ok: true, id: Number(id), was: before.rows[0].status, now: status });\n});\n\napp.get(\"/agent/results\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM agent_jobs WHERE status IN ('done','failed') ORDER BY id DESC LIMIT 30\");\n // Shape stays a plain array on purpose — callers parse it unattended. Stranded work\n // is surfaced by /agent/jobs (it comes back into the queue) and by /agent/status.\n return c.json(r.rows);\n});\n\n// NEWS FEEDBACK — the Scribe registers items, Alexandr taps verdicts, HQ/Scribe learn from them\napp.post(\"/news/register\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { items } = await c.req.json(); // [{key,title,source,topic}]\n for (const i of items ?? []) {\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO news_items (key,title,source,topic) VALUES (?,?,?,?)\",\n args: [i.key, i.title ?? \"\", i.source ?? \"\", i.topic ?? \"\"] });\n }\n return c.json({ ok: true, n: (items ?? []).length });\n});\napp.get(\"/news/feedback\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const all = c.req.query(\"all\") === \"1\";\n const r = await sqlite.execute(all\n ? \"SELECT * FROM news_feedback ORDER BY id DESC LIMIT 200\"\n : \"SELECT * FROM news_feedback WHERE applied = 0 ORDER BY id\");\n return c.json(r.rows);\n});\napp.post(\"/news/feedback/applied\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) await sqlite.execute({ sql: \"UPDATE news_feedback SET applied=1 WHERE id=?\", args: [Number(id)] });\n return c.json({ ok: true });\n});\n// Send one digest item with feedback buttons (called by the Scribe)\napp.post(\"/news/send\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { text, key } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" });\n await tg(\"sendMessage\", { chat_id: chatId, text, parse_mode: \"Markdown\",\n disable_web_page_preview: true,\n reply_markup: key ? { inline_keyboard: [[\n { text: \"👍\", callback_data: `n:up:${key}` },\n { text: \"👎\", callback_data: `n:down:${key}` },\n { text: \"⭐\", callback_data: `n:star:${key}` },\n { text: \"🚫\", callback_data: `n:block:${key}` },\n ]] } : undefined });\n return c.json({ ok: true });\n});\n\n// IN-ARTICLE REACTIONS — the Morning Edition (telegra.ph) ends every story with 👍👎⭐🚫 links.\n// The article is public, so links carry an HMAC token derived from PULL_SECRET instead of any\n// secret itself. Recording happens via a JS POST from the confirmation page, never on GET —\n// crawlers and link-prefetchers that fetch a URL must not be able to write feedback\n// (robots.txt below is the first fence, no-JS-no-write is the second, the HMAC is the third).\n// Tokens never expire by design: Alexandr reads old editions days later and reactions still count.\nasync function newsToken(key: string, v: string): Promise {\n const enc = new TextEncoder();\n const k = await crypto.subtle.importKey(\"raw\", enc.encode(PULL_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\", k, enc.encode(`${key}:${v}`));\n return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\").slice(0, 20);\n}\nconst V_EMOJI: Record = { up: \"👍\", down: \"👎\", star: \"⭐\", block: \"🚫\" };\nconst V_LABEL: Record = {\n up: \"More like this — noted\", down: \"Less of this — noted\",\n star: \"Marked important\", block: \"Never again — banished\",\n};\nconst esc = (s: string) => s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n\nfunction reactShell(inner: string): string {\n return `\n\nPalantír

${inner}

`;\n}\n\napp.get(\"/robots.txt\", (c) => c.text(\"User-agent: *\\nDisallow: /\\n\"));\n\napp.get(\"/news/react\", async (c) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) {\n return c.html(reactShell(`

🌫

The stone does not know this sign

Stale or invalid reaction link.

`), 403);\n }\n const it = await sqlite.execute({ sql: \"SELECT title FROM news_items WHERE key=?\", args: [key] });\n const title = esc((it.rows[0]?.title as string) || key);\n const others = (await Promise.all(Object.keys(V_EMOJI).filter((x) => x !== v).map(async (x) =>\n `${V_EMOJI[x]}`,\n ))).join(\"\");\n return c.html(reactShell(`

${V_EMOJI[v]}

Recording…

“${title}”

${others}

\nChanged your mind? Tap another sign above.
Otherwise just close this page and return to the article.\n\n`));\n});\n\napp.post(\"/news/react\", async (c) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) return c.json({ ok: false }, 403);\n // Reloading the page re-POSTs; don't let one opinion count twice while unapplied.\n const dup = await sqlite.execute({\n sql: \"SELECT id FROM news_feedback WHERE item_key=? AND verdict=? AND applied=0\", args: [key, v] });\n if (dup.rows.length) return c.json({ ok: true, dup: true });\n const it = await sqlite.execute({ sql: \"SELECT * FROM news_items WHERE key=?\", args: [key] });\n const row: any = it.rows[0] ?? {};\n await sqlite.execute({\n sql: \"INSERT INTO news_feedback (item_key,title,source,topic,verdict) VALUES (?,?,?,?,?)\",\n args: [key, row.title ?? \"\", row.source ?? \"\", row.topic ?? \"\", v] });\n return c.json({ ok: true });\n});\n\n// MORNING EDITION (mini-app) — the sender posts the day's edition, Telegram opens\n// /edition/:date as a web app: he reads and reacts IN PLACE (no page switch — the\n// telegra.ph round-trip through a confirmation page lasted exactly one morning, 11 Aug).\napp.post(\"/news/edition\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n if (!b.date || !Array.isArray(b.blocks)) return c.json({ ok: false, error: \"date and blocks required\" });\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO editions (date,title,data) VALUES (?,?,?)\",\n args: [b.date, b.title ?? \"Morning Edition\", JSON.stringify(b)] });\n await sqlite.execute(\"DELETE FROM editions WHERE date < date('now','-120 days')\");\n const n = (b.blocks as any[]).reduce((a, x) => a + (x.items?.length ?? 0), 0);\n return c.json({ ok: true, stories: n });\n});\n\n// One message + one button that opens the edition as a mini-app.\napp.post(\"/news/announce\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { date, text } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" });\n const base = new URL(c.req.url).origin;\n const r = await tg(\"sendMessage\", { chat_id: chatId, text, parse_mode: \"Markdown\",\n reply_markup: { inline_keyboard: [[{ text: \"📖 Open the Morning Edition\",\n web_app: { url: `${base}/edition/${date}` } }]] } });\n return c.json({ ok: !!r, message_id: r?.message_id });\n});\n\napp.get(\"/edition/:date\", async (c) => {\n const date = c.req.param(\"date\");\n const r = await sqlite.execute({ sql: \"SELECT title, data FROM editions WHERE date=?\", args: [date] });\n if (!r.rows.length) {\n return c.html(`\n\n

🌫 No edition for ${esc(date)}.

`, 404);\n }\n const ed = JSON.parse(r.rows[0].data as string);\n const keys: string[] = ed.blocks.flatMap((b: any) => (b.items ?? []).map((i: any) => i.key));\n const cur: Record = {};\n if (keys.length) {\n const fb = await sqlite.execute({\n sql: `SELECT item_key, verdict FROM news_feedback WHERE item_key IN (${keys.map(() => \"?\").join(\",\")}) ORDER BY id`,\n args: keys });\n for (const row of fb.rows as any[]) cur[row.item_key as string] = row.verdict as string;\n }\n let body = \"\";\n for (const b of ed.blocks) {\n body += `

${esc(b.title)}

\\n`;\n for (const it of b.items ?? []) {\n const btns = (await Promise.all([\"up\", \"down\", \"star\", \"block\"].map(async (v) =>\n ``,\n ))).join(\"\");\n body += `

${esc(it.title)}

\\n`\n + (it.paras ?? []).map((p: string) => `

${p}

`).join(\"\\n\")\n + `\\n

${esc(it.source)} ↗

${btns}

\\n`;\n }\n }\n const page = `\n\n${esc(ed.title)}\n\n

${esc(ed.title)}

\n${ed.stats ? `

${esc(ed.stats)}

` : \"\"}\n${ed.learned ? `

${esc(ed.learned)}

` : \"\"}\n${body}\n

👍 more like this · 👎 less · ⭐ important · 🚫 never again — every tap teaches the Palantír, even days later. Tap again to change your mind.

\n`;\n return c.html(page);\n});\n\n// SHARED JOURNAL — every session logs what it did here; the main HQ session files it into JOURNAL/\napp.post(\"/journal\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { source, summary, details } = await c.req.json();\n if (!summary) return c.json({ ok: false, error: \"summary required\" });\n await sqlite.execute({\n sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [source ?? \"unknown session\", summary, details ?? \"\"],\n });\n return c.json({ ok: true });\n});\napp.get(\"/journal\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const all = c.req.query(\"all\") === \"1\";\n const r = await sqlite.execute(all\n ? \"SELECT * FROM journal ORDER BY id DESC LIMIT 100\"\n : \"SELECT * FROM journal WHERE filed = 0 ORDER BY id\");\n return c.json(r.rows);\n});\napp.post(\"/journal/filed\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE journal SET filed = 1 WHERE id = ?\", args: [Number(id)] });\n }\n return c.json({ ok: true });\n});\n\n// Claude sessions: read the work-group scribe log (owner's eyes only)\napp.get(\"/group\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const since = c.req.query(\"since\") ?? \"1970-01-01\";\n const limit = Math.min(Number(c.req.query(\"limit\") ?? 200), 500);\n const r = await sqlite.execute({\n sql: \"SELECT * FROM group_log WHERE ts >= ? ORDER BY id DESC LIMIT ?\",\n args: [since, limit],\n });\n return c.json(r.rows);\n});\n\n// Claude sessions: fetch unprocessed captures\napp.get(\"/pull\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM inbox WHERE processed = 0 ORDER BY id\");\n return c.json(r.rows);\n});\n// Claude sessions: mark processed\napp.post(\"/ack\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE inbox SET processed = 1 WHERE id = ?\", args: [id] });\n }\n return c.json({ ok: true });\n});\n// Outbound ping from Claude (desktop sessions, Herald, crons)\napp.post(\"/send\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { text, chat_id } = await c.req.json();\n let target = chat_id;\n if (!target) {\n const r = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n target = r.rows[0]?.chat_id;\n }\n if (!target) return c.json({ ok: false, error: \"no chat registered — /start the bot first\" }, 400);\n const res = await send(target as number, text);\n // {ok:true} used to be returned even when Telegram refused the message. It now\n // means Telegram accepted it and message_id is the proof (GET /outbox to re-read).\n return c.json({ ok: res.ok, message_id: res.message_id, chat_id: target, error: res.error },\n res.ok ? 200 : 502);\n});\n\n\n// ---------- Quest Log CRUD (dashboard + Claude sessions) ----------\nconst auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n\napp.get(\"/tasks\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n // Default = Alexandr's own quests only. The dashboard Quest Log calls this bare,\n // so team tasks can never crowd his personal day. ?owner=all|danny|sergey for the board.\n const who = c.req.query(\"owner\") ?? \"alexandr\";\n const sqlOwner = who === \"all\" ? \"\" : \" AND COALESCE(owner,'alexandr') = ?\";\n const r = await sqlite.execute({\n sql: \"SELECT * FROM tasks WHERE status='open'\" + sqlOwner +\n \" ORDER BY CASE tier WHEN 'balrog' THEN 0 WHEN 'nazgul' THEN 1 WHEN 'fellowship' THEN 2 ELSE 3 END, ord, id\",\n args: who === \"all\" ? [] : [who] });\n return c.json(r.rows);\n});\napp.get(\"/tasks/all\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM tasks ORDER BY status, tier, ord LIMIT 300\");\n return c.json(r.rows);\n});\napp.post(\"/tasks\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n if (!b.force) {\n const twin = await findTwin(b.title);\n if (twin) return c.json({ ok: false, duplicate: true, existing: twin,\n hint: \"An equivalent task already exists. Reopen or comment on it, or resend with force:true.\" }, 409);\n }\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [b.tier ?? \"fellowship\"] });\n const r = await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?) RETURNING *\",\n args: [b.title, b.note ?? \"\", b.tier ?? \"fellowship\", b.area ?? \"\", b.ord ?? mx.rows[0].o,\n b.owner ?? \"alexandr\"],\n });\n return c.json(r.rows[0]);\n});\napp.post(\"/tasks/bulk\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const items = await c.req.json();\n let n = 0;\n const skipped: any[] = [];\n for (const b of items) {\n if (!b.force) {\n const twin = await findTwin(b.title);\n if (twin) { skipped.push({ title: b.title, existing: twin }); continue; }\n }\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord) VALUES (?,?,?,?,?)\",\n args: [b.title, b.note ?? \"\", b.tier ?? \"fellowship\", b.area ?? \"\", (n + 1) * 10],\n });\n n++;\n }\n return c.json({ ok: true, inserted: n, skippedAsDuplicate: skipped });\n});\napp.patch(\"/tasks/:id\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n const allowed = [\"title\", \"note\", \"tier\", \"area\", \"ord\", \"status\", \"owner\"];\n const exists = await sqlite.execute({ sql: \"SELECT 1 FROM tasks WHERE id=?\", args: [id] });\n if (!exists.rows.length) return c.json({ ok: false, error: `no task ${id}` }, 404);\n // Unknown keys used to be dropped in silence behind a 200 and the row echoed back,\n // which is indistinguishable from success: a quest comment sent as {comment:...}\n // simply ceased to exist. Same 2xx-proves-nothing family as the bus defects.\n const unknown = Object.keys(b).filter((k) => !allowed.includes(k));\n if (unknown.length) {\n return c.json({ ok: false, error: `unknown field(s): ${unknown.join(\", \")} — nothing was written`,\n allowed, hint: \"comments go to POST /tasks/:id/comment {\\\"text\\\":\\\"...\\\"}\" }, 400);\n }\n const touched = allowed.filter((k) => k in b);\n if (!touched.length) return c.json({ ok: false, error: \"nothing to update\", allowed }, 400);\n for (const k of touched) {\n await sqlite.execute({ sql: `UPDATE tasks SET ${k}=? WHERE id=?`, args: [b[k], id] });\n }\n if (b.status === \"done\") {\n await sqlite.execute({ sql: \"UPDATE tasks SET done_at=datetime('now') WHERE id=?\", args: [id] });\n }\n const r = await sqlite.execute({ sql: \"SELECT * FROM tasks WHERE id=?\", args: [id] });\n return c.json({ ok: true, updated: touched, task: r.rows[0] ?? null });\n});\napp.post(\"/tasks/:id/comment\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const id = Number(c.req.param(\"id\"));\n const { text } = await c.req.json();\n const r = await sqlite.execute({ sql: \"SELECT comments FROM tasks WHERE id=?\", args: [id] });\n const comments = JSON.parse((r.rows[0]?.comments as string) ?? \"[]\");\n comments.push({ text, ts: new Date().toISOString().slice(0, 16).replace(\"T\", \" \") });\n await sqlite.execute({ sql: \"UPDATE tasks SET comments=? WHERE id=?\", args: [JSON.stringify(comments), id] });\n return c.json({ ok: true, count: comments.length });\n});\n\n// Warden triggers — called by the desktop scheduler (or manually); in-code window guards still apply\napp.get(\"/warden/:mode\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const mode = c.req.param(\"mode\");\n if (mode !== \"monday\" && mode !== \"friday\") return c.text(\"unknown mode\", 400);\n const { runWarden } = await import(\"./warden-shared.ts\");\n await runWarden(mode as \"monday\" | \"friday\");\n return c.json({ ok: true, note: \"ran with window guards — check logs for skip/post\" });\n});\n\n// Roll yesterday's unfinished picks into today. Without this, choosing eight\n// battles and finishing three left the other five stranded — off the plan, off\n// the dashboard, remembered only by Alexandr.\napp.post(\"/day/rollover\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const date = (await c.req.json().catch(() => ({}))).date ?? new Date().toISOString().slice(0, 10);\n const y = await sqlite.execute({\n sql: `SELECT dp.task_id, t.title FROM day_plan dp JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = date(?, '-1 day') AND dp.state = 'today' AND t.status = 'open'`,\n args: [date] });\n const carried: string[] = [];\n for (const r of y.rows as any[]) {\n const has = await sqlite.execute({\n sql: \"SELECT 1 FROM day_plan WHERE date=? AND task_id=?\", args: [date, r.task_id] });\n if (has.rows.length) continue;\n await sqlite.execute({\n sql: \"INSERT INTO day_plan (date, task_id, state) VALUES (?,?,'today')\",\n args: [date, r.task_id] });\n carried.push(r.title as string);\n }\n return c.json({ ok: true, date, carried: carried.length, titles: carried });\n});\n\n// Promises made in a plan become executable work items. Before 17 Aug the plan's\n// \"🤝 I take\" list was prose nobody re-read: the forger's later passes saw \"already\n// forged\" and exited, so promised work silently never happened (quest #44, coffee).\napp.post(\"/directive\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n const items: string[] = Array.isArray(b.items) ? b.items : [b.text].filter(Boolean);\n let n = 0;\n for (const t of items) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (0,'directive',?,0)\",\n args: [String(t).slice(0, 500)] });\n n++;\n }\n return c.json({ ok: true, queued: n });\n});\n\n// Delivery proof. Any agent can end a run by reading its own message back instead of\n// trusting a 2xx, and a silent failure leaves a row with ok=0 and Telegram's reason.\napp.get(\"/outbox\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const limit = Math.min(Math.max(Number(c.req.query(\"limit\") ?? 20), 1), 200);\n const failedOnly = c.req.query(\"failed\") === \"1\";\n const r = await sqlite.execute({\n sql: `SELECT * FROM outbox ${failedOnly ? \"WHERE ok=0\" : \"\"} ORDER BY id DESC LIMIT ?`,\n args: [limit] });\n const f = await sqlite.execute(\"SELECT COUNT(*) AS n FROM outbox WHERE ok=0 AND ts > datetime('now','-7 days')\");\n return c.json({ failed_last_7d: Number((f.rows[0] as any)?.n ?? 0), messages: r.rows });\n});\n\napp.get(\"/\", (c) => c.text(\"🔮 Palantír Herald stands watch.\"));\nexport default app.fetch;\n",[173],"0fbc0a46-a30e-40d6-8984-74ab0c920778","banking.ts","cd5510ca-a4b0-11f1-9272-1607ee4eb77e",45,["D",1788121469111],"// Banking module (split out 31 Aug 2026 — bot-webhook.ts crossed Val Town's 80k file limit).\n// Consent landing + one-time code store + privacy/terms pages for the Enable Banking app.\n// Mounted by bot-webhook.ts: mountBanking(app, sqlite, PULL_SECRET).\nexport function mountBanking(app: any, sqlite: any, PULL_SECRET: string) {\n// PSD2 consent redirects carry a one-time auth code. A localhost redirect dies on a\n// connection-refused page and the code dies with it (tonight's lesson). This endpoint is a\n// REAL landing page: it stores the code briefly and thanks the human. The callback must be\n// public (banks can't carry our secret); retrieval requires PULL_SECRET; codes are one-time,\n// short-lived upstream, and cleared on read. No account data ever passes through here.\napp.get(\"/banking/callback\", async (c) => {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banking_codes (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n code TEXT, state TEXT, taken INTEGER DEFAULT 0)`);\n const code = c.req.query(\"code\") ?? \"\", state = c.req.query(\"state\") ?? \"\";\n if (code) {\n await sqlite.execute({ sql: \"INSERT INTO banking_codes (code, state) VALUES (?,?)\", args: [code, state] });\n }\n const err = c.req.query(\"error\") ?? \"\";\n return c.html(`

${code ? \"✅ Consent received\" : err ? \"⚠️ \" + err : \"Nothing here\"}

${code ? \"The Palantír has it. You can close this tab.\" : \"You can close this tab.\"}

`);\n});\napp.get(\"/banking/code\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banking_codes (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n code TEXT, state TEXT, taken INTEGER DEFAULT 0)`);\n const r = await sqlite.execute(\"SELECT * FROM banking_codes WHERE taken=0 ORDER BY id DESC LIMIT 1\");\n if (!r.rows.length) return c.json({ ok: false, code: null });\n const row = r.rows[0] as any;\n await sqlite.execute({ sql: \"UPDATE banking_codes SET taken=1, code='' WHERE id=?\", args: [row.id] });\n return c.json({ ok: true, code: row.code, state: row.state, ts: row.ts });\n});\n\n// Privacy + terms pages for the Enable Banking production app registration (their portal\n// requires a Privacy URL). Honest and accurate: personal single-user application; the sole\n// user IS the data subject; data is processed on his own machine and shared with no one.\napp.get(\"/banking/privacy\", (c) => c.html(`Privacy — Palantir Finance Reader

Privacy Policy — Palantir Finance Reader

Last updated: 30 August 2026

Palantir Finance Reader is a personal, single-user application operated by its sole user, Alexandr Stakhov. It exists to display the user's own bank account information to the user himself.

What data is processed

Account balances and transaction data for the user's own payment accounts, retrieved read-only via Enable Banking (a licensed AISP) with the user's explicit PSD2 consent, given in his own bank's interface.

How it is used and stored

Data is transferred to and processed on the user's own private computer. It is used solely to render the user's private financial dashboard and records. It is not shared with, sold to, or made accessible to any third party. No analytics, no advertising, no profiling of anyone other than the user by the user.

Consent and revocation

Consents are valid for up to 90 days and can be revoked at any time in the bank's own app or by contacting the address below. Revocation stops all further data retrieval.

Contact

Data protection matters: stakhov.alexandr@gmail.com

`));\napp.get(\"/banking/terms\", (c) => c.html(`Terms — Palantir Finance Reader

Terms of Use — Palantir Finance Reader

Last updated: 30 August 2026

Palantir Finance Reader is a personal application with exactly one authorised user: its operator, Alexandr Stakhov. It provides read-only access to the operator's own bank account information for private financial overview purposes. It initiates no payments, offers no services to any other person, and grants no third party access to any data. Use by anyone other than the operator is not offered and not permitted.

Contact: stakhov.alexandr@gmail.com

`));\n\n}\n",[181],"pulls","branches","forks","envVars",{"_194":196,"_197":59},"connections",{"_194":59,"_195":59},"count","unfilledCount",8,"emptyCount",{"_41":180,"_31":181,"_29":182,"_138":-5,"_39":40,"_38":183,"_140":123,"_36":224,"_13":59,"_32":33,"_34":185,"_23":24,"_144":-5,"_206":225,"_26":226},{"_41":172,"_31":173,"_29":174,"_138":-5,"_39":40,"_38":175,"_140":24,"_36":221,"_13":160,"_32":177,"_34":178,"_23":24,"_144":-5,"_206":222,"_26":223},{"_41":164,"_31":165,"_29":166,"_138":-5,"_39":40,"_38":167,"_140":123,"_36":218,"_13":169,"_32":33,"_34":170,"_23":24,"_144":-5,"_206":219,"_26":220},{"_41":157,"_31":158,"_29":159,"_138":-5,"_39":40,"_38":160,"_140":123,"_36":215,"_13":154,"_32":33,"_34":162,"_23":24,"_144":-5,"_206":216,"_26":217},{"_41":149,"_31":150,"_29":151,"_138":-5,"_39":40,"_38":152,"_140":123,"_36":212,"_13":154,"_32":33,"_34":155,"_23":24,"_144":-5,"_206":213,"_26":214},{"_41":146,"_31":27,"_29":30,"_138":-5,"_39":40,"_38":14,"_140":24,"_36":209,"_13":59,"_32":33,"_34":35,"_23":24,"_144":-5,"_206":210,"_26":211},{"_41":135,"_31":136,"_29":137,"_138":-5,"_39":40,"_38":139,"_140":24,"_36":205,"_13":142,"_32":33,"_34":143,"_23":24,"_144":-5,"_206":207,"_26":208},["D",1787216156697],"children",[],[136],["D",1788157264555],[],[27],["D",1786527835897],[],[150],["D",1786527836389],[],[158],["D",1786485045527],[],[165],["D",1788157262093],[],[173],["D",1788121469111],[],[181],["D",1783928553221],["D",1789525245864],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":53,"_101":102,"_103":24},{"_13":85,"_31":86,"_41":40,"_87":42,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":43,"_94":95},"ctx",{"_78":-5,"_125":265,"_266":267,"_268":269,"_270":24,"_271":24,"_272":24,"_273":123,"_274":-5,"_275":-7,"_276":-7,"_277":59,"_278":24,"_279":24,"_280":-5,"_281":24,"_282":24,"_283":24,"_284":-5},"ENV",{"_236":237,"_238":239,"_240":86,"_241":242,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v47