`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_492":493,"_494":495},"routes/_app.x.$handle.$name",{"_102":101,"_32":45,"_111":90,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":-5,"_124":125,"_126":25,"_127":128,"_129":59,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","vault_bridge.ts","latestPath","fileId","01a07d7c-e77c-71a8-be45-0b4babcc70c7","name","fileType","script","content","import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst BRIDGE_VERSION = \"0.5.0\";\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst OBJECT_TYPES = new Set([\"conversation\", \"checkpoint\", \"knowledge\", \"entity\", \"project\", \"artifact\", \"concept\"]);\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_.:-]{1,160}$/.test(value);\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 10) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction clip(value: unknown, max: number) {\n return typeof value === \"string\" ? value.trim().slice(0, max) : \"\";\n}\n\nfunction stringList(value: unknown, maxItems = 12, maxLen = 120) {\n if (!Array.isArray(value)) return [];\n return [...new Set(value.map((v) => clip(v, maxLen)).filter(Boolean))].slice(0, maxItems);\n}\n\nfunction objectType(value: unknown) {\n const type = clip(value, 40).toLowerCase();\n return OBJECT_TYPES.has(type) ? type : \"\";\n}\n\nfunction deterministicId(prefix: string, requestId: string) {\n const id = `${prefix}_${requestId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n if (!safeId(id)) throw new Error(\"INVALID_DETERMINISTIC_ID\");\n return id;\n}\n\nasync function claimOne() {\n await control.execute(`CREATE TABLE IF NOT EXISTS vault_bridge_requests (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n status TEXT NOT NULL,\n action TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n result_json TEXT,\n error TEXT,\n attempt_count INTEGER NOT NULL DEFAULT 0\n )`);\n await control.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_bridge_requests_status_created ON vault_bridge_requests(status, created_at)\");\n await control.execute(`UPDATE vault_bridge_requests\n SET status=CASE WHEN attempt_count >= 2 THEN 'FAIL' ELSE 'PENDING' END,\n error=CASE WHEN attempt_count >= 2 THEN 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' ELSE 'STALE_LEASE_RECOVERED' END,\n updated_at=datetime('now')\n WHERE status='RUNNING' AND updated_at < datetime('now','-2 minutes')`);\n await control.execute(`UPDATE vault_bridge_requests SET status='FAIL', error='RETRY_BUDGET_EXHAUSTED', updated_at=datetime('now')\n WHERE status='PENDING' AND attempt_count >= 2`);\n const result = await control.execute(`UPDATE vault_bridge_requests\n SET status='RUNNING', updated_at=datetime('now'), attempt_count=attempt_count+1\n WHERE id=(SELECT id FROM vault_bridge_requests WHERE status='PENDING' AND attempt_count < 2 ORDER BY created_at ASC LIMIT 1)\n AND status='PENDING' AND attempt_count < 2\n RETURNING id,action,payload_json,attempt_count,created_at`);\n return result.rows[0] as any | undefined;\n}\n\nasync function finish(id: string, status: \"PASS\" | \"FAIL\" | \"BLOCKED\", result: unknown, error: string | null = null) {\n const resultJson = JSON.stringify(result).slice(0, 100_000);\n await control.execute({\n sql: `UPDATE vault_bridge_requests SET status=?, result_json=?, error=?, updated_at=datetime('now') WHERE id=?`,\n args: [status, resultJson, error, id],\n });\n}\n\nasync function searchOne(query: string, limit: number) {\n const match = ftsQuery(query);\n if (!match) return { conversations: [], checkpoints: [], knowledge: [] };\n\n const conversations = await db.execute({\n sql: `WITH hits AS (\n SELECT conversation_id,message_id,role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 36) AS hit_snippet,\n bm25(vault_messages_fts, 6.0,0.0,2.5,0.0,1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 160\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn FROM hits\n )\n SELECT c.id,c.title,c.create_time,c.update_time,c.message_count,b.message_id,b.role,b.hit_snippet,b.rank\n FROM best b JOIN conversations c ON c.id=b.conversation_id\n WHERE b.rn=1\n ORDER BY b.rank,c.update_time DESC\n LIMIT ?`,\n args: [match, limit],\n });\n\n const checkpoints = await db.execute({\n sql: `SELECT checkpoint_id AS id,project,title,\n snippet(vault_checkpoints_fts,3,'','',' … ',36) AS hit_snippet,\n bm25(vault_checkpoints_fts,0.0,3.0,5.0,2.0,2.0,1.5,1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n const knowledge = await db.execute({\n sql: `SELECT knowledge_id AS id,project,kind,title,\n snippet(vault_knowledge_fts,4,'','',' … ',36) AS hit_snippet,\n bm25(vault_knowledge_fts,0.0,2.0,2.0,5.0,3.0,1.5,1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n return {\n conversations: conversations.rows.map((r: any) => ({\n type: \"conversation\", id: r.id, title: r.title, project: null, kind: null,\n createTime: r.create_time, updateTime: r.update_time, messageCount: Number(r.message_count ?? 0),\n messageId: r.message_id, role: r.role,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n checkpoints: checkpoints.rows.map((r: any) => ({\n type: \"checkpoint\", id: r.id, project: r.project, kind: \"checkpoint\", title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n knowledge: knowledge.rows.map((r: any) => ({\n type: \"knowledge\", id: r.id, project: r.project, kind: r.kind, title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n };\n}\n\nasync function search(payload: any) {\n const query = clip(payload?.query, 200);\n const limit = Math.min(10, Math.max(1, Number(payload?.limit ?? 6) || 6));\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const results = await searchOne(query, limit);\n return { query, engine: \"fts5_bm25\", ...results };\n}\n\nasync function searchHybrid(payload: any) {\n const query = clip(payload?.query, 200);\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const variants = stringList(payload?.variants, 8, 200).filter((v) => v.toLocaleLowerCase() !== query.toLocaleLowerCase());\n const projects = new Set(stringList(payload?.projects, 6, 120).map((v) => v.toLocaleLowerCase()));\n const kinds = new Set(stringList(payload?.kinds, 10, 80).map((v) => v.toLocaleLowerCase()));\n const limit = Math.min(15, Math.max(1, Number(payload?.limit ?? 8) || 8));\n const queries = [query, ...variants];\n const fused = new Map();\n\n for (let qi = 0; qi < queries.length; qi++) {\n const q = queries[qi];\n const weight = qi === 0 ? 2.0 : 1.0;\n const result = await searchOne(q, 20);\n const groups = [result.conversations, result.checkpoints, result.knowledge];\n for (const group of groups) {\n for (let position = 0; position < group.length; position++) {\n const item: any = group[position];\n if (projects.size && (!item.project || !projects.has(String(item.project).toLocaleLowerCase()))) continue;\n if (kinds.size && (!item.kind || !kinds.has(String(item.kind).toLocaleLowerCase()))) continue;\n const key = `${item.type}:${item.id}`;\n const rrf = weight / (60 + position + 1);\n const existing = fused.get(key) ?? { ...item, score: 0, matchedQueries: [] as string[] };\n existing.score += rrf;\n if (!existing.matchedQueries.includes(q)) existing.matchedQueries.push(q);\n if (String(item.snippet ?? \"\").length > String(existing.snippet ?? \"\").length) existing.snippet = item.snippet;\n fused.set(key, existing);\n }\n }\n }\n\n const items = [...fused.values()]\n .filter((item) => {\n if (projects.size && item.type !== \"conversation\" && item.project && !projects.has(String(item.project).toLocaleLowerCase())) return false;\n if (kinds.size && item.type !== \"conversation\" && item.kind && !kinds.has(String(item.kind).toLocaleLowerCase())) return false;\n return true;\n })\n .sort((a, b) => b.score - a.score || String(a.title).localeCompare(String(b.title)))\n .slice(0, limit);\n\n return {\n query,\n variants,\n engine: \"fts5_bm25_rrf\",\n expansionSource: \"chat_control_plane\",\n filters: { projects: [...projects], kinds: [...kinds] },\n items,\n };\n}\n\nasync function getConversation(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_CONVERSATION_ID\");\n const maxMessages = Math.min(80, Math.max(1, Number(payload?.maxMessages ?? 40) || 40));\n const maxChars = Math.min(60_000, Math.max(2_000, Number(payload?.maxChars ?? 20_000) || 20_000));\n const conversation = await db.execute({\n sql: `SELECT id,title,create_time,update_time,message_count,source_file,imported_at FROM conversations WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!conversation.rows.length) throw new Error(\"CONVERSATION_NOT_FOUND\");\n const messages = await db.execute({\n sql: `SELECT id,seq,role,create_time,content_text FROM vault_messages WHERE conversation_id=? ORDER BY seq ASC LIMIT ?`,\n args: [id, maxMessages],\n });\n let used = 0;\n const clippedMessages: any[] = [];\n for (const row of messages.rows as any[]) {\n const remaining = maxChars - used;\n if (remaining <= 0) break;\n const text = String(row.content_text ?? \"\").slice(0, remaining);\n used += text.length;\n clippedMessages.push({ id: row.id, seq: Number(row.seq), role: row.role, createTime: row.create_time, content: text });\n }\n return { ...(conversation.rows[0] as any), messages: clippedMessages, returnedChars: used, truncatedByBridge: messages.rows.length > clippedMessages.length || used >= maxChars };\n}\n\nasync function getKnowledge(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_KNOWLEDGE_ID\");\n const item = await db.execute({\n sql: `SELECT id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at FROM vault_knowledge_items WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!item.rows.length) throw new Error(\"KNOWLEDGE_NOT_FOUND\");\n const relations = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type='knowledge' AND source_id=?) OR (target_type='knowledge' AND target_id=?)\n ORDER BY weight DESC, relation LIMIT 60`,\n args: [id, id],\n });\n const row: any = item.rows[0];\n return {\n ...row,\n tags: JSON.parse(String(row.tags_json || \"[]\")),\n entities: JSON.parse(String(row.entities_json || \"[]\")),\n relations: relations.rows,\n };\n}\n\nasync function related(payload: any) {\n const type = objectType(payload?.type);\n const id = clip(payload?.id, 160);\n const limit = Math.min(80, Math.max(1, Number(payload?.limit ?? 30) || 30));\n if (!type || !safeId(id)) throw new Error(\"VALID_TYPE_AND_ID_REQUIRED\");\n const rows = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type=? AND source_id=?) OR (target_type=? AND target_id=?)\n ORDER BY weight DESC, updated_at DESC LIMIT ?`,\n args: [type, id, type, id, limit],\n });\n return { type, id, relations: rows.rows };\n}\n\nasync function stats() {\n const result = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations,\n (SELECT COALESCE(SUM(content_bytes),0) FROM conversations) AS source_content_bytes`);\n return { ...(result.rows[0] as any), activeProvider: storage.activeProvider, bridgeVersion: BRIDGE_VERSION };\n}\n\nasync function upsertCheckpoint(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const title = clip(payload?.title, 240);\n const summary = clip(payload?.summary, 12_000);\n if (!project || !title || !summary) throw new Error(\"PROJECT_TITLE_SUMMARY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"cp_bridge\", requestId);\n const decisions = clip(payload?.decisions, 12_000);\n const openGaps = clip(payload?.openGaps, 12_000);\n const nextAction = clip(payload?.nextAction, 12_000);\n const evidenceState = clip(payload?.evidenceState, 80) || \"CHECKPOINT\";\n const sourceConversationId = safeId(payload?.sourceConversationId) ? payload.sourceConversationId : null;\n const now = new Date().toISOString();\n await db.batch([\n {\n sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,title,summary,decisions,openGaps,nextAction,sourceConversationId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_checkpoints_fts WHERE checkpoint_id=?`, args: [id] },\n { sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`, args: [id,project,title,summary,decisions,openGaps,nextAction] },\n ]);\n return { id, project, title, evidenceState, updatedAt: now };\n}\n\nasync function upsertKnowledge(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const kind = clip(payload?.kind, 80).toLowerCase();\n const title = clip(payload?.title, 240);\n const body = clip(payload?.body, 20_000);\n if (!project || !kind || !title || !body) throw new Error(\"PROJECT_KIND_TITLE_BODY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"kn_bridge\", requestId);\n const tags = stringList(payload?.tags, 24, 80);\n const entities = stringList(payload?.entities, 24, 120);\n const evidenceState = clip(payload?.evidenceState, 80) || \"KNOWLEDGE\";\n const sourceType = objectType(payload?.sourceType) || null;\n const sourceId = safeId(payload?.sourceId) ? payload.sourceId : null;\n if ((sourceType && !sourceId) || (!sourceType && sourceId)) throw new Error(\"SOURCE_TYPE_AND_ID_MUST_PAIR\");\n const now = new Date().toISOString();\n const relationsInput = Array.isArray(payload?.relations) ? payload.relations.slice(0, 24) : [];\n const relationStatements: any[] = [\n { sql: `DELETE FROM vault_relations WHERE source_type='knowledge' AND source_id=?`, args: [id] },\n ];\n for (let index = 0; index < relationsInput.length; index++) {\n const rel = relationsInput[index] ?? {};\n const relation = clip(rel.relation, 80).toLowerCase().replace(/[^a-z0-9_.:-]/g, \"_\");\n const targetType = objectType(rel.targetType);\n const targetId = clip(rel.targetId, 160);\n if (!relation || !targetType || !safeId(targetId)) throw new Error(`INVALID_RELATION_${index}`);\n const weightRaw = Number(rel.weight ?? 1);\n const weight = Number.isFinite(weightRaw) ? Math.max(0, Math.min(10, weightRaw)) : 1;\n const provenance = clip(rel.provenance, 500);\n const relationId = `rel_${id}_${relation}_${targetType}_${targetId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n relationStatements.push({\n sql: `INSERT INTO vault_relations(id,source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(source_type,source_id,relation,target_type,target_id) DO UPDATE SET weight=excluded.weight,provenance=excluded.provenance,updated_at=excluded.updated_at`,\n args: [relationId,\"knowledge\",id,relation,targetType,targetId,weight,provenance,now,now],\n });\n }\n\n await db.batch([\n {\n sql: `INSERT INTO vault_knowledge_items(id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,kind=excluded.kind,title=excluded.title,body=excluded.body,tags_json=excluded.tags_json,entities_json=excluded.entities_json,source_type=excluded.source_type,source_id=excluded.source_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,kind,title,body,JSON.stringify(tags),JSON.stringify(entities),sourceType,sourceId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_knowledge_fts WHERE knowledge_id=?`, args: [id] },\n { sql: `INSERT INTO vault_knowledge_fts(knowledge_id,project,kind,title,body,tags,entities) VALUES(?,?,?,?,?,?,?)`, args: [id,project,kind,title,body,tags.join(\" \"),entities.join(\" \")] },\n ...relationStatements,\n ]);\n return { id, project, kind, title, tags, entities, relationCount: relationsInput.length, evidenceState, updatedAt: now };\n}\n\nconst request = await claimOne();\nif (!request) {\n console.log(JSON.stringify({ status: \"NO_PENDING_BRIDGE_REQUEST\", bridgeVersion: BRIDGE_VERSION }));\n} else {\n const id = String(request.id);\n try {\n const payload = JSON.parse(String(request.payload_json || \"{}\"));\n let result: unknown;\n let blocked = false;\n switch (String(request.action)) {\n case \"search\": result = await search(payload); break;\n case \"search_hybrid\": result = await searchHybrid(payload); break;\n case \"get_conversation\": result = await getConversation(payload); break;\n case \"get_knowledge\": result = await getKnowledge(payload); break;\n case \"related\": result = await related(payload); break;\n case \"stats\": result = await stats(); break;\n case \"checkpoint_upsert\": result = await upsertCheckpoint(payload, id); break;\n case \"knowledge_upsert\": result = await upsertKnowledge(payload, id); break;\n default: {\n const envelope = { status: \"BLOCKED\", id, action: request.action, error: \"ACTION_NOT_ALLOWED\", bridgeVersion: BRIDGE_VERSION };\n await finish(id, \"BLOCKED\", envelope, \"ACTION_NOT_ALLOWED\");\n console.log(JSON.stringify(envelope));\n blocked = true;\n }\n }\n if (!blocked) {\n const envelope = { status: \"PASS\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, activeProvider: storage.activeProvider, result };\n await finish(id, \"PASS\", envelope);\n console.log(JSON.stringify(envelope));\n }\n } catch (error) {\n const message = error instanceof Error ? error.message.slice(0, 500) : String(error).slice(0, 500);\n const envelope = { status: \"FAIL\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, error: message };\n await finish(id, \"FAIL\", envelope, message);\n console.log(JSON.stringify(envelope));\n }\n}\n","import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst BRIDGE_VERSION = \"0.5.0\";\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst OBJECT_TYPES = new Set([\"conversation\", \"checkpoint\", \"knowledge\", \"entity\", \"project\", \"artifact\", \"concept\"]);\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_.:-]{1,160}$/.test(value);\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 10) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction clip(value: unknown, max: number) {\n return typeof value === \"string\" ? value.trim().slice(0, max) : \"\";\n}\n\nfunction stringList(value: unknown, maxItems = 12, maxLen = 120) {\n if (!Array.isArray(value)) return [];\n return [...new Set(value.map((v) => clip(v, maxLen)).filter(Boolean))].slice(0, maxItems);\n}\n\nfunction objectType(value: unknown) {\n const type = clip(value, 40).toLowerCase();\n return OBJECT_TYPES.has(type) ? type : \"\";\n}\n\nfunction deterministicId(prefix: string, requestId: string) {\n const id = `${prefix}_${requestId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n if (!safeId(id)) throw new Error(\"INVALID_DETERMINISTIC_ID\");\n return id;\n}\n\nasync function claimOne() {\n await control.execute(`CREATE TABLE IF NOT EXISTS vault_bridge_requests (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n status TEXT NOT NULL,\n action TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n result_json TEXT,\n error TEXT,\n attempt_count INTEGER NOT NULL DEFAULT 0\n )`);\n await control.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_bridge_requests_status_created ON vault_bridge_requests(status, created_at)\");\n await control.execute(`UPDATE vault_bridge_requests\n SET status=CASE WHEN attempt_count >= 2 THEN 'FAIL' ELSE 'PENDING' END,\n error=CASE WHEN attempt_count >= 2 THEN 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' ELSE 'STALE_LEASE_RECOVERED' END,\n updated_at=datetime('now')\n WHERE status='RUNNING' AND updated_at < datetime('now','-2 minutes')`);\n await control.execute(`UPDATE vault_bridge_requests SET status='FAIL', error='RETRY_BUDGET_EXHAUSTED', updated_at=datetime('now')\n WHERE status='PENDING' AND attempt_count >= 2`);\n const result = await control.execute(`UPDATE vault_bridge_requests\n SET status='RUNNING', updated_at=datetime('now'), attempt_count=attempt_count+1\n WHERE id=(SELECT id FROM vault_bridge_requests WHERE status='PENDING' AND attempt_count < 2 ORDER BY created_at ASC LIMIT 1)\n AND status='PENDING' AND attempt_count < 2\n RETURNING id,action,payload_json,attempt_count,created_at`);\n return result.rows[0] as any | undefined;\n}\n\nasync function finish(id: string, status: \"PASS\" | \"FAIL\" | \"BLOCKED\", result: unknown, error: string | null = null) {\n const resultJson = JSON.stringify(result).slice(0, 100_000);\n await control.execute({\n sql: `UPDATE vault_bridge_requests SET status=?, result_json=?, error=?, updated_at=datetime('now') WHERE id=?`,\n args: [status, resultJson, error, id],\n });\n}\n\nasync function searchOne(query: string, limit: number) {\n const match = ftsQuery(query);\n if (!match) return { conversations: [], checkpoints: [], knowledge: [] };\n\n const conversations = await db.execute({\n sql: `WITH hits AS (\n SELECT conversation_id,message_id,role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 36) AS hit_snippet,\n bm25(vault_messages_fts, 6.0,0.0,2.5,0.0,1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 160\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn FROM hits\n )\n SELECT c.id,c.title,c.create_time,c.update_time,c.message_count,b.message_id,b.role,b.hit_snippet,b.rank\n FROM best b JOIN conversations c ON c.id=b.conversation_id\n WHERE b.rn=1\n ORDER BY b.rank,c.update_time DESC\n LIMIT ?`,\n args: [match, limit],\n });\n\n const checkpoints = await db.execute({\n sql: `SELECT checkpoint_id AS id,project,title,\n snippet(vault_checkpoints_fts,3,'','',' … ',36) AS hit_snippet,\n bm25(vault_checkpoints_fts,0.0,3.0,5.0,2.0,2.0,1.5,1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n const knowledge = await db.execute({\n sql: `SELECT knowledge_id AS id,project,kind,title,\n snippet(vault_knowledge_fts,4,'','',' … ',36) AS hit_snippet,\n bm25(vault_knowledge_fts,0.0,2.0,2.0,5.0,3.0,1.5,1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n return {\n conversations: conversations.rows.map((r: any) => ({\n type: \"conversation\", id: r.id, title: r.title, project: null, kind: null,\n createTime: r.create_time, updateTime: r.update_time, messageCount: Number(r.message_count ?? 0),\n messageId: r.message_id, role: r.role,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n checkpoints: checkpoints.rows.map((r: any) => ({\n type: \"checkpoint\", id: r.id, project: r.project, kind: \"checkpoint\", title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n knowledge: knowledge.rows.map((r: any) => ({\n type: \"knowledge\", id: r.id, project: r.project, kind: r.kind, title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n };\n}\n\nasync function search(payload: any) {\n const query = clip(payload?.query, 200);\n const limit = Math.min(10, Math.max(1, Number(payload?.limit ?? 6) || 6));\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const results = await searchOne(query, limit);\n return { query, engine: \"fts5_bm25\", ...results };\n}\n\nasync function searchHybrid(payload: any) {\n const query = clip(payload?.query, 200);\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const variants = stringList(payload?.variants, 8, 200).filter((v) => v.toLocaleLowerCase() !== query.toLocaleLowerCase());\n const projects = new Set(stringList(payload?.projects, 6, 120).map((v) => v.toLocaleLowerCase()));\n const kinds = new Set(stringList(payload?.kinds, 10, 80).map((v) => v.toLocaleLowerCase()));\n const limit = Math.min(15, Math.max(1, Number(payload?.limit ?? 8) || 8));\n const queries = [query, ...variants];\n const fused = new Map();\n\n for (let qi = 0; qi < queries.length; qi++) {\n const q = queries[qi];\n const weight = qi === 0 ? 2.0 : 1.0;\n const result = await searchOne(q, 20);\n const groups = [result.conversations, result.checkpoints, result.knowledge];\n for (const group of groups) {\n for (let position = 0; position < group.length; position++) {\n const item: any = group[position];\n if (projects.size && (!item.project || !projects.has(String(item.project).toLocaleLowerCase()))) continue;\n if (kinds.size && (!item.kind || !kinds.has(String(item.kind).toLocaleLowerCase()))) continue;\n const key = `${item.type}:${item.id}`;\n const rrf = weight / (60 + position + 1);\n const existing = fused.get(key) ?? { ...item, score: 0, matchedQueries: [] as string[] };\n existing.score += rrf;\n if (!existing.matchedQueries.includes(q)) existing.matchedQueries.push(q);\n if (String(item.snippet ?? \"\").length > String(existing.snippet ?? \"\").length) existing.snippet = item.snippet;\n fused.set(key, existing);\n }\n }\n }\n\n const items = [...fused.values()]\n .filter((item) => {\n if (projects.size && item.type !== \"conversation\" && item.project && !projects.has(String(item.project).toLocaleLowerCase())) return false;\n if (kinds.size && item.type !== \"conversation\" && item.kind && !kinds.has(String(item.kind).toLocaleLowerCase())) return false;\n return true;\n })\n .sort((a, b) => b.score - a.score || String(a.title).localeCompare(String(b.title)))\n .slice(0, limit);\n\n return {\n query,\n variants,\n engine: \"fts5_bm25_rrf\",\n expansionSource: \"chat_control_plane\",\n filters: { projects: [...projects], kinds: [...kinds] },\n items,\n };\n}\n\nasync function getConversation(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_CONVERSATION_ID\");\n const maxMessages = Math.min(80, Math.max(1, Number(payload?.maxMessages ?? 40) || 40));\n const maxChars = Math.min(60_000, Math.max(2_000, Number(payload?.maxChars ?? 20_000) || 20_000));\n const conversation = await db.execute({\n sql: `SELECT id,title,create_time,update_time,message_count,source_file,imported_at FROM conversations WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!conversation.rows.length) throw new Error(\"CONVERSATION_NOT_FOUND\");\n const messages = await db.execute({\n sql: `SELECT id,seq,role,create_time,content_text FROM vault_messages WHERE conversation_id=? ORDER BY seq ASC LIMIT ?`,\n args: [id, maxMessages],\n });\n let used = 0;\n const clippedMessages: any[] = [];\n for (const row of messages.rows as any[]) {\n const remaining = maxChars - used;\n if (remaining <= 0) break;\n const text = String(row.content_text ?? \"\").slice(0, remaining);\n used += text.length;\n clippedMessages.push({ id: row.id, seq: Number(row.seq), role: row.role, createTime: row.create_time, content: text });\n }\n return { ...(conversation.rows[0] as any), messages: clippedMessages, returnedChars: used, truncatedByBridge: messages.rows.length > clippedMessages.length || used >= maxChars };\n}\n\nasync function getKnowledge(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_KNOWLEDGE_ID\");\n const item = await db.execute({\n sql: `SELECT id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at FROM vault_knowledge_items WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!item.rows.length) throw new Error(\"KNOWLEDGE_NOT_FOUND\");\n const relations = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type='knowledge' AND source_id=?) OR (target_type='knowledge' AND target_id=?)\n ORDER BY weight DESC, relation LIMIT 60`,\n args: [id, id],\n });\n const row: any = item.rows[0];\n return {\n ...row,\n tags: JSON.parse(String(row.tags_json || \"[]\")),\n entities: JSON.parse(String(row.entities_json || \"[]\")),\n relations: relations.rows,\n };\n}\n\nasync function related(payload: any) {\n const type = objectType(payload?.type);\n const id = clip(payload?.id, 160);\n const limit = Math.min(80, Math.max(1, Number(payload?.limit ?? 30) || 30));\n if (!type || !safeId(id)) throw new Error(\"VALID_TYPE_AND_ID_REQUIRED\");\n const rows = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type=? AND source_id=?) OR (target_type=? AND target_id=?)\n ORDER BY weight DESC, updated_at DESC LIMIT ?`,\n args: [type, id, type, id, limit],\n });\n return { type, id, relations: rows.rows };\n}\n\nasync function stats() {\n const result = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations,\n (SELECT COALESCE(SUM(content_bytes),0) FROM conversations) AS source_content_bytes`);\n return { ...(result.rows[0] as any), activeProvider: storage.activeProvider, bridgeVersion: BRIDGE_VERSION };\n}\n\nasync function upsertCheckpoint(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const title = clip(payload?.title, 240);\n const summary = clip(payload?.summary, 12_000);\n if (!project || !title || !summary) throw new Error(\"PROJECT_TITLE_SUMMARY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"cp_bridge\", requestId);\n const decisions = clip(payload?.decisions, 12_000);\n const openGaps = clip(payload?.openGaps, 12_000);\n const nextAction = clip(payload?.nextAction, 12_000);\n const evidenceState = clip(payload?.evidenceState, 80) || \"CHECKPOINT\";\n const sourceConversationId = safeId(payload?.sourceConversationId) ? payload.sourceConversationId : null;\n const now = new Date().toISOString();\n await db.batch([\n {\n sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,title,summary,decisions,openGaps,nextAction,sourceConversationId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_checkpoints_fts WHERE checkpoint_id=?`, args: [id] },\n { sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`, args: [id,project,title,summary,decisions,openGaps,nextAction] },\n ]);\n return { id, project, title, evidenceState, updatedAt: now };\n}\n\nasync function upsertKnowledge(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const kind = clip(payload?.kind, 80).toLowerCase();\n const title = clip(payload?.title, 240);\n const body = clip(payload?.body, 20_000);\n if (!project || !kind || !title || !body) throw new Error(\"PROJECT_KIND_TITLE_BODY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"kn_bridge\", requestId);\n const tags = stringList(payload?.tags, 24, 80);\n const entities = stringList(payload?.entities, 24, 120);\n const evidenceState = clip(payload?.evidenceState, 80) || \"KNOWLEDGE\";\n const sourceType = objectType(payload?.sourceType) || null;\n const sourceId = safeId(payload?.sourceId) ? payload.sourceId : null;\n if ((sourceType && !sourceId) || (!sourceType && sourceId)) throw new Error(\"SOURCE_TYPE_AND_ID_MUST_PAIR\");\n const now = new Date().toISOString();\n const relationsInput = Array.isArray(payload?.relations) ? payload.relations.slice(0, 24) : [];\n const relationStatements: any[] = [\n { sql: `DELETE FROM vault_relations WHERE source_type='knowledge' AND source_id=?`, args: [id] },\n ];\n for (let index = 0; index < relationsInput.length; index++) {\n const rel = relationsInput[index] ?? {};\n const relation = clip(rel.relation, 80).toLowerCase().replace(/[^a-z0-9_.:-]/g, \"_\");\n const targetType = objectType(rel.targetType);\n const targetId = clip(rel.targetId, 160);\n if (!relation || !targetType || !safeId(targetId)) throw new Error(`INVALID_RELATION_${index}`);\n const weightRaw = Number(rel.weight ?? 1);\n const weight = Number.isFinite(weightRaw) ? Math.max(0, Math.min(10, weightRaw)) : 1;\n const provenance = clip(rel.provenance, 500);\n const relationId = `rel_${id}_${relation}_${targetType}_${targetId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n relationStatements.push({\n sql: `INSERT INTO vault_relations(id,source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(source_type,source_id,relation,target_type,target_id) DO UPDATE SET weight=excluded.weight,provenance=excluded.provenance,updated_at=excluded.updated_at`,\n args: [relationId,\"knowledge\",id,relation,targetType,targetId,weight,provenance,now,now],\n });\n }\n\n await db.batch([\n {\n sql: `INSERT INTO vault_knowledge_items(id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,kind=excluded.kind,title=excluded.title,body=excluded.body,tags_json=excluded.tags_json,entities_json=excluded.entities_json,source_type=excluded.source_type,source_id=excluded.source_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,kind,title,body,JSON.stringify(tags),JSON.stringify(entities),sourceType,sourceId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_knowledge_fts WHERE knowledge_id=?`, args: [id] },\n { sql: `INSERT INTO vault_knowledge_fts(knowledge_id,project,kind,title,body,tags,entities) VALUES(?,?,?,?,?,?,?)`, args: [id,project,kind,title,body,tags.join(\" \"),entities.join(\" \")] },\n ...relationStatements,\n ]);\n return { id, project, kind, title, tags, entities, relationCount: relationsInput.length, evidenceState, updatedAt: now };\n}\n\nfunction decimalString(value: unknown) {\n const raw = clip(value, 64);\n if (!/^-?(?:0|[1-9]\\d*)(?:\\.\\d+)?$/.test(raw)) throw new Error(\"INVALID_DECIMAL_STRING\");\n return raw;\n}\n\nfunction isoOrNull(value: unknown) {\n const raw = clip(value, 64);\n if (!raw) return null;\n const ms = Date.parse(raw);\n if (!Number.isFinite(ms)) throw new Error(\"INVALID_DATETIME\");\n return new Date(ms).toISOString();\n}\n\nfunction httpsOrNull(value: unknown) {\n const raw = clip(value, 2048);\n if (!raw) return null;\n const u = new URL(raw);\n if (u.protocol !== \"https:\") throw new Error(\"HTTPS_URL_REQUIRED\");\n return u.toString();\n}\n\nasync function payanaStateUpsert(payload: any) {\n const key = clip(payload?.key, 120);\n if (!safeId(key)) throw new Error(\"INVALID_PAYANA_STATE_KEY\");\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const sourceRef = clip(payload?.sourceRef, 500) || null;\n const value = payload?.value ?? null;\n const valueJson = JSON.stringify(value);\n if (valueJson.length > 40_000) throw new Error(\"PAYANA_STATE_VALUE_TOO_LARGE\");\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [key,valueJson,evidenceState,sourceRef,now,now],\n });\n return { key, evidenceState, updatedAt: now };\n}\n\nasync function payanaOpportunityUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n const title = clip(payload?.title, 240);\n if (!safeId(id) || !title) throw new Error(\"PAYANA_OPPORTUNITY_ID_TITLE_REQUIRED\");\n const platform = clip(payload?.platform, 120) || null;\n const url = httpsOrNull(payload?.url);\n const status = clip(payload?.status, 80) || \"UNVERIFIED\";\n const rewardMin = payload?.rewardMin == null || payload?.rewardMin === \"\" ? null : decimalString(payload.rewardMin);\n const rewardMax = payload?.rewardMax == null || payload?.rewardMax === \"\" ? null : decimalString(payload.rewardMax);\n const currency = clip(payload?.currency, 20).toUpperCase() || null;\n const kycState = clip(payload?.kycState, 80) || null;\n const capitalState = clip(payload?.capitalState, 80) || null;\n const deadlineAt = isoOrNull(payload?.deadlineAt);\n const constraints = stringList(payload?.constraints, 40, 500);\n const currentnessAt = isoOrNull(payload?.currentnessAt);\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const sourceRef = clip(payload?.sourceRef, 1000) || null;\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [id,title,platform,url,status,rewardMin,rewardMax,currency,kycState,capitalState,deadlineAt,JSON.stringify(constraints),currentnessAt,evidenceState,sourceRef,now,now],\n });\n return { id,title,status,rewardMin,rewardMax,currency,evidenceState,updatedAt:now };\n}\n\nasync function payanaEconomicUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_PAYANA_ECONOMIC_ID\");\n const opportunityId = safeId(payload?.opportunityId) ? String(payload.opportunityId) : null;\n const eventType = clip(payload?.eventType, 80) || \"REVENUE\";\n const amount = decimalString(payload?.amount);\n const currency = clip(payload?.currency, 20).toUpperCase();\n if (!currency) throw new Error(\"PAYANA_ECONOMIC_CURRENCY_REQUIRED\");\n const platform = clip(payload?.platform, 120) || null;\n const occurredAt = isoOrNull(payload?.occurredAt);\n const externalRef = clip(payload?.externalRef, 500) || null;\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const evidenceRefs = stringList(payload?.evidenceRefs, 20, 1000);\n const notes = clip(payload?.notes, 4000) || null;\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_economic_events(id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,event_type=excluded.event_type,amount_decimal=excluded.amount_decimal,currency=excluded.currency,platform=excluded.platform,occurred_at=excluded.occurred_at,external_ref=excluded.external_ref,evidence_state=excluded.evidence_state,evidence_refs_json=excluded.evidence_refs_json,notes=excluded.notes,updated_at=excluded.updated_at`,\n args: [id,opportunityId,eventType,amount,currency,platform,occurredAt,externalRef,evidenceState,JSON.stringify(evidenceRefs),notes,now,now],\n });\n return { id,eventType,amount,currency,evidenceState,updatedAt:now };\n}\n\nasync function payanaActionUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_PAYANA_ACTION_ID\");\n const opportunityId = safeId(payload?.opportunityId) ? String(payload.opportunityId) : null;\n const actionType = clip(payload?.actionType, 80);\n if (!actionType) throw new Error(\"PAYANA_ACTION_TYPE_REQUIRED\");\n const status = clip(payload?.status, 80) || \"UNVERIFIED\";\n const riskClass = clip(payload?.riskClass, 80) || \"read_only\";\n const approvalState = clip(payload?.approvalState, 80) || \"NOT_REQUIRED\";\n const reversible = payload?.reversible === true ? 1 : 0;\n const inputSummary = clip(payload?.inputSummary, 4000) || null;\n const outputSummary = clip(payload?.outputSummary, 4000) || null;\n const receiptId = safeId(payload?.receiptId) ? String(payload.receiptId) : null;\n const startedAt = isoOrNull(payload?.startedAt);\n const finishedAt = isoOrNull(payload?.finishedAt);\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,action_type=excluded.action_type,status=excluded.status,risk_class=excluded.risk_class,approval_state=excluded.approval_state,reversible=excluded.reversible,input_summary=excluded.input_summary,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,started_at=excluded.started_at,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,opportunityId,actionType,status,riskClass,approvalState,reversible,inputSummary,outputSummary,receiptId,startedAt,finishedAt,evidenceState,now,now],\n });\n return { id,actionType,status,riskClass,approvalState,reversible:Boolean(reversible),evidenceState,updatedAt:now };\n}\n\nasync function payanaReceiptUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n const subjectType = clip(payload?.subjectType, 80);\n const subjectId = clip(payload?.subjectId, 160);\n const receiptType = clip(payload?.receiptType, 80);\n if (!safeId(id) || !subjectType || !safeId(subjectId) || !receiptType) throw new Error(\"INVALID_PAYANA_RECEIPT\");\n const locator = clip(payload?.locator, 2000) || null;\n const sha256Raw = clip(payload?.sha256, 64).toLowerCase();\n const sha256 = sha256Raw ? (/^[a-f0-9]{64}$/.test(sha256Raw) ? sha256Raw : (() => { throw new Error(\"INVALID_SHA256\"); })()) : null;\n const receiptPayload = payload?.payload ?? {};\n const payloadJson = JSON.stringify(receiptPayload);\n if (payloadJson.length > 40_000) throw new Error(\"PAYANA_RECEIPT_PAYLOAD_TOO_LARGE\");\n const verificationState = clip(payload?.verificationState, 80) || \"UNVERIFIED\";\n const verifiedAt = isoOrNull(payload?.verifiedAt);\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET subject_type=excluded.subject_type,subject_id=excluded.subject_id,receipt_type=excluded.receipt_type,locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [id,subjectType,subjectId,receiptType,locator,sha256,payloadJson,verificationState,verifiedAt,now,now],\n });\n return { id,subjectType,subjectId,receiptType,verificationState,verifiedAt,updatedAt:now };\n}\n\nasync function payanaSnapshot(payload: any) {\n const recent = Math.min(50, Math.max(1, Number(payload?.limit ?? 20) || 20));\n const counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM payana_state) AS state_items,\n (SELECT COUNT(*) FROM payana_opportunities) AS opportunities,\n (SELECT COUNT(*) FROM payana_economic_events) AS economic_events,\n (SELECT COUNT(*) FROM payana_actions) AS actions,\n (SELECT COUNT(*) FROM payana_receipts) AS receipts`);\n const state = await db.execute({sql:`SELECT key,value_json,evidence_state,source_ref,updated_at FROM payana_state ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const opportunities = await db.execute({sql:`SELECT id,title,platform,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,currentness_at,evidence_state,updated_at FROM payana_opportunities ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const economic = await db.execute({sql:`SELECT id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,updated_at FROM payana_economic_events ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const actions = await db.execute({sql:`SELECT id,opportunity_id,action_type,status,risk_class,approval_state,reversible,receipt_id,started_at,finished_at,evidence_state,updated_at FROM payana_actions ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const receipts = await db.execute({sql:`SELECT id,subject_type,subject_id,receipt_type,locator,sha256,verification_state,verified_at,updated_at FROM payana_receipts ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n return { schemaVersion:\"payana-ledger-1.0.0\", counts:counts.rows[0], state:state.rows, opportunities:opportunities.rows, economicEvents:economic.rows, actions:actions.rows, receipts:receipts.rows };\n}\n\nconst request = await claimOne();\nif (!request) {\n console.log(JSON.stringify({ status: \"NO_PENDING_BRIDGE_REQUEST\", bridgeVersion: BRIDGE_VERSION }));\n} else {\n const id = String(request.id);\n try {\n const payload = JSON.parse(String(request.payload_json || \"{}\"));\n let result: unknown;\n let blocked = false;\n switch (String(request.action)) {\n case \"search\": result = await search(payload); break;\n case \"search_hybrid\": result = await searchHybrid(payload); break;\n case \"get_conversation\": result = await getConversation(payload); break;\n case \"get_knowledge\": result = await getKnowledge(payload); break;\n case \"related\": result = await related(payload); break;\n case \"stats\": result = await stats(); break;\n case \"checkpoint_upsert\": result = await upsertCheckpoint(payload, id); break;\n case \"knowledge_upsert\": result = await upsertKnowledge(payload, id); break;\n default: {\n const envelope = { status: \"BLOCKED\", id, action: request.action, error: \"ACTION_NOT_ALLOWED\", bridgeVersion: BRIDGE_VERSION };\n await finish(id, \"BLOCKED\", envelope, \"ACTION_NOT_ALLOWED\");\n console.log(JSON.stringify(envelope));\n blocked = true;\n }\n }\n if (!blocked) {\n const envelope = { status: \"PASS\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, activeProvider: storage.activeProvider, result };\n await finish(id, \"PASS\", envelope);\n console.log(JSON.stringify(envelope));\n }\n } catch (error) {\n const message = error instanceof Error ? error.message.slice(0, 500) : String(error).slice(0, 500);\n const envelope = { status: \"FAIL\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, error: message };\n await finish(id, \"FAIL\", envelope, message);\n console.log(JSON.stringify(envelope));\n }\n}\n","createdAt",["D",1788811801769],"branchVersion","branchId","4a215ad2-3b4a-4363-8735-e98d19215cb5","id","348a33bb-f2d9-4c7a-b6a6-b2762cf9a17f","guh-knowledge-vault",["D",1788716337448],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Private searchable mirror of ChatGPT exports","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a077cd-4980-75c9-8c9f-12270a3b1d2b","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","348a33bbf2d94c7ab6a6b2762cf9a17f","tursoHostname","348a33bbf2d94c7ab6a6b2762cf9a17f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789585873168],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_18":55,"_107":108,"_109":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":93,"_94":95,"_96":50,"_97":44,"_98":65,"_99":45,"_100":101},"isOwned",10,"payana-ledger-v1","projectId","forkedBranchId","bb539edb-15fc-48c6-a690-7d3728033cd0","forkedBranchVersion",17,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":487,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":488,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":489,"_84":490,"_86":491,"_88":25},"tree",[300,311,313,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333],"files",[300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333],"counts",{"_289":63,"_290":291,"_292":63,"_293":294,"_295":296},"contents",[141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161],"upstreamProject","upstreamBranch",{"_43":93,"_38":134,"_135":136,"_32":137,"_91":44,"_13":138,"_92":-5,"_94":-5,"_139":140,"_47":-5,"_88":25,"_49":50,"_100":101,"_64":65,"_99":45},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788716337448],"updatedAt",["D",1789089349222],"main",38,"lockfileKey","1789089349347-esm.town_v_cleitoncosta_guh-knowledge-vault@38-main",{"_43":284,"_32":285,"_30":286,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":287,"_13":63,"_33":277,"_35":-5,"_24":25,"_167":-5,"_27":288},{"_43":279,"_32":280,"_30":281,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":282,"_13":63,"_33":277,"_35":-5,"_24":25,"_167":-5,"_27":283},{"_43":273,"_32":274,"_30":275,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":276,"_13":63,"_33":277,"_35":-5,"_24":25,"_167":-5,"_27":278},{"_43":267,"_32":268,"_30":269,"_163":-5,"_41":42,"_40":166,"_164":25,"_38":270,"_13":63,"_33":20,"_35":271,"_24":25,"_167":-5,"_27":272},{"_43":261,"_32":262,"_30":263,"_163":-5,"_41":42,"_40":166,"_164":25,"_38":264,"_13":63,"_33":20,"_35":265,"_24":25,"_167":-5,"_27":266},{"_43":254,"_32":255,"_30":256,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":257,"_13":63,"_33":258,"_35":259,"_24":25,"_167":-5,"_27":260},{"_43":247,"_32":248,"_30":249,"_163":-5,"_41":42,"_40":250,"_164":59,"_38":251,"_13":63,"_33":34,"_35":252,"_24":25,"_167":-5,"_27":253},{"_43":241,"_32":242,"_30":243,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":244,"_13":63,"_33":34,"_35":245,"_24":25,"_167":-5,"_27":246},{"_43":235,"_32":236,"_30":237,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":238,"_13":63,"_33":34,"_35":239,"_24":25,"_167":-5,"_27":240},{"_43":229,"_32":230,"_30":231,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":232,"_13":63,"_33":34,"_35":233,"_24":25,"_167":-5,"_27":234},{"_43":223,"_32":224,"_30":225,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":226,"_13":63,"_33":34,"_35":227,"_24":25,"_167":-5,"_27":228},{"_43":217,"_32":218,"_30":219,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":220,"_13":63,"_33":34,"_35":221,"_24":25,"_167":-5,"_27":222},{"_43":211,"_32":212,"_30":213,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":214,"_13":63,"_33":34,"_35":215,"_24":25,"_167":-5,"_27":216},{"_43":205,"_32":206,"_30":207,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":208,"_13":63,"_33":34,"_35":209,"_24":25,"_167":-5,"_27":210},{"_43":199,"_32":200,"_30":201,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":202,"_13":63,"_33":34,"_35":203,"_24":25,"_167":-5,"_27":204},{"_43":193,"_32":194,"_30":195,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":196,"_13":63,"_33":34,"_35":197,"_24":25,"_167":-5,"_27":198},{"_43":187,"_32":188,"_30":189,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":190,"_13":63,"_33":34,"_35":191,"_24":25,"_167":-5,"_27":192},{"_43":181,"_32":182,"_30":183,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":184,"_13":63,"_33":34,"_35":185,"_24":25,"_167":-5,"_27":186},{"_43":175,"_32":176,"_30":177,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":178,"_13":63,"_33":34,"_35":179,"_24":25,"_167":-5,"_27":180},{"_43":169,"_32":170,"_30":171,"_163":-5,"_41":42,"_40":166,"_164":59,"_38":172,"_13":63,"_33":34,"_35":173,"_24":25,"_167":-5,"_27":174},{"_43":162,"_32":28,"_30":31,"_163":-5,"_41":42,"_40":14,"_164":25,"_38":165,"_13":166,"_33":34,"_35":37,"_24":25,"_167":-5,"_27":168},"1d67404a-afe1-46f3-8322-857ecf43f5ff","parentId","latest",["D",1788811801769],1,"label",[28],"0ca4915d-65a6-403a-926f-9c909c242f80","v07_zip64_selftest.ts","01a07d7c-e77c-71a8-be45-074ff23a1da1",["D",1788811732860],"import { readZipDirectory, readZipEntryText } from \"./frontend/zip_selective_reader.ts\";\n\nfunction crc32(bytes: Uint8Array) {\n let crc = 0xffffffff;\n for (let i = 0; i < bytes.length; i++) {\n crc ^= bytes[i];\n for (let bit = 0; bit < 8; bit++) crc = (crc >>> 1) ^ (0xedb88320 & -(crc & 1));\n }\n return (crc ^ 0xffffffff) >>> 0;\n}\n\nconst out: number[] = [];\nconst u16 = (v: number) => { out.push(v & 255, (v >>> 8) & 255); };\nconst u32 = (v: number) => { out.push(v & 255, (v >>> 8) & 255, (v >>> 16) & 255, (v >>> 24) & 255); };\nconst u64 = (v: number) => { const low = v >>> 0; const high = Math.floor(v / 0x100000000) >>> 0; u32(low); u32(high); };\nconst bytes = (b: Uint8Array) => { for (const x of b) out.push(x); };\n\nconst enc = new TextEncoder();\nconst name = enc.encode(\"conversations.json\");\nconst payloadText = JSON.stringify([{ id: \"zip64_demo\", title: \"ZIP64 synthetic\", mapping: {} }]);\nconst payload = enc.encode(payloadText);\nconst crc = crc32(payload);\n\nconst localOffset = out.length;\nu32(0x04034b50); u16(45); u16(0); u16(0); u16(0); u16(0); u32(crc); u32(payload.length); u32(payload.length); u16(name.length); u16(0); bytes(name); bytes(payload);\n\nconst centralOffset = out.length;\nu32(0x02014b50); u16(45); u16(45); u16(0); u16(0); u16(0); u16(0); u32(crc);\nu32(0xffffffff); u32(0xffffffff); u16(name.length); u16(28); u16(0); u16(0); u16(0); u32(0); u32(0xffffffff); bytes(name);\nu16(0x0001); u16(24); u64(payload.length); u64(payload.length); u64(localOffset);\nconst centralSize = out.length - centralOffset;\n\nconst zip64EocdOffset = out.length;\nu32(0x06064b50); u64(44); u16(45); u16(45); u32(0); u32(0); u64(1); u64(1); u64(centralSize); u64(centralOffset);\nconst locatorOffset = out.length;\nu32(0x07064b50); u32(0); u64(zip64EocdOffset); u32(1);\nconst eocdOffset = out.length;\nu32(0x06054b50); u16(0); u16(0); u16(0xffff); u16(0xffff); u32(0xffffffff); u32(0xffffffff); u16(0);\n\nconst archive = new Uint8Array(out);\nconst blob = new Blob([archive], { type: \"application/zip\" });\nconst entries = await readZipDirectory(blob);\nconst text = entries.length === 1 ? await readZipEntryText(blob, entries[0]) : \"\";\n\nlet multidiskBlocked = false;\nconst mutated = archive.slice();\nmutated[locatorOffset + 4] = 1;\ntry { await readZipDirectory(new Blob([mutated])); } catch (err) { multidiskBlocked = String((err as Error).message).includes(\"ZIP_MULTIDISK_UNSUPPORTED\"); }\n\nconst pass = entries.length === 1 &&\n entries[0].name === \"conversations.json\" &&\n entries[0].zip64 === true &&\n entries[0].compressedSize === payload.length &&\n entries[0].uncompressedSize === payload.length &&\n entries[0].localHeaderOffset === 0 &&\n text === payloadText &&\n multidiskBlocked;\n\nconst result = { pass, archiveBytes: archive.length, centralOffset, centralSize, zip64EocdOffset, locatorOffset, eocdOffset, entry: entries[0], textMatches: text === payloadText, multidiskBlocked };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[170],"8049c0b9-7e48-4ca7-92db-3a49b1124662","v07_preflight_selftest.ts","01a07d7c-e77c-71a8-be45-02d5cbbb65ee",["D",1788811732860],"import { buildPreflight, preflightGate, preflightScopeKey } from \"./frontend/preflight.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst counts = async () => {\n const r = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_import_runs) AS import_runs,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items`);\n return r.rows[0] as any;\n};\n\nconst before = await counts();\nconst huge = \"x\".repeat(180_001);\nconst candidates: any[] = [\n {\n sourceFile: \"synthetic::conversations.json\",\n conv: {\n id: \"v07_good\",\n title: \"good\",\n current_node: \"m2\",\n mapping: {\n m1: { parent: null, message: { id: \"m1\", author: { role: \"user\" }, create_time: 1, content: { content_type: \"text\", parts: [\"hello\"] } } },\n m2: { parent: \"m1\", message: { id: \"m2\", author: { role: \"assistant\" }, create_time: 2, content: { content_type: \"text\", parts: [\"world\"] } } },\n },\n },\n },\n {\n sourceFile: \"synthetic::conversations-0001.json\",\n conv: {\n title: \"unkeyed unknown content\",\n mapping: {\n a: { parent: null, message: { id: \"a\", author: { role: \"tool\" }, create_time: 3, content: { content_type: \"brand_new_future_type\", parts: [\"future\"] } } },\n },\n },\n },\n {\n sourceFile: \"synthetic::conversations-0002.json\",\n conv: {\n id: \"v07_huge\",\n title: \"oversized\",\n current_node: \"h\",\n mapping: {\n h: { parent: null, message: { id: \"h\", author: { role: \"assistant\" }, create_time: 4, content: { content_type: \"text\", parts: [huge] } } },\n },\n },\n },\n];\n\nconst inventory: any = {\n inputFileCount: 1,\n inputNames: [\"synthetic.zip\"],\n sourceBytes: 2_000_000_000,\n zipCount: 1,\n jsonCount: 0,\n zipEntryCount: 10,\n conversationJsonCount: 3,\n otherFileCount: 7,\n candidateCount: 3,\n duplicateCandidateCount: 0,\n extensionBreakdown: [{ extension: \"png\", count: 7 }],\n};\n\nconst report = buildPreflight(candidates, inventory, 2);\nconst after = await counts();\nconst sameDb = JSON.stringify(before) === JSON.stringify(after);\nconst issue = (code: string) => report.issues.find((x) => x.code === code);\nconst fingerprintA = \"a\".repeat(64);\nconst fingerprintB = \"b\".repeat(64);\nconst reviewedKey = preflightScopeKey(fingerprintA, 25);\nconst gateSame = preflightGate(reviewedKey, fingerprintA, 25);\nconst gateDifferentLimit = preflightGate(reviewedKey, fingerprintA, 50);\nconst gateDifferentFingerprint = preflightGate(reviewedKey, fingerprintB, 25);\nconst pass = storage.activeProvider === \"turso\" &&\n gateSame.allowed === true &&\n gateDifferentLimit.allowed === false &&\n gateDifferentFingerprint.allowed === false &&\n sameDb &&\n report.candidateCount === 3 &&\n report.selectedCount === 2 &&\n report.explicitIdCount === 2 &&\n report.unkeyedCount === 1 &&\n report.mappingCount === 3 &&\n report.fallbackBranchCount === 1 &&\n report.textMessages === 4 &&\n report.messagesOverLimit === 1 &&\n report.unknownContentTypes.some((x) => x.contentType === \"brand_new_future_type\" && x.count === 1) &&\n issue(\"MISSING_EXPLICIT_ID\")?.severity === \"WARN\" &&\n issue(\"UNKNOWN_CONTENT_TYPES\")?.severity === \"WARN\" &&\n issue(\"MESSAGE_OVER_180K\")?.severity === \"WARN\" &&\n issue(\"LARGE_SOURCE_ZIP\")?.severity === \"INFO\" &&\n report.blocked === false;\n\nconst result = { pass, version: \"0.7.0\", activeProvider: storage.activeProvider, sameDbBeforeAfter: sameDb, gates: { sameScope: gateSame.allowed, differentLimit: gateDifferentLimit.allowed, differentFingerprint: gateDifferentFingerprint.allowed }, before, after, report };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[176],"69648dac-a748-4abb-af01-8b342bc4c1ff","v06_selftest.ts","01a07d7c-e77c-71a8-be44-ff707a689bdd",["D",1788811732860],"import JSZip from \"npm:jszip@3.10.1\";\nimport { readExportFiles, scopedRunId } from \"./frontend/export_reader.ts\";\nimport { readZipDirectory } from \"./frontend/zip_selective_reader.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst zip = new JSZip();\nconst convA = [{ id: \"zip_demo_a\", title: \"ZIP demo A\", create_time: 1, update_time: 2, mapping: {} }];\nconst convB = [\n { id: \"zip_demo_b\", title: \"ZIP demo B\", create_time: 3, update_time: 4, mapping: {} },\n { id: \"zip_demo_c\", title: \"ZIP demo C\", create_time: 5, update_time: 6, mapping: {} },\n { id: \"zip_demo_a\", title: \"ZIP demo A newer duplicate\", create_time: 1, update_time: 7, mapping: {} },\n];\nzip.file(\"conversations.json\", JSON.stringify(convA));\nzip.file(\"nested/conversations-0001.json\", JSON.stringify(convB));\nzip.file(\"chat.html\", \"demo\");\nzip.file(\"assets/image.png\", new Uint8Array([1, 2, 3, 4]));\nzip.file(\"account/user.json\", JSON.stringify({ id: \"not-a-conversation-file\" }));\nconst bytes = await zip.generateAsync({ type: \"uint8array\", compression: \"DEFLATE\", compressionOptions: { level: 6 } });\nconst file = new File([bytes], \"synthetic-chatgpt-export.zip\", { type: \"application/zip\", lastModified: 1788730000000 });\nlet wholeFileArrayBufferAttempted = false;\nconst guardedFile = new Proxy(file, {\n get(target, prop) {\n if (prop === \"arrayBuffer\") return async () => { wholeFileArrayBufferAttempted = true; throw new Error(\"WHOLE_FILE_ARRAYBUFFER_FORBIDDEN\"); };\n const value = Reflect.get(target, prop, target);\n return typeof value === \"function\" ? value.bind(target) : value;\n },\n}) as File;\nconst parsed = await readExportFiles([guardedFile]);\nconst parsedAgain = await readExportFiles([guardedFile]);\nconst renamedFile = new File([bytes], \"same-export-redownloaded.zip\", { type: \"application/zip\", lastModified: 999 });\nconst parsedRenamed = await readExportFiles([renamedFile]);\nconst scopedOne = scopedRunId(parsed.runId, 1);\nconst scopedThree = scopedRunId(parsed.runId, 3);\nconst directory = await readZipDirectory(file);\nconst conversationMethods = directory.filter((entry) => entry.name.includes(\"conversations\")).map((entry) => entry.method);\n\nconst emptyZip = new JSZip();\nemptyZip.file(\"account/user.json\", JSON.stringify({ demo: true }));\nemptyZip.file(\"chat.html\", \"\");\nconst emptyBytes = await emptyZip.generateAsync({ type: \"uint8array\", compression: \"DEFLATE\" });\nlet missingConversationJsonBlocked = false;\ntry {\n await readExportFiles([new File([emptyBytes], \"no-conversations.zip\", { type: \"application/zip\", lastModified: 1 })]);\n} catch (error) {\n missingConversationJsonBlocked = String(error).includes(\"nenhum conversations*.json reconhecido\");\n}\n\nconst crcZip = new JSZip();\ncrcZip.file(\"conversations.json\", JSON.stringify(convA));\nconst crcBytes = await crcZip.generateAsync({ type: \"uint8array\", compression: \"STORE\" });\nconst crcFile = new File([crcBytes], \"crc-test.zip\", { type: \"application/zip\", lastModified: 2 });\nconst crcDirectory = await readZipDirectory(crcFile);\nconst crcEntry = crcDirectory.find((entry) => entry.name === \"conversations.json\");\nif (!crcEntry) throw new Error(\"CRC_FIXTURE_ENTRY_MISSING\");\nconst corruptBytes = crcBytes.slice();\nconst localView = new DataView(corruptBytes.buffer, corruptBytes.byteOffset, corruptBytes.byteLength);\nconst localNameLength = localView.getUint16(crcEntry.localHeaderOffset + 26, true);\nconst localExtraLength = localView.getUint16(crcEntry.localHeaderOffset + 28, true);\nconst payloadOffset = crcEntry.localHeaderOffset + 30 + localNameLength + localExtraLength;\ncorruptBytes[payloadOffset] ^= 0x01;\nlet crcMismatchBlocked = false;\ntry {\n await readExportFiles([new File([corruptBytes], \"crc-corrupt.zip\", { type: \"application/zip\", lastModified: 2 })]);\n} catch (error) {\n crcMismatchBlocked = String(error).includes(\"ZIP_CRC_MISMATCH\");\n}\n\nawait db.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n)`);\nconst fixtureId = \"imp_v06_selftest_fixture\";\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nconst now = new Date().toISOString();\nawait db.execute({\n sql: `INSERT INTO vault_import_runs(id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,inventory_json,last_error,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [fixtureId, parsed.sourceFingerprint, parsed.sourceName, parsed.sourceSize, 100, 37, 36, 420, 1, \"PAUSED\", JSON.stringify(parsed.inventory), \"synthetic interruption\", now, now],\n});\nconst paused = await db.execute({ sql: \"SELECT * FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nawait db.execute({\n sql: `UPDATE vault_import_runs SET cursor=?, imported_count=?, indexed_messages=?, skipped_count=?, status='COMPLETE', last_error=NULL, updated_at=? WHERE id=?`,\n args: [100, 99, 1200, 1, new Date().toISOString(), fixtureId],\n});\nconst complete = await db.execute({ sql: \"SELECT cursor,imported_count,indexed_messages,skipped_count,status,last_error FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nconst residue = await db.execute({ sql: \"SELECT COUNT(*) AS count FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\n\nconst atomicFixtureId = \"imp_v06_atomic_replay_fixture\";\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\nawait db.execute({\n sql: `INSERT INTO vault_import_runs(id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,inventory_json,last_error,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [atomicFixtureId, parsed.sourceFingerprint, \"atomic replay fixture\", 1, 3, 0, 0, 0, 0, \"IN_PROGRESS\", \"{}\", null, now, now],\n});\nconst advanceAtomic = async (cursorAfter: number, indexedDelta: number) => await db.execute({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n status=CASE WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END ELSE status END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status`,\n args: [cursorAfter,indexedDelta,cursorAfter,cursorAfter,cursorAfter,cursorAfter,cursorAfter,new Date().toISOString(),atomicFixtureId,parsed.sourceFingerprint],\n});\nconst atomicFirst = await advanceAtomic(1, 2);\nconst atomicReplay = await advanceAtomic(1, 2);\nconst atomicSecond = await advanceAtomic(2, 3);\nconst atomicComplete = await advanceAtomic(3, 1);\nconst atomicCompleteReplay = await advanceAtomic(3, 1);\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\nconst atomicResidue = await db.execute({ sql: \"SELECT COUNT(*) AS count FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\n\nconst ids = parsed.candidates.map((candidate: any) => String(candidate.conv?.id));\nconst keptDuplicateTitle = String(parsed.candidates.find((candidate: any) => candidate.conv?.id === \"zip_demo_a\")?.conv?.title ?? \"\");\nconst p: any = paused.rows[0] ?? {};\nconst c: any = complete.rows[0] ?? {};\nconst af: any = atomicFirst.rows[0] ?? {};\nconst ar: any = atomicReplay.rows[0] ?? {};\nconst as: any = atomicSecond.rows[0] ?? {};\nconst ac: any = atomicComplete.rows[0] ?? {};\nconst acr: any = atomicCompleteReplay.rows[0] ?? {};\nconst pass =\n storage.activeProvider === \"turso\" &&\n parsed.inventory.zipCount === 1 &&\n parsed.inventory.conversationJsonCount === 2 &&\n parsed.inventory.zipEntryCount === 5 &&\n parsed.inventory.otherFileCount === 3 &&\n parsed.inventory.candidateCount === 3 &&\n parsed.inventory.duplicateCandidateCount === 1 &&\n ids.join(\",\") === \"zip_demo_a,zip_demo_c,zip_demo_b\" &&\n keptDuplicateTitle === \"ZIP demo A newer duplicate\" &&\n wholeFileArrayBufferAttempted === false &&\n conversationMethods.length === 2 && conversationMethods.every((method) => method === 8) &&\n missingConversationJsonBlocked && crcMismatchBlocked &&\n parsed.sourceFingerprint === parsedAgain.sourceFingerprint &&\n parsed.sourceFingerprint === parsedRenamed.sourceFingerprint &&\n /^imp_[a-f0-9]{40}$/.test(parsed.runId) &&\n scopedOne === `${parsed.runId}_1` && scopedThree === `${parsed.runId}_3` && scopedOne !== scopedThree &&\n Number(p.cursor) === 37 && p.status === \"PAUSED\" &&\n Number(c.cursor) === 100 && c.status === \"COMPLETE\" && c.last_error === null &&\n Number(af.cursor) === 1 && Number(af.imported_count) === 1 && Number(af.indexed_messages) === 2 && af.status === \"IN_PROGRESS\" &&\n Number(ar.cursor) === 1 && Number(ar.imported_count) === 1 && Number(ar.indexed_messages) === 2 && ar.status === \"IN_PROGRESS\" &&\n Number(as.cursor) === 2 && Number(as.imported_count) === 2 && Number(as.indexed_messages) === 5 && as.status === \"IN_PROGRESS\" &&\n Number(ac.cursor) === 3 && Number(ac.imported_count) === 3 && Number(ac.indexed_messages) === 6 && ac.status === \"COMPLETE\" &&\n Number(acr.cursor) === 3 && Number(acr.imported_count) === 3 && Number(acr.indexed_messages) === 6 && acr.status === \"COMPLETE\" &&\n Number((atomicResidue.rows[0] as any)?.count ?? -1) === 0 &&\n Number((residue.rows[0] as any)?.count ?? -1) === 0;\n\nconst result = {\n pass,\n version: \"0.6.0\",\n activeProvider: storage.activeProvider,\n inventory: parsed.inventory,\n candidateIds: ids,\n deduplication: { keptDuplicateTitle, duplicateCandidateCount: parsed.inventory.duplicateCandidateCount },\n selectiveRead: { wholeFileArrayBufferAttempted, conversationMethods },\n negativeControls: { missingConversationJsonBlocked, crcMismatchBlocked },\n fingerprintStable: parsed.sourceFingerprint === parsedAgain.sourceFingerprint,\n fingerprintStableAcrossRenameAndMtime: parsed.sourceFingerprint === parsedRenamed.sourceFingerprint,\n runIdShapeValid: /^imp_[a-f0-9]{40}$/.test(parsed.runId),\n scopedRunIds: { one: scopedOne, three: scopedThree, distinct: scopedOne !== scopedThree },\n paused: { cursor: Number(p.cursor), imported: Number(p.imported_count), skipped: Number(p.skipped_count), status: p.status },\n complete: c,\n atomicReplay: {\n first: af,\n replay: ar,\n second: as,\n complete: ac,\n completeReplay: acr,\n residue: Number((atomicResidue.rows[0] as any)?.count ?? -1),\n },\n fixtureResidue: Number((residue.rows[0] as any)?.count ?? -1),\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[182],"35368111-7976-43f6-beb8-a0286f193817","v06_release_audit.ts","01a07d7c-e77c-71a8-be44-f94e7027985f",["D",1788811732860],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst importRuns = await db.execute(`SELECT\n COUNT(*) AS total,\n COALESCE(SUM(CASE WHEN id LIKE 'imp_v06_selftest%' OR id LIKE 'imp_v06_atomic%' THEN 1 ELSE 0 END),0) AS selftest_residue,\n COALESCE(SUM(CASE WHEN status='IN_PROGRESS' THEN 1 ELSE 0 END),0) AS in_progress,\n COALESCE(SUM(CASE WHEN status!='COMPLETE' THEN 1 ELSE 0 END),0) AS non_complete\n FROM vault_import_runs`);\nconst corpus = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations`);\nconst queue = await control.execute(`SELECT\n COALESCE(SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END),0) AS pending,\n COALESCE(SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END),0) AS running\n FROM vault_bridge_requests`);\n\nconst i: any = importRuns.rows[0] ?? {};\nconst c: any = corpus.rows[0] ?? {};\nconst q: any = queue.rows[0] ?? {};\nconst invariants = {\n messagesMatchFts: Number(c.messages ?? -1) === Number(c.message_fts ?? -2),\n checkpointsMatchFts: Number(c.checkpoints ?? -1) === Number(c.checkpoint_fts ?? -2),\n knowledgeMatchFts: Number(c.knowledge_items ?? -1) === Number(c.knowledge_fts ?? -2),\n minimumBaselinePreserved:\n Number(c.conversations ?? 0) >= 3 &&\n Number(c.messages ?? 0) >= 10 &&\n Number(c.knowledge_items ?? 0) >= 3 &&\n Number(c.relations ?? 0) >= 7,\n};\nconst pass = storage.activeProvider === \"turso\" &&\n Number(i.selftest_residue ?? -1) === 0 &&\n Number(i.in_progress ?? -1) === 0 &&\n Number(i.non_complete ?? -1) === 0 &&\n Number(q.pending ?? -1) === 0 &&\n Number(q.running ?? -1) === 0 &&\n Object.values(invariants).every(Boolean);\n\nconst result = {\n pass,\n version: \"0.6.2-audit-currentness\",\n activeProvider: storage.activeProvider,\n importRuns: {\n total: Number(i.total ?? 0),\n selftestResidue: Number(i.selftest_residue ?? 0),\n inProgress: Number(i.in_progress ?? 0),\n nonComplete: Number(i.non_complete ?? 0),\n },\n corpus: c,\n invariants,\n bridgeQueue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[188],"2faa42a9-0641-4729-83a3-f8815b6935ef","v05_selftest.ts","01a07d7c-e77c-71a8-be44-f5e1fac52c3f",["D",1788811732860],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst [counts, timeoutItem, invalidFixture, timeoutFts, crossChatFts, relations] = await Promise.all([\n db.execute(`SELECT\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations,\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints`),\n db.execute({ sql: `SELECT id,project,kind,evidence_state FROM vault_knowledge_items WHERE id=?`, args: [\"kn_timeout_write_reconciliation\"] }),\n db.execute({ sql: `SELECT id FROM vault_knowledge_items WHERE id=?`, args: [\"kn_invalid_relation_fixture\"] }),\n db.execute({ sql: `SELECT knowledge_id FROM vault_knowledge_fts WHERE vault_knowledge_fts MATCH ?`, args: ['\"unknown_external_state\"*'] }),\n db.execute({ sql: `SELECT knowledge_id FROM vault_knowledge_fts WHERE vault_knowledge_fts MATCH ?`, args: ['\"cross\"* AND \"chat\"*'] }),\n db.execute({ sql: `SELECT relation,target_type,target_id FROM vault_relations WHERE source_type='knowledge' AND source_id=? ORDER BY relation`, args: [\"kn_timeout_write_reconciliation\"] }),\n]);\n\nconst evidence = await control.execute(`SELECT id,status,error,attempt_count,result_json FROM vault_bridge_requests\n WHERE id IN (\n 'v05_kn_timeout_reconciliation_01',\n 'v05_hybrid_conceptual_timeout_01',\n 'v05_hybrid_filtered_01',\n 'v05_invalid_relation_01',\n 'v05_get_knowledge_timeout_01',\n 'v05_related_timeout_01',\n 'v05_stats_after_retry_01'\n ) ORDER BY id`);\nconst queue = await control.execute(`SELECT\n SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END) AS running\n FROM vault_bridge_requests`);\n\nconst map = new Map((evidence.rows as any[]).map((row) => [String(row.id), row]));\nconst filtered = JSON.parse(String(map.get(\"v05_hybrid_filtered_01\")?.result_json ?? \"{}\"));\nconst conceptual = JSON.parse(String(map.get(\"v05_hybrid_conceptual_timeout_01\")?.result_json ?? \"{}\"));\nconst c: any = counts.rows[0] ?? {};\nconst q: any = queue.rows[0] ?? {};\n\nconst filteredItems = filtered?.result?.items ?? [];\nconst conceptualItems = conceptual?.result?.items ?? [];\nconst invariants = {\n knowledgeFtsAligned: Number(c.knowledge_items) === Number(c.knowledge_fts),\n minimumKnowledgeBaseline: Number(c.knowledge_items) >= 3,\n minimumRelationBaseline: Number(c.relations) >= 7,\n corpusOnlyGrows: Number(c.conversations) >= 3 && Number(c.messages) >= 10 && Number(c.checkpoints) >= 5,\n};\nconst pass =\n storage.activeProvider === \"turso\" &&\n Object.values(invariants).every(Boolean) &&\n timeoutItem.rows.some((r: any) => r.id === \"kn_timeout_write_reconciliation\" && r.project === \"GUH_AGENT_OS\" && r.kind === \"reusable_rule\") &&\n invalidFixture.rows.length === 0 &&\n timeoutFts.rows.some((r: any) => r.knowledge_id === \"kn_timeout_write_reconciliation\") &&\n crossChatFts.rows.some((r: any) => r.knowledge_id === \"kn_cross_chat_external_memory\") &&\n relations.rows.length === 3 &&\n map.get(\"v05_kn_timeout_reconciliation_01\")?.status === \"PASS\" &&\n Number(map.get(\"v05_kn_timeout_reconciliation_01\")?.attempt_count) === 2 &&\n map.get(\"v05_invalid_relation_01\")?.status === \"FAIL\" &&\n map.get(\"v05_invalid_relation_01\")?.error === \"INVALID_RELATION_0\" &&\n map.get(\"v05_hybrid_conceptual_timeout_01\")?.status === \"PASS\" &&\n conceptualItems.some((item: any) => item.id === \"kn_timeout_write_reconciliation\") &&\n map.get(\"v05_hybrid_filtered_01\")?.status === \"PASS\" &&\n filteredItems.length === 1 &&\n filteredItems[0]?.type === \"knowledge\" &&\n filteredItems[0]?.id === \"kn_timeout_write_reconciliation\" &&\n map.get(\"v05_get_knowledge_timeout_01\")?.status === \"PASS\" &&\n map.get(\"v05_related_timeout_01\")?.status === \"PASS\" &&\n Number(q.pending ?? 0) === 0 && Number(q.running ?? 0) === 0;\n\nconst result = {\n pass,\n version: \"0.5.0\",\n activeProvider: storage.activeProvider,\n counts: c,\n invariants,\n timeoutRelations: relations.rows,\n retryAttemptCount: Number(map.get(\"v05_kn_timeout_reconciliation_01\")?.attempt_count ?? 0),\n invalidRelationState: { status: map.get(\"v05_invalid_relation_01\")?.status, error: map.get(\"v05_invalid_relation_01\")?.error },\n conceptualFound: conceptualItems.map((item: any) => ({ type: item.type, id: item.id, matchedQueries: item.matchedQueries })),\n filteredItems: filteredItems.map((item: any) => ({ type: item.type, id: item.id, project: item.project, kind: item.kind })),\n queue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[194],"f72229e0-d830-434d-b869-cd6e524bbef0","v05_schema_migrate.ts","01a07d7c-e77c-71a8-be44-f1bf67b07a32",["D",1788811732860],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nawait db.batch([\n { sql: `CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_source ON vault_knowledge_items(source_type, source_id)` },\n { sql: `CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)` },\n]);\n\nconst counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations`);\n\nconst result = {\n pass: storage.activeProvider === \"turso\",\n schemaVersion: \"0.5.0\",\n activeProvider: storage.activeProvider,\n counts: counts.rows[0],\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[200],"5bfb36c8-d64e-48e4-971d-01a62c288ef0","v04_bridge_selftest.ts","01a07d7c-e77c-71a8-be44-ec32a4eae953",["D",1788811732860],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst reqs = await control.execute(`SELECT id,status,error,attempt_count FROM vault_bridge_requests\n WHERE id IN (\n 'bridge_e2e_search_kernel_20260906',\n 'bridge_e2e_get_kernel_20260906',\n 'bridge_e2e_stats_20260906',\n 'bridge_e2e_checkpoint_20260906',\n 'bridge_negative_disallowed_action_20260906_v2',\n 'bridge_stale_recoverable_20260906',\n 'bridge_stale_exhausted_20260906'\n ) ORDER BY id`);\n\nconst map = new Map((reqs.rows as any[]).map((r) => [String(r.id), r]));\nconst cp = await db.execute({ sql: `SELECT id,evidence_state FROM vault_checkpoints WHERE id=?`, args: ['cp_guh_v04_chatgpt_bridge'] });\nconst cpSearch = await db.execute({ sql: `SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?`, args: ['\"chatgpt\"* AND \"bridge\"*'] });\nconst search = await db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] });\nconst queue = await control.execute(`SELECT\n SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END) AS running\n FROM vault_bridge_requests`);\n\nconst q: any = queue.rows[0] ?? {};\nconst pass =\n storage.activeProvider === 'turso' &&\n map.get('bridge_e2e_search_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_get_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_stats_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_checkpoint_20260906')?.status === 'PASS' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.status === 'BLOCKED' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.error === 'ACTION_NOT_ALLOWED' &&\n map.get('bridge_stale_recoverable_20260906')?.status === 'PASS' &&\n Number(map.get('bridge_stale_recoverable_20260906')?.attempt_count) === 2 &&\n map.get('bridge_stale_exhausted_20260906')?.status === 'FAIL' &&\n map.get('bridge_stale_exhausted_20260906')?.error === 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' &&\n cp.rows.some((r: any) => r.id === 'cp_guh_v04_chatgpt_bridge' && r.evidence_state === 'OPERATIONAL_SYNTHETIC_CHATGPT_BRIDGE') &&\n cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge') &&\n search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout') &&\n Number(q.pending ?? 0) === 0 && Number(q.running ?? 0) === 0;\n\nconst result = {\n pass,\n activeProvider: storage.activeProvider,\n evidenceRows: reqs.rows,\n checkpointFound: cp.rows.length === 1,\n checkpointSearchable: cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge'),\n kernelTimeoutSearchable: search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout'),\n queue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[206],"200fa1f4-67b1-4513-bda6-4e113a49578f","v03_turso_auth_negative_selftest.ts","01a07d7c-e77c-71a8-be44-e9821be414db",["D",1788811732860],"import { createClient } from \"npm:@libsql/client@0.15.15/web\";\n\nconst url = Deno.env.get(\"TURSO_DATABASE_URL\");\nif (!url) throw new Error(\"TURSO_DATABASE_URL_MISSING\");\n\nconst invalid = createClient({ url, authToken: \"intentionally-invalid-token-for-negative-control\" });\nlet rejected = false;\nlet errorClass = \"\";\ntry {\n await invalid.execute(\"SELECT 1 AS ok\");\n} catch (error) {\n rejected = true;\n errorClass = error instanceof Error ? error.name : \"unknown\";\n}\n\nconst result = { pass: rejected, invalidCredentialRejected: rejected, errorClass };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[212],"d20ae8ae-dc39-44d6-a392-7cf0b07a20a4","v03_storage_selftest.ts","01a07d7c-e77c-71a8-be44-e752e0e7a327",["D",1788811732860],"import { getLocalDatabase, getStorageState, probeTurso } from \"./lib/storage_provider.ts\";\n\nconst state = getStorageState();\nconst local = getLocalDatabase();\nconst localProbe = await local.execute(\"SELECT 1 AS ok\");\nconst localOk = Number((localProbe.rows[0] as any)?.ok ?? 0) === 1;\nconst turso = await probeTurso();\n\nconst result = {\n pass: localOk && state.credentialValuesExposed === false && (\n state.externalConfigured\n ? turso.configured === true\n : turso.configured === false && turso.authenticated === false && turso.reachable === false\n ),\n localOk,\n storageState: state,\n tursoProbe: turso,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[218],"ec51a554-b554-41f3-8561-55ddcbf0aea0","v03_migrate_to_turso.ts","01a07d7c-e77c-71a8-be44-e16bd10f4d27",["D",1788811732860],"import { getLocalDatabase, getTursoClient } from \"./lib/storage_provider.ts\";\n\nconst local = getLocalDatabase();\nconst turso = getTursoClient();\nif (!turso) throw new Error(\"TURSO_NOT_CONFIGURED\");\n\nasync function sha256(value: unknown) {\n const bytes = new TextEncoder().encode(JSON.stringify(value));\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function remote(sql: string, args: any[] = []) {\n return await turso!.execute({ sql, args });\n}\n\nasync function ensureRemoteSchema() {\n const statements = [\n `CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)`,\n `CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n ];\n for (const sql of statements) await remote(sql);\n await remote(\n `INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version','0.3.0',datetime('now'))\n ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`,\n );\n}\n\nasync function fetchLocal() {\n const [conversations, messages, checkpoints] = await Promise.all([\n local.execute(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at\n FROM conversations ORDER BY id`),\n local.execute(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at\n FROM vault_messages ORDER BY conversation_id,seq,id`),\n local.execute(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at\n FROM vault_checkpoints ORDER BY id`),\n ]);\n return { conversations: conversations.rows as any[], messages: messages.rows as any[], checkpoints: checkpoints.rows as any[] };\n}\n\nasync function migrate(data: Awaited>) {\n for (const row of data.conversations) {\n await remote(\n `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,create_time=excluded.create_time,update_time=excluded.update_time,\n message_count=excluded.message_count,char_count=excluded.char_count,content_bytes=excluded.content_bytes,content_text=excluded.content_text,\n truncated=excluded.truncated,source_file=excluded.source_file,imported_at=excluded.imported_at`,\n [row.id,row.title,row.create_time,row.update_time,row.message_count,row.char_count,row.content_bytes,row.content_text,row.truncated,row.source_file,row.imported_at],\n );\n await remote(`DELETE FROM vault_messages_fts WHERE conversation_id = ?`, [row.id]);\n await remote(`DELETE FROM vault_messages WHERE conversation_id = ?`, [row.id]);\n }\n\n const titleByConversation = new Map(data.conversations.map((r) => [String(r.id), String(r.title)]));\n for (const row of data.messages) {\n await remote(\n `INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?)`,\n [row.id,row.conversation_id,row.seq,row.role,row.create_time,row.content_text,row.char_count,row.content_bytes,row.imported_at],\n );\n await remote(\n `INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)`,\n [row.id,row.conversation_id,titleByConversation.get(String(row.conversation_id)) ?? \"Sem título\",row.role,row.content_text],\n );\n }\n\n for (const row of data.checkpoints) {\n await remote(\n `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,\n open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,\n evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action,row.source_conversation_id,row.evidence_state,row.created_at,row.updated_at],\n );\n await remote(`DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?`, [row.id]);\n await remote(\n `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action],\n );\n }\n}\n\nasync function verify(source: Awaited>) {\n const rc = await remote(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at FROM conversations ORDER BY id`);\n const rm = await remote(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at FROM vault_messages ORDER BY conversation_id,seq,id`);\n const rp = await remote(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at FROM vault_checkpoints ORDER BY id`);\n const ftsMessageCount = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts`);\n const ftsCheckpointCount = await remote(`SELECT COUNT(*) AS c FROM vault_checkpoints_fts`);\n\n const sourceHashes = {\n conversations: await sha256(source.conversations),\n messages: await sha256(source.messages),\n checkpoints: await sha256(source.checkpoints),\n };\n const destinationHashes = {\n conversations: await sha256(rc.rows),\n messages: await sha256(rm.rows),\n checkpoints: await sha256(rp.rows),\n };\n\n const kernel = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"kernel\"* AND \"timeout\"*']);\n const nr12 = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"nr\"* AND \"12\"*']);\n const reconciliation = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"reconciliacao\"*']);\n const checkpoint = await remote(`SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ? ORDER BY checkpoint_id`, ['\"export\"* AND \"oficial\"*']);\n const negative = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, ['\"guhtermoinexistente987654\"*']);\n\n const ftsCounts = {\n messages: Number((ftsMessageCount.rows[0] as any)?.c ?? -1),\n checkpoints: Number((ftsCheckpointCount.rows[0] as any)?.c ?? -1),\n };\n const counts = {\n source: { conversations: source.conversations.length, messages: source.messages.length, checkpoints: source.checkpoints.length },\n destination: { conversations: rc.rows.length, messages: rm.rows.length, checkpoints: rp.rows.length },\n fts: ftsCounts,\n };\n\n const pass =\n JSON.stringify(counts.source) === JSON.stringify(counts.destination) &&\n ftsCounts.messages === source.messages.length &&\n ftsCounts.checkpoints === source.checkpoints.length &&\n sourceHashes.conversations === destinationHashes.conversations &&\n sourceHashes.messages === destinationHashes.messages &&\n sourceHashes.checkpoints === destinationHashes.checkpoints &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n reconciliation.rows.length >= 2 &&\n checkpoint.rows.length >= 1 &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0;\n\n return {\n pass,\n counts,\n hashesEqual: {\n conversations: sourceHashes.conversations === destinationHashes.conversations,\n messages: sourceHashes.messages === destinationHashes.messages,\n checkpoints: sourceHashes.checkpoints === destinationHashes.checkpoints,\n },\n searchProofs: {\n kernelTimeout: kernel.rows,\n nr12: nr12.rows,\n reconciliation: reconciliation.rows,\n exportOfficialCheckpointCount: checkpoint.rows.length,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n },\n };\n}\n\nawait ensureRemoteSchema();\nconst source = await fetchLocal();\nawait migrate(source);\nconst verification = await verify(source);\nconsole.log(JSON.stringify(verification));\nexport default verification;\n",[224],"e7ba8bd1-e1b8-4167-acc2-099b67cca577","v03_active_storage_selftest.ts","01a07d7c-e77c-71a8-be44-df5336096873",["D",1788811732860],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst state = getStorageState();\nconst PROBE_KEY = \"v03_active_batch_probe\";\n\nawait db.execute(`CREATE TABLE IF NOT EXISTS vault_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL)`);\n\nlet batchOk = false;\ntry {\n const results: any = await db.batch([\n { sql: `INSERT INTO vault_meta(key,value,updated_at) VALUES(?,?,datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`, args: [PROBE_KEY, \"batch-pass\"] },\n { sql: `SELECT value FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n { sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n ]);\n batchOk = String(results?.[1]?.rows?.[0]?.value ?? \"\") === \"batch-pass\";\n} finally {\n await db.execute({ sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] });\n}\n\nconst [counts, kernel, nr12, negative, probeResidue] = await Promise.all([\n db.execute(`SELECT (SELECT COUNT(*) FROM conversations) AS conversations, (SELECT COUNT(*) FROM vault_messages) AS messages, (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints, (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts, (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts`),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] }),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"nr\"* AND \"12\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"guhtermoinexistente987654\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] }),\n]);\n\nconst row: any = counts.rows[0] ?? {};\nconst result = {\n pass:\n state.activeProvider === \"turso\" &&\n batchOk &&\n Number(row.conversations) === 3 &&\n Number(row.messages) === 10 &&\n Number(row.checkpoints) >= 3 &&\n Number(row.message_fts) === 10 &&\n Number(row.checkpoint_fts) === Number(row.checkpoints) &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0 &&\n Number((probeResidue.rows[0] as any)?.c ?? -1) === 0,\n activeProvider: state.activeProvider,\n batchOk,\n counts: {\n conversations: Number(row.conversations),\n messages: Number(row.messages),\n checkpoints: Number(row.checkpoints),\n messageFts: Number(row.message_fts),\n checkpointFts: Number(row.checkpoint_fts),\n },\n kernelTimeoutFound: kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\"),\n nr12Found: nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\"),\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n probeResidue: Number((probeResidue.rows[0] as any)?.c ?? -1),\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[230],"b5e98c46-415d-40ba-85bb-a6f150ff0b84","v031_storage_policy_selftest.ts","01a07d7c-e77b-71bc-893a-17de3af8f23f",["D",1788811732860],"import { decideStorageState } from \"./lib/storage_provider.ts\";\n\nconst neither = decideStorageState(false, false);\nconst urlOnly = decideStorageState(true, false);\nconst tokenOnly = decideStorageState(false, true);\nconst both = decideStorageState(true, true);\n\nconst result = {\n pass:\n neither.activeProvider === \"blocked\" && neither.migrationMode === \"BLOCKED_EXTERNAL_REQUIRED\" && neither.localFallbackEnabled === false &&\n urlOnly.activeProvider === \"blocked\" && urlOnly.externalConfigured === false &&\n tokenOnly.activeProvider === \"blocked\" && tokenOnly.externalConfigured === false &&\n both.activeProvider === \"turso\" && both.externalConfigured === true && both.migrationMode === \"TURSO_ACTIVE\" && both.localFallbackEnabled === false,\n cases: {\n neither: { activeProvider: neither.activeProvider, migrationMode: neither.migrationMode },\n urlOnly: { activeProvider: urlOnly.activeProvider, migrationMode: urlOnly.migrationMode },\n tokenOnly: { activeProvider: tokenOnly.activeProvider, migrationMode: tokenOnly.migrationMode },\n both: { activeProvider: both.activeProvider, migrationMode: both.migrationMode },\n },\n localFallbackEnabled: both.localFallbackEnabled,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[236],"bde623c3-ed3b-407e-b92e-78ba0bbc1816","v02_selftest.ts","01a07d7c-e77b-71bc-893a-10dbdc72582c",["D",1788811732860],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CID = \"v02_selftest_fixture\";\nconst CPID = \"v02_selftest_checkpoint\";\n\nasync function cleanup() {\n await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"DELETE FROM vault_checkpoints WHERE id = ?\", args: [CPID] },\n ]);\n}\n\nasync function writeFixture() {\n const now = new Date().toISOString();\n await sqlite.batch([\n { sql: `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title, message_count=excluded.message_count, content_text=excluded.content_text, imported_at=excluded.imported_at`,\n args: [CID, \"Fixture V0.2\", 1, 2, 2, 64, 64, \"[USER]\\nalpha kernel\\n\\n[ASSISTANT]\\nbeta timeout\", 0, \"selftest\", now] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m1`, CID, 0, \"user\", 1, \"alpha kernel\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m1`, CID, \"Fixture V0.2\", \"user\", \"alpha kernel\"] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m2`, CID, 1, \"assistant\", 2, \"beta timeout\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m2`, CID, \"Fixture V0.2\", \"assistant\", \"beta timeout\"] },\n { sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET summary=excluded.summary, updated_at=excluded.updated_at`,\n args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\", CID, \"SYNTHETIC\", now, now] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)\", args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\"] },\n ]);\n}\n\nlet result: Record = {};\ntry {\n await cleanup();\n await writeFixture();\n await writeFixture(); // idempotency/reindex replay\n\n const counts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages WHERE conversation_id = ?\", args: [CID] });\n const ftsCounts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] });\n const hit = await sqlite.execute({ sql: \"SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? AND conversation_id = ?\", args: ['\"kernel\"*', CID] });\n const negative = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?\", args: ['\"notpresent987\"*'] });\n const cp = await sqlite.execute({ sql: \"SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?\", args: ['\"gamma\"*'] });\n\n result = {\n pass: Number((counts.rows[0] as any)?.c) === 2\n && Number((ftsCounts.rows[0] as any)?.c) === 2\n && (hit.rows[0] as any)?.conversation_id === CID\n && Number((negative.rows[0] as any)?.c) === 0\n && (cp.rows[0] as any)?.checkpoint_id === CPID,\n messagesAfterReplay: Number((counts.rows[0] as any)?.c ?? -1),\n ftsRowsAfterReplay: Number((ftsCounts.rows[0] as any)?.c ?? -1),\n positiveSearch: hit.rows,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n checkpointSearch: cp.rows,\n };\n} finally {\n await cleanup();\n}\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[242],"badd0c2a-5c52-44e4-b56f-1098a9ca1e51","payana_schema_migrate.ts","00eb5e88-aaf8-11f1-b8e3-1607ee4eb77e",2,["D",1788811756875],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nawait db.batch([\n { sql: `CREATE TABLE IF NOT EXISTS payana_state (\n key TEXT PRIMARY KEY,\n value_json TEXT NOT NULL,\n evidence_state TEXT NOT NULL,\n source_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_opportunities (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n platform TEXT,\n url TEXT,\n status TEXT NOT NULL,\n reward_min_decimal TEXT,\n reward_max_decimal TEXT,\n currency TEXT,\n kyc_state TEXT,\n capital_state TEXT,\n deadline_at TEXT,\n constraints_json TEXT NOT NULL DEFAULT '[]',\n currentness_at TEXT,\n evidence_state TEXT NOT NULL,\n source_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_opportunities_status ON payana_opportunities(status, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_opportunities_platform ON payana_opportunities(platform, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_economic_events (\n id TEXT PRIMARY KEY,\n opportunity_id TEXT,\n event_type TEXT NOT NULL,\n amount_decimal TEXT NOT NULL,\n currency TEXT NOT NULL,\n platform TEXT,\n occurred_at TEXT,\n external_ref TEXT,\n evidence_state TEXT NOT NULL,\n evidence_refs_json TEXT NOT NULL DEFAULT '[]',\n notes TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_economic_events_opportunity ON payana_economic_events(opportunity_id, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_economic_events_type ON payana_economic_events(event_type, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_actions (\n id TEXT PRIMARY KEY,\n opportunity_id TEXT,\n action_type TEXT NOT NULL,\n status TEXT NOT NULL,\n risk_class TEXT NOT NULL,\n approval_state TEXT NOT NULL,\n reversible INTEGER NOT NULL CHECK(reversible IN (0,1)),\n input_summary TEXT,\n output_summary TEXT,\n receipt_id TEXT,\n started_at TEXT,\n finished_at TEXT,\n evidence_state TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_actions_opportunity ON payana_actions(opportunity_id, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_actions_status ON payana_actions(status, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_receipts (\n id TEXT PRIMARY KEY,\n subject_type TEXT NOT NULL,\n subject_id TEXT NOT NULL,\n receipt_type TEXT NOT NULL,\n locator TEXT,\n sha256 TEXT,\n payload_json TEXT NOT NULL DEFAULT '{}',\n verification_state TEXT NOT NULL,\n verified_at TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_receipts_subject ON payana_receipts(subject_type, subject_id, updated_at)` },\n]);\n\nconst tables = await db.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'payana_%' ORDER BY name`);\nconst expected = new Set([\"payana_actions\",\"payana_economic_events\",\"payana_opportunities\",\"payana_receipts\",\"payana_state\"]);\nconst found = new Set((tables.rows as any[]).map((r) => String(r.name)));\nconst pass = storage.activeProvider === \"turso\" && [...expected].every((name) => found.has(name));\nconst result = { pass, schemaVersion: \"payana-ledger-1.0.0\", activeProvider: storage.activeProvider, tables: [...found] };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[248],"5f515f4e-16d8-415b-8a9d-ed9694163a8e","index.ts","01a07d7c-e77b-71bc-893a-0f664110a0d1",["D",1788811732860],"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst OWNER = \"cleitoncosta\";\nconst APP_VERSION = \"0.7.0\";\nconst storageState = getStorageState();\nconst sqlite = getActiveDatabase();\nconst VAULT_BUDGET_BYTES = storageState.activeProvider === \"turso\" ? 4_000_000_000 : 8_000_000;\nconst MAX_CONVERSATION_CHARS = 600_000;\nconst MAX_MESSAGE_CHARS = 180_000;\nconst MAX_MESSAGES_PER_CONVERSATION = 5000;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_import_runs_updated ON vault_import_runs(updated_at DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute({\n sql: \"INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version', ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at\",\n args: [APP_VERSION],\n });\n schemaReady = true;\n}\n\nasync function sessionFor(req: Request) {\n return await getOAuthUserData(req);\n}\n\nasync function isOwner(req: Request) {\n const session = await sessionFor(req);\n return session?.user?.username === OWNER ? session : null;\n}\n\nasync function requireOwner(c: any) {\n const session = await isOwner(c.req.raw);\n if (!session) return c.json({ error: \"unauthorized\", login: \"/auth/login\" }, 401);\n return null;\n}\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_-]{1,160}$/.test(value);\n}\n\nfunction safeProject(value: unknown) {\n return typeof value === \"string\" && value.trim().length >= 1 && value.trim().length <= 120;\n}\n\nfunction num(value: unknown) {\n return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction int(value: unknown, fallback = 0) {\n return typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : fallback;\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 8) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction legacySnippet(text: string, needle: string) {\n const normalized = text.toLocaleLowerCase(\"pt-BR\");\n const hit = normalized.indexOf(needle.toLocaleLowerCase(\"pt-BR\"));\n const start = hit >= 0 ? Math.max(0, hit - 180) : 0;\n const chunk = text.slice(start, start + 620).replace(/\\s+/g, \" \").trim();\n return `${start > 0 ? \"…\" : \"\"}${chunk}${start + 620 < text.length ? \"…\" : \"\"}`;\n}\n\nasync function searchCheckpointIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id AS id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\nasync function searchKnowledgeIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n knowledge_id AS id,\n project,\n kind,\n title,\n snippet(vault_knowledge_fts, 4, '', '', ' … ', 42) AS snippet,\n bm25(vault_knowledge_fts, 0.0, 2.0, 2.0, 5.0, 3.0, 1.5, 1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\napp.get(\"/\", async (c) => {\n const session = await sessionFor(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.username !== OWNER) return c.text(\"Acesso negado. Este cofre pertence a outro usuário.\", 403);\n return c.html(Root());\n});\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/me\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const session = await sessionFor(c.req.raw);\n return c.json({\n owner: OWNER,\n username: session?.user?.username,\n version: APP_VERSION,\n openaiApiUsed: false,\n storage: storageState.activeProvider === \"turso\" ? \"Turso/libSQL + FTS5\" : \"Val Town project-scoped SQLite + FTS5\",\n activeStorageProvider: storageState.activeProvider,\n externalStorageConfigured: storageState.externalConfigured,\n migrationMode: storageState.migrationMode,\n searchEngine: \"SQLite/libSQL FTS5/BM25\",\n budgetBytes: VAULT_BUDGET_BYTES,\n maxConversationChars: MAX_CONVERSATION_CHARS,\n });\n});\n\napp.get(\"/api/stats\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const [conversations, indexed, checkpoints, knowledge, relations] = await Promise.all([\n sqlite.execute(`SELECT\n COUNT(*) AS conversations,\n COALESCE(SUM(message_count), 0) AS messages,\n COALESCE(SUM(char_count), 0) AS chars,\n COALESCE(SUM(content_bytes), 0) AS bytes,\n MIN(create_time) AS earliest,\n MAX(update_time) AS latest,\n COALESCE(SUM(CASE WHEN truncated = 1 THEN 1 ELSE 0 END), 0) AS truncated\n FROM conversations`),\n sqlite.execute(\"SELECT COUNT(*) AS indexed_messages FROM vault_messages\"),\n sqlite.execute(\"SELECT COUNT(*) AS checkpoints FROM vault_checkpoints\"),\n sqlite.execute(\"SELECT COUNT(*) AS knowledge_items FROM vault_knowledge_items\"),\n sqlite.execute(\"SELECT COUNT(*) AS relations FROM vault_relations\"),\n ]);\n return c.json({\n ...(conversations.rows[0] ?? {}),\n indexedMessages: Number((indexed.rows[0] as any)?.indexed_messages ?? 0),\n checkpoints: Number((checkpoints.rows[0] as any)?.checkpoints ?? 0),\n knowledgeItems: Number((knowledge.rows[0] as any)?.knowledge_items ?? 0),\n relations: Number((relations.rows[0] as any)?.relations ?? 0),\n budgetBytes: VAULT_BUDGET_BYTES,\n });\n});\n\napp.get(\"/api/search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n if (q.length < 2) return c.json({ query: q, engine: \"none\", results: [] });\n\n const match = ftsQuery(q);\n const indexedCount = await sqlite.execute(\"SELECT COUNT(*) AS count FROM vault_messages\");\n const hasMessageIndex = Number((indexedCount.rows[0] as any)?.count ?? 0) > 0;\n\n if (match && hasMessageIndex) {\n const result = await sqlite.execute({\n sql: `WITH hits AS (\n SELECT\n conversation_id,\n message_id,\n role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_messages_fts, 6.0, 0.0, 2.5, 0.0, 1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 150\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn\n FROM hits\n )\n SELECT\n c.id, c.title, c.create_time, c.update_time, c.message_count, c.char_count,\n c.content_bytes, c.truncated, b.message_id, b.role, b.hit_snippet, b.rank\n FROM best b\n JOIN conversations c ON c.id = b.conversation_id\n WHERE b.rn = 1\n ORDER BY b.rank, c.update_time DESC\n LIMIT 25`,\n args: [match],\n });\n return c.json({\n query: q,\n engine: \"fts5_bm25\",\n match,\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n messageId: row.message_id,\n role: row.role,\n rank: row.rank,\n snippet: String(row.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n })),\n });\n }\n\n const terms = q.split(/\\s+/).filter(Boolean).slice(0, 6);\n const clauses = terms.map(() => \"(title LIKE ? OR content_text LIKE ?)\");\n const args: string[] = [];\n for (const term of terms) {\n const pattern = `%${term}%`;\n args.push(pattern, pattern);\n }\n const result = await sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes, truncated, content_text\n FROM conversations\n WHERE ${clauses.join(\" AND \")}\n ORDER BY update_time DESC\n LIMIT 25`,\n args,\n });\n return c.json({\n query: q,\n engine: \"legacy_like_fallback\",\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n snippet: legacySnippet(String(row.content_text ?? \"\"), terms[0] ?? q),\n })),\n });\n});\n\napp.get(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const [conversation, messages] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n FROM conversations WHERE id = ? LIMIT 1`,\n args: [id],\n }),\n sqlite.execute({\n sql: `SELECT id, seq, role, create_time, content_text, char_count, content_bytes\n FROM vault_messages WHERE conversation_id = ? ORDER BY seq ASC`,\n args: [id],\n }),\n ]);\n if (!conversation.rows.length) return c.json({ error: \"not_found\" }, 404);\n return c.json({ ...(conversation.rows[0] as any), indexed_messages: messages.rows });\n});\n\napp.put(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 300) : \"Sem título\";\n const contentText = typeof body.contentText === \"string\" ? body.contentText : \"\";\n if (!contentText.trim()) return c.json({ error: \"empty_conversation\" }, 400);\n if (contentText.length > MAX_CONVERSATION_CHARS) {\n return c.json({ error: \"conversation_too_large\", maxChars: MAX_CONVERSATION_CHARS }, 413);\n }\n\n let importRun: null | { id: string; fingerprint: string; total: number; cursorAfter: number; skippedCount: number } = null;\n if (body.importRun != null) {\n const raw = body.importRun;\n const runId = typeof raw?.id === \"string\" ? raw.id.trim() : \"\";\n const fingerprint = typeof raw?.sourceFingerprint === \"string\" ? raw.sourceFingerprint.trim().toLowerCase() : \"\";\n const total = Math.min(1_000_000, int(raw?.totalCandidates));\n const cursorAfter = Math.min(total, int(raw?.cursorAfter));\n const skippedCount = Math.min(cursorAfter, int(raw?.skippedCount));\n if (!safeId(runId) || !/^[a-f0-9]{64}$/.test(fingerprint) || total < 1 || cursorAfter < 1 || skippedCount >= cursorAfter) {\n return c.json({ error: \"invalid_import_run_progress\" }, 400);\n }\n const run = await sqlite.execute({\n sql: \"SELECT source_fingerprint,total_candidates FROM vault_import_runs WHERE id=? LIMIT 1\",\n args: [runId],\n });\n if (!run.rows.length) return c.json({ error: \"import_run_not_initialized\" }, 409);\n const row: any = run.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n importRun = { id: runId, fingerprint, total, cursorAfter, skippedCount };\n }\n\n const rawMessages = Array.isArray(body.messages) ? body.messages.slice(0, MAX_MESSAGES_PER_CONVERSATION) : [];\n const normalizedMessages = rawMessages.flatMap((message: any, index: number) => {\n const text = typeof message?.contentText === \"string\" ? message.contentText.trim() : \"\";\n if (!text) return [];\n const clipped = text.slice(0, MAX_MESSAGE_CHARS);\n let messageId = typeof message?.id === \"string\" ? message.id.trim() : \"\";\n if (!safeId(messageId)) messageId = `${id}_m_${index + 1}`.slice(0, 160);\n return [{\n id: messageId,\n seq: index,\n role: typeof message?.role === \"string\" ? message.role.toLowerCase().slice(0, 40) : \"unknown\",\n createTime: typeof message?.createTime === \"number\" && Number.isFinite(message.createTime) ? message.createTime : null,\n contentText: clipped,\n charCount: clipped.length,\n contentBytes: new TextEncoder().encode(clipped).length,\n }];\n });\n\n const contentBytes = new TextEncoder().encode(contentText).length;\n const current = await sqlite.execute({ sql: \"SELECT content_bytes FROM conversations WHERE id = ? LIMIT 1\", args: [id] });\n const currentBytes = Number((current.rows[0] as any)?.content_bytes ?? 0);\n const totals = await sqlite.execute(\"SELECT COALESCE(SUM(content_bytes), 0) AS bytes FROM conversations\");\n const usedBytes = Number((totals.rows[0] as any)?.bytes ?? 0);\n const projected = usedBytes - currentBytes + contentBytes;\n if (projected > VAULT_BUDGET_BYTES) {\n return c.json({ error: \"vault_budget_exceeded\", usedBytes, projectedBytes: projected, budgetBytes: VAULT_BUDGET_BYTES }, 507);\n }\n\n const importedAt = new Date().toISOString();\n const statements: Array<{ sql: string; args?: Array }> = [\n {\n sql: `INSERT INTO conversations (\n id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n title = excluded.title,\n create_time = excluded.create_time,\n update_time = excluded.update_time,\n message_count = excluded.message_count,\n char_count = excluded.char_count,\n content_bytes = excluded.content_bytes,\n content_text = excluded.content_text,\n truncated = excluded.truncated,\n source_file = excluded.source_file,\n imported_at = excluded.imported_at`,\n args: [\n id,\n title || \"Sem título\",\n num(body.createTime),\n num(body.updateTime),\n normalizedMessages.length || int(body.messageCount),\n contentText.length,\n contentBytes,\n contentText,\n body.truncated ? 1 : 0,\n typeof body.sourceFile === \"string\" ? body.sourceFile.slice(0, 180) : \"conversations.json\",\n importedAt,\n ],\n },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n ];\n\n for (const message of normalizedMessages) {\n statements.push({\n sql: `INSERT INTO vault_messages (\n id, conversation_id, seq, role, create_time, content_text, char_count, content_bytes, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [message.id, id, message.seq, message.role, message.createTime, message.contentText, message.charCount, message.contentBytes, importedAt],\n });\n statements.push({\n sql: \"INSERT INTO vault_messages_fts(message_id, conversation_id, title, role, content) VALUES (?, ?, ?, ?, ?)\",\n args: [message.id, id, title || \"Sem título\", message.role, message.contentText],\n });\n }\n\n if (importRun) {\n const importedCountAfter = importRun.cursorAfter - importRun.skippedCount;\n statements.push({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n skipped_count=MAX(skipped_count, ?),\n status=CASE\n WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END\n ELSE status\n END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at`,\n args: [\n importRun.cursorAfter,\n normalizedMessages.length,\n importRun.cursorAfter,\n importedCountAfter,\n importRun.skippedCount,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importedAt,\n importRun.id,\n importRun.fingerprint,\n ],\n });\n }\n\n const batchResults = await sqlite.batch(statements);\n const importProgress: any = importRun ? batchResults[batchResults.length - 1]?.rows?.[0] ?? null : null;\n return c.json({\n ok: true,\n id,\n contentBytes,\n projectedBytes: projected,\n indexedMessages: normalizedMessages.length,\n searchEngine: normalizedMessages.length ? \"fts5_bm25\" : \"legacy_like_fallback\",\n importProgress: importProgress ? {\n cursor: Number(importProgress.cursor ?? 0),\n importedCount: Number(importProgress.imported_count ?? 0),\n indexedMessages: Number(importProgress.indexed_messages ?? 0),\n skippedCount: Number(importProgress.skipped_count ?? 0),\n status: importProgress.status,\n lastError: importProgress.last_error,\n updatedAt: importProgress.updated_at,\n } : null,\n });\n});\n\napp.get(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const result = await sqlite.execute({\n sql: `SELECT id, source_fingerprint, source_name, source_size, total_candidates, cursor,\n imported_count, indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n FROM vault_import_runs WHERE id = ? LIMIT 1`,\n args: [id],\n });\n if (!result.rows.length) return c.json({ error: \"not_found\" }, 404);\n const row: any = result.rows[0];\n return c.json({\n ...row,\n inventory: (() => { try { return JSON.parse(String(row.inventory_json || \"{}\")); } catch { return {}; } })(),\n });\n});\n\napp.put(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const fingerprint = typeof body.sourceFingerprint === \"string\" ? body.sourceFingerprint.trim().toLowerCase() : \"\";\n const sourceName = typeof body.sourceName === \"string\" ? body.sourceName.trim().slice(0, 300) : \"\";\n if (!/^[a-f0-9]{64}$/.test(fingerprint) || !sourceName) return c.json({ error: \"valid_source_fingerprint_and_name_required\" }, 400);\n const total = Math.min(1_000_000, int(body.totalCandidates));\n if (total < 1) return c.json({ error: \"total_candidates_required\" }, 400);\n const cursor = Math.min(total, int(body.cursor));\n const importedCount = Math.min(cursor, int(body.importedCount));\n const indexedMessages = Math.min(50_000_000, int(body.indexedMessages));\n const skippedCount = Math.min(cursor, int(body.skippedCount));\n if (importedCount + skippedCount > cursor) return c.json({ error: \"import_progress_inconsistent\" }, 400);\n const sourceSize = Math.min(Number.MAX_SAFE_INTEGER, int(body.sourceSize));\n const allowedStatuses = new Set([\"IN_PROGRESS\", \"PAUSED\", \"COMPLETE\", \"FAILED\"]);\n const status = allowedStatuses.has(String(body.status)) ? String(body.status) : \"IN_PROGRESS\";\n if (status === \"COMPLETE\" && cursor !== total) return c.json({ error: \"complete_requires_full_cursor\" }, 400);\n const inventoryJson = JSON.stringify(body.inventory && typeof body.inventory === \"object\" ? body.inventory : {}).slice(0, 16_000);\n const lastError = typeof body.lastError === \"string\" && body.lastError.trim() ? body.lastError.trim().slice(0, 1000) : null;\n const existing = await sqlite.execute({ sql: \"SELECT source_fingerprint,total_candidates,status FROM vault_import_runs WHERE id = ? LIMIT 1\", args: [id] });\n if (existing.rows.length) {\n const row: any = existing.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n }\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO vault_import_runs(\n id, source_fingerprint, source_name, source_size, total_candidates, cursor, imported_count,\n indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET\n source_name=excluded.source_name,\n source_size=MAX(vault_import_runs.source_size, excluded.source_size),\n cursor=MAX(vault_import_runs.cursor, excluded.cursor),\n imported_count=MAX(vault_import_runs.imported_count, excluded.imported_count),\n indexed_messages=MAX(vault_import_runs.indexed_messages, excluded.indexed_messages),\n skipped_count=MAX(vault_import_runs.skipped_count, excluded.skipped_count),\n status=CASE WHEN vault_import_runs.status='COMPLETE' THEN 'COMPLETE' ELSE excluded.status END,\n inventory_json=CASE WHEN length(excluded.inventory_json) > 2 THEN excluded.inventory_json ELSE vault_import_runs.inventory_json END,\n last_error=CASE WHEN vault_import_runs.status='COMPLETE' OR excluded.status='COMPLETE' THEN NULL ELSE excluded.last_error END,\n updated_at=excluded.updated_at`,\n args: [id, fingerprint, sourceName, sourceSize, total, cursor, importedCount, indexedMessages, skippedCount, status, inventoryJson, lastError, now, now],\n });\n const saved = await sqlite.execute({\n sql: `SELECT id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at FROM vault_import_runs WHERE id=? LIMIT 1`,\n args: [id],\n });\n const row: any = saved.rows[0] ?? {};\n return c.json({\n ok: true,\n id: row.id,\n sourceFingerprint: row.source_fingerprint,\n sourceName: row.source_name,\n sourceSize: Number(row.source_size ?? 0),\n totalCandidates: Number(row.total_candidates ?? 0),\n cursor: Number(row.cursor ?? 0),\n importedCount: Number(row.imported_count ?? 0),\n indexedMessages: Number(row.indexed_messages ?? 0),\n skippedCount: Number(row.skipped_count ?? 0),\n status: row.status,\n lastError: row.last_error,\n updatedAt: row.updated_at,\n });\n});\n\napp.delete(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const results = await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, rowsAffected: results[2]?.rowsAffected ?? 0 });\n});\n\napp.get(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const limit = Math.min(25, Math.max(1, Number(c.req.query(\"limit\") ?? 8) || 8));\n const project = (c.req.query(\"project\") ?? \"\").trim().slice(0, 120);\n const result = project\n ? await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints WHERE project = ? ORDER BY updated_at DESC LIMIT ?`,\n args: [project, limit],\n })\n : await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints ORDER BY updated_at DESC LIMIT ?`,\n args: [limit],\n });\n return c.json({ project: project || null, checkpoints: result.rows });\n});\n\napp.post(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const project = typeof body.project === \"string\" ? body.project.trim().slice(0, 120) : \"\";\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 240) : \"\";\n const summary = typeof body.summary === \"string\" ? body.summary.trim().slice(0, 12000) : \"\";\n if (!safeProject(project) || !title || !summary) return c.json({ error: \"project_title_summary_required\" }, 400);\n let id = typeof body.id === \"string\" ? body.id.trim() : \"\";\n if (!safeId(id)) id = `cp_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;\n const decisions = typeof body.decisions === \"string\" ? body.decisions.trim().slice(0, 12000) : \"\";\n const openGaps = typeof body.openGaps === \"string\" ? body.openGaps.trim().slice(0, 12000) : \"\";\n const nextAction = typeof body.nextAction === \"string\" ? body.nextAction.trim().slice(0, 12000) : \"\";\n const sourceConversationId = safeId(body.sourceConversationId) ? body.sourceConversationId : null;\n const evidenceState = typeof body.evidenceState === \"string\" ? body.evidenceState.trim().slice(0, 80) : \"CHECKPOINT\";\n const now = new Date().toISOString();\n\n await sqlite.batch([\n {\n sql: `INSERT INTO vault_checkpoints (\n id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n project=excluded.project, title=excluded.title, summary=excluded.summary,\n decisions=excluded.decisions, open_gaps=excluded.open_gaps, next_action=excluded.next_action,\n source_conversation_id=excluded.source_conversation_id, evidence_state=excluded.evidence_state,\n updated_at=excluded.updated_at`,\n args: [id, project, title, summary, decisions, openGaps, nextAction, sourceConversationId, evidenceState, now, now],\n },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [id] },\n {\n sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id, project, title, summary, decisions, open_gaps, next_action)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, project, title, summary, decisions, openGaps, nextAction],\n },\n ]);\n return c.json({ ok: true, id, project, title, evidenceState, updatedAt: now });\n});\n\napp.get(\"/api/checkpoint-search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n const match = ftsQuery(q);\n if (!match) return c.json({ query: q, results: [] });\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 25`,\n args: [match],\n });\n return c.json({ query: q, engine: \"fts5_bm25\", results: result.rows });\n});\n\nexport default oauthMiddleware(app.fetch);\n",[255],"a255962a-e155-46b9-8a14-6329e65bca4c","README.md","01a07d7c-e77b-71bc-893a-0a9b196f0e85",["D",1788811732860],"# V0.7 — real-export preflight / dry-run gate\n\nAntes de qualquer ingestão de export real, o Vault agora exige preflight em duas etapas:\n\n- `Somente analisar` inicia ligado e não grava no Turso;\n- o preflight mede conversas, mensagens textuais, mapping, IDs, content types, vazios e limites;\n- a liberação para escrita é vinculada a `sourceFingerprint + limite selecionado`;\n- trocar arquivo ou 25/50/100/.../completo invalida a liberação;\n- após conclusão ou replay já COMPLETE, o modo seguro é reativado;\n- ZIP64 seletivo é suportado, com multidisk e inteiros acima do limite seguro bloqueados;\n- anexos são inventariados, não ingeridos nesta etapa.\n\nProvas pré-merge: `v07_preflight_selftest.ts = PASS` com `sameDbBeforeAfter=true`; gate same-scope=true/different-limit=false/different-fingerprint=false; `v07_zip64_selftest.ts = PASS`; V0.6 e V0.5 regression PASS; release audit PASS; `/api/stats` anônimo = 401.\n\n---\n\n# V0.6 — Selective ZIP Import + Resumable Cursor\n\nStatus de promoção: `ZIP_SYNTHETIC_VERIFIED`; export oficial real ainda `UNVERIFIED`.\n\nNovidades:\n- aceita ZIP do export ou `conversations*.json` diretamente;\n- leitor ZIP seletivo lê diretório central + somente entradas de conversa, sem `file.arrayBuffer()` do ZIP inteiro;\n- suporta ZIP clássico com STORE/DEFLATE, valida tamanho e CRC32 e bloqueia ZIP criptografado, multidisk e ZIP64 por enquanto;\n- inventaria arquivos não ingeridos sem interpretá-los como conversa;\n- fingerprint baseado no conteúdo dos JSONs de conversa, estável mesmo após renomear/baixar novamente o mesmo export;\n- cursor persistente `vault_import_runs` no Turso com estados IN_PROGRESS/PAUSED/COMPLETE/FAILED;\n- conversa + mensagens + FTS + avanço do cursor são confirmados no mesmo batch transacional; replay do mesmo cursor não duplica `indexed_messages`;\n- timeout/erro transitório após write força reconciliação do run; se a reconciliação também falhar, o cliente entra em `UNKNOWN_EXTERNAL_STATE` e não repete cegamente;\n- run id escopado pelo tamanho selecionado (25/50/100/.../completo), evitando cursor incoerente ao ampliar a ingestão;\n- deduplicação por conversation id antes do cursor, mantendo a versão com maior `update_time`; itens sem ID não são deduplicados automaticamente para evitar perda por falso positivo;\n- UI mostra inventário, duplicatas removidas e cursor persistido.\n\nEvidência automática:\n- `v06_selftest.ts`: ZIP DEFLATE sintético particionado, leitura seletiva, CRC corruption, ZIP sem conversations, fingerprint, deduplicação e PAUSED→COMPLETE;\n- `v05_selftest.ts`: regressão V0.5;\n- `v06_release_audit.ts`: Turso/queue/resíduos antes da promoção;\n- `/api/import-runs/...` sem sessão: HTTP 401.\n\nLimites deliberados:\n- ZIP64 ainda bloqueado; não chamar de compatível com exports >4 GiB até implementar/testar ZIP64;\n- assets/PDFs/imagens são apenas inventariados nesta versão;\n- `ZIP_SYNTHETIC_VERIFIED != REAL_CHATGPT_EXPORT_VERIFIED`.\n\n---\n\n# V0.5 — Structured Knowledge + Hybrid Retrieval\n\nStatus antes do merge: backend/bridge verificado em Turso.\n\nNovidades:\n- `vault_knowledge_items` + FTS5 para regras, decisões, lições, arquitetura, riscos e achados estruturados;\n- `vault_relations` para relações graph-lite entre knowledge/checkpoint/conversation/entity/project/artifact/concept;\n- bridge actions `knowledge_upsert`, `get_knowledge`, `related`;\n- `search_hybrid`: ChatGPT gera variantes conceituais; backend executa FTS5/BM25 e Reciprocal Rank Fusion, sem chamar API de IA;\n- filtros de projeto/kind estritos;\n- knowledge writes idempotentes por ID e seguros contra stale retry;\n- relação inválida falha antes de persistência;\n- UI mostra conhecimento estruturado e relações.\n\nEvidência V0.5: `v05_selftest.ts` deve retornar `pass:true`. Corpus histórico real do ChatGPT continua pendente de export oficial.\n\n---\n\n# V0.4 — ChatGPT Bridge\n\nA V0.4 transforma o GUH Vault em memória consultável pelo próprio ChatGPT através do conector Val Town autenticado, sem API da OpenAI e sem scraping de chatgpt.com.\n\nFluxo: `ChatGPT -> Val Town control plane -> vault_bridge.ts -> Turso -> FTS5/BM25 -> ChatGPT`.\n\nAções fechadas: `search`, `get_conversation`, `stats`, `checkpoint_upsert`.\n\nControles: claim atômico, lease de 2 minutos, máximo 2 tentativas, recuperação de stale RUNNING, checkpoint idempotente, allowlist de ações, Turso fail-closed e resultados externos tratados como dados não confiáveis.\n\nEvidência antes do merge: search PASS; get_conversation PASS; stats PASS; checkpoint_upsert PASS; ação proibida BLOCKED; stale recuperável PASS na segunda tentativa; stale com orçamento esgotado FAIL sem terceira execução; queue final sem PENDING/RUNNING.\n\nSkill pessoal: `skills/guh-vault/SKILL.md`.\n\n---\n\n# V0.3.1 — FAIL-CLOSED STORAGE HOTFIX\n\nApós promover Turso a fonte principal, fallback automático para o SQLite local foi desabilitado. Motivo: após novas escritas no Turso, a cópia local pode ficar stale. Se a configuração externa desaparecer, o app deve bloquear (`TURSO_REQUIRED_NOT_CONFIGURED`) em vez de servir estado antigo silenciosamente.\n\nPolítica pura testada:\n- sem URL + sem token -> BLOCKED_EXTERNAL_REQUIRED\n- somente URL -> BLOCKED_EXTERNAL_REQUIRED\n- somente token -> BLOCKED_EXTERNAL_REQUIRED\n- URL + token -> TURSO_ACTIVE\n- localFallbackEnabled = false\n\nO SQLite local continua preservado para recuperação/migração manual, não como fallback invisível de produção.\n\n---\n\n# V0.3.0 — TURSO / EXTERNAL TEXT STORAGE\n\nCheckpoint: 2026-09-06\n\n## Estado\n\n- `TURSO_DATABASE_URL`: configurada (valor não documentado)\n- `TURSO_AUTH_TOKEN`: configurado (valor não documentado)\n- Turso: CONFIGURED + AUTHENTICATED + REACHABLE\n- provider ativo da branch V0.3: `turso`\n- fallback: Val Town project-scoped SQLite quando Turso não estiver configurado\n- cliente: `@libsql/client/web` (o cliente padrão falhou no runtime Val Town por dependência binária nativa)\n\n## Migração comprovada\n\nOrigem Val Town e destino Turso reconciliados após o checkpoint V0.3:\n\n- conversas: 3 = 3\n- mensagens: 10 = 10\n- checkpoints: 3 = 3\n- FTS mensagens no Turso: 10\n- FTS checkpoints no Turso: 3\n- SHA-256 canônico de conversas: igual\n- SHA-256 canônico de mensagens: igual\n- SHA-256 canônico de checkpoints: igual\n- `Kernel timeout`: PASS\n- `NR-12`: PASS\n- `reconciliação`: PASS\n- `export oficial`: checkpoints encontrados\n- termo inexistente: 0 hits\n\n## Reliability / security controls\n\n- active provider execute: PASS\n- active provider batch transacional: PASS\n- fixture de batch removida: PASS (`probeResidue=0`)\n- credencial Turso propositalmente inválida: rejeitada (`LibsqlError`)\n- `/api/stats` sem sessão: HTTP 401 / sem dados\n- valores de credentials não são impressos por self-tests/status\n\n## Estado epistemológico\n\n`TURSO_AVAILABLE -> CONFIGURED -> AUTHENTICATED -> EXECUTED -> VERIFIED`\n\nA V0.3 ainda não deve ser chamada `IPHONE_OPERATIONAL` até a interface principal ser aberta no iPhone depois do merge e uma reimportação confirmar escrita/search no Turso.\n\n## Próxima prova\n\nApós promoção para `main`:\n1. abrir `guh-knowledge-vault.val.run` no iPhone;\n2. confirmar `V0.3 • Turso • FTS5/BM25`;\n3. confirmar 3 conversas / 10 mensagens / 10 indexadas / 3 checkpoints;\n4. reimportar o JSON sintético;\n5. confirmar que permanece 3/10/10, sem duplicação;\n6. pesquisar `Kernel timeout`, `NR-12`, `export oficial`;\n7. somente então promover interface V0.3 para `OPERATIONAL_SYNTHETIC_E2E_TURSO`.\n\n---\n\n# GUH Knowledge Vault — V0.2.0\n\nCofre pessoal pesquisável para histórico exportado do ChatGPT + checkpoints do trabalho corrente, sem usar a API da OpenAI.\n\n## Runtime\n\n`iPhone/browser -> OAuth Val Town -> Hono -> SQLite/FTS5 -> resultados`\n\nO código é público por restrição do workspace Free, mas as rotas de dados exigem login Val Town e aceitam apenas `username === cleitoncosta`.\n\n## O que a V0.2 adiciona\n\n- mensagens persistidas individualmente em `vault_messages`;\n- índice `vault_messages_fts` com SQLite FTS5;\n- ranking BM25;\n- tokenização Unicode com remoção de diacríticos;\n- busca multi-termo com AND + prefix matching;\n- fallback para a busca V0.1 quando não houver mensagens indexadas;\n- checkpoints persistentes em `vault_checkpoints`;\n- índice FTS dos checkpoints;\n- busca universal capaz de retornar conversas + checkpoints;\n- detalhe da conversa renderizado mensagem por mensagem quando o índice existe;\n- reimportação/reindexação idempotente para uma mesma conversa;\n- `vault_meta.schema_version = 0.2.0`;\n- self-test stateful com limpeza de fixture.\n\n## Duas rotas de memória\n\n### Histórico antigo\n\n`export oficial -> conversations.json -> importador no navegador -> conversa + mensagens -> FTS5`\n\n### Conhecimento novo\n\n`ChatGPT/conector Val Town -> checkpoint estruturado -> vault_checkpoints -> FTS5`\n\nIsso evita depender exclusivamente de novos exports para preservar decisões e estado de projetos daqui para frente.\n\n## Estado persistido no fechamento da V0.2\n\n- 3 conversas sintéticas compatíveis com export;\n- 10 mensagens de origem;\n- 10 mensagens individualmente indexadas;\n- 10 linhas no índice FTS das mensagens;\n- 970 B de conteúdo legado de conversa;\n- 1 checkpoint real sobre a prova da V0.1 no iPhone;\n- 0 fixtures de self-test restantes.\n\n## Evidência\n\n### PASS\n\n- V0.1 real no iPhone: login, importação, persistência, busca e abertura de conversa;\n- FTS5 disponível no SQLite do Val Town;\n- `Kernel timeout` -> conversa correta;\n- `NR-12` -> conversa correta;\n- `reconciliação` -> duas conversas relacionadas;\n- checkpoint encontrado por `export + oficial`;\n- controle negativo inexistente -> 0 hits;\n- reindex replay -> 2 mensagens continuam 2, sem duplicação;\n- replay FTS -> 2 linhas continuam 2;\n- self-test final -> `pass=true`;\n- self-test remove as próprias fixtures;\n- `index.ts` compila no runtime;\n- `frontend/components/App.tsx` compila no runtime;\n- visitante sem sessão continua redirecionado para autenticação.\n\n### Falha útil encontrada\n\nO primeiro self-test assumia incorretamente que uma busca por `kernel` retornaria somente a fixture. Como já havia uma conversa real de teste com esse termo, o self-test marcou FAIL apesar do sistema estar correto.\n\nCorreção: o validador passou a testar a presença da fixture dentro do escopo correto, sem assumir exclusividade global.\n\nLesson learned: **um teste pode falhar por hipótese inválida do próprio validador; negative controls e escopo explícito são obrigatórios.**\n\n### Ainda UNVERIFIED\n\n- parser contra export oficial real desta conta;\n- importação real de 25/50/100 conversas;\n- comportamento com um export muito grande no Safari/iPhone;\n- assets, imagens, PDFs, ZIPs e outros anexos do export;\n- busca semântica por embeddings/conceitos;\n- camada de armazenamento maior para histórico completo;\n- sincronização automática do histórico interno do ChatGPT.\n\n## Limites deliberados\n\nA V0.2 ainda preserva `conversations.content_text` por compatibilidade com a V0.1 e também mantém mensagens individualizadas + índice. Isso duplica parte do conteúdo e não é a arquitetura final para milhares de conversas.\n\nAntes da importação massiva, deve ser criada uma camada de armazenamento maior e o orçamento deve considerar tamanho físico real, não apenas `content_bytes` da tabela legada.\n\n## Próximos marcos\n\n1. Testar um export oficial real.\n2. Medir tamanho/quantidade real de chats e assets.\n3. Escolher storage gratuito maior para o histórico completo.\n4. Migrar o corpo das mensagens para arquitetura sem duplicação desnecessária.\n5. Adicionar projetos, entidades, relações e artefatos.\n6. Evoluir de full-text para busca híbrida/semântica sem depender da API da OpenAI.\n7. Criar interface/tool para outros agentes consultarem o Vault.\n8. Automatizar checkpoints quando o usuário solicitar `salve checkpoint`.\n",[262],"7fab3c35-99d7-4060-89de-5e303889bc33","CHANGELOG.md","01a07d7c-e77b-71bc-893a-0631d81f0350",["D",1788811732860],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v3