`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_684":685,"_686":687},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_107":88,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",29,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","payana_binance_external_gates_v1.ts","latestPath","fileId","33c166ac-ab0e-11f1-9a47-1607ee4eb77e","name","fileType","script","content","import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\n\nconst gatePlan = {\n schema: \"payana-external-gates-1.0.0\",\n opportunityId: \"binance_agent_os_2026\",\n deadlineUtc: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\",\n gates: {\n eligibility: {\n state: \"UNVERIFIED_HUMAN_ACCOUNT_GATE\",\n rule: \"Brazil is not explicitly named in the event page exclusion sentence, but logged-in participant/account eligibility must be proven.\",\n },\n agentOsMcpWitness: {\n state: \"UNVERIFIED_HUMAN_CLIENT_GATE\",\n exactWitnessPrompt: \"Use the Binance MCP Server to show the current BTCUSDT price and 24-hour change.\",\n requiredEvidence: [\"supported client name\", \"visible Binance MCP tool attribution\", \"live BTCUSDT result\", \"UTC timestamp\"],\n prohibitedEvidence: [\"password\", \"cookie\", \"OAuth code\", \"access token\", \"refresh token\", \"API key\", \"wallet secret\"],\n permissionTarget: \"MARKET_DATA_ONLY_FOR_PAYANA\",\n tradeScope: \"NOT_REQUIRED\",\n transferScope: \"NOT_REQUIRED\",\n },\n chatgptBinancePlugin: {\n state: \"AVAILABLE_NOT_CONFIRMED_INSTALLED\",\n capability: \"PUBLIC_READ_ONLY_BINANCE_MARKET_DATA\",\n boundary: \"CHATGPT_BINANCE_PLUGIN_AVAILABLE != AGENT_OS_MCP_WITNESS\",\n },\n video: {\n state: \"UNVERIFIED_HUMAN_RECORDING_GATE\",\n package: \"cleitoncosta/payana-binance-agent-os@main:docs/SUBMISSION_PACKAGE.md\",\n },\n github: {\n state: \"OPTIONAL_IF_APPLICABLE_NO_PAYANA_REPO_FOUND\",\n authenticatedOwner: \"AIA-design\",\n unrelatedOwnedReposMustRemainUntouched: true,\n currentConnectorRepoCreateAction: \"NOT_EXPOSED\",\n },\n xFollowRepost: { state: \"UNVERIFIED_EXTERNAL_ACCOUNT_GATE\" },\n xTrackASubmission: { state: \"UNVERIFIED_EXTERNAL_ACCOUNT_GATE\" },\n survey: {\n state: \"UNVERIFIED_EXTERNAL_ACCOUNT_GATE\",\n url: \"https://www.binance.com/en/survey/2913aa200aac462c89a737779393f3d4\",\n staticExtraction: \"NO_VISIBLE_FORM_FIELDS_EXTRACTED\",\n interactiveInspection: \"NOT_STARTED_TINYFISH_WALLET_OUT_OF_FUNDS\",\n tinyFishWalletBalanceObservedUsd: \"-0.296000\",\n tinyFishMinimumTopUpUsd: \"10.00\",\n },\n },\n stopRule: \"Never promote a gate to PASS without an external receipt or direct account/client witness.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_external_gate_execution_plan\", JSON.stringify(gatePlan), \"VERIFIED_RUNTIME_STATE_WITH_HUMAN_GATES_OPEN\", \"Binance official docs + connected tool census 2026-09-07\", now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-external-gates-open\", \"opportunity\", \"binance_agent_os_2026\", \"EXTERNAL_GATE_STATE_RECEIPT\", gatePlan.survey.url, null, JSON.stringify(gatePlan), \"PARTIAL_HUMAN_GATES_OPEN\", now, now, now],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state FROM payana_state WHERE key=?\", args: [\"binance_external_gate_execution_plan\"] });\nconst receipt = await db.execute({ sql: \"SELECT id,verification_state FROM payana_receipts WHERE id=?\", args: [\"receipt-binance-external-gates-open\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 1 && receipt.rows.length === 1;\nconst result = { pass, provider: storage.activeProvider, state: state.rows[0], receipt: receipt.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_EXTERNAL_GATE_PLAN_WRITE_FAILED\");\nexport default result;\n","createdAt",["D",1788821291119],"branchVersion","branchId","bb539edb-15fc-48c6-a690-7d3728033cd0","id","348a33bb-f2d9-4c7a-b6a6-b2762cf9a17f","guh-knowledge-vault",["D",1788716337448],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Private searchable mirror of ChatGPT exports","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a077cd-4980-75c9-8c9f-12270a3b1d2b","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","348a33bbf2d94c7ab6a6b2762cf9a17f","tursoHostname","348a33bbf2d94c7ab6a6b2762cf9a17f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789499469860],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",38,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":679,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":680,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":681,"_82":682,"_84":683,"_86":24},"tree",[388,399,401,409,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440],"files",[388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440],"counts",{"_378":61,"_379":287,"_380":61,"_381":382,"_383":384},"contents",[129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":373,"_31":374,"_29":375,"_165":-5,"_39":40,"_38":198,"_167":57,"_36":376,"_13":61,"_32":361,"_34":-5,"_23":24,"_171":-5,"_26":377},{"_41":368,"_31":369,"_29":370,"_165":-5,"_39":40,"_38":224,"_167":57,"_36":371,"_13":61,"_32":361,"_34":-5,"_23":24,"_171":-5,"_26":372},{"_41":363,"_31":364,"_29":365,"_165":-5,"_39":40,"_38":295,"_167":57,"_36":366,"_13":61,"_32":361,"_34":-5,"_23":24,"_171":-5,"_26":367},{"_41":357,"_31":358,"_29":359,"_165":-5,"_39":40,"_38":217,"_167":57,"_36":360,"_13":61,"_32":361,"_34":-5,"_23":24,"_171":-5,"_26":362},{"_41":350,"_31":351,"_29":352,"_165":-5,"_39":40,"_38":295,"_167":57,"_36":353,"_13":354,"_32":20,"_34":355,"_23":24,"_171":-5,"_26":356},{"_41":344,"_31":345,"_29":346,"_165":-5,"_39":40,"_38":166,"_167":57,"_36":347,"_13":217,"_32":20,"_34":348,"_23":24,"_171":-5,"_26":349},{"_41":338,"_31":339,"_29":55,"_165":-5,"_39":40,"_38":176,"_167":57,"_36":340,"_13":249,"_32":341,"_34":342,"_23":24,"_171":43,"_26":343},{"_41":331,"_31":332,"_29":333,"_165":-5,"_39":40,"_38":334,"_167":57,"_36":335,"_13":61,"_32":33,"_34":336,"_23":24,"_171":-5,"_26":337},{"_41":324,"_31":325,"_29":326,"_165":-5,"_39":40,"_38":327,"_167":57,"_36":328,"_13":61,"_32":33,"_34":329,"_23":24,"_171":-5,"_26":330},{"_41":316,"_31":317,"_29":318,"_165":-5,"_39":40,"_38":319,"_167":57,"_36":320,"_13":321,"_32":33,"_34":322,"_23":24,"_171":-5,"_26":323},{"_41":313,"_31":27,"_29":30,"_165":-5,"_39":40,"_38":14,"_167":24,"_36":314,"_13":61,"_32":33,"_34":35,"_23":24,"_171":-5,"_26":315},{"_41":306,"_31":307,"_29":308,"_165":-5,"_39":40,"_38":309,"_167":24,"_36":310,"_13":61,"_32":33,"_34":311,"_23":24,"_171":-5,"_26":312},{"_41":299,"_31":300,"_29":301,"_165":-5,"_39":40,"_38":302,"_167":57,"_36":303,"_13":61,"_32":33,"_34":304,"_23":24,"_171":-5,"_26":305},{"_41":292,"_31":293,"_29":294,"_165":-5,"_39":40,"_38":295,"_167":57,"_36":296,"_13":61,"_32":33,"_34":297,"_23":24,"_171":-5,"_26":298},{"_41":284,"_31":285,"_29":286,"_165":-5,"_39":40,"_38":287,"_167":57,"_36":288,"_13":198,"_32":289,"_34":290,"_23":24,"_171":-5,"_26":291},{"_41":278,"_31":279,"_29":280,"_165":-5,"_39":40,"_38":166,"_167":57,"_36":281,"_13":61,"_32":33,"_34":282,"_23":24,"_171":-5,"_26":283},{"_41":272,"_31":273,"_29":274,"_165":-5,"_39":40,"_38":166,"_167":57,"_36":275,"_13":61,"_32":33,"_34":276,"_23":24,"_171":-5,"_26":277},{"_41":266,"_31":267,"_29":268,"_165":-5,"_39":40,"_38":166,"_167":57,"_36":269,"_13":61,"_32":33,"_34":270,"_23":24,"_171":-5,"_26":271},{"_41":260,"_31":261,"_29":262,"_165":-5,"_39":40,"_38":166,"_167":57,"_36":263,"_13":61,"_32":33,"_34":264,"_23":24,"_171":-5,"_26":265},{"_41":253,"_31":254,"_29":255,"_165":-5,"_39":40,"_38":256,"_167":57,"_36":257,"_13":61,"_32":33,"_34":258,"_23":24,"_171":-5,"_26":259},{"_41":246,"_31":247,"_29":248,"_165":-5,"_39":40,"_38":249,"_167":57,"_36":250,"_13":61,"_32":33,"_34":251,"_23":24,"_171":-5,"_26":252},{"_41":240,"_31":241,"_29":242,"_165":-5,"_39":40,"_38":224,"_167":57,"_36":243,"_13":61,"_32":33,"_34":244,"_23":24,"_171":-5,"_26":245},{"_41":234,"_31":235,"_29":236,"_165":-5,"_39":40,"_38":224,"_167":57,"_36":237,"_13":61,"_32":33,"_34":238,"_23":24,"_171":-5,"_26":239},{"_41":228,"_31":229,"_29":230,"_165":-5,"_39":40,"_38":224,"_167":57,"_36":231,"_13":61,"_32":33,"_34":232,"_23":24,"_171":-5,"_26":233},{"_41":221,"_31":222,"_29":223,"_165":-5,"_39":40,"_38":224,"_167":57,"_36":225,"_13":61,"_32":33,"_34":226,"_23":24,"_171":-5,"_26":227},{"_41":214,"_31":215,"_29":216,"_165":-5,"_39":40,"_38":217,"_167":57,"_36":218,"_13":61,"_32":33,"_34":219,"_23":24,"_171":-5,"_26":220},{"_41":207,"_31":208,"_29":209,"_165":-5,"_39":40,"_38":210,"_167":57,"_36":211,"_13":61,"_32":33,"_34":212,"_23":24,"_171":-5,"_26":213},{"_41":201,"_31":202,"_29":203,"_165":-5,"_39":40,"_38":176,"_167":57,"_36":204,"_13":198,"_32":33,"_34":205,"_23":24,"_171":-5,"_26":206},{"_41":193,"_31":194,"_29":195,"_165":-5,"_39":40,"_38":196,"_167":57,"_36":197,"_13":198,"_32":33,"_34":199,"_23":24,"_171":-5,"_26":200},{"_41":186,"_31":187,"_29":188,"_165":-5,"_39":40,"_38":189,"_167":57,"_36":190,"_13":61,"_32":33,"_34":191,"_23":24,"_171":-5,"_26":192},{"_41":180,"_31":181,"_29":182,"_165":-5,"_39":40,"_38":176,"_167":57,"_36":183,"_13":61,"_32":33,"_34":184,"_23":24,"_171":-5,"_26":185},{"_41":173,"_31":174,"_29":175,"_165":-5,"_39":40,"_38":176,"_167":57,"_36":177,"_13":61,"_32":33,"_34":178,"_23":24,"_171":-5,"_26":179},{"_41":162,"_31":163,"_29":164,"_165":-5,"_39":40,"_38":166,"_167":57,"_36":168,"_13":169,"_32":33,"_34":170,"_23":24,"_171":-5,"_26":172},"ac6a8fcc-f044-4042-95fc-0560752e993f","vault_bridge.ts","381dac84-aa40-11f1-80f3-1607ee4eb77e","parentId",17,"latest",["D",1788811990209],2,"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst BRIDGE_VERSION = \"0.6.0\";\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst OBJECT_TYPES = new Set([\"conversation\", \"checkpoint\", \"knowledge\", \"entity\", \"project\", \"artifact\", \"concept\"]);\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_.:-]{1,160}$/.test(value);\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 10) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction clip(value: unknown, max: number) {\n return typeof value === \"string\" ? value.trim().slice(0, max) : \"\";\n}\n\nfunction stringList(value: unknown, maxItems = 12, maxLen = 120) {\n if (!Array.isArray(value)) return [];\n return [...new Set(value.map((v) => clip(v, maxLen)).filter(Boolean))].slice(0, maxItems);\n}\n\nfunction objectType(value: unknown) {\n const type = clip(value, 40).toLowerCase();\n return OBJECT_TYPES.has(type) ? type : \"\";\n}\n\nfunction deterministicId(prefix: string, requestId: string) {\n const id = `${prefix}_${requestId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n if (!safeId(id)) throw new Error(\"INVALID_DETERMINISTIC_ID\");\n return id;\n}\n\nasync function claimOne() {\n await control.execute(`CREATE TABLE IF NOT EXISTS vault_bridge_requests (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n status TEXT NOT NULL,\n action TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n result_json TEXT,\n error TEXT,\n attempt_count INTEGER NOT NULL DEFAULT 0\n )`);\n await control.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_bridge_requests_status_created ON vault_bridge_requests(status, created_at)\");\n await control.execute(`UPDATE vault_bridge_requests\n SET status=CASE WHEN attempt_count >= 2 THEN 'FAIL' ELSE 'PENDING' END,\n error=CASE WHEN attempt_count >= 2 THEN 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' ELSE 'STALE_LEASE_RECOVERED' END,\n updated_at=datetime('now')\n WHERE status='RUNNING' AND updated_at < datetime('now','-2 minutes')`);\n await control.execute(`UPDATE vault_bridge_requests SET status='FAIL', error='RETRY_BUDGET_EXHAUSTED', updated_at=datetime('now')\n WHERE status='PENDING' AND attempt_count >= 2`);\n const result = await control.execute(`UPDATE vault_bridge_requests\n SET status='RUNNING', updated_at=datetime('now'), attempt_count=attempt_count+1\n WHERE id=(SELECT id FROM vault_bridge_requests WHERE status='PENDING' AND attempt_count < 2 ORDER BY created_at ASC LIMIT 1)\n AND status='PENDING' AND attempt_count < 2\n RETURNING id,action,payload_json,attempt_count,created_at`);\n return result.rows[0] as any | undefined;\n}\n\nasync function finish(id: string, status: \"PASS\" | \"FAIL\" | \"BLOCKED\", result: unknown, error: string | null = null) {\n const resultJson = JSON.stringify(result).slice(0, 100_000);\n await control.execute({\n sql: `UPDATE vault_bridge_requests SET status=?, result_json=?, error=?, updated_at=datetime('now') WHERE id=?`,\n args: [status, resultJson, error, id],\n });\n}\n\nasync function searchOne(query: string, limit: number) {\n const match = ftsQuery(query);\n if (!match) return { conversations: [], checkpoints: [], knowledge: [] };\n\n const conversations = await db.execute({\n sql: `WITH hits AS (\n SELECT conversation_id,message_id,role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 36) AS hit_snippet,\n bm25(vault_messages_fts, 6.0,0.0,2.5,0.0,1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 160\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn FROM hits\n )\n SELECT c.id,c.title,c.create_time,c.update_time,c.message_count,b.message_id,b.role,b.hit_snippet,b.rank\n FROM best b JOIN conversations c ON c.id=b.conversation_id\n WHERE b.rn=1\n ORDER BY b.rank,c.update_time DESC\n LIMIT ?`,\n args: [match, limit],\n });\n\n const checkpoints = await db.execute({\n sql: `SELECT checkpoint_id AS id,project,title,\n snippet(vault_checkpoints_fts,3,'','',' … ',36) AS hit_snippet,\n bm25(vault_checkpoints_fts,0.0,3.0,5.0,2.0,2.0,1.5,1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n const knowledge = await db.execute({\n sql: `SELECT knowledge_id AS id,project,kind,title,\n snippet(vault_knowledge_fts,4,'','',' … ',36) AS hit_snippet,\n bm25(vault_knowledge_fts,0.0,2.0,2.0,5.0,3.0,1.5,1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n return {\n conversations: conversations.rows.map((r: any) => ({\n type: \"conversation\", id: r.id, title: r.title, project: null, kind: null,\n createTime: r.create_time, updateTime: r.update_time, messageCount: Number(r.message_count ?? 0),\n messageId: r.message_id, role: r.role,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n checkpoints: checkpoints.rows.map((r: any) => ({\n type: \"checkpoint\", id: r.id, project: r.project, kind: \"checkpoint\", title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n knowledge: knowledge.rows.map((r: any) => ({\n type: \"knowledge\", id: r.id, project: r.project, kind: r.kind, title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n };\n}\n\nasync function search(payload: any) {\n const query = clip(payload?.query, 200);\n const limit = Math.min(10, Math.max(1, Number(payload?.limit ?? 6) || 6));\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const results = await searchOne(query, limit);\n return { query, engine: \"fts5_bm25\", ...results };\n}\n\nasync function searchHybrid(payload: any) {\n const query = clip(payload?.query, 200);\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const variants = stringList(payload?.variants, 8, 200).filter((v) => v.toLocaleLowerCase() !== query.toLocaleLowerCase());\n const projects = new Set(stringList(payload?.projects, 6, 120).map((v) => v.toLocaleLowerCase()));\n const kinds = new Set(stringList(payload?.kinds, 10, 80).map((v) => v.toLocaleLowerCase()));\n const limit = Math.min(15, Math.max(1, Number(payload?.limit ?? 8) || 8));\n const queries = [query, ...variants];\n const fused = new Map();\n\n for (let qi = 0; qi < queries.length; qi++) {\n const q = queries[qi];\n const weight = qi === 0 ? 2.0 : 1.0;\n const result = await searchOne(q, 20);\n const groups = [result.conversations, result.checkpoints, result.knowledge];\n for (const group of groups) {\n for (let position = 0; position < group.length; position++) {\n const item: any = group[position];\n if (projects.size && (!item.project || !projects.has(String(item.project).toLocaleLowerCase()))) continue;\n if (kinds.size && (!item.kind || !kinds.has(String(item.kind).toLocaleLowerCase()))) continue;\n const key = `${item.type}:${item.id}`;\n const rrf = weight / (60 + position + 1);\n const existing = fused.get(key) ?? { ...item, score: 0, matchedQueries: [] as string[] };\n existing.score += rrf;\n if (!existing.matchedQueries.includes(q)) existing.matchedQueries.push(q);\n if (String(item.snippet ?? \"\").length > String(existing.snippet ?? \"\").length) existing.snippet = item.snippet;\n fused.set(key, existing);\n }\n }\n }\n\n const items = [...fused.values()]\n .filter((item) => {\n if (projects.size && item.type !== \"conversation\" && item.project && !projects.has(String(item.project).toLocaleLowerCase())) return false;\n if (kinds.size && item.type !== \"conversation\" && item.kind && !kinds.has(String(item.kind).toLocaleLowerCase())) return false;\n return true;\n })\n .sort((a, b) => b.score - a.score || String(a.title).localeCompare(String(b.title)))\n .slice(0, limit);\n\n return {\n query,\n variants,\n engine: \"fts5_bm25_rrf\",\n expansionSource: \"chat_control_plane\",\n filters: { projects: [...projects], kinds: [...kinds] },\n items,\n };\n}\n\nasync function getConversation(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_CONVERSATION_ID\");\n const maxMessages = Math.min(80, Math.max(1, Number(payload?.maxMessages ?? 40) || 40));\n const maxChars = Math.min(60_000, Math.max(2_000, Number(payload?.maxChars ?? 20_000) || 20_000));\n const conversation = await db.execute({\n sql: `SELECT id,title,create_time,update_time,message_count,source_file,imported_at FROM conversations WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!conversation.rows.length) throw new Error(\"CONVERSATION_NOT_FOUND\");\n const messages = await db.execute({\n sql: `SELECT id,seq,role,create_time,content_text FROM vault_messages WHERE conversation_id=? ORDER BY seq ASC LIMIT ?`,\n args: [id, maxMessages],\n });\n let used = 0;\n const clippedMessages: any[] = [];\n for (const row of messages.rows as any[]) {\n const remaining = maxChars - used;\n if (remaining <= 0) break;\n const text = String(row.content_text ?? \"\").slice(0, remaining);\n used += text.length;\n clippedMessages.push({ id: row.id, seq: Number(row.seq), role: row.role, createTime: row.create_time, content: text });\n }\n return { ...(conversation.rows[0] as any), messages: clippedMessages, returnedChars: used, truncatedByBridge: messages.rows.length > clippedMessages.length || used >= maxChars };\n}\n\nasync function getKnowledge(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_KNOWLEDGE_ID\");\n const item = await db.execute({\n sql: `SELECT id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at FROM vault_knowledge_items WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!item.rows.length) throw new Error(\"KNOWLEDGE_NOT_FOUND\");\n const relations = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type='knowledge' AND source_id=?) OR (target_type='knowledge' AND target_id=?)\n ORDER BY weight DESC, relation LIMIT 60`,\n args: [id, id],\n });\n const row: any = item.rows[0];\n return {\n ...row,\n tags: JSON.parse(String(row.tags_json || \"[]\")),\n entities: JSON.parse(String(row.entities_json || \"[]\")),\n relations: relations.rows,\n };\n}\n\nasync function related(payload: any) {\n const type = objectType(payload?.type);\n const id = clip(payload?.id, 160);\n const limit = Math.min(80, Math.max(1, Number(payload?.limit ?? 30) || 30));\n if (!type || !safeId(id)) throw new Error(\"VALID_TYPE_AND_ID_REQUIRED\");\n const rows = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type=? AND source_id=?) OR (target_type=? AND target_id=?)\n ORDER BY weight DESC, updated_at DESC LIMIT ?`,\n args: [type, id, type, id, limit],\n });\n return { type, id, relations: rows.rows };\n}\n\nasync function stats() {\n const result = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations,\n (SELECT COALESCE(SUM(content_bytes),0) FROM conversations) AS source_content_bytes`);\n return { ...(result.rows[0] as any), activeProvider: storage.activeProvider, bridgeVersion: BRIDGE_VERSION };\n}\n\nasync function upsertCheckpoint(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const title = clip(payload?.title, 240);\n const summary = clip(payload?.summary, 12_000);\n if (!project || !title || !summary) throw new Error(\"PROJECT_TITLE_SUMMARY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"cp_bridge\", requestId);\n const decisions = clip(payload?.decisions, 12_000);\n const openGaps = clip(payload?.openGaps, 12_000);\n const nextAction = clip(payload?.nextAction, 12_000);\n const evidenceState = clip(payload?.evidenceState, 80) || \"CHECKPOINT\";\n const sourceConversationId = safeId(payload?.sourceConversationId) ? payload.sourceConversationId : null;\n const now = new Date().toISOString();\n await db.batch([\n {\n sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,title,summary,decisions,openGaps,nextAction,sourceConversationId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_checkpoints_fts WHERE checkpoint_id=?`, args: [id] },\n { sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`, args: [id,project,title,summary,decisions,openGaps,nextAction] },\n ]);\n return { id, project, title, evidenceState, updatedAt: now };\n}\n\nasync function upsertKnowledge(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const kind = clip(payload?.kind, 80).toLowerCase();\n const title = clip(payload?.title, 240);\n const body = clip(payload?.body, 20_000);\n if (!project || !kind || !title || !body) throw new Error(\"PROJECT_KIND_TITLE_BODY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"kn_bridge\", requestId);\n const tags = stringList(payload?.tags, 24, 80);\n const entities = stringList(payload?.entities, 24, 120);\n const evidenceState = clip(payload?.evidenceState, 80) || \"KNOWLEDGE\";\n const sourceType = objectType(payload?.sourceType) || null;\n const sourceId = safeId(payload?.sourceId) ? payload.sourceId : null;\n if ((sourceType && !sourceId) || (!sourceType && sourceId)) throw new Error(\"SOURCE_TYPE_AND_ID_MUST_PAIR\");\n const now = new Date().toISOString();\n const relationsInput = Array.isArray(payload?.relations) ? payload.relations.slice(0, 24) : [];\n const relationStatements: any[] = [\n { sql: `DELETE FROM vault_relations WHERE source_type='knowledge' AND source_id=?`, args: [id] },\n ];\n for (let index = 0; index < relationsInput.length; index++) {\n const rel = relationsInput[index] ?? {};\n const relation = clip(rel.relation, 80).toLowerCase().replace(/[^a-z0-9_.:-]/g, \"_\");\n const targetType = objectType(rel.targetType);\n const targetId = clip(rel.targetId, 160);\n if (!relation || !targetType || !safeId(targetId)) throw new Error(`INVALID_RELATION_${index}`);\n const weightRaw = Number(rel.weight ?? 1);\n const weight = Number.isFinite(weightRaw) ? Math.max(0, Math.min(10, weightRaw)) : 1;\n const provenance = clip(rel.provenance, 500);\n const relationId = `rel_${id}_${relation}_${targetType}_${targetId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n relationStatements.push({\n sql: `INSERT INTO vault_relations(id,source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(source_type,source_id,relation,target_type,target_id) DO UPDATE SET weight=excluded.weight,provenance=excluded.provenance,updated_at=excluded.updated_at`,\n args: [relationId,\"knowledge\",id,relation,targetType,targetId,weight,provenance,now,now],\n });\n }\n\n await db.batch([\n {\n sql: `INSERT INTO vault_knowledge_items(id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,kind=excluded.kind,title=excluded.title,body=excluded.body,tags_json=excluded.tags_json,entities_json=excluded.entities_json,source_type=excluded.source_type,source_id=excluded.source_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,kind,title,body,JSON.stringify(tags),JSON.stringify(entities),sourceType,sourceId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_knowledge_fts WHERE knowledge_id=?`, args: [id] },\n { sql: `INSERT INTO vault_knowledge_fts(knowledge_id,project,kind,title,body,tags,entities) VALUES(?,?,?,?,?,?,?)`, args: [id,project,kind,title,body,tags.join(\" \"),entities.join(\" \")] },\n ...relationStatements,\n ]);\n return { id, project, kind, title, tags, entities, relationCount: relationsInput.length, evidenceState, updatedAt: now };\n}\n\nfunction decimalString(value: unknown) {\n const raw = clip(value, 64);\n if (!/^-?(?:0|[1-9]\\d*)(?:\\.\\d+)?$/.test(raw)) throw new Error(\"INVALID_DECIMAL_STRING\");\n return raw;\n}\n\nfunction isoOrNull(value: unknown) {\n const raw = clip(value, 64);\n if (!raw) return null;\n const ms = Date.parse(raw);\n if (!Number.isFinite(ms)) throw new Error(\"INVALID_DATETIME\");\n return new Date(ms).toISOString();\n}\n\nfunction httpsOrNull(value: unknown) {\n const raw = clip(value, 2048);\n if (!raw) return null;\n const u = new URL(raw);\n if (u.protocol !== \"https:\") throw new Error(\"HTTPS_URL_REQUIRED\");\n return u.toString();\n}\n\nasync function payanaStateUpsert(payload: any) {\n const key = clip(payload?.key, 120);\n if (!safeId(key)) throw new Error(\"INVALID_PAYANA_STATE_KEY\");\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const sourceRef = clip(payload?.sourceRef, 500) || null;\n const value = payload?.value ?? null;\n const valueJson = JSON.stringify(value);\n if (valueJson.length > 40_000) throw new Error(\"PAYANA_STATE_VALUE_TOO_LARGE\");\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [key,valueJson,evidenceState,sourceRef,now,now],\n });\n return { key, evidenceState, updatedAt: now };\n}\n\nasync function payanaOpportunityUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n const title = clip(payload?.title, 240);\n if (!safeId(id) || !title) throw new Error(\"PAYANA_OPPORTUNITY_ID_TITLE_REQUIRED\");\n const platform = clip(payload?.platform, 120) || null;\n const url = httpsOrNull(payload?.url);\n const status = clip(payload?.status, 80) || \"UNVERIFIED\";\n const rewardMin = payload?.rewardMin == null || payload?.rewardMin === \"\" ? null : decimalString(payload.rewardMin);\n const rewardMax = payload?.rewardMax == null || payload?.rewardMax === \"\" ? null : decimalString(payload.rewardMax);\n const currency = clip(payload?.currency, 20).toUpperCase() || null;\n const kycState = clip(payload?.kycState, 80) || null;\n const capitalState = clip(payload?.capitalState, 80) || null;\n const deadlineAt = isoOrNull(payload?.deadlineAt);\n const constraints = stringList(payload?.constraints, 40, 500);\n const currentnessAt = isoOrNull(payload?.currentnessAt);\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const sourceRef = clip(payload?.sourceRef, 1000) || null;\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [id,title,platform,url,status,rewardMin,rewardMax,currency,kycState,capitalState,deadlineAt,JSON.stringify(constraints),currentnessAt,evidenceState,sourceRef,now,now],\n });\n return { id,title,status,rewardMin,rewardMax,currency,evidenceState,updatedAt:now };\n}\n\nasync function payanaEconomicUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_PAYANA_ECONOMIC_ID\");\n const opportunityId = safeId(payload?.opportunityId) ? String(payload.opportunityId) : null;\n const eventType = clip(payload?.eventType, 80) || \"REVENUE\";\n const amount = decimalString(payload?.amount);\n const currency = clip(payload?.currency, 20).toUpperCase();\n if (!currency) throw new Error(\"PAYANA_ECONOMIC_CURRENCY_REQUIRED\");\n const platform = clip(payload?.platform, 120) || null;\n const occurredAt = isoOrNull(payload?.occurredAt);\n const externalRef = clip(payload?.externalRef, 500) || null;\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const evidenceRefs = stringList(payload?.evidenceRefs, 20, 1000);\n const notes = clip(payload?.notes, 4000) || null;\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_economic_events(id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,event_type=excluded.event_type,amount_decimal=excluded.amount_decimal,currency=excluded.currency,platform=excluded.platform,occurred_at=excluded.occurred_at,external_ref=excluded.external_ref,evidence_state=excluded.evidence_state,evidence_refs_json=excluded.evidence_refs_json,notes=excluded.notes,updated_at=excluded.updated_at`,\n args: [id,opportunityId,eventType,amount,currency,platform,occurredAt,externalRef,evidenceState,JSON.stringify(evidenceRefs),notes,now,now],\n });\n return { id,eventType,amount,currency,evidenceState,updatedAt:now };\n}\n\nasync function payanaActionUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_PAYANA_ACTION_ID\");\n const opportunityId = safeId(payload?.opportunityId) ? String(payload.opportunityId) : null;\n const actionType = clip(payload?.actionType, 80);\n if (!actionType) throw new Error(\"PAYANA_ACTION_TYPE_REQUIRED\");\n const status = clip(payload?.status, 80) || \"UNVERIFIED\";\n const riskClass = clip(payload?.riskClass, 80) || \"read_only\";\n const approvalState = clip(payload?.approvalState, 80) || \"NOT_REQUIRED\";\n const reversible = payload?.reversible === true ? 1 : 0;\n const inputSummary = clip(payload?.inputSummary, 4000) || null;\n const outputSummary = clip(payload?.outputSummary, 4000) || null;\n const receiptId = safeId(payload?.receiptId) ? String(payload.receiptId) : null;\n const startedAt = isoOrNull(payload?.startedAt);\n const finishedAt = isoOrNull(payload?.finishedAt);\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,action_type=excluded.action_type,status=excluded.status,risk_class=excluded.risk_class,approval_state=excluded.approval_state,reversible=excluded.reversible,input_summary=excluded.input_summary,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,started_at=excluded.started_at,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,opportunityId,actionType,status,riskClass,approvalState,reversible,inputSummary,outputSummary,receiptId,startedAt,finishedAt,evidenceState,now,now],\n });\n return { id,actionType,status,riskClass,approvalState,reversible:Boolean(reversible),evidenceState,updatedAt:now };\n}\n\nasync function payanaReceiptUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n const subjectType = clip(payload?.subjectType, 80);\n const subjectId = clip(payload?.subjectId, 160);\n const receiptType = clip(payload?.receiptType, 80);\n if (!safeId(id) || !subjectType || !safeId(subjectId) || !receiptType) throw new Error(\"INVALID_PAYANA_RECEIPT\");\n const locator = clip(payload?.locator, 2000) || null;\n const sha256Raw = clip(payload?.sha256, 64).toLowerCase();\n const sha256 = sha256Raw ? (/^[a-f0-9]{64}$/.test(sha256Raw) ? sha256Raw : (() => { throw new Error(\"INVALID_SHA256\"); })()) : null;\n const receiptPayload = payload?.payload ?? {};\n const payloadJson = JSON.stringify(receiptPayload);\n if (payloadJson.length > 40_000) throw new Error(\"PAYANA_RECEIPT_PAYLOAD_TOO_LARGE\");\n const verificationState = clip(payload?.verificationState, 80) || \"UNVERIFIED\";\n const verifiedAt = isoOrNull(payload?.verifiedAt);\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET subject_type=excluded.subject_type,subject_id=excluded.subject_id,receipt_type=excluded.receipt_type,locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [id,subjectType,subjectId,receiptType,locator,sha256,payloadJson,verificationState,verifiedAt,now,now],\n });\n return { id,subjectType,subjectId,receiptType,verificationState,verifiedAt,updatedAt:now };\n}\n\nasync function payanaSnapshot(payload: any) {\n const recent = Math.min(50, Math.max(1, Number(payload?.limit ?? 20) || 20));\n const counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM payana_state) AS state_items,\n (SELECT COUNT(*) FROM payana_opportunities) AS opportunities,\n (SELECT COUNT(*) FROM payana_economic_events) AS economic_events,\n (SELECT COUNT(*) FROM payana_actions) AS actions,\n (SELECT COUNT(*) FROM payana_receipts) AS receipts`);\n const state = await db.execute({sql:`SELECT key,value_json,evidence_state,source_ref,updated_at FROM payana_state ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const opportunities = await db.execute({sql:`SELECT id,title,platform,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,currentness_at,evidence_state,updated_at FROM payana_opportunities ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const economic = await db.execute({sql:`SELECT id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,updated_at FROM payana_economic_events ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const actions = await db.execute({sql:`SELECT id,opportunity_id,action_type,status,risk_class,approval_state,reversible,receipt_id,started_at,finished_at,evidence_state,updated_at FROM payana_actions ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const receipts = await db.execute({sql:`SELECT id,subject_type,subject_id,receipt_type,locator,sha256,verification_state,verified_at,updated_at FROM payana_receipts ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n return { schemaVersion:\"payana-ledger-1.0.0\", counts:counts.rows[0], state:state.rows, opportunities:opportunities.rows, economicEvents:economic.rows, actions:actions.rows, receipts:receipts.rows };\n}\n\nconst request = await claimOne();\nif (!request) {\n console.log(JSON.stringify({ status: \"NO_PENDING_BRIDGE_REQUEST\", bridgeVersion: BRIDGE_VERSION }));\n} else {\n const id = String(request.id);\n try {\n const payload = JSON.parse(String(request.payload_json || \"{}\"));\n let result: unknown;\n let blocked = false;\n switch (String(request.action)) {\n case \"search\": result = await search(payload); break;\n case \"search_hybrid\": result = await searchHybrid(payload); break;\n case \"get_conversation\": result = await getConversation(payload); break;\n case \"get_knowledge\": result = await getKnowledge(payload); break;\n case \"related\": result = await related(payload); break;\n case \"stats\": result = await stats(); break;\n case \"checkpoint_upsert\": result = await upsertCheckpoint(payload, id); break;\n case \"knowledge_upsert\": result = await upsertKnowledge(payload, id); break;\n case \"payana_state_upsert\": result = await payanaStateUpsert(payload); break;\n case \"payana_opportunity_upsert\": result = await payanaOpportunityUpsert(payload); break;\n case \"payana_economic_upsert\": result = await payanaEconomicUpsert(payload); break;\n case \"payana_action_upsert\": result = await payanaActionUpsert(payload); break;\n case \"payana_receipt_upsert\": result = await payanaReceiptUpsert(payload); break;\n case \"payana_snapshot\": result = await payanaSnapshot(payload); break;\n default: {\n const envelope = { status: \"BLOCKED\", id, action: request.action, error: \"ACTION_NOT_ALLOWED\", bridgeVersion: BRIDGE_VERSION };\n await finish(id, \"BLOCKED\", envelope, \"ACTION_NOT_ALLOWED\");\n console.log(JSON.stringify(envelope));\n blocked = true;\n }\n }\n if (!blocked) {\n const envelope = { status: \"PASS\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, activeProvider: storage.activeProvider, result };\n await finish(id, \"PASS\", envelope);\n console.log(JSON.stringify(envelope));\n }\n } catch (error) {\n const message = error instanceof Error ? error.message.slice(0, 500) : String(error).slice(0, 500);\n const envelope = { status: \"FAIL\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, error: message };\n await finish(id, \"FAIL\", envelope, message);\n console.log(JSON.stringify(envelope));\n }\n}\n","label",[163],"f38ef222-a746-4fd7-a72b-fef3f2d2d837","v07_zip64_selftest.ts","33b9aec6-aa55-11f1-ae9b-1607ee4eb77e",16,["D",1788741834089],"import { readZipDirectory, readZipEntryText } from \"./frontend/zip_selective_reader.ts\";\n\nfunction crc32(bytes: Uint8Array) {\n let crc = 0xffffffff;\n for (let i = 0; i < bytes.length; i++) {\n crc ^= bytes[i];\n for (let bit = 0; bit < 8; bit++) crc = (crc >>> 1) ^ (0xedb88320 & -(crc & 1));\n }\n return (crc ^ 0xffffffff) >>> 0;\n}\n\nconst out: number[] = [];\nconst u16 = (v: number) => { out.push(v & 255, (v >>> 8) & 255); };\nconst u32 = (v: number) => { out.push(v & 255, (v >>> 8) & 255, (v >>> 16) & 255, (v >>> 24) & 255); };\nconst u64 = (v: number) => { const low = v >>> 0; const high = Math.floor(v / 0x100000000) >>> 0; u32(low); u32(high); };\nconst bytes = (b: Uint8Array) => { for (const x of b) out.push(x); };\n\nconst enc = new TextEncoder();\nconst name = enc.encode(\"conversations.json\");\nconst payloadText = JSON.stringify([{ id: \"zip64_demo\", title: \"ZIP64 synthetic\", mapping: {} }]);\nconst payload = enc.encode(payloadText);\nconst crc = crc32(payload);\n\nconst localOffset = out.length;\nu32(0x04034b50); u16(45); u16(0); u16(0); u16(0); u16(0); u32(crc); u32(payload.length); u32(payload.length); u16(name.length); u16(0); bytes(name); bytes(payload);\n\nconst centralOffset = out.length;\nu32(0x02014b50); u16(45); u16(45); u16(0); u16(0); u16(0); u16(0); u32(crc);\nu32(0xffffffff); u32(0xffffffff); u16(name.length); u16(28); u16(0); u16(0); u16(0); u32(0); u32(0xffffffff); bytes(name);\nu16(0x0001); u16(24); u64(payload.length); u64(payload.length); u64(localOffset);\nconst centralSize = out.length - centralOffset;\n\nconst zip64EocdOffset = out.length;\nu32(0x06064b50); u64(44); u16(45); u16(45); u32(0); u32(0); u64(1); u64(1); u64(centralSize); u64(centralOffset);\nconst locatorOffset = out.length;\nu32(0x07064b50); u32(0); u64(zip64EocdOffset); u32(1);\nconst eocdOffset = out.length;\nu32(0x06054b50); u16(0); u16(0); u16(0xffff); u16(0xffff); u32(0xffffffff); u32(0xffffffff); u16(0);\n\nconst archive = new Uint8Array(out);\nconst blob = new Blob([archive], { type: \"application/zip\" });\nconst entries = await readZipDirectory(blob);\nconst text = entries.length === 1 ? await readZipEntryText(blob, entries[0]) : \"\";\n\nlet multidiskBlocked = false;\nconst mutated = archive.slice();\nmutated[locatorOffset + 4] = 1;\ntry { await readZipDirectory(new Blob([mutated])); } catch (err) { multidiskBlocked = String((err as Error).message).includes(\"ZIP_MULTIDISK_UNSUPPORTED\"); }\n\nconst pass = entries.length === 1 &&\n entries[0].name === \"conversations.json\" &&\n entries[0].zip64 === true &&\n entries[0].compressedSize === payload.length &&\n entries[0].uncompressedSize === payload.length &&\n entries[0].localHeaderOffset === 0 &&\n text === payloadText &&\n multidiskBlocked;\n\nconst result = { pass, archiveBytes: archive.length, centralOffset, centralSize, zip64EocdOffset, locatorOffset, eocdOffset, entry: entries[0], textMatches: text === payloadText, multidiskBlocked };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[174],"8429c4e9-175c-4ec4-bc12-452522541667","v07_preflight_selftest.ts","33b994cc-aa55-11f1-ae9b-1607ee4eb77e",["D",1788741834089],"import { buildPreflight, preflightGate, preflightScopeKey } from \"./frontend/preflight.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst counts = async () => {\n const r = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_import_runs) AS import_runs,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items`);\n return r.rows[0] as any;\n};\n\nconst before = await counts();\nconst huge = \"x\".repeat(180_001);\nconst candidates: any[] = [\n {\n sourceFile: \"synthetic::conversations.json\",\n conv: {\n id: \"v07_good\",\n title: \"good\",\n current_node: \"m2\",\n mapping: {\n m1: { parent: null, message: { id: \"m1\", author: { role: \"user\" }, create_time: 1, content: { content_type: \"text\", parts: [\"hello\"] } } },\n m2: { parent: \"m1\", message: { id: \"m2\", author: { role: \"assistant\" }, create_time: 2, content: { content_type: \"text\", parts: [\"world\"] } } },\n },\n },\n },\n {\n sourceFile: \"synthetic::conversations-0001.json\",\n conv: {\n title: \"unkeyed unknown content\",\n mapping: {\n a: { parent: null, message: { id: \"a\", author: { role: \"tool\" }, create_time: 3, content: { content_type: \"brand_new_future_type\", parts: [\"future\"] } } },\n },\n },\n },\n {\n sourceFile: \"synthetic::conversations-0002.json\",\n conv: {\n id: \"v07_huge\",\n title: \"oversized\",\n current_node: \"h\",\n mapping: {\n h: { parent: null, message: { id: \"h\", author: { role: \"assistant\" }, create_time: 4, content: { content_type: \"text\", parts: [huge] } } },\n },\n },\n },\n];\n\nconst inventory: any = {\n inputFileCount: 1,\n inputNames: [\"synthetic.zip\"],\n sourceBytes: 2_000_000_000,\n zipCount: 1,\n jsonCount: 0,\n zipEntryCount: 10,\n conversationJsonCount: 3,\n otherFileCount: 7,\n candidateCount: 3,\n duplicateCandidateCount: 0,\n extensionBreakdown: [{ extension: \"png\", count: 7 }],\n};\n\nconst report = buildPreflight(candidates, inventory, 2);\nconst after = await counts();\nconst sameDb = JSON.stringify(before) === JSON.stringify(after);\nconst issue = (code: string) => report.issues.find((x) => x.code === code);\nconst fingerprintA = \"a\".repeat(64);\nconst fingerprintB = \"b\".repeat(64);\nconst reviewedKey = preflightScopeKey(fingerprintA, 25);\nconst gateSame = preflightGate(reviewedKey, fingerprintA, 25);\nconst gateDifferentLimit = preflightGate(reviewedKey, fingerprintA, 50);\nconst gateDifferentFingerprint = preflightGate(reviewedKey, fingerprintB, 25);\nconst pass = storage.activeProvider === \"turso\" &&\n gateSame.allowed === true &&\n gateDifferentLimit.allowed === false &&\n gateDifferentFingerprint.allowed === false &&\n sameDb &&\n report.candidateCount === 3 &&\n report.selectedCount === 2 &&\n report.explicitIdCount === 2 &&\n report.unkeyedCount === 1 &&\n report.mappingCount === 3 &&\n report.fallbackBranchCount === 1 &&\n report.textMessages === 4 &&\n report.messagesOverLimit === 1 &&\n report.unknownContentTypes.some((x) => x.contentType === \"brand_new_future_type\" && x.count === 1) &&\n issue(\"MISSING_EXPLICIT_ID\")?.severity === \"WARN\" &&\n issue(\"UNKNOWN_CONTENT_TYPES\")?.severity === \"WARN\" &&\n issue(\"MESSAGE_OVER_180K\")?.severity === \"WARN\" &&\n issue(\"LARGE_SOURCE_ZIP\")?.severity === \"INFO\" &&\n report.blocked === false;\n\nconst result = { pass, version: \"0.7.0\", activeProvider: storage.activeProvider, sameDbBeforeAfter: sameDb, gates: { sameScope: gateSame.allowed, differentLimit: gateDifferentLimit.allowed, differentFingerprint: gateDifferentFingerprint.allowed }, before, after, report };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[181],"5eecb6f1-d656-427e-87b6-e86dd68f6bb6","v06_selftest.ts","8c725a22-aa46-11f1-97ea-1607ee4eb77e",13,["D",1788735540568],"import JSZip from \"npm:jszip@3.10.1\";\nimport { readExportFiles, scopedRunId } from \"./frontend/export_reader.ts\";\nimport { readZipDirectory } from \"./frontend/zip_selective_reader.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst zip = new JSZip();\nconst convA = [{ id: \"zip_demo_a\", title: \"ZIP demo A\", create_time: 1, update_time: 2, mapping: {} }];\nconst convB = [\n { id: \"zip_demo_b\", title: \"ZIP demo B\", create_time: 3, update_time: 4, mapping: {} },\n { id: \"zip_demo_c\", title: \"ZIP demo C\", create_time: 5, update_time: 6, mapping: {} },\n { id: \"zip_demo_a\", title: \"ZIP demo A newer duplicate\", create_time: 1, update_time: 7, mapping: {} },\n];\nzip.file(\"conversations.json\", JSON.stringify(convA));\nzip.file(\"nested/conversations-0001.json\", JSON.stringify(convB));\nzip.file(\"chat.html\", \"demo\");\nzip.file(\"assets/image.png\", new Uint8Array([1, 2, 3, 4]));\nzip.file(\"account/user.json\", JSON.stringify({ id: \"not-a-conversation-file\" }));\nconst bytes = await zip.generateAsync({ type: \"uint8array\", compression: \"DEFLATE\", compressionOptions: { level: 6 } });\nconst file = new File([bytes], \"synthetic-chatgpt-export.zip\", { type: \"application/zip\", lastModified: 1788730000000 });\nlet wholeFileArrayBufferAttempted = false;\nconst guardedFile = new Proxy(file, {\n get(target, prop) {\n if (prop === \"arrayBuffer\") return async () => { wholeFileArrayBufferAttempted = true; throw new Error(\"WHOLE_FILE_ARRAYBUFFER_FORBIDDEN\"); };\n const value = Reflect.get(target, prop, target);\n return typeof value === \"function\" ? value.bind(target) : value;\n },\n}) as File;\nconst parsed = await readExportFiles([guardedFile]);\nconst parsedAgain = await readExportFiles([guardedFile]);\nconst renamedFile = new File([bytes], \"same-export-redownloaded.zip\", { type: \"application/zip\", lastModified: 999 });\nconst parsedRenamed = await readExportFiles([renamedFile]);\nconst scopedOne = scopedRunId(parsed.runId, 1);\nconst scopedThree = scopedRunId(parsed.runId, 3);\nconst directory = await readZipDirectory(file);\nconst conversationMethods = directory.filter((entry) => entry.name.includes(\"conversations\")).map((entry) => entry.method);\n\nconst emptyZip = new JSZip();\nemptyZip.file(\"account/user.json\", JSON.stringify({ demo: true }));\nemptyZip.file(\"chat.html\", \"\");\nconst emptyBytes = await emptyZip.generateAsync({ type: \"uint8array\", compression: \"DEFLATE\" });\nlet missingConversationJsonBlocked = false;\ntry {\n await readExportFiles([new File([emptyBytes], \"no-conversations.zip\", { type: \"application/zip\", lastModified: 1 })]);\n} catch (error) {\n missingConversationJsonBlocked = String(error).includes(\"nenhum conversations*.json reconhecido\");\n}\n\nconst crcZip = new JSZip();\ncrcZip.file(\"conversations.json\", JSON.stringify(convA));\nconst crcBytes = await crcZip.generateAsync({ type: \"uint8array\", compression: \"STORE\" });\nconst crcFile = new File([crcBytes], \"crc-test.zip\", { type: \"application/zip\", lastModified: 2 });\nconst crcDirectory = await readZipDirectory(crcFile);\nconst crcEntry = crcDirectory.find((entry) => entry.name === \"conversations.json\");\nif (!crcEntry) throw new Error(\"CRC_FIXTURE_ENTRY_MISSING\");\nconst corruptBytes = crcBytes.slice();\nconst localView = new DataView(corruptBytes.buffer, corruptBytes.byteOffset, corruptBytes.byteLength);\nconst localNameLength = localView.getUint16(crcEntry.localHeaderOffset + 26, true);\nconst localExtraLength = localView.getUint16(crcEntry.localHeaderOffset + 28, true);\nconst payloadOffset = crcEntry.localHeaderOffset + 30 + localNameLength + localExtraLength;\ncorruptBytes[payloadOffset] ^= 0x01;\nlet crcMismatchBlocked = false;\ntry {\n await readExportFiles([new File([corruptBytes], \"crc-corrupt.zip\", { type: \"application/zip\", lastModified: 2 })]);\n} catch (error) {\n crcMismatchBlocked = String(error).includes(\"ZIP_CRC_MISMATCH\");\n}\n\nawait db.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n)`);\nconst fixtureId = \"imp_v06_selftest_fixture\";\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nconst now = new Date().toISOString();\nawait db.execute({\n sql: `INSERT INTO vault_import_runs(id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,inventory_json,last_error,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [fixtureId, parsed.sourceFingerprint, parsed.sourceName, parsed.sourceSize, 100, 37, 36, 420, 1, \"PAUSED\", JSON.stringify(parsed.inventory), \"synthetic interruption\", now, now],\n});\nconst paused = await db.execute({ sql: \"SELECT * FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nawait db.execute({\n sql: `UPDATE vault_import_runs SET cursor=?, imported_count=?, indexed_messages=?, skipped_count=?, status='COMPLETE', last_error=NULL, updated_at=? WHERE id=?`,\n args: [100, 99, 1200, 1, new Date().toISOString(), fixtureId],\n});\nconst complete = await db.execute({ sql: \"SELECT cursor,imported_count,indexed_messages,skipped_count,status,last_error FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nconst residue = await db.execute({ sql: \"SELECT COUNT(*) AS count FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\n\nconst atomicFixtureId = \"imp_v06_atomic_replay_fixture\";\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\nawait db.execute({\n sql: `INSERT INTO vault_import_runs(id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,inventory_json,last_error,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [atomicFixtureId, parsed.sourceFingerprint, \"atomic replay fixture\", 1, 3, 0, 0, 0, 0, \"IN_PROGRESS\", \"{}\", null, now, now],\n});\nconst advanceAtomic = async (cursorAfter: number, indexedDelta: number) => await db.execute({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n status=CASE WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END ELSE status END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status`,\n args: [cursorAfter,indexedDelta,cursorAfter,cursorAfter,cursorAfter,cursorAfter,cursorAfter,new Date().toISOString(),atomicFixtureId,parsed.sourceFingerprint],\n});\nconst atomicFirst = await advanceAtomic(1, 2);\nconst atomicReplay = await advanceAtomic(1, 2);\nconst atomicSecond = await advanceAtomic(2, 3);\nconst atomicComplete = await advanceAtomic(3, 1);\nconst atomicCompleteReplay = await advanceAtomic(3, 1);\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\nconst atomicResidue = await db.execute({ sql: \"SELECT COUNT(*) AS count FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\n\nconst ids = parsed.candidates.map((candidate: any) => String(candidate.conv?.id));\nconst keptDuplicateTitle = String(parsed.candidates.find((candidate: any) => candidate.conv?.id === \"zip_demo_a\")?.conv?.title ?? \"\");\nconst p: any = paused.rows[0] ?? {};\nconst c: any = complete.rows[0] ?? {};\nconst af: any = atomicFirst.rows[0] ?? {};\nconst ar: any = atomicReplay.rows[0] ?? {};\nconst as: any = atomicSecond.rows[0] ?? {};\nconst ac: any = atomicComplete.rows[0] ?? {};\nconst acr: any = atomicCompleteReplay.rows[0] ?? {};\nconst pass =\n storage.activeProvider === \"turso\" &&\n parsed.inventory.zipCount === 1 &&\n parsed.inventory.conversationJsonCount === 2 &&\n parsed.inventory.zipEntryCount === 5 &&\n parsed.inventory.otherFileCount === 3 &&\n parsed.inventory.candidateCount === 3 &&\n parsed.inventory.duplicateCandidateCount === 1 &&\n ids.join(\",\") === \"zip_demo_a,zip_demo_c,zip_demo_b\" &&\n keptDuplicateTitle === \"ZIP demo A newer duplicate\" &&\n wholeFileArrayBufferAttempted === false &&\n conversationMethods.length === 2 && conversationMethods.every((method) => method === 8) &&\n missingConversationJsonBlocked && crcMismatchBlocked &&\n parsed.sourceFingerprint === parsedAgain.sourceFingerprint &&\n parsed.sourceFingerprint === parsedRenamed.sourceFingerprint &&\n /^imp_[a-f0-9]{40}$/.test(parsed.runId) &&\n scopedOne === `${parsed.runId}_1` && scopedThree === `${parsed.runId}_3` && scopedOne !== scopedThree &&\n Number(p.cursor) === 37 && p.status === \"PAUSED\" &&\n Number(c.cursor) === 100 && c.status === \"COMPLETE\" && c.last_error === null &&\n Number(af.cursor) === 1 && Number(af.imported_count) === 1 && Number(af.indexed_messages) === 2 && af.status === \"IN_PROGRESS\" &&\n Number(ar.cursor) === 1 && Number(ar.imported_count) === 1 && Number(ar.indexed_messages) === 2 && ar.status === \"IN_PROGRESS\" &&\n Number(as.cursor) === 2 && Number(as.imported_count) === 2 && Number(as.indexed_messages) === 5 && as.status === \"IN_PROGRESS\" &&\n Number(ac.cursor) === 3 && Number(ac.imported_count) === 3 && Number(ac.indexed_messages) === 6 && ac.status === \"COMPLETE\" &&\n Number(acr.cursor) === 3 && Number(acr.imported_count) === 3 && Number(acr.indexed_messages) === 6 && acr.status === \"COMPLETE\" &&\n Number((atomicResidue.rows[0] as any)?.count ?? -1) === 0 &&\n Number((residue.rows[0] as any)?.count ?? -1) === 0;\n\nconst result = {\n pass,\n version: \"0.6.0\",\n activeProvider: storage.activeProvider,\n inventory: parsed.inventory,\n candidateIds: ids,\n deduplication: { keptDuplicateTitle, duplicateCandidateCount: parsed.inventory.duplicateCandidateCount },\n selectiveRead: { wholeFileArrayBufferAttempted, conversationMethods },\n negativeControls: { missingConversationJsonBlocked, crcMismatchBlocked },\n fingerprintStable: parsed.sourceFingerprint === parsedAgain.sourceFingerprint,\n fingerprintStableAcrossRenameAndMtime: parsed.sourceFingerprint === parsedRenamed.sourceFingerprint,\n runIdShapeValid: /^imp_[a-f0-9]{40}$/.test(parsed.runId),\n scopedRunIds: { one: scopedOne, three: scopedThree, distinct: scopedOne !== scopedThree },\n paused: { cursor: Number(p.cursor), imported: Number(p.imported_count), skipped: Number(p.skipped_count), status: p.status },\n complete: c,\n atomicReplay: {\n first: af,\n replay: ar,\n second: as,\n complete: ac,\n completeReplay: acr,\n residue: Number((atomicResidue.rows[0] as any)?.count ?? -1),\n },\n fixtureResidue: Number((residue.rows[0] as any)?.count ?? -1),\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[187],"746b3f75-32e3-4560-ba4a-1e600a9c2302","v06_release_audit.ts","8c724c8a-aa46-11f1-97ea-1607ee4eb77e",15,["D",1788740898913],1,"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst importRuns = await db.execute(`SELECT\n COUNT(*) AS total,\n COALESCE(SUM(CASE WHEN id LIKE 'imp_v06_selftest%' OR id LIKE 'imp_v06_atomic%' THEN 1 ELSE 0 END),0) AS selftest_residue,\n COALESCE(SUM(CASE WHEN status='IN_PROGRESS' THEN 1 ELSE 0 END),0) AS in_progress,\n COALESCE(SUM(CASE WHEN status!='COMPLETE' THEN 1 ELSE 0 END),0) AS non_complete\n FROM vault_import_runs`);\nconst corpus = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations`);\nconst queue = await control.execute(`SELECT\n COALESCE(SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END),0) AS pending,\n COALESCE(SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END),0) AS running\n FROM vault_bridge_requests`);\n\nconst i: any = importRuns.rows[0] ?? {};\nconst c: any = corpus.rows[0] ?? {};\nconst q: any = queue.rows[0] ?? {};\nconst invariants = {\n messagesMatchFts: Number(c.messages ?? -1) === Number(c.message_fts ?? -2),\n checkpointsMatchFts: Number(c.checkpoints ?? -1) === Number(c.checkpoint_fts ?? -2),\n knowledgeMatchFts: Number(c.knowledge_items ?? -1) === Number(c.knowledge_fts ?? -2),\n minimumBaselinePreserved:\n Number(c.conversations ?? 0) >= 3 &&\n Number(c.messages ?? 0) >= 10 &&\n Number(c.knowledge_items ?? 0) >= 3 &&\n Number(c.relations ?? 0) >= 7,\n};\nconst pass = storage.activeProvider === \"turso\" &&\n Number(i.selftest_residue ?? -1) === 0 &&\n Number(i.in_progress ?? -1) === 0 &&\n Number(i.non_complete ?? -1) === 0 &&\n Number(q.pending ?? -1) === 0 &&\n Number(q.running ?? -1) === 0 &&\n Object.values(invariants).every(Boolean);\n\nconst result = {\n pass,\n version: \"0.6.2-audit-currentness\",\n activeProvider: storage.activeProvider,\n importRuns: {\n total: Number(i.total ?? 0),\n selftestResidue: Number(i.selftest_residue ?? 0),\n inProgress: Number(i.in_progress ?? 0),\n nonComplete: Number(i.non_complete ?? 0),\n },\n corpus: c,\n invariants,\n bridgeQueue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[194],"a1399727-63ff-4c0b-8ce8-92a0a44303fe","v05_selftest.ts","dabbe076-aa42-11f1-95a6-1607ee4eb77e",["D",1788741834089],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst [counts, timeoutItem, invalidFixture, timeoutFts, crossChatFts, relations] = await Promise.all([\n db.execute(`SELECT\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations,\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints`),\n db.execute({ sql: `SELECT id,project,kind,evidence_state FROM vault_knowledge_items WHERE id=?`, args: [\"kn_timeout_write_reconciliation\"] }),\n db.execute({ sql: `SELECT id FROM vault_knowledge_items WHERE id=?`, args: [\"kn_invalid_relation_fixture\"] }),\n db.execute({ sql: `SELECT knowledge_id FROM vault_knowledge_fts WHERE vault_knowledge_fts MATCH ?`, args: ['\"unknown_external_state\"*'] }),\n db.execute({ sql: `SELECT knowledge_id FROM vault_knowledge_fts WHERE vault_knowledge_fts MATCH ?`, args: ['\"cross\"* AND \"chat\"*'] }),\n db.execute({ sql: `SELECT relation,target_type,target_id FROM vault_relations WHERE source_type='knowledge' AND source_id=? ORDER BY relation`, args: [\"kn_timeout_write_reconciliation\"] }),\n]);\n\nconst evidence = await control.execute(`SELECT id,status,error,attempt_count,result_json FROM vault_bridge_requests\n WHERE id IN (\n 'v05_kn_timeout_reconciliation_01',\n 'v05_hybrid_conceptual_timeout_01',\n 'v05_hybrid_filtered_01',\n 'v05_invalid_relation_01',\n 'v05_get_knowledge_timeout_01',\n 'v05_related_timeout_01',\n 'v05_stats_after_retry_01'\n ) ORDER BY id`);\nconst queue = await control.execute(`SELECT\n SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END) AS running\n FROM vault_bridge_requests`);\n\nconst map = new Map((evidence.rows as any[]).map((row) => [String(row.id), row]));\nconst filtered = JSON.parse(String(map.get(\"v05_hybrid_filtered_01\")?.result_json ?? \"{}\"));\nconst conceptual = JSON.parse(String(map.get(\"v05_hybrid_conceptual_timeout_01\")?.result_json ?? \"{}\"));\nconst c: any = counts.rows[0] ?? {};\nconst q: any = queue.rows[0] ?? {};\n\nconst filteredItems = filtered?.result?.items ?? [];\nconst conceptualItems = conceptual?.result?.items ?? [];\nconst invariants = {\n knowledgeFtsAligned: Number(c.knowledge_items) === Number(c.knowledge_fts),\n minimumKnowledgeBaseline: Number(c.knowledge_items) >= 3,\n minimumRelationBaseline: Number(c.relations) >= 7,\n corpusOnlyGrows: Number(c.conversations) >= 3 && Number(c.messages) >= 10 && Number(c.checkpoints) >= 5,\n};\nconst pass =\n storage.activeProvider === \"turso\" &&\n Object.values(invariants).every(Boolean) &&\n timeoutItem.rows.some((r: any) => r.id === \"kn_timeout_write_reconciliation\" && r.project === \"GUH_AGENT_OS\" && r.kind === \"reusable_rule\") &&\n invalidFixture.rows.length === 0 &&\n timeoutFts.rows.some((r: any) => r.knowledge_id === \"kn_timeout_write_reconciliation\") &&\n crossChatFts.rows.some((r: any) => r.knowledge_id === \"kn_cross_chat_external_memory\") &&\n relations.rows.length === 3 &&\n map.get(\"v05_kn_timeout_reconciliation_01\")?.status === \"PASS\" &&\n Number(map.get(\"v05_kn_timeout_reconciliation_01\")?.attempt_count) === 2 &&\n map.get(\"v05_invalid_relation_01\")?.status === \"FAIL\" &&\n map.get(\"v05_invalid_relation_01\")?.error === \"INVALID_RELATION_0\" &&\n map.get(\"v05_hybrid_conceptual_timeout_01\")?.status === \"PASS\" &&\n conceptualItems.some((item: any) => item.id === \"kn_timeout_write_reconciliation\") &&\n map.get(\"v05_hybrid_filtered_01\")?.status === \"PASS\" &&\n filteredItems.length === 1 &&\n filteredItems[0]?.type === \"knowledge\" &&\n filteredItems[0]?.id === \"kn_timeout_write_reconciliation\" &&\n map.get(\"v05_get_knowledge_timeout_01\")?.status === \"PASS\" &&\n map.get(\"v05_related_timeout_01\")?.status === \"PASS\" &&\n Number(q.pending ?? 0) === 0 && Number(q.running ?? 0) === 0;\n\nconst result = {\n pass,\n version: \"0.5.0\",\n activeProvider: storage.activeProvider,\n counts: c,\n invariants,\n timeoutRelations: relations.rows,\n retryAttemptCount: Number(map.get(\"v05_kn_timeout_reconciliation_01\")?.attempt_count ?? 0),\n invalidRelationState: { status: map.get(\"v05_invalid_relation_01\")?.status, error: map.get(\"v05_invalid_relation_01\")?.error },\n conceptualFound: conceptualItems.map((item: any) => ({ type: item.type, id: item.id, matchedQueries: item.matchedQueries })),\n filteredItems: filteredItems.map((item: any) => ({ type: item.type, id: item.id, project: item.project, kind: item.kind })),\n queue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[202],"163e89f5-6f64-4c83-ac93-c331679e78b3","v05_schema_migrate.ts","dabbabec-aa42-11f1-95a6-1607ee4eb77e",12,["D",1788733953870],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nawait db.batch([\n { sql: `CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_source ON vault_knowledge_items(source_type, source_id)` },\n { sql: `CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)` },\n]);\n\nconst counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations`);\n\nconst result = {\n pass: storage.activeProvider === \"turso\",\n schemaVersion: \"0.5.0\",\n activeProvider: storage.activeProvider,\n counts: counts.rows[0],\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[208],"8087b702-6e53-476e-bf4d-4b18bd7177ac","v04_bridge_selftest.ts","381d9938-aa40-11f1-80f3-1607ee4eb77e",10,["D",1788732822077],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst reqs = await control.execute(`SELECT id,status,error,attempt_count FROM vault_bridge_requests\n WHERE id IN (\n 'bridge_e2e_search_kernel_20260906',\n 'bridge_e2e_get_kernel_20260906',\n 'bridge_e2e_stats_20260906',\n 'bridge_e2e_checkpoint_20260906',\n 'bridge_negative_disallowed_action_20260906_v2',\n 'bridge_stale_recoverable_20260906',\n 'bridge_stale_exhausted_20260906'\n ) ORDER BY id`);\n\nconst map = new Map((reqs.rows as any[]).map((r) => [String(r.id), r]));\nconst cp = await db.execute({ sql: `SELECT id,evidence_state FROM vault_checkpoints WHERE id=?`, args: ['cp_guh_v04_chatgpt_bridge'] });\nconst cpSearch = await db.execute({ sql: `SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?`, args: ['\"chatgpt\"* AND \"bridge\"*'] });\nconst search = await db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] });\nconst queue = await control.execute(`SELECT\n SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END) AS running\n FROM vault_bridge_requests`);\n\nconst q: any = queue.rows[0] ?? {};\nconst pass =\n storage.activeProvider === 'turso' &&\n map.get('bridge_e2e_search_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_get_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_stats_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_checkpoint_20260906')?.status === 'PASS' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.status === 'BLOCKED' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.error === 'ACTION_NOT_ALLOWED' &&\n map.get('bridge_stale_recoverable_20260906')?.status === 'PASS' &&\n Number(map.get('bridge_stale_recoverable_20260906')?.attempt_count) === 2 &&\n map.get('bridge_stale_exhausted_20260906')?.status === 'FAIL' &&\n map.get('bridge_stale_exhausted_20260906')?.error === 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' &&\n cp.rows.some((r: any) => r.id === 'cp_guh_v04_chatgpt_bridge' && r.evidence_state === 'OPERATIONAL_SYNTHETIC_CHATGPT_BRIDGE') &&\n cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge') &&\n search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout') &&\n Number(q.pending ?? 0) === 0 && Number(q.running ?? 0) === 0;\n\nconst result = {\n pass,\n activeProvider: storage.activeProvider,\n evidenceRows: reqs.rows,\n checkpointFound: cp.rows.length === 1,\n checkpointSearchable: cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge'),\n kernelTimeoutSearchable: search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout'),\n queue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[215],"45f8048e-63ee-4e51-9ae3-ac7b3635df8c","v03_turso_auth_negative_selftest.ts","fa0ffa28-aa3a-11f1-a7d8-1607ee4eb77e",8,["D",1788730570498],"import { createClient } from \"npm:@libsql/client@0.15.15/web\";\n\nconst url = Deno.env.get(\"TURSO_DATABASE_URL\");\nif (!url) throw new Error(\"TURSO_DATABASE_URL_MISSING\");\n\nconst invalid = createClient({ url, authToken: \"intentionally-invalid-token-for-negative-control\" });\nlet rejected = false;\nlet errorClass = \"\";\ntry {\n await invalid.execute(\"SELECT 1 AS ok\");\n} catch (error) {\n rejected = true;\n errorClass = error instanceof Error ? error.name : \"unknown\";\n}\n\nconst result = { pass: rejected, invalidCredentialRejected: rejected, errorClass };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[222],"9a758dec-8356-476f-946b-982d9a303fcc","v03_storage_selftest.ts","fa0ff370-aa3a-11f1-a7d8-1607ee4eb77e",["D",1788730570498],"import { getLocalDatabase, getStorageState, probeTurso } from \"./lib/storage_provider.ts\";\n\nconst state = getStorageState();\nconst local = getLocalDatabase();\nconst localProbe = await local.execute(\"SELECT 1 AS ok\");\nconst localOk = Number((localProbe.rows[0] as any)?.ok ?? 0) === 1;\nconst turso = await probeTurso();\n\nconst result = {\n pass: localOk && state.credentialValuesExposed === false && (\n state.externalConfigured\n ? turso.configured === true\n : turso.configured === false && turso.authenticated === false && turso.reachable === false\n ),\n localOk,\n storageState: state,\n tursoProbe: turso,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[229],"ef797e4f-9799-4c4e-aa48-a11d2e4cbc82","v03_migrate_to_turso.ts","fa0fba54-aa3a-11f1-a7d8-1607ee4eb77e",["D",1788730570498],"import { getLocalDatabase, getTursoClient } from \"./lib/storage_provider.ts\";\n\nconst local = getLocalDatabase();\nconst turso = getTursoClient();\nif (!turso) throw new Error(\"TURSO_NOT_CONFIGURED\");\n\nasync function sha256(value: unknown) {\n const bytes = new TextEncoder().encode(JSON.stringify(value));\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function remote(sql: string, args: any[] = []) {\n return await turso!.execute({ sql, args });\n}\n\nasync function ensureRemoteSchema() {\n const statements = [\n `CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)`,\n `CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n ];\n for (const sql of statements) await remote(sql);\n await remote(\n `INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version','0.3.0',datetime('now'))\n ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`,\n );\n}\n\nasync function fetchLocal() {\n const [conversations, messages, checkpoints] = await Promise.all([\n local.execute(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at\n FROM conversations ORDER BY id`),\n local.execute(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at\n FROM vault_messages ORDER BY conversation_id,seq,id`),\n local.execute(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at\n FROM vault_checkpoints ORDER BY id`),\n ]);\n return { conversations: conversations.rows as any[], messages: messages.rows as any[], checkpoints: checkpoints.rows as any[] };\n}\n\nasync function migrate(data: Awaited>) {\n for (const row of data.conversations) {\n await remote(\n `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,create_time=excluded.create_time,update_time=excluded.update_time,\n message_count=excluded.message_count,char_count=excluded.char_count,content_bytes=excluded.content_bytes,content_text=excluded.content_text,\n truncated=excluded.truncated,source_file=excluded.source_file,imported_at=excluded.imported_at`,\n [row.id,row.title,row.create_time,row.update_time,row.message_count,row.char_count,row.content_bytes,row.content_text,row.truncated,row.source_file,row.imported_at],\n );\n await remote(`DELETE FROM vault_messages_fts WHERE conversation_id = ?`, [row.id]);\n await remote(`DELETE FROM vault_messages WHERE conversation_id = ?`, [row.id]);\n }\n\n const titleByConversation = new Map(data.conversations.map((r) => [String(r.id), String(r.title)]));\n for (const row of data.messages) {\n await remote(\n `INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?)`,\n [row.id,row.conversation_id,row.seq,row.role,row.create_time,row.content_text,row.char_count,row.content_bytes,row.imported_at],\n );\n await remote(\n `INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)`,\n [row.id,row.conversation_id,titleByConversation.get(String(row.conversation_id)) ?? \"Sem título\",row.role,row.content_text],\n );\n }\n\n for (const row of data.checkpoints) {\n await remote(\n `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,\n open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,\n evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action,row.source_conversation_id,row.evidence_state,row.created_at,row.updated_at],\n );\n await remote(`DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?`, [row.id]);\n await remote(\n `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action],\n );\n }\n}\n\nasync function verify(source: Awaited>) {\n const rc = await remote(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at FROM conversations ORDER BY id`);\n const rm = await remote(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at FROM vault_messages ORDER BY conversation_id,seq,id`);\n const rp = await remote(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at FROM vault_checkpoints ORDER BY id`);\n const ftsMessageCount = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts`);\n const ftsCheckpointCount = await remote(`SELECT COUNT(*) AS c FROM vault_checkpoints_fts`);\n\n const sourceHashes = {\n conversations: await sha256(source.conversations),\n messages: await sha256(source.messages),\n checkpoints: await sha256(source.checkpoints),\n };\n const destinationHashes = {\n conversations: await sha256(rc.rows),\n messages: await sha256(rm.rows),\n checkpoints: await sha256(rp.rows),\n };\n\n const kernel = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"kernel\"* AND \"timeout\"*']);\n const nr12 = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"nr\"* AND \"12\"*']);\n const reconciliation = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"reconciliacao\"*']);\n const checkpoint = await remote(`SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ? ORDER BY checkpoint_id`, ['\"export\"* AND \"oficial\"*']);\n const negative = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, ['\"guhtermoinexistente987654\"*']);\n\n const ftsCounts = {\n messages: Number((ftsMessageCount.rows[0] as any)?.c ?? -1),\n checkpoints: Number((ftsCheckpointCount.rows[0] as any)?.c ?? -1),\n };\n const counts = {\n source: { conversations: source.conversations.length, messages: source.messages.length, checkpoints: source.checkpoints.length },\n destination: { conversations: rc.rows.length, messages: rm.rows.length, checkpoints: rp.rows.length },\n fts: ftsCounts,\n };\n\n const pass =\n JSON.stringify(counts.source) === JSON.stringify(counts.destination) &&\n ftsCounts.messages === source.messages.length &&\n ftsCounts.checkpoints === source.checkpoints.length &&\n sourceHashes.conversations === destinationHashes.conversations &&\n sourceHashes.messages === destinationHashes.messages &&\n sourceHashes.checkpoints === destinationHashes.checkpoints &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n reconciliation.rows.length >= 2 &&\n checkpoint.rows.length >= 1 &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0;\n\n return {\n pass,\n counts,\n hashesEqual: {\n conversations: sourceHashes.conversations === destinationHashes.conversations,\n messages: sourceHashes.messages === destinationHashes.messages,\n checkpoints: sourceHashes.checkpoints === destinationHashes.checkpoints,\n },\n searchProofs: {\n kernelTimeout: kernel.rows,\n nr12: nr12.rows,\n reconciliation: reconciliation.rows,\n exportOfficialCheckpointCount: checkpoint.rows.length,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n },\n };\n}\n\nawait ensureRemoteSchema();\nconst source = await fetchLocal();\nawait migrate(source);\nconst verification = await verify(source);\nconsole.log(JSON.stringify(verification));\nexport default verification;\n",[235],"c0a3e0d3-a7ff-4ae9-af2f-2caa4fc5bb96","v03_active_storage_selftest.ts","fa0f9fd8-aa3a-11f1-a7d8-1607ee4eb77e",["D",1788730570498],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst state = getStorageState();\nconst PROBE_KEY = \"v03_active_batch_probe\";\n\nawait db.execute(`CREATE TABLE IF NOT EXISTS vault_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL)`);\n\nlet batchOk = false;\ntry {\n const results: any = await db.batch([\n { sql: `INSERT INTO vault_meta(key,value,updated_at) VALUES(?,?,datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`, args: [PROBE_KEY, \"batch-pass\"] },\n { sql: `SELECT value FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n { sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n ]);\n batchOk = String(results?.[1]?.rows?.[0]?.value ?? \"\") === \"batch-pass\";\n} finally {\n await db.execute({ sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] });\n}\n\nconst [counts, kernel, nr12, negative, probeResidue] = await Promise.all([\n db.execute(`SELECT (SELECT COUNT(*) FROM conversations) AS conversations, (SELECT COUNT(*) FROM vault_messages) AS messages, (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints, (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts, (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts`),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] }),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"nr\"* AND \"12\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"guhtermoinexistente987654\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] }),\n]);\n\nconst row: any = counts.rows[0] ?? {};\nconst result = {\n pass:\n state.activeProvider === \"turso\" &&\n batchOk &&\n Number(row.conversations) === 3 &&\n Number(row.messages) === 10 &&\n Number(row.checkpoints) >= 3 &&\n Number(row.message_fts) === 10 &&\n Number(row.checkpoint_fts) === Number(row.checkpoints) &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0 &&\n Number((probeResidue.rows[0] as any)?.c ?? -1) === 0,\n activeProvider: state.activeProvider,\n batchOk,\n counts: {\n conversations: Number(row.conversations),\n messages: Number(row.messages),\n checkpoints: Number(row.checkpoints),\n messageFts: Number(row.message_fts),\n checkpointFts: Number(row.checkpoint_fts),\n },\n kernelTimeoutFound: kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\"),\n nr12Found: nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\"),\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n probeResidue: Number((probeResidue.rows[0] as any)?.c ?? -1),\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[241],"32d9177a-4939-49e6-aa2f-75e469b376e4","v031_storage_policy_selftest.ts","5a750368-aa3b-11f1-b23d-1607ee4eb77e",9,["D",1788730732173],"import { decideStorageState } from \"./lib/storage_provider.ts\";\n\nconst neither = decideStorageState(false, false);\nconst urlOnly = decideStorageState(true, false);\nconst tokenOnly = decideStorageState(false, true);\nconst both = decideStorageState(true, true);\n\nconst result = {\n pass:\n neither.activeProvider === \"blocked\" && neither.migrationMode === \"BLOCKED_EXTERNAL_REQUIRED\" && neither.localFallbackEnabled === false &&\n urlOnly.activeProvider === \"blocked\" && urlOnly.externalConfigured === false &&\n tokenOnly.activeProvider === \"blocked\" && tokenOnly.externalConfigured === false &&\n both.activeProvider === \"turso\" && both.externalConfigured === true && both.migrationMode === \"TURSO_ACTIVE\" && both.localFallbackEnabled === false,\n cases: {\n neither: { activeProvider: neither.activeProvider, migrationMode: neither.migrationMode },\n urlOnly: { activeProvider: urlOnly.activeProvider, migrationMode: urlOnly.migrationMode },\n tokenOnly: { activeProvider: tokenOnly.activeProvider, migrationMode: tokenOnly.migrationMode },\n both: { activeProvider: both.activeProvider, migrationMode: both.migrationMode },\n },\n localFallbackEnabled: both.localFallbackEnabled,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[247],"c37a2581-a3ad-472c-b2e4-05d1860472b5","v02_selftest.ts","d2abba1e-aa33-11f1-bbbe-1607ee4eb77e",7,["D",1788727497920],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CID = \"v02_selftest_fixture\";\nconst CPID = \"v02_selftest_checkpoint\";\n\nasync function cleanup() {\n await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"DELETE FROM vault_checkpoints WHERE id = ?\", args: [CPID] },\n ]);\n}\n\nasync function writeFixture() {\n const now = new Date().toISOString();\n await sqlite.batch([\n { sql: `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title, message_count=excluded.message_count, content_text=excluded.content_text, imported_at=excluded.imported_at`,\n args: [CID, \"Fixture V0.2\", 1, 2, 2, 64, 64, \"[USER]\\nalpha kernel\\n\\n[ASSISTANT]\\nbeta timeout\", 0, \"selftest\", now] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m1`, CID, 0, \"user\", 1, \"alpha kernel\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m1`, CID, \"Fixture V0.2\", \"user\", \"alpha kernel\"] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m2`, CID, 1, \"assistant\", 2, \"beta timeout\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m2`, CID, \"Fixture V0.2\", \"assistant\", \"beta timeout\"] },\n { sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET summary=excluded.summary, updated_at=excluded.updated_at`,\n args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\", CID, \"SYNTHETIC\", now, now] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)\", args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\"] },\n ]);\n}\n\nlet result: Record = {};\ntry {\n await cleanup();\n await writeFixture();\n await writeFixture(); // idempotency/reindex replay\n\n const counts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages WHERE conversation_id = ?\", args: [CID] });\n const ftsCounts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] });\n const hit = await sqlite.execute({ sql: \"SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? AND conversation_id = ?\", args: ['\"kernel\"*', CID] });\n const negative = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?\", args: ['\"notpresent987\"*'] });\n const cp = await sqlite.execute({ sql: \"SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?\", args: ['\"gamma\"*'] });\n\n result = {\n pass: Number((counts.rows[0] as any)?.c) === 2\n && Number((ftsCounts.rows[0] as any)?.c) === 2\n && (hit.rows[0] as any)?.conversation_id === CID\n && Number((negative.rows[0] as any)?.c) === 0\n && (cp.rows[0] as any)?.checkpoint_id === CPID,\n messagesAfterReplay: Number((counts.rows[0] as any)?.c ?? -1),\n ftsRowsAfterReplay: Number((ftsCounts.rows[0] as any)?.c ?? -1),\n positiveSearch: hit.rows,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n checkpointSearch: cp.rows,\n };\n} finally {\n await cleanup();\n}\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[254],"5ce3fa1c-7f20-4058-92ca-b68d86400af1","payana_seed_v1.ts","8bfbcb7a-aaf8-11f1-85bc-1607ee4eb77e",["D",1788811990209],"import { getActiveDatabase } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst now = new Date().toISOString();\n\nawait db.batch([\n { sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"current_checkpoint\",JSON.stringify({id:\"cp_payana_20260907_1703_brt\",status:\"DURABLE_RECOVERY_PASS_WITH_OPEN_PROVENANCE_GAP\",doNotRestart:true}),\"VERIFIED_DURABLE_CHECKPOINT\",\"cp_payana_20260907_1703_brt\",now,now] },\n { sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"execution_plane\",JSON.stringify({candidate:\"chat-native-maestro\",softwareState:\"READY\",browserProviderState:\"NOT_OPERATIONAL\",kernelCredential:false,browserlessCredential:false,liveProviderAttempts:0}),\"VERIFIED_RUNTIME_2026_09_07\",\"Val Town runtime census 2026-09-07\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"termmax_immunefi\",\"TermMax / Immunefi bug bounty\",\"Immunefi\",\"https://immunefi.com/bug-bounty/termstructurelabs/information/\",\"ACTIVE\",\"500\",\"80000\",\"USD\",\"NO_KYC\",\"ZERO_CAPITAL_RESEARCH_PATH\",null,JSON.stringify([\"PoC required\",\"No mainnet/public-testnet testing\",\"No DoS\",\"No significant automated traffic\",\"Respect in-scope assets\"]),now,\"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\"Immunefi official program page\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"blockpi_immunefi\",\"BlockPI Network / Immunefi bug bounty\",\"Immunefi\",\"https://immunefi.com/bug-bounty/blockpinetwork/information/\",\"ACTIVE\",\"1000\",\"5000\",\"USD\",\"NO_KYC\",\"ZERO_CAPITAL_RESEARCH_PATH\",null,JSON.stringify([\"PoC with code/end-effect required\",\"No mainnet/public-testnet testing\",\"No DoS\",\"No significant automated traffic\",\"Respect in-scope assets\"]),now,\"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\"Immunefi official program page\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"binance_agent_os_2026\",\"Binance Agent OS Mini Hackathon\",\"Binance\",null,\"ACTIVE_DEADLINE_SOON\",\"300\",\"2000\",\"USD\",\"ACCOUNT_ELIGIBILITY_UNVERIFIED\",\"TRACK_A_ZERO_CAPITAL_COMPATIBLE\",\"2026-09-08T23:59:00Z\",JSON.stringify([\"Track A social/submission steps required\",\"Track B trading is not treated as zero-capital\",\"Country/account eligibility must be proven\"]),now,\"OFFICIAL_SOURCE_VERIFIED_ELIGIBILITY_PARTIAL\",\"Binance official announcement\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"opencv_ai_2026\",\"OpenCV AI Competition 2026 / AWS\",\"Devpost\",null,\"ACTIVE\",\"150\",\"5000\",\"USD\",\"RULES_DEPENDENT\",\"ZERO_CAPITAL_BUILD_PATH\",\"2026-10-27T06:45:00Z\",JSON.stringify([\"Submission and eligibility rules apply\",\"Total pool includes AWS compute grants\"]),now,\"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\"OpenCV Devpost official competition page\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"bountybook_current\",\"BountyBook current availability\",\"BountyBook\",\"https://www.bountybook.ai/\",\"NO_OPEN_BOUNTIES\",null,null,\"USDC\",null,\"ZERO_CAPITAL_MARKETPLACE_PATH\",null,JSON.stringify([\"Early beta\",\"0 open bounties at current checkpoint\"]),now,\"OFFICIAL_CURRENT_STATE_PLUS_RECOVERY_GAP\",\"BountyBook official homepage\",now,now] },\n { sql: `INSERT INTO payana_economic_events(id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,event_type=excluded.event_type,amount_decimal=excluded.amount_decimal,currency=excluded.currency,platform=excluded.platform,occurred_at=excluded.occurred_at,external_ref=excluded.external_ref,evidence_state=excluded.evidence_state,evidence_refs_json=excluded.evidence_refs_json,notes=excluded.notes,updated_at=excluded.updated_at`,\n args:[\"REV-000001\",null,\"REVENUE\",\"0.01\",\"USD\",null,null,null,\"USER_CONFIRMED_RECEIPT_UNVERIFIED\",JSON.stringify([\"cp_payana_20260907_1641_brt\",\"payana_revenue_rev_000001\"]),\"First real non-zero revenue confirmed by user. Platform/task/transaction/timestamp remain unrecovered.\",now,now] },\n { sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET subject_type=excluded.subject_type,subject_id=excluded.subject_id,receipt_type=excluded.receipt_type,locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args:[\"receipt-gap-REV-000001\",\"economic_event\",\"REV-000001\",\"PROVENANCE_GAP\",null,null,JSON.stringify({missing:[\"platform\",\"opportunity_or_task\",\"transaction_id\",\"timestamp\",\"balance_or_payout_evidence\"]}),\"MISSING_EVIDENCE\",null,now,now] },\n]);\n\nconst counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM payana_state) AS state_items,\n (SELECT COUNT(*) FROM payana_opportunities) AS opportunities,\n (SELECT COUNT(*) FROM payana_economic_events) AS economic_events,\n (SELECT COUNT(*) FROM payana_receipts) AS receipts`);\nconst rev = await db.execute({sql:`SELECT id,amount_decimal,currency,evidence_state FROM payana_economic_events WHERE id=?`,args:[\"REV-000001\"]});\nconst gap = await db.execute({sql:`SELECT id,verification_state FROM payana_receipts WHERE id=?`,args:[\"receipt-gap-REV-000001\"]});\nconst pass = rev.rows.length === 1 && String((rev.rows[0] as any).amount_decimal) === \"0.01\" && String((gap.rows[0] as any)?.verification_state) === \"MISSING_EVIDENCE\";\nconst result = {pass,schemaVersion:\"payana-ledger-1.0.0\",counts:counts.rows[0],rev000001:rev.rows[0],provenanceGap:gap.rows[0]};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[261],"f8dff9b0-43c1-4778-ac6d-e4edf8553eb2","payana_schema_migrate.ts","8bfbb5ea-aaf8-11f1-85bc-1607ee4eb77e",["D",1788811990209],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nawait db.batch([\n { sql: `CREATE TABLE IF NOT EXISTS payana_state (\n key TEXT PRIMARY KEY,\n value_json TEXT NOT NULL,\n evidence_state TEXT NOT NULL,\n source_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_opportunities (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n platform TEXT,\n url TEXT,\n status TEXT NOT NULL,\n reward_min_decimal TEXT,\n reward_max_decimal TEXT,\n currency TEXT,\n kyc_state TEXT,\n capital_state TEXT,\n deadline_at TEXT,\n constraints_json TEXT NOT NULL DEFAULT '[]',\n currentness_at TEXT,\n evidence_state TEXT NOT NULL,\n source_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_opportunities_status ON payana_opportunities(status, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_opportunities_platform ON payana_opportunities(platform, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_economic_events (\n id TEXT PRIMARY KEY,\n opportunity_id TEXT,\n event_type TEXT NOT NULL,\n amount_decimal TEXT NOT NULL,\n currency TEXT NOT NULL,\n platform TEXT,\n occurred_at TEXT,\n external_ref TEXT,\n evidence_state TEXT NOT NULL,\n evidence_refs_json TEXT NOT NULL DEFAULT '[]',\n notes TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_economic_events_opportunity ON payana_economic_events(opportunity_id, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_economic_events_type ON payana_economic_events(event_type, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_actions (\n id TEXT PRIMARY KEY,\n opportunity_id TEXT,\n action_type TEXT NOT NULL,\n status TEXT NOT NULL,\n risk_class TEXT NOT NULL,\n approval_state TEXT NOT NULL,\n reversible INTEGER NOT NULL CHECK(reversible IN (0,1)),\n input_summary TEXT,\n output_summary TEXT,\n receipt_id TEXT,\n started_at TEXT,\n finished_at TEXT,\n evidence_state TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_actions_opportunity ON payana_actions(opportunity_id, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_actions_status ON payana_actions(status, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_receipts (\n id TEXT PRIMARY KEY,\n subject_type TEXT NOT NULL,\n subject_id TEXT NOT NULL,\n receipt_type TEXT NOT NULL,\n locator TEXT,\n sha256 TEXT,\n payload_json TEXT NOT NULL DEFAULT '{}',\n verification_state TEXT NOT NULL,\n verified_at TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_receipts_subject ON payana_receipts(subject_type, subject_id, updated_at)` },\n]);\n\nconst tables = await db.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'payana_%' ORDER BY name`);\nconst expected = new Set([\"payana_actions\",\"payana_economic_events\",\"payana_opportunities\",\"payana_receipts\",\"payana_state\"]);\nconst found = new Set((tables.rows as any[]).map((r) => String(r.name)));\nconst pass = storage.activeProvider === \"turso\" && [...expected].every((name) => found.has(name));\nconst result = { pass, schemaVersion: \"payana-ledger-1.0.0\", activeProvider: storage.activeProvider, tables: [...found] };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[267],"6966e120-6bda-4d18-b4d7-78cb5c94d07e","payana_negative_controls.ts","8bfba834-aaf8-11f1-85bc-1607ee4eb77e",["D",1788811990209],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst cases = [\n { id:\"payana_neg_bad_decimal_v1\", action:\"payana_economic_upsert\", payload:{id:\"NEG-ECO-1\",eventType:\"REVENUE\",amount:\"0.01USD\",currency:\"USD\",evidenceState:\"TEST\"}, expected:\"INVALID_DECIMAL_STRING\" },\n { id:\"payana_neg_http_url_v1\", action:\"payana_opportunity_upsert\", payload:{id:\"NEG-OPP-1\",title:\"negative\",url:\"http://example.com\",status:\"TEST\",evidenceState:\"TEST\"}, expected:\"HTTPS_URL_REQUIRED\" },\n { id:\"payana_neg_bad_sha_v1\", action:\"payana_receipt_upsert\", payload:{id:\"NEG-REC-1\",subjectType:\"economic_event\",subjectId:\"REV-000001\",receiptType:\"TEST\",sha256:\"not-a-sha\",verificationState:\"TEST\"}, expected:\"INVALID_SHA256\" },\n];\n\nfor (const c of cases) {\n await control.execute({sql:`INSERT INTO vault_bridge_requests(id,created_at,updated_at,status,action,payload_json,result_json,error,attempt_count)\n VALUES(?,datetime('now'),datetime('now'),'PENDING',?,?,NULL,NULL,0)\n ON CONFLICT(id) DO UPDATE SET status='PENDING',action=excluded.action,payload_json=excluded.payload_json,result_json=NULL,error=NULL,attempt_count=0,updated_at=datetime('now')`,args:[c.id,c.action,JSON.stringify(c.payload)]});\n}\nconsole.log(JSON.stringify({queued:cases.map(c=>({id:c.id,expected:c.expected})),note:\"Run vault_bridge.ts three times on payana-ledger-v1, then inspect statuses\"}));\nexport default cases;\n",[273],"99dc2c52-f8f1-49da-ba55-7272eba52cfd","payana_bridge_selftest.ts","8bfb9812-aaf8-11f1-85bc-1607ee4eb77e",["D",1788811990209],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst id = \"payana_selftest_snapshot_v1\";\nawait control.execute(`CREATE TABLE IF NOT EXISTS vault_bridge_requests (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n status TEXT NOT NULL,\n action TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n result_json TEXT,\n error TEXT,\n attempt_count INTEGER NOT NULL DEFAULT 0\n)`);\nawait control.execute({sql:`INSERT INTO vault_bridge_requests(id,created_at,updated_at,status,action,payload_json,result_json,error,attempt_count)\n VALUES(?,datetime('now'),datetime('now'),'PENDING','payana_snapshot','{\"limit\":20}',NULL,NULL,0)\n ON CONFLICT(id) DO UPDATE SET status='PENDING',action='payana_snapshot',payload_json='{\"limit\":20}',result_json=NULL,error=NULL,attempt_count=0,updated_at=datetime('now')`,args:[id]});\n\nconsole.log(JSON.stringify({queued:true,id,next:\"run vault_bridge.ts on payana-ledger-v1\"}));\nexport default {queued:true,id};\n",[279],"bb528582-8757-462f-a03b-32831480fd42","payana_bountybook_watch_cron.ts","f66ae648-aaf9-11f1-ba8c-1607ee4eb77e",19,["D",1788812627394],"interval","import watch from \"./payana_bountybook_watch.ts\";\n\nexport default async function (_interval: { lastRunAt?: Date }) {\n console.log(JSON.stringify({\n scheduler: \"payana_bountybook_watch\",\n watchStatus: watch?.status ?? \"UNKNOWN\",\n watchState: watch?.state ?? \"UNKNOWN\",\n checkedAt: watch?.checkedAt ?? null,\n }));\n return watch;\n}\n",[285],"c1547799-6fb7-40be-8a15-bceae82c815a","payana_bountybook_watch.ts","f66b07ae-aaf9-11f1-ba8c-1607ee4eb77e",18,["D",1788812598244],"import { getActiveDatabase } from \"./lib/storage_provider.ts\";\n\ntype Job = Record;\nconst db = getActiveDatabase();\nconst API = \"https://api.bountybook.ai\";\nconst HOME = \"https://www.bountybook.ai/\";\nconst MAX_PAGES = 10;\nconst PAGE_SIZE = 100;\n\nfunction text(v: unknown, max = 500) {\n return typeof v === \"string\" ? v.replace(/\\s+/g, \" \").trim().slice(0, max) : \"\";\n}\nfunction finite(v: unknown, fallback = 0) {\n const n = Number(v);\n return Number.isFinite(n) ? n : fallback;\n}\nasync function fetchText(url: string, accept: string) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 10_000);\n try {\n const r = await fetch(url, { method:\"GET\", headers:{ Accept:accept, \"User-Agent\":\"PayAna-ReadOnly-BountyBook-Watch/1.0\" }, signal:controller.signal });\n const body = await r.text();\n if (!r.ok) throw new Error(`HTTP_${r.status}_${new URL(url).hostname}`);\n return body;\n } finally { clearTimeout(timer); }\n}\nasync function fetchJson(url: string) {\n const raw = await fetchText(url, \"application/json\");\n try { return JSON.parse(raw); } catch { throw new Error(\"INVALID_JSON\"); }\n}\nasync function fetchAllOpen() {\n const first = await fetchJson(`${API}/jobs?status=open&limit=${PAGE_SIZE}&page=1`);\n if (!Array.isArray(first?.jobs) || !Number.isFinite(Number(first?.total)) || !Number.isFinite(Number(first?.totalPages))) throw new Error(\"INVALID_JOBS_SHAPE\");\n const totalPages = Math.max(1, Number(first.totalPages));\n const pagesRead = Math.min(totalPages, MAX_PAGES);\n const all: Job[] = [...first.jobs];\n for (let p=2; p<=pagesRead; p++) {\n const body = await fetchJson(`${API}/jobs?status=open&limit=${PAGE_SIZE}&page=${p}`);\n if (!Array.isArray(body?.jobs)) throw new Error(`INVALID_JOBS_PAGE_${p}`);\n all.push(...body.jobs);\n }\n return { reportedTotal:Number(first.total), totalPages, pagesRead, jobs:[...new Map(all.map(j=>[String(j.id),j])).values()] };\n}\nfunction homeOpenCount(html: string) {\n const normalized = html.replace(/<[^>]*>/g,\" \").replace(/ /g,\" \").replace(/\\s+/g,\" \");\n const m = normalized.match(/([0-9][0-9,]*)\\s+open/i);\n return m ? Number(m[1].replaceAll(\",\",\"\")) : null;\n}\nfunction compactJob(job: Job) {\n return {\n id:String(job.id ?? \"\"),\n title:text(job.title,180),\n budget_usdc:text(String(job.budget_usdc ?? \"\"),40),\n job_type:text(job.job_type,80),\n difficulty:text(job.difficulty,80),\n estimated_minutes:finite(job.estimated_minutes,0),\n contract_job_id:finite(job.contract_job_id,0),\n payout_status:text(job.payout_status,80),\n flagged:finite(job.flagged,0),\n created_at:finite(job.created_at,0),\n updated_at:finite(job.updated_at,0),\n };\n}\n\nconst checkedAt = new Date().toISOString();\nlet watch: any;\ntry {\n const [homeHtml, open, health] = await Promise.all([\n fetchText(HOME,\"text/html\"),\n fetchAllOpen(),\n fetchJson(`${API}/health`),\n ]);\n const jobs = open.jobs;\n const apiOpen = jobs.length;\n const pageComplete = open.totalPages <= MAX_PAGES && apiOpen === open.reportedTotal;\n const homeOpen = homeOpenCount(homeHtml);\n const contractPositive = jobs.filter(j=>finite(j.contract_job_id,0)>0 && !finite(j.flagged,0));\n const openBudget = jobs.reduce((sum,j)=>sum+finite(j.budget_usdc,0),0);\n const treasury = finite(health?.escrow?.treasury_usdc,NaN);\n const failedPayouts = finite(health?.escrow?.failed_payouts,0);\n const pendingPayouts = finite(health?.escrow?.pending_payouts,0);\n const topApiRows = [...jobs]\n .filter(j=>!finite(j.flagged,0))\n .sort((a,b)=>finite(b.budget_usdc,0)-finite(a.budget_usdc,0))\n .slice(0,10).map(compactJob);\n\n let state = \"SURFACE_DIVERGENCE_UNRESOLVED\";\n if (!pageComplete) state = \"PARTIAL_API_CENSUS\";\n else if ((homeOpen ?? 0) > 0 || contractPositive.length > 0) state = \"POTENTIAL_LIVE_OPEN_NEEDS_CASE_AUDIT\";\n else if (homeOpen === 0 && apiOpen > 0 && contractPositive.length === 0) state = \"API_OPEN_ROWS_NOT_ESCROW_VERIFIED\";\n else if (homeOpen === 0 && apiOpen === 0) state = \"NO_OPEN_BOUNTIES_CONFIRMED\";\n\n watch = {\n status:\"PASS\", checkedAt, state,\n homepageOpenCount:homeOpen,\n apiReportedOpen:open.reportedTotal,\n apiEnumeratedOpen:apiOpen,\n apiPages:open.totalPages,\n apiCensusComplete:pageComplete,\n contractJobIdPositive:contractPositive.length,\n openBudgetUsdc:Math.round(openBudget*100)/100,\n treasuryUsdc:Number.isFinite(treasury)?treasury:null,\n openBudgetToTreasuryRatio:Number.isFinite(treasury)&&treasury>0?Math.round((openBudget/treasury)*100)/100:null,\n failedPayouts,pendingPayouts,\n healthJobs:finite(health?.jobs,0),\n topApiRows,\n invariant:\"API_STATUS_OPEN != ESCROW_FUNDED_OPEN; FETCH_FAIL != ZERO_OPEN\",\n };\n\n const previous = await db.execute({sql:`SELECT value_json FROM payana_state WHERE key=? LIMIT 1`,args:[\"bountybook_watch\"]});\n let previousState:any=null;\n try { previousState = previous.rows.length ? JSON.parse(String((previous.rows[0] as any).value_json)) : null; } catch {}\n const changed = !previousState || previousState.state !== watch.state || previousState.homepageOpenCount !== watch.homepageOpenCount || previousState.apiReportedOpen !== watch.apiReportedOpen || previousState.contractJobIdPositive !== watch.contractJobIdPositive || previousState.treasuryUsdc !== watch.treasuryUsdc;\n\n const statements:any[] = [\n {sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"bountybook_watch\",JSON.stringify(watch),\"LIVE_RUNTIME_CENSUS\",`${HOME} + ${API}/jobs + ${API}/health`,checkedAt,checkedAt]},\n {sql:`UPDATE payana_opportunities SET status=?,currentness_at=?,evidence_state=?,source_ref=?,updated_at=? WHERE id='bountybook_current'`,\n args:[watch.state,checkedAt,\"LIVE_SURFACE_RECONCILED\",`${HOME} + ${API}/jobs + ${API}/health`,checkedAt]},\n ];\n if (changed) {\n const actionId = `bountybook-watch-change-${checkedAt.replace(/[^0-9]/g,\"\").slice(0,14)}`;\n statements.push({sql:`INSERT OR IGNORE INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[actionId,\"bountybook_current\",\"MONITOR_CHANGE\",\"PASS\",\"read_only\",\"NOT_REQUIRED\",1,\"BountyBook public read-only surfaces\",JSON.stringify({previous:previousState?{state:previousState.state,homepageOpenCount:previousState.homepageOpenCount,apiReportedOpen:previousState.apiReportedOpen,contractJobIdPositive:previousState.contractJobIdPositive,treasuryUsdc:previousState.treasuryUsdc}:null,current:{state:watch.state,homepageOpenCount:watch.homepageOpenCount,apiReportedOpen:watch.apiReportedOpen,contractJobIdPositive:watch.contractJobIdPositive,treasuryUsdc:watch.treasuryUsdc}}),null,checkedAt,checkedAt,\"LIVE_RUNTIME_CHANGE_RECEIPT\",checkedAt,checkedAt]});\n }\n await db.batch(statements);\n} catch (error) {\n const message = error instanceof Error ? error.message.slice(0,500) : String(error).slice(0,500);\n watch = {status:\"FAIL\",checkedAt,state:\"FETCH_FAIL\",error:message,invariant:\"FETCH_FAIL != ZERO_OPEN; last known opportunity state is preserved\"};\n await db.execute({sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[\"bountybook_watch\",JSON.stringify(watch),\"FETCH_FAIL_PRESERVE_LAST_KNOWN\",\"BountyBook public surfaces\",checkedAt,checkedAt]});\n}\nconsole.log(JSON.stringify(watch));\nexport default watch;\n",[293],"de67454e-e9dd-40ee-8f08-19767637c3d9","payana_binance_submission_ready_checkpoint.ts","9c10aa8a-ab0c-11f1-99a5-1607ee4eb77e",27,["D",1788820607113],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_submission_ready_20260907_1936_brt\";\n\nconst submissionState = {\n status: \"TECHNICAL_PASS_DURABLE_BACKUP_PASS_HUMAN_ACCOUNT_GATES_ONLY\",\n productionVal: \"cleitoncosta/payana-binance-agent-os\",\n productionUrl: \"https://payana-agent-os.val.run/\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n finalTechnicalAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n total: 224,\n auditedAt: \"2026-09-07T22:31:20.817Z\",\n },\n concurrencyRegression: {\n failureClass: \"SQLITE_BUSY_CONCURRENT_OAUTH_STATE_CONSUMPTION\",\n control: \"ATOMIC_DELETE_RETURNING_PLUS_BOUNDED_BUSY_RETRY\",\n repeatedStorageRunsAfterFix: 5,\n result: \"PASS\",\n },\n productionPostFix: {\n health: \"PASS_200\",\n analyzeBTCUSDT: \"PASS_200_THREE_SOURCE_RECEIPTS\",\n pendingOauthStates: 0,\n },\n detachedBackup: {\n val: \"cleitoncosta/payana-agent-os-rc1-backup-20260907\",\n createdAt: \"2026-09-07T22:33:02.412Z\",\n independentAudit: \"224_CHECKS_PASS\",\n independentAuditAt: \"2026-09-07T22:33:24.118Z\",\n pendingOauthStates: 0,\n },\n submissionPackage: \"docs/SUBMISSION_PACKAGE.md\",\n officialDeadline: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\",\n remainingGates: [\n \"Confirm eligibility/account conditions\",\n \"Complete supported-client Binance Agent OS MCP Market Data connection proof if feasible\",\n \"Record final demo/video\",\n \"Publish GitHub mirror only if desired/applicable\",\n \"Follow @Binance and repost official announcement\",\n \"Reply or quote-repost with Track A submission\",\n \"Complete official Binance survey\",\n \"Persist final external receipts/URLs in PayAna ledger\",\n ],\n prohibitedClaimsUntilReceipted: [\n \"MCP_SESSION_AUTHORIZED\",\n \"CIMD_ACCEPTED_BY_PROVIDER\",\n \"X_SUBMISSION_COMPLETE\",\n \"SURVEY_COMPLETE\",\n \"GITHUB_PUBLISHED\",\n \"ELIGIBILITY_CONFIRMED\",\n ],\n doNotRestartTechnicalBuild: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: submissionState.status,\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a_submission\",\n technicalRelease: \"payana-market-sentinel-1.2.0-rc1\",\n technicalReleaseState: \"PASS_224_PLUS_DETACHED_BACKUP_PASS\",\n nextAction: \"Do only external/human-account submission gates and record their receipts. Reopen technical code only if a new defect or requirement is proven.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_submission_package\", JSON.stringify(submissionState), \"VERIFIED_TECHNICAL_AND_BACKUP_EXTERNAL_GATES_OPEN\", \"cleitoncosta/payana-binance-agent-os@main:docs/SUBMISSION_PACKAGE.md\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n]);\n\nconst rows = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?) ORDER BY key\", args: [\"binance_submission_package\", \"current_checkpoint\"] });\nconst pass = storage.activeProvider === \"turso\" && rows.rows.length === 2;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: rows.rows };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_SUBMISSION_CHECKPOINT_FAILED\");\nexport default result;\n",[300],"a996ef4c-2a1a-4cd1-a96d-67db4345b3c6","payana_binance_final_freeze_checkpoint.ts","1919b912-ab0e-11f1-85a7-1607ee4eb77e",28,["D",1788821246407],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_track_a_freeze_20260907_1947_brt\";\nconst productionVal = \"cleitoncosta/payana-binance-agent-os\";\nconst frozenVal = \"cleitoncosta/payana-agent-os-track-a-frozen-20260907\";\nconst manifestSha256 = \"04e90a79de4f5c5f48029c6adc9b4120e769f2c68d338b92607691b903eea513\";\n\nconst freeze = {\n status: \"BINANCE_TRACK_A_TECHNICAL_FREEZE_PASS_EXTERNAL_HUMAN_GATES_ONLY\",\n productionVal,\n productionUrl: \"https://payana-agent-os.val.run/\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n finalMainAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n total: 224,\n auditedAt: \"2026-09-07T22:46:11.240Z\",\n pendingOauthStatesAfterAudit: 0,\n },\n frozenBackup: {\n val: frozenVal,\n createdAt: \"2026-09-07T22:46:30.625Z\",\n independentAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-07T22:46:46.781Z\" },\n pendingOauthStatesAfterAudit: 0,\n databaseContentsCopied: false,\n },\n submissionEvidence: {\n url: \"https://payana-agent-os.val.run/api/submission-evidence\",\n schema: \"payana-submission-evidence-1.0.0\",\n manifestSha256,\n status: \"PASS\",\n },\n officialCurrentness: {\n checkedAt: \"2026-09-07\",\n deadlineUtc: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\",\n hackathon: \"https://www.binance.com/en/blog/community/8802181509900814931\",\n agentOs: \"https://www.binance.com/en/agent-os\",\n mcpDocs: \"https://developers.binance.com/en/docs/agent-native/mcp-server/agentic\",\n marketDataCapability: \"PUBLIC_NO_AUTH_AT_CAPABILITY_LEVEL\",\n mcpConnectionObserved: \"AUTH_GATED\",\n participantEligibility: \"UNVERIFIED\",\n },\n remainingExternalGates: [\n \"PARTICIPANT_ACCOUNT_ELIGIBILITY\",\n \"SUPPORTED_CLIENT_MCP_MARKET_DATA_WITNESS\",\n \"FINAL_VIDEO\",\n \"X_FOLLOW_AND_REPOST\",\n \"X_TRACK_A_SUBMISSION\",\n \"BINANCE_SURVEY_COMPLETION\",\n ],\n doNotRestartTechnicalBuild: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: freeze.status,\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a_external_submission_gates\",\n technicalRelease: freeze.release,\n productionAudit: \"224_PASS\",\n detachedFrozenBackupAudit: \"224_PASS\",\n nextAction: \"Complete only external participant/MCP/video/X/survey gates and persist actual receipts. Reopen technical code only for a proven new defect or requirement.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_track_a_final_freeze\", JSON.stringify(freeze), \"VERIFIED_PRODUCTION_PLUS_INDEPENDENT_FROZEN_BACKUP\", productionVal, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_final_backup\", JSON.stringify(freeze.frozenBackup), \"VERIFIED_DETACHED_BACKUP_RUNTIME_TESTED\", frozenVal, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_official_currentness_20260907\", JSON.stringify(freeze.officialCurrentness), \"OFFICIAL_DOCS_VERIFIED_WITH_ACCOUNT_GATE_OPEN\", freeze.officialCurrentness.hackathon, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET status=?, currentness_at=?, evidence_state=?, source_ref=?, updated_at=? WHERE id=?`,\n args: [\"ACTIVE_TECHNICAL_FROZEN_EXTERNAL_GATES_ONLY\", now, \"OFFICIAL_RULES_PLUS_FINAL_TECHNICAL_FREEZE\", freeze.officialCurrentness.hackathon, now, \"binance_agent_os_2026\"],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\"binance_track_a_final_freeze\", \"binance_agent_os_2026\", \"TECHNICAL_FREEZE\", \"PASS\", \"LOW_READ_ONLY_BUILD\", \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\", 1, \"Reconcile final production, submission evidence and detached backup before external submission gates.\", \"Production 224/224-equivalent checks PASS; OAuth pending states 0; frozen detached backup independently 224 PASS; machine-readable manifest PASS.\", \"receipt-binance-track-a-final-freeze\", \"2026-09-07T22:40:42.949Z\", \"2026-09-07T22:46:46.781Z\", \"VERIFIED_RUNTIME_AND_BACKUP\", now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-submission-manifest\", \"opportunity\", \"binance_agent_os_2026\", \"MACHINE_READABLE_SUBMISSION_MANIFEST\", freeze.submissionEvidence.url, manifestSha256, JSON.stringify(freeze.submissionEvidence), \"VERIFIED_RUNTIME\", now, now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-track-a-final-freeze\", \"action\", \"binance_track_a_final_freeze\", \"FINAL_TECHNICAL_FREEZE_RECEIPT\", productionVal, null, JSON.stringify({ productionAudit: freeze.finalMainAudit, frozenBackup: freeze.frozenBackup, manifestSha256 }), \"VERIFIED_RUNTIME_AND_BACKUP\", now, now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-final-frozen-backup\", \"action\", \"binance_track_a_final_freeze\", \"DETACHED_FROZEN_VAL_RECEIPT\", frozenVal, null, JSON.stringify(freeze.frozenBackup), \"VERIFIED_RUNTIME\", now, now, now],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?,?,?) ORDER BY key\", args: [\"binance_track_a_final_freeze\", \"binance_agent_os_final_backup\", \"binance_official_currentness_20260907\", \"current_checkpoint\"] });\nconst receipts = await db.execute({ sql: \"SELECT id,verification_state,locator,sha256 FROM payana_receipts WHERE id IN (?,?,?) ORDER BY id\", args: [\"receipt-binance-submission-manifest\", \"receipt-binance-track-a-final-freeze\", \"receipt-binance-final-frozen-backup\"] });\nconst opp = await db.execute({ sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\", args: [\"binance_agent_os_2026\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 4 && receipts.rows.length === 3 && opp.rows.length === 1;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: state.rows, receipts: receipts.rows, opportunity: opp.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_FINAL_FREEZE_CHECKPOINT_FAILED\");\nexport default result;\n",[307],"d72b37a5-0d86-4cda-9238-0ea10c479706",["D",1788821291119],[27],"b7be2e54-3596-4d15-ba88-ee999520daf7","payana_binance_checkpoint_v2.ts","01a07e00-201d-7616-af8a-c0b05dfac396",25,["D",1788820364423],4,"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_agent_os_20260907_1932_brt\";\n\nconst trackState = {\n workstream: \"Binance Agent OS Mini Hackathon — Track A\",\n status: \"TECHNICAL_RC_PASS_EXTERNAL_GATES_REMAIN\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n val: \"cleitoncosta/payana-binance-agent-os\",\n demoUrl: \"https://payana-agent-os.val.run/\",\n releaseAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n totalExecutedChecks: 224,\n auditedAt: \"2026-09-07T22:31:20.817Z\",\n concurrencyFix: \"OAUTH_STATE_CONSUME_ATOMIC_DELETE_RETURNING_SQLITE_BUSY_RETRY_PASS_5X\",\n },\n marketEvidence: {\n provider: \"Binance public Spot market-data surface via data-api.binance.vision\",\n liveProductionEvidence: \"PASS\",\n hardBoundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n },\n oauthMcp: {\n cimdUrl: \"https://payana-agent-os.val.run/oauth/client-metadata.json\",\n pkce: \"S256\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n stateTtlMinutes: 10,\n pendingStateCap: 500,\n unauthenticatedTransportProbe: {\n serverDiscover: \"HTTP_200_JSONRPC_METHOD_NOT_FOUND\",\n toolsList: \"HTTP_401_OAUTH_RESOURCE_METADATA\",\n conclusion: \"MCP_CONNECTION_AUTH_GATED\",\n },\n authorizationSurfaceProbe: {\n status: \"PARTIAL\",\n httpStatus: 202,\n blocker: \"BINANCE_JAVASCRIPT_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientEvidenceObserved: false,\n },\n },\n externalGates: [\n \"Real Binance Agent OS MCP connection proof in a supported MCP client\",\n \"Final video/screen recording\",\n \"GitHub mirror if used/applicable\",\n \"Follow/repost and Track A X submission\",\n \"Official Binance survey completion\",\n \"Eligibility/account conditions confirmation\",\n ],\n doNotRestart: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: \"DURABLE_RECOVERY_PASS_WITH_BINANCE_RC1_AND_OPEN_EXTERNAL_GATES\",\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a\",\n nextAction: \"Complete only remaining external/human proof gates; do not rebuild the technical RC from scratch.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_track_a\", JSON.stringify(trackState), \"VERIFIED_LIVE_RC_EXTERNAL_GATES_OPEN\", \"cleitoncosta/payana-binance-agent-os@main\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET url=?,status=?,constraints_json=?,currentness_at=?,evidence_state=?,source_ref=?,updated_at=? WHERE id=?`,\n args: [\n \"https://www.binance.com/en/blog/community/8802181509900814931\",\n \"ACTIVE_TECHNICAL_RC_READY_EXTERNAL_GATES\",\n JSON.stringify([\n \"Track A deadline 2026-09-08T23:59:00Z\",\n \"Video or demo plus GitHub if applicable\",\n \"Follow @Binance and repost official announcement\",\n \"Reply or quote-repost with Track A submission\",\n \"Complete official survey\",\n \"Eligibility/account/regional conditions must be confirmed\",\n \"PayAna demo must remain read-only; Account/Trade/Transfer not required\",\n ]),\n now,\n \"OFFICIAL_RULES_PLUS_VERIFIED_LIVE_RC\",\n \"Binance official hackathon announcement + PayAna Val Town runtime\",\n now,\n \"binance_agent_os_2026\",\n ],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_rc1_release_audit\",\n \"binance_agent_os_2026\",\n \"TECHNICAL_RELEASE_AUDIT\",\n \"PASS\",\n \"LOW_READ_ONLY_BUILD\",\n \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\",\n 1,\n \"Harden and falsify PayAna Track A technical candidate without trading/account authority.\",\n \"1.2.0-rc1 live; 189 assertions + 35 rate-limit mutation steps = 224 PASS. OAuth/CIMD/PKCE and state replay controls added. Reproduced SQLITE_BUSY race fixed with atomic DELETE RETURNING + bounded busy retry; OAuth-state concurrency passed 5 consecutive executions. No automatic MCP tool call.\",\n \"receipt-binance-agent-os-rc1\",\n \"2026-09-07T20:48:00Z\",\n \"2026-09-07T22:31:20.817Z\",\n \"VERIFIED_RUNTIME_TESTS\",\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-rc1\",\n \"action\",\n \"binance_agent_os_rc1_release_audit\",\n \"LIVE_RUNTIME_RELEASE_RECEIPT\",\n \"https://payana-agent-os.val.run/\",\n null,\n JSON.stringify({\n release: \"1.2.0-rc1\",\n checks: { assertions: 189, mutationSteps: 35, total: 224, pass: true },\n productionHealth: \"PASS\",\n productionAnalyzeBTCUSDT: \"PASS_3_OF_3_SOURCES_AT_POST_MERGE_CHECKPOINT\",\n oauthStatus: \"READY_FOR_USER_AUTHORIZATION\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n pendingOAuthStatesAfterTests: 0,\n }),\n \"VERIFIED_RUNTIME\",\n now,\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-provider-gate\",\n \"opportunity\",\n \"binance_agent_os_2026\",\n \"EXTERNAL_PROVIDER_GATE\",\n \"https://accounts.binance.com/agentic-oauth/authorize\",\n null,\n JSON.stringify({\n authorizationSurfaceProbe: \"HTTP_202_JS_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientLikeErrorObserved: false,\n cimdAcceptance: \"UNVERIFIED\",\n realMcpConnection: \"UNVERIFIED\",\n classification: \"PARTIAL_EXTERNAL_HUMAN_BROWSER_GATE\",\n }),\n \"PARTIAL_EXTERNAL_GATE\",\n now,\n now,\n now,\n ],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?) ORDER BY key\", args: [\"binance_agent_os_track_a\", \"current_checkpoint\"] });\nconst opp = await db.execute({ sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\", args: [\"binance_agent_os_2026\"] });\nconst receipts = await db.execute({ sql: \"SELECT id,verification_state FROM payana_receipts WHERE id IN (?,?) ORDER BY id\", args: [\"receipt-binance-agent-os-rc1\", \"receipt-binance-agent-os-provider-gate\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 2 && opp.rows.length === 1 && receipts.rows.length === 2;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: state.rows, opportunity: opp.rows[0], receipts: receipts.rows };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_CHECKPOINT_WRITE_FAILED\");\nexport default result;\n",[317],"64cd2ee7-6dbd-4985-84f6-541bf6fc9aa9","payana_binance_checkpoint_v1.ts","668584c2-ab0b-11f1-a6f1-1607ee4eb77e",20,["D",1788820087807],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_agent_os_20260907_1926_brt\";\n\nconst trackState = {\n workstream: \"Binance Agent OS Mini Hackathon — Track A\",\n status: \"TECHNICAL_RC_PASS_EXTERNAL_GATES_REMAIN\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n val: \"cleitoncosta/payana-binance-agent-os\",\n demoUrl: \"https://payana-agent-os.val.run/\",\n releaseAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n totalExecutedChecks: 224,\n auditedAt: \"2026-09-07T22:22:43.433Z\",\n },\n marketEvidence: {\n provider: \"Binance public Spot market-data surface via data-api.binance.vision\",\n liveProductionEvidence: \"PASS\",\n hardBoundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n },\n oauthMcp: {\n cimdUrl: \"https://payana-agent-os.val.run/oauth/client-metadata.json\",\n pkce: \"S256\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n stateTtlMinutes: 10,\n pendingStateCap: 500,\n unauthenticatedTransportProbe: {\n serverDiscover: \"HTTP_200_JSONRPC_METHOD_NOT_FOUND\",\n toolsList: \"HTTP_401_OAUTH_RESOURCE_METADATA\",\n conclusion: \"MCP_CONNECTION_AUTH_GATED\",\n },\n authorizationSurfaceProbe: {\n status: \"PARTIAL\",\n httpStatus: 202,\n blocker: \"BINANCE_JAVASCRIPT_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientEvidenceObserved: false,\n },\n },\n externalGates: [\n \"Real Binance Agent OS MCP connection proof in a supported MCP client\",\n \"Final video/screen recording\",\n \"GitHub mirror if used/applicable\",\n \"Follow/repost and Track A X submission\",\n \"Official Binance survey completion\",\n \"Eligibility/account conditions confirmation\",\n ],\n doNotRestart: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: \"DURABLE_RECOVERY_PASS_WITH_BINANCE_RC1_AND_OPEN_EXTERNAL_GATES\",\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a\",\n nextAction: \"Complete only remaining external/human proof gates; do not rebuild the technical RC from scratch.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_track_a\", JSON.stringify(trackState), \"VERIFIED_LIVE_RC_EXTERNAL_GATES_OPEN\", \"cleitoncosta/payana-binance-agent-os@main\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET url=?,status=?,constraints_json=?,currentness_at=?,evidence_state=?,source_ref=?,updated_at=? WHERE id=?`,\n args: [\n \"https://www.binance.com/en/blog/community/8802181509900814931\",\n \"ACTIVE_TECHNICAL_RC_READY_EXTERNAL_GATES\",\n JSON.stringify([\n \"Track A deadline 2026-09-08T23:59:00Z\",\n \"Video or demo plus GitHub if applicable\",\n \"Follow @Binance and repost official announcement\",\n \"Reply or quote-repost with Track A submission\",\n \"Complete official survey\",\n \"Eligibility/account/regional conditions must be confirmed\",\n \"PayAna demo must remain read-only; Account/Trade/Transfer not required\",\n ]),\n now,\n \"OFFICIAL_RULES_PLUS_VERIFIED_LIVE_RC\",\n \"Binance official hackathon announcement + PayAna Val Town runtime\",\n now,\n \"binance_agent_os_2026\",\n ],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_rc1_release_audit\",\n \"binance_agent_os_2026\",\n \"TECHNICAL_RELEASE_AUDIT\",\n \"PASS\",\n \"LOW_READ_ONLY_BUILD\",\n \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\",\n 1,\n \"Harden and falsify PayAna Track A technical candidate without trading/account authority.\",\n \"1.2.0-rc1 live; 189 assertions + 35 rate-limit mutation steps = 224 PASS. OAuth/CIMD/PKCE and state replay controls added. No automatic MCP tool call.\",\n \"receipt-binance-agent-os-rc1\",\n \"2026-09-07T20:48:00Z\",\n \"2026-09-07T22:22:43.433Z\",\n \"VERIFIED_RUNTIME_TESTS\",\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-rc1\",\n \"action\",\n \"binance_agent_os_rc1_release_audit\",\n \"LIVE_RUNTIME_RELEASE_RECEIPT\",\n \"https://payana-agent-os.val.run/\",\n null,\n JSON.stringify({\n release: \"1.2.0-rc1\",\n checks: { assertions: 189, mutationSteps: 35, total: 224, pass: true },\n productionHealth: \"PASS\",\n productionAnalyzeBTCUSDT: \"PASS_3_OF_3_SOURCES_AT_POST_MERGE_CHECKPOINT\",\n oauthStatus: \"READY_FOR_USER_AUTHORIZATION\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n pendingOAuthStatesAfterTests: 0,\n }),\n \"VERIFIED_RUNTIME\",\n now,\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-provider-gate\",\n \"opportunity\",\n \"binance_agent_os_2026\",\n \"EXTERNAL_PROVIDER_GATE\",\n \"https://accounts.binance.com/agentic-oauth/authorize\",\n null,\n JSON.stringify({\n authorizationSurfaceProbe: \"HTTP_202_JS_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientLikeErrorObserved: false,\n cimdAcceptance: \"UNVERIFIED\",\n realMcpConnection: \"UNVERIFIED\",\n classification: \"PARTIAL_EXTERNAL_HUMAN_BROWSER_GATE\",\n }),\n \"PARTIAL_EXTERNAL_GATE\",\n now,\n now,\n now,\n ],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?) ORDER BY key\", args: [\"binance_agent_os_track_a\", \"current_checkpoint\"] });\nconst opp = await db.execute({ sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\", args: [\"binance_agent_os_2026\"] });\nconst receipts = await db.execute({ sql: \"SELECT id,verification_state FROM payana_receipts WHERE id IN (?,?) ORDER BY id\", args: [\"receipt-binance-agent-os-rc1\", \"receipt-binance-agent-os-provider-gate\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 2 && opp.rows.length === 1 && receipts.rows.length === 2;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: state.rows, opportunity: opp.rows[0], receipts: receipts.rows };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_CHECKPOINT_WRITE_FAILED\");\nexport default result;\n",[325],"a77f8d86-29c2-47b8-a748-bce1b608059b","payana_binance_backup_receipt_v1.ts","45d8e484-ab0c-11f1-a9ac-1607ee4eb77e",26,["D",1788820462465],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst backupVal = \"cleitoncosta/payana-agent-os-rc1-backup-20260907\";\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_backup\",\n JSON.stringify({\n sourceVal: \"cleitoncosta/payana-binance-agent-os\",\n sourceBranch: \"main\",\n backupVal,\n createdAt: \"2026-09-07T22:33:02.412Z\",\n copyDatabaseContents: false,\n codeFilesCopied: true,\n backupReleaseAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-07T22:33:24.118Z\" },\n backupPendingOauthStatesAfterAudit: 0,\n note: \"Detached code/schema backup. Canonical OAuth client_id and redirect intentionally remain bound to production payana-agent-os.val.run.\",\n }),\n \"VERIFIED_DETACHED_BACKUP_RUNTIME_TESTED\",\n backupVal,\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_detached_backup\",\n \"binance_agent_os_2026\",\n \"DETACHED_BACKUP\",\n \"PASS\",\n \"LOW_REVERSIBLE_COPY\",\n \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\",\n 1,\n \"Create detached Val Town backup after concurrency fix and passing release audit.\",\n \"Backup val created and independently ran the full 224-check release audit PASS; pending OAuth states = 0.\",\n \"receipt-binance-agent-os-backup\",\n \"2026-09-07T22:33:02.412Z\",\n \"2026-09-07T22:33:24.118Z\",\n \"VERIFIED_RUNTIME_TESTS\",\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-backup\",\n \"action\",\n \"binance_agent_os_detached_backup\",\n \"DETACHED_VAL_BACKUP_RECEIPT\",\n backupVal,\n null,\n JSON.stringify({\n source: \"cleitoncosta/payana-binance-agent-os@main\",\n backup: backupVal,\n releaseAudit: \"224_CHECKS_PASS\",\n oauthPendingStates: 0,\n databaseContentsCopied: false,\n tokenOrSecretCopied: false,\n }),\n \"VERIFIED_RUNTIME\",\n now,\n now,\n now,\n ],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key=?\", args: [\"binance_agent_os_backup\"] });\nconst receipt = await db.execute({ sql: \"SELECT id,verification_state,locator FROM payana_receipts WHERE id=?\", args: [\"receipt-binance-agent-os-backup\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 1 && receipt.rows.length === 1;\nconst result = { pass, provider: storage.activeProvider, state: state.rows[0], receipt: receipt.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_BACKUP_RECEIPT_FAILED\");\nexport default result;\n",[332],"28b9c4fe-deb9-4615-8d2e-5f6431a8f606","index.ts",["D",1788741834089],"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst OWNER = \"cleitoncosta\";\nconst APP_VERSION = \"0.7.0\";\nconst storageState = getStorageState();\nconst sqlite = getActiveDatabase();\nconst VAULT_BUDGET_BYTES = storageState.activeProvider === \"turso\" ? 4_000_000_000 : 8_000_000;\nconst MAX_CONVERSATION_CHARS = 600_000;\nconst MAX_MESSAGE_CHARS = 180_000;\nconst MAX_MESSAGES_PER_CONVERSATION = 5000;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_import_runs_updated ON vault_import_runs(updated_at DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute({\n sql: \"INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version', ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at\",\n args: [APP_VERSION],\n });\n schemaReady = true;\n}\n\nasync function sessionFor(req: Request) {\n return await getOAuthUserData(req);\n}\n\nasync function isOwner(req: Request) {\n const session = await sessionFor(req);\n return session?.user?.username === OWNER ? session : null;\n}\n\nasync function requireOwner(c: any) {\n const session = await isOwner(c.req.raw);\n if (!session) return c.json({ error: \"unauthorized\", login: \"/auth/login\" }, 401);\n return null;\n}\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_-]{1,160}$/.test(value);\n}\n\nfunction safeProject(value: unknown) {\n return typeof value === \"string\" && value.trim().length >= 1 && value.trim().length <= 120;\n}\n\nfunction num(value: unknown) {\n return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction int(value: unknown, fallback = 0) {\n return typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : fallback;\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 8) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction legacySnippet(text: string, needle: string) {\n const normalized = text.toLocaleLowerCase(\"pt-BR\");\n const hit = normalized.indexOf(needle.toLocaleLowerCase(\"pt-BR\"));\n const start = hit >= 0 ? Math.max(0, hit - 180) : 0;\n const chunk = text.slice(start, start + 620).replace(/\\s+/g, \" \").trim();\n return `${start > 0 ? \"…\" : \"\"}${chunk}${start + 620 < text.length ? \"…\" : \"\"}`;\n}\n\nasync function searchCheckpointIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id AS id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\nasync function searchKnowledgeIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n knowledge_id AS id,\n project,\n kind,\n title,\n snippet(vault_knowledge_fts, 4, '', '', ' … ', 42) AS snippet,\n bm25(vault_knowledge_fts, 0.0, 2.0, 2.0, 5.0, 3.0, 1.5, 1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\napp.get(\"/\", async (c) => {\n const session = await sessionFor(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.username !== OWNER) return c.text(\"Acesso negado. Este cofre pertence a outro usuário.\", 403);\n return c.html(Root());\n});\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/me\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const session = await sessionFor(c.req.raw);\n return c.json({\n owner: OWNER,\n username: session?.user?.username,\n version: APP_VERSION,\n openaiApiUsed: false,\n storage: storageState.activeProvider === \"turso\" ? \"Turso/libSQL + FTS5\" : \"Val Town project-scoped SQLite + FTS5\",\n activeStorageProvider: storageState.activeProvider,\n externalStorageConfigured: storageState.externalConfigured,\n migrationMode: storageState.migrationMode,\n searchEngine: \"SQLite/libSQL FTS5/BM25\",\n budgetBytes: VAULT_BUDGET_BYTES,\n maxConversationChars: MAX_CONVERSATION_CHARS,\n });\n});\n\napp.get(\"/api/stats\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const [conversations, indexed, checkpoints, knowledge, relations] = await Promise.all([\n sqlite.execute(`SELECT\n COUNT(*) AS conversations,\n COALESCE(SUM(message_count), 0) AS messages,\n COALESCE(SUM(char_count), 0) AS chars,\n COALESCE(SUM(content_bytes), 0) AS bytes,\n MIN(create_time) AS earliest,\n MAX(update_time) AS latest,\n COALESCE(SUM(CASE WHEN truncated = 1 THEN 1 ELSE 0 END), 0) AS truncated\n FROM conversations`),\n sqlite.execute(\"SELECT COUNT(*) AS indexed_messages FROM vault_messages\"),\n sqlite.execute(\"SELECT COUNT(*) AS checkpoints FROM vault_checkpoints\"),\n sqlite.execute(\"SELECT COUNT(*) AS knowledge_items FROM vault_knowledge_items\"),\n sqlite.execute(\"SELECT COUNT(*) AS relations FROM vault_relations\"),\n ]);\n return c.json({\n ...(conversations.rows[0] ?? {}),\n indexedMessages: Number((indexed.rows[0] as any)?.indexed_messages ?? 0),\n checkpoints: Number((checkpoints.rows[0] as any)?.checkpoints ?? 0),\n knowledgeItems: Number((knowledge.rows[0] as any)?.knowledge_items ?? 0),\n relations: Number((relations.rows[0] as any)?.relations ?? 0),\n budgetBytes: VAULT_BUDGET_BYTES,\n });\n});\n\napp.get(\"/api/search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n if (q.length < 2) return c.json({ query: q, engine: \"none\", results: [] });\n\n const match = ftsQuery(q);\n const indexedCount = await sqlite.execute(\"SELECT COUNT(*) AS count FROM vault_messages\");\n const hasMessageIndex = Number((indexedCount.rows[0] as any)?.count ?? 0) > 0;\n\n if (match && hasMessageIndex) {\n const result = await sqlite.execute({\n sql: `WITH hits AS (\n SELECT\n conversation_id,\n message_id,\n role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_messages_fts, 6.0, 0.0, 2.5, 0.0, 1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 150\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn\n FROM hits\n )\n SELECT\n c.id, c.title, c.create_time, c.update_time, c.message_count, c.char_count,\n c.content_bytes, c.truncated, b.message_id, b.role, b.hit_snippet, b.rank\n FROM best b\n JOIN conversations c ON c.id = b.conversation_id\n WHERE b.rn = 1\n ORDER BY b.rank, c.update_time DESC\n LIMIT 25`,\n args: [match],\n });\n return c.json({\n query: q,\n engine: \"fts5_bm25\",\n match,\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n messageId: row.message_id,\n role: row.role,\n rank: row.rank,\n snippet: String(row.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n })),\n });\n }\n\n const terms = q.split(/\\s+/).filter(Boolean).slice(0, 6);\n const clauses = terms.map(() => \"(title LIKE ? OR content_text LIKE ?)\");\n const args: string[] = [];\n for (const term of terms) {\n const pattern = `%${term}%`;\n args.push(pattern, pattern);\n }\n const result = await sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes, truncated, content_text\n FROM conversations\n WHERE ${clauses.join(\" AND \")}\n ORDER BY update_time DESC\n LIMIT 25`,\n args,\n });\n return c.json({\n query: q,\n engine: \"legacy_like_fallback\",\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n snippet: legacySnippet(String(row.content_text ?? \"\"), terms[0] ?? q),\n })),\n });\n});\n\napp.get(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const [conversation, messages] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n FROM conversations WHERE id = ? LIMIT 1`,\n args: [id],\n }),\n sqlite.execute({\n sql: `SELECT id, seq, role, create_time, content_text, char_count, content_bytes\n FROM vault_messages WHERE conversation_id = ? ORDER BY seq ASC`,\n args: [id],\n }),\n ]);\n if (!conversation.rows.length) return c.json({ error: \"not_found\" }, 404);\n return c.json({ ...(conversation.rows[0] as any), indexed_messages: messages.rows });\n});\n\napp.put(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 300) : \"Sem título\";\n const contentText = typeof body.contentText === \"string\" ? body.contentText : \"\";\n if (!contentText.trim()) return c.json({ error: \"empty_conversation\" }, 400);\n if (contentText.length > MAX_CONVERSATION_CHARS) {\n return c.json({ error: \"conversation_too_large\", maxChars: MAX_CONVERSATION_CHARS }, 413);\n }\n\n let importRun: null | { id: string; fingerprint: string; total: number; cursorAfter: number; skippedCount: number } = null;\n if (body.importRun != null) {\n const raw = body.importRun;\n const runId = typeof raw?.id === \"string\" ? raw.id.trim() : \"\";\n const fingerprint = typeof raw?.sourceFingerprint === \"string\" ? raw.sourceFingerprint.trim().toLowerCase() : \"\";\n const total = Math.min(1_000_000, int(raw?.totalCandidates));\n const cursorAfter = Math.min(total, int(raw?.cursorAfter));\n const skippedCount = Math.min(cursorAfter, int(raw?.skippedCount));\n if (!safeId(runId) || !/^[a-f0-9]{64}$/.test(fingerprint) || total < 1 || cursorAfter < 1 || skippedCount >= cursorAfter) {\n return c.json({ error: \"invalid_import_run_progress\" }, 400);\n }\n const run = await sqlite.execute({\n sql: \"SELECT source_fingerprint,total_candidates FROM vault_import_runs WHERE id=? LIMIT 1\",\n args: [runId],\n });\n if (!run.rows.length) return c.json({ error: \"import_run_not_initialized\" }, 409);\n const row: any = run.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n importRun = { id: runId, fingerprint, total, cursorAfter, skippedCount };\n }\n\n const rawMessages = Array.isArray(body.messages) ? body.messages.slice(0, MAX_MESSAGES_PER_CONVERSATION) : [];\n const normalizedMessages = rawMessages.flatMap((message: any, index: number) => {\n const text = typeof message?.contentText === \"string\" ? message.contentText.trim() : \"\";\n if (!text) return [];\n const clipped = text.slice(0, MAX_MESSAGE_CHARS);\n let messageId = typeof message?.id === \"string\" ? message.id.trim() : \"\";\n if (!safeId(messageId)) messageId = `${id}_m_${index + 1}`.slice(0, 160);\n return [{\n id: messageId,\n seq: index,\n role: typeof message?.role === \"string\" ? message.role.toLowerCase().slice(0, 40) : \"unknown\",\n createTime: typeof message?.createTime === \"number\" && Number.isFinite(message.createTime) ? message.createTime : null,\n contentText: clipped,\n charCount: clipped.length,\n contentBytes: new TextEncoder().encode(clipped).length,\n }];\n });\n\n const contentBytes = new TextEncoder().encode(contentText).length;\n const current = await sqlite.execute({ sql: \"SELECT content_bytes FROM conversations WHERE id = ? LIMIT 1\", args: [id] });\n const currentBytes = Number((current.rows[0] as any)?.content_bytes ?? 0);\n const totals = await sqlite.execute(\"SELECT COALESCE(SUM(content_bytes), 0) AS bytes FROM conversations\");\n const usedBytes = Number((totals.rows[0] as any)?.bytes ?? 0);\n const projected = usedBytes - currentBytes + contentBytes;\n if (projected > VAULT_BUDGET_BYTES) {\n return c.json({ error: \"vault_budget_exceeded\", usedBytes, projectedBytes: projected, budgetBytes: VAULT_BUDGET_BYTES }, 507);\n }\n\n const importedAt = new Date().toISOString();\n const statements: Array<{ sql: string; args?: Array }> = [\n {\n sql: `INSERT INTO conversations (\n id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n title = excluded.title,\n create_time = excluded.create_time,\n update_time = excluded.update_time,\n message_count = excluded.message_count,\n char_count = excluded.char_count,\n content_bytes = excluded.content_bytes,\n content_text = excluded.content_text,\n truncated = excluded.truncated,\n source_file = excluded.source_file,\n imported_at = excluded.imported_at`,\n args: [\n id,\n title || \"Sem título\",\n num(body.createTime),\n num(body.updateTime),\n normalizedMessages.length || int(body.messageCount),\n contentText.length,\n contentBytes,\n contentText,\n body.truncated ? 1 : 0,\n typeof body.sourceFile === \"string\" ? body.sourceFile.slice(0, 180) : \"conversations.json\",\n importedAt,\n ],\n },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n ];\n\n for (const message of normalizedMessages) {\n statements.push({\n sql: `INSERT INTO vault_messages (\n id, conversation_id, seq, role, create_time, content_text, char_count, content_bytes, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [message.id, id, message.seq, message.role, message.createTime, message.contentText, message.charCount, message.contentBytes, importedAt],\n });\n statements.push({\n sql: \"INSERT INTO vault_messages_fts(message_id, conversation_id, title, role, content) VALUES (?, ?, ?, ?, ?)\",\n args: [message.id, id, title || \"Sem título\", message.role, message.contentText],\n });\n }\n\n if (importRun) {\n const importedCountAfter = importRun.cursorAfter - importRun.skippedCount;\n statements.push({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n skipped_count=MAX(skipped_count, ?),\n status=CASE\n WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END\n ELSE status\n END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at`,\n args: [\n importRun.cursorAfter,\n normalizedMessages.length,\n importRun.cursorAfter,\n importedCountAfter,\n importRun.skippedCount,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importedAt,\n importRun.id,\n importRun.fingerprint,\n ],\n });\n }\n\n const batchResults = await sqlite.batch(statements);\n const importProgress: any = importRun ? batchResults[batchResults.length - 1]?.rows?.[0] ?? null : null;\n return c.json({\n ok: true,\n id,\n contentBytes,\n projectedBytes: projected,\n indexedMessages: normalizedMessages.length,\n searchEngine: normalizedMessages.length ? \"fts5_bm25\" : \"legacy_like_fallback\",\n importProgress: importProgress ? {\n cursor: Number(importProgress.cursor ?? 0),\n importedCount: Number(importProgress.imported_count ?? 0),\n indexedMessages: Number(importProgress.indexed_messages ?? 0),\n skippedCount: Number(importProgress.skipped_count ?? 0),\n status: importProgress.status,\n lastError: importProgress.last_error,\n updatedAt: importProgress.updated_at,\n } : null,\n });\n});\n\napp.get(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const result = await sqlite.execute({\n sql: `SELECT id, source_fingerprint, source_name, source_size, total_candidates, cursor,\n imported_count, indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n FROM vault_import_runs WHERE id = ? LIMIT 1`,\n args: [id],\n });\n if (!result.rows.length) return c.json({ error: \"not_found\" }, 404);\n const row: any = result.rows[0];\n return c.json({\n ...row,\n inventory: (() => { try { return JSON.parse(String(row.inventory_json || \"{}\")); } catch { return {}; } })(),\n });\n});\n\napp.put(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const fingerprint = typeof body.sourceFingerprint === \"string\" ? body.sourceFingerprint.trim().toLowerCase() : \"\";\n const sourceName = typeof body.sourceName === \"string\" ? body.sourceName.trim().slice(0, 300) : \"\";\n if (!/^[a-f0-9]{64}$/.test(fingerprint) || !sourceName) return c.json({ error: \"valid_source_fingerprint_and_name_required\" }, 400);\n const total = Math.min(1_000_000, int(body.totalCandidates));\n if (total < 1) return c.json({ error: \"total_candidates_required\" }, 400);\n const cursor = Math.min(total, int(body.cursor));\n const importedCount = Math.min(cursor, int(body.importedCount));\n const indexedMessages = Math.min(50_000_000, int(body.indexedMessages));\n const skippedCount = Math.min(cursor, int(body.skippedCount));\n if (importedCount + skippedCount > cursor) return c.json({ error: \"import_progress_inconsistent\" }, 400);\n const sourceSize = Math.min(Number.MAX_SAFE_INTEGER, int(body.sourceSize));\n const allowedStatuses = new Set([\"IN_PROGRESS\", \"PAUSED\", \"COMPLETE\", \"FAILED\"]);\n const status = allowedStatuses.has(String(body.status)) ? String(body.status) : \"IN_PROGRESS\";\n if (status === \"COMPLETE\" && cursor !== total) return c.json({ error: \"complete_requires_full_cursor\" }, 400);\n const inventoryJson = JSON.stringify(body.inventory && typeof body.inventory === \"object\" ? body.inventory : {}).slice(0, 16_000);\n const lastError = typeof body.lastError === \"string\" && body.lastError.trim() ? body.lastError.trim().slice(0, 1000) : null;\n const existing = await sqlite.execute({ sql: \"SELECT source_fingerprint,total_candidates,status FROM vault_import_runs WHERE id = ? LIMIT 1\", args: [id] });\n if (existing.rows.length) {\n const row: any = existing.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n }\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO vault_import_runs(\n id, source_fingerprint, source_name, source_size, total_candidates, cursor, imported_count,\n indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET\n source_name=excluded.source_name,\n source_size=MAX(vault_import_runs.source_size, excluded.source_size),\n cursor=MAX(vault_import_runs.cursor, excluded.cursor),\n imported_count=MAX(vault_import_runs.imported_count, excluded.imported_count),\n indexed_messages=MAX(vault_import_runs.indexed_messages, excluded.indexed_messages),\n skipped_count=MAX(vault_import_runs.skipped_count, excluded.skipped_count),\n status=CASE WHEN vault_import_runs.status='COMPLETE' THEN 'COMPLETE' ELSE excluded.status END,\n inventory_json=CASE WHEN length(excluded.inventory_json) > 2 THEN excluded.inventory_json ELSE vault_import_runs.inventory_json END,\n last_error=CASE WHEN vault_import_runs.status='COMPLETE' OR excluded.status='COMPLETE' THEN NULL ELSE excluded.last_error END,\n updated_at=excluded.updated_at`,\n args: [id, fingerprint, sourceName, sourceSize, total, cursor, importedCount, indexedMessages, skippedCount, status, inventoryJson, lastError, now, now],\n });\n const saved = await sqlite.execute({\n sql: `SELECT id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at FROM vault_import_runs WHERE id=? LIMIT 1`,\n args: [id],\n });\n const row: any = saved.rows[0] ?? {};\n return c.json({\n ok: true,\n id: row.id,\n sourceFingerprint: row.source_fingerprint,\n sourceName: row.source_name,\n sourceSize: Number(row.source_size ?? 0),\n totalCandidates: Number(row.total_candidates ?? 0),\n cursor: Number(row.cursor ?? 0),\n importedCount: Number(row.imported_count ?? 0),\n indexedMessages: Number(row.indexed_messages ?? 0),\n skippedCount: Number(row.skipped_count ?? 0),\n status: row.status,\n lastError: row.last_error,\n updatedAt: row.updated_at,\n });\n});\n\napp.delete(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const results = await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, rowsAffected: results[2]?.rowsAffected ?? 0 });\n});\n\napp.get(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const limit = Math.min(25, Math.max(1, Number(c.req.query(\"limit\") ?? 8) || 8));\n const project = (c.req.query(\"project\") ?? \"\").trim().slice(0, 120);\n const result = project\n ? await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints WHERE project = ? ORDER BY updated_at DESC LIMIT ?`,\n args: [project, limit],\n })\n : await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints ORDER BY updated_at DESC LIMIT ?`,\n args: [limit],\n });\n return c.json({ project: project || null, checkpoints: result.rows });\n});\n\napp.post(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const project = typeof body.project === \"string\" ? body.project.trim().slice(0, 120) : \"\";\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 240) : \"\";\n const summary = typeof body.summary === \"string\" ? body.summary.trim().slice(0, 12000) : \"\";\n if (!safeProject(project) || !title || !summary) return c.json({ error: \"project_title_summary_required\" }, 400);\n let id = typeof body.id === \"string\" ? body.id.trim() : \"\";\n if (!safeId(id)) id = `cp_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;\n const decisions = typeof body.decisions === \"string\" ? body.decisions.trim().slice(0, 12000) : \"\";\n const openGaps = typeof body.openGaps === \"string\" ? body.openGaps.trim().slice(0, 12000) : \"\";\n const nextAction = typeof body.nextAction === \"string\" ? body.nextAction.trim().slice(0, 12000) : \"\";\n const sourceConversationId = safeId(body.sourceConversationId) ? body.sourceConversationId : null;\n const evidenceState = typeof body.evidenceState === \"string\" ? body.evidenceState.trim().slice(0, 80) : \"CHECKPOINT\";\n const now = new Date().toISOString();\n\n await sqlite.batch([\n {\n sql: `INSERT INTO vault_checkpoints (\n id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n project=excluded.project, title=excluded.title, summary=excluded.summary,\n decisions=excluded.decisions, open_gaps=excluded.open_gaps, next_action=excluded.next_action,\n source_conversation_id=excluded.source_conversation_id, evidence_state=excluded.evidence_state,\n updated_at=excluded.updated_at`,\n args: [id, project, title, summary, decisions, openGaps, nextAction, sourceConversationId, evidenceState, now, now],\n },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [id] },\n {\n sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id, project, title, summary, decisions, open_gaps, next_action)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, project, title, summary, decisions, openGaps, nextAction],\n },\n ]);\n return c.json({ ok: true, id, project, title, evidenceState, updatedAt: now });\n});\n\napp.get(\"/api/checkpoint-search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n const match = ftsQuery(q);\n if (!match) return c.json({ query: q, results: [] });\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 25`,\n args: [match],\n });\n return c.json({ query: q, engine: \"fts5_bm25\", results: result.rows });\n});\n\nexport default oauthMiddleware(app.fetch);\n",[339],"c6448a05-6308-4fc5-81cf-01b7295eea94","README.md","01a077cd-4980-75c9-8c9f-0e80a101c1e0",["D",1788811990209],"# PayAna Ledger 1.0 — durable economic/opportunity state\n\nA PayAna agora possui uma camada estruturada e separada do transcript de conversa. O objetivo é garantir que `CONVERSATION_STATE != PROJECT_STATE` e que receita, oportunidades, ações e evidências possam ser retomadas sem reconstrução manual.\n\nTabelas Turso: `payana_state`, `payana_opportunities`, `payana_economic_events`, `payana_actions`, `payana_receipts`.\n\nBridge 0.6.0 adiciona: `payana_state_upsert`, `payana_opportunity_upsert`, `payana_economic_upsert`, `payana_action_upsert`, `payana_receipt_upsert`, `payana_snapshot`.\n\nEstado inicial validado: `REV-000001 = USD 0.01`, classificado como `USER_CONFIRMED_RECEIPT_UNVERIFIED`; uma receipt explícita `receipt-gap-REV-000001` registra a proveniência ainda ausente em vez de inventar plataforma, transaction ID ou timestamp.\n\nProvas desta branch: schema migration PASS em Turso; seed/readback PASS; snapshot via bridge PASS; invalid decimal, HTTP URL e SHA-256 são rejeitados; regressões V0.4/V0.5/V0.6/V0.7 e release audit permanecem PASS.\n\n---\n\n# V0.7 — real-export preflight / dry-run gate\n\nAntes de qualquer ingestão de export real, o Vault agora exige preflight em duas etapas:\n\n- `Somente analisar` inicia ligado e não grava no Turso;\n- o preflight mede conversas, mensagens textuais, mapping, IDs, content types, vazios e limites;\n- a liberação para escrita é vinculada a `sourceFingerprint + limite selecionado`;\n- trocar arquivo ou 25/50/100/.../completo invalida a liberação;\n- após conclusão ou replay já COMPLETE, o modo seguro é reativado;\n- ZIP64 seletivo é suportado, com multidisk e inteiros acima do limite seguro bloqueados;\n- anexos são inventariados, não ingeridos nesta etapa.\n\nProvas pré-merge: `v07_preflight_selftest.ts = PASS` com `sameDbBeforeAfter=true`; gate same-scope=true/different-limit=false/different-fingerprint=false; `v07_zip64_selftest.ts = PASS`; V0.6 e V0.5 regression PASS; release audit PASS; `/api/stats` anônimo = 401.\n\n---\n\n# V0.6 — Selective ZIP Import + Resumable Cursor\n\nStatus de promoção: `ZIP_SYNTHETIC_VERIFIED`; export oficial real ainda `UNVERIFIED`.\n\nNovidades:\n- aceita ZIP do export ou `conversations*.json` diretamente;\n- leitor ZIP seletivo lê diretório central + somente entradas de conversa, sem `file.arrayBuffer()` do ZIP inteiro;\n- suporta ZIP clássico com STORE/DEFLATE, valida tamanho e CRC32 e bloqueia ZIP criptografado, multidisk e ZIP64 por enquanto;\n- inventaria arquivos não ingeridos sem interpretá-los como conversa;\n- fingerprint baseado no conteúdo dos JSONs de conversa, estável mesmo após renomear/baixar novamente o mesmo export;\n- cursor persistente `vault_import_runs` no Turso com estados IN_PROGRESS/PAUSED/COMPLETE/FAILED;\n- conversa + mensagens + FTS + avanço do cursor são confirmados no mesmo batch transacional; replay do mesmo cursor não duplica `indexed_messages`;\n- timeout/erro transitório após write força reconciliação do run; se a reconciliação também falhar, o cliente entra em `UNKNOWN_EXTERNAL_STATE` e não repete cegamente;\n- run id escopado pelo tamanho selecionado (25/50/100/.../completo), evitando cursor incoerente ao ampliar a ingestão;\n- deduplicação por conversation id antes do cursor, mantendo a versão com maior `update_time`; itens sem ID não são deduplicados automaticamente para evitar perda por falso positivo;\n- UI mostra inventário, duplicatas removidas e cursor persistido.\n\nEvidência automática:\n- `v06_selftest.ts`: ZIP DEFLATE sintético particionado, leitura seletiva, CRC corruption, ZIP sem conversations, fingerprint, deduplicação e PAUSED→COMPLETE;\n- `v05_selftest.ts`: regressão V0.5;\n- `v06_release_audit.ts`: Turso/queue/resíduos antes da promoção;\n- `/api/import-runs/...` sem sessão: HTTP 401.\n\nLimites deliberados:\n- ZIP64 ainda bloqueado; não chamar de compatível com exports >4 GiB até implementar/testar ZIP64;\n- assets/PDFs/imagens são apenas inventariados nesta versão;\n- `ZIP_SYNTHETIC_VERIFIED != REAL_CHATGPT_EXPORT_VERIFIED`.\n\n---\n\n# V0.5 — Structured Knowledge + Hybrid Retrieval\n\nStatus antes do merge: backend/bridge verificado em Turso.\n\nNovidades:\n- `vault_knowledge_items` + FTS5 para regras, decisões, lições, arquitetura, riscos e achados estruturados;\n- `vault_relations` para relações graph-lite entre knowledge/checkpoint/conversation/entity/project/artifact/concept;\n- bridge actions `knowledge_upsert`, `get_knowledge`, `related`;\n- `search_hybrid`: ChatGPT gera variantes conceituais; backend executa FTS5/BM25 e Reciprocal Rank Fusion, sem chamar API de IA;\n- filtros de projeto/kind estritos;\n- knowledge writes idempotentes por ID e seguros contra stale retry;\n- relação inválida falha antes de persistência;\n- UI mostra conhecimento estruturado e relações.\n\nEvidência V0.5: `v05_selftest.ts` deve retornar `pass:true`. Corpus histórico real do ChatGPT continua pendente de export oficial.\n\n---\n\n# V0.4 — ChatGPT Bridge\n\nA V0.4 transforma o GUH Vault em memória consultável pelo próprio ChatGPT através do conector Val Town autenticado, sem API da OpenAI e sem scraping de chatgpt.com.\n\nFluxo: `ChatGPT -> Val Town control plane -> vault_bridge.ts -> Turso -> FTS5/BM25 -> ChatGPT`.\n\nAções fechadas: `search`, `get_conversation`, `stats`, `checkpoint_upsert`.\n\nControles: claim atômico, lease de 2 minutos, máximo 2 tentativas, recuperação de stale RUNNING, checkpoint idempotente, allowlist de ações, Turso fail-closed e resultados externos tratados como dados não confiáveis.\n\nEvidência antes do merge: search PASS; get_conversation PASS; stats PASS; checkpoint_upsert PASS; ação proibida BLOCKED; stale recuperável PASS na segunda tentativa; stale com orçamento esgotado FAIL sem terceira execução; queue final sem PENDING/RUNNING.\n\nSkill pessoal: `skills/guh-vault/SKILL.md`.\n\n---\n\n# V0.3.1 — FAIL-CLOSED STORAGE HOTFIX\n\nApós promover Turso a fonte principal, fallback automático para o SQLite local foi desabilitado. Motivo: após novas escritas no Turso, a cópia local pode ficar stale. Se a configuração externa desaparecer, o app deve bloquear (`TURSO_REQUIRED_NOT_CONFIGURED`) em vez de servir estado antigo silenciosamente.\n\nPolítica pura testada:\n- sem URL + sem token -> BLOCKED_EXTERNAL_REQUIRED\n- somente URL -> BLOCKED_EXTERNAL_REQUIRED\n- somente token -> BLOCKED_EXTERNAL_REQUIRED\n- URL + token -> TURSO_ACTIVE\n- localFallbackEnabled = false\n\nO SQLite local continua preservado para recuperação/migração manual, não como fallback invisível de produção.\n\n---\n\n# V0.3.0 — TURSO / EXTERNAL TEXT STORAGE\n\nCheckpoint: 2026-09-06\n\n## Estado\n\n- `TURSO_DATABASE_URL`: configurada (valor não documentado)\n- `TURSO_AUTH_TOKEN`: configurado (valor não documentado)\n- Turso: CONFIGURED + AUTHENTICATED + REACHABLE\n- provider ativo da branch V0.3: `turso`\n- fallback: Val Town project-scoped SQLite quando Turso não estiver configurado\n- cliente: `@libsql/client/web` (o cliente padrão falhou no runtime Val Town por dependência binária nativa)\n\n## Migração comprovada\n\nOrigem Val Town e destino Turso reconciliados após o checkpoint V0.3:\n\n- conversas: 3 = 3\n- mensagens: 10 = 10\n- checkpoints: 3 = 3\n- FTS mensagens no Turso: 10\n- FTS checkpoints no Turso: 3\n- SHA-256 canônico de conversas: igual\n- SHA-256 canônico de mensagens: igual\n- SHA-256 canônico de checkpoints: igual\n- `Kernel timeout`: PASS\n- `NR-12`: PASS\n- `reconciliação`: PASS\n- `export oficial`: checkpoints encontrados\n- termo inexistente: 0 hits\n\n## Reliability / security controls\n\n- active provider execute: PASS\n- active provider batch transacional: PASS\n- fixture de batch removida: PASS (`probeResidue=0`)\n- credencial Turso propositalmente inválida: rejeitada (`LibsqlError`)\n- `/api/stats` sem sessão: HTTP 401 / sem dados\n- valores de credentials não são impressos por self-tests/status\n\n## Estado epistemológico\n\n`TURSO_AVAILABLE -> CONFIGURED -> AUTHENTICATED -> EXECUTED -> VERIFIED`\n\nA V0.3 ainda não deve ser chamada `IPHONE_OPERATIONAL` até a interface principal ser aberta no iPhone depois do merge e uma reimportação confirmar escrita/search no Turso.\n\n## Próxima prova\n\nApós promoção para `main`:\n1. abrir `guh-knowledge-vault.val.run` no iPhone;\n2. confirmar `V0.3 • Turso • FTS5/BM25`;\n3. confirmar 3 conversas / 10 mensagens / 10 indexadas / 3 checkpoints;\n4. reimportar o JSON sintético;\n5. confirmar que permanece 3/10/10, sem duplicação;\n6. pesquisar `Kernel timeout`, `NR-12`, `export oficial`;\n7. somente então promover interface V0.3 para `OPERATIONAL_SYNTHETIC_E2E_TURSO`.\n\n---\n\n# GUH Knowledge Vault — V0.2.0\n\nCofre pessoal pesquisável para histórico exportado do ChatGPT + checkpoints do trabalho corrente, sem usar a API da OpenAI.\n\n## Runtime\n\n`iPhone/browser -> OAuth Val Town -> Hono -> SQLite/FTS5 -> resultados`\n\nO código é público por restrição do workspace Free, mas as rotas de dados exigem login Val Town e aceitam apenas `username === cleitoncosta`.\n\n## O que a V0.2 adiciona\n\n- mensagens persistidas individualmente em `vault_messages`;\n- índice `vault_messages_fts` com SQLite FTS5;\n- ranking BM25;\n- tokenização Unicode com remoção de diacríticos;\n- busca multi-termo com AND + prefix matching;\n- fallback para a busca V0.1 quando não houver mensagens indexadas;\n- checkpoints persistentes em `vault_checkpoints`;\n- índice FTS dos checkpoints;\n- busca universal capaz de retornar conversas + checkpoints;\n- detalhe da conversa renderizado mensagem por mensagem quando o índice existe;\n- reimportação/reindexação idempotente para uma mesma conversa;\n- `vault_meta.schema_version = 0.2.0`;\n- self-test stateful com limpeza de fixture.\n\n## Duas rotas de memória\n\n### Histórico antigo\n\n`export oficial -> conversations.json -> importador no navegador -> conversa + mensagens -> FTS5`\n\n### Conhecimento novo\n\n`ChatGPT/conector Val Town -> checkpoint estruturado -> vault_checkpoints -> FTS5`\n\nIsso evita depender exclusivamente de novos exports para preservar decisões e estado de projetos daqui para frente.\n\n## Estado persistido no fechamento da V0.2\n\n- 3 conversas sintéticas compatíveis com export;\n- 10 mensagens de origem;\n- 10 mensagens individualmente indexadas;\n- 10 linhas no índice FTS das mensagens;\n- 970 B de conteúdo legado de conversa;\n- 1 checkpoint real sobre a prova da V0.1 no iPhone;\n- 0 fixtures de self-test restantes.\n\n## Evidência\n\n### PASS\n\n- V0.1 real no iPhone: login, importação, persistência, busca e abertura de conversa;\n- FTS5 disponível no SQLite do Val Town;\n- `Kernel timeout` -> conversa correta;\n- `NR-12` -> conversa correta;\n- `reconciliação` -> duas conversas relacionadas;\n- checkpoint encontrado por `export + oficial`;\n- controle negativo inexistente -> 0 hits;\n- reindex replay -> 2 mensagens continuam 2, sem duplicação;\n- replay FTS -> 2 linhas continuam 2;\n- self-test final -> `pass=true`;\n- self-test remove as próprias fixtures;\n- `index.ts` compila no runtime;\n- `frontend/components/App.tsx` compila no runtime;\n- visitante sem sessão continua redirecionado para autenticação.\n\n### Falha útil encontrada\n\nO primeiro self-test assumia incorretamente que uma busca por `kernel` retornaria somente a fixture. Como já havia uma conversa real de teste com esse termo, o self-test marcou FAIL apesar do sistema estar correto.\n\nCorreção: o validador passou a testar a presença da fixture dentro do escopo correto, sem assumir exclusividade global.\n\nLesson learned: **um teste pode falhar por hipótese inválida do próprio validador; negative controls e escopo explícito são obrigatórios.**\n\n### Ainda UNVERIFIED\n\n- parser contra export oficial real desta conta;\n- importação real de 25/50/100 conversas;\n- comportamento com um export muito grande no Safari/iPhone;\n- assets, imagens, PDFs, ZIPs e outros anexos do export;\n- busca semântica por embeddings/conceitos;\n- camada de armazenamento maior para histórico completo;\n- sincronização automática do histórico interno do ChatGPT.\n\n## Limites deliberados\n\nA V0.2 ainda preserva `conversations.content_text` por compatibilidade com a V0.1 e também mantém mensagens individualizadas + índice. Isso duplica parte do conteúdo e não é a arquitetura final para milhares de conversas.\n\nAntes da importação massiva, deve ser criada uma camada de armazenamento maior e o orçamento deve considerar tamanho físico real, não apenas `content_bytes` da tabela legada.\n\n## Próximos marcos\n\n1. Testar um export oficial real.\n2. Medir tamanho/quantidade real de chats e assets.\n3. Escolher storage gratuito maior para o histórico completo.\n4. Migrar o corpo das mensagens para arquitetura sem duplicação desnecessária.\n5. Adicionar projetos, entidades, relações e artefatos.\n6. Evoluir de full-text para busca híbrida/semântica sem depender da API da OpenAI.\n7. Criar interface/tool para outros agentes consultarem o Vault.\n8. Automatizar checkpoints quando o usuário solicitar `salve checkpoint`.\n",[345],"04fd15c1-f99e-43ee-a3c4-01b81134570b","CHANGELOG.md","01a077cd-4980-75c9-8c9f-08b802212cc9",["D",1788812598244],6,"# PayAna BountyBook monitor — 2026-09-07\n\n- Added read-only live reconciliation across BountyBook homepage, `/jobs?status=open` API, and `/health`.\n- Found and encoded a material surface divergence: homepage reports `0 open`, while live API reports 120 rows marked open.\n- Integrity audit found those 120 rows total 598 USDC, all have `contract_job_id=0` and `payout_status=none`, while `/health` reported treasury `0.396733 USDC` and 39 failed payouts at the audit instant.\n- New invariant: `API_STATUS_OPEN != ESCROW_FUNDED_OPEN`; API rows are not promoted to executable revenue targets without funding/escrow proof.\n- Monitor persists `bountybook_watch` in Turso and only emits a `MONITOR_CHANGE` action receipt when material state changes; repeated identical runs do not duplicate change receipts.\n- On fetch failure, last-known opportunity state is preserved: `FETCH_FAIL != ZERO_OPEN`.\n- Added reusable read-only scanner and audit scripts under `payana/`.\n\n---\n\n# PayAna Ledger 1.0 — 2026-09-07\n\n- Added dedicated Turso tables for PayAna state, opportunities, economic events, actions and receipts.\n- Seeded `REV-000001 = USD 0.01` with `USER_CONFIRMED_RECEIPT_UNVERIFIED` instead of fabricating missing provenance.\n- Added explicit `receipt-gap-REV-000001` to track missing platform/task/transaction/timestamp evidence.\n- Added five reconciled opportunity records: TermMax/Immunefi, BlockPI/Immunefi, Binance Agent OS 2026, OpenCV AI 2026, BountyBook current state.\n- Extended `vault_bridge.ts` to bridge version 0.6.0 with six PayAna actions and snapshot retrieval.\n- Added fail-closed validation for decimal values, HTTPS URLs and SHA-256 receipts.\n- Regression evidence: V0.4 bridge PASS, V0.5 PASS, V0.6 PASS, V0.7 preflight PASS, ZIP64 PASS, release audit PASS.\n\n---\n\n# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v29