`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_391":392,"_393":394},"routes/_app.x.$handle.$name",{"_100":99,"_31":43,"_109":88,"_26":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":123,"_124":24,"_125":126,"_127":57,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","v05_schema_migrate.ts","latestPath","fileId","85e401ec-aa41-11f1-9721-1607ee4eb77e","name","fileType","script","content","import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nawait db.batch([\n { sql: `CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_source ON vault_knowledge_items(source_type, source_id)` },\n { sql: `CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)` },\n]);\n\nconst counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations`);\n\nconst result = {\n pass: storage.activeProvider === \"turso\",\n schemaVersion: \"0.5.0\",\n activeProvider: storage.activeProvider,\n counts: counts.rows[0],\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n","createdAt",["D",1788733382089],"branchVersion","branchId","756165ae-0560-4689-91f4-74406c2d566d","id","348a33bb-f2d9-4c7a-b6a6-b2762cf9a17f","guh-knowledge-vault",["D",1788716337448],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Private searchable mirror of ChatGPT exports","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a077cd-4980-75c9-8c9f-12270a3b1d2b","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","348a33bbf2d94c7ab6a6b2762cf9a17f","tursoHostname","348a33bbf2d94c7ab6a6b2762cf9a17f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789499469860],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":53,"_105":106,"_107":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":91,"_92":93,"_94":48,"_95":42,"_96":63,"_97":43,"_98":99},"isOwned",35,"v0.5-structured-knowledge","projectId","forkedBranchId","bb539edb-15fc-48c6-a690-7d3728033cd0","forkedBranchVersion",12,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":386,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":387,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":388,"_82":389,"_84":390,"_86":24},"tree",[255,262,264,267,268,269,270,271,272,273,274,275,276,277,278],"files",[255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278],"counts",{"_244":61,"_245":246,"_247":61,"_248":249,"_250":251},"contents",[139,140,141,142,143,144,145,146,147,148,149,150,151,152,153],"upstreamProject","upstreamBranch",{"_41":91,"_36":132,"_133":134,"_31":135,"_89":42,"_13":136,"_90":-5,"_92":-5,"_137":138,"_45":-5,"_86":24,"_47":48,"_98":99,"_62":63,"_97":43},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788716337448],"updatedAt",["D",1789089349222],"main",38,"lockfileKey","1789089349347-esm.town_v_cleitoncosta_guh-knowledge-vault@38-main",{"_41":239,"_31":240,"_29":241,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":242,"_13":61,"_32":232,"_34":-5,"_23":24,"_162":-5,"_26":243},{"_41":234,"_31":235,"_29":236,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":237,"_13":61,"_32":232,"_34":-5,"_23":24,"_162":-5,"_26":238},{"_41":228,"_31":229,"_29":230,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":231,"_13":61,"_32":232,"_34":-5,"_23":24,"_162":-5,"_26":233},{"_41":222,"_31":223,"_29":224,"_157":-5,"_39":40,"_38":158,"_159":24,"_36":225,"_13":61,"_32":20,"_34":226,"_23":24,"_162":-5,"_26":227},{"_41":216,"_31":217,"_29":218,"_157":-5,"_39":40,"_38":158,"_159":24,"_36":219,"_13":61,"_32":20,"_34":220,"_23":24,"_162":-5,"_26":221},{"_41":209,"_31":210,"_29":211,"_157":-5,"_39":40,"_38":158,"_159":24,"_36":212,"_13":61,"_32":213,"_34":214,"_23":24,"_162":-5,"_26":215},{"_41":203,"_31":204,"_29":205,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":206,"_13":61,"_32":33,"_34":207,"_23":24,"_162":-5,"_26":208},{"_41":197,"_31":198,"_29":199,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":200,"_13":61,"_32":33,"_34":201,"_23":24,"_162":-5,"_26":202},{"_41":191,"_31":192,"_29":193,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":194,"_13":61,"_32":33,"_34":195,"_23":24,"_162":-5,"_26":196},{"_41":185,"_31":186,"_29":187,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":188,"_13":61,"_32":33,"_34":189,"_23":24,"_162":-5,"_26":190},{"_41":179,"_31":180,"_29":181,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":182,"_13":61,"_32":33,"_34":183,"_23":24,"_162":-5,"_26":184},{"_41":173,"_31":174,"_29":175,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":176,"_13":61,"_32":33,"_34":177,"_23":24,"_162":-5,"_26":178},{"_41":167,"_31":168,"_29":169,"_157":-5,"_39":40,"_38":158,"_159":57,"_36":170,"_13":61,"_32":33,"_34":171,"_23":24,"_162":-5,"_26":172},{"_41":164,"_31":27,"_29":30,"_157":-5,"_39":40,"_38":14,"_159":57,"_36":165,"_13":61,"_32":33,"_34":35,"_23":24,"_162":-5,"_26":166},{"_41":154,"_31":155,"_29":156,"_157":-5,"_39":40,"_38":158,"_159":24,"_36":160,"_13":61,"_32":33,"_34":161,"_23":24,"_162":-5,"_26":163},"ef8a267f-b350-49ce-9e30-cf4a83194409","vault_bridge.ts","01a078d1-15a5-770f-b95f-c4f5cc9fb71e","parentId",1,"latest",["D",1788733363622],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst BRIDGE_VERSION = \"0.4.0\";\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_.:-]{1,160}$/.test(value);\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 10) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction clip(value: unknown, max: number) {\n return typeof value === \"string\" ? value.trim().slice(0, max) : \"\";\n}\n\nasync function claimOne() {\n await control.execute(`CREATE TABLE IF NOT EXISTS vault_bridge_requests (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n status TEXT NOT NULL,\n action TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n result_json TEXT,\n error TEXT,\n attempt_count INTEGER NOT NULL DEFAULT 0\n )`);\n await control.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_bridge_requests_status_created ON vault_bridge_requests(status, created_at)\");\n await control.execute(`UPDATE vault_bridge_requests\n SET status=CASE WHEN attempt_count >= 2 THEN 'FAIL' ELSE 'PENDING' END,\n error=CASE WHEN attempt_count >= 2 THEN 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' ELSE 'STALE_LEASE_RECOVERED' END,\n updated_at=datetime('now')\n WHERE status='RUNNING' AND updated_at < datetime('now','-2 minutes')`);\n await control.execute(`UPDATE vault_bridge_requests SET status='FAIL', error='RETRY_BUDGET_EXHAUSTED', updated_at=datetime('now')\n WHERE status='PENDING' AND attempt_count >= 2`);\n const result = await control.execute(`UPDATE vault_bridge_requests\n SET status='RUNNING', updated_at=datetime('now'), attempt_count=attempt_count+1\n WHERE id=(SELECT id FROM vault_bridge_requests WHERE status='PENDING' AND attempt_count < 2 ORDER BY created_at ASC LIMIT 1)\n AND status='PENDING' AND attempt_count < 2\n RETURNING id,action,payload_json,attempt_count,created_at`);\n return result.rows[0] as any | undefined;\n}\n\nasync function finish(id: string, status: \"PASS\" | \"FAIL\" | \"BLOCKED\", result: unknown, error: string | null = null) {\n const resultJson = JSON.stringify(result).slice(0, 80_000);\n await control.execute({\n sql: `UPDATE vault_bridge_requests SET status=?, result_json=?, error=?, updated_at=datetime('now') WHERE id=?`,\n args: [status, resultJson, error, id],\n });\n}\n\nasync function search(payload: any) {\n const query = clip(payload?.query, 200);\n const limit = Math.min(10, Math.max(1, Number(payload?.limit ?? 6) || 6));\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const match = ftsQuery(query);\n if (!match) throw new Error(\"QUERY_HAS_NO_SEARCHABLE_TOKENS\");\n\n const conversations = await db.execute({\n sql: `WITH hits AS (\n SELECT conversation_id,message_id,role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 36) AS hit_snippet,\n bm25(vault_messages_fts, 6.0,0.0,2.5,0.0,1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 120\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn FROM hits\n )\n SELECT c.id,c.title,c.create_time,c.update_time,c.message_count,b.message_id,b.role,b.hit_snippet,b.rank\n FROM best b JOIN conversations c ON c.id=b.conversation_id\n WHERE b.rn=1\n ORDER BY b.rank,c.update_time DESC\n LIMIT ?`,\n args: [match, limit],\n });\n\n const checkpoints = await db.execute({\n sql: `SELECT checkpoint_id AS id,project,title,\n snippet(vault_checkpoints_fts,3,'','',' … ',36) AS hit_snippet,\n bm25(vault_checkpoints_fts,0.0,3.0,5.0,2.0,2.0,1.5,1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, Math.min(limit, 6)],\n });\n\n return {\n query,\n engine: \"fts5_bm25\",\n conversations: conversations.rows.map((r: any) => ({\n id: r.id,\n title: r.title,\n createTime: r.create_time,\n updateTime: r.update_time,\n messageCount: Number(r.message_count ?? 0),\n messageId: r.message_id,\n role: r.role,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n rank: r.rank,\n })),\n checkpoints: checkpoints.rows.map((r: any) => ({\n id: r.id,\n project: r.project,\n title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n rank: r.rank,\n })),\n };\n}\n\nasync function getConversation(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_CONVERSATION_ID\");\n const maxMessages = Math.min(60, Math.max(1, Number(payload?.maxMessages ?? 40) || 40));\n const maxChars = Math.min(40_000, Math.max(2_000, Number(payload?.maxChars ?? 20_000) || 20_000));\n const conversation = await db.execute({\n sql: `SELECT id,title,create_time,update_time,message_count,source_file,imported_at FROM conversations WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!conversation.rows.length) throw new Error(\"CONVERSATION_NOT_FOUND\");\n const messages = await db.execute({\n sql: `SELECT id,seq,role,create_time,content_text FROM vault_messages WHERE conversation_id=? ORDER BY seq ASC LIMIT ?`,\n args: [id, maxMessages],\n });\n let used = 0;\n const clippedMessages: any[] = [];\n for (const row of messages.rows as any[]) {\n const remaining = maxChars - used;\n if (remaining <= 0) break;\n const text = String(row.content_text ?? \"\").slice(0, remaining);\n used += text.length;\n clippedMessages.push({ id: row.id, seq: Number(row.seq), role: row.role, createTime: row.create_time, content: text });\n }\n return { ...(conversation.rows[0] as any), messages: clippedMessages, returnedChars: used, truncatedByBridge: messages.rows.length > clippedMessages.length || used >= maxChars };\n}\n\nasync function stats() {\n const result = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COALESCE(SUM(content_bytes),0) FROM conversations) AS source_content_bytes`);\n return { ...(result.rows[0] as any), activeProvider: storage.activeProvider, bridgeVersion: BRIDGE_VERSION };\n}\n\nasync function upsertCheckpoint(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const title = clip(payload?.title, 240);\n const summary = clip(payload?.summary, 12_000);\n if (!project || !title || !summary) throw new Error(\"PROJECT_TITLE_SUMMARY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) {\n const deterministic = `cp_bridge_${requestId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n if (!safeId(deterministic)) throw new Error(\"INVALID_DETERMINISTIC_CHECKPOINT_ID\");\n id = deterministic;\n }\n const decisions = clip(payload?.decisions, 12_000);\n const openGaps = clip(payload?.openGaps, 12_000);\n const nextAction = clip(payload?.nextAction, 12_000);\n const evidenceState = clip(payload?.evidenceState, 80) || \"CHECKPOINT\";\n const sourceConversationId = safeId(payload?.sourceConversationId) ? payload.sourceConversationId : null;\n const now = new Date().toISOString();\n await db.batch([\n {\n sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,title,summary,decisions,openGaps,nextAction,sourceConversationId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_checkpoints_fts WHERE checkpoint_id=?`, args: [id] },\n { sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`, args: [id,project,title,summary,decisions,openGaps,nextAction] },\n ]);\n return { id, project, title, evidenceState, updatedAt: now };\n}\n\nconst request = await claimOne();\nif (!request) {\n console.log(JSON.stringify({ status: \"NO_PENDING_BRIDGE_REQUEST\", bridgeVersion: BRIDGE_VERSION }));\n} else {\n const id = String(request.id);\n try {\n const payload = JSON.parse(String(request.payload_json || \"{}\"));\n let result: unknown;\n let blocked = false;\n switch (String(request.action)) {\n case \"search\": result = await search(payload); break;\n case \"get_conversation\": result = await getConversation(payload); break;\n case \"stats\": result = await stats(); break;\n case \"checkpoint_upsert\": result = await upsertCheckpoint(payload, id); break;\n default: {\n const envelope = { status: \"BLOCKED\", id, action: request.action, error: \"ACTION_NOT_ALLOWED\", bridgeVersion: BRIDGE_VERSION };\n await finish(id, \"BLOCKED\", envelope, \"ACTION_NOT_ALLOWED\");\n console.log(JSON.stringify(envelope));\n blocked = true;\n }\n }\n if (!blocked) {\n const envelope = { status: \"PASS\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, activeProvider: storage.activeProvider, result };\n await finish(id, \"PASS\", envelope);\n console.log(JSON.stringify(envelope));\n }\n } catch (error) {\n const message = error instanceof Error ? error.message.slice(0, 500) : String(error).slice(0, 500);\n const envelope = { status: \"FAIL\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, error: message };\n await finish(id, \"FAIL\", envelope, message);\n console.log(JSON.stringify(envelope));\n }\n}\n","label",[155],"c8415c0f-0d68-4460-a2ce-19da363795e9",["D",1788733382089],[27],"b31f88aa-ca66-49ea-a90d-02c3da3d9eb6","v04_bridge_selftest.ts","01a078d1-15a5-770f-b95f-c39321084caf",["D",1788733363622],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst reqs = await control.execute(`SELECT id,status,error,attempt_count FROM vault_bridge_requests\n WHERE id IN (\n 'bridge_e2e_search_kernel_20260906',\n 'bridge_e2e_get_kernel_20260906',\n 'bridge_e2e_stats_20260906',\n 'bridge_e2e_checkpoint_20260906',\n 'bridge_negative_disallowed_action_20260906_v2',\n 'bridge_stale_recoverable_20260906',\n 'bridge_stale_exhausted_20260906'\n ) ORDER BY id`);\n\nconst map = new Map((reqs.rows as any[]).map((r) => [String(r.id), r]));\nconst cp = await db.execute({ sql: `SELECT id,evidence_state FROM vault_checkpoints WHERE id=?`, args: ['cp_guh_v04_chatgpt_bridge'] });\nconst cpSearch = await db.execute({ sql: `SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?`, args: ['\"chatgpt\"* AND \"bridge\"*'] });\nconst search = await db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] });\nconst queue = await control.execute(`SELECT\n SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END) AS running\n FROM vault_bridge_requests`);\n\nconst q: any = queue.rows[0] ?? {};\nconst pass =\n storage.activeProvider === 'turso' &&\n map.get('bridge_e2e_search_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_get_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_stats_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_checkpoint_20260906')?.status === 'PASS' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.status === 'BLOCKED' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.error === 'ACTION_NOT_ALLOWED' &&\n map.get('bridge_stale_recoverable_20260906')?.status === 'PASS' &&\n Number(map.get('bridge_stale_recoverable_20260906')?.attempt_count) === 2 &&\n map.get('bridge_stale_exhausted_20260906')?.status === 'FAIL' &&\n map.get('bridge_stale_exhausted_20260906')?.error === 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' &&\n cp.rows.some((r: any) => r.id === 'cp_guh_v04_chatgpt_bridge' && r.evidence_state === 'OPERATIONAL_SYNTHETIC_CHATGPT_BRIDGE') &&\n cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge') &&\n search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout') &&\n Number(q.pending ?? 0) === 0 && Number(q.running ?? 0) === 0;\n\nconst result = {\n pass,\n activeProvider: storage.activeProvider,\n evidenceRows: reqs.rows,\n checkpointFound: cp.rows.length === 1,\n checkpointSearchable: cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge'),\n kernelTimeoutSearchable: search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout'),\n queue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[168],"9b05e5b2-2acd-45d1-bda3-aa55fc7ac7a9","v03_turso_auth_negative_selftest.ts","01a078d1-15a5-770f-b95f-be55f6553b31",["D",1788733363622],"import { createClient } from \"npm:@libsql/client@0.15.15/web\";\n\nconst url = Deno.env.get(\"TURSO_DATABASE_URL\");\nif (!url) throw new Error(\"TURSO_DATABASE_URL_MISSING\");\n\nconst invalid = createClient({ url, authToken: \"intentionally-invalid-token-for-negative-control\" });\nlet rejected = false;\nlet errorClass = \"\";\ntry {\n await invalid.execute(\"SELECT 1 AS ok\");\n} catch (error) {\n rejected = true;\n errorClass = error instanceof Error ? error.name : \"unknown\";\n}\n\nconst result = { pass: rejected, invalidCredentialRejected: rejected, errorClass };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[174],"2ba85343-acec-4eb3-b2a1-c0a85537ed16","v03_storage_selftest.ts","01a078d1-15a5-770f-b95f-b99473fd353b",["D",1788733363622],"import { getLocalDatabase, getStorageState, probeTurso } from \"./lib/storage_provider.ts\";\n\nconst state = getStorageState();\nconst local = getLocalDatabase();\nconst localProbe = await local.execute(\"SELECT 1 AS ok\");\nconst localOk = Number((localProbe.rows[0] as any)?.ok ?? 0) === 1;\nconst turso = await probeTurso();\n\nconst result = {\n pass: localOk && state.credentialValuesExposed === false && (\n state.externalConfigured\n ? turso.configured === true\n : turso.configured === false && turso.authenticated === false && turso.reachable === false\n ),\n localOk,\n storageState: state,\n tursoProbe: turso,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[180],"3c9e8cb0-ba90-4a9f-89ab-1ff0d4dbe692","v03_migrate_to_turso.ts","01a078d1-15a5-770f-b95f-b4fec1ba618b",["D",1788733363622],"import { getLocalDatabase, getTursoClient } from \"./lib/storage_provider.ts\";\n\nconst local = getLocalDatabase();\nconst turso = getTursoClient();\nif (!turso) throw new Error(\"TURSO_NOT_CONFIGURED\");\n\nasync function sha256(value: unknown) {\n const bytes = new TextEncoder().encode(JSON.stringify(value));\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function remote(sql: string, args: any[] = []) {\n return await turso!.execute({ sql, args });\n}\n\nasync function ensureRemoteSchema() {\n const statements = [\n `CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)`,\n `CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n ];\n for (const sql of statements) await remote(sql);\n await remote(\n `INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version','0.3.0',datetime('now'))\n ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`,\n );\n}\n\nasync function fetchLocal() {\n const [conversations, messages, checkpoints] = await Promise.all([\n local.execute(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at\n FROM conversations ORDER BY id`),\n local.execute(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at\n FROM vault_messages ORDER BY conversation_id,seq,id`),\n local.execute(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at\n FROM vault_checkpoints ORDER BY id`),\n ]);\n return { conversations: conversations.rows as any[], messages: messages.rows as any[], checkpoints: checkpoints.rows as any[] };\n}\n\nasync function migrate(data: Awaited>) {\n for (const row of data.conversations) {\n await remote(\n `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,create_time=excluded.create_time,update_time=excluded.update_time,\n message_count=excluded.message_count,char_count=excluded.char_count,content_bytes=excluded.content_bytes,content_text=excluded.content_text,\n truncated=excluded.truncated,source_file=excluded.source_file,imported_at=excluded.imported_at`,\n [row.id,row.title,row.create_time,row.update_time,row.message_count,row.char_count,row.content_bytes,row.content_text,row.truncated,row.source_file,row.imported_at],\n );\n await remote(`DELETE FROM vault_messages_fts WHERE conversation_id = ?`, [row.id]);\n await remote(`DELETE FROM vault_messages WHERE conversation_id = ?`, [row.id]);\n }\n\n const titleByConversation = new Map(data.conversations.map((r) => [String(r.id), String(r.title)]));\n for (const row of data.messages) {\n await remote(\n `INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?)`,\n [row.id,row.conversation_id,row.seq,row.role,row.create_time,row.content_text,row.char_count,row.content_bytes,row.imported_at],\n );\n await remote(\n `INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)`,\n [row.id,row.conversation_id,titleByConversation.get(String(row.conversation_id)) ?? \"Sem título\",row.role,row.content_text],\n );\n }\n\n for (const row of data.checkpoints) {\n await remote(\n `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,\n open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,\n evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action,row.source_conversation_id,row.evidence_state,row.created_at,row.updated_at],\n );\n await remote(`DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?`, [row.id]);\n await remote(\n `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action],\n );\n }\n}\n\nasync function verify(source: Awaited>) {\n const rc = await remote(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at FROM conversations ORDER BY id`);\n const rm = await remote(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at FROM vault_messages ORDER BY conversation_id,seq,id`);\n const rp = await remote(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at FROM vault_checkpoints ORDER BY id`);\n const ftsMessageCount = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts`);\n const ftsCheckpointCount = await remote(`SELECT COUNT(*) AS c FROM vault_checkpoints_fts`);\n\n const sourceHashes = {\n conversations: await sha256(source.conversations),\n messages: await sha256(source.messages),\n checkpoints: await sha256(source.checkpoints),\n };\n const destinationHashes = {\n conversations: await sha256(rc.rows),\n messages: await sha256(rm.rows),\n checkpoints: await sha256(rp.rows),\n };\n\n const kernel = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"kernel\"* AND \"timeout\"*']);\n const nr12 = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"nr\"* AND \"12\"*']);\n const reconciliation = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"reconciliacao\"*']);\n const checkpoint = await remote(`SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ? ORDER BY checkpoint_id`, ['\"export\"* AND \"oficial\"*']);\n const negative = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, ['\"guhtermoinexistente987654\"*']);\n\n const ftsCounts = {\n messages: Number((ftsMessageCount.rows[0] as any)?.c ?? -1),\n checkpoints: Number((ftsCheckpointCount.rows[0] as any)?.c ?? -1),\n };\n const counts = {\n source: { conversations: source.conversations.length, messages: source.messages.length, checkpoints: source.checkpoints.length },\n destination: { conversations: rc.rows.length, messages: rm.rows.length, checkpoints: rp.rows.length },\n fts: ftsCounts,\n };\n\n const pass =\n JSON.stringify(counts.source) === JSON.stringify(counts.destination) &&\n ftsCounts.messages === source.messages.length &&\n ftsCounts.checkpoints === source.checkpoints.length &&\n sourceHashes.conversations === destinationHashes.conversations &&\n sourceHashes.messages === destinationHashes.messages &&\n sourceHashes.checkpoints === destinationHashes.checkpoints &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n reconciliation.rows.length >= 2 &&\n checkpoint.rows.length >= 1 &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0;\n\n return {\n pass,\n counts,\n hashesEqual: {\n conversations: sourceHashes.conversations === destinationHashes.conversations,\n messages: sourceHashes.messages === destinationHashes.messages,\n checkpoints: sourceHashes.checkpoints === destinationHashes.checkpoints,\n },\n searchProofs: {\n kernelTimeout: kernel.rows,\n nr12: nr12.rows,\n reconciliation: reconciliation.rows,\n exportOfficialCheckpointCount: checkpoint.rows.length,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n },\n };\n}\n\nawait ensureRemoteSchema();\nconst source = await fetchLocal();\nawait migrate(source);\nconst verification = await verify(source);\nconsole.log(JSON.stringify(verification));\nexport default verification;\n",[186],"a88079d5-52eb-4c76-bc78-8eebdd5decea","v03_active_storage_selftest.ts","01a078d1-15a5-770f-b95f-b0477d7c7757",["D",1788733363622],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst state = getStorageState();\nconst PROBE_KEY = \"v03_active_batch_probe\";\n\nawait db.execute(`CREATE TABLE IF NOT EXISTS vault_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL)`);\n\nlet batchOk = false;\ntry {\n const results: any = await db.batch([\n { sql: `INSERT INTO vault_meta(key,value,updated_at) VALUES(?,?,datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`, args: [PROBE_KEY, \"batch-pass\"] },\n { sql: `SELECT value FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n { sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n ]);\n batchOk = String(results?.[1]?.rows?.[0]?.value ?? \"\") === \"batch-pass\";\n} finally {\n await db.execute({ sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] });\n}\n\nconst [counts, kernel, nr12, negative, probeResidue] = await Promise.all([\n db.execute(`SELECT (SELECT COUNT(*) FROM conversations) AS conversations, (SELECT COUNT(*) FROM vault_messages) AS messages, (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints, (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts, (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts`),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] }),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"nr\"* AND \"12\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"guhtermoinexistente987654\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] }),\n]);\n\nconst row: any = counts.rows[0] ?? {};\nconst result = {\n pass:\n state.activeProvider === \"turso\" &&\n batchOk &&\n Number(row.conversations) === 3 &&\n Number(row.messages) === 10 &&\n Number(row.checkpoints) >= 3 &&\n Number(row.message_fts) === 10 &&\n Number(row.checkpoint_fts) === Number(row.checkpoints) &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0 &&\n Number((probeResidue.rows[0] as any)?.c ?? -1) === 0,\n activeProvider: state.activeProvider,\n batchOk,\n counts: {\n conversations: Number(row.conversations),\n messages: Number(row.messages),\n checkpoints: Number(row.checkpoints),\n messageFts: Number(row.message_fts),\n checkpointFts: Number(row.checkpoint_fts),\n },\n kernelTimeoutFound: kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\"),\n nr12Found: nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\"),\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n probeResidue: Number((probeResidue.rows[0] as any)?.c ?? -1),\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[192],"81c1c556-ed98-4f90-833e-0e4b8c43c59e","v031_storage_policy_selftest.ts","01a078d1-15a5-770f-b95f-ade01e49efb3",["D",1788733363622],"import { decideStorageState } from \"./lib/storage_provider.ts\";\n\nconst neither = decideStorageState(false, false);\nconst urlOnly = decideStorageState(true, false);\nconst tokenOnly = decideStorageState(false, true);\nconst both = decideStorageState(true, true);\n\nconst result = {\n pass:\n neither.activeProvider === \"blocked\" && neither.migrationMode === \"BLOCKED_EXTERNAL_REQUIRED\" && neither.localFallbackEnabled === false &&\n urlOnly.activeProvider === \"blocked\" && urlOnly.externalConfigured === false &&\n tokenOnly.activeProvider === \"blocked\" && tokenOnly.externalConfigured === false &&\n both.activeProvider === \"turso\" && both.externalConfigured === true && both.migrationMode === \"TURSO_ACTIVE\" && both.localFallbackEnabled === false,\n cases: {\n neither: { activeProvider: neither.activeProvider, migrationMode: neither.migrationMode },\n urlOnly: { activeProvider: urlOnly.activeProvider, migrationMode: urlOnly.migrationMode },\n tokenOnly: { activeProvider: tokenOnly.activeProvider, migrationMode: tokenOnly.migrationMode },\n both: { activeProvider: both.activeProvider, migrationMode: both.migrationMode },\n },\n localFallbackEnabled: both.localFallbackEnabled,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[198],"76c1dc06-2370-4542-a8d8-8f0396efe7a9","v02_selftest.ts","01a078d1-15a5-770f-b95f-a82cf3e7005f",["D",1788733363622],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CID = \"v02_selftest_fixture\";\nconst CPID = \"v02_selftest_checkpoint\";\n\nasync function cleanup() {\n await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"DELETE FROM vault_checkpoints WHERE id = ?\", args: [CPID] },\n ]);\n}\n\nasync function writeFixture() {\n const now = new Date().toISOString();\n await sqlite.batch([\n { sql: `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title, message_count=excluded.message_count, content_text=excluded.content_text, imported_at=excluded.imported_at`,\n args: [CID, \"Fixture V0.2\", 1, 2, 2, 64, 64, \"[USER]\\nalpha kernel\\n\\n[ASSISTANT]\\nbeta timeout\", 0, \"selftest\", now] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m1`, CID, 0, \"user\", 1, \"alpha kernel\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m1`, CID, \"Fixture V0.2\", \"user\", \"alpha kernel\"] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m2`, CID, 1, \"assistant\", 2, \"beta timeout\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m2`, CID, \"Fixture V0.2\", \"assistant\", \"beta timeout\"] },\n { sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET summary=excluded.summary, updated_at=excluded.updated_at`,\n args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\", CID, \"SYNTHETIC\", now, now] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)\", args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\"] },\n ]);\n}\n\nlet result: Record = {};\ntry {\n await cleanup();\n await writeFixture();\n await writeFixture(); // idempotency/reindex replay\n\n const counts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages WHERE conversation_id = ?\", args: [CID] });\n const ftsCounts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] });\n const hit = await sqlite.execute({ sql: \"SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? AND conversation_id = ?\", args: ['\"kernel\"*', CID] });\n const negative = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?\", args: ['\"notpresent987\"*'] });\n const cp = await sqlite.execute({ sql: \"SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?\", args: ['\"gamma\"*'] });\n\n result = {\n pass: Number((counts.rows[0] as any)?.c) === 2\n && Number((ftsCounts.rows[0] as any)?.c) === 2\n && (hit.rows[0] as any)?.conversation_id === CID\n && Number((negative.rows[0] as any)?.c) === 0\n && (cp.rows[0] as any)?.checkpoint_id === CPID,\n messagesAfterReplay: Number((counts.rows[0] as any)?.c ?? -1),\n ftsRowsAfterReplay: Number((ftsCounts.rows[0] as any)?.c ?? -1),\n positiveSearch: hit.rows,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n checkpointSearch: cp.rows,\n };\n} finally {\n await cleanup();\n}\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[204],"6bcf2a6e-31aa-4759-b69e-a04baa467068","index.ts","01a078d1-15a5-770f-b95f-a5d3df6b99d7",["D",1788733363622],"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst OWNER = \"cleitoncosta\";\nconst APP_VERSION = \"0.4.0\";\nconst storageState = getStorageState();\nconst sqlite = getActiveDatabase();\nconst VAULT_BUDGET_BYTES = storageState.activeProvider === \"turso\" ? 4_000_000_000 : 8_000_000;\nconst MAX_CONVERSATION_CHARS = 600_000;\nconst MAX_MESSAGE_CHARS = 180_000;\nconst MAX_MESSAGES_PER_CONVERSATION = 5000;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute({\n sql: \"INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version', ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at\",\n args: [APP_VERSION],\n });\n schemaReady = true;\n}\n\nasync function sessionFor(req: Request) {\n return await getOAuthUserData(req);\n}\n\nasync function isOwner(req: Request) {\n const session = await sessionFor(req);\n return session?.user?.username === OWNER ? session : null;\n}\n\nasync function requireOwner(c: any) {\n const session = await isOwner(c.req.raw);\n if (!session) return c.json({ error: \"unauthorized\", login: \"/auth/login\" }, 401);\n return null;\n}\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_-]{1,160}$/.test(value);\n}\n\nfunction safeProject(value: unknown) {\n return typeof value === \"string\" && value.trim().length >= 1 && value.trim().length <= 120;\n}\n\nfunction num(value: unknown) {\n return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction int(value: unknown, fallback = 0) {\n return typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : fallback;\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 8) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction legacySnippet(text: string, needle: string) {\n const normalized = text.toLocaleLowerCase(\"pt-BR\");\n const hit = normalized.indexOf(needle.toLocaleLowerCase(\"pt-BR\"));\n const start = hit >= 0 ? Math.max(0, hit - 180) : 0;\n const chunk = text.slice(start, start + 620).replace(/\\s+/g, \" \").trim();\n return `${start > 0 ? \"…\" : \"\"}${chunk}${start + 620 < text.length ? \"…\" : \"\"}`;\n}\n\nasync function searchCheckpointIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id AS id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\napp.get(\"/\", async (c) => {\n const session = await sessionFor(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.username !== OWNER) return c.text(\"Acesso negado. Este cofre pertence a outro usuário.\", 403);\n return c.html(Root());\n});\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/me\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const session = await sessionFor(c.req.raw);\n return c.json({\n owner: OWNER,\n username: session?.user?.username,\n version: APP_VERSION,\n openaiApiUsed: false,\n storage: storageState.activeProvider === \"turso\" ? \"Turso/libSQL + FTS5\" : \"Val Town project-scoped SQLite + FTS5\",\n activeStorageProvider: storageState.activeProvider,\n externalStorageConfigured: storageState.externalConfigured,\n migrationMode: storageState.migrationMode,\n searchEngine: \"SQLite/libSQL FTS5/BM25\",\n budgetBytes: VAULT_BUDGET_BYTES,\n maxConversationChars: MAX_CONVERSATION_CHARS,\n });\n});\n\napp.get(\"/api/stats\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const [conversations, indexed, checkpoints] = await Promise.all([\n sqlite.execute(`SELECT\n COUNT(*) AS conversations,\n COALESCE(SUM(message_count), 0) AS messages,\n COALESCE(SUM(char_count), 0) AS chars,\n COALESCE(SUM(content_bytes), 0) AS bytes,\n MIN(create_time) AS earliest,\n MAX(update_time) AS latest,\n COALESCE(SUM(CASE WHEN truncated = 1 THEN 1 ELSE 0 END), 0) AS truncated\n FROM conversations`),\n sqlite.execute(\"SELECT COUNT(*) AS indexed_messages FROM vault_messages\"),\n sqlite.execute(\"SELECT COUNT(*) AS checkpoints FROM vault_checkpoints\"),\n ]);\n return c.json({\n ...(conversations.rows[0] ?? {}),\n indexedMessages: Number((indexed.rows[0] as any)?.indexed_messages ?? 0),\n checkpoints: Number((checkpoints.rows[0] as any)?.checkpoints ?? 0),\n budgetBytes: VAULT_BUDGET_BYTES,\n });\n});\n\napp.get(\"/api/search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n if (q.length < 2) return c.json({ query: q, engine: \"none\", results: [] });\n\n const match = ftsQuery(q);\n const indexedCount = await sqlite.execute(\"SELECT COUNT(*) AS count FROM vault_messages\");\n const hasMessageIndex = Number((indexedCount.rows[0] as any)?.count ?? 0) > 0;\n\n if (match && hasMessageIndex) {\n const result = await sqlite.execute({\n sql: `WITH hits AS (\n SELECT\n conversation_id,\n message_id,\n role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_messages_fts, 6.0, 0.0, 2.5, 0.0, 1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 150\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn\n FROM hits\n )\n SELECT\n c.id, c.title, c.create_time, c.update_time, c.message_count, c.char_count,\n c.content_bytes, c.truncated, b.message_id, b.role, b.hit_snippet, b.rank\n FROM best b\n JOIN conversations c ON c.id = b.conversation_id\n WHERE b.rn = 1\n ORDER BY b.rank, c.update_time DESC\n LIMIT 25`,\n args: [match],\n });\n return c.json({\n query: q,\n engine: \"fts5_bm25\",\n match,\n checkpoints: await searchCheckpointIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n messageId: row.message_id,\n role: row.role,\n rank: row.rank,\n snippet: String(row.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n })),\n });\n }\n\n const terms = q.split(/\\s+/).filter(Boolean).slice(0, 6);\n const clauses = terms.map(() => \"(title LIKE ? OR content_text LIKE ?)\");\n const args: string[] = [];\n for (const term of terms) {\n const pattern = `%${term}%`;\n args.push(pattern, pattern);\n }\n const result = await sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes, truncated, content_text\n FROM conversations\n WHERE ${clauses.join(\" AND \")}\n ORDER BY update_time DESC\n LIMIT 25`,\n args,\n });\n return c.json({\n query: q,\n engine: \"legacy_like_fallback\",\n checkpoints: await searchCheckpointIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n snippet: legacySnippet(String(row.content_text ?? \"\"), terms[0] ?? q),\n })),\n });\n});\n\napp.get(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const [conversation, messages] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n FROM conversations WHERE id = ? LIMIT 1`,\n args: [id],\n }),\n sqlite.execute({\n sql: `SELECT id, seq, role, create_time, content_text, char_count, content_bytes\n FROM vault_messages WHERE conversation_id = ? ORDER BY seq ASC`,\n args: [id],\n }),\n ]);\n if (!conversation.rows.length) return c.json({ error: \"not_found\" }, 404);\n return c.json({ ...(conversation.rows[0] as any), indexed_messages: messages.rows });\n});\n\napp.put(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 300) : \"Sem título\";\n const contentText = typeof body.contentText === \"string\" ? body.contentText : \"\";\n if (!contentText.trim()) return c.json({ error: \"empty_conversation\" }, 400);\n if (contentText.length > MAX_CONVERSATION_CHARS) {\n return c.json({ error: \"conversation_too_large\", maxChars: MAX_CONVERSATION_CHARS }, 413);\n }\n\n const rawMessages = Array.isArray(body.messages) ? body.messages.slice(0, MAX_MESSAGES_PER_CONVERSATION) : [];\n const normalizedMessages = rawMessages.flatMap((message: any, index: number) => {\n const text = typeof message?.contentText === \"string\" ? message.contentText.trim() : \"\";\n if (!text) return [];\n const clipped = text.slice(0, MAX_MESSAGE_CHARS);\n let messageId = typeof message?.id === \"string\" ? message.id.trim() : \"\";\n if (!safeId(messageId)) messageId = `${id}_m_${index + 1}`.slice(0, 160);\n return [{\n id: messageId,\n seq: index,\n role: typeof message?.role === \"string\" ? message.role.toLowerCase().slice(0, 40) : \"unknown\",\n createTime: typeof message?.createTime === \"number\" && Number.isFinite(message.createTime) ? message.createTime : null,\n contentText: clipped,\n charCount: clipped.length,\n contentBytes: new TextEncoder().encode(clipped).length,\n }];\n });\n\n const contentBytes = new TextEncoder().encode(contentText).length;\n const current = await sqlite.execute({ sql: \"SELECT content_bytes FROM conversations WHERE id = ? LIMIT 1\", args: [id] });\n const currentBytes = Number((current.rows[0] as any)?.content_bytes ?? 0);\n const totals = await sqlite.execute(\"SELECT COALESCE(SUM(content_bytes), 0) AS bytes FROM conversations\");\n const usedBytes = Number((totals.rows[0] as any)?.bytes ?? 0);\n const projected = usedBytes - currentBytes + contentBytes;\n if (projected > VAULT_BUDGET_BYTES) {\n return c.json({ error: \"vault_budget_exceeded\", usedBytes, projectedBytes: projected, budgetBytes: VAULT_BUDGET_BYTES }, 507);\n }\n\n const importedAt = new Date().toISOString();\n const statements: Array<{ sql: string; args?: Array }> = [\n {\n sql: `INSERT INTO conversations (\n id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n title = excluded.title,\n create_time = excluded.create_time,\n update_time = excluded.update_time,\n message_count = excluded.message_count,\n char_count = excluded.char_count,\n content_bytes = excluded.content_bytes,\n content_text = excluded.content_text,\n truncated = excluded.truncated,\n source_file = excluded.source_file,\n imported_at = excluded.imported_at`,\n args: [\n id,\n title || \"Sem título\",\n num(body.createTime),\n num(body.updateTime),\n normalizedMessages.length || int(body.messageCount),\n contentText.length,\n contentBytes,\n contentText,\n body.truncated ? 1 : 0,\n typeof body.sourceFile === \"string\" ? body.sourceFile.slice(0, 180) : \"conversations.json\",\n importedAt,\n ],\n },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n ];\n\n for (const message of normalizedMessages) {\n statements.push({\n sql: `INSERT INTO vault_messages (\n id, conversation_id, seq, role, create_time, content_text, char_count, content_bytes, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [message.id, id, message.seq, message.role, message.createTime, message.contentText, message.charCount, message.contentBytes, importedAt],\n });\n statements.push({\n sql: \"INSERT INTO vault_messages_fts(message_id, conversation_id, title, role, content) VALUES (?, ?, ?, ?, ?)\",\n args: [message.id, id, title || \"Sem título\", message.role, message.contentText],\n });\n }\n\n await sqlite.batch(statements);\n return c.json({\n ok: true,\n id,\n contentBytes,\n projectedBytes: projected,\n indexedMessages: normalizedMessages.length,\n searchEngine: normalizedMessages.length ? \"fts5_bm25\" : \"legacy_like_fallback\",\n });\n});\n\napp.delete(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const results = await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, rowsAffected: results[2]?.rowsAffected ?? 0 });\n});\n\napp.get(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const limit = Math.min(25, Math.max(1, Number(c.req.query(\"limit\") ?? 8) || 8));\n const project = (c.req.query(\"project\") ?? \"\").trim().slice(0, 120);\n const result = project\n ? await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints WHERE project = ? ORDER BY updated_at DESC LIMIT ?`,\n args: [project, limit],\n })\n : await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints ORDER BY updated_at DESC LIMIT ?`,\n args: [limit],\n });\n return c.json({ project: project || null, checkpoints: result.rows });\n});\n\napp.post(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const project = typeof body.project === \"string\" ? body.project.trim().slice(0, 120) : \"\";\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 240) : \"\";\n const summary = typeof body.summary === \"string\" ? body.summary.trim().slice(0, 12000) : \"\";\n if (!safeProject(project) || !title || !summary) return c.json({ error: \"project_title_summary_required\" }, 400);\n let id = typeof body.id === \"string\" ? body.id.trim() : \"\";\n if (!safeId(id)) id = `cp_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;\n const decisions = typeof body.decisions === \"string\" ? body.decisions.trim().slice(0, 12000) : \"\";\n const openGaps = typeof body.openGaps === \"string\" ? body.openGaps.trim().slice(0, 12000) : \"\";\n const nextAction = typeof body.nextAction === \"string\" ? body.nextAction.trim().slice(0, 12000) : \"\";\n const sourceConversationId = safeId(body.sourceConversationId) ? body.sourceConversationId : null;\n const evidenceState = typeof body.evidenceState === \"string\" ? body.evidenceState.trim().slice(0, 80) : \"CHECKPOINT\";\n const now = new Date().toISOString();\n\n await sqlite.batch([\n {\n sql: `INSERT INTO vault_checkpoints (\n id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n project=excluded.project, title=excluded.title, summary=excluded.summary,\n decisions=excluded.decisions, open_gaps=excluded.open_gaps, next_action=excluded.next_action,\n source_conversation_id=excluded.source_conversation_id, evidence_state=excluded.evidence_state,\n updated_at=excluded.updated_at`,\n args: [id, project, title, summary, decisions, openGaps, nextAction, sourceConversationId, evidenceState, now, now],\n },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [id] },\n {\n sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id, project, title, summary, decisions, open_gaps, next_action)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, project, title, summary, decisions, openGaps, nextAction],\n },\n ]);\n return c.json({ ok: true, id, project, title, evidenceState, updatedAt: now });\n});\n\napp.get(\"/api/checkpoint-search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n const match = ftsQuery(q);\n if (!match) return c.json({ query: q, results: [] });\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 25`,\n args: [match],\n });\n return c.json({ query: q, engine: \"fts5_bm25\", results: result.rows });\n});\n\nexport default oauthMiddleware(app.fetch);\n",[210],"6d79adf4-2f95-487d-a417-c4f3919deec8","README.md","01a078d1-15a5-770f-b95f-a2bde65e1e79",["D",1788733363622],"# V0.4 — ChatGPT Bridge\n\nA V0.4 transforma o GUH Vault em memória consultável pelo próprio ChatGPT através do conector Val Town autenticado, sem API da OpenAI e sem scraping de chatgpt.com.\n\nFluxo: `ChatGPT -> Val Town control plane -> vault_bridge.ts -> Turso -> FTS5/BM25 -> ChatGPT`.\n\nAções fechadas: `search`, `get_conversation`, `stats`, `checkpoint_upsert`.\n\nControles: claim atômico, lease de 2 minutos, máximo 2 tentativas, recuperação de stale RUNNING, checkpoint idempotente, allowlist de ações, Turso fail-closed e resultados externos tratados como dados não confiáveis.\n\nEvidência antes do merge: search PASS; get_conversation PASS; stats PASS; checkpoint_upsert PASS; ação proibida BLOCKED; stale recuperável PASS na segunda tentativa; stale com orçamento esgotado FAIL sem terceira execução; queue final sem PENDING/RUNNING.\n\nSkill pessoal: `skills/guh-vault/SKILL.md`.\n\n---\n\n# V0.3.1 — FAIL-CLOSED STORAGE HOTFIX\n\nApós promover Turso a fonte principal, fallback automático para o SQLite local foi desabilitado. Motivo: após novas escritas no Turso, a cópia local pode ficar stale. Se a configuração externa desaparecer, o app deve bloquear (`TURSO_REQUIRED_NOT_CONFIGURED`) em vez de servir estado antigo silenciosamente.\n\nPolítica pura testada:\n- sem URL + sem token -> BLOCKED_EXTERNAL_REQUIRED\n- somente URL -> BLOCKED_EXTERNAL_REQUIRED\n- somente token -> BLOCKED_EXTERNAL_REQUIRED\n- URL + token -> TURSO_ACTIVE\n- localFallbackEnabled = false\n\nO SQLite local continua preservado para recuperação/migração manual, não como fallback invisível de produção.\n\n---\n\n# V0.3.0 — TURSO / EXTERNAL TEXT STORAGE\n\nCheckpoint: 2026-09-06\n\n## Estado\n\n- `TURSO_DATABASE_URL`: configurada (valor não documentado)\n- `TURSO_AUTH_TOKEN`: configurado (valor não documentado)\n- Turso: CONFIGURED + AUTHENTICATED + REACHABLE\n- provider ativo da branch V0.3: `turso`\n- fallback: Val Town project-scoped SQLite quando Turso não estiver configurado\n- cliente: `@libsql/client/web` (o cliente padrão falhou no runtime Val Town por dependência binária nativa)\n\n## Migração comprovada\n\nOrigem Val Town e destino Turso reconciliados após o checkpoint V0.3:\n\n- conversas: 3 = 3\n- mensagens: 10 = 10\n- checkpoints: 3 = 3\n- FTS mensagens no Turso: 10\n- FTS checkpoints no Turso: 3\n- SHA-256 canônico de conversas: igual\n- SHA-256 canônico de mensagens: igual\n- SHA-256 canônico de checkpoints: igual\n- `Kernel timeout`: PASS\n- `NR-12`: PASS\n- `reconciliação`: PASS\n- `export oficial`: checkpoints encontrados\n- termo inexistente: 0 hits\n\n## Reliability / security controls\n\n- active provider execute: PASS\n- active provider batch transacional: PASS\n- fixture de batch removida: PASS (`probeResidue=0`)\n- credencial Turso propositalmente inválida: rejeitada (`LibsqlError`)\n- `/api/stats` sem sessão: HTTP 401 / sem dados\n- valores de credentials não são impressos por self-tests/status\n\n## Estado epistemológico\n\n`TURSO_AVAILABLE -> CONFIGURED -> AUTHENTICATED -> EXECUTED -> VERIFIED`\n\nA V0.3 ainda não deve ser chamada `IPHONE_OPERATIONAL` até a interface principal ser aberta no iPhone depois do merge e uma reimportação confirmar escrita/search no Turso.\n\n## Próxima prova\n\nApós promoção para `main`:\n1. abrir `guh-knowledge-vault.val.run` no iPhone;\n2. confirmar `V0.3 • Turso • FTS5/BM25`;\n3. confirmar 3 conversas / 10 mensagens / 10 indexadas / 3 checkpoints;\n4. reimportar o JSON sintético;\n5. confirmar que permanece 3/10/10, sem duplicação;\n6. pesquisar `Kernel timeout`, `NR-12`, `export oficial`;\n7. somente então promover interface V0.3 para `OPERATIONAL_SYNTHETIC_E2E_TURSO`.\n\n---\n\n# GUH Knowledge Vault — V0.2.0\n\nCofre pessoal pesquisável para histórico exportado do ChatGPT + checkpoints do trabalho corrente, sem usar a API da OpenAI.\n\n## Runtime\n\n`iPhone/browser -> OAuth Val Town -> Hono -> SQLite/FTS5 -> resultados`\n\nO código é público por restrição do workspace Free, mas as rotas de dados exigem login Val Town e aceitam apenas `username === cleitoncosta`.\n\n## O que a V0.2 adiciona\n\n- mensagens persistidas individualmente em `vault_messages`;\n- índice `vault_messages_fts` com SQLite FTS5;\n- ranking BM25;\n- tokenização Unicode com remoção de diacríticos;\n- busca multi-termo com AND + prefix matching;\n- fallback para a busca V0.1 quando não houver mensagens indexadas;\n- checkpoints persistentes em `vault_checkpoints`;\n- índice FTS dos checkpoints;\n- busca universal capaz de retornar conversas + checkpoints;\n- detalhe da conversa renderizado mensagem por mensagem quando o índice existe;\n- reimportação/reindexação idempotente para uma mesma conversa;\n- `vault_meta.schema_version = 0.2.0`;\n- self-test stateful com limpeza de fixture.\n\n## Duas rotas de memória\n\n### Histórico antigo\n\n`export oficial -> conversations.json -> importador no navegador -> conversa + mensagens -> FTS5`\n\n### Conhecimento novo\n\n`ChatGPT/conector Val Town -> checkpoint estruturado -> vault_checkpoints -> FTS5`\n\nIsso evita depender exclusivamente de novos exports para preservar decisões e estado de projetos daqui para frente.\n\n## Estado persistido no fechamento da V0.2\n\n- 3 conversas sintéticas compatíveis com export;\n- 10 mensagens de origem;\n- 10 mensagens individualmente indexadas;\n- 10 linhas no índice FTS das mensagens;\n- 970 B de conteúdo legado de conversa;\n- 1 checkpoint real sobre a prova da V0.1 no iPhone;\n- 0 fixtures de self-test restantes.\n\n## Evidência\n\n### PASS\n\n- V0.1 real no iPhone: login, importação, persistência, busca e abertura de conversa;\n- FTS5 disponível no SQLite do Val Town;\n- `Kernel timeout` -> conversa correta;\n- `NR-12` -> conversa correta;\n- `reconciliação` -> duas conversas relacionadas;\n- checkpoint encontrado por `export + oficial`;\n- controle negativo inexistente -> 0 hits;\n- reindex replay -> 2 mensagens continuam 2, sem duplicação;\n- replay FTS -> 2 linhas continuam 2;\n- self-test final -> `pass=true`;\n- self-test remove as próprias fixtures;\n- `index.ts` compila no runtime;\n- `frontend/components/App.tsx` compila no runtime;\n- visitante sem sessão continua redirecionado para autenticação.\n\n### Falha útil encontrada\n\nO primeiro self-test assumia incorretamente que uma busca por `kernel` retornaria somente a fixture. Como já havia uma conversa real de teste com esse termo, o self-test marcou FAIL apesar do sistema estar correto.\n\nCorreção: o validador passou a testar a presença da fixture dentro do escopo correto, sem assumir exclusividade global.\n\nLesson learned: **um teste pode falhar por hipótese inválida do próprio validador; negative controls e escopo explícito são obrigatórios.**\n\n### Ainda UNVERIFIED\n\n- parser contra export oficial real desta conta;\n- importação real de 25/50/100 conversas;\n- comportamento com um export muito grande no Safari/iPhone;\n- assets, imagens, PDFs, ZIPs e outros anexos do export;\n- busca semântica por embeddings/conceitos;\n- camada de armazenamento maior para histórico completo;\n- sincronização automática do histórico interno do ChatGPT.\n\n## Limites deliberados\n\nA V0.2 ainda preserva `conversations.content_text` por compatibilidade com a V0.1 e também mantém mensagens individualizadas + índice. Isso duplica parte do conteúdo e não é a arquitetura final para milhares de conversas.\n\nAntes da importação massiva, deve ser criada uma camada de armazenamento maior e o orçamento deve considerar tamanho físico real, não apenas `content_bytes` da tabela legada.\n\n## Próximos marcos\n\n1. Testar um export oficial real.\n2. Medir tamanho/quantidade real de chats e assets.\n3. Escolher storage gratuito maior para o histórico completo.\n4. Migrar o corpo das mensagens para arquitetura sem duplicação desnecessária.\n5. Adicionar projetos, entidades, relações e artefatos.\n6. Evoluir de full-text para busca híbrida/semântica sem depender da API da OpenAI.\n7. Criar interface/tool para outros agentes consultarem o Vault.\n8. Automatizar checkpoints quando o usuário solicitar `salve checkpoint`.\n",[217],"448a268a-242f-484a-aeae-287dbea37479","CHANGELOG.md","01a078d1-15a5-770f-b95f-9cd1570eb611",["D",1788733363622],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v2