[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_169":170,"_171":172},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":25,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","asu_challenge_v1.ts","latestPath","fileId","74680384-ac92-11f1-8003-1607ee4eb77e","name","fileType","script","content","// CANDIDATE_ONLY_NO_AUTHORITY\n// Atomic single-use adjudication challenge V1.\n// Shadow proof substrate only. It deliberately does not touch canonical Brain tables.\nimport { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\n\nexport const PROJECT = \"mosadek/project-brain-live-v1-durable\";\nexport const FINAL_TASK = \"BRAIN-FIRST-SUPERHERO-SAME-IDENTITY-FINAL-ADJUDICATION-P0-V1-20260908\";\nexport const MAX_TTL_MS = 600_000;\nexport const MAX_OBSERVATION_AGE_MS = 3_600_000;\nconst C = \"fs_asu_challenge_v1\";\nconst E = \"fs_asu_event_v1\";\nconst P = \"fs_asu_population_shadow_v1\";\n\nconst token = Deno.env.get(\"VAL_TOWN_API_KEY\") || \"\";\nconst nativeFetch = globalThis.fetch.bind(globalThis);\nfunction compatFetch(input:any, init?:any):Promise {\n if (typeof input === \"string\" || input instanceof URL) return nativeFetch(input, init);\n const method = String(input?.method || init?.method || \"GET\");\n const headers = new Headers();\n const src = input?.headers || init?.headers;\n if (src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if (src) for (const [k,v] of Object.entries(src)) headers.set(k,String(v));\n return (async()=>{\n let body:any = undefined;\n if (method !== \"GET\" && method !== \"HEAD\") {\n if (typeof input?.arrayBuffer === \"function\") body = new Uint8Array(await input.arrayBuffer());\n else body = input?.body ?? init?.body;\n }\n return await nativeFetch(String(input.url), {method,headers,body,redirect:\"manual\"});\n })();\n}\nfunction db(){\n return createClient({url:`${API_URL}/v3/sqlite/scoped/`, authToken:token, fetch:compatFetch as any});\n}\nexport function canon(x:any):string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\") + \"}\";\n}\nexport async function sha256Text(s:string):Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction isHex64(s:any){ return /^[0-9a-f]{64}$/.test(String(s??\"\")); }\nfunction ms(s:any){ return Date.parse(String(s??\"\")); }\nfunction exactKeys(x:any, keys:string[]){\n if(!x || typeof x!==\"object\" || Array.isArray(x)) return false;\n const a=Object.keys(x).sort(), b=[...keys].sort();\n return a.length===b.length && a.every((k,i)=>k===b[i]);\n}\nfunction fail(reason:string, extra:any={}){ return {ok:false,reason,...extra}; }\n\nexport async function initShadow(){\n const d=db();\n await d.batch([\n `CREATE TABLE IF NOT EXISTS ${C}(\n challenge_id TEXT PRIMARY KEY,\n execution_request_id TEXT NOT NULL UNIQUE,\n immutable_json TEXT NOT NULL,\n challenge_sha256 TEXT NOT NULL UNIQUE,\n state TEXT NOT NULL CHECK(state IN ('FRESH','CLAIMED','ACCEPTED','BURNED')),\n claim_event_uuid TEXT UNIQUE,\n claim_receipt_sha256 TEXT UNIQUE,\n claim_request_sha256 TEXT,\n claimed_at TEXT,\n accepted_trace_id TEXT,\n execution_admission_sha256 TEXT UNIQUE,\n execution_receipt_json TEXT,\n terminal_at TEXT,\n burned_reason TEXT,\n population_consumed INTEGER NOT NULL DEFAULT 0 CHECK(population_consumed IN (0,1))\n )`,\n `CREATE TABLE IF NOT EXISTS ${E}(\n event_uuid TEXT PRIMARY KEY,\n challenge_id TEXT NOT NULL,\n type TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n event_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS ${P}(\n challenge_id TEXT PRIMARY KEY,\n execution_admission_sha256 TEXT NOT NULL UNIQUE,\n shadow_increment INTEGER NOT NULL CHECK(shadow_increment=1),\n created_at TEXT NOT NULL\n )`\n ],\"write\");\n return {ok:true};\n}\nexport async function resetShadow(){\n await initShadow();\n const d=db();\n await d.batch([`DELETE FROM ${P}`,`DELETE FROM ${E}`,`DELETE FROM ${C}`],\"write\");\n return {ok:true};\n}\nexport async function getChallenge(challengeId:string){\n const d=db();\n const r:any=await d.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n return r.rows?.[0] ?? null;\n}\nfunction immutableChallengeInput(i:any){\n return {\n schema:\"FIRST_SUPERHERO_ATOMIC_SINGLE_USE_CHALLENGE_V1\",\n project:PROJECT,\n task_id:FINAL_TASK,\n candidate_id:String(i.candidate_id),\n qualifying_run_id:String(i.qualifying_run_id),\n execution_request_id:String(i.execution_request_id),\n finalizer_file_id:String(i.finalizer_file_id),\n finalizer_branch_id:String(i.finalizer_branch_id),\n finalizer_version:Number(i.finalizer_version),\n finalizer_val_type:String(i.finalizer_val_type),\n finalizer_source_sha256:String(i.finalizer_source_sha256),\n input_bundle_sha256:String(i.input_bundle_sha256),\n source_freeze_verified:i.source_freeze_verified===true,\n source_frozen_at:String(i.source_frozen_at),\n source_freeze_receipt_sha256:String(i.source_freeze_receipt_sha256),\n issued_at:String(i.issued_at),\n expires_at:String(i.expires_at),\n final_target_context_sha256:String(i.final_target_context_sha256)\n };\n}\nfunction validateImmutable(x:any, serverNow:string){\n if(!x.candidate_id||!x.qualifying_run_id||x.execution_request_id.length<16)return \"BAD_IDENTITY\";\n if(!x.finalizer_file_id||!x.finalizer_branch_id||!Number.isInteger(x.finalizer_version)||x.finalizer_version<1)return \"BAD_SOURCE_IDENTITY\";\n if(![\"script\",\"interval\",\"http\"].includes(x.finalizer_val_type))return \"BAD_VAL_TYPE\";\n if(!isHex64(x.finalizer_source_sha256)||!isHex64(x.input_bundle_sha256)||!isHex64(x.source_freeze_receipt_sha256)||!isHex64(x.final_target_context_sha256))return \"BAD_HASH\";\n if(x.source_freeze_verified!==true)return \"SOURCE_NOT_FROZEN\";\n const n=ms(serverNow), issued=ms(x.issued_at), expires=ms(x.expires_at), frozen=ms(x.source_frozen_at);\n if(![n,issued,expires,frozen].every(Number.isFinite))return \"BAD_TIME\";\n if(frozen>issued||issued>n||expires<=n||expires<=issued||expires-issued>MAX_TTL_MS)return \"BAD_TTL\";\n return null;\n}\nexport async function issueChallenge(input:any, serverNow:string){\n await initShadow();\n const immutable=immutableChallengeInput(input);\n const bad=validateImmutable(immutable,serverNow); if(bad)return fail(bad);\n const challenge_id=crypto.randomUUID();\n const challenge_sha256=await sha256Text(canon({challenge_id,...immutable}));\n const d=db();\n try{\n await d.execute({sql:`INSERT INTO ${C}(challenge_id,execution_request_id,immutable_json,challenge_sha256,state)\n VALUES(?,?,?,?, 'FRESH')`,args:[challenge_id,immutable.execution_request_id,canon(immutable),challenge_sha256]});\n }catch(e){return fail(\"ISSUE_CONFLICT\",{detail:String((e as any)?.message??e)})}\n return {ok:true,challenge_id,challenge_sha256,immutable};\n}\nfunction claimBinding(c:any){\n return {\n challenge_id:String(c.challenge_id),\n project:String(c.project),\n task_id:String(c.task_id),\n candidate_id:String(c.candidate_id),\n qualifying_run_id:String(c.qualifying_run_id),\n execution_request_id:String(c.execution_request_id),\n finalizer_source_sha256:String(c.finalizer_source_sha256),\n input_bundle_sha256:String(c.input_bundle_sha256),\n challenge_sha256:String(c.challenge_sha256)\n };\n}\nfunction immutableMatches(row:any, req:any){\n const x=JSON.parse(String(row.immutable_json));\n return req.project===x.project && req.task_id===x.task_id && req.candidate_id===x.candidate_id &&\n req.qualifying_run_id===x.qualifying_run_id && req.execution_request_id===x.execution_request_id &&\n req.finalizer_source_sha256===x.finalizer_source_sha256 && req.input_bundle_sha256===x.input_bundle_sha256 &&\n req.challenge_sha256===String(row.challenge_sha256);\n}\nasync function readAfterClientError(challengeId:string){\n try{return await getChallenge(challengeId)}catch{return null}\n}\nexport async function claimChallenge(req:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const required=[\"challenge_id\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"finalizer_source_sha256\",\"input_bundle_sha256\",\"challenge_sha256\"];\n if(!exactKeys(req,required))return fail(\"CLAIM_SCHEMA_NOT_CLOSED\");\n const d:any=db();\n let tx:any=null, committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[req.challenge_id]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(!immutableMatches(row,req)){await tx.rollback();return fail(\"CLAIM_BINDING_MISMATCH\")}\n const imm=JSON.parse(String(row.immutable_json));\n if(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n return {ok:true,fresh:false,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n if(String(row.state)===\"BURNED\"){await tx.rollback();return fail(\"CHALLENGE_BURNED\")}\n if(ms(serverNow)>ms(imm.expires_at)){\n await tx.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason='STALE_BEFORE_CLAIM',terminal_at=? WHERE challenge_id=? AND state='FRESH'`,args:[serverNow,req.challenge_id]});\n await tx.commit(); committed=true; return fail(\"CHALLENGE_EXPIRED_BURNED\");\n }\n const claim_request_sha256=await sha256Text(canon(claimBinding(req)));\n const event_uuid=crypto.randomUUID();\n const receipt=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_CLAIM_RECEIPT_V1\",event_uuid,claim_request_sha256,challenge_sha256:req.challenge_sha256}));\n const u:any=await tx.execute({sql:`UPDATE ${C}\n SET state='CLAIMED',claim_event_uuid=?,claim_receipt_sha256=?,claim_request_sha256=?,claimed_at=?\n WHERE challenge_id=? AND state='FRESH'\n RETURNING challenge_id`,args:[event_uuid,receipt,claim_request_sha256,serverNow,req.challenge_id]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"CLAIM_CAS_LOST\")}\n const ep=canon({challenge_id:req.challenge_id,claim_request_sha256,claim_receipt_sha256:receipt});\n const eh=await sha256Text(canon({event_uuid,type:\"CHALLENGE_CLAIMED\",payload:JSON.parse(ep)}));\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_CLAIMED',?,?,?)`,args:[event_uuid,req.challenge_id,ep,eh,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_CLAIM_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_CLAIM_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"CLAIMED\",claim_event_uuid:event_uuid,claim_receipt_sha256:receipt,claim_request_sha256};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n const row:any=await readAfterClientError(String(req.challenge_id));\n if(committed) throw e;\n if(row&&immutableMatches(row,req)&&(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\")){\n return {ok:true,fresh:false,reconciled_after_error:true,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n return fail(\"CLAIM_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function burnClaimed(challengeId:string, reason:string, serverNow:string){\n await initShadow(); const d=db();\n const r:any=await d.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' RETURNING challenge_id`,args:[reason,serverNow,challengeId]});\n if((r.rows||[]).length===1)return {ok:true,burned:true};\n const row:any=await getChallenge(challengeId);\n return {ok:true,burned:false,state:row?.state??null};\n}\nfunction closedResult(stdout:string){\n let x:any; try{x=JSON.parse(stdout)}catch{return {ok:false,reason:\"MALFORMED_PROVIDER_STDOUT\"}}\n const keys=[\"schema\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"challenge_sha256\",\"claim_receipt_sha256\",\"finalizer_source_sha256\",\"finalizer_version\",\"input_bundle_sha256\",\"consumed_input_bundle_sha256\",\"candidate_only\",\"authority\",\"independent_review_claimed\",\"p_real_increment\",\"human_authority_approval\",\"verdict\"];\n if(!exactKeys(x,keys))return {ok:false,reason:\"RESULT_SCHEMA_NOT_CLOSED\"};\n if(stdout!==canon(x))return {ok:false,reason:\"NONCANONICAL_PROVIDER_STDOUT\"};\n return {ok:true,result:x};\n}\nfunction fenceOk(f:any){\n return !!f && f.execution_allowed===false && f.prevent_self_review===true && f.self_certification_forbidden===true &&\n f.physical_chat_execution_distinctness_required===true && f.reviewer_must_be_physically_distinct===true &&\n f.do_not_infer_distinctness_from_agent_id===true;\n}\nasync function verifyPositiveTrace(row:any, input:any){\n const imm=JSON.parse(String(row.immutable_json)), t=input?.trace, current=input?.current_source, fresh=input?.freshness, fence=input?.final_target_fence;\n if(!t||!current||!fresh||!fence)return fail(\"MISSING_ADJUDICATION_INPUT\");\n if(String(input.claim_receipt_sha256)!==String(row.claim_receipt_sha256))return fail(\"FORGED_OR_WRONG_CLAIM_RECEIPT\");\n if(fresh.superseded===true||fresh.do_not_consume===true||fresh.newer_falsification===true||fresh.identity_mismatch===true)return fail(\"FRESHNESS_FENCE_REJECT\");\n if(!fenceOk(fence))return fail(\"FINAL_SELF_REVIEW_FENCE_NOT_PRESERVED\");\n if(t.evidence_origin!==\"VAL_PROVIDER_API_LIVE_QUERY\"||t.provider_telemetry_direct_query!==true)return fail(\"MISSING_POSITIVE_PROVIDER_TRACE\");\n if(!t.trace_id||t.trace_status_ok!==true||t.stdout_trace_id!==t.trace_id||t.stdout_log_count!==1)return fail(\"TRACE_OR_STDOUT_BINDING_FAIL\");\n if(t.file_id!==imm.finalizer_file_id||t.branch_id!==imm.finalizer_branch_id||Number(t.version)!==imm.finalizer_version||t.val_type!==imm.finalizer_val_type)return fail(\"PROVIDER_SOURCE_IDENTITY_MISMATCH\");\n if(t.source_sha256!==imm.finalizer_source_sha256||current.source_sha256!==imm.finalizer_source_sha256||Number(current.version)!==imm.finalizer_version||current.branch_id!==imm.finalizer_branch_id)return fail(\"SOURCE_CHANGED_OR_WRONG\");\n if(current.source_freeze_receipt_sha256!==imm.source_freeze_receipt_sha256)return fail(\"SOURCE_FREEZE_RECEIPT_MISMATCH\");\n const issued=ms(imm.issued_at),expires=ms(imm.expires_at),ts=ms(t.trace_start),te=ms(t.trace_end),obs=ms(input.observed_at);\n if(![issued,expires,ts,te,obs].every(Number.isFinite)||tsexpires||obsMAX_OBSERVATION_AGE_MS)return fail(\"TRACE_TIME_BINDING_FAIL\");\n const cr:any=closedResult(String(t.stdout)); if(!cr.ok)return cr;\n const r=cr.result;\n if(r.schema!==\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\"||r.project!==PROJECT||r.task_id!==FINAL_TASK)return fail(\"RESULT_IDENTITY_MISMATCH\");\n if(r.candidate_id!==imm.candidate_id||r.qualifying_run_id!==imm.qualifying_run_id||r.execution_request_id!==imm.execution_request_id)return fail(\"CROSS_CONTROLLER_OR_RUN\");\n if(r.challenge_sha256!==String(row.challenge_sha256)||r.claim_receipt_sha256!==String(row.claim_receipt_sha256))return fail(\"CROSS_CHALLENGE_OR_CLAIM\");\n if(r.finalizer_source_sha256!==imm.finalizer_source_sha256||Number(r.finalizer_version)!==imm.finalizer_version)return fail(\"CROSS_SOURCE\");\n if(r.input_bundle_sha256!==imm.input_bundle_sha256||r.consumed_input_bundle_sha256!==imm.input_bundle_sha256)return fail(\"CROSS_OR_UNCONSUMED_INPUT\");\n if(r.candidate_only!==true||r.authority!==false||r.independent_review_claimed!==false||r.p_real_increment!==0||r.human_authority_approval!==false)return fail(\"SELF_PROMOTION_OR_REVIEW_CONFLATION\");\n if(typeof r.verdict!==\"string\"||!r.verdict)return fail(\"BAD_RESULT_VERDICT\");\n const stdout_sha256=await sha256Text(String(t.stdout));\n const stable=await sha256Text(canon({\n schema:\"ATOMIC_CHALLENGE_EXECUTION_ADMISSION_V1\",project:PROJECT,task_id:FINAL_TASK,\n challenge_id:String(row.challenge_id),challenge_sha256:String(row.challenge_sha256),\n claim_event_uuid:String(row.claim_event_uuid),claim_receipt_sha256:String(row.claim_receipt_sha256),\n candidate_id:imm.candidate_id,qualifying_run_id:imm.qualifying_run_id,execution_request_id:imm.execution_request_id,\n source_sha256:imm.finalizer_source_sha256,input_bundle_sha256:imm.input_bundle_sha256,\n trace_id:String(t.trace_id),stdout_sha256,trace_start:String(t.trace_start),trace_end:String(t.trace_end)\n }));\n const obs=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_OBSERVATION_RECEIPT_V1\",execution_admission_sha256:stable,observed_at:String(input.observed_at),provider_query_id:String(t.provider_query_id||\"\"),provider_query_request_sha256:String(t.provider_query_request_sha256||\"\"),provider_query_response_sha256:String(t.provider_query_response_sha256||\"\")}));\n return {ok:true,result:r,execution_admission_sha256:stable,observation_receipt_sha256:obs,stdout_sha256};\n}\nexport async function adjudicateChallenge(input:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const challengeId=String(input?.challenge_id??\"\");\n const first:any=await getChallenge(challengeId); if(!first)return fail(\"CHALLENGE_MISSING\");\n if(String(first.state)===\"ACCEPTED\"){\n const v:any=await verifyPositiveTrace(first,input);\n if(v.ok&&v.execution_admission_sha256===String(first.execution_admission_sha256))return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:first.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ACCEPTED_CHALLENGE_DIFFERENT_EXECUTION\");\n }\n if(String(first.state)===\"BURNED\")return fail(\"CHALLENGE_BURNED\");\n if(String(first.state)!==\"CLAIMED\")return fail(\"CHALLENGE_NOT_CLAIMED\");\n const v:any=await verifyPositiveTrace(first,input);\n if(!v.ok){\n if(v.reason!==\"FORGED_OR_WRONG_CLAIM_RECEIPT\"){\n await burnClaimed(challengeId,\"ADJUDICATION_REJECT_\"+v.reason,serverNow);\n }\n return v;\n }\n const d:any=db(); let tx:any=null,committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n if(String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"SECOND_EXECUTION_REJECTED\");\n }\n if(String(row.state)!==\"CLAIMED\"||String(row.claim_receipt_sha256)!==String(input.claim_receipt_sha256)){await tx.rollback();return fail(\"CLAIM_STATE_CHANGED\")}\n const event_uuid=crypto.randomUUID();\n const payload=canon({challenge_id:challengeId,trace_id:String(input.trace.trace_id),execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256});\n const event_sha256=await sha256Text(canon({event_uuid,type:\"CHALLENGE_ACCEPTED\",payload:JSON.parse(payload)}));\n const receipt=canon({schema:\"ATOMIC_CHALLENGE_ACCEPTED_RECEIPT_V1\",event_uuid,event_sha256,execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,p_real_increment:0,authority:false,independent_review_admission:false});\n const u:any=await tx.execute({sql:`UPDATE ${C} SET state='ACCEPTED',accepted_trace_id=?,execution_admission_sha256=?,execution_receipt_json=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' AND claim_receipt_sha256=? RETURNING challenge_id`,args:[String(input.trace.trace_id),v.execution_admission_sha256,receipt,serverNow,challengeId,String(input.claim_receipt_sha256)]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"ADJUDICATION_CAS_LOST\")}\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_ACCEPTED',?,?,?)`,args:[event_uuid,challengeId,payload,event_sha256,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_OUTCOME_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_OUTCOME_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,provider_trace_id:String(input.trace.trace_id),p_real_increment:0,independent_review_admission:false,authority:false};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n if(committed) throw e;\n const row:any=await readAfterClientError(challengeId);\n if(row?.state===\"ACCEPTED\"&&String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,reconciled_after_error:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ADJUDICATION_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function consumeShadowPopulationAdmission(challengeId:string, serverNow:string){\n await initShadow(); const d:any=db(); let tx:any=null;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT state,execution_admission_sha256,population_consumed FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row||String(row.state)!==\"ACCEPTED\"){await tx.rollback();return fail(\"NOT_ACCEPTED\")}\n if(Number(row.population_consumed)===1){\n await tx.rollback();\n const p:any=await d.execute({sql:`SELECT * FROM ${P} WHERE challenge_id=?`,args:[challengeId]});\n return {ok:true,fresh:false,shadow_increment:0,existing:p.rows?.[0]??null};\n }\n const ins:any=await tx.execute({sql:`INSERT INTO ${P}(challenge_id,execution_admission_sha256,shadow_increment,created_at) VALUES(?,?,1,?) RETURNING challenge_id`,args:[challengeId,String(row.execution_admission_sha256),serverNow]});\n if((ins.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_UNIQUE_INSERT_FAILED\")}\n const up:any=await tx.execute({sql:`UPDATE ${C} SET population_consumed=1 WHERE challenge_id=? AND population_consumed=0 RETURNING challenge_id`,args:[challengeId]});\n if((up.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_CAS_LOST\")}\n await tx.commit();\n return {ok:true,fresh:true,shadow_increment:1,canonical_p_real_increment:0};\n }catch(e){if(tx){try{await tx.rollback()}catch{}}return fail(\"POPULATION_TX_ERROR\",{detail:String((e as any)?.message??e)})}\n}\nexport async function shadowCounts(){\n await initShadow(); const d=db();\n const r:any=await d.execute(`SELECT\n (SELECT COUNT(*) FROM ${C}) challenges,\n (SELECT COUNT(*) FROM ${C} WHERE state='CLAIMED') claimed,\n (SELECT COUNT(*) FROM ${C} WHERE state='ACCEPTED') accepted,\n (SELECT COUNT(*) FROM ${C} WHERE state='BURNED') burned,\n (SELECT COUNT(*) FROM ${P}) population_rows,\n (SELECT COALESCE(SUM(shadow_increment),0) FROM ${P}) shadow_population_sum`);\n return r.rows?.[0]??null;\n}\n","// CANDIDATE_ONLY_NO_AUTHORITY\n// Atomic single-use adjudication challenge V1.\n// Shadow proof substrate only. It deliberately does not touch canonical Brain tables.\nimport { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\n\nexport const PROJECT = \"mosadek/project-brain-live-v1-durable\";\nexport const FINAL_TASK = \"BRAIN-FIRST-SUPERHERO-SAME-IDENTITY-FINAL-ADJUDICATION-P0-V1-20260908\";\nexport const MAX_TTL_MS = 600_000;\nexport const MAX_OBSERVATION_AGE_MS = 3_600_000;\nconst C = \"fs_asu_challenge_v1\";\nconst E = \"fs_asu_event_v1\";\nconst P = \"fs_asu_population_shadow_v1\";\n\nconst token = Deno.env.get(\"VAL_TOWN_API_KEY\") || \"\";\nconst nativeFetch = globalThis.fetch.bind(globalThis);\nfunction compatFetch(input:any, init?:any):Promise {\n if (typeof input === \"string\" || input instanceof URL) return nativeFetch(input, init);\n const method = String(input?.method || init?.method || \"GET\");\n const headers = new Headers();\n const src = input?.headers || init?.headers;\n if (src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if (src) for (const [k,v] of Object.entries(src)) headers.set(k,String(v));\n return (async()=>{\n let body:any = undefined;\n if (method !== \"GET\" && method !== \"HEAD\") {\n if (typeof input?.arrayBuffer === \"function\") body = new Uint8Array(await input.arrayBuffer());\n else body = input?.body ?? init?.body;\n }\n return await nativeFetch(String(input.url), {method,headers,body,redirect:\"manual\"});\n })();\n}\nfunction db(){\n return createClient({url:`${API_URL}/v3/sqlite/scoped/`, authToken:token, fetch:compatFetch as any});\n}\nexport function canon(x:any):string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\") + \"}\";\n}\nexport async function sha256Text(s:string):Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction isHex64(s:any){ return /^[0-9a-f]{64}$/.test(String(s??\"\")); }\nfunction ms(s:any){ return Date.parse(String(s??\"\")); }\nfunction exactKeys(x:any, keys:string[]){\n if(!x || typeof x!==\"object\" || Array.isArray(x)) return false;\n const a=Object.keys(x).sort(), b=[...keys].sort();\n return a.length===b.length && a.every((k,i)=>k===b[i]);\n}\nfunction fail(reason:string, extra:any={}){ return {ok:false,reason,...extra}; }\n\nexport async function initShadow(){\n const d=db();\n await d.batch([\n `CREATE TABLE IF NOT EXISTS ${C}(\n challenge_id TEXT PRIMARY KEY,\n execution_request_id TEXT NOT NULL UNIQUE,\n immutable_json TEXT NOT NULL,\n challenge_sha256 TEXT NOT NULL UNIQUE,\n state TEXT NOT NULL CHECK(state IN ('FRESH','CLAIMED','ACCEPTED','BURNED')),\n claim_event_uuid TEXT UNIQUE,\n claim_receipt_sha256 TEXT UNIQUE,\n claim_request_sha256 TEXT,\n claimed_at TEXT,\n accepted_trace_id TEXT,\n execution_admission_sha256 TEXT UNIQUE,\n execution_receipt_json TEXT,\n terminal_at TEXT,\n burned_reason TEXT,\n population_consumed INTEGER NOT NULL DEFAULT 0 CHECK(population_consumed IN (0,1))\n )`,\n `CREATE TABLE IF NOT EXISTS ${E}(\n event_uuid TEXT PRIMARY KEY,\n challenge_id TEXT NOT NULL,\n type TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n event_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS ${P}(\n challenge_id TEXT PRIMARY KEY,\n execution_admission_sha256 TEXT NOT NULL UNIQUE,\n shadow_increment INTEGER NOT NULL CHECK(shadow_increment=1),\n created_at TEXT NOT NULL\n )`\n ],\"write\");\n return {ok:true};\n}\nexport async function resetShadow(){\n await initShadow();\n const d=db();\n await d.batch([`DELETE FROM ${P}`,`DELETE FROM ${E}`,`DELETE FROM ${C}`],\"write\");\n return {ok:true};\n}\nexport async function getChallenge(challengeId:string){\n const d=db();\n const r:any=await d.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n return r.rows?.[0] ?? null;\n}\nfunction immutableChallengeInput(i:any){\n return {\n schema:\"FIRST_SUPERHERO_ATOMIC_SINGLE_USE_CHALLENGE_V1\",\n project:PROJECT,\n task_id:FINAL_TASK,\n candidate_id:String(i.candidate_id),\n qualifying_run_id:String(i.qualifying_run_id),\n execution_request_id:String(i.execution_request_id),\n finalizer_file_id:String(i.finalizer_file_id),\n finalizer_branch_id:String(i.finalizer_branch_id),\n finalizer_version:Number(i.finalizer_version),\n finalizer_val_type:String(i.finalizer_val_type),\n finalizer_source_sha256:String(i.finalizer_source_sha256),\n input_bundle_sha256:String(i.input_bundle_sha256),\n source_freeze_verified:i.source_freeze_verified===true,\n source_frozen_at:String(i.source_frozen_at),\n source_freeze_receipt_sha256:String(i.source_freeze_receipt_sha256),\n issued_at:String(i.issued_at),\n expires_at:String(i.expires_at),\n final_target_context_sha256:String(i.final_target_context_sha256)\n };\n}\nfunction validateImmutable(x:any, serverNow:string){\n if(!x.candidate_id||!x.qualifying_run_id||x.execution_request_id.length<16)return \"BAD_IDENTITY\";\n if(!x.finalizer_file_id||!x.finalizer_branch_id||!Number.isInteger(x.finalizer_version)||x.finalizer_version<1)return \"BAD_SOURCE_IDENTITY\";\n if(![\"script\",\"interval\",\"http\"].includes(x.finalizer_val_type))return \"BAD_VAL_TYPE\";\n if(!isHex64(x.finalizer_source_sha256)||!isHex64(x.input_bundle_sha256)||!isHex64(x.source_freeze_receipt_sha256)||!isHex64(x.final_target_context_sha256))return \"BAD_HASH\";\n if(x.source_freeze_verified!==true)return \"SOURCE_NOT_FROZEN\";\n const n=ms(serverNow), issued=ms(x.issued_at), expires=ms(x.expires_at), frozen=ms(x.source_frozen_at);\n if(![n,issued,expires,frozen].every(Number.isFinite))return \"BAD_TIME\";\n if(frozen>issued||issued>n||expires<=n||expires<=issued||expires-issued>MAX_TTL_MS)return \"BAD_TTL\";\n return null;\n}\nexport async function issueChallenge(input:any, serverNow:string){\n await initShadow();\n const immutable=immutableChallengeInput(input);\n const bad=validateImmutable(immutable,serverNow); if(bad)return fail(bad);\n const challenge_id=crypto.randomUUID();\n const challenge_sha256=await sha256Text(canon({challenge_id,...immutable}));\n const d=db();\n try{\n await d.execute({sql:`INSERT INTO ${C}(challenge_id,execution_request_id,immutable_json,challenge_sha256,state)\n VALUES(?,?,?,?, 'FRESH')`,args:[challenge_id,immutable.execution_request_id,canon(immutable),challenge_sha256]});\n }catch(e){return fail(\"ISSUE_CONFLICT\",{detail:String((e as any)?.message??e)})}\n return {ok:true,challenge_id,challenge_sha256,immutable};\n}\nfunction claimBinding(c:any){\n return {\n challenge_id:String(c.challenge_id),\n project:String(c.project),\n task_id:String(c.task_id),\n candidate_id:String(c.candidate_id),\n qualifying_run_id:String(c.qualifying_run_id),\n execution_request_id:String(c.execution_request_id),\n finalizer_source_sha256:String(c.finalizer_source_sha256),\n input_bundle_sha256:String(c.input_bundle_sha256),\n challenge_sha256:String(c.challenge_sha256)\n };\n}\nfunction immutableMatches(row:any, req:any){\n const x=JSON.parse(String(row.immutable_json));\n return req.project===x.project && req.task_id===x.task_id && req.candidate_id===x.candidate_id &&\n req.qualifying_run_id===x.qualifying_run_id && req.execution_request_id===x.execution_request_id &&\n req.finalizer_source_sha256===x.finalizer_source_sha256 && req.input_bundle_sha256===x.input_bundle_sha256 &&\n req.challenge_sha256===String(row.challenge_sha256);\n}\nasync function readAfterClientError(challengeId:string){\n try{return await getChallenge(challengeId)}catch{return null}\n}\nexport async function claimChallenge(req:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const required=[\"challenge_id\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"finalizer_source_sha256\",\"input_bundle_sha256\",\"challenge_sha256\"];\n if(!exactKeys(req,required))return fail(\"CLAIM_SCHEMA_NOT_CLOSED\");\n const d:any=db();\n let tx:any=null, committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[req.challenge_id]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(!immutableMatches(row,req)){await tx.rollback();return fail(\"CLAIM_BINDING_MISMATCH\")}\n const imm=JSON.parse(String(row.immutable_json));\n if(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n return {ok:true,fresh:false,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n if(String(row.state)===\"BURNED\"){await tx.rollback();return fail(\"CHALLENGE_BURNED\")}\n if(ms(serverNow)>ms(imm.expires_at)){\n await tx.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason='STALE_BEFORE_CLAIM',terminal_at=? WHERE challenge_id=? AND state='FRESH'`,args:[serverNow,req.challenge_id]});\n await tx.commit(); committed=true; return fail(\"CHALLENGE_EXPIRED_BURNED\");\n }\n const claim_request_sha256=await sha256Text(canon(claimBinding(req)));\n const event_uuid=crypto.randomUUID();\n const receipt=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_CLAIM_RECEIPT_V1\",event_uuid,claim_request_sha256,challenge_sha256:req.challenge_sha256}));\n const u:any=await tx.execute({sql:`UPDATE ${C}\n SET state='CLAIMED',claim_event_uuid=?,claim_receipt_sha256=?,claim_request_sha256=?,claimed_at=?\n WHERE challenge_id=? AND state='FRESH'\n RETURNING challenge_id`,args:[event_uuid,receipt,claim_request_sha256,serverNow,req.challenge_id]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"CLAIM_CAS_LOST\")}\n const ep=canon({challenge_id:req.challenge_id,claim_request_sha256,claim_receipt_sha256:receipt});\n const eh=await sha256Text(canon({event_uuid,type:\"CHALLENGE_CLAIMED\",payload:JSON.parse(ep)}));\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_CLAIMED',?,?,?)`,args:[event_uuid,req.challenge_id,ep,eh,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_CLAIM_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_CLAIM_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"CLAIMED\",claim_event_uuid:event_uuid,claim_receipt_sha256:receipt,claim_request_sha256};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n const row:any=await readAfterClientError(String(req.challenge_id));\n if(committed) throw e;\n if(row&&immutableMatches(row,req)&&(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\")){\n return {ok:true,fresh:false,reconciled_after_error:true,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n return fail(\"CLAIM_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function burnClaimed(challengeId:string, reason:string, serverNow:string){\n await initShadow(); const d=db();\n const r:any=await d.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' RETURNING challenge_id`,args:[reason,serverNow,challengeId]});\n if((r.rows||[]).length===1)return {ok:true,burned:true};\n const row:any=await getChallenge(challengeId);\n return {ok:true,burned:false,state:row?.state??null};\n}\nfunction closedResult(stdout:string){\n let x:any; try{x=JSON.parse(stdout)}catch{return {ok:false,reason:\"MALFORMED_PROVIDER_STDOUT\"}}\n const keys=[\"schema\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"challenge_sha256\",\"claim_receipt_sha256\",\"finalizer_source_sha256\",\"finalizer_version\",\"input_bundle_sha256\",\"consumed_input_bundle_sha256\",\"candidate_only\",\"authority\",\"independent_review_claimed\",\"p_real_increment\",\"human_authority_approval\",\"verdict\"];\n if(!exactKeys(x,keys))return {ok:false,reason:\"RESULT_SCHEMA_NOT_CLOSED\"};\n if(stdout!==canon(x))return {ok:false,reason:\"NONCANONICAL_PROVIDER_STDOUT\"};\n return {ok:true,result:x};\n}\nfunction fenceOk(f:any){\n return !!f && f.execution_allowed===false && f.prevent_self_review===true && f.self_certification_forbidden===true &&\n f.physical_chat_execution_distinctness_required===true && f.reviewer_must_be_physically_distinct===true &&\n f.do_not_infer_distinctness_from_agent_id===true;\n}\nasync function verifyPositiveTrace(row:any, input:any){\n const imm=JSON.parse(String(row.immutable_json)), t=input?.trace, current=input?.current_source, fresh=input?.freshness, fence=input?.final_target_fence;\n if(!t||!current||!fresh||!fence)return fail(\"MISSING_ADJUDICATION_INPUT\");\n if(String(input.claim_receipt_sha256)!==String(row.claim_receipt_sha256))return fail(\"FORGED_OR_WRONG_CLAIM_RECEIPT\");\n if(fresh.superseded===true||fresh.do_not_consume===true||fresh.newer_falsification===true||fresh.identity_mismatch===true)return fail(\"FRESHNESS_FENCE_REJECT\");\n if(!fenceOk(fence))return fail(\"FINAL_SELF_REVIEW_FENCE_NOT_PRESERVED\");\n if(t.evidence_origin!==\"VAL_PROVIDER_API_LIVE_QUERY\"||t.provider_telemetry_direct_query!==true)return fail(\"MISSING_POSITIVE_PROVIDER_TRACE\");\n if(!t.trace_id||t.trace_status_ok!==true||t.stdout_trace_id!==t.trace_id||t.stdout_log_count!==1)return fail(\"TRACE_OR_STDOUT_BINDING_FAIL\");\n if(t.file_id!==imm.finalizer_file_id||t.branch_id!==imm.finalizer_branch_id||Number(t.version)!==imm.finalizer_version||t.val_type!==imm.finalizer_val_type)return fail(\"PROVIDER_SOURCE_IDENTITY_MISMATCH\");\n if(t.source_sha256!==imm.finalizer_source_sha256||current.source_sha256!==imm.finalizer_source_sha256||Number(current.version)!==imm.finalizer_version||current.branch_id!==imm.finalizer_branch_id)return fail(\"SOURCE_CHANGED_OR_WRONG\");\n if(current.source_freeze_receipt_sha256!==imm.source_freeze_receipt_sha256)return fail(\"SOURCE_FREEZE_RECEIPT_MISMATCH\");\n const issued=ms(imm.issued_at),expires=ms(imm.expires_at),ts=ms(t.trace_start),te=ms(t.trace_end),observedMs=ms(input.observed_at);\n if(![issued,expires,ts,te,observedMs].every(Number.isFinite)||tsexpires||observedMsMAX_OBSERVATION_AGE_MS)return fail(\"TRACE_TIME_BINDING_FAIL\");\n const cr:any=closedResult(String(t.stdout)); if(!cr.ok)return cr;\n const r=cr.result;\n if(r.schema!==\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\"||r.project!==PROJECT||r.task_id!==FINAL_TASK)return fail(\"RESULT_IDENTITY_MISMATCH\");\n if(r.candidate_id!==imm.candidate_id||r.qualifying_run_id!==imm.qualifying_run_id||r.execution_request_id!==imm.execution_request_id)return fail(\"CROSS_CONTROLLER_OR_RUN\");\n if(r.challenge_sha256!==String(row.challenge_sha256)||r.claim_receipt_sha256!==String(row.claim_receipt_sha256))return fail(\"CROSS_CHALLENGE_OR_CLAIM\");\n if(r.finalizer_source_sha256!==imm.finalizer_source_sha256||Number(r.finalizer_version)!==imm.finalizer_version)return fail(\"CROSS_SOURCE\");\n if(r.input_bundle_sha256!==imm.input_bundle_sha256||r.consumed_input_bundle_sha256!==imm.input_bundle_sha256)return fail(\"CROSS_OR_UNCONSUMED_INPUT\");\n if(r.candidate_only!==true||r.authority!==false||r.independent_review_claimed!==false||r.p_real_increment!==0||r.human_authority_approval!==false)return fail(\"SELF_PROMOTION_OR_REVIEW_CONFLATION\");\n if(typeof r.verdict!==\"string\"||!r.verdict)return fail(\"BAD_RESULT_VERDICT\");\n const stdout_sha256=await sha256Text(String(t.stdout));\n const stable=await sha256Text(canon({\n schema:\"ATOMIC_CHALLENGE_EXECUTION_ADMISSION_V1\",project:PROJECT,task_id:FINAL_TASK,\n challenge_id:String(row.challenge_id),challenge_sha256:String(row.challenge_sha256),\n claim_event_uuid:String(row.claim_event_uuid),claim_receipt_sha256:String(row.claim_receipt_sha256),\n candidate_id:imm.candidate_id,qualifying_run_id:imm.qualifying_run_id,execution_request_id:imm.execution_request_id,\n source_sha256:imm.finalizer_source_sha256,input_bundle_sha256:imm.input_bundle_sha256,\n trace_id:String(t.trace_id),stdout_sha256,trace_start:String(t.trace_start),trace_end:String(t.trace_end)\n }));\n const obs=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_OBSERVATION_RECEIPT_V1\",execution_admission_sha256:stable,observed_at:String(input.observed_at),provider_query_id:String(t.provider_query_id||\"\"),provider_query_request_sha256:String(t.provider_query_request_sha256||\"\"),provider_query_response_sha256:String(t.provider_query_response_sha256||\"\")}));\n return {ok:true,result:r,execution_admission_sha256:stable,observation_receipt_sha256:obs,stdout_sha256};\n}\nexport async function adjudicateChallenge(input:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const challengeId=String(input?.challenge_id??\"\");\n const first:any=await getChallenge(challengeId); if(!first)return fail(\"CHALLENGE_MISSING\");\n if(String(first.state)===\"ACCEPTED\"){\n const v:any=await verifyPositiveTrace(first,input);\n if(v.ok&&v.execution_admission_sha256===String(first.execution_admission_sha256))return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:first.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ACCEPTED_CHALLENGE_DIFFERENT_EXECUTION\");\n }\n if(String(first.state)===\"BURNED\")return fail(\"CHALLENGE_BURNED\");\n if(String(first.state)!==\"CLAIMED\")return fail(\"CHALLENGE_NOT_CLAIMED\");\n const v:any=await verifyPositiveTrace(first,input);\n if(!v.ok){\n if(v.reason!==\"FORGED_OR_WRONG_CLAIM_RECEIPT\"){\n await burnClaimed(challengeId,\"ADJUDICATION_REJECT_\"+v.reason,serverNow);\n }\n return v;\n }\n const d:any=db(); let tx:any=null,committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n if(String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"SECOND_EXECUTION_REJECTED\");\n }\n if(String(row.state)!==\"CLAIMED\"||String(row.claim_receipt_sha256)!==String(input.claim_receipt_sha256)){await tx.rollback();return fail(\"CLAIM_STATE_CHANGED\")}\n const event_uuid=crypto.randomUUID();\n const payload=canon({challenge_id:challengeId,trace_id:String(input.trace.trace_id),execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256});\n const event_sha256=await sha256Text(canon({event_uuid,type:\"CHALLENGE_ACCEPTED\",payload:JSON.parse(payload)}));\n const receipt=canon({schema:\"ATOMIC_CHALLENGE_ACCEPTED_RECEIPT_V1\",event_uuid,event_sha256,execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,p_real_increment:0,authority:false,independent_review_admission:false});\n const u:any=await tx.execute({sql:`UPDATE ${C} SET state='ACCEPTED',accepted_trace_id=?,execution_admission_sha256=?,execution_receipt_json=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' AND claim_receipt_sha256=? RETURNING challenge_id`,args:[String(input.trace.trace_id),v.execution_admission_sha256,receipt,serverNow,challengeId,String(input.claim_receipt_sha256)]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"ADJUDICATION_CAS_LOST\")}\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_ACCEPTED',?,?,?)`,args:[event_uuid,challengeId,payload,event_sha256,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_OUTCOME_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_OUTCOME_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,provider_trace_id:String(input.trace.trace_id),p_real_increment:0,independent_review_admission:false,authority:false};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n if(committed) throw e;\n const row:any=await readAfterClientError(challengeId);\n if(row?.state===\"ACCEPTED\"&&String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,reconciled_after_error:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ADJUDICATION_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function consumeShadowPopulationAdmission(challengeId:string, serverNow:string){\n await initShadow(); const d:any=db(); let tx:any=null;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT state,execution_admission_sha256,population_consumed FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row||String(row.state)!==\"ACCEPTED\"){await tx.rollback();return fail(\"NOT_ACCEPTED\")}\n if(Number(row.population_consumed)===1){\n await tx.rollback();\n const p:any=await d.execute({sql:`SELECT * FROM ${P} WHERE challenge_id=?`,args:[challengeId]});\n return {ok:true,fresh:false,shadow_increment:0,existing:p.rows?.[0]??null};\n }\n const ins:any=await tx.execute({sql:`INSERT INTO ${P}(challenge_id,execution_admission_sha256,shadow_increment,created_at) VALUES(?,?,1,?) RETURNING challenge_id`,args:[challengeId,String(row.execution_admission_sha256),serverNow]});\n if((ins.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_UNIQUE_INSERT_FAILED\")}\n const up:any=await tx.execute({sql:`UPDATE ${C} SET population_consumed=1 WHERE challenge_id=? AND population_consumed=0 RETURNING challenge_id`,args:[challengeId]});\n if((up.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_CAS_LOST\")}\n await tx.commit();\n return {ok:true,fresh:true,shadow_increment:1,canonical_p_real_increment:0};\n }catch(e){if(tx){try{await tx.rollback()}catch{}}return fail(\"POPULATION_TX_ERROR\",{detail:String((e as any)?.message??e)})}\n}\nexport async function shadowCounts(){\n await initShadow(); const d=db();\n const r:any=await d.execute(`SELECT\n (SELECT COUNT(*) FROM ${C}) challenges,\n (SELECT COUNT(*) FROM ${C} WHERE state='CLAIMED') claimed,\n (SELECT COUNT(*) FROM ${C} WHERE state='ACCEPTED') accepted,\n (SELECT COUNT(*) FROM ${C} WHERE state='BURNED') burned,\n (SELECT COUNT(*) FROM ${P}) population_rows,\n (SELECT COALESCE(SUM(shadow_increment),0) FROM ${P}) shadow_population_sum`);\n return r.rows?.[0]??null;\n}\n","createdAt",["D",1788988065738],"branchVersion","branchId","be198ed3-293b-4188-b8e2-2114e930f807","id","b206a410-2b1f-457a-8c4d-38a628a1b8e3","brain-host-provenance-probe-20260908",["D",1788984050291],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Nonproduction first-superhero shadow evidence","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","b206a4102b1f457a8c4d38a628a1b8e3","tursoHostname","b206a4102b1f457a8c4d38a628a1b8e3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789512647429],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",18,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":164,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":165,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":166,"_82":167,"_84":168,"_86":25},"tree",[155,156],"files",[155,156],"counts",{"_145":61,"_146":135,"_147":61,"_148":149,"_150":151},"contents",[129,130],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":138,"_32":139,"_30":140,"_132":-5,"_41":42,"_40":135,"_133":141,"_38":142,"_13":61,"_33":20,"_35":143,"_24":25,"_136":-5,"_27":144},{"_43":131,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_133":25,"_38":134,"_13":135,"_33":34,"_35":37,"_24":25,"_136":-5,"_27":137},"40447e0a-2727-490f-800c-550d51c3d351","parentId","latest",["D",1788988065738],1,"label",[28],"75febd4b-b70f-4f2c-989c-f6d5ebdd5265","README.md","27d5929c-ac89-11f1-ae1f-1607ee4eb77e",true,["D",1788984050374],"# Nonproduction shadow evidence\nNo authority. No production mutation.\n",[139],"pulls","branches","forks","envVars",{"_152":61,"_154":61},"connections",{"_152":61,"_153":61},"count","unfilledCount","emptyCount",{"_43":138,"_32":139,"_30":140,"_132":-5,"_41":42,"_40":135,"_133":141,"_38":161,"_13":61,"_33":20,"_35":143,"_24":25,"_136":-5,"_158":162,"_27":163},{"_43":131,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_133":25,"_38":157,"_13":135,"_33":34,"_35":37,"_24":25,"_136":-5,"_158":159,"_27":160},["D",1788988065738],"children",[],[28],["D",1788984050374],[],[139],["D",1788984050291],["D",1789512647429],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_126":202,"_203":204,"_205":206,"_207":25,"_208":25,"_209":25,"_210":141,"_211":-5,"_212":-7,"_213":-7,"_214":61,"_215":25,"_216":25,"_217":-5,"_218":25,"_219":25,"_220":25,"_221":-5},"ENV",{"_173":174,"_175":176,"_177":88,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v3