${inner}

`;\n}\n\napp.get(\"/robots.txt\", (c: any) => c.text(\"User-agent: *\\nDisallow: /\\n\"));\n\napp.get(\"/news/react\", async (c: any) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) {\n return c.html(reactShell(`

🌫

The stone does not know this sign

Stale or invalid reaction link.

`), 403);\n }\n const it = await sqlite.execute({ sql: \"SELECT title FROM news_items WHERE key=?\", args: [key] });\n const title = esc((it.rows[0]?.title as string) || key);\n const others = (await Promise.all(Object.keys(V_EMOJI).filter((x) => x !== v).map(async (x) =>\n `${V_EMOJI[x]}`,\n ))).join(\"\");\n return c.html(reactShell(`

${V_EMOJI[v]}

Recording…

“${title}”

${others}

\nChanged your mind? Tap another sign above.
Otherwise just close this page and return to the article.\n\n`));\n});\n\napp.post(\"/news/react\", async (c: any) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) return c.json({ ok: false }, 403);\n // Reloading the page re-POSTs; don't let one opinion count twice while unapplied.\n const dup = await sqlite.execute({\n sql: \"SELECT id FROM news_feedback WHERE item_key=? AND verdict=? AND applied=0\", args: [key, v] });\n if (dup.rows.length) return c.json({ ok: true, dup: true });\n const it = await sqlite.execute({ sql: \"SELECT * FROM news_items WHERE key=?\", args: [key] });\n const row: any = it.rows[0] ?? {};\n await sqlite.execute({\n sql: \"INSERT INTO news_feedback (item_key,title,source,topic,verdict) VALUES (?,?,?,?,?)\",\n args: [key, row.title ?? \"\", row.source ?? \"\", row.topic ?? \"\", v] });\n return c.json({ ok: true });\n});\n\n// MORNING EDITION (mini-app) — the sender posts the day's edition, Telegram opens\n// /edition/:date as a web app: he reads and reacts IN PLACE (no page switch — the\n// telegra.ph round-trip through a confirmation page lasted exactly one morning, 11 Aug).\napp.post(\"/news/edition\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n if (!b.date || !Array.isArray(b.blocks)) return c.json({ ok: false, error: \"date and blocks required\" });\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO editions (date,title,data) VALUES (?,?,?)\",\n args: [b.date, b.title ?? \"Morning Edition\", JSON.stringify(b)] });\n await sqlite.execute(\"DELETE FROM editions WHERE date < date('now','-120 days')\");\n const n = (b.blocks as any[]).reduce((a, x) => a + (x.items?.length ?? 0), 0);\n return c.json({ ok: true, stories: n });\n});\n\n// One message + one button that opens the edition as a mini-app.\napp.post(\"/news/announce\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { date, text } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" });\n const base = new URL(c.req.url).origin;\n const r = await tg(\"sendMessage\", { chat_id: chatId, text, parse_mode: \"Markdown\",\n reply_markup: { inline_keyboard: [[{ text: \"📖 Open the Morning Edition\",\n web_app: { url: `${base}/edition/${date}` } }]] } });\n return c.json({ ok: !!r, message_id: r?.message_id });\n});\n\napp.get(\"/edition/:date\", async (c: any) => {\n const date = c.req.param(\"date\");\n const r = await sqlite.execute({ sql: \"SELECT title, data FROM editions WHERE date=?\", args: [date] });\n if (!r.rows.length) {\n return c.html(`\n\n

🌫 No edition for ${esc(date)}.

`, 404);\n }\n const ed = JSON.parse(r.rows[0].data as string);\n const keys: string[] = ed.blocks.flatMap((b: any) => (b.items ?? []).map((i: any) => i.key));\n const cur: Record = {};\n if (keys.length) {\n const fb = await sqlite.execute({\n sql: `SELECT item_key, verdict FROM news_feedback WHERE item_key IN (${keys.map(() => \"?\").join(\",\")}) ORDER BY id`,\n args: keys });\n for (const row of fb.rows as any[]) cur[row.item_key as string] = row.verdict as string;\n }\n let body = \"\";\n for (const b of ed.blocks) {\n body += `

${esc(b.title)}

\\n`;\n for (const it of b.items ?? []) {\n const btns = (await Promise.all([\"up\", \"down\", \"star\", \"block\"].map(async (v) =>\n ``,\n ))).join(\"\");\n body += `

${esc(it.title)}

\\n`\n + (it.paras ?? []).map((p: string) => `

${p}

`).join(\"\\n\")\n + `\\n

${esc(it.source)} ↗

${btns}

\\n`;\n }\n }\n const page = `\n\n${esc(ed.title)}\n\n

${esc(ed.title)}

\n${ed.stats ? `

${esc(ed.stats)}

` : \"\"}\n${ed.learned ? `

${esc(ed.learned)}

` : \"\"}\n${body}\n

👍 more like this · 👎 less · ⭐ important · 🚫 never again — every tap teaches the Palantír, even days later. Tap again to change your mind.

\n`;\n return c.html(page);\n});\n\n}\n",[182],"890002d1-9851-48b4-96db-115344042c2e","news-fetch.ts","99de6ef4-ae41-11f1-ab49-1607ee4eb77e",99,["D",1789173917809],2,"/**\n * NEWS FETCH — the val-side news fetcher, piece 2 of the cold path (task #220, 12 Sep 2026).\n *\n * Nina the News Editor runs on Alexandr's PC at 06:45 and curates what scripts/news_fetch.py fetched.\n * When the PC is off nothing is fetched, and the morning has no edition at all. Fetching is plain HTTP —\n * RSS feeds and public Telegram channel previews — and belongs in the val, which is always on; curating\n * is judgement and stays on the desktop. This file fetches on an hourly interval, stores what it finds,\n * and serves it back as rows the desktop can read exactly as if news_fetch.py had fetched them itself.\n * A morning with the PC off then costs a LATE edition instead of a MISSING one.\n *\n * It is a port of news_fetch.py's get / clean / parse_rss / parse_telegram, behaviour for behaviour,\n * because the two must produce the SAME item from the same feed: the desktop dedupes on\n * url + \"|\" + title[:80] (news_seen.json), and an item whose title differs by one character on the val\n * publishes twice. The gotchas that follow from that:\n * - Python slices strings by code point; JS .slice() by UTF-16 code unit. An emoji is one code point\n * and two code units, and 42 of the 59 sources are Telegram channels whose posts open with 🇷🇺 ⚡️ 🔥.\n * Every truncation here goes through cut(), which slices by code point, and the 40-character floor\n * on a Telegram post counts code points too (Python's len()).\n * - Python reads 200000 BYTES and then decodes; the cap here is applied to the byte stream before\n * TextDecoder, never to the decoded string.\n * - Python's html.unescape knows 2231 named entities; Deno has none. unescape() below handles every\n * numeric form (with the HTML5 remap of €–Ÿ to their cp1252 meanings) and a table of the\n * names that occur in feeds. The residual gap is a rare named entity left as written, in the title\n * and therefore in the key — see the comment on unescape().\n *\n * What it must never do: call a model; send a Telegram message; filter by age (MAX_AGE_DAYS stays in\n * news_fetch.py so both modes run ONE implementation — the `iso` column is advisory and never served);\n * touch feedback, preferences, selection or scoring; or consume anything: a pull is a pure window read,\n * nothing is marked, moved or deleted, and news_seen.json on the desktop stays the single authority on\n * what has been shown.\n *\n * The flag is settings key `flag.news_fetch_val`, \"on\" the only truthy value. It governs the DESKTOP\n * (whether news_fetch.py pulls from here instead of fetching itself); this file only reads and reports\n * it, never writes it, and fetches and stores identically either way — the off-period data is the\n * evidence for switching it on, exactly as reconciler.ts runs its full assessment while off.\n *\n * Schedule: `20 * * * *` UTC, set by hand in the Val Town UI (the API cannot read or set it). Every\n * wake does work (unlike the reconciler, no hour is skipped): a SLICE of 16 sources, least recently\n * tried first, so 59 sources rotate in under four hours; and at 05 and 06 Europe/Amsterdam a FULL\n * sweep, so fresh items are in hand just before Nina's 06:45 — 06:00 local is 04:00 UTC in summer and\n * 05:00 UTC in winter, which is why the gate is local. Two full hours so a deadline-truncated 05:20\n * sweep gets its second chance at 06:20. The file stays correct with the cron unset — deployed but\n * never firing — because the routes need no pass to have run and POST /news/fetch/run proves the code path.\n *\n * Idempotency (Law 6): one INSERT OR IGNORE on news_fetch_log's primary key, claimed before any HTTP —\n * pass:: for the interval, run: for a hand run (so it can never take the\n * hour's key from the interval), day: for the day's journal line. Items are INSERT OR IGNORE\n * on their key. A pass that throws once claimed writes a DIED receipt naming the step it died at, so it\n * is never indistinguishable from a pass that had nothing to say.\n *\n * Journal (Law 7): ONE line per local day, from the hour-6 pass — 24 lines a day would be noise; the\n * per-pass record is news_fetch_log. Source `news-fetch-val`: reconciler.ts's silence matcher looks for\n * 'nina-news-editor%' and 'news-scribe%', and this matches neither, so these lines can never be read as\n * Nina having run.\n *\n * Deployed twice from one file, like reconciler.ts: as its own interval val (the default export; its\n * import graph is this file and std/sqlite, nothing else), and imported statically by the HTTP val for\n * the routes: mountNewsFetch(app, sqlite, PULL_SECRET). Every route is ?secret=, none is flag-gated\n * (all must be exercisable while off). Stamps in responses are SQLite's 'YYYY-MM-DD HH:MM:SS' UTC\n * unless the key says otherwise (`now` is ISO).\n * GET /news/fetch/status → flag, sources, last pass, what is held, failing sources\n * GET /news/fetch/items?hours=120&limit=500&before=&debug=0\n * → rows of EXACTLY {source, topic, title, url, summary, when}, newest first: a drop-in for\n * news_raw.json[\"items\"] before the desktop's iso_of() runs. debug=1 adds _key and _first_seen.\n * POST /news/fetch/sources {sources:[…news_sources.json entries…], stamp?}\n * → upsert by name; a name absent from the push is retired (present=0, enabled=0), never deleted;\n * fewer than 5 entries is refused (400) so a truncated push can never blind the cold path.\n * POST /news/fetch/run {dry?, scope?:\"slice\"|\"full\", only?:[names], at?} → one pass, the interval's code path\n * POST /news/fetch/prune {before:\"YYYY-MM-DD\"} | {days:N}, force? → deletes held items, journals it\n * The sources are pushed by the desktop, never built in: no push means a pass tries nothing and says so.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TZ = \"Europe/Amsterdam\";\nconst SOURCE = \"news-fetch-val\";\nconst FLAG_KEY = \"flag.news_fetch_val\";\nexport const CRON = \"20 * * * *\"; // UTC, hourly at :20 — set by hand in the Val Town UI; reported by /news/fetch/status\n\nexport const SLICE_N = 16; // sources per hourly slice: 59 rotate in under four hours\nexport const CONCURRENCY = 6; // sources in flight at once\nexport const SOURCE_TIMEOUT_MS = 12_000; // one source's whole GET, connect to last byte\nexport const DEADLINE_MS = 45_000; // one pass's FETCH budget: a batch that cannot fetch inside it is not started.\n // The per-source store, the log row and hour 6's day line ride on top of it.\nexport const BODY_LIMIT = 200_000; // bytes read per source, before decoding — news_fetch.py's r.read(200000)\n// The desktop pulls GET /news/fetch/items?hours=120 (scripts/news_fetch.py) — five days. RETENTION_DAYS must\n// stay >= that window, or a PC that was off for a week comes back to find its window already pruned.\nexport const RETENTION_DAYS = 14;\nconst DESKTOP_WINDOW_H = 120;\nconst LOG_RETENTION_DAYS = 90; // news_fetch_log rows: ~24 a day, kept a quarter\n\n// news_fetch.py:12 — the same UA string, so a feed that answers Chrome answers both fetchers the same way.\nconst UA = { \"User-Agent\": \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120 Safari/537.36\" };\n\ntype Scope = \"slice\" | \"full\";\ntype Item = { source: string; topic: string; title: string; url: string; summary: string; when: string };\ntype Src = { name: string; type: string; url: string; handle: string; topic: string; lim: number };\ntype SourceResult = { name: string; type: string; n: number; stored: number; ms: number; error: string };\n\nexport async function init(db: any = sqlite) {\n // An interval val may run before bot-webhook.ts has created anything. Byte-identical to reconciler.ts's\n // (and bot-webhook's) declaration; whichever runs first wins. The journal table is bot-webhook's and is\n // assumed to exist, as reconciler.ts assumes it.\n await db.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY, value TEXT)`);\n // What was fetched. key is the desktop's dedupe key, url + \"|\" + cut(title, 80) — private to the val and\n // never served, so the desktop keeps computing its own from the six fields it is given. `when` is a\n // SQLite keyword, hence when_text. iso is a date parse of when_text, advisory and never served:\n // staleness is the desktop's call (MAX_AGE_DAYS in news_fetch.py), and there must be one implementation of it.\n await db.execute(`CREATE TABLE IF NOT EXISTS news_fetched (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n key TEXT UNIQUE NOT NULL,\n source TEXT NOT NULL, topic TEXT NOT NULL DEFAULT '',\n title TEXT NOT NULL, url TEXT NOT NULL DEFAULT '', summary TEXT NOT NULL DEFAULT '',\n when_text TEXT NOT NULL DEFAULT '',\n iso TEXT NOT NULL DEFAULT '',\n first_seen TEXT NOT NULL DEFAULT (datetime('now')),\n pass_key TEXT)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS news_fetched_seen ON news_fetched(first_seen, id)`);\n // The roster as the desktop last pushed it (scripts/news_sources.json entries, verbatim). `limit` is a\n // SQL keyword, hence lim. present=0 is a name the last push no longer carried: retired, never deleted,\n // so its history and last_error survive a mistaken push. last_try is stamped on an actual attempt only —\n // the queue is ORDER BY last_try ASC NULLS FIRST, so whatever a truncated pass did not reach is tried first next hour.\n await db.execute(`CREATE TABLE IF NOT EXISTS news_fetch_sources (\n name TEXT PRIMARY KEY, type TEXT NOT NULL, url TEXT NOT NULL DEFAULT '',\n handle TEXT NOT NULL DEFAULT '', topic TEXT NOT NULL DEFAULT '',\n lim INTEGER NOT NULL DEFAULT 8,\n enabled INTEGER NOT NULL DEFAULT 1, present INTEGER NOT NULL DEFAULT 1,\n pushed_at TEXT, last_try TEXT, last_ok TEXT,\n last_error TEXT NOT NULL DEFAULT '', last_n INTEGER NOT NULL DEFAULT 0,\n stored_total INTEGER NOT NULL DEFAULT 0)`);\n // The guard and the per-pass record in one row. key: 'pass::' (the interval),\n // 'run:' (a hand run), 'day:' (the day's journal line); 'test:…' is reserved\n // for a self-test and excluded from every summary. The claim is INSERT OR IGNORE on this key and nothing else.\n await db.execute(`CREATE TABLE IF NOT EXISTS news_fetch_log (\n key TEXT PRIMARY KEY,\n ts TEXT NOT NULL DEFAULT (datetime('now')), kind TEXT NOT NULL,\n local TEXT, scope TEXT,\n tried INTEGER DEFAULT 0, ok_n INTEGER DEFAULT 0, fetched INTEGER DEFAULT 0,\n stored INTEGER DEFAULT 0, errors INTEGER DEFAULT 0, ms INTEGER DEFAULT 0,\n truncated INTEGER DEFAULT 0, detail TEXT DEFAULT '')`);\n}\n\n// ---------- time ----------\n// localParts and sqlStamp are copied from reconciler.ts, not imported: an interval val must not load that\n// file's whole module graph on every wake (reconciler.ts:66 sets the precedent). Change it there, change it here.\nconst pad = (n: number) => String(n).padStart(2, \"0\");\n\n// Local wall clock in TZ. `wd` is the weekday as Sun=0: the snapshot's schedule.days are cron numbering\n// (Sun=0) and so is JS getDay(), so the index comes from the civil date and never from Intl's weekday name.\nexport function localParts(d: Date) {\n const f = new Intl.DateTimeFormat(\"en-GB\", { timeZone: TZ, hour12: false,\n year: \"numeric\", month: \"2-digit\", day: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\", weekday: \"short\" });\n const p: any = {};\n for (const x of f.formatToParts(d)) p[x.type] = x.value;\n const y = Number(p.year), m = Number(p.month), day = Number(p.day);\n return { y, m, d: day, date: `${p.year}-${p.month}-${p.day}`, hour: Number(p.hour), minute: Number(p.minute),\n weekday: String(p.weekday), wd: new Date(Date.UTC(y, m - 1, day)).getUTCDay(),\n hhmm: `${p.hour}:${p.minute}` };\n}\n\n// journal.ts is SQLite's datetime('now'): 'YYYY-MM-DD HH:MM:SS', UTC. It is compared as text, so the\n// shape must match exactly — a 'T' in the wrong place is a silent ordering bug.\nexport function sqlStamp(ms: number): string {\n return new Date(ms).toISOString().slice(0, 19).replace(\"T\", \" \");\n}\n\nconst localText = (lp: { weekday: string; date: string; hhmm: string }) => `${lp.weekday} ${lp.date} ${lp.hhmm}`;\n\n// Hours from a SQL stamp to `now`, one decimal; null when there is no stamp or it is not one.\nfunction ageH(stamp: any, now: Date): number | null {\n const s = String(stamp ?? \"\");\n if (!/^\\d{4}-\\d\\d-\\d\\d \\d\\d:\\d\\d:\\d\\d$/.test(s)) return null;\n return Math.round((now.getTime() - Date.parse(s.replace(\" \", \"T\") + \"Z\")) / 360000) / 10;\n}\n\n// ---------- strings: the code-point rule ----------\n// Python s[:n] slices by code point; JS .slice(0, n) by UTF-16 code unit. A title that opens with an emoji\n// would be cut one character short of the desktop's, get a different key, and publish twice. Every\n// truncation in this file goes through cut(), and every length that Python takes with len() through cpLen().\nexport const cut = (s: string, n: number) => [...s].slice(0, n).join(\"\");\nconst cpLen = (s: string) => [...s].length;\n\n// ---------- html.unescape ----------\n// Deno has no html.unescape. Numeric references are handled in full: decimal and hex, the semicolon\n// optional as in Python, €–Ÿ remapped to their cp1252 meanings (HTML5's rule, Python's\n// _invalid_charrefs — sloppy feeds write – for an en dash), surrogates and > U+10FFFF → U+FFFD, and\n// the control ranges HTML5 drops. Names: the table below (~120 of the 2231 Python knows) with the\n// semicolon required, plus the handful browsers accept bare (& < > " © ®).\n// THE RESIDUAL GAP, in two parts. A named entity outside the table (Ž ∴ …) stays as\n// written, in the title and therefore in the key — that item's key would differ from the desktop's.\n// And Python's html.unescape resolves ~106 names WITHOUT the semicolon by longest-prefix match, where\n// this resolves 7; a bare é would decode there and not here. Neither occurs in the 59 sources,\n// and a bare entity is invalid XML besides. If a feed starts writing one, add the name here.\nconst CP1252: Record = {\n 0x00: \"\\uFFFD\", 0x0D: \"\\r\",\n 0x80: \"\\u20AC\", 0x81: \"\\x81\", 0x82: \"\\u201A\", 0x83: \"\\u0192\", 0x84: \"\\u201E\", 0x85: \"\\u2026\", 0x86: \"\\u2020\", 0x87: \"\\u2021\",\n 0x88: \"\\u02C6\", 0x89: \"\\u2030\", 0x8A: \"\\u0160\", 0x8B: \"\\u2039\", 0x8C: \"\\u0152\", 0x8D: \"\\x8D\", 0x8E: \"\\u017D\", 0x8F: \"\\x8F\",\n 0x90: \"\\x90\", 0x91: \"\\u2018\", 0x92: \"\\u2019\", 0x93: \"\\u201C\", 0x94: \"\\u201D\", 0x95: \"\\u2022\", 0x96: \"\\u2013\", 0x97: \"\\u2014\",\n 0x98: \"\\u02DC\", 0x99: \"\\u2122\", 0x9A: \"\\u0161\", 0x9B: \"\\u203A\", 0x9C: \"\\u0153\", 0x9D: \"\\x9D\", 0x9E: \"\\u017E\", 0x9F: \"\\u0178\",\n};\nconst NAMED: Record = {\n amp: \"&\", lt: \"<\", gt: \">\", quot: \"\\\"\", apos: \"'\", nbsp: \"\\u00A0\",\n ndash: \"\\u2013\", mdash: \"\\u2014\", hellip: \"\\u2026\", lsquo: \"\\u2018\", rsquo: \"\\u2019\", sbquo: \"\\u201A\",\n ldquo: \"\\u201C\", rdquo: \"\\u201D\", bdquo: \"\\u201E\", laquo: \"\\u00AB\", raquo: \"\\u00BB\", lsaquo: \"\\u2039\", rsaquo: \"\\u203A\",\n bull: \"\\u2022\", middot: \"\\u00B7\", times: \"\\u00D7\", divide: \"\\u00F7\", minus: \"\\u2212\", plusmn: \"\\u00B1\", deg: \"\\u00B0\",\n euro: \"\\u20AC\", pound: \"\\u00A3\", yen: \"\\u00A5\", cent: \"\\u00A2\", curren: \"\\u00A4\", copy: \"\\u00A9\", reg: \"\\u00AE\", trade: \"\\u2122\",\n sect: \"\\u00A7\", para: \"\\u00B6\", dagger: \"\\u2020\", Dagger: \"\\u2021\", permil: \"\\u2030\", prime: \"\\u2032\", Prime: \"\\u2033\",\n frac12: \"\\u00BD\", frac14: \"\\u00BC\", frac34: \"\\u00BE\", sup1: \"\\u00B9\", sup2: \"\\u00B2\", sup3: \"\\u00B3\", micro: \"\\u00B5\",\n iexcl: \"\\u00A1\", iquest: \"\\u00BF\", ordf: \"\\u00AA\", ordm: \"\\u00BA\", brvbar: \"\\u00A6\", not: \"\\u00AC\", shy: \"\\u00AD\",\n macr: \"\\u00AF\", acute: \"\\u00B4\", cedil: \"\\u00B8\", uml: \"\\u00A8\",\n ensp: \"\\u2002\", emsp: \"\\u2003\", thinsp: \"\\u2009\", zwnj: \"\\u200C\", zwj: \"\\u200D\", lrm: \"\\u200E\", rlm: \"\\u200F\",\n larr: \"\\u2190\", uarr: \"\\u2191\", rarr: \"\\u2192\", darr: \"\\u2193\", harr: \"\\u2194\", infin: \"\\u221E\", ne: \"\\u2260\", le: \"\\u2264\", ge: \"\\u2265\",\n hearts: \"\\u2665\", spades: \"\\u2660\", clubs: \"\\u2663\", diams: \"\\u2666\",\n agrave: \"\\u00E0\", aacute: \"\\u00E1\", acirc: \"\\u00E2\", atilde: \"\\u00E3\", auml: \"\\u00E4\", aring: \"\\u00E5\", aelig: \"\\u00E6\", ccedil: \"\\u00E7\",\n egrave: \"\\u00E8\", eacute: \"\\u00E9\", ecirc: \"\\u00EA\", euml: \"\\u00EB\", igrave: \"\\u00EC\", iacute: \"\\u00ED\", icirc: \"\\u00EE\", iuml: \"\\u00EF\",\n ntilde: \"\\u00F1\", ograve: \"\\u00F2\", oacute: \"\\u00F3\", ocirc: \"\\u00F4\", otilde: \"\\u00F5\", ouml: \"\\u00F6\", oslash: \"\\u00F8\",\n ugrave: \"\\u00F9\", uacute: \"\\u00FA\", ucirc: \"\\u00FB\", uuml: \"\\u00FC\", yacute: \"\\u00FD\", yuml: \"\\u00FF\", szlig: \"\\u00DF\", eth: \"\\u00F0\", thorn: \"\\u00FE\",\n Agrave: \"\\u00C0\", Aacute: \"\\u00C1\", Acirc: \"\\u00C2\", Atilde: \"\\u00C3\", Auml: \"\\u00C4\", Aring: \"\\u00C5\", AElig: \"\\u00C6\", Ccedil: \"\\u00C7\",\n Egrave: \"\\u00C8\", Eacute: \"\\u00C9\", Ecirc: \"\\u00CA\", Euml: \"\\u00CB\", Igrave: \"\\u00CC\", Iacute: \"\\u00CD\", Icirc: \"\\u00CE\", Iuml: \"\\u00CF\",\n Ntilde: \"\\u00D1\", Ograve: \"\\u00D2\", Oacute: \"\\u00D3\", Ocirc: \"\\u00D4\", Otilde: \"\\u00D5\", Ouml: \"\\u00D6\", Oslash: \"\\u00D8\",\n Ugrave: \"\\u00D9\", Uacute: \"\\u00DA\", Ucirc: \"\\u00DB\", Uuml: \"\\u00DC\", Yacute: \"\\u00DD\", ETH: \"\\u00D0\", THORN: \"\\u00DE\",\n OElig: \"\\u0152\", oelig: \"\\u0153\", Scaron: \"\\u0160\", scaron: \"\\u0161\", Yuml: \"\\u0178\", fnof: \"\\u0192\", circ: \"\\u02C6\", tilde: \"\\u02DC\",\n};\nconst BARE = new Set([\"amp\", \"lt\", \"gt\", \"quot\", \"nbsp\", \"copy\", \"reg\"]);\nconst ENTITY_RE = /&(#[0-9]+;?|#[xX][0-9a-fA-F]+;?|[A-Za-z][A-Za-z0-9]{0,31};?)/g;\n\nexport function unescape(s: string): string {\n if (!s.includes(\"&\")) return s;\n return s.replace(ENTITY_RE, (m: string, body: string) => {\n if (body[0] === \"#\") {\n const hex = body[1] === \"x\" || body[1] === \"X\";\n const num = parseInt(body.slice(hex ? 2 : 1).replace(/;$/, \"\"), hex ? 16 : 10);\n if (num in CP1252) return CP1252[num];\n if (!Number.isFinite(num) || num > 0x10FFFF || (num >= 0xD800 && num <= 0xDFFF)) return \"\\uFFFD\";\n if ((num >= 0x1 && num <= 0x8) || num === 0xB || (num >= 0xE && num <= 0x1F) || (num >= 0x7F && num <= 0x9F)\n || (num >= 0xFDD0 && num <= 0xFDEF) || (num & 0xFFFE) === 0xFFFE) return \"\";\n return String.fromCodePoint(num);\n }\n const semi = body.endsWith(\";\");\n const name = semi ? body.slice(0, -1) : body;\n if (semi && name in NAMED) return NAMED[name];\n if (!semi && BARE.has(name)) return NAMED[name];\n return m;\n });\n}\n\n// news_fetch.py:19 — the same four steps in the same order. `\\s` and trim() cover U+00A0 in both languages,\n// so an ends as one space on either side. Note the order: an entity that decodes to a tag\n// (<b>) is decoded AFTER the tag strip and so survives as text — in Python too.\nexport function clean(s: string | null | undefined): string {\n let t = s ?? \"\";\n t = t.replace(//gs, \"$1\"); // unwrap CDATA (Economist et al.)\n t = t.replace(/<[^>]+>/g, \" \");\n t = unescape(t);\n return t.replace(/\\s+/g, \" \").trim();\n}\n\n// ---------- fetching ----------\n// Deno's fetch error names the URL (\"error sending request for url (https://…): dns error\"), which would\n// fill the desktop's 80-character error slot with the URL. The clause is dropped; the source name says what failed.\nconst errText = (e: any) => String(e?.message ?? e).replace(/ for url \$[^)]*\$/, \"\").trim();\n\n// news_fetch.py:14 — one GET with the Chrome UA, at most BODY_LIMIT bytes, decoded as UTF-8. The cap is on\n// BYTES before decoding, as Python's r.read(200000).decode(\"utf-8\",\"ignore\") is; capping the decoded string\n// would let a feed of multibyte text run to a different place. Two known, harmless differences: TextDecoder\n// writes U+FFFD where Python's \"ignore\" drops a bad byte (a real feed is valid UTF-8, so this can only hit\n// the character the cap cuts in half — inside the trailing partial , which both parsers drop for lack\n// of a closing tag); and the timeout is a 12 s total, not urllib's 25 s per read. A non-2xx status is\n// thrown in urllib's words, \"HTTP Error 403: Forbidden\", so a last_error reads the same on both sides.\nexport async function get(url: string, limit = BODY_LIMIT): Promise {\n const ctl = new AbortController();\n const timer = setTimeout(() => ctl.abort(), SOURCE_TIMEOUT_MS);\n try {\n const r = await fetch(url, { headers: UA, signal: ctl.signal, redirect: \"follow\" });\n if (!r.ok) {\n await r.body?.cancel().catch(() => {});\n throw new Error(`HTTP Error ${r.status}: ${r.statusText}`.trim());\n }\n if (!r.body) return \"\";\n const reader = r.body.getReader();\n const chunks: Uint8Array[] = [];\n let n = 0, done = false;\n while (n < limit) {\n const x = await reader.read();\n if (x.done) { done = true; break; }\n chunks.push(x.value); n += x.value.byteLength;\n }\n if (!done) reader.cancel().catch(() => {}); // the rest of the body is not wanted; free the connection\n const buf = new Uint8Array(Math.min(n, limit));\n let off = 0;\n for (const c of chunks) {\n const take = Math.min(c.byteLength, buf.length - off);\n if (take <= 0) break;\n buf.set(c.subarray(0, take), off); off += take;\n }\n return new TextDecoder(\"utf-8\", { fatal: false }).decode(buf);\n } catch (e) {\n if (ctl.signal.aborted) throw new Error(`timed out after ${SOURCE_TIMEOUT_MS} ms`);\n throw e;\n } finally {\n clearTimeout(timer);\n }\n}\n\n// news_fetch.py:26 — regex parsing, not an XML parser, because the desktop does it this way and the two\n// must agree on every title. The block regex takes or ; Atom's is tried\n// before RSS's text; the first title, description and date in the block win, as in Python.\nexport function parseRss(xml: string, source: string, topic: string, limit: number): Item[] {\n const out: Item[] = [];\n const blocks = Array.from(xml.matchAll(/<(?:item|entry)\\b.*?<\\/(?:item|entry)>/gs), (m) => m[0]);\n for (const b of blocks.slice(0, limit)) {\n const t = b.match(/]*>(.*?)<\\/title>/s);\n const l = b.match(/]*href=\"([^\"]+)\"/) ?? b.match(/]*>(.*?)<\\/link>/s);\n const d = b.match(/<(?:description|summary|content)[^>]*>(.*?)<\\/(?:description|summary|content)>/s);\n const p = b.match(/<(?:pubDate|published|updated)[^>]*>(.*?)<\\/(?:pubDate|published|updated)>/s);\n if (!t) continue;\n out.push({ source, topic, title: cut(clean(t[1]), 180),\n url: l ? clean(l[1]) : \"\", summary: d ? cut(clean(d[1]), 400) : \"\",\n when: p ? cut(clean(p[1]), 31) : \"\" });\n }\n return out;\n}\n\n// news_fetch.py:40 — the public preview page t.me/s/. The last `limit` messages on the page,\n// newest first; each paired with a counted from the END of the page's time tags, as\n// Python does (times[-(i+1)]). A post under 40 code points is a sticker, a caption or a forward header,\n// not news — the floor is cpLen, Python's len(). The url is the channel, not the post: Python's choice.\nexport async function parseTelegram(hn: string, source: string, topic: string, limit: number): Promise {\n const url = `https://t.me/s/${hn}`;\n const body = await get(url);\n const msgs = Array.from(body.matchAll(/

]*>(.*?)<\\/div>/gs), (m) => m[1]);\n const times = Array.from(body.matchAll(/ m[1]);\n const out: Item[] = [];\n const tail = msgs.slice(-limit).reverse(); // Python: reversed(msgs[-limit:])\n for (let i = 0; i < tail.length; i++) {\n const txt = clean(tail[i]);\n if (cpLen(txt) < 40) continue;\n out.push({ source, topic, title: cut(txt, 150), url, summary: cut(txt, 600),\n when: i < times.length ? cut(times[times.length - 1 - i], 10) : \"\" });\n }\n return out;\n}\n\nasync function fetchSource(s: Src): Promise {\n if (s.type === \"rss\") return parseRss(await get(s.url), s.name, s.topic, s.lim);\n if (s.type === \"telegram\") return await parseTelegram(s.handle, s.name, s.topic, s.lim);\n throw new Error(`unknown source type \"${s.type}\"`);\n}\n\n// ---------- storing ----------\n// news_fetch.py:86 — the desktop's dedupe key. Private to the val: the desktop keeps computing its own\n// from the six served fields, which is the whole point of serving them unchanged.\nexport const keyOf = (it: Item) => (it.url || \"\") + \"|\" + cut(it.title, 80);\n\n// Advisory only, never served. news_fetch.py's iso_of() takes the date in the pubDate's own zone; Date's\n// is UTC, so the two can differ by a day around midnight — one more reason the desktop keeps its own.\nfunction isoOf(w: string): string {\n const s = (w ?? \"\").trim();\n if (/^\\d{4}-\\d{2}-\\d{2}/.test(s)) return s.slice(0, 10);\n const ms = Date.parse(s);\n return Number.isFinite(ms) ? new Date(ms).toISOString().slice(0, 10) : \"\";\n}\n\n// One INSERT OR IGNORE for the whole source (at most `limit` rows), not one round trip per item:\n// rowsAffected counts only the rows actually inserted, which is exactly `stored`. A key already held keeps\n// its first_seen, so re-seeing an item never moves it inside the desktop's window a second time.\nasync function store(db: any, items: Item[], passKey: string): Promise {\n if (!items.length) return 0;\n const sql = \"INSERT OR IGNORE INTO news_fetched (key, source, topic, title, url, summary, when_text, iso, pass_key) VALUES \"\n + items.map(() => \"(?,?,?,?,?,?,?,?,?)\").join(\",\");\n const args = items.flatMap((it) => [keyOf(it), it.source, it.topic, it.title, it.url, it.summary, it.when, isoOf(it.when), passKey]);\n const r = await db.execute({ sql, args });\n return Number(r.rowsAffected ?? 0);\n}\n\n// ---------- flag, journal ----------\nconst isOn = (v: any) => String(v ?? \"\").trim().toLowerCase() === \"on\";\n\n// Read and reported, never written: the flag is the desktop's switch, and a flag flipped from here would\n// be a flag flipped without the desktop's receipt.\nexport async function readFlag(db: any = sqlite): Promise<\"on\" | \"off\"> {\n const r = await db.execute({ sql: \"SELECT value FROM settings WHERE key = ?\", args: [FLAG_KEY] });\n return r.rows.length && isOn((r.rows[0] as any).value) ? \"on\" : \"off\";\n}\n\nasync function journal(db: any, summary: string, details: string) {\n await db.execute({ sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [SOURCE, cut(summary, 400), cut(details, 3500)] });\n}\n\n// ---------- the pass ----------\n// The queue: enabled and present, least recently tried first, never-tried before all. A negative LIMIT is\n// SQLite for \"no limit\" (the full sweep). `only` names sources by hand; dry, it may reach a disabled or\n// retired source to probe it — storing from one is never allowed, so a real run keeps the enabled/present test.\nasync function selectSources(db: any, scope: Scope, only: string[] | undefined, dry: boolean): Promise {\n const limit = scope === \"full\" ? -1 : SLICE_N;\n let where = \"enabled=1 AND present=1\", args: any[] = [];\n if (only && only.length) {\n where = `name IN (${only.map(() => \"?\").join(\",\")})` + (dry ? \"\" : \" AND enabled=1 AND present=1\");\n args = only;\n }\n const r = await db.execute({ sql: `SELECT name, type, url, handle, topic, lim FROM news_fetch_sources WHERE ${where} ORDER BY last_try ASC NULLS FIRST, name LIMIT ?`,\n args: [...args, limit] });\n return (r.rows as any[]).map((x) => ({ name: String(x.name), type: String(x.type), url: String(x.url ?? \"\"),\n handle: String(x.handle ?? \"\"), topic: String(x.topic ?? \"\"), lim: Number(x.lim ?? 8) }));\n}\n\n// One source. A fetch or parse failure is the SOURCE's error: recorded on its row, returned, counted. A\n// database failure is thrown, because that is the PASS dying, not the source — the caller writes the\n// receipt. Dry: the attempt is made and reported, and no row anywhere is touched (not even last_try).\nasync function attempt(db: any, s: Src, passKey: string, dry: boolean): Promise {\n const t = Date.now();\n const out: SourceResult = { name: s.name, type: s.type, n: 0, stored: 0, ms: 0, error: \"\" };\n let items: Item[] = [];\n try { items = await fetchSource(s); } catch (e) { out.error = cut(errText(e), 300); }\n out.n = items.length;\n out.ms = Date.now() - t;\n if (dry) return out;\n const stamp = sqlStamp(Date.now());\n if (out.error) {\n await db.execute({ sql: \"UPDATE news_fetch_sources SET last_try=?, last_error=?, last_n=0 WHERE name=?\", args: [stamp, out.error, s.name] });\n } else {\n out.stored = await store(db, items, passKey);\n await db.execute({ sql: \"UPDATE news_fetch_sources SET last_try=?, last_ok=?, last_error='', last_n=?, stored_total=stored_total+? WHERE name=?\",\n args: [stamp, stamp, out.n, out.stored, s.name] });\n }\n return out;\n}\n\nexport const scopeFor = (localHour: number): Scope => localHour === 5 || localHour === 6 ? \"full\" : \"slice\";\n\n/** One pass — the single implementation the interval and POST /news/fetch/run share, so a hand run proves\n * the interval's code path. kind \"pass\" is the interval: guard key pass::, scope from the\n * local hour unless given, and at hour 6 the day's journal line. kind \"run\" is a hand run: guard key\n * run:, never the day line. dry: fetch and report, claim nothing, store nothing, journal\n * nothing. at: a test instant (the route admits it with dry only). */\nexport async function fetchOnce(o: { kind: \"pass\" | \"run\"; scope?: Scope; dry?: boolean; only?: string[]; at?: Date; db?: any }) {\n const db = o.db ?? sqlite;\n await init(db);\n const now = o.at ?? new Date();\n const lp = localParts(now);\n const local = localText(lp);\n const scope: Scope = o.scope ?? scopeFor(lp.hour);\n const dry = o.dry === true;\n const daily = o.kind === \"pass\" && lp.hour === 6;\n const passKey = o.kind === \"pass\" ? `pass:${lp.date}:${pad(lp.hour)}` : `run:${new Date().toISOString().replace(/[-:.]/g, \"\")}`;\n const t0 = Date.now();\n const marks = [dry ? \"dry\" : \"\", o.only?.length ? `only ${o.only.length}` : \"\", o.at ? `at ${now.toISOString()}` : \"\"].filter(Boolean);\n const tag = marks.length ? ` [${marks.join(\", \")}]` : \"\";\n const base: any = { ok: true, kind: o.kind, scope, local, dry, at: o.at ? now.toISOString() : null };\n\n const flag = await readFlag(db);\n const queue = await selectSources(db, scope, o.only, dry);\n\n // Law 6: the key is claimed with one statement before any HTTP. A dry pass claims nothing.\n if (!dry) {\n const claim = await db.execute({ sql: \"INSERT OR IGNORE INTO news_fetch_log (key, kind, local, scope, detail) VALUES (?,?,?,?,?)\",\n args: [passKey, o.kind, local, scope, `${queue.length} sources queued${tag}`] });\n if ((claim.rowsAffected ?? 0) === 0) return { ...base, flag, skipped: \"pass already recorded\", pass_key: passKey };\n }\n\n // From here the key is spent. Whatever dies below is journalled with the step it died at. `results` is\n // hoisted out of the try so the receipt can say how far the pass got.\n const results: SourceResult[] = [];\n let truncated = 0, step = \"fetching sources\";\n const storedSoFar = () => results.reduce((a, r) => a + r.stored, 0);\n try {\n // Batches of CONCURRENCY. A batch starts only if its worst case — one source running to the full\n // timeout — still ends inside DEADLINE_MS; otherwise `truncated` is set and the pass stops rather than\n // overrunning. What was not reached kept its old last_try and heads the next hour's queue.\n for (let i = 0; i < queue.length; i += CONCURRENCY) {\n if (Date.now() - t0 + SOURCE_TIMEOUT_MS > DEADLINE_MS) { truncated = 1; break; }\n const batch = queue.slice(i, i + CONCURRENCY);\n const settled = await Promise.allSettled(batch.map((s) => attempt(db, s, passKey, dry)));\n for (const r of settled) if (r.status === \"fulfilled\") results.push(r.value);\n const dead = settled.find((r) => r.status === \"rejected\") as PromiseRejectedResult | undefined;\n if (dead) throw dead.reason; // attempt() rejects on a database failure only — the pass's death, not a source's\n }\n const sum = { tried: results.length, ok_n: results.filter((r) => !r.error).length,\n fetched: results.reduce((a, r) => a + r.n, 0), stored: storedSoFar(), errors: results.filter((r) => r.error).length };\n const failed = results.filter((r) => r.error).map((r) => `${r.name}: ${cut(r.error, 80)}`);\n const ms = Date.now() - t0;\n let day: string | null = null;\n if (!dry) {\n step = \"recording the pass\";\n const detail = `${queue.length} queued, ${sum.tried} tried${truncated ? ` (deadline: ${queue.length - sum.tried} not reached)` : \"\"}; failed: ${failed.join(\"; \") || \"none\"}${tag}`;\n await db.execute({ sql: \"UPDATE news_fetch_log SET tried=?, ok_n=?, fetched=?, stored=?, errors=?, ms=?, truncated=?, detail=? WHERE key=?\",\n args: [sum.tried, sum.ok_n, sum.fetched, sum.stored, sum.errors, ms, truncated, cut(detail, 1500), passKey] });\n if (daily) { step = \"writing the day's journal line\"; day = await dayLine(db, now, flag); }\n }\n return { ...base, flag, ...sum, ms, truncated, queued: queue.length, not_reached: queue.length - sum.tried,\n pass_key: dry ? null : passKey, journalled: day ? 1 : 0, sources: results };\n } catch (e) {\n const error = cut(String(e), 300);\n if (dry) return { ...base, ok: false, flag, died: step, error, tried: results.length, sources: results };\n // The key is claimed and the pass died. Write the receipt that says so, with the step, and mark the\n // pass row; if even the receipt cannot be written, rethrow so Val Town's own run log shows red.\n const reached = `${results.length} of ${queue.length} sources had been tried and the ${storedSoFar()} items they stored stand`;\n try {\n await journal(db, `pass DIED while ${step}: ${cut(error, 160)}${tag}`,\n `${o.kind} ${passKey}, scope ${scope}, ${local} ${TZ}. The key was claimed, then the pass threw while ${step}; nothing after that step ran, and ${reached}. `\n + `${cut(String((e as any)?.stack ?? e), 900)} No model called, no message sent.${tag}`);\n await db.execute({ sql: \"UPDATE news_fetch_log SET tried=?, stored=?, detail = COALESCE(detail, '') || ? WHERE key = ?\",\n args: [results.length, storedSoFar(), ` — DIED while ${step}: ${cut(error, 200)}`, passKey] });\n } catch { throw e; }\n return { ...base, ok: false, flag, died: step, error, journalled: 1, pass_key: passKey, tried: results.length, stored: storedSoFar(), sources: results };\n }\n}\n\n/** The day's one journal line, from the hour-6 pass. Guard key day:, so a double-fired hour\n * writes it once. Prunes past RETENTION_DAYS first, so `held` is what remains. Returns the summary, or\n * null when the day already has its line. */\nasync function dayLine(db: any, now: Date, flag: \"on\" | \"off\"): Promise {\n const lp = localParts(now);\n const key = `day:${lp.date}`;\n const claim = await db.execute({ sql: \"INSERT OR IGNORE INTO news_fetch_log (key, kind, local, scope) VALUES (?,?,?,?)\", args: [key, \"day\", localText(lp), \"day\"] });\n if ((claim.rowsAffected ?? 0) === 0) return null;\n const pruned = Number((await db.execute({ sql: \"DELETE FROM news_fetched WHERE first_seen < datetime('now', ?)\", args: [`-${RETENTION_DAYS} days`] })).rowsAffected ?? 0);\n await db.execute({ sql: \"DELETE FROM news_fetch_log WHERE ts < datetime('now', ?) AND key NOT LIKE 'test:%'\", args: [`-${LOG_RETENTION_DAYS} days`] });\n const s = await summarize(db, now);\n const d: any = (await db.execute(\"SELECT COUNT(*) AS n, COALESCE(SUM(tried),0) AS tried, COALESCE(SUM(errors),0) AS errs, COALESCE(SUM(truncated),0) AS trunc \"\n + \"FROM news_fetch_log WHERE kind IN ('pass','run') AND key NOT LIKE 'test:%' AND ts >= datetime('now','-24 hours')\")).rows[0] ?? {};\n const failing = s.failing.map((f) => f.name);\n const summary = `day ${lp.date}: ${d.n} passes in 24 h, ${d.tried} source fetches, ${s.stored24h} new items; failing: ${failing.join(\", \") || \"none\"}; `\n + `flag.news_fetch_val ${flag}; held: ${s.storedTotal} items, oldest ${s.oldestHeld ?? \"none\"}, newest ${s.newestHeld ?? \"none\"}`;\n const details = `${localText(lp)} ${TZ}, the hour-6 pass. Sources: ${s.sources.enabled} enabled of ${s.sources.present} present (${s.sources.rss} rss, ${s.sources.telegram} telegram), `\n + `last pushed ${s.sources.pushedAt ?? \"never — POST /news/fetch/sources has not been called\"}. `\n + `Passes in 24 h: ${d.n} (${d.trunc} hit the deadline), ${d.tried} source fetches, ${d.errs} failed. Failing now: ${s.errors.join(\"; \") || \"none\"}. `\n + `Pruned ${pruned} items older than ${RETENTION_DAYS} days. Held: ${s.storedTotal} items (oldest ${s.oldestHeld ?? \"none\"}, newest ${s.newestHeld ?? \"none\"}), ${s.stored24h} new in 24 h. `\n + `flag.news_fetch_val is ${flag}: ${flag === \"on\" ? \"the desktop pulls from here\" : \"the desktop still fetches itself; this is the evidence for switching\"}. `\n + `Cron ${CRON} UTC. No model called, no message sent.`;\n await journal(db, summary, details);\n await db.execute({ sql: \"UPDATE news_fetch_log SET tried=?, stored=?, errors=?, detail=? WHERE key=?\", args: [Number(d.tried), s.stored24h, failing.length, cut(summary, 1500), key] });\n return summary;\n}\n\n// ---------- the picture ----------\n/** What status, items and the day line all report, from one place. `errors` is the desktop's exact shape,\n * news_fetch.py:66 — \"{name}: {msg[:80]}\" — for the sources whose LAST attempt failed. */\nasync function summarize(db: any, now: Date) {\n const flag = await readFlag(db);\n const src: any = (await db.execute(\"SELECT COUNT(*) AS present, COALESCE(SUM(enabled),0) AS enabled, \"\n + \"COALESCE(SUM(CASE WHEN enabled=1 AND type='rss' THEN 1 ELSE 0 END),0) AS rss, \"\n + \"COALESCE(SUM(CASE WHEN enabled=1 AND type='telegram' THEN 1 ELSE 0 END),0) AS telegram, \"\n + \"MAX(pushed_at) AS pushed_at FROM news_fetch_sources WHERE present=1\")).rows[0] ?? {};\n const last: any = (await db.execute(\"SELECT key, ts, local, scope, tried, ok_n, fetched, stored, errors, ms, truncated FROM news_fetch_log \"\n + \"WHERE kind IN ('pass','run') AND key NOT LIKE 'test:%' ORDER BY ts DESC, key DESC LIMIT 1\")).rows[0] ?? null;\n const p24: any = (await db.execute(\"SELECT COUNT(*) AS n FROM news_fetch_log WHERE kind IN ('pass','run') AND key NOT LIKE 'test:%' AND ts >= datetime('now','-24 hours')\")).rows[0] ?? {};\n const held: any = (await db.execute(\"SELECT COUNT(*) AS n, MIN(first_seen) AS oldest, MAX(first_seen) AS newest, \"\n + \"COALESCE(SUM(CASE WHEN first_seen >= datetime('now','-24 hours') THEN 1 ELSE 0 END),0) AS d1 FROM news_fetched\")).rows[0] ?? {};\n const fail = (await db.execute(\"SELECT name, type, last_error, last_ok FROM news_fetch_sources WHERE present=1 AND enabled=1 AND last_error != '' ORDER BY name\")).rows as any[];\n const failing = fail.map((f) => ({ name: String(f.name), type: String(f.type), error: String(f.last_error), lastOk: f.last_ok ?? null }));\n return {\n flag,\n sources: { present: Number(src.present ?? 0), enabled: Number(src.enabled ?? 0), rss: Number(src.rss ?? 0), telegram: Number(src.telegram ?? 0),\n pushedAt: src.pushed_at ?? null, pushAgeH: ageH(src.pushed_at, now) },\n lastPass: last ? { key: String(last.key), ts: String(last.ts), local: last.local ?? null, scope: last.scope ?? null, tried: Number(last.tried ?? 0), ok: Number(last.ok_n ?? 0),\n fetched: Number(last.fetched ?? 0), stored: Number(last.stored ?? 0), errors: Number(last.errors ?? 0), ms: Number(last.ms ?? 0), truncated: Number(last.truncated ?? 0) } : null,\n lastPassAgeH: last ? ageH(last.ts, now) : null,\n passes24h: Number(p24.n ?? 0),\n stored24h: Number(held.d1 ?? 0), storedTotal: Number(held.n ?? 0),\n oldestHeld: held.oldest ?? null, newestHeld: held.newest ?? null,\n failing,\n errors: failing.map((f) => `${f.name}: ${cut(f.error, 80)}`),\n };\n}\n\n// ---------- the interval ----------\nexport default async function (_interval: { lastRunAt?: Date }) {\n // Every wake works: a slice, or the full sweep at 05 and 06 local; the day's journal line rides the\n // hour-6 pass — after the second full sweep, before Nina's 06:45. Scope, key and the day line all\n // follow from the local hour inside fetchOnce, so the interval and a hand run cannot disagree about them.\n return await fetchOnce({ kind: \"pass\" });\n}\n\n// ---------- the routes ----------\nconst clampInt = (v: any, dflt: number, lo: number, hi: number) => {\n if (v === undefined || v === null || v === \"\") return dflt;\n const n = Math.floor(Number(v));\n return Number.isFinite(n) ? Math.min(hi, Math.max(lo, n)) : dflt;\n};\n\nexport function mountNewsFetch(app: any, db: any, PULL_SECRET: string) {\n const ready = init(db);\n const auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n const limits = { SLICE_N, CONCURRENCY, SOURCE_TIMEOUT_MS, DEADLINE_MS, BODY_LIMIT, RETENTION_DAYS };\n\n app.get(\"/news/fetch/status\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const now = new Date();\n const s = await summarize(db, now);\n return c.json({ ok: true, flag: s.flag, now: now.toISOString(), local: localText(localParts(now)), cron: CRON,\n sources: s.sources, lastPass: s.lastPass, lastPassAgeH: s.lastPassAgeH, passes24h: s.passes24h,\n stored24h: s.stored24h, storedTotal: s.storedTotal, oldestHeld: s.oldestHeld, newestHeld: s.newestHeld,\n retentionDays: RETENTION_DAYS, failing: s.failing, errors: s.errors, limits });\n });\n\n // The pull. A row is EXACTLY {source, topic, title, url, summary, when}, in that order — an element of\n // news_raw.json[\"items\"] before iso_of() runs. No id, key, iso or first_seen: the desktop computes its own\n // key from these six and its own iso from `when`, so one implementation of each keeps running. The read\n // is pure: nothing is marked, moved or deleted by it. `next` is the last id when the page was full.\n app.get(\"/news/fetch/items\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const now = new Date();\n const hours = clampInt(c.req.query(\"hours\"), 120, 1, 336);\n const limit = clampInt(c.req.query(\"limit\"), 500, 1, 1000);\n const before = Math.floor(Number(c.req.query(\"before\")));\n const paged = Number.isFinite(before) && before > 0;\n const debug = c.req.query(\"debug\") === \"1\";\n // The window is first_seen >= now − hours. The same stamp goes into the WHERE and into the response, so\n // the window reported is the window applied (first_seen is datetime('now') text, sqlStamp's shape).\n const sinceUtc = sqlStamp(now.getTime() - hours * 3600000);\n const r = await db.execute({ sql: `SELECT id, source, topic, title, url, summary, when_text, key, first_seen FROM news_fetched WHERE first_seen >= ?${paged ? \" AND id < ?\" : \"\"} ORDER BY id DESC LIMIT ?`,\n args: paged ? [sinceUtc, before, limit] : [sinceUtc, limit] });\n const raw = r.rows as any[];\n const rows = raw.map((x) => {\n const row: any = { source: String(x.source), topic: String(x.topic ?? \"\"), title: String(x.title), url: String(x.url ?? \"\"), summary: String(x.summary ?? \"\"), when: String(x.when_text ?? \"\") };\n if (debug) { row._key = x.key; row._first_seen = x.first_seen; }\n return row;\n });\n const s = await summarize(db, now);\n // lastPassAgeH and passes24h ride the pull as well as /status, so one call tells the desktop both what\n // it is holding and how fresh the val is. news_fetch.py's freshness gate and its `via val:` line both\n // read them from here; without them the provenance line prints \"? passes/24 h\".\n return c.json({ ok: true, flag: s.flag, window: { hours, sinceUtc }, n: rows.length, rows,\n next: rows.length === limit && raw.length ? Number(raw[raw.length - 1].id) : null,\n errors: s.errors, lastPass: s.lastPass, lastPassAgeH: s.lastPassAgeH, passes24h: s.passes24h,\n sources: s.sources });\n });\n\n // The roster push, from the desktop, entries of scripts/news_sources.json verbatim. Upsert by name; a\n // name the push no longer carries is retired (present=0, enabled=0), never deleted. Fewer than five\n // entries is an empty or truncated push, and one of those must never blind the cold path: refused,\n // nothing touched. A malformed entry is skipped and named, not a reason to refuse the 58 good ones.\n app.post(\"/news/fetch/sources\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n if (!Array.isArray(b.sources) || b.sources.length < 5) {\n return c.json({ ok: false, error: \"sources must be an array of at least 5 entries — a shorter push is treated as truncated and refused\" }, 400);\n }\n const pushedAt = sqlStamp(Date.now());\n const have = new Map();\n for (const x of (await db.execute(\"SELECT name, present FROM news_fetch_sources\")).rows as any[]) have.set(String(x.name), Number(x.present));\n const pushed = new Set();\n const invalid: string[] = [];\n let added = 0, updated = 0;\n for (const e of b.sources as any[]) {\n const name = String(e?.name ?? \"\").trim(), type = String(e?.type ?? \"\").trim();\n const url = String(e?.url ?? \"\").trim(), handle = String(e?.handle ?? \"\").trim();\n if (!name || (type !== \"rss\" && type !== \"telegram\") || (type === \"rss\" && !url) || (type === \"telegram\" && !handle) || pushed.has(name)) {\n invalid.push(name || \"(unnamed)\"); continue;\n }\n // news_fetch.py's defaults, lines 62 and 64: limit 8 for rss and 10 for telegram; topic \"\"; enabled true.\n const rawLim = Number(e?.limit);\n const lim = e?.limit != null && e?.limit !== \"\" && Number.isFinite(rawLim) ? Math.floor(rawLim) : (type === \"telegram\" ? 10 : 8);\n const enabled = e?.enabled === false ? 0 : 1;\n const topic = String(e?.topic ?? \"\");\n pushed.add(name);\n if (have.has(name)) {\n await db.execute({ sql: \"UPDATE news_fetch_sources SET type=?, url=?, handle=?, topic=?, lim=?, enabled=?, present=1, pushed_at=? WHERE name=?\",\n args: [type, url, handle, topic, lim, enabled, pushedAt, name] });\n updated++;\n } else {\n await db.execute({ sql: \"INSERT INTO news_fetch_sources (name, type, url, handle, topic, lim, enabled, present, pushed_at) VALUES (?,?,?,?,?,?,?,1,?)\",\n args: [name, type, url, handle, topic, lim, enabled, pushedAt] });\n added++;\n }\n }\n // Retired = was present, not in this push. Computed from the names, never from a stamp comparison, so a\n // re-sent push can neither retire nor resurrect by accident.\n const gone = [...have].filter(([n, present]) => present === 1 && !pushed.has(n)).map(([n]) => n);\n let retired = 0;\n if (gone.length) {\n const r = await db.execute({ sql: `UPDATE news_fetch_sources SET present=0, enabled=0 WHERE name IN (${gone.map(() => \"?\").join(\",\")})`, args: gone });\n retired = Number(r.rowsAffected ?? 0);\n }\n // Journalled when the roster changed shape; a same-again push is not news.\n if (added || retired) {\n await journal(db, `roster push: ${pushed.size} sources (${added} new, ${retired} retired)`,\n `POST /news/fetch/sources${b.stamp !== undefined ? ` (desktop stamp ${String(b.stamp)})` : \"\"}: ${pushed.size} names, ${added} added, ${updated} updated, ${retired} retired`\n + ` (present=0, enabled=0, never deleted)${gone.length ? `: ${gone.join(\", \")}` : \"\"}. Invalid entries skipped: ${invalid.join(\", \") || \"none\"}.`);\n }\n const out: any = { ok: true, n: pushed.size, added, updated, retired, pushedAt };\n if (invalid.length) out.invalid = invalid;\n return c.json(out);\n });\n\n // The same code path the interval runs, on demand — the schedule cannot be read from any API, so the\n // proof that fetching works is a pass with a recorded result, not a deploy that returned 200. Its guard\n // key is run:, so it can never take the hour's pass: key from the interval. scope defaults\n // to the interval's rule for the instant; `at` is a test parameter and is refused unless dry.\n app.post(\"/news/fetch/run\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n const dry = b.dry === true;\n if (b.scope !== undefined && b.scope !== \"slice\" && b.scope !== \"full\") return c.json({ ok: false, error: 'scope must be \"slice\" or \"full\"' }, 400);\n if (b.only !== undefined && (!Array.isArray(b.only) || !b.only.length || !b.only.every((x: any) => typeof x === \"string\"))) {\n return c.json({ ok: false, error: \"only must be a non-empty array of source names\" }, 400);\n }\n let at: Date | undefined;\n if (b.at !== undefined) {\n // A production pass may never be told what time it is.\n if (!dry) return c.json({ ok: false, error: \"at is a test parameter: pass dry:true with it\" }, 400);\n at = new Date(String(b.at));\n if (isNaN(at.getTime())) return c.json({ ok: false, error: \"at is not a date\" }, 400);\n }\n return c.json(await fetchOnce({ kind: \"run\", scope: b.scope, only: b.only, dry, at, db }));\n });\n\n // The manual prune: before:\"YYYY-MM-DD\" (a UTC day boundary) or days:N. The hour-6 pass already prunes\n // past RETENTION_DAYS; this is for a hand decision. A cut inside the desktop's 120 h pull window would\n // empty what the desktop is about to read, so that takes force:true, said deliberately. news_seen.json\n // is untouched by any of this — the desktop's memory of what was shown is its own.\n app.post(\"/news/fetch/prune\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json().catch(() => ({}));\n const hasBefore = b.before !== undefined, hasDays = b.days !== undefined;\n if (hasBefore === hasDays) return c.json({ ok: false, error: 'exactly one of before:\"YYYY-MM-DD\" or days:N' }, 400);\n let cutoff: string;\n if (hasBefore) {\n if (!/^\\d{4}-\\d\\d-\\d\\d$/.test(String(b.before))) return c.json({ ok: false, error: \"before must be YYYY-MM-DD\" }, 400);\n cutoff = `${b.before} 00:00:00`;\n } else {\n const days = Number(b.days);\n if (!Number.isFinite(days) || days < 1) return c.json({ ok: false, error: \"days must be a number >= 1\" }, 400);\n cutoff = sqlStamp(Date.now() - days * 86400000);\n }\n const cutMs = Date.parse(cutoff.replace(\" \", \"T\") + \"Z\");\n if (!Number.isFinite(cutMs)) return c.json({ ok: false, error: \"before is not a date\" }, 400);\n if (cutMs > Date.now() - DESKTOP_WINDOW_H * 3600000 && b.force !== true) {\n return c.json({ ok: false, error: `the cut ${cutoff} is inside the desktop's ${DESKTOP_WINDOW_H} h pull window; pass force:true to prune it anyway` }, 400);\n }\n const r = await db.execute({ sql: \"DELETE FROM news_fetched WHERE first_seen < ?\", args: [cutoff] });\n const deleted = Number(r.rowsAffected ?? 0);\n await journal(db, `pruned ${deleted} held items first seen before ${cutoff}${b.force === true ? \" [forced, inside the pull window]\" : \"\"}`,\n `POST /news/fetch/prune ${hasBefore ? `before ${b.before}` : `days ${b.days}`}: ${deleted} rows deleted from news_fetched with first_seen < ${cutoff} UTC. Nothing else touched; news_seen.json on the desktop is unaffected.`);\n return c.json({ ok: true, deleted, before: cutoff });\n });\n}\n",[189],"cb76b92c-f605-4baa-812a-d2167f693cdb","monday-scroll.ts","97465266-8749-11f1-89d0-1607ee4eb77e",30,["D",1786527835897],"// Cloud warden — Monday scroll. Cron (UTC): 30 6 * * 1 (~08:30 Amsterdam in summer)\nimport { journalOutcome, runWarden } from \"./warden-shared.ts\";\nexport default async function (interval: Interval) {\n await runWarden(\"monday\", interval.lastRunAt);\n}\n",[197],"84995cf6-ffd4-4ced-9bc6-122bb000be1c","mirror-routes.ts","f49afb54-ac67-11f1-a4c5-1607ee4eb77e",80,["D",1788969791046],"// The Mirror routes (HQ desktop session, 9 Sep 2026, task #232) — where Alexandr's answers to the\n// console's Mirror tab land, and where Iris the Mirror collects them at 07:10.\n// Split into its own file like news-routes.ts: bot-webhook.ts and palantir-routes.ts both sit near\n// Val Town's 80k single-file limit. Mounted by palantir-routes.ts: mountMirror(app, sqlite, PULL_SECRET, busAuth).\n//\n// POST /mirror/answer {id, answer, text?, type, page, section, claim, question}\n// → upsert into mirror_answers. Same id again = UPDATE, applied reset to 0 (Law 6:\n// he may change his mind before Iris files it; the last answer wins, once).\n// GET /mirror/answers ?since=ISO (optional) → rows with applied=0, oldest first. ?all=1 → last 200 of everything.\n// POST /mirror/applied {ids:[...]} → applied=1 for each id (Iris, after the vault pages are written).\n//\n// The table is the contract mirror_queue.py `apply` reads: the `card` column is the whole card the page\n// held when he answered, so a card that has since moved or been rebuilt can still be filed.\nexport function mountMirror(app: any, sqlite: any, PULL_SECRET: string, busAuth: any) {\n const ready = sqlite.execute(`CREATE TABLE IF NOT EXISTS mirror_answers (\n id TEXT PRIMARY KEY, answer TEXT, text TEXT, card TEXT, at TEXT, applied INTEGER DEFAULT 0)`);\n const auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n\n app.post(\"/mirror/answer\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const id = String(b.id ?? \"\").trim().slice(0, 40);\n const answer = String(b.answer ?? \"\").trim().toLowerCase().slice(0, 20);\n if (!id || !answer) return c.json({ ok: false, error: \"id and answer are required\" }, 400);\n const text = String(b.text ?? \"\").trim().slice(0, 2000);\n const card: any = {};\n for (const k of [\"type\", \"page\", \"section\", \"claim\", \"question\", \"status\", \"date\", \"source\", \"slot\"]) if (b[k] !== undefined) card[k] = b[k];\n const at = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO mirror_answers (id, answer, text, card, at, applied) VALUES (?,?,?,?,?,0)\n ON CONFLICT(id) DO UPDATE SET answer=excluded.answer, text=excluded.text, card=excluded.card, at=excluded.at, applied=0`,\n args: [id, answer, text, JSON.stringify(card).slice(0, 8000), at] });\n return c.json({ ok: true, id, answer, at });\n });\n\n app.get(\"/mirror/answers\", async (c: any) => {\n await ready;\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const since = String(c.req.query(\"since\") ?? \"\").slice(0, 40);\n const all = c.req.query(\"all\") === \"1\";\n const r = all\n ? await sqlite.execute(\"SELECT id, answer, text, card, at, applied FROM mirror_answers ORDER BY at DESC LIMIT 200\")\n : since\n ? await sqlite.execute({ sql: \"SELECT id, answer, text, card, at, applied FROM mirror_answers WHERE applied=0 AND at >= ? ORDER BY at\", args: [since] })\n : await sqlite.execute(\"SELECT id, answer, text, card, at, applied FROM mirror_answers WHERE applied=0 ORDER BY at\");\n const rows = (r.rows as any[]).map((x) => {\n let card: any = null; try { card = JSON.parse(String(x.card ?? \"{}\")); } catch { card = {}; }\n return { id: x.id, answer: x.answer, text: x.text, at: x.at, applied: Number(x.applied), ...card };\n });\n return c.json({ ok: true, n: rows.length, answers: rows });\n });\n\n app.post(\"/mirror/applied\", async (c: any) => {\n await ready;\n const b = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, b))) return c.text(\"forbidden\", 401);\n const ids = Array.isArray(b.ids) ? b.ids.map((x: any) => String(x).slice(0, 40)) : [];\n if (!ids.length) return c.json({ ok: false, error: \"ids required\" }, 400);\n let n = 0;\n for (const id of ids) {\n const r = await sqlite.execute({ sql: \"UPDATE mirror_answers SET applied=1 WHERE id=? AND applied=0\", args: [id] });\n n += Number(r.rowsAffected ?? 0);\n }\n return c.json({ ok: true, applied: n, ids });\n });\n}\n",[204],"f6810490-b462-4508-b8d5-e3d31fae2e89","herald-fallback.ts","8b9efcda-a722-11f1-9bca-1607ee4eb77e",91,["D",1789004713687],5,"/**\n * THE HERALD'S FALLBACK — the val's own answer to the sleeping PC (quest #87, root cause #79).\n *\n * Amara the Morning Brief (formerly the morning-herald) runs on the desktop at 07:30. When the machine is asleep the brief simply\n * never arrives and nothing says so. This interval runs in the val, which is always on, and at\n * 08:30 Amsterdam time sends a LITE brief built only from what the val itself holds — open quests,\n * today's picks, unacked captures, and the last snapshot the PC pushed, every figure carrying its\n * age. It is deliberately deterministic: no model is called, so a rescued morning costs nothing.\n *\n * Law 6 (idempotency): the journal line is written BEFORE the send, and both the desktop herald's\n * line and this one are checked first — the fallback never doubles a brief that already went out.\n * Law 7: the first pass INSIDE the window journals whatever it decides, send or stand-down, so a\n * quiet fallback is visibly quiet rather than indistinguishable from a dead one. Passes outside\n * the window write nothing — the interval wakes hourly and 20 of those wakes have nothing to say.\n *\n * Built 3 Sep 2026 by HQ. Schedule: hourly 06–09 UTC; the local-time gate does the real work,\n * so summer and winter time both land on 08:30 local.\n *\n * 10 Sep 2026 (#220, piece 3): behind flag.herald_names_missing, one Quests line names the agents that\n * owed a run this morning and have no journal line — namesMissingLine in reconciler.ts, the same\n * roster and signal the reconciler uses. Flag off, the brief is byte-for-byte what it was. That module\n * is imported lazily, inside the try below, never at the top of this file: a static import would make\n * this file unloadable if reconciler.ts ever failed to load, and Val Town only finds that out when the\n * interval fires — on a morning with no brief. This file's one job is to send when nothing else will.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst EP = Deno.env.get(\"PALANTIR_EP\") ?? \"https://ClaudeAssistant--6922aaa67e8e11f1a5911607ee4eb77e.web.val.run\";\nconst SECRET = Deno.env.get(\"PULL_SECRET\") ?? \"\";\nconst TZ = \"Europe/Amsterdam\";\n\nfunction localParts(d = new Date()) {\n const f = new Intl.DateTimeFormat(\"en-GB\", { timeZone: TZ, hour12: false,\n year: \"numeric\", month: \"2-digit\", day: \"2-digit\", hour: \"2-digit\", minute: \"2-digit\", weekday: \"short\" });\n const p: any = {};\n for (const x of f.formatToParts(d)) p[x.type] = x.value;\n return { date: `${p.year}-${p.month}-${p.day}`, hour: Number(p.hour), minute: Number(p.minute), weekday: p.weekday };\n}\nconst eur = (v: number | null | undefined) =>\n v == null || isNaN(Number(v)) ? \"—\" : \"€\" + Number(v).toFixed(2).replace(/\\B(?=(\\d{3})+(?!\\d)\\.)/g, \" \").replace(\".\", \",\");\n\nasync function journal(summary: string, details: string) {\n await sqlite.execute({ sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [\"herald-fallback\", summary, details] });\n}\n\nexport default async function (interval: { lastRunAt?: Date }) {\n const now = localParts();\n // ---- the gate: one window a day, and only when the desktop has had its chance ----\n if (now.hour < 8 || (now.hour === 8 && now.minute < 30) || now.hour >= 12) return;\n\n // ---- has a brief already gone out today? (the desktop herald, or an earlier fallback) ----\n const seen = await sqlite.execute({\n // The desktop herald became Amara the Morning Brief on 3 Sep 2026 and journals as 'amara-morning-brief';\n // for two mornings this guard only knew the old name, so it doubled her brief and blamed a sleeping PC.\n sql: `SELECT source FROM journal WHERE date(ts) = ? AND (source LIKE 'morning-herald%' OR source LIKE 'amara%' OR source = 'herald-fallback') LIMIT 1`,\n args: [now.date] });\n if (seen.rows.length) {\n // A brief already went out today. Say so once — silence is what a broken interval looks like.\n const who = String((seen.rows[0] as any).source ?? \"\");\n if (who !== \"herald-fallback\") {\n await journal(`stood down — ${who} already sent today's brief`,\n `The fallback woke inside its window (${now.weekday} ${now.date}, ${String(now.hour).padStart(2, \"0\")}:${String(now.minute).padStart(2, \"0\")} Amsterdam), found a ${who} entry for today and sent nothing. This is the healthy case: the desktop was awake.`);\n }\n return;\n }\n\n // ---- what the val itself knows ----\n const openRows = await sqlite.execute(\n `SELECT id, title, tier, area, due FROM tasks WHERE status='open' AND (owner IS NULL OR owner='alexandr')`);\n const open = openRows.rows as any[];\n const byTier = (t: string) => open.filter((r) => r.tier === t).length;\n const late = open.filter((r) => r.due && String(r.due) < now.date);\n const picksRow = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date = ?\", args: [now.date] });\n const picks = picksRow.rows as any[];\n const capRow = await sqlite.execute(\"SELECT COUNT(*) AS n FROM inbox WHERE processed = 0\");\n const captures = Number((capRow.rows[0] as any)?.n ?? 0);\n const snapRow = await sqlite.execute(\"SELECT data, stamp FROM snapshot WHERE key='dashboard'\");\n let snap: any = null, snapStamp = \"\";\n if (snapRow.rows.length) {\n try { snap = JSON.parse(String((snapRow.rows[0] as any).data)); snapStamp = String((snapRow.rows[0] as any).stamp ?? \"\"); } catch (_) {}\n }\n const pot = snap?.money?.live?.personalTotal ?? null;\n const wise = snap?.business?.coffersEUR ?? null;\n const cal = (snap?.daily?.calendar ?? []) as any[];\n const upcoming = (snap?.daily?.upcoming ?? []) as any[];\n\n // ---- the brief: house style, one fact per bullet, questions last ----\n const L: string[] = [];\n L.push(`*⚡ ${now.weekday} ${now.date.slice(8)} — lite brief*`);\n L.push(\"• The PC was asleep at 07:30, so this comes from the val alone.\");\n L.push(\"\");\n L.push(\"*🗡 Quests*\");\n L.push(`• *${open.length}* open — *${byTier(\"balrog\")}* urgent, *${byTier(\"nazgul\")}* due soon`);\n if (late.length) L.push(`• 🔴 *${late.length}* past their date: ` + late.slice(0, 3).map((r) => `*#${r.id}* ${String(r.title).slice(0, 44)}`).join(\" · \"));\n L.push(`• Picks for today: ${picks.length ? picks.map((p) => `*#${p.task_id}*`).join(\" \") : \"_none chosen_\"}`);\n if (captures) L.push(`• *${captures}* capture${captures === 1 ? \"\" : \"s\"} waiting for the archivist`);\n // Who did not run (#220 piece 3). Wrapped so nothing in it can cost him the brief: this file's one job\n // is to send when nothing else will. A failure here is noted in the journal line below instead. The\n // import is inside the guard on purpose (see the header) — the pattern palantir-routes.ts uses for\n // POST /nightwatch/run — so a module that will not load is a missing line, not a missing brief.\n let namesNote = \"\";\n try {\n const { namesMissingLine } = await import(\"./reconciler.ts\");\n const line = await namesMissingLine(sqlite, new Date());\n if (line) L.push(line);\n } catch (e) { namesNote = ` The names-missing line failed and was left out: ${String(e).slice(0, 120)}.`; }\n if (pot != null || wise != null) {\n L.push(\"\");\n L.push(\"*💰 Money*\");\n if (pot != null) L.push(`• Personal pot *${eur(pot)}*`);\n if (wise != null) L.push(`• Business (Wise) *${eur(wise)}*`);\n L.push(`• _as of the last push, ${snapStamp || \"unknown\"}_`);\n }\n if (cal.length || upcoming.length) {\n L.push(\"\");\n L.push(\"*📅 From the last calendar read* _(may be a day old)_\");\n for (const e of cal.slice(0, 3)) L.push(`• *${e.when ?? \"\"}* — ${e.title}`);\n for (const e of upcoming.slice(0, 3)) L.push(`• *${e.day ?? \"\"}* ${e.time ?? \"\"} — ${e.title}`);\n }\n L.push(\"\");\n L.push(\"🖥 _Calendar and mail could not be read live — the desktop is asleep. The full brief follows when it wakes._\");\n const text = L.join(\"\\n\").slice(0, 3500);\n\n // ---- Law 6: the receipt is written before the message goes out ----\n await journal(`lite brief sent — ${open.length} open, ${late.length} late, ${picks.length} picked`,\n `The desktop herald had not journalled by 08:30 ${TZ}. Deterministic brief from the val: tasks + day_plan + inbox + snapshot (${snapStamp || \"no snapshot\"}). No model called.${namesNote}`);\n\n const r = await fetch(`${EP}/send?secret=${encodeURIComponent(SECRET)}`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify({ text }) });\n const j = await r.json().catch(() => null);\n if (!j?.ok) {\n await journal(\"lite brief FAILED to send\", `POST /send answered ${r.status}: ${JSON.stringify(j)?.slice(0, 200)}`);\n }\n}\n",[211],"11e6162b-975b-415c-99c9-91b5e2ee958e","friday-toast.ts","97bde344-8749-11f1-b372-1607ee4eb77e",31,["D",1786527836389],"// Cloud warden — Friday toast. Cron (UTC): 30 15 * * 5 (~17:30 Amsterdam in summer)\nimport { journalOutcome, runWarden } from \"./warden-shared.ts\";\nexport default async function (interval: Interval) {\n await runWarden(\"friday\", interval.lastRunAt);\n}\n",[219],"ebb37546-577f-4c33-bf38-9e5caaaef4ec","export-routes.ts","90965366-acac-11f1-836a-1607ee4eb77e",95,["D",1789173218292],"// Raw table export for the desktop mirror (task #186, 9 Sep 2026). One read-only route,\n// GET /export, that pages any allowlisted table out of the val's SQLite so the PC can keep\n// a local copy without the val ever being the only place a row lives.\n// Mounted by bot-webhook.ts: mountExport(app, sqlite, PULL_SECRET).\n//\n// GET /export?secret=… → { ok, tables:[…] }\n// GET /export?secret=…&table=journal&before=401&limit=200 → { ok, table, key, n, rows, next }\n// (a non-pageable table also carries `truncated`: true when it hit the 5000-row one-shot cap)\n// GET /export?secret=…&table=nope → 400 { ok:false, error:\"unknown table\" }\n//\n// rows come DESC by the table's key; `next` is the last row's key when the page was full\n// (there may be more — pass it back as `before`), else null.\n//\n// Nothing from the query string reaches SQL except through the TABLES map below: the table\n// name and key column are copied out of the map, `before` and `limit` are parameters.\n// banking_codes (live one-time bank consent codes) and settings (opaque key/value that may\n// hold tokens) are NOT in the map on purpose, and the 400 does not distinguish \"excluded\"\n// from \"never existed\".\nexport function mountExport(app: any, sqlite: any, PULL_SECRET: string) {\n\n// name → { key: the column to page on, num: key is INTEGER (cursor is parsed as a number),\n// pageable: false when the key is not unique (composite PK) — whole table, one shot }\nconst TABLES: Record = {\n // id INTEGER PRIMARY KEY AUTOINCREMENT\n journal: { key: \"id\", num: true, pageable: true },\n tasks: { key: \"id\", num: true, pageable: true },\n inbox: { key: \"id\", num: true, pageable: true },\n group_log: { key: \"id\", num: true, pageable: true },\n agent_jobs: { key: \"id\", num: true, pageable: true },\n agent_blocked: { key: \"id\", num: true, pageable: true },\n news_feedback: { key: \"id\", num: true, pageable: true },\n gate_queue: { key: \"id\", num: true, pageable: true },\n group_posts: { key: \"id\", num: true, pageable: true },\n team_ledger: { key: \"id\", num: true, pageable: true },\n outbox: { key: \"id\", num: true, pageable: true },\n // TEXT PRIMARY KEY\n news_items: { key: \"key\", pageable: true },\n snapshot: { key: \"key\", pageable: true },\n chats: { key: \"chat_id\", num: true, pageable: true },\n editions: { key: \"date\", pageable: true },\n day_plan_text: { key: \"date\", pageable: true },\n balance_history: { key: \"day\", pageable: true },\n nightwatch_runs: { key: \"ts\", pageable: true },\n presence: { key: \"session\", pageable: true },\n reconciler_log: { key: \"key\", pageable: true }, // #220: the reconciler's guard rows. settings stays out on purpose (see above).\n news_fetched: { key: \"id\", num: true, pageable: true },\n news_fetch_sources: { key: \"name\", pageable: true },\n news_fetch_log: { key: \"key\", pageable: true },\n // composite PRIMARY KEY — key column alone is not unique, so no cursor\n day_plan: { key: \"date\", pageable: false },\n warden_log: { key: \"date\", pageable: false },\n dues_done: { key: \"key\", pageable: false },\n};\nconst DEFAULT_LIMIT = 200, MAX_LIMIT = 500, WHOLE_TABLE_LIMIT = 5000;\n\napp.get(\"/export\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n\n const name = c.req.query(\"table\");\n if (name === undefined || name === \"\") return c.json({ ok: true, tables: Object.keys(TABLES) });\n\n // Object.prototype.hasOwnProperty, not `in`: \"constructor\" must not resolve to a table.\n if (!Object.prototype.hasOwnProperty.call(TABLES, name)) return c.json({ ok: false, error: \"unknown table\" }, 400);\n const t = TABLES[name];\n\n // limit: junk or absent → default; otherwise clamp to 1..MAX. Number(\"abc\") is NaN and\n // Math.min(NaN, 500) is NaN, which would become `LIMIT NaN` — hence the isFinite guard first.\n // An ABSENT or EMPTY limit means \"the default\". Number(\"\") is 0, which is finite, so without\n // the empty check `?limit=` would clamp to 1 and turn a 4-request sweep into 662.\n const limitRaw = String(c.req.query(\"limit\") ?? \"\").trim();\n let limit = limitRaw === \"\" ? DEFAULT_LIMIT : Number(limitRaw);\n limit = Number.isFinite(limit) ? Math.max(1, Math.min(Math.floor(limit), MAX_LIMIT)) : DEFAULT_LIMIT;\n\n // Whole-table tables: no cursor, one shot, capped.\n if (!t.pageable) {\n // Ask for one row more than the cap so a full table can be told apart from a capped one:\n // a mirror must never mistake a truncated answer for the whole table.\n const r = await run(`SELECT * FROM ${name} ORDER BY ${t.key} DESC LIMIT ?`, [WHOLE_TABLE_LIMIT + 1]);\n const truncated = r.length > WHOLE_TABLE_LIMIT;\n const rows = truncated ? r.slice(0, WHOLE_TABLE_LIMIT) : r;\n return c.json({ ok: true, table: name, key: t.key, n: rows.length, rows, next: null, truncated });\n }\n\n const beforeRaw = c.req.query(\"before\");\n let sql = `SELECT * FROM ${name}`, args: any[] = [];\n if (beforeRaw !== undefined && beforeRaw !== \"\") {\n let before: any = beforeRaw;\n if (t.num) {\n before = Number(beforeRaw);\n if (!Number.isFinite(before)) return c.json({ ok: false, error: \"bad cursor\" }, 400);\n }\n sql += ` WHERE ${t.key} < ?`; args.push(before);\n }\n sql += ` ORDER BY ${t.key} DESC LIMIT ?`; args.push(limit);\n const rows = await run(sql, args);\n const next = rows.length === limit ? (rows[rows.length - 1] as any)[t.key] ?? null : null;\n return c.json({ ok: true, table: name, key: t.key, n: rows.length, rows, next });\n});\n\n// Several tables are created lazily by the code that first writes them (dues_done, warden_log,\n// team_ledger, group_posts, the night watch's two). A mirror asking before that first write\n// should get an empty page, not a 500.\nasync function run(sql: string, args: any[]): Promise {\n try {\n const r = await sqlite.execute({ sql, args });\n return r.rows as any[];\n } catch (e: any) {\n if (/no such table/i.test(String(e?.message ?? e))) return [];\n throw e;\n }\n}\n\n}\n",[226],"926c9a2f-b86b-41f8-9903-2186643f123b","coin-watcher.ts","69902324-7e8e-11f1-90d7-1607ee4eb77e",27,["D",1786485045527],"// Coin Watcher — RETIRED 11 Aug 2026 on Alexandr's order (HQ cloud session).\n// Was: a */15 interval val pinging Telegram for every new completed Wise transaction\n// (\"🪙 Coin moves in Erebor\"). Retired because the bank app already notifies him —\n// coin moves are DASHBOARD-ONLY now: Erebor's Coffers + recent-movements module\n// (dashboard/palantir.html ← dashboard/data.js ← scripts/update_dashboard_data.py, Wise read-only).\n// Deployed UNSCHEDULED (type \"script\", see scripts/deploy_telegram_bot.py) and inert.\n// To re-enable: git show 8616772:telegram/coin-watcher.ts > telegram/coin-watcher.ts, set type back to \"interval\", redeploy.\n\nexport default async function () {\n return; // intentionally inert — no Telegram pings for coin moves (dashboard-only policy)\n}\n",[233],"c3372dd5-4a92-441f-82f8-6c6502a352e0","bot-webhook.ts","6922aaa6-7e8e-11f1-a591-1607ee4eb77e",["D",1789316959570],41,"http","// Palantír Herald — Telegram bot webhook (Val Town HTTP val)\n// Routes: POST /webhook (Telegram), GET /pull + POST /ack (Claude sessions), POST /send (outbound pings)\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { AXIOMA_PAUSED, groupGate } from \"./warden-shared.ts\";\n\nconst BOT = Deno.env.get(\"TELEGRAM_BOT_TOKEN\")!;\nconst WEBHOOK_SECRET = Deno.env.get(\"WEBHOOK_SECRET\")!;\nconst PULL_SECRET = Deno.env.get(\"PULL_SECRET\")!;\n\n// Machine work never lands on his board (3 Sep 2026). A title that starts with one of these is\n// work for the system — an HQ build, a change request to an agent, a defect, an orchestrator\n// hand-off — so it is filed to owner='system' whichever agent or session created it. GET /tasks\n// returns his lane only, so this is the one place that has to be right. If the machine finishes\n// something that then needs HIM, it files a SEPARATE task in his lane with the exact steps.\nconst MACHINE_TITLE = /^\\s*(HQ[:\\/]|RUMO-ORCH|\\[CHANGE REQUEST\\]|Wright[:\\/ ]|Bolt[:\\/ ]|Palantir defect|Build:)/i;\nconst laneFor = (title: string, owner?: string) =>\n owner ? owner : (MACHINE_TITLE.test(String(title ?? \"\")) ? \"system\" : \"alexandr\");\n\nconst API = `https://api.telegram.org/bot${BOT}`;\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS inbox (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, kind TEXT, text TEXT, file_id TEXT, processed INTEGER DEFAULT 0)`);\n// Telegram delivers a forwarded ALBUM as one separate webhook call per photo, all sharing\n// media_group_id. Without this column each photo looked like its own message: one caption\n// reply plus one \"saved, no caption\" reply per extra photo — a single forward that read as\n// three (task #195 follow-up, 6 Sep 2026: \"I forwarded, it worked, but sent the message twice\").\ntry { await sqlite.execute(\"ALTER TABLE inbox ADD COLUMN group_id TEXT\"); } catch (_) { /* already there */ }\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS tasks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL, note TEXT DEFAULT '', tier TEXT DEFAULT 'fellowship',\n area TEXT DEFAULT '', ord REAL DEFAULT 0, status TEXT DEFAULT 'open',\n comments TEXT DEFAULT '[]',\n created TEXT DEFAULT (datetime('now')), done_at TEXT)`);\n// AXIOMA team tasks live in the SAME table (one source of truth) but carry an owner.\n// The dashboard Quest Log shows only Alexandr's; the AXIOMA board shows the team's.\n// Without this separation, logging a task for Danny would pollute his personal day.\ntry { await sqlite.execute(\"ALTER TABLE tasks ADD COLUMN owner TEXT DEFAULT 'alexandr'\"); } catch (_) { /* already there */ }\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS group_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, chat_title TEXT, from_name TEXT, kind TEXT, text TEXT, file_id TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_jobs (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n agent TEXT, brief TEXT, packs TEXT, status TEXT DEFAULT 'queued',\n result TEXT, done_at TEXT)`);\n// Claim bookkeeping. The old staleness test compared the job's CREATION time, so a\n// job older than two hours could be stolen from a runner that had just claimed it,\n// while a freshly created one could wedge forever. claimed_at is the honest clock.\ntry { await sqlite.execute(\"ALTER TABLE agent_jobs ADD COLUMN claimed_at TEXT\"); } catch (_) { /* already there */ }\ntry { await sqlite.execute(\"ALTER TABLE agent_jobs ADD COLUMN worker TEXT\"); } catch (_) { /* already there */ }\n// Blocked runs (20 Aug 2026): where a policy refusal goes so it cannot vanish with the\n// session that hit it. `resolved` is 1 when one rephrased retry got through — kept anyway,\n// because a step that needs rewriting every day is a brief to fix, not a quirk to route around.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_blocked (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n agent TEXT, step TEXT, brief TEXT, retry TEXT, note TEXT,\n attempts INTEGER DEFAULT 1, resolved INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS news_feedback (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n item_key TEXT, title TEXT, source TEXT, topic TEXT, verdict TEXT, applied INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS news_items (\n key TEXT PRIMARY KEY, title TEXT, source TEXT, topic TEXT, ts TEXT DEFAULT (datetime('now')))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS journal (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT DEFAULT (datetime('now')),\n source TEXT, summary TEXT, details TEXT, filed INTEGER DEFAULT 0)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY, value TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS day_plan (\n date TEXT, task_id INTEGER, state TEXT DEFAULT 'none', PRIMARY KEY (date, task_id))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS day_plan_text (\n date TEXT PRIMARY KEY, plan TEXT)`);\n// Every outbound Telegram message, with its real outcome. Before this, send()\n// only console.error'd a failure and the endpoint still answered {ok:true}: a\n// Markdown-malformed brief vanished while the run self-reported success. Law 5\n// needs something readable back, so delivery is now a row, not a hope.\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS outbox (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n chat_id INTEGER, kind TEXT DEFAULT 'send', chars INTEGER,\n ok INTEGER, message_id INTEGER, error TEXT)`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS chats (\n chat_id INTEGER PRIMARY KEY, username TEXT, first_seen TEXT DEFAULT (datetime('now')))`);\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS editions (\n date TEXT PRIMARY KEY, title TEXT, data TEXT, ts TEXT DEFAULT (datetime('now')))`);\n\nasync function logOut(chatId: number, kind: string, chars: number, ok: boolean, messageId: number | null, error: string | null) {\n try {\n await sqlite.execute({\n sql: \"INSERT INTO outbox (chat_id, kind, chars, ok, message_id, error) VALUES (?,?,?,?,?,?)\",\n args: [chatId ?? 0, kind, chars, ok ? 1 : 0, messageId, error] });\n } catch (e) { console.error(\"outbox write failed\", String(e)); }\n}\n\n// Telegram answers 200-with-ok:false for a bad Markdown entity, so r.ok alone was\n// never proof of anything. Read the body once, judge on body.ok, and record it.\nasync function tg(method: string, params: any) {\n let status = 0, body: any = null, error: string | null = null;\n try {\n const r = await fetch(`${API}/${method}`, { method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify(params) });\n status = r.status;\n body = await r.json().catch(() => null);\n } catch (e) { error = String(e).slice(0, 200); }\n const good = !error && status === 200 && body?.ok === true;\n if (!good) {\n error = error ?? `HTTP ${status} ${String(body?.description ?? \"no body\").slice(0, 200)}`;\n console.error(method, error);\n }\n if (method === \"sendMessage\") {\n await logOut(params?.chat_id, params?.reply_markup ? \"keyboard\" : \"send\",\n String(params?.text ?? \"\").length, good, body?.result?.message_id ?? null, good ? null : error);\n }\n return good ? body.result : null;\n}\n\n// Returns the outcome instead of swallowing it. A Markdown failure is retried once\n// as plain text — a brief that trips on one stray underscore should still arrive,\n// and the outbox records that it took the fallback.\nasync function send(chatId: number, text: string, kind = \"send\") {\n const attempt = async (markdown: boolean) => {\n const body: any = { chat_id: chatId, text };\n if (markdown) body.parse_mode = \"Markdown\";\n try {\n const r = await fetch(`${API}/sendMessage`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body: JSON.stringify(body) });\n const j = await r.json().catch(() => null);\n if (r.status === 200 && j?.ok === true) return { ok: true, message_id: j.result?.message_id ?? null, error: null };\n return { ok: false, message_id: null, error: `HTTP ${r.status} ${String(j?.description ?? \"no body\").slice(0, 200)}` };\n } catch (e) { return { ok: false, message_id: null, error: String(e).slice(0, 200) }; }\n };\n let res = await attempt(true);\n let usedFallback = false;\n if (!res.ok && /parse|entit|markdown/i.test(res.error ?? \"\")) {\n const plain = await attempt(false);\n if (plain.ok) { usedFallback = true; res = plain; }\n }\n if (!res.ok) console.error(\"sendMessage failed\", res.error);\n await logOut(chatId, usedFallback ? kind + \"/plain-fallback\" : kind, text?.length ?? 0, res.ok, res.message_id, res.error);\n return res;\n}\n\n\n// ---------- the Brain (active only when ANTHROPIC_API_KEY is set) ----------\nconst BRAIN_KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n\nasync function proActive(): Promise {\n const r = await sqlite.execute(\"SELECT value FROM settings WHERE key='pro_until'\");\n return !!r.rows[0] && new Date(r.rows[0].value as string) > new Date();\n}\nconst API_MARK = \"\\n\\n\\u26a1api\";\n\n// A plain text capture becomes real quest(s) IMMEDIATELY — no LLM, free (25 Jul: no more inbox-only\n// lies; 12 Aug: newlines / bullets / \"1.\" / \" ; \" split into separate quests).\n// ---------- intent routing (17 Aug 2026) ----------\n// Not everything Alexandr types is HIS to-do. Three kinds of private message:\n// 1. TASKS — \"add these to the task list: …\" → quests on his board.\n// 2. DIRECTIVES — \"re-forge the plan\", \"check X\", \"remove the last two\" → work FOR CLAUDE.\n// These go to the inbox as kind='directive' and the day-forger (polling every 30 min)\n// EXECUTES them. Before this, \"This was not a quest\" itself became a quest.\n// 3. Plain captures — a noun phrase, a thought → a quest (old behaviour).\nconst ADD_INTENT = /\\b(add|put|log|save|запиши|добавь)\\b[\\s\\S]{0,40}\\b(tasks?|quests?|list|задач)/i;\nconst DIRECTIVE = new RegExp(\n \"^(could you|can you|would you|please (re|go|check|do|fix|update|remove|show|explain)|\" +\n \"regenerate|re-?forge|re-?do|remove|delete|undo|update|check|fix|investigate|show me|explain|\" +\n \"answer|perform|research|find out|what (is|about|happened)|why (is|did|do)|how (is|did|do)|\" +\n \"сделай|проверь|убери|удали|обнови|перегенерируй|разберись|что (с|там|случилось)|почему|\" +\n \"this was not a quest|это не задача)\", \"i\");\nfunction isDirective(raw: string): boolean {\n const t = raw.trim();\n if (ADD_INTENT.test(t)) return false; // explicit task-list intent wins\n if (DIRECTIVE.test(t)) return true;\n if (/\\?\\s*$/.test(t) && /\\b(you|your|ты|тебе)\\b/i.test(t)) return true; // question at the bot\n return false;\n}\n\nfunction splitTasks(raw: string): string[] {\n let body = raw.trim()\n .replace(/^(also\\s+)?(please\\s+)?(let'?s\\s+)?(add|put|log|save)\\s+(these|this|the following)?[\\s\\S]{0,80}?\\b(tasks?|quests?|list)\\b[^\\n]*[:\\n-]?/i, \"\")\n .trim();\n let parts = body.split(/\\r?\\n+/).map((l) => l.trim()).filter(Boolean);\n if (parts.length === 1) parts = body.split(/\\s*;\\s*/).map((l) => l.trim()).filter(Boolean);\n return parts\n .map((l) => l.replace(/^\\s*(?:[-*•·—]|\\d{1,2}[.)])\\s*/, \"\").trim())\n .map((l) => l.replace(/^(todo|task|напомни|добавь(\\s+задачу)?|запиши)[:,\\s-]*/i, \"\").trim())\n // instruction prose is not a task: drop leftover meta-lines when real items exist\n .filter((l, _i, arr) => !(arr.length > 1 && /\\b(task list|forge plan|you can|straight away|где ты можешь)\\b/i.test(l)))\n .filter((l) => l.length > 2)\n .slice(0, 12);\n}\n\n// ── Smart routing (31 Aug 2026, Alexandr: \"broaden its understanding — it should creatively\n// understand whether it's a task, or something to remember in Obsidian\") ─────────────────────\n// Every private message: (1) logged as chatlog for the Archivist → vault daily notes,\n// (2) classified by Haiku when the brain is armed (tiny prompt, ~300 tokens — his explicit\n// 31 Aug authorisation), (3) legacy regex path is the free fast-path and the fallback.\nasync function classify(raw: string): Promise {\n const KEY = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!KEY) return null;\n const sys = `Route one Telegram message from Alexandr to his assistant system. Respond ONLY with JSON, no fences.\nIntents:\n- \"task\": something HE must do later (errand, fix, buy, call...). Extract clean imperative titles, split multiple. {\"intent\":\"task\",\"titles\":[\"...\"],\"reply\":\"<=1 line confirmation\"}\n- \"note\": knowledge/interest to REMEMBER (a thought, link, fact, \"interesting\", \"read later\", \"запомни\") → goes to his Obsidian vault. {\"intent\":\"note\",\"text\":\"\",\"reply\":\"<=1 line\"}\n- \"directive\": an instruction for the ASSISTANT to do/fix/check something now. {\"intent\":\"directive\",\"reply\":\"<=1 line\"}\n- \"hq\": feedback/design/architecture for the HQ session (\"tell HQ...\", system redesign wishes). {\"intent\":\"hq\",\"title\":\"HQ: \",\"reply\":\"<=1 line\"}\n- \"chat\": a question/conversation needing an answer. {\"intent\":\"chat\"}\nRules: he writes EN/RU; titles in the message's language; \"add to tasks X\" = task with title X (strip the meta-words); when torn between task and note: concrete action = task, information = note. Never invent content.`;\n try {\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": KEY, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 400,\n system: sys, messages: [{ role: \"user\", content: raw.slice(0, 1500) }] }),\n });\n if (!r.ok) { console.error(\"classify api\", r.status); return null; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n return JSON.parse(out);\n } catch (e) { console.error(\"classify fail\", String(e).slice(0, 120)); return null; }\n}\n\nasync function makeTasks(chatId: number, titles: string[], viaBrain: boolean) {\n const made: string[] = [], dupes: string[] = [];\n for (const t of titles.slice(0, 12)) {\n const clean = (t.charAt(0).toUpperCase() + t.slice(1)).trim();\n if (clean.length < 3) continue;\n const twin = await findTwin(clean);\n if (twin) { dupes.push(clean.slice(0, 60)); continue; }\n const mx = await sqlite.execute({\n sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [\"fellowship\"] });\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [clean.slice(0, 160), \"captured from Telegram \" + new Date().toISOString().slice(0, 10),\n \"fellowship\", \"\", mx.rows[0].o, laneFor(clean)] });\n made.push(clean.slice(0, 70));\n }\n let msg = made.length\n ? (made.length === 1 ? \"⚔️ Added to the Quest Log:\\n\" : `⚔️ Added ${made.length} quests:\\n`) +\n made.map((t) => \"• \" + t).join(\"\\n\")\n : \"Nothing new — all of those are already on the board.\";\n if (dupes.length) msg += `\\n\\n(skipped as already open: ${dupes.join(\"; \")})`;\n if (made.length) msg += viaBrain ? \"\\n\\nOn the dashboard now.\" : \"\\n\\nOn the dashboard now.\";\n await send(chatId, msg);\n}\n\nasync function smartCapture(chatId: number, text: string) {\n const raw = text.trim();\n // (1) everything is logged for the Archivist → vault daily notes (his 31 Aug rule)\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,1)\",\n args: [chatId, \"chatlog\", raw] });\n // (2) free fast-path: unambiguous regex hits skip the API\n if (ADD_INTENT.test(raw)) {\n const titles = splitTasks(raw);\n if (titles.length) { await makeTasks(chatId, titles, false); return; }\n }\n // (2b) a desktop Gatekeeper is awake → it answers as Claude, on the subscription (quest #112)\n if (await PAL.isAwake()) { await PAL.gateRoute(chatId, raw, true); return; }\n // (3) the brain decides\n const c = await classify(raw);\n if (c?.intent === \"task\" && Array.isArray(c.titles) && c.titles.length) {\n await makeTasks(chatId, c.titles, true); return;\n }\n if (c?.intent === \"note\" ) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"note\", String(c.text ?? raw)] });\n await send(chatId, c.reply || \"🍃 Noted — the Archivist files it into Obsidian by morning.\");\n return;\n }\n if (c?.intent === \"hq\") {\n const title = String(c.title ?? (\"HQ: \" + raw.slice(0, 120)));\n const twin = await findTwin(title);\n if (!twin) await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [title.slice(0, 160), \"for the HQ session — filed from Telegram \" + new Date().toISOString().slice(0, 10),\n \"nazgul\", \"palantir\", 0, \"system\"] });\n await send(chatId, c.reply || \"🏰 Filed for the HQ session — it reads its inbox at every boot.\");\n return;\n }\n if (c?.intent === \"directive\") {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"directive\", raw] });\n await send(chatId, c.reply || \"🧝 Taken as an errand for me — the forge picks it up within the half-hour.\");\n return;\n }\n if (c?.intent === \"chat\") { await PAL.gateRoute(chatId, raw, true); return; } // dark stone: no credits unless /ask\n // (4) brain unarmed or failed → the legacy path\n await captureFallback(chatId, raw);\n}\n\nasync function captureFallback(chatId: number, text: string) {\n const raw = text.trim();\n if (isDirective(raw)) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,0)\",\n args: [chatId, \"directive\", raw],\n });\n await send(chatId, \"🧝 Taken as an errand for me, not a quest for you.\\nThe forge picks it up within the half-hour\" +\n \" — I'll report back when it's done.\");\n return;\n }\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (?,?,?,1)\",\n args: [chatId, \"text\", raw],\n });\n const titles = splitTasks(raw);\n if (!titles.length) { await send(chatId, \"I could not read a task in that — try again?\"); return; }\n\n const made: string[] = [], dupes: string[] = [];\n for (const t of titles) {\n const clean = t.charAt(0).toUpperCase() + t.slice(1);\n const twin = await findTwin(clean);\n if (twin) { dupes.push(clean.slice(0, 60)); continue; }\n const mx = await sqlite.execute({\n sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [\"fellowship\"],\n });\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [clean.slice(0, 160), \"captured from Telegram \" + new Date().toISOString().slice(0, 10),\n \"fellowship\", \"\", mx.rows[0].o, laneFor(clean)],\n });\n made.push(clean.slice(0, 70));\n }\n let msg = made.length\n ? (made.length === 1 ? \"⚔️ Added to the Quest Log:\\n\" : `⚔️ Added ${made.length} quests:\\n`) +\n made.map((t) => \"• \" + t).join(\"\\n\")\n : \"Nothing new — all of those are already on the board.\";\n if (dupes.length) msg += `\\n\\n(skipped as already open: ${dupes.join(\"; \")})`;\n if (made.length) msg += \"\\n\\nOn the dashboard now.\";\n await send(chatId, msg);\n}\n\nasync function brain(chatId: number, text: string) {\n const open = await sqlite.execute(\"SELECT id,title,tier,area,note FROM tasks WHERE status='open' ORDER BY tier,ord\");\n const grp = await sqlite.execute(\"SELECT ts,from_name,text FROM group_log WHERE kind='text' ORDER BY id DESC LIMIT 60\");\n const sys = `You are the Palantír Herald — Alexandr's personal assistant bot on Telegram. Concise, warm, light Lord-of-the-Rings flavor (never overdone). Answer in the user's language — EXCEPT anything posted to the AXIOMA group chat, which is ALWAYS English regardless of the question's language (team rule, no exceptions).\nFacts: Maraletto = family e-commerce business (Shopify; legal entity COTTONPASSION LDA; formerly named Artograph; run with father Sergey). AXIOMA = the work project and its team group chat, which you silently scribe.\nSelf-knowledge: you (this same bot) DO post to the AXIOMA group in exactly two cases — the Monday open-tasks report and the Friday clean-week toast (plus rare messages Alexandr explicitly requests). On 24 Jul a scheduling bug caused duplicated posts; it was fixed with once-per-day guards. If Alexandr reports bot misbehavior, acknowledge honestly and suggest he tell desktop Claude to investigate — never deny actions your other components may have taken.\nClassify the user's message and respond ONLY with JSON, no fences:\n- a task/thought to capture -> {\"action\":\"task\",\"title\":\"...\",\"tier\":\"balrog|nazgul|fellowship|shire\",\"area\":\"Maraletto|Finance|Family|Consulting|Other\",\"reply\":\"one-line confirmation\"}\n- anything else (question, status check, completing tasks, chat) -> {\"action\":\"answer\",\"reply\":\"markdown answer, <=200 words\",\"complete_task_ids\":[ids to mark done, optional]}\nTier guide: balrog=urgent/overdue, nazgul=has deadline, fellowship=this week, shire=someday.\n- anything else may ALSO carry, when he clearly asks for it: \"create_tasks\":[{\"title\",\"tier\",\"area\",\"due\":\"YYYY-MM-DD\"}], \"note\":\"knowledge to remember in his vault\", \"dispatch\":{\"agent\":\"errand-runner\",\"brief\":\"work for a desktop agent, with what done looks like\"}. Never dispatch money moves or AXIOMA posts.\nOPEN QUESTS: ${JSON.stringify(open.rows)}\nRECENT AXIOMA GROUP LOG (newest first): ${JSON.stringify(grp.rows)}\n${await PAL.snapshotContext()}`;\n const pro = await proActive();\n const model = pro ? (Deno.env.get(\"BRAIN_MODEL_PRO\") ?? \"claude-sonnet-4-5\") : (Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\");\n const sysFinal = sys + (pro ? \"\" : \"\\nECONOMY MODE: keep answers brief (<=100 words) — API credits are precious. Depth only when truly needed.\");\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: { \"x-api-key\": BRAIN_KEY!, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model, max_tokens: pro ? 2000 : 500,\n system: sysFinal, messages: [{ role: \"user\", content: text }] }),\n });\n if (!r.ok) { console.error(\"anthropic\", r.status, await r.text()); await captureFallback(chatId, text); return; }\n const out = ((await r.json()).content?.[0]?.text ?? \"\").replace(/^```json\\s*|^```\\s*|```\\s*$/g, \"\").trim();\n let j: any;\n try { j = JSON.parse(out); } catch { await send(chatId, out.slice(0, 3900) || \"🌫 The stone is clouded.\"); return; }\n if (j.action === \"task\" && j.title) {\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [j.tier ?? \"fellowship\"] });\n await sqlite.execute({ sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [j.title, \"via bot \" + new Date().toISOString().slice(0,10), j.tier ?? \"fellowship\", j.area ?? \"\", mx.rows[0].o, laneFor(j.title)] });\n await send(chatId, (j.reply || \"⚔️ Taken to the Quest Log.\") + API_MARK);\n } else {\n for (const id of j.complete_task_ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE tasks SET status='done', done_at=datetime('now') WHERE id=?\", args: [Number(id)] });\n }\n const did = await PAL.applyBrainActions(j, chatId);\n await send(chatId, ((j.reply || \"…\") + (did.length ? \"\\n\\n✅ \" + did.join(\" · \") : \"\") + API_MARK).slice(0, 3900));\n }\n}\n\n\n// ---------- interactive morning form ----------\nconst STATES = [\"none\", \"today\", \"done\"];\nconst ICON: Record = { none: \"⬜\", today: \"📅\", done: \"✅\" };\n\n// Normalised title used for duplicate detection. The Herald re-imported five\n// already-completed tasks on 2026-07-26 because nothing checked whether an\n// equivalent task existed. Titles drift slightly (\"Review Palantir dashboard\n// preview\" -> \"... v4\"), so compare on significant words, not exact strings.\nfunction titleKey(t: string, width = 6): string {\n return String(t || \"\").toLowerCase()\n .replace(/[^a-z0-9\\u0400-\\u04ff ]+/g, \" \")\n .split(/\\s+/)\n .map((w) => w.replace(/s$/, \"\")) // crude stem: \"lists\" == \"list\", \"forms\" == \"form\"\n .filter((w) => w.length > 3 && ![\"from\",\"with\",\"that\",\"this\",\"your\",\"the\",\"and\",\"for\",\"new\",\"page\",\"fro\"].includes(w))\n .sort().slice(0, width).join(\" \");\n}\nasync function findTwin(title: string): Promise {\n const key = titleKey(title);\n if (!key) return null;\n const r = await sqlite.execute(\n \"SELECT id,title,status,done_at FROM tasks WHERE done_at IS NULL OR done_at > datetime('now','-21 days')\");\n for (const row of r.rows as any[]) {\n const k2 = titleKey(row.title as string);\n if (!k2) continue;\n const a = new Set(key.split(\" \")), b = new Set(k2.split(\" \"));\n let hit = 0; a.forEach((w) => { if (b.has(w)) hit++; });\n const overlap = hit / Math.max(a.size, b.size);\n if (overlap >= 0.6) return row;\n }\n return null;\n}\n\n// Telegram accepts far more rows than this; 10 was the arbitrary cap that made the\n// two newest quests (#54, #55) impossible to tick on 19 Aug while the rollover had\n// already pre-selected one of them — the keyboard and the day plan openly disagreed.\n// Re-ordering could not fix it: promoting any quest into the ten pushed another out.\nconst KEYBOARD_MAX_ROWS = 40;\n\nasync function buildKeyboard(date: string) {\n const tasks = await sqlite.execute(\"SELECT id,title FROM tasks WHERE status='open' AND COALESCE(owner,'alexandr')='alexandr' ORDER BY CASE tier WHEN 'balrog' THEN 0 WHEN 'nazgul' THEN 1 WHEN 'fellowship' THEN 2 ELSE 3 END, ord\");\n const st = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date=?\", args: [date] });\n const map: Record = {};\n for (const r of st.rows) map[r.task_id as number] = r.state as string;\n // Anything he picked yesterday and did not finish is already marked 'today'\n // by the rollover, so it sorts to the top and arrives pre-selected. Before\n // this, unfinished picks simply vanished at midnight.\n const carried = new Set();\n const y = await sqlite.execute({\n sql: `SELECT dp.task_id FROM day_plan dp JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = date(?, '-1 day') AND dp.state = 'today' AND t.status = 'open'`,\n args: [date] });\n for (const r of y.rows as any[]) carried.add(r.task_id as number);\n // Anything already carried or already ticked must be reachable, so it sorts first;\n // the tier/ord order below it is untouched (Array.sort is stable).\n const priority = (t: any) => (carried.has(t.id) ? 2 : 0) + ((map[t.id] && map[t.id] !== \"none\") ? 1 : 0);\n const sorted = (tasks.rows as any[]).slice().sort((a, b) => priority(b) - priority(a));\n const shown = sorted.slice(0, KEYBOARD_MAX_ROWS);\n const rows = shown.map((tk: any) => [{\n text: `${ICON[map[tk.id] ?? \"none\"]}${carried.has(tk.id) ? \" ↻\" : \"\"} ${String(tk.title).slice(0, 40)}`,\n callback_data: `t:${tk.id}`,\n }]);\n // If a cap is ever hit again, say so on the keyboard itself rather than dropping\n // quests in silence — a truncation nobody can see reads as \"that is all there is\".\n if (sorted.length > shown.length) {\n rows.push([{ text: `… ${sorted.length - shown.length} more open, not shown`, callback_data: \"noop\" }]);\n }\n rows.push([{ text: \"🏁 Forge the plan\", callback_data: \"forge\" }]);\n return { inline_keyboard: rows };\n}\n\nasync function forgePlanBrain(chatId: number, date: string) {\n const forceBrain = true;\n return forgePlanInner(chatId, date, forceBrain);\n}\n\nasync function forgePlan(chatId: number, date: string) {\n return forgePlanInner(chatId, date, false);\n}\n\nasync function forgePlanInner(chatId: number, date: string, forceBrain: boolean) {\n const st = await sqlite.execute({ sql: \"SELECT task_id, state FROM day_plan WHERE date=?\", args: [date] });\n const doneIds = st.rows.filter((r: any) => r.state === \"done\").map((r: any) => r.task_id);\n const todayIds = st.rows.filter((r: any) => r.state === \"today\").map((r: any) => r.task_id);\n for (const id of doneIds) {\n await sqlite.execute({ sql: \"UPDATE tasks SET status='done', done_at=datetime('now') WHERE id=?\", args: [id] });\n }\n if (!todayIds.length) { await send(chatId, doneIds.length ? \"✅ Marked done. No battles chosen for today — a quiet day, then.\" : \"No battles chosen. The stone rests.\"); return; }\n const q = await sqlite.execute({ sql: `SELECT id,title,tier,area,note FROM tasks WHERE id IN (${todayIds.map(() => \"?\").join(\",\")})`, args: todayIds });\n\n // FREE PATH (default): record the choice, tell desktop Claude to forge the plan and start working.\n if (!forceBrain && Deno.env.get(\"FORGE_MODE\") !== \"brain\") {\n const titles = q.rows.map((r: any) => \"• \" + r.title).join(\"\\n\");\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\",\n args: [date, \"AWAITING_DESKTOP_FORGE\\n\" + titles],\n });\n await sqlite.execute({\n sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [\"morning form\", `Alexandr chose ${todayIds.length} quest(s) for ${date}`,\n \"CHOSEN:\\n\" + q.rows.map((r: any) => `#${r.id} ${r.title} [${r.tier}/${r.area}] ${r.note ?? \"\"}`).join(\"\\n\") +\n (doneIds.length ? `\\nMARKED DONE: ${doneIds.join(\", \")}` : \"\") +\n \"\\nACTION: forge the day plan (order, time slots, 🤝 what Claude takes vs 🗡 yours alone), send it via /send, and START the items Claude can take.\"],\n });\n await send(chatId, \"🗺 *Chosen for today:*\\n\" + titles +\n \"\\n\\nDesktop Claude will forge the plan and begin what it can take — free of API credits. (Need it forged right now in the cloud? send `/forge` ⚡)\");\n return;\n }\n if (!BRAIN_KEY) { await send(chatId, \"Plan chosen: \" + q.rows.map((r: any) => r.title).join(\" · \")); return; }\n const sys = `You are the Palantír Herald, planning Alexandr's day. Light LOTR flavor, concise. He runs Maraletto (family e-commerce, Shopify, with father Sergey) and works as an AI consultant.\nGiven his chosen tasks for today, produce a short battle plan (<=180 words):\n1) sensible order with rough time slots (morning/midday/evening),\n2) \"🤝 I can take:\" — parts Claude/the Herald can do autonomously or draft (research, analysis, documents, reconciliation, outreach drafts),\n3) \"🗡 Yours alone:\" — payments, calls, physical-world, decisions.\nEnd with one short encouraging line.`;\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\", headers: { \"x-api-key\": BRAIN_KEY!, \"anthropic-version\": \"2023-06-01\", \"content-type\": \"application/json\" },\n body: JSON.stringify({ model: Deno.env.get(\"BRAIN_MODEL\") ?? \"claude-haiku-4-5\", max_tokens: 700, system: sys,\n messages: [{ role: \"user\", content: \"Today's chosen tasks: \" + JSON.stringify(q.rows) }] }),\n });\n let plan = \"Plan for today: \" + q.rows.map((r: any) => r.title).join(\" · \");\n if (r.ok) plan = ((await r.json()).content?.[0]?.text ?? plan).trim();\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\", args: [date, plan] });\n await send(chatId, \"🗺 *The day's battle plan*\\n\\n\" + plan.slice(0, 3700) + API_MARK);\n}\n\nasync function handleCallback(cb: any) {\n const date = new Date().toISOString().slice(0, 10);\n const chatId = cb.message?.chat?.id;\n try {\n if (String(cb.data).startsWith(\"n:\")) {\n const [, verdict, key] = String(cb.data).split(\":\");\n const it = await sqlite.execute({ sql: \"SELECT * FROM news_items WHERE key=?\", args: [key] });\n const row: any = it.rows[0] ?? {};\n await sqlite.execute({\n sql: \"INSERT INTO news_feedback (item_key,title,source,topic,verdict) VALUES (?,?,?,?,?)\",\n args: [key, row.title ?? \"\", row.source ?? \"\", row.topic ?? \"\", verdict] });\n const label: Record = { up:\"👍 more like this\", down:\"👎 less of this\", star:\"⭐ important\", block:\"🚫 never again\" };\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: label[verdict] ?? \"noted\" });\n return;\n }\n if (cb.data === \"noop\") { await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"Reorder those quests to bring them onto the list.\" }); return; }\n if (cb.data === \"forge\") {\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"Forging…\" });\n await forgePlan(chatId, date);\n return;\n }\n if (String(cb.data).startsWith(\"t:\")) {\n const id = Number(String(cb.data).slice(2));\n const cur = await sqlite.execute({ sql: \"SELECT state FROM day_plan WHERE date=? AND task_id=?\", args: [date, id] });\n const next = STATES[(STATES.indexOf((cur.rows[0]?.state as string) ?? \"none\") + 1) % STATES.length];\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan (date, task_id, state) VALUES (?,?,?)\", args: [date, id, next] });\n await tg(\"editMessageReplyMarkup\", { chat_id: chatId, message_id: cb.message.message_id, reply_markup: await buildKeyboard(date) });\n await tg(\"answerCallbackQuery\", { callback_query_id: cb.id });\n }\n } catch (e) { console.error(\"callback\", e); await tg(\"answerCallbackQuery\", { callback_query_id: cb.id, text: \"hiccup — try again\" }); }\n}\n\n// Forwarded posts and bare media carry no m.text (only m.caption, or nothing at\n// all) — before these three helpers existed, such a message fell through every\n// branch of the private-chat handler and vanished with nothing written to inbox\n// (task #191, 5 Sep 2026: he forwarded a post, only his own follow-up chat line\n// survived). These pull out whatever payload the message DOES carry.\nfunction extractForwardInfo(m: any): string | null {\n const fo = m.forward_origin;\n if (!fo) return null;\n const when = fo.date ? new Date(fo.date * 1000).toISOString().slice(0, 16).replace(\"T\", \" \") : \"\";\n const stamp = when ? ` · ${when}` : \"\";\n if (fo.type === \"channel\") return `forwarded from channel \"${fo.chat?.title ?? \"?\"}\"${stamp}`;\n if (fo.type === \"chat\") return `forwarded from chat \"${fo.sender_chat?.title ?? \"?\"}\"${stamp}`;\n if (fo.type === \"user\") return `forwarded from ${fo.sender_user?.first_name ?? \"?\"} ${fo.sender_user?.last_name ?? \"\"}`.trim() + stamp;\n if (fo.type === \"hidden_user\") return `forwarded from ${fo.sender_user_name ?? \"a hidden user\"}${stamp}`;\n return `forwarded${stamp}`;\n}\nfunction extractLinks(text: string, entities: any[] | undefined): string[] {\n const out: string[] = [];\n for (const e of entities ?? []) {\n if (e.type === \"text_link\" && e.url) out.push(e.url);\n else if (e.type === \"url\" && text) out.push(text.slice(e.offset, e.offset + e.length));\n }\n return out;\n}\nfunction mediaKind(m: any): { kind: string; fileId: string } | null {\n if (m.photo?.length) return { kind: \"photo\", fileId: m.photo[m.photo.length - 1].file_id };\n if (m.video) return { kind: \"video\", fileId: m.video.file_id };\n if (m.document) return { kind: \"document\", fileId: m.document.file_id };\n if (m.animation) return { kind: \"animation\", fileId: m.animation.file_id };\n if (m.sticker) return { kind: \"sticker\", fileId: m.sticker.file_id };\n return null;\n}\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\napp.post(\"/webhook\", async (c) => {\n if (c.req.header(\"X-Telegram-Bot-Api-Secret-Token\") !== WEBHOOK_SECRET) return c.text(\"forbidden\", 401);\n const u = await c.req.json();\n if (u.callback_query) { await handleCallback(u.callback_query); return c.text(\"ok\"); }\n const m = u.message;\n if (!m) return c.text(\"ok\");\n const chatId = m.chat.id;\n\n // ---- group chats: listen silently, never reply ----\n if (m.chat.type === \"group\" || m.chat.type === \"supergroup\") {\n const from = [m.from?.first_name, m.from?.last_name].filter(Boolean).join(\" \") || m.from?.username || \"?\";\n const kind = m.voice || m.audio ? \"voice\" : (m.text ? \"text\" : \"other\");\n const fid = (m.voice ?? m.audio)?.file_id ?? null;\n await sqlite.execute({\n sql: \"INSERT INTO group_log (chat_id, chat_title, from_name, kind, text, file_id) VALUES (?,?,?,?,?,?)\",\n args: [chatId, m.chat.title ?? \"\", from, kind, m.text ?? m.caption ?? \"\", fid],\n });\n await sqlite.execute(\"DELETE FROM group_log WHERE ts < datetime('now','-45 days')\");\n\n // AXIOMA PAUSED (5 Sep 2026, task #184): the log above still runs — he asked for silence,\n // not amnesia — but nothing below it does. An @mention gets no quest and no reply.\n if (AXIOMA_PAUSED) return c.text(\"ok\");\n\n // Law 3 says never speak in AXIOMA UNASKED. An explicit @mention is being asked.\n // Approved by Alexandr 2026-07-31 (quest #33). Free: no LLM, plain parsing.\n const txt = (m.text ?? m.caption ?? \"\").trim();\n const MENTION = /@calude_assistant_bot|@claude_assistant_bot/i;\n const WANTS_TASK = /\\b(log|add|record|note|запиши|залогируй|добавь)\\b.{0,20}\\b(task|todo|задач)/i;\n if (MENTION.test(txt) && WANTS_TASK.test(txt)) {\n // The task text is either after the verb, or — the common case — the message\n // being replied to (\"Need to be filled by Danny\" ← \"@bot log this task for Danny\").\n const replied = (m.reply_to_message?.text ?? m.reply_to_message?.caption ?? \"\").trim();\n let body = txt.replace(MENTION, \"\")\n .replace(/\\b(please\\s+)?(log|add|record|note|запиши|залогируй|добавь)\\b\\s*(this\\s+)?(task|todo|задачу|задача)?\\s*/i, \"\")\n .trim();\n // \"for Danny\" / \"для Дэнни\" → owner, and strip it from the title\n let owner = \"unassigned\";\n const who = body.match(/\\b(?:for|для)\\s+([A-Za-z\\u0400-\\u04ff]+)/i);\n if (who) { owner = who[1].toLowerCase(); body = body.replace(who[0], \"\").trim(); }\n const ROSTER: Record = { danny: \"danny\", дэнни: \"danny\", дени: \"danny\",\n sergey: \"sergey\", sergio: \"sergey\", сергей: \"sergey\", серхио: \"sergey\",\n alex: \"alexandr\", alexandr: \"alexandr\", саша: \"alexandr\", алексадр: \"alexandr\" };\n owner = ROSTER[owner] ?? owner;\n const title = (body && body.length > 3) ? body : replied;\n if (!title) {\n await send(chatId, \"I can log it — reply to the message that describes the task, or write it after the mention.\");\n return c.text(\"ok\");\n }\n const twin = await findTwin(title);\n if (twin) {\n await send(chatId, `Already on the board: “${String(twin.title).slice(0, 70)}”.`);\n return c.text(\"ok\");\n }\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier='fellowship'\" });\n const r = await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?) RETURNING id\",\n args: [title.slice(0, 160), `AXIOMA group · asked by ${from} · ${new Date().toISOString().slice(0, 10)}`,\n \"fellowship\", \"axioma\", mx.rows[0].o, owner] });\n await send(chatId, `📋 Logged for *${owner === \"unassigned\" ? \"the team\" : owner}*: ${title.slice(0, 90)}\\n_#${r.rows[0].id} · it will appear in Monday's report._`);\n return c.text(\"ok\");\n }\n return c.text(\"ok\"); // otherwise: listen silently, never reply\n }\n\n // ---- private chats: only the owner (first registered) is served ----\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const ownerId = own.rows[0]?.chat_id;\n if (ownerId && chatId !== ownerId) return c.text(\"ok\"); // strangers: silent ignore\n await sqlite.execute({ sql: \"INSERT OR IGNORE INTO chats (chat_id, username) VALUES (?,?)\", args: [chatId, m.from?.username ?? \"\"] });\n\n if (m.voice || m.audio) {\n const f = m.voice ?? m.audio;\n await sqlite.execute({ sql: \"INSERT INTO inbox (chat_id, kind, text, file_id) VALUES (?,?,?,?)\", args: [chatId, \"voice\", m.caption ?? \"\", f.file_id] });\n await send(chatId, \"🎙 Heard. The scribes will transcribe it at the next watch.\");\n return c.text(\"ok\");\n }\n if (m.text === \"/pro\") {\n const until = new Date(Date.now() + 2 * 3600e3).toISOString();\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO settings (key, value) VALUES ('pro_until', ?)\", args: [until] });\n await send(chatId, \"🔥 Pro mode for 2 hours — deeper counsel, higher cost. /eco to end early.\");\n return c.text(\"ok\");\n }\n if (m.text === \"/forge\") {\n const date = new Date().toISOString().slice(0, 10);\n await send(chatId, \"⚡ Forging in the cloud…\");\n const prev = Deno.env.get(\"FORGE_MODE\");\n await forgePlanBrain(chatId, date);\n return c.text(\"ok\");\n }\n if (m.text === \"/eco\") {\n await sqlite.execute(\"DELETE FROM settings WHERE key='pro_until'\");\n await send(chatId, \"🌿 Economy mode — brief and thrifty.\");\n return c.text(\"ok\");\n }\n if (m.text) {\n // API COST POLICY: brain only when clearly addressed — question mark, /ask, or \"bot ...\" prefix.\n // Everything else = free capture; the desktop Herald processes it on subscription.\n const txt = m.text.trim();\n if (await PAL.handleCommand(chatId, txt)) return c.text(\"ok\"); // /money /fleet … — free, no LLM\n // COST POLICY: the cloud brain wakes ONLY on an explicit /ask (or \"bot:\" prefix) — credits.\n const explicit = /^\\/ask\\b/i.test(txt) || /^(bot|бот)[,:]/i.test(txt);\n if (BRAIN_KEY && explicit) {\n await brain(chatId, txt.replace(/^(\\/ask|bot|бот)[,:]?\\s*/i, \"\"));\n } else {\n // 31 Aug 2026: every private message goes through the smart router (Haiku classify:\n // task / note→Obsidian / directive / HQ / chat) — his explicit authorisation. The old\n // \"questions wait for the next watch\" economy path is retired; chatlog rows feed the vault.\n await smartCapture(chatId, txt);\n }\n return c.text(\"ok\");\n }\n\n // No m.text: a forwarded post, a media message, or a link-only share. Extract\n // whatever is there (forward origin, url entities, media caption) so it lands\n // in inbox instead of vanishing — see extractForwardInfo/extractLinks/mediaKind above.\n const fwdMedia = mediaKind(m);\n const fwdInfo = extractForwardInfo(m);\n const fwdLinks = extractLinks(m.caption ?? \"\", m.caption_entities);\n const fwdCaption = (m.caption ?? \"\").trim();\n if (fwdMedia || fwdInfo || fwdLinks.length) {\n // An album is delivered as several separate updates sharing media_group_id, usually with\n // the caption on only one of them. Every item is still saved (so every file_id survives),\n // but only the first one seen replies/routes — otherwise one forward reads as several.\n const groupId: string | null = m.media_group_id ?? null;\n let alreadySeen = false;\n if (groupId) {\n const dup = await sqlite.execute({ sql: \"SELECT id FROM inbox WHERE group_id=? LIMIT 1\", args: [groupId] });\n alreadySeen = dup.rows.length > 0;\n }\n const parts: string[] = [];\n if (fwdCaption) parts.push(fwdCaption);\n if (fwdLinks.length) parts.push(\"Link: \" + fwdLinks.join(\" \"));\n if (fwdInfo) parts.push(fwdInfo);\n if (fwdMedia) parts.push(`[attached: ${fwdMedia.kind}]`);\n const combined = parts.join(\"\\n\");\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, file_id, group_id) VALUES (?,?,?,?,?)\",\n args: [chatId, fwdMedia?.kind ?? \"forward\", combined, fwdMedia?.fileId ?? null, groupId],\n });\n if (alreadySeen) return c.text(\"ok\");\n if (fwdCaption || fwdLinks.length) {\n await smartCapture(chatId, combined);\n } else {\n await send(chatId, `📎 Saved${fwdInfo ? \" — \" + fwdInfo : \"\"}${fwdMedia ? ` (${fwdMedia.kind}, no caption — kept, but I can't read it yet)` : \"\"}.`);\n }\n return c.text(\"ok\");\n }\n\n await send(chatId, \"The stone does not yet understand this kind of message — send text or a voice note.\");\n return c.text(\"ok\");\n});\n\n// Morning Herald: deliver brief + interactive task picker to the owner\napp.post(\"/morning-form\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { brief } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" }, 400);\n const briefRes = brief ? await send(chatId, String(brief).slice(0, 3900), \"brief\")\n : { ok: true, message_id: null, error: null };\n const date = new Date().toISOString().slice(0, 10);\n const picker = await tg(\"sendMessage\", { chat_id: chatId, text: \"🗡 Choose today's battles — tap to cycle: ⬜ skip · 📅 today · ✅ already done. Then forge the plan.\",\n reply_markup: await buildKeyboard(date) });\n // The Herald could not prove its own brief arrived: this endpoint answered {ok:true}\n // whatever Telegram said. Now ok means both messages are really in the chat.\n const good = briefRes.ok && !!picker;\n return c.json({ ok: good, brief_message_id: briefRes.message_id,\n picker_message_id: picker?.message_id ?? null,\n error: good ? null : (briefRes.error ?? \"picker message was rejected by Telegram\") },\n good ? 200 : 502);\n});\napp.get(\"/dayplan\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM day_plan_text ORDER BY date DESC LIMIT 1\");\n return c.json(r.rows[0] ?? {});\n});\n\n// Today's choices from the morning form — any session can read what Alexandr picked\napp.get(\"/dayselection\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const date = c.req.query(\"date\") ?? new Date().toISOString().slice(0, 10);\n const r = await sqlite.execute({\n sql: `SELECT dp.task_id, dp.state, t.title, t.tier, t.area, t.note\n FROM day_plan dp LEFT JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = ? AND dp.state != 'none'`, args: [date] });\n const plan = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date = ?\", args: [date] });\n return c.json({ date, picks: r.rows, plan: plan.rows[0]?.plan ?? null });\n});\n// The plan column is text, but the palantir skill and the day-forger charter both\n// document an OBJECT ({slots,claude,yours,notes}). Binding that straight into SQLite\n// stored the literal string \"[object Object]\" and still answered {ok:true} — the day\n// plan was destroyed and the dashboard showed garbage, three mornings running. The\n// val now renders the documented shape instead of arguing with the documentation.\nfunction renderPlan(plan: any): string {\n if (plan == null) return \"\";\n if (typeof plan === \"string\") return plan;\n if (typeof plan !== \"object\") return String(plan);\n const out: string[] = [];\n for (const slot of (Array.isArray(plan.slots) ? plan.slots : [])) {\n const when = slot?.when ?? slot?.time ?? slot?.label ?? \"\";\n if (when) out.push(String(when));\n for (const it of (Array.isArray(slot?.items) ? slot.items : [])) out.push(\"• \" + it);\n out.push(\"\");\n }\n const block = (title: string, arr: any) => {\n if (!Array.isArray(arr) || !arr.length) return;\n out.push(title);\n for (const it of arr) out.push(\"• \" + it);\n out.push(\"\");\n };\n block(\"🤝 Claude takes\", plan.claude);\n block(\"🗡 Yours alone\", plan.yours);\n block(\"📝 Notes\", plan.notes);\n const text = out.join(\"\\n\").replace(/\\n{3,}/g, \"\\n\\n\").trim();\n // An object shaped like nothing we know is still better kept than silently lost.\n return text || JSON.stringify(plan);\n}\n\n// Desktop session stores the forged plan (free) so it shows on the dashboard\napp.post(\"/dayplan\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { date, plan } = await c.req.json();\n const text = renderPlan(plan);\n if (!text.trim()) return c.json({ ok: false, error: \"plan is empty — nothing was stored\" }, 400);\n const d = date ?? new Date().toISOString().slice(0, 10);\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO day_plan_text (date, plan) VALUES (?,?)\", args: [d, text] });\n // Read it back here so a caller does not have to do Law 5 by hand every morning.\n const back = await sqlite.execute({ sql: \"SELECT plan FROM day_plan_text WHERE date=?\", args: [d] });\n const stored = String(back.rows[0]?.plan ?? \"\");\n return c.json({ ok: stored === text, date: d, chars: stored.length, preview: stored.slice(0, 140) },\n stored === text ? 200 : 500);\n});\n\n// AGENT BUS — HQ dispatches jobs, specialists claim and answer them.\n// A job claimed but never finished used to be listed by NOTHING: /agent/jobs served\n// only 'queued', /agent/results only 'done'/'failed'. Jobs 6-10 sat in 'running' for\n// two days while six runner passes reported \"queue empty\", and one of them carried\n// the accountant email with a same-day deadline. Anything abandoned now comes back.\nconst STALE_CLAIM_HOURS = 2;\nconst STALE_SQL = `(status='running' AND COALESCE(claimed_at, ts) < datetime('now','-${STALE_CLAIM_HOURS} hours'))`;\n\n// Both the secret in ?secret= (what every other endpoint uses) and in the body are\n// accepted here: the generated runner prompt sent it in the body, every claim 401'd,\n// and the bus was dead on arrival in complete silence.\nasync function busAuth(c: any, body?: any) {\n if (c.req.query(\"secret\") === PULL_SECRET) return true;\n return !!body && body.secret === PULL_SECRET;\n}\n\n// A brief that repeats work already delivered. Jobs 2-5 (17 Aug) and 11-13 (19 Aug)\n// were all duplicate dispatches, caught only because a human read reports/day/ by hand.\nasync function findJobTwin(agent: string, brief: string) {\n const key = titleKey(brief, 14);\n const quests = String(brief).match(/#\\d{1,4}/g) ?? [];\n const r = await sqlite.execute({\n sql: `SELECT id, ts, status, done_at, substr(brief,1,220) AS brief, substr(COALESCE(result,''),1,400) AS result\n FROM agent_jobs WHERE agent=? AND status IN ('done','running')\n AND ts > datetime('now','-14 days') ORDER BY id DESC LIMIT 40`,\n args: [agent] });\n for (const row of r.rows as any[]) {\n const q2 = String(row.brief).match(/#\\d{1,4}/g) ?? [];\n if (quests.length && q2.length && quests.some((q) => q2.includes(q))) return row;\n const k2 = titleKey(String(row.brief), 14);\n if (!key || !k2) continue;\n const a = new Set(key.split(\" \")), b = new Set(k2.split(\" \"));\n let hit = 0; a.forEach((w) => { if (b.has(w)) hit++; });\n if (hit / Math.max(a.size, b.size) >= 0.6) return row;\n }\n return null;\n}\n\napp.post(\"/agent/job\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { agent, brief, packs } = body;\n if (!agent || !brief) return c.json({ ok: false, error: \"agent and brief required\" }, 400);\n const twin = await findJobTwin(agent, String(brief));\n const r = await sqlite.execute({ sql: \"INSERT INTO agent_jobs (agent, brief, packs) VALUES (?,?,?) RETURNING id\",\n args: [agent, brief, JSON.stringify(packs ?? [])] });\n return c.json({\n ok: true, id: r.rows[0].id,\n duplicate_warning: twin ? {\n job: twin.id, status: twin.status, dispatched: twin.ts, done_at: twin.done_at,\n brief: twin.brief, result: twin.result,\n note: \"A very similar brief was already dispatched to this agent. Read that job's result before running this one, or close this job as a duplicate.\",\n } : null,\n });\n});\n\napp.get(\"/agent/jobs\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const agent = c.req.query(\"agent\");\n const r = agent\n ? await sqlite.execute({ sql: `SELECT * FROM agent_jobs WHERE (status='queued' OR ${STALE_SQL}) AND agent=? ORDER BY id`, args: [agent] })\n : await sqlite.execute(`SELECT * FROM agent_jobs WHERE status='queued' OR ${STALE_SQL} ORDER BY id`);\n return c.json(r.rows);\n});\n\n// The window that did not exist: every job, whatever its status, plus an explicit\n// stranded list. One call now answers \"is anything stuck?\" — it used to be unanswerable.\napp.get(\"/agent/status\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const counts = await sqlite.execute(\"SELECT status, COUNT(*) AS n FROM agent_jobs GROUP BY status\");\n const stranded = await sqlite.execute(\n `SELECT id, ts, claimed_at, agent, worker, substr(brief,1,200) AS brief FROM agent_jobs WHERE ${STALE_SQL} ORDER BY id`);\n const running = await sqlite.execute(\n \"SELECT id, ts, claimed_at, agent, worker, substr(brief,1,200) AS brief FROM agent_jobs WHERE status='running' ORDER BY id\");\n const recent = await sqlite.execute(\n \"SELECT id, ts, agent, status, claimed_at, worker, done_at, substr(brief,1,160) AS brief FROM agent_jobs ORDER BY id DESC LIMIT 50\");\n const byStatus: Record = {};\n for (const r of counts.rows as any[]) byStatus[String(r.status)] = Number(r.n);\n return c.json({ counts: byStatus, stranded_hours: STALE_CLAIM_HOURS,\n stranded: stranded.rows, running: running.rows, recent: recent.rows });\n});\n\nimport { mountBanking } from \"./banking.ts\";\nimport { mountVaultRoutes } from \"./vault-routes.ts\";\nimport { mountPalantir } from \"./palantir-routes.ts\";\nimport { mountNews } from \"./news-routes.ts\";\nimport { mountExport } from \"./export-routes.ts\";\nmountBanking(app, sqlite, PULL_SECRET);\nmountVaultRoutes(app, sqlite, PULL_SECRET, busAuth);\nmountNews(app, sqlite, PULL_SECRET, tg);\nmountExport(app, sqlite, PULL_SECRET); // #186: full-history export routes\n// HQ 1-2 Sep 2026: snapshot + free commands (#110), page picker/forge (#98), presence + gate (#112)\nconst PAL = mountPalantir(app, sqlite, PULL_SECRET, busAuth, { send, tg, forgePlan, forgePlanBrain });\n\n// ── Blocked runs (20 Aug 2026) ────────────────────────────────────────────────\n// Alexandr: \"some of our agents are stuck because the model flagged their attempts as\n// violating the policies… let's implement a loop that solves such problems.\"\n// A refused run is the one failure that leaves NO trace: the refusal happens before the\n// agent reaches its journal/runs.jsonl step, so the ledger shows nothing and the silence\n// looks like a quiet day. This table is where a block goes to survive its own session.\n// Doctrine lives in memory/packs/when-blocked.md — one rephrased retry, never a third.\napp.post(\"/agent/blocked\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { agent, step, brief, retry, note } = body;\n const attempts = Number(body.attempts ?? 1);\n const resolved = body.resolved ? 1 : 0;\n if (!agent || !step) return c.json({ ok: false, error: \"agent and step are required\" }, 400);\n const r = await sqlite.execute({\n sql: `INSERT INTO agent_blocked (agent, step, brief, retry, note, attempts, resolved)\n VALUES (?,?,?,?,?,?,?) RETURNING id`,\n args: [String(agent), String(step), String(brief ?? \"\"), String(retry ?? \"\"),\n String(note ?? \"\"), attempts, resolved],\n });\n const id = Number((r.rows[0] as any).id ?? (r.rows[0] as any)[0]);\n // A block that the rewrite rescued is bookkeeping, not news — it is recorded so the\n // Wright can see a brief that needs rephrasing EVERY day and fix it at the source,\n // but it must never interrupt him. Only an unresolved block is worth a nudge.\n return c.json({ ok: true, id, resolved: !!resolved, notify: !resolved });\n});\n\n// Open blocks, newest first. The Herald reads this each morning; the Steward audits it.\napp.get(\"/agent/blocked\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const open = await sqlite.execute(\n \"SELECT * FROM agent_blocked WHERE resolved=0 ORDER BY id DESC LIMIT 50\");\n // Repeat offenders: the same step blocking again and again is a badly written brief,\n // not bad luck. Surfacing the count is what turns a workaround into a real fix.\n const repeats = await sqlite.execute(\n `SELECT agent, step, COUNT(*) AS n, MAX(ts) AS last FROM agent_blocked\n GROUP BY agent, step HAVING n > 1 ORDER BY n DESC LIMIT 20`);\n return c.json({ open: open.rows, repeat_offenders: repeats.rows });\n});\n\n// Close one out — the Wright after fixing the brief, or Alexandr deciding it is a real no.\napp.post(\"/agent/blocked/resolve\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, note } = body;\n await sqlite.execute({\n sql: \"UPDATE agent_blocked SET resolved=1, note=COALESCE(NULLIF(?,''), note) WHERE id=?\",\n args: [String(note ?? \"\"), Number(id)] });\n const back = await sqlite.execute({ sql: \"SELECT * FROM agent_blocked WHERE id=?\", args: [Number(id)] });\n return c.json({ ok: true, row: back.rows[0] ?? null });\n});\n\n// Claim = the missing piece for a polling worker: without it, two overlapping runner\n// passes would both execute the same job. First claim wins; a claim older than 2h is\n// considered abandoned and can be re-claimed (a crashed run must not wedge the queue).\n// Staleness is measured from the CLAIM, not from job creation — the old test let a\n// two-hour-old job be stolen from a runner that had only just picked it up.\napp.post(\"/agent/claim\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, worker } = body;\n const exists = await sqlite.execute({ sql: \"SELECT status FROM agent_jobs WHERE id=?\", args: [Number(id)] });\n if (!exists.rows.length) return c.json({ ok: false, error: `no job ${id}` }, 404);\n const r = await sqlite.execute({\n sql: `UPDATE agent_jobs SET status='running', claimed_at=datetime('now'), worker=?\n WHERE id=? AND (status='queued' OR ${STALE_SQL})`,\n args: [String(worker ?? \"runner\"), Number(id)] });\n const claimed = (r.rowsAffected ?? 0) > 0;\n return c.json({ ok: true, claimed, id: Number(id),\n was: exists.rows[0].status,\n reason: claimed ? null : `job is ${exists.rows[0].status} and not stale — not claimable` });\n});\n\napp.post(\"/agent/result\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n if (!(await busAuth(c, body))) return c.text(\"forbidden\", 401);\n const { id, result, ok } = body;\n const before = await sqlite.execute({ sql: \"SELECT status FROM agent_jobs WHERE id=?\", args: [Number(id)] });\n if (!before.rows.length) return c.json({ ok: false, error: `no job ${id}` }, 404);\n const status = ok === false ? \"failed\" : \"done\";\n await sqlite.execute({ sql: \"UPDATE agent_jobs SET status=?, result=?, done_at=datetime('now') WHERE id=?\",\n args: [status, result ?? \"\", Number(id)] });\n return c.json({ ok: true, id: Number(id), was: before.rows[0].status, now: status });\n});\n\n// #186: paging for GET /agent/results and GET /journal?all=1 — ?limit= (clamped 1..500)\n// and ?before= (rows with id < before). Same guard as briefCap below: Number(\"abc\") is\n// NaN and Math.min(NaN, 500) is NaN → \"LIMIT NaN\", so anything that is not a finite integer\n// >= 1 falls back to the route's own default — never 0 rows, never NaN. A junk `before` is\n// ignored (as if absent). Both values go to SQL as bound args, never into the query text.\nconst pageLimit = (c: any, dflt: number) => {\n const raw = String(c.req.query(\"limit\") ?? \"\").trim();\n if (raw === \"\") return dflt;\n const n = Math.trunc(Number(raw));\n return Number.isFinite(n) && n >= 1 ? Math.min(500, n) : dflt;\n};\nconst pageBefore = (c: any): number | null => {\n const raw = String(c.req.query(\"before\") ?? \"\").trim();\n if (raw === \"\") return null;\n const n = Number(raw);\n return Number.isInteger(n) ? n : null;\n};\n\napp.get(\"/agent/results\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const limit = pageLimit(c, 30);\n const before = pageBefore(c);\n // The status filter is load-bearing: the dashboard and the runner depend on it.\n const r = await sqlite.execute(before == null\n ? { sql: \"SELECT * FROM agent_jobs WHERE status IN ('done','failed') ORDER BY id DESC LIMIT ?\", args: [limit] }\n : { sql: \"SELECT * FROM agent_jobs WHERE status IN ('done','failed') AND id < ? ORDER BY id DESC LIMIT ?\", args: [before, limit] });\n // Shape stays a plain array on purpose — callers parse it unattended. Stranded work\n // is surfaced by /agent/jobs (it comes back into the queue) and by /agent/status.\n return c.json(r.rows);\n});\n\n// SHARED JOURNAL — every session logs what it did here; the main HQ session files it into JOURNAL/\napp.post(\"/journal\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { source, summary, details } = await c.req.json();\n if (!summary) return c.json({ ok: false, error: \"summary required\" });\n await sqlite.execute({\n sql: \"INSERT INTO journal (source, summary, details) VALUES (?,?,?)\",\n args: [source ?? \"unknown session\", summary, details ?? \"\"],\n });\n return c.json({ ok: true });\n});\n\n// ?brief=1 on GET /journal and GET /tasks: same rows, same order, long text (details / note)\n// cut to ¬e= chars, 0..2000, default 600. summary and title are never cut.\n// 13 Sep 2026 (#216): the default was 200 and Alexandr ruled it too thin — \"let them read more, but\n// less often\". 200 characters is a title and a half: enough to CHOOSE an item, not enough to know\n// what it asks for, so an agent that picked one had to fetch the full board again anyway. 600 is\n// three sentences, which is where a brief stops being a menu and starts being a brief. Cost, measured\n// on the live board of 46 rows: ~17 KB at 200, ~29 KB at 600, against 111 KB unbriefed. The other\n// half of his ruling — read less often — is the console's poll interval and Priya's cadence.\n// detailsFull / noteFull is true when the text WAS cut, i.e. there is more than you are holding;\n// detailsChars / noteChars is the untruncated length, for a caller that misreads the boolean.\n// A brief task row has commentCount and deliberately no `comments` key: the console parses\n// t.comments as a JSON array and a number under that name would corrupt its threads silently.\n// Without brief=1 both routes answer byte-identically to before, on purpose: the console and the bot read them.\nconst briefOn = (c: any) => c.req.query(\"brief\") === \"1\";\nconst briefCap = (c: any) => {\n const raw = String(c.req.query(\"note\") ?? \"\").trim();\n if (raw === \"\") return 600; // Number(\"\") is 0, and an empty ¬e= is not a request for 0\n const n = Number(raw);\n return Number.isFinite(n) ? Math.min(2000, Math.max(0, Math.trunc(n))) : 600;\n};\nconst briefText = (s: unknown, cap: number) => {\n const t = s == null ? null : String(s);\n return {\n // cap 0 drops the text entirely (null, not \"…\"): full/chars below still say what was dropped\n text: t == null ? null : cap === 0 ? null : t.length > cap ? t.slice(0, cap) + \"…\" : t,\n full: t != null && t.length > cap,\n chars: t == null ? 0 : t.length,\n };\n};\nconst briefJournal = (j: any, cap: number) => {\n const d = briefText(j.details, cap);\n return { id: j.id ?? null, ts: j.ts ?? null, source: j.source ?? null, summary: j.summary ?? null,\n filed: j.filed ?? null, details: d.text, detailsFull: d.full, detailsChars: d.chars };\n};\nconst briefTask = (t: any, cap: number) => {\n const n = briefText(t.note, cap);\n let commentCount = 0;\n try { const p = JSON.parse(t.comments ?? \"[]\"); commentCount = Array.isArray(p) ? p.length : 0; } catch (_) { commentCount = 0; }\n return { id: t.id ?? null, title: t.title ?? null, tier: t.tier ?? null, due: t.due ?? null,\n owner: t.owner ?? \"alexandr\", area: t.area ?? null, status: t.status ?? null,\n note: n.text, noteFull: n.full, noteChars: n.chars, commentCount };\n};\n\napp.get(\"/journal\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const all = c.req.query(\"all\") === \"1\";\n // #186: ?limit= and ?before= apply to the all=1 branch only; the unfiled branch is untouched.\n const limit = pageLimit(c, 100);\n const before = pageBefore(c);\n const r = await sqlite.execute(!all\n ? \"SELECT * FROM journal WHERE filed = 0 ORDER BY id\"\n : before == null\n ? { sql: \"SELECT * FROM journal ORDER BY id DESC LIMIT ?\", args: [limit] }\n : { sql: \"SELECT * FROM journal WHERE id < ? ORDER BY id DESC LIMIT ?\", args: [before, limit] });\n const cap = briefCap(c);\n if (briefOn(c)) return c.json(r.rows.map((j: any) => briefJournal(j, cap)));\n return c.json(r.rows);\n});\napp.post(\"/journal/filed\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE journal SET filed = 1 WHERE id = ?\", args: [Number(id)] });\n }\n return c.json({ ok: true });\n});\n\n// Claude sessions: read the work-group scribe log (owner's eyes only)\napp.get(\"/group\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const since = c.req.query(\"since\") ?? \"1970-01-01\";\n const limit = Math.min(Number(c.req.query(\"limit\") ?? 200), 500);\n const r = await sqlite.execute({\n sql: \"SELECT * FROM group_log WHERE ts >= ? ORDER BY id DESC LIMIT ?\",\n args: [since, limit],\n });\n return c.json(r.rows);\n});\n\n// Claude sessions: fetch unprocessed captures\napp.get(\"/pull\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM inbox WHERE processed = 0 ORDER BY id\");\n return c.json(r.rows);\n});\n// Claude sessions: mark processed\napp.post(\"/ack\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) {\n await sqlite.execute({ sql: \"UPDATE inbox SET processed = 1 WHERE id = ?\", args: [id] });\n }\n return c.json({ ok: true });\n});\n// Outbound ping from Claude (desktop sessions, Herald, crons)\napp.post(\"/send\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { text, chat_id } = await c.req.json();\n let target = chat_id;\n if (!target) {\n const r = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n target = r.rows[0]?.chat_id;\n }\n if (!target) return c.json({ ok: false, error: \"no chat registered — /start the bot first\" }, 400);\n if (Number(target) < 0) { // a group: one door, one ledger (see groupGate in warden-shared.ts)\n const g = await groupGate(String(text), c.req.query(\"source\") ?? \"unknown\");\n if (!g.allow) return c.json({ ok: false, blocked: g.why, chat_id: target }, 409);\n }\n const res = await send(target as number, text);\n // {ok:true} used to be returned even when Telegram refused the message. It now\n // means Telegram accepted it and message_id is the proof (GET /outbox to re-read).\n return c.json({ ok: res.ok, message_id: res.message_id, chat_id: target, error: res.error },\n res.ok ? 200 : 502);\n});\n\n\n// ---------- Quest Log CRUD (dashboard + Claude sessions) ----------\nconst auth = (c: any) => c.req.query(\"secret\") === PULL_SECRET;\n\napp.get(\"/tasks\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n // Default = Alexandr's own quests only. The dashboard Quest Log calls this bare,\n // so team tasks can never crowd his personal day. ?owner=all|danny|sergey for the board.\n const who = c.req.query(\"owner\") ?? \"alexandr\";\n const sqlOwner = who === \"all\" ? \"\" : \" AND COALESCE(owner,'alexandr') = ?\";\n const r = await sqlite.execute({\n sql: \"SELECT * FROM tasks WHERE status='open'\" + sqlOwner +\n \" ORDER BY CASE tier WHEN 'balrog' THEN 0 WHEN 'nazgul' THEN 1 WHEN 'fellowship' THEN 2 ELSE 3 END, ord, id\",\n args: who === \"all\" ? [] : [who] });\n const cap = briefCap(c);\n if (briefOn(c)) return c.json(r.rows.map((t: any) => briefTask(t, cap)));\n return c.json(r.rows);\n});\napp.get(\"/tasks/all\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const r = await sqlite.execute(\"SELECT * FROM tasks ORDER BY status, tier, ord LIMIT 300\");\n return c.json(r.rows);\n});\n// One task, the full row, so a brief-mode caller can re-read a single item\n// without pulling the whole board. Registered after /tasks/all on purpose.\napp.get(\"/tasks/:id\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const raw = c.req.param(\"id\");\n // plain digits only: Number() would also take \"1e2\" (100) and \"0x10\" (16), and silently serve the wrong task\n if (!/^\\d+$/.test(raw)) return c.json({ ok: false, error: `no task ${raw}` }, 404);\n const id = Number(raw);\n const r = await sqlite.execute({ sql: \"SELECT * FROM tasks WHERE id=?\", args: [id] });\n if (!r.rows.length) return c.json({ ok: false, error: `no task ${id}` }, 404);\n return c.json(r.rows[0]);\n});\napp.post(\"/tasks\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n if (!b.force) {\n const twin = await findTwin(b.title);\n if (twin) return c.json({ ok: false, duplicate: true, existing: twin,\n hint: \"An equivalent task already exists. Reopen or comment on it, or resend with force:true.\" }, 409);\n }\n const mx = await sqlite.execute({ sql: \"SELECT COALESCE(MAX(ord),0)+10 AS o FROM tasks WHERE tier=?\", args: [b.tier ?? \"fellowship\"] });\n const r = await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner, due) VALUES (?,?,?,?,?,?,?) RETURNING *\",\n args: [b.title, b.note ?? \"\", b.tier ?? \"fellowship\", b.area ?? \"\", b.ord ?? mx.rows[0].o,\n laneFor(b.title, b.owner), b.due ?? null],\n });\n return c.json(r.rows[0]);\n});\napp.post(\"/tasks/bulk\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const items = await c.req.json();\n let n = 0;\n const skipped: any[] = [];\n for (const b of items) {\n if (!b.force) {\n const twin = await findTwin(b.title);\n if (twin) { skipped.push({ title: b.title, existing: twin }); continue; }\n }\n await sqlite.execute({\n sql: \"INSERT INTO tasks (title, note, tier, area, ord, owner) VALUES (?,?,?,?,?,?)\",\n args: [b.title, b.note ?? \"\", b.tier ?? \"fellowship\", b.area ?? \"\", (n + 1) * 10, laneFor(b.title, b.owner)],\n });\n n++;\n }\n return c.json({ ok: true, inserted: n, skippedAsDuplicate: skipped });\n});\napp.patch(\"/tasks/:id\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const id = Number(c.req.param(\"id\"));\n const b = await c.req.json();\n const allowed = [\"title\", \"note\", \"tier\", \"area\", \"ord\", \"status\", \"owner\", \"due\"];\n const exists = await sqlite.execute({ sql: \"SELECT 1 FROM tasks WHERE id=?\", args: [id] });\n if (!exists.rows.length) return c.json({ ok: false, error: `no task ${id}` }, 404);\n // Unknown keys used to be dropped in silence behind a 200 and the row echoed back,\n // which is indistinguishable from success: a quest comment sent as {comment:...}\n // simply ceased to exist. Same 2xx-proves-nothing family as the bus defects.\n const unknown = Object.keys(b).filter((k) => !allowed.includes(k));\n if (unknown.length) {\n return c.json({ ok: false, error: `unknown field(s): ${unknown.join(\", \")} — nothing was written`,\n allowed, hint: \"comments go to POST /tasks/:id/comment {\\\"text\\\":\\\"...\\\"}\" }, 400);\n }\n const touched = allowed.filter((k) => k in b);\n if (!touched.length) return c.json({ ok: false, error: \"nothing to update\", allowed }, 400);\n for (const k of touched) {\n await sqlite.execute({ sql: `UPDATE tasks SET ${k}=? WHERE id=?`, args: [b[k], id] });\n }\n if (b.status === \"done\") {\n await sqlite.execute({ sql: \"UPDATE tasks SET done_at=datetime('now') WHERE id=?\", args: [id] });\n }\n const r = await sqlite.execute({ sql: \"SELECT * FROM tasks WHERE id=?\", args: [id] });\n return c.json({ ok: true, updated: touched, task: r.rows[0] ?? null });\n});\napp.post(\"/tasks/:id/comment\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const id = Number(c.req.param(\"id\"));\n const { text } = await c.req.json();\n const r = await sqlite.execute({ sql: \"SELECT comments FROM tasks WHERE id=?\", args: [id] });\n const comments = JSON.parse((r.rows[0]?.comments as string) ?? \"[]\");\n comments.push({ text, ts: new Date().toISOString().slice(0, 16).replace(\"T\", \" \") });\n await sqlite.execute({ sql: \"UPDATE tasks SET comments=? WHERE id=?\", args: [JSON.stringify(comments), id] });\n return c.json({ ok: true, count: comments.length });\n});\n\n// Warden triggers — called by the desktop scheduler (or manually); in-code window guards still apply\napp.get(\"/warden/:mode\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const mode = c.req.param(\"mode\");\n if (mode !== \"monday\" && mode !== \"friday\") return c.text(\"unknown mode\", 400);\n const { runWarden } = await import(\"./warden-shared.ts\");\n await runWarden(mode as \"monday\" | \"friday\");\n return c.json({ ok: true, paused: AXIOMA_PAUSED,\n note: AXIOMA_PAUSED ? \"AXIOMA is paused (5 Sep 2026) — the warden was a no-op\"\n : \"ran with window guards — check logs for skip/post\" });\n});\n\n// Roll yesterday's unfinished picks into today. Without this, choosing eight\n// battles and finishing three left the other five stranded — off the plan, off\n// the dashboard, remembered only by Alexandr.\napp.post(\"/day/rollover\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const date = (await c.req.json().catch(() => ({}))).date ?? new Date().toISOString().slice(0, 10);\n const y = await sqlite.execute({\n sql: `SELECT dp.task_id, t.title FROM day_plan dp JOIN tasks t ON t.id = dp.task_id\n WHERE dp.date = date(?, '-1 day') AND dp.state = 'today' AND t.status = 'open'`,\n args: [date] });\n const carried: string[] = [];\n for (const r of y.rows as any[]) {\n const has = await sqlite.execute({\n sql: \"SELECT 1 FROM day_plan WHERE date=? AND task_id=?\", args: [date, r.task_id] });\n if (has.rows.length) continue;\n await sqlite.execute({\n sql: \"INSERT INTO day_plan (date, task_id, state) VALUES (?,?,'today')\",\n args: [date, r.task_id] });\n carried.push(r.title as string);\n }\n return c.json({ ok: true, date, carried: carried.length, titles: carried });\n});\n\n// Promises made in a plan become executable work items. Before 17 Aug the plan's\n// \"🤝 I take\" list was prose nobody re-read: the forger's later passes saw \"already\n// forged\" and exited, so promised work silently never happened (quest #44, coffee).\napp.post(\"/directive\", async (c) => {\n if (!auth(c)) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n const items: string[] = Array.isArray(b.items) ? b.items : [b.text].filter(Boolean);\n let n = 0;\n for (const t of items) {\n await sqlite.execute({\n sql: \"INSERT INTO inbox (chat_id, kind, text, processed) VALUES (0,'directive',?,0)\",\n args: [String(t).slice(0, 500)] });\n n++;\n }\n return c.json({ ok: true, queued: n });\n});\n\n// Delivery proof. Any agent can end a run by reading its own message back instead of\n// trusting a 2xx, and a silent failure leaves a row with ok=0 and Telegram's reason.\napp.get(\"/outbox\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const limit = Math.min(Math.max(Number(c.req.query(\"limit\") ?? 20), 1), 200);\n const failedOnly = c.req.query(\"failed\") === \"1\";\n const r = await sqlite.execute({\n sql: `SELECT * FROM outbox ${failedOnly ? \"WHERE ok=0\" : \"\"} ORDER BY id DESC LIMIT ?`,\n args: [limit] });\n const f = await sqlite.execute(\"SELECT COUNT(*) AS n FROM outbox WHERE ok=0 AND ts > datetime('now','-7 days')\");\n return c.json({ failed_last_7d: Number((f.rows[0] as any)?.n ?? 0), messages: r.rows });\n});\n\napp.get(\"/\", (c) => c.text(\"🔮 Palantír Herald stands watch.\"));\nexport default app.fetch;\n",[240],"0fbc0a46-a30e-40d6-8984-74ab0c920778","banking.ts","cd5510ca-a4b0-11f1-9272-1607ee4eb77e",45,["D",1788121469111],"// Banking module (split out 31 Aug 2026 — bot-webhook.ts crossed Val Town's 80k file limit).\n// Consent landing + one-time code store + privacy/terms pages for the Enable Banking app.\n// Mounted by bot-webhook.ts: mountBanking(app, sqlite, PULL_SECRET).\nexport function mountBanking(app: any, sqlite: any, PULL_SECRET: string) {\n// PSD2 consent redirects carry a one-time auth code. A localhost redirect dies on a\n// connection-refused page and the code dies with it (tonight's lesson). This endpoint is a\n// REAL landing page: it stores the code briefly and thanks the human. The callback must be\n// public (banks can't carry our secret); retrieval requires PULL_SECRET; codes are one-time,\n// short-lived upstream, and cleared on read. No account data ever passes through here.\napp.get(\"/banking/callback\", async (c) => {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banking_codes (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n code TEXT, state TEXT, taken INTEGER DEFAULT 0)`);\n const code = c.req.query(\"code\") ?? \"\", state = c.req.query(\"state\") ?? \"\";\n if (code) {\n await sqlite.execute({ sql: \"INSERT INTO banking_codes (code, state) VALUES (?,?)\", args: [code, state] });\n }\n const err = c.req.query(\"error\") ?? \"\";\n return c.html(`

${code ? \"✅ Consent received\" : err ? \"⚠️ \" + err : \"Nothing here\"}

${code ? \"The Palantír has it. You can close this tab.\" : \"You can close this tab.\"}

`);\n});\napp.get(\"/banking/code\", async (c) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS banking_codes (\n id INTEGER PRIMARY KEY AUTOINCREMENT, ts TEXT DEFAULT (datetime('now')),\n code TEXT, state TEXT, taken INTEGER DEFAULT 0)`);\n const r = await sqlite.execute(\"SELECT * FROM banking_codes WHERE taken=0 ORDER BY id DESC LIMIT 1\");\n if (!r.rows.length) return c.json({ ok: false, code: null });\n const row = r.rows[0] as any;\n await sqlite.execute({ sql: \"UPDATE banking_codes SET taken=1, code='' WHERE id=?\", args: [row.id] });\n return c.json({ ok: true, code: row.code, state: row.state, ts: row.ts });\n});\n\n// Privacy + terms pages for the Enable Banking production app registration (their portal\n// requires a Privacy URL). Honest and accurate: personal single-user application; the sole\n// user IS the data subject; data is processed on his own machine and shared with no one.\napp.get(\"/banking/privacy\", (c) => c.html(`Privacy — Palantir Finance Reader

Privacy Policy — Palantir Finance Reader

Last updated: 30 August 2026

Palantir Finance Reader is a personal, single-user application operated by its sole user, Alexandr Stakhov. It exists to display the user's own bank account information to the user himself.

What data is processed

Account balances and transaction data for the user's own payment accounts, retrieved read-only via Enable Banking (a licensed AISP) with the user's explicit PSD2 consent, given in his own bank's interface.

How it is used and stored

Data is transferred to and processed on the user's own private computer. It is used solely to render the user's private financial dashboard and records. It is not shared with, sold to, or made accessible to any third party. No analytics, no advertising, no profiling of anyone other than the user by the user.

Consent and revocation

Consents are valid for up to 90 days and can be revoked at any time in the bank's own app or by contacting the address below. Revocation stops all further data retrieval.

Contact

Data protection matters: stakhov.alexandr@gmail.com

`));\napp.get(\"/banking/terms\", (c) => c.html(`Terms — Palantir Finance Reader

Terms of Use — Palantir Finance Reader

Last updated: 30 August 2026

Palantir Finance Reader is a personal application with exactly one authorised user: its operator, Alexandr Stakhov. It provides read-only access to the operator's own bank account information for private financial overview purposes. It initiates no payments, offers no services to any other person, and grants no third party access to any data. Use by anyone other than the operator is not offered and not permitted.

Contact: stakhov.alexandr@gmail.com

`));\n\n}\n",[248],"pulls","forks","envVars",{"_260":262,"_263":52},"connections",{"_260":52,"_261":52},"count","unfilledCount",8,"emptyCount",{"_20":247,"_13":248,"_133":249,"_135":-5,"_136":21,"_137":250,"_139":111,"_22":322,"_29":52,"_142":143,"_144":252,"_146":38,"_147":-5,"_280":323,"_92":324},{"_20":239,"_13":240,"_133":241,"_135":-5,"_136":21,"_137":30,"_139":111,"_22":319,"_29":243,"_142":244,"_144":245,"_146":38,"_147":-5,"_280":320,"_92":321},{"_20":232,"_13":233,"_133":234,"_135":-5,"_136":21,"_137":235,"_139":111,"_22":316,"_29":178,"_142":143,"_144":237,"_146":38,"_147":-5,"_280":317,"_92":318},{"_20":225,"_13":226,"_133":227,"_135":-5,"_136":21,"_137":228,"_139":111,"_22":313,"_29":154,"_142":143,"_144":230,"_146":38,"_147":-5,"_280":314,"_92":315},{"_20":218,"_13":219,"_133":220,"_135":-5,"_136":21,"_137":221,"_139":111,"_22":310,"_29":193,"_142":143,"_144":223,"_146":38,"_147":-5,"_280":311,"_92":312},{"_20":210,"_13":211,"_133":212,"_135":-5,"_136":21,"_137":213,"_139":111,"_22":307,"_29":215,"_142":162,"_144":216,"_146":38,"_147":-5,"_280":308,"_92":309},{"_20":203,"_13":204,"_133":205,"_135":-5,"_136":21,"_137":206,"_139":111,"_22":304,"_29":52,"_142":143,"_144":208,"_146":38,"_147":-5,"_280":305,"_92":306},{"_20":196,"_13":197,"_133":198,"_135":-5,"_136":21,"_137":199,"_139":111,"_22":301,"_29":193,"_142":143,"_144":201,"_146":38,"_147":-5,"_280":302,"_92":303},{"_20":188,"_13":189,"_133":190,"_135":-5,"_136":21,"_137":191,"_139":111,"_22":298,"_29":193,"_142":162,"_144":194,"_146":38,"_147":-5,"_280":299,"_92":300},{"_20":181,"_13":182,"_133":183,"_135":-5,"_136":21,"_137":184,"_139":111,"_22":295,"_29":178,"_142":143,"_144":186,"_146":38,"_147":-5,"_280":296,"_92":297},{"_20":173,"_13":174,"_133":175,"_135":-5,"_136":21,"_137":176,"_139":111,"_22":292,"_29":178,"_142":162,"_144":179,"_146":38,"_147":-5,"_280":293,"_92":294},{"_20":165,"_13":166,"_133":167,"_135":-5,"_136":21,"_137":168,"_139":111,"_22":289,"_29":170,"_142":143,"_144":171,"_146":38,"_147":-5,"_280":290,"_92":291},{"_20":157,"_13":158,"_133":159,"_135":-5,"_136":21,"_137":160,"_139":111,"_22":286,"_29":154,"_142":162,"_144":163,"_146":38,"_147":-5,"_280":287,"_92":288},{"_20":149,"_13":150,"_133":151,"_135":-5,"_136":21,"_137":152,"_139":111,"_22":283,"_29":154,"_142":143,"_144":155,"_146":38,"_147":-5,"_280":284,"_92":285},{"_20":131,"_13":132,"_133":134,"_135":-5,"_136":21,"_137":138,"_139":111,"_22":279,"_29":141,"_142":143,"_144":145,"_146":38,"_147":-5,"_280":281,"_92":282},["D",1788639069006],"children",[],[132],["D",1788639068632],[],[150],["D",1789173219532],[],[158],["D",1789004711694],[],[166],["D",1788644148257],[],[174],["D",1789173217642],[],[182],["D",1789173917809],[],[189],["D",1786527835897],[],[197],["D",1788969791046],[],[204],["D",1789004713687],[],[211],["D",1786527836389],[],[219],["D",1789173218292],[],[226],["D",1786485045527],[],[233],["D",1789316959570],[],[240],["D",1788121469111],[],[248],["D",1783928553221],["D",1789525245864],{"_11":12,"_90":86},{"_11":12,"_83":84,"_85":86,"_45":46,"_87":88,"_89":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_78":-5,"_79":-5,"_80":-5,"_81":14,"_82":12},"ctx",{"_71":-5,"_113":363,"_364":365,"_366":367,"_368":38,"_369":38,"_370":38,"_371":111,"_372":-5,"_373":-7,"_374":-7,"_375":52,"_376":38,"_377":38,"_378":-5,"_379":38,"_380":38,"_381":38,"_382":-5},"ENV",{"_334":335,"_336":337,"_338":26,"_339":340,"_341":342,"_343":344,"_345":346,"_347":348,"_349":350,"_351":352,"_353":354,"_355":356,"_357":358,"_359":360,"_361":362},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1