[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_204":205,"_206":207},"routes/_app.x.$handle.$name",{"_97":96,"_32":45,"_106":87,"_27":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":25,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","two_phase_governance_test.ts","latestPath","fileId","80259508-abc3-11f1-bf10-1607ee4eb77e","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst RUN=\"external-two-phase-governance-head-v1\";\nconst CURRENT_HEAD=\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\";\nconst NEXT_HEAD=\"b\".repeat(64);\n\nasync function setup(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_governance(id INTEGER PRIMARY KEY CHECK(id=1),seq INTEGER NOT NULL,head_sha TEXT NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_tasks(id TEXT PRIMARY KEY,state TEXT NOT NULL,lease_owner TEXT,lease_generation INTEGER,context_json TEXT NOT NULL,result_event_id INTEGER)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_stage(execution_key TEXT PRIMARY KEY,task_id TEXT NOT NULL,lease_generation INTEGER NOT NULL,worker_slot_id TEXT NOT NULL,result_sha TEXT NOT NULL,governance_head_sha TEXT NOT NULL,status TEXT NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_claims(id TEXT PRIMARY KEY,status TEXT NOT NULL,execution_key TEXT NOT NULL,task_id TEXT NOT NULL,lease_generation INTEGER NOT NULL,worker_slot_id TEXT NOT NULL,result_sha TEXT NOT NULL,governance_head_sha TEXT NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_events(id INTEGER PRIMARY KEY AUTOINCREMENT,type TEXT NOT NULL,task_id TEXT,payload TEXT NOT NULL)`);\n}\nasync function reset(){\n await sqlite.batch([{sql:\"DELETE FROM xg_events\",args:[]},{sql:\"DELETE FROM xg_claims\",args:[]},{sql:\"DELETE FROM xg_stage\",args:[]},{sql:\"DELETE FROM xg_tasks\",args:[]},{sql:\"DELETE FROM xg_governance\",args:[]}],\"write\");\n await sqlite.execute({sql:\"INSERT INTO xg_governance(id,seq,head_sha) VALUES(1,1,?)\",args:[CURRENT_HEAD]});\n await sqlite.execute({sql:\"INSERT INTO xg_tasks(id,state,lease_owner,lease_generation,context_json,result_event_id) VALUES('ext','LEASED','dispatcher',7,?,NULL)\",args:[JSON.stringify({commit_mode:\"EXTERNAL_WORKER_PROMOTION_ONLY\"})]});\n await sqlite.execute({sql:\"INSERT INTO xg_tasks(id,state,lease_owner,lease_generation,context_json,result_event_id) VALUES('normal','LEASED','dispatcher',7,?,NULL)\",args:[JSON.stringify({})]});\n}\nfunction attemptId(taskId:string,owner:string,g:number){return RUN+\"|\"+taskId+\"|\"+owner+\"|\"+g}\nasync function stageCandidate(r:any){\n const tx:any=await (sqlite as any).transaction(\"write\");\n try{\n const t:any=(await tx.execute({sql:\"SELECT * FROM xg_tasks WHERE id=?\",args:[r.task_id]})).rows?.[0];\n const g:any=(await tx.execute(\"SELECT * FROM xg_governance WHERE id=1\")).rows?.[0];\n if(!t||t.state!==\"LEASED\"||t.lease_owner!==r.dispatcher||Number(t.lease_generation)!==r.lease_generation){await tx.rollback();return{ok:false,reason:\"LEASE_BINDING\"}}\n const ctx=JSON.parse(t.context_json||\"{}\"); if(ctx.commit_mode!==\"EXTERNAL_WORKER_PROMOTION_ONLY\"){await tx.rollback();return{ok:false,reason:\"TASK_MODE\"}}\n if(g.head_sha!==r.governance_head_sha){await tx.rollback();return{ok:false,reason:\"STALE_GOVERNANCE_HEAD\"}}\n const prior:any=(await tx.execute({sql:\"SELECT * FROM xg_stage WHERE execution_key=?\",args:[r.execution_key]})).rows?.[0];\n if(prior){\n const exact=prior.task_id===r.task_id&&Number(prior.lease_generation)===r.lease_generation&&prior.worker_slot_id===r.worker_slot_id&&prior.result_sha===r.result_sha&&prior.governance_head_sha===r.governance_head_sha;\n if(!exact){await tx.rollback();return{ok:false,reason:\"EXECUTION_KEY_CONFLICT\"}}\n await tx.commit();return{ok:true,idempotent:true};\n }\n await tx.execute({sql:\"INSERT INTO xg_stage(execution_key,task_id,lease_generation,worker_slot_id,result_sha,governance_head_sha,status) VALUES(?,?,?,?,?,?,'CANDIDATE')\",args:[r.execution_key,r.task_id,r.lease_generation,r.worker_slot_id,r.result_sha,r.governance_head_sha]});\n await tx.execute({sql:\"INSERT INTO xg_events(type,task_id,payload) VALUES('EXTERNAL_RESULT_STAGED',?,?)\",args:[r.task_id,JSON.stringify({execution_key:r.execution_key})]});\n await tx.commit();return{ok:true,idempotent:false};\n }catch(e){try{await tx.rollback()}catch{};return{ok:false,reason:String((e as Error).message||e)}}\n}\nasync function addVerifiedClaim(r:any){\n await sqlite.execute({sql:\"INSERT INTO xg_claims(id,status,execution_key,task_id,lease_generation,worker_slot_id,result_sha,governance_head_sha) VALUES(?,'VERIFIED',?,?,?,?,?,?,?)\",args:[r.claim_id,r.execution_key,r.task_id,r.lease_generation,r.worker_slot_id,r.result_sha,r.governance_head_sha]});\n}\nasync function genericCommit(taskId:string){\n const tx:any=await (sqlite as any).transaction(\"write\");\n try{\n const t:any=(await tx.execute({sql:\"SELECT * FROM xg_tasks WHERE id=?\",args:[taskId]})).rows?.[0]; if(!t){await tx.rollback();return{ok:false,reason:\"UNKNOWN_TASK\"}}\n const ctx=JSON.parse(t.context_json||\"{}\");if(ctx.commit_mode===\"EXTERNAL_WORKER_PROMOTION_ONLY\"){await tx.rollback();return{ok:false,reason:\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"}}\n const ev:any=await tx.execute({sql:\"INSERT INTO xg_events(type,task_id,payload) VALUES('TASK_RESULT_COMMITTED',?,'{}') RETURNING id\",args:[taskId]});\n await tx.execute({sql:\"UPDATE xg_tasks SET state='COMPLETE',result_event_id=?,lease_owner=NULL,lease_generation=NULL WHERE id=? AND state='LEASED'\",args:[Number(ev.rows[0].id),taskId]});\n await tx.commit();return{ok:true};\n }catch(e){try{await tx.rollback()}catch{};return{ok:false,reason:String((e as Error).message||e)}}\n}\nasync function promote(r:any){\n const tx:any=await (sqlite as any).transaction(\"write\");\n try{\n const t:any=(await tx.execute({sql:\"SELECT * FROM xg_tasks WHERE id=?\",args:[r.task_id]})).rows?.[0];\n const g:any=(await tx.execute(\"SELECT * FROM xg_governance WHERE id=1\")).rows?.[0];\n const s:any=(await tx.execute({sql:\"SELECT * FROM xg_stage WHERE execution_key=?\",args:[r.execution_key]})).rows?.[0];\n const c:any=(await tx.execute({sql:\"SELECT * FROM xg_claims WHERE id=?\",args:[r.claim_id]})).rows?.[0];\n if(!t||t.state!==\"LEASED\"||t.lease_owner!==r.dispatcher||Number(t.lease_generation)!==r.lease_generation){await tx.rollback();return{ok:false,reason:\"LEASE_BINDING\"}}\n const ctx=JSON.parse(t.context_json||\"{}\");if(ctx.commit_mode!==\"EXTERNAL_WORKER_PROMOTION_ONLY\"){await tx.rollback();return{ok:false,reason:\"TASK_MODE\"}}\n if(g.head_sha!==r.governance_head_sha){await tx.rollback();return{ok:false,reason:\"STALE_GOVERNANCE_HEAD\"}}\n const exactStage=!!s&&s.status===\"CANDIDATE\"&&s.task_id===r.task_id&&Number(s.lease_generation)===r.lease_generation&&s.worker_slot_id===r.worker_slot_id&&s.result_sha===r.result_sha&&s.governance_head_sha===r.governance_head_sha;\n if(!exactStage){await tx.rollback();return{ok:false,reason:\"STAGED_RESULT_NOT_EXACT\"}}\n const exactClaim=!!c&&c.status===\"VERIFIED\"&&c.execution_key===r.execution_key&&c.task_id===r.task_id&&Number(c.lease_generation)===r.lease_generation&&c.worker_slot_id===r.worker_slot_id&&c.result_sha===r.result_sha&&c.governance_head_sha===r.governance_head_sha;\n if(!exactClaim){await tx.rollback();return{ok:false,reason:\"ADMISSION_NOT_VERIFIED_OR_NOT_BOUND\"}}\n const ev:any=await tx.execute({sql:\"INSERT INTO xg_events(type,task_id,payload) VALUES('EXTERNAL_RESULT_PROMOTED',?,?) RETURNING id\",args:[r.task_id,JSON.stringify({execution_key:r.execution_key,claim_id:r.claim_id})]});\n const u:any=await tx.execute({sql:\"UPDATE xg_tasks SET state='COMPLETE',result_event_id=?,lease_owner=NULL,lease_generation=NULL WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_generation=? RETURNING id\",args:[Number(ev.rows[0].id),r.task_id,r.dispatcher,r.lease_generation]});\n if(!u.rows?.length)throw new Error(\"TASK_CAS_LOST\");\n await tx.execute({sql:\"UPDATE xg_stage SET status='PROMOTED' WHERE execution_key=? AND status='CANDIDATE'\",args:[r.execution_key]});\n await tx.commit();return{ok:true,event_id:Number(ev.rows[0].id)};\n }catch(e){try{await tx.rollback()}catch{};return{ok:false,reason:String((e as Error).message||e)}}\n}\nasync function advanceGovernance(expectedSeq:number,newHead:string){\n const x:any=await sqlite.execute({sql:\"UPDATE xg_governance SET seq=seq+1,head_sha=? WHERE id=1 AND seq=? RETURNING seq,head_sha\",args:[newHead,expectedSeq]});\n return x.rows?.[0]??null;\n}\nasync function snapshot(taskId=\"ext\"){\n const [t,g,s,e]=await Promise.all([sqlite.execute({sql:\"SELECT state,lease_owner,lease_generation,result_event_id FROM xg_tasks WHERE id=?\",args:[taskId]}),sqlite.execute(\"SELECT * FROM xg_governance\"),sqlite.execute(\"SELECT execution_key,status FROM xg_stage\"),sqlite.execute(\"SELECT count(*) n FROM xg_events\")]);\n return{task:t.rows[0],gov:g.rows[0],stage:s.rows,events:Number(e.rows[0].n)};\n}\n\nawait setup();\nconst base={execution_key:\"E1\",task_id:\"ext\",dispatcher:\"dispatcher\",lease_generation:7,worker_slot_id:\"slot-A\",result_sha:\"r\".repeat(64),governance_head_sha:CURRENT_HEAD,claim_id:\"claim-E1\"};\n\nconst tests:any[]=[];\nawait reset();const st1=await stageCandidate(base);const ss1=await snapshot();tests.push({name:\"candidate_stage_zero_causal_effect\",pass:st1.ok&&ss1.task.state===\"LEASED\"&&ss1.task.result_event_id===null&&ss1.stage[0]?.status===\"CANDIDATE\",detail:{st1,ss1}});\nconst gc=await genericCommit(\"ext\");const ssg=await snapshot();tests.push({name:\"ordinary_commit_structurally_blocked\",pass:!gc.ok&&gc.reason===\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"&&ssg.task.state===\"LEASED\",detail:{gc,ssg}});\nawait addVerifiedClaim(base);const pr=await promote(base);const ssp=await snapshot();tests.push({name:\"exact_verified_promotion_completes\",pass:pr.ok&&ssp.task.state===\"COMPLETE\"&&ssp.stage[0]?.status===\"PROMOTED\",detail:{pr,ssp}});\n\nawait reset();await stageCandidate(base);await addVerifiedClaim(base);await advanceGovernance(1,NEXT_HEAD);const stale=await promote(base);const sst=await snapshot();tests.push({name:\"governance_change_invalidates_staged_promotion\",pass:!stale.ok&&stale.reason===\"STALE_GOVERNANCE_HEAD\"&&sst.task.state===\"LEASED\"&&sst.stage[0]?.status===\"CANDIDATE\",detail:{stale,sst}});\n\nawait reset();await stageCandidate(base);await addVerifiedClaim({...base,claim_id:\"bad\",result_sha:\"x\".repeat(64)});const wrong=await promote({...base,claim_id:\"bad\"});const ssw=await snapshot();tests.push({name:\"verified_claim_must_exactly_bind_stage\",pass:!wrong.ok&&wrong.reason===\"ADMISSION_NOT_VERIFIED_OR_NOT_BOUND\"&&ssw.task.state===\"LEASED\",detail:{wrong,ssw}});\n\nawait reset();const a=await stageCandidate(base);const b=await stageCandidate(base);const ssi=await snapshot();tests.push({name:\"candidate_stage_idempotent\",pass:a.ok&&!a.idempotent&&b.ok&&b.idempotent&&ssi.stage.length===1&&ssi.task.state===\"LEASED\",detail:{a,b,ssi}});\n\nawait reset();const normal=await genericCommit(\"normal\");const ssn=await snapshot(\"normal\");tests.push({name:\"normal_task_commit_unchanged\",pass:normal.ok&&ssn.task.state===\"COMPLETE\",detail:{normal,ssn}});\n\nawait reset();await stageCandidate(base);await addVerifiedClaim(base);const conc=await Promise.all([promote(base),promote(base)]);const ssc=await snapshot();tests.push({name:\"concurrent_promotion_exactly_one_causal_completion\",pass:conc.filter(x=>x.ok).length===1&&ssc.task.state===\"COMPLETE\"&&ssc.events===2,detail:{conc,ssc}});\n\nconst failed=tests.filter(x=>!x.pass);\nconst report={schema:\"EXTERNAL_WORKER_TWO_PHASE_GOVERNANCE_HEAD_PROVIDER_TEST_V1\",classification:\"CANDIDATE_NONAUTHORITY_ISOLATED_PROVIDER_EXECUTION_EVIDENCE\",run:RUN,total:tests.length,passed:tests.length-failed.length,failed:failed.length,verdict:failed.length?\"FAIL\":\"PASS\",tests,design:{governance_head_authoritative_in_sqlite:true,candidate_staging_noncausal:true,ordinary_commit_exclusion:true,promotion_requires_canonical_verified_claim:true,governance_change_fences_promotion:true,normal_tasks_compatible:true},canonical_brain_mutation:false,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0,additional_out_of_pocket_spend_usd:0};\nconsole.log(JSON.stringify(report,null,2));","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst RUN=\"external-two-phase-governance-head-v1\";\nconst CURRENT_HEAD=\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\";\nconst NEXT_HEAD=\"b\".repeat(64);\n\nasync function setup(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_governance(id INTEGER PRIMARY KEY CHECK(id=1),seq INTEGER NOT NULL,head_sha TEXT NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_tasks(id TEXT PRIMARY KEY,state TEXT NOT NULL,lease_owner TEXT,lease_generation INTEGER,context_json TEXT NOT NULL,result_event_id INTEGER)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_stage(execution_key TEXT PRIMARY KEY,task_id TEXT NOT NULL,lease_generation INTEGER NOT NULL,worker_slot_id TEXT NOT NULL,result_sha TEXT NOT NULL,governance_head_sha TEXT NOT NULL,status TEXT NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_claims(id TEXT PRIMARY KEY,status TEXT NOT NULL,execution_key TEXT NOT NULL,task_id TEXT NOT NULL,lease_generation INTEGER NOT NULL,worker_slot_id TEXT NOT NULL,result_sha TEXT NOT NULL,governance_head_sha TEXT NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS xg_events(id INTEGER PRIMARY KEY AUTOINCREMENT,type TEXT NOT NULL,task_id TEXT,payload TEXT NOT NULL)`);\n}\nasync function reset(){\n await sqlite.batch([{sql:\"DELETE FROM xg_events\",args:[]},{sql:\"DELETE FROM xg_claims\",args:[]},{sql:\"DELETE FROM xg_stage\",args:[]},{sql:\"DELETE FROM xg_tasks\",args:[]},{sql:\"DELETE FROM xg_governance\",args:[]}],\"write\");\n await sqlite.execute({sql:\"INSERT INTO xg_governance(id,seq,head_sha) VALUES(1,1,?)\",args:[CURRENT_HEAD]});\n await sqlite.execute({sql:\"INSERT INTO xg_tasks(id,state,lease_owner,lease_generation,context_json,result_event_id) VALUES('ext','LEASED','dispatcher',7,?,NULL)\",args:[JSON.stringify({commit_mode:\"EXTERNAL_WORKER_PROMOTION_ONLY\"})]});\n await sqlite.execute({sql:\"INSERT INTO xg_tasks(id,state,lease_owner,lease_generation,context_json,result_event_id) VALUES('normal','LEASED','dispatcher',7,?,NULL)\",args:[JSON.stringify({})]});\n}\nfunction attemptId(taskId:string,owner:string,g:number){return RUN+\"|\"+taskId+\"|\"+owner+\"|\"+g}\nasync function stageCandidate(r:any){\n const tx:any=await (sqlite as any).transaction(\"write\");\n try{\n const t:any=(await tx.execute({sql:\"SELECT * FROM xg_tasks WHERE id=?\",args:[r.task_id]})).rows?.[0];\n const g:any=(await tx.execute(\"SELECT * FROM xg_governance WHERE id=1\")).rows?.[0];\n if(!t||t.state!==\"LEASED\"||t.lease_owner!==r.dispatcher||Number(t.lease_generation)!==r.lease_generation){await tx.rollback();return{ok:false,reason:\"LEASE_BINDING\"}}\n const ctx=JSON.parse(t.context_json||\"{}\"); if(ctx.commit_mode!==\"EXTERNAL_WORKER_PROMOTION_ONLY\"){await tx.rollback();return{ok:false,reason:\"TASK_MODE\"}}\n if(g.head_sha!==r.governance_head_sha){await tx.rollback();return{ok:false,reason:\"STALE_GOVERNANCE_HEAD\"}}\n const prior:any=(await tx.execute({sql:\"SELECT * FROM xg_stage WHERE execution_key=?\",args:[r.execution_key]})).rows?.[0];\n if(prior){\n const exact=prior.task_id===r.task_id&&Number(prior.lease_generation)===r.lease_generation&&prior.worker_slot_id===r.worker_slot_id&&prior.result_sha===r.result_sha&&prior.governance_head_sha===r.governance_head_sha;\n if(!exact){await tx.rollback();return{ok:false,reason:\"EXECUTION_KEY_CONFLICT\"}}\n await tx.commit();return{ok:true,idempotent:true};\n }\n await tx.execute({sql:\"INSERT INTO xg_stage(execution_key,task_id,lease_generation,worker_slot_id,result_sha,governance_head_sha,status) VALUES(?,?,?,?,?,?,'CANDIDATE')\",args:[r.execution_key,r.task_id,r.lease_generation,r.worker_slot_id,r.result_sha,r.governance_head_sha]});\n await tx.execute({sql:\"INSERT INTO xg_events(type,task_id,payload) VALUES('EXTERNAL_RESULT_STAGED',?,?)\",args:[r.task_id,JSON.stringify({execution_key:r.execution_key})]});\n await tx.commit();return{ok:true,idempotent:false};\n }catch(e){try{await tx.rollback()}catch{};return{ok:false,reason:String((e as Error).message||e)}}\n}\nasync function addVerifiedClaim(r:any){\n await sqlite.execute({sql:\"INSERT INTO xg_claims(id,status,execution_key,task_id,lease_generation,worker_slot_id,result_sha,governance_head_sha) VALUES(?,'VERIFIED',?,?,?,?,?,?)\",args:[r.claim_id,r.execution_key,r.task_id,r.lease_generation,r.worker_slot_id,r.result_sha,r.governance_head_sha]});\n}\nasync function genericCommit(taskId:string){\n const tx:any=await (sqlite as any).transaction(\"write\");\n try{\n const t:any=(await tx.execute({sql:\"SELECT * FROM xg_tasks WHERE id=?\",args:[taskId]})).rows?.[0]; if(!t){await tx.rollback();return{ok:false,reason:\"UNKNOWN_TASK\"}}\n const ctx=JSON.parse(t.context_json||\"{}\");if(ctx.commit_mode===\"EXTERNAL_WORKER_PROMOTION_ONLY\"){await tx.rollback();return{ok:false,reason:\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"}}\n const ev:any=await tx.execute({sql:\"INSERT INTO xg_events(type,task_id,payload) VALUES('TASK_RESULT_COMMITTED',?,'{}') RETURNING id\",args:[taskId]});\n await tx.execute({sql:\"UPDATE xg_tasks SET state='COMPLETE',result_event_id=?,lease_owner=NULL,lease_generation=NULL WHERE id=? AND state='LEASED'\",args:[Number(ev.rows[0].id),taskId]});\n await tx.commit();return{ok:true};\n }catch(e){try{await tx.rollback()}catch{};return{ok:false,reason:String((e as Error).message||e)}}\n}\nasync function promote(r:any){\n const tx:any=await (sqlite as any).transaction(\"write\");\n try{\n const t:any=(await tx.execute({sql:\"SELECT * FROM xg_tasks WHERE id=?\",args:[r.task_id]})).rows?.[0];\n const g:any=(await tx.execute(\"SELECT * FROM xg_governance WHERE id=1\")).rows?.[0];\n const s:any=(await tx.execute({sql:\"SELECT * FROM xg_stage WHERE execution_key=?\",args:[r.execution_key]})).rows?.[0];\n const c:any=(await tx.execute({sql:\"SELECT * FROM xg_claims WHERE id=?\",args:[r.claim_id]})).rows?.[0];\n if(!t||t.state!==\"LEASED\"||t.lease_owner!==r.dispatcher||Number(t.lease_generation)!==r.lease_generation){await tx.rollback();return{ok:false,reason:\"LEASE_BINDING\"}}\n const ctx=JSON.parse(t.context_json||\"{}\");if(ctx.commit_mode!==\"EXTERNAL_WORKER_PROMOTION_ONLY\"){await tx.rollback();return{ok:false,reason:\"TASK_MODE\"}}\n if(g.head_sha!==r.governance_head_sha){await tx.rollback();return{ok:false,reason:\"STALE_GOVERNANCE_HEAD\"}}\n const exactStage=!!s&&s.status===\"CANDIDATE\"&&s.task_id===r.task_id&&Number(s.lease_generation)===r.lease_generation&&s.worker_slot_id===r.worker_slot_id&&s.result_sha===r.result_sha&&s.governance_head_sha===r.governance_head_sha;\n if(!exactStage){await tx.rollback();return{ok:false,reason:\"STAGED_RESULT_NOT_EXACT\"}}\n const exactClaim=!!c&&c.status===\"VERIFIED\"&&c.execution_key===r.execution_key&&c.task_id===r.task_id&&Number(c.lease_generation)===r.lease_generation&&c.worker_slot_id===r.worker_slot_id&&c.result_sha===r.result_sha&&c.governance_head_sha===r.governance_head_sha;\n if(!exactClaim){await tx.rollback();return{ok:false,reason:\"ADMISSION_NOT_VERIFIED_OR_NOT_BOUND\"}}\n const ev:any=await tx.execute({sql:\"INSERT INTO xg_events(type,task_id,payload) VALUES('EXTERNAL_RESULT_PROMOTED',?,?) RETURNING id\",args:[r.task_id,JSON.stringify({execution_key:r.execution_key,claim_id:r.claim_id})]});\n const u:any=await tx.execute({sql:\"UPDATE xg_tasks SET state='COMPLETE',result_event_id=?,lease_owner=NULL,lease_generation=NULL WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_generation=? RETURNING id\",args:[Number(ev.rows[0].id),r.task_id,r.dispatcher,r.lease_generation]});\n if(!u.rows?.length)throw new Error(\"TASK_CAS_LOST\");\n await tx.execute({sql:\"UPDATE xg_stage SET status='PROMOTED' WHERE execution_key=? AND status='CANDIDATE'\",args:[r.execution_key]});\n await tx.commit();return{ok:true,event_id:Number(ev.rows[0].id)};\n }catch(e){try{await tx.rollback()}catch{};return{ok:false,reason:String((e as Error).message||e)}}\n}\nasync function advanceGovernance(expectedSeq:number,newHead:string){\n const x:any=await sqlite.execute({sql:\"UPDATE xg_governance SET seq=seq+1,head_sha=? WHERE id=1 AND seq=? RETURNING seq,head_sha\",args:[newHead,expectedSeq]});\n return x.rows?.[0]??null;\n}\nasync function snapshot(taskId=\"ext\"){\n const [t,g,s,e]=await Promise.all([sqlite.execute({sql:\"SELECT state,lease_owner,lease_generation,result_event_id FROM xg_tasks WHERE id=?\",args:[taskId]}),sqlite.execute(\"SELECT * FROM xg_governance\"),sqlite.execute(\"SELECT execution_key,status FROM xg_stage\"),sqlite.execute(\"SELECT count(*) n FROM xg_events\")]);\n return{task:t.rows[0],gov:g.rows[0],stage:s.rows,events:Number(e.rows[0].n)};\n}\n\nawait setup();\nconst base={execution_key:\"E1\",task_id:\"ext\",dispatcher:\"dispatcher\",lease_generation:7,worker_slot_id:\"slot-A\",result_sha:\"r\".repeat(64),governance_head_sha:CURRENT_HEAD,claim_id:\"claim-E1\"};\n\nconst tests:any[]=[];\nawait reset();const st1=await stageCandidate(base);const ss1=await snapshot();tests.push({name:\"candidate_stage_zero_causal_effect\",pass:st1.ok&&ss1.task.state===\"LEASED\"&&ss1.task.result_event_id===null&&ss1.stage[0]?.status===\"CANDIDATE\",detail:{st1,ss1}});\nconst gc=await genericCommit(\"ext\");const ssg=await snapshot();tests.push({name:\"ordinary_commit_structurally_blocked\",pass:!gc.ok&&gc.reason===\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"&&ssg.task.state===\"LEASED\",detail:{gc,ssg}});\nawait addVerifiedClaim(base);const pr=await promote(base);const ssp=await snapshot();tests.push({name:\"exact_verified_promotion_completes\",pass:pr.ok&&ssp.task.state===\"COMPLETE\"&&ssp.stage[0]?.status===\"PROMOTED\",detail:{pr,ssp}});\n\nawait reset();await stageCandidate(base);await addVerifiedClaim(base);await advanceGovernance(1,NEXT_HEAD);const stale=await promote(base);const sst=await snapshot();tests.push({name:\"governance_change_invalidates_staged_promotion\",pass:!stale.ok&&stale.reason===\"STALE_GOVERNANCE_HEAD\"&&sst.task.state===\"LEASED\"&&sst.stage[0]?.status===\"CANDIDATE\",detail:{stale,sst}});\n\nawait reset();await stageCandidate(base);await addVerifiedClaim({...base,claim_id:\"bad\",result_sha:\"x\".repeat(64)});const wrong=await promote({...base,claim_id:\"bad\"});const ssw=await snapshot();tests.push({name:\"verified_claim_must_exactly_bind_stage\",pass:!wrong.ok&&wrong.reason===\"ADMISSION_NOT_VERIFIED_OR_NOT_BOUND\"&&ssw.task.state===\"LEASED\",detail:{wrong,ssw}});\n\nawait reset();const a=await stageCandidate(base);const b=await stageCandidate(base);const ssi=await snapshot();tests.push({name:\"candidate_stage_idempotent\",pass:a.ok&&!a.idempotent&&b.ok&&b.idempotent&&ssi.stage.length===1&&ssi.task.state===\"LEASED\",detail:{a,b,ssi}});\n\nawait reset();const normal=await genericCommit(\"normal\");const ssn=await snapshot(\"normal\");tests.push({name:\"normal_task_commit_unchanged\",pass:normal.ok&&ssn.task.state===\"COMPLETE\",detail:{normal,ssn}});\n\nawait reset();await stageCandidate(base);await addVerifiedClaim(base);const conc=await Promise.all([promote(base),promote(base)]);const ssc=await snapshot();tests.push({name:\"concurrent_promotion_exactly_one_causal_completion\",pass:conc.filter(x=>x.ok).length===1&&ssc.task.state===\"COMPLETE\"&&ssc.events===2,detail:{conc,ssc}});\n\nconst failed=tests.filter(x=>!x.pass);\nconst report={schema:\"EXTERNAL_WORKER_TWO_PHASE_GOVERNANCE_HEAD_PROVIDER_TEST_V1\",classification:\"CANDIDATE_NONAUTHORITY_ISOLATED_PROVIDER_EXECUTION_EVIDENCE\",run:RUN,total:tests.length,passed:tests.length-failed.length,failed:failed.length,verdict:failed.length?\"FAIL\":\"PASS\",tests,design:{governance_head_authoritative_in_sqlite:true,candidate_staging_noncausal:true,ordinary_commit_exclusion:true,promotion_requires_canonical_verified_claim:true,governance_change_fences_promotion:true,normal_tasks_compatible:true},canonical_brain_mutation:false,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0,additional_out_of_pocket_spend_usd:0};\nconsole.log(JSON.stringify(report,null,2));","createdAt",["D",1788899181039],"branchVersion","branchId","86276a08-919e-4dca-b44e-b97c484a046b","id","01d2f020-5912-443c-adab-aa9fe5241e9f","brain-preboot-candidate-stage-v2",["D",1788898505244],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Isolated external-worker candidate staging test","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","01d2f0205912443cadabaa9fe5241e9f","tursoHostname","01d2f0205912443cadabaa9fe5241e9f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":55,"_102":103,"_104":25},"branch",{"_13":14,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":199,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":200,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":201,"_82":202,"_84":203,"_86":25},"tree",[178,179,180,181,182],"files",[178,179,180,181,182],"counts",{"_168":61,"_169":138,"_170":61,"_171":172,"_173":174},"contents",[128,129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":161,"_32":162,"_30":163,"_134":-5,"_41":42,"_40":164,"_135":136,"_38":165,"_13":138,"_33":34,"_35":166,"_24":25,"_139":-5,"_27":167},{"_43":154,"_32":155,"_30":156,"_134":-5,"_41":42,"_40":157,"_135":136,"_38":158,"_13":138,"_33":34,"_35":159,"_24":25,"_139":-5,"_27":160},{"_43":147,"_32":148,"_30":149,"_134":-5,"_41":42,"_40":150,"_135":136,"_38":151,"_13":61,"_33":34,"_35":152,"_24":25,"_139":-5,"_27":153},{"_43":141,"_32":142,"_30":143,"_134":-5,"_41":42,"_40":138,"_135":136,"_38":144,"_13":61,"_33":34,"_35":145,"_24":25,"_139":-5,"_27":146},{"_43":133,"_32":28,"_30":31,"_134":-5,"_41":42,"_40":14,"_135":136,"_38":137,"_13":138,"_33":34,"_35":37,"_24":25,"_139":-5,"_27":140},"5ca413b4-a84c-45b0-a8cd-c1fdcd18619a","parentId","latest",true,["D",1788899181039],1,"label",[28],"c6804c16-f09b-4ec0-9433-905db00dcd84","test.ts","fb1597a6-abc1-11f1-b697-1607ee4eb77e",["D",1788898505407],"\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst H=async(s:string)=>[...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconst canon=(x:any):string=>x===null||typeof x!==\"object\"?JSON.stringify(x):Array.isArray(x)?\"[\"+x.map(canon).join(\",\")+\"]\":\"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\nconst one=async(sql:string,args:any[]=[])=>((await sqlite.execute({sql,args})).rows||[])[0]??null;\nasync function tx(fn:()=>Promise){const t:any=await (sqlite as any).transaction(\"write\");try{const o=await fn.call({db:t});await t.commit();return o}catch(e){try{await t.rollback()}catch{}throw e}}\nconst p=\"stagev2_\";\nasync function reset(){\n for(const t of [\"tasks\",\"claims\",\"events\"])await sqlite.execute(`DROP TABLE IF EXISTS ${p}${t}`);\n await sqlite.execute(`CREATE TABLE ${p}tasks(id TEXT PRIMARY KEY,state TEXT NOT NULL,lease_attempt_id TEXT,lease_owner TEXT,lease_expires_ms INTEGER,result_event_id INTEGER)`);\n await sqlite.execute(`CREATE TABLE ${p}claims(id TEXT PRIMARY KEY,status TEXT NOT NULL,statement_sha256 TEXT NOT NULL,statement_json TEXT NOT NULL)`);\n await sqlite.execute(`CREATE TABLE ${p}events(id INTEGER PRIMARY KEY AUTOINCREMENT,type TEXT NOT NULL,payload_json TEXT NOT NULL)`);\n await sqlite.execute({sql:`INSERT INTO ${p}tasks VALUES(?,?,?,?,?,NULL)`,args:[\"T\",\"LEASED\",\"L1\",\"D\",9999999999999]});\n}\ntype R={task_id:string,lease_attempt_id:string,dispatcher:string,worker_slot_id:string,capsule_sha256:string,result_artifact_sha256:string,canonical_capsule_sha256:string,canonical_result_sha256:string,provider_trace_id:string,validator_sha256:string,decision:string};\nasync function cid(r:R){return \"EWX2-\"+(await H(\"BRAIN_EXTERNAL_WORKER_CANDIDATE_STAGE_V2\\0\"+r.task_id+\"\\0\"+r.lease_attempt_id+\"\\0\"+r.worker_slot_id+\"\\0\"+r.capsule_sha256+\"\\0\"+r.result_artifact_sha256)).slice(0,48)}\nasync function stage(r:R,{crash=false}:{crash?:boolean}={}){\n const t:any=await (this as any).db.execute({sql:`SELECT * FROM ${p}tasks WHERE id=?`,args:[r.task_id]});const task=t.rows?.[0];\n if(!task||task.state!==\"LEASED\"||Number(task.lease_expires_ms)<=Date.now())return{kind:\"REJECT\",reason:\"LEASE\"};\n if(task.lease_attempt_id!==r.lease_attempt_id||task.lease_owner!==r.dispatcher)return{kind:\"REJECT\",reason:\"LEASE_BINDING\"};\n if(![\"ELIGIBLE_FOR_CANONICAL_IMPORT_ONLY_NOT_P_REAL\",\"ELIGIBLE_FOR_FIRST_CLASS_ADMISSION_REVIEW\"].includes(r.decision))return{kind:\"REJECT\",reason:\"DECISION\"};\n if(r.capsule_sha256!==r.canonical_capsule_sha256||r.result_artifact_sha256!==r.canonical_result_sha256)return{kind:\"REJECT\",reason:\"ARTIFACT_BINDING\"};\n const statement={schema:\"BRAIN_EXTERNAL_WORKER_STAGED_CANDIDATE_V2\",task_id:r.task_id,lease_attempt_id:r.lease_attempt_id,worker_slot_id:r.worker_slot_id,capsule_sha256:r.capsule_sha256,result_artifact_sha256:r.result_artifact_sha256,provider_trace_id:r.provider_trace_id,validator_sha256:r.validator_sha256,validator_decision:r.decision,p_real_eligible:false,requires_separate_promotion:true};\n const id=await cid(r), sh=await H(canon(statement));\n const q:any=await (this as any).db.execute({sql:`SELECT * FROM ${p}claims WHERE id=?`,args:[id]});const old=q.rows?.[0];\n if(old)return old.statement_sha256===sh?{kind:\"IDEMPOTENT\",id}:{kind:\"CONFLICT\",reason:\"STATEMENT_BINDING_CONFLICT\"};\n if(crash)throw new Error(\"INJECTED_PRECOMMIT_CRASH\");\n await (this as any).db.execute({sql:`INSERT INTO ${p}claims VALUES(?,?,?,?)`,args:[id,\"CANDIDATE\",sh,canon(statement)]});\n await (this as any).db.execute({sql:`INSERT INTO ${p}events(type,payload_json) VALUES(?,?)`,args:[\"EXTERNAL_RESULT_CANDIDATE_STAGED\",canon({id})]});\n return{kind:\"CREATED\",id};\n}\nasync function runStage(r:R,opts:any={}){return await tx(async function(){return await stage.call(this,r,opts)})}\nasync function mk(over:any={}):Promise{const cap=await H(\"cap\"),res=await H(\"res\"),v=await H(\"validator\");return{task_id:\"T\",lease_attempt_id:\"L1\",dispatcher:\"D\",worker_slot_id:\"W\",capsule_sha256:cap,result_artifact_sha256:res,canonical_capsule_sha256:cap,canonical_result_sha256:res,provider_trace_id:\"TR1\",validator_sha256:v,decision:\"ELIGIBLE_FOR_CANONICAL_IMPORT_ONLY_NOT_P_REAL\",...over}}\nasync function task(){return await one(`SELECT * FROM ${p}tasks WHERE id='T'`)}\nasync function counts(){return{claims:Number((await one(`SELECT COUNT(*) n FROM ${p}claims`)).n),events:Number((await one(`SELECT COUNT(*) n FROM ${p}events`)).n)}}\nconst tests:any[]=[];const ok=(name:string,pass:boolean,detail:any=null)=>tests.push({name,pass,detail});\nawait reset();let r=await mk(),a=await runStage(r);let c=await counts(),t=await task();ok(\"candidate_stage_does_not_complete\",a.kind===\"CREATED\"&&c.claims===1&&c.events===1&&t.state===\"LEASED\"&&t.result_event_id===null,{a,c,state:t.state});\nlet b=await runStage(r),c2=await counts();ok(\"exact_replay_idempotent_no_second_event\",b.kind===\"IDEMPOTENT\"&&c2.events===1&&c2.claims===1,{b,c2});\nawait sqlite.execute(`UPDATE ${p}tasks SET lease_attempt_id='L2'`);let stale=await runStage(r);ok(\"stale_receipt_fresh_lease_reject\",stale.kind===\"REJECT\",{stale});\nlet r2=await mk({lease_attempt_id:\"L2\",provider_trace_id:\"TR2\"}),fresh=await runStage(r2);t=await task();ok(\"fresh_receipt_new_lease_stages_without_completion\",fresh.kind===\"CREATED\"&&t.state===\"LEASED\"&&t.result_event_id===null,{fresh,state:t.state});\nlet stronger=await mk({lease_attempt_id:\"L2\",provider_trace_id:\"TR3\",decision:\"ELIGIBLE_FOR_FIRST_CLASS_ADMISSION_REVIEW\"}),conf=await runStage(stronger);ok(\"same_result_changed_review_statement_conflicts\",conf.kind===\"CONFLICT\",{conf});\nlet bad=await mk({lease_attempt_id:\"L2\",canonical_result_sha256:await H(\"other\")}),sub=await runStage(bad);ok(\"substituted_artifact_reject\",sub.kind===\"REJECT\",{sub});\nawait reset();try{await runStage(await mk(),{crash:true})}catch{}c=await counts();t=await task();ok(\"crash_rolls_back_all_stage_effects\",c.claims===0&&c.events===0&&t.state===\"LEASED\",{c,state:t.state});\nawait reset();let wrong=await runStage(await mk({dispatcher:\"X\"}));ok(\"wrong_dispatcher_reject\",wrong.kind===\"REJECT\",{wrong});\nawait reset();await sqlite.execute(`UPDATE ${p}tasks SET lease_expires_ms=0`);let exp=await runStage(await mk());ok(\"expired_lease_reject\",exp.kind===\"REJECT\",{exp});\nawait reset();await runStage(await mk());t=await task();ok(\"task_complete_guard_remains_false_after_stage\",t.state!==\"COMPLETE\",{state:t.state});\nconst out={schema:\"EXTERNAL_WORKER_ATOMIC_CANDIDATE_STAGE_V2_PROVIDER_TEST\",classification:\"CANDIDATE_NONAUTHORITY_ISOLATED_PROVIDER_EXECUTION_EVIDENCE\",total:tests.length,passed:tests.filter(x=>x.pass).length,tests,verdict:tests.every(x=>x.pass)?\"PASS\":\"FAIL\",canonical_brain_mutation:false,p_real_increment:0};\nconsole.log(JSON.stringify(out,null,2));\nexport default out;\n",[142],"5d41d2c1-517b-4a1e-9eb4-12ca8d4ea4ec","promotion_only_test.ts","3bc7f820-abc2-11f1-9fe5-1607ee4eb77e",2,["D",1788898614005],"\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst p=\"promoonly_\";\nconst canon=(x:any)=>JSON.stringify(x,Object.keys(x).sort());\nconst one=async(sql:string,args:any[]=[])=>((await sqlite.execute({sql,args})).rows||[])[0]??null;\nasync function reset(mode=\"EXTERNAL_WORKER_PROMOTION_ONLY\"){\n for(const t of [\"tasks\",\"claims\",\"events\"])await sqlite.execute(`DROP TABLE IF EXISTS ${p}${t}`);\n await sqlite.execute(`CREATE TABLE ${p}tasks(id TEXT PRIMARY KEY,state TEXT,lease_owner TEXT,lease_attempt_id TEXT,commit_mode TEXT,result_event_id INTEGER)`);\n await sqlite.execute(`CREATE TABLE ${p}claims(id TEXT PRIMARY KEY,status TEXT,kind TEXT,worker_slot TEXT,lease_attempt_id TEXT,staged_claim_id TEXT)`);\n await sqlite.execute(`CREATE TABLE ${p}events(id INTEGER PRIMARY KEY AUTOINCREMENT,type TEXT,payload TEXT)`);\n await sqlite.execute({sql:`INSERT INTO ${p}tasks VALUES(?,?,?,?,?,NULL)`,args:[\"T\",\"LEASED\",\"D\",\"L1\",mode]});\n await sqlite.execute({sql:`INSERT INTO ${p}claims VALUES(?,?,?,?,?,NULL)`,args:[\"STAGE1\",\"CANDIDATE\",\"EXTERNAL_RESULT_STAGE\",\"W\",\"L1\"]});\n}\nasync function ordinaryCommitCurrent(owner:string){\n const t:any=await one(`SELECT * FROM ${p}tasks WHERE id='T'`);\n if(!t||t.state!==\"LEASED\"||t.lease_owner!==owner)return{ok:false,reason:\"NOT_LEASE_OWNER\"};\n await sqlite.execute(`INSERT INTO ${p}events(type,payload) VALUES('TASK_RESULT_COMMITTED','{}')`);\n const e:any=await one(`SELECT MAX(id) id FROM ${p}events`);\n await sqlite.execute({sql:`UPDATE ${p}tasks SET state='COMPLETE',result_event_id=? WHERE id='T'`,args:[e.id]});\n return{ok:true};\n}\nasync function ordinaryCommitRepaired(owner:string){\n const t:any=await one(`SELECT * FROM ${p}tasks WHERE id='T'`);\n if(!t||t.state!==\"LEASED\"||t.lease_owner!==owner)return{ok:false,reason:\"NOT_LEASE_OWNER\"};\n if(t.commit_mode===\"EXTERNAL_WORKER_PROMOTION_ONLY\")return{ok:false,reason:\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"};\n return await ordinaryCommitCurrent(owner);\n}\nasync function promotionCommit(owner:string,stageId:string,admissionId:string){\n const t:any=await one(`SELECT * FROM ${p}tasks WHERE id='T'`);\n if(!t||t.state!==\"LEASED\"||t.lease_owner!==owner)return{ok:false,reason:\"LEASE\"};\n if(t.commit_mode!==\"EXTERNAL_WORKER_PROMOTION_ONLY\")return{ok:false,reason:\"PROMOTION_MODE_NOT_REQUIRED\"};\n const s:any=await one(`SELECT * FROM ${p}claims WHERE id=?`,[stageId]);\n const a:any=await one(`SELECT * FROM ${p}claims WHERE id=?`,[admissionId]);\n if(!s||s.status!==\"CANDIDATE\"||s.kind!==\"EXTERNAL_RESULT_STAGE\"||s.lease_attempt_id!==t.lease_attempt_id)return{ok:false,reason:\"BAD_STAGE\"};\n if(!a||a.status!==\"VERIFIED\"||a.kind!==\"FIRST_CLASS_EXTERNAL_WORKER_ADMISSION\"||a.worker_slot!==s.worker_slot||a.lease_attempt_id!==t.lease_attempt_id||a.staged_claim_id!==s.id)return{ok:false,reason:\"ADMISSION_NOT_VERIFIED_OR_NOT_BOUND\"};\n await sqlite.execute({sql:`INSERT INTO ${p}events(type,payload) VALUES(?,?)`,args:[\"EXTERNAL_RESULT_PROMOTED_AND_COMMITTED\",JSON.stringify({stageId,admissionId})]});\n const e:any=await one(`SELECT MAX(id) id FROM ${p}events`);\n await sqlite.execute({sql:`UPDATE ${p}tasks SET state='COMPLETE',result_event_id=? WHERE id='T'`,args:[e.id]});\n return{ok:true};\n}\nconst tests:any[]=[];const ok=(name:string,pass:boolean,detail:any=null)=>tests.push({name,pass,detail});\nawait reset();let r=await ordinaryCommitCurrent(\"D\"),t:any=await one(`SELECT * FROM ${p}tasks WHERE id='T'`);ok(\"current_generic_commit_bypasses_candidate_stage\",r.ok&&t.state===\"COMPLETE\",{r,state:t.state});\nawait reset();r=await ordinaryCommitRepaired(\"D\");t=await one(`SELECT * FROM ${p}tasks WHERE id='T'`);ok(\"promotion_only_mode_blocks_ordinary_commit\",!r.ok&&r.reason===\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"&&t.state===\"LEASED\",{r,state:t.state});\nawait reset();await sqlite.execute({sql:`INSERT INTO ${p}claims VALUES(?,?,?,?,?,?)`,args:[\"ADM1\",\"VERIFIED\",\"FIRST_CLASS_EXTERNAL_WORKER_ADMISSION\",\"W\",\"L1\",\"STAGE1\"]});r=await promotionCommit(\"D\",\"STAGE1\",\"ADM1\");t=await one(`SELECT * FROM ${p}tasks WHERE id='T'`);ok(\"verified_exact_admission_can_promote_and_complete\",r.ok&&t.state===\"COMPLETE\",{r,state:t.state});\nawait reset();await sqlite.execute({sql:`INSERT INTO ${p}claims VALUES(?,?,?,?,?,?)`,args:[\"ADM1\",\"CANDIDATE\",\"FIRST_CLASS_EXTERNAL_WORKER_ADMISSION\",\"W\",\"L1\",\"STAGE1\"]});r=await promotionCommit(\"D\",\"STAGE1\",\"ADM1\");ok(\"candidate_admission_cannot_complete\",!r.ok&&r.reason===\"ADMISSION_NOT_VERIFIED_OR_NOT_BOUND\",{r});\nawait reset();await sqlite.execute({sql:`INSERT INTO ${p}claims VALUES(?,?,?,?,?,?)`,args:[\"ADM1\",\"VERIFIED\",\"FIRST_CLASS_EXTERNAL_WORKER_ADMISSION\",\"OTHER\",\"L1\",\"STAGE1\"]});r=await promotionCommit(\"D\",\"STAGE1\",\"ADM1\");ok(\"wrong_worker_binding_cannot_complete\",!r.ok,{r});\nawait reset();await sqlite.execute({sql:`INSERT INTO ${p}claims VALUES(?,?,?,?,?,?)`,args:[\"ADM1\",\"VERIFIED\",\"FIRST_CLASS_EXTERNAL_WORKER_ADMISSION\",\"W\",\"L2\",\"STAGE1\"]});r=await promotionCommit(\"D\",\"STAGE1\",\"ADM1\");ok(\"wrong_lease_attempt_cannot_complete\",!r.ok,{r});\nawait reset(\"NORMAL\");r=await ordinaryCommitRepaired(\"D\");t=await one(`SELECT * FROM ${p}tasks WHERE id='T'`);ok(\"normal_tasks_remain_committable\",r.ok&&t.state===\"COMPLETE\",{r,state:t.state});\nconst out={schema:\"EXTERNAL_WORKER_PROMOTION_ONLY_COMMIT_GATE_PROVIDER_TEST_V1\",classification:\"CANDIDATE_NONAUTHORITY_ISOLATED_PROVIDER_EXECUTION_EVIDENCE\",total:tests.length,passed:tests.filter(x=>x.pass).length,tests,verdict:tests.every(x=>x.pass)?\"PASS\":\"FAIL\",canonical_brain_mutation:false,p_real_increment:0};\nconsole.log(JSON.stringify(out,null,2));export default out;\n",[148],"3cebd28e-68be-4ffd-ad17-d7442b4dbbc1","kernel_shadow_v1.ts","01a082ac-5978-71f8-a66a-832ed6c7c8d7",6,["D",1788898854339],"import { sqlite as rootSqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\",\"migrate-task-invariants\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n for(const r of q.rows||[]){\n if(!r.dedupe_key)continue;if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId)continue;\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n if(ctx.execution_allowed===false)continue;if(unproven&&unprovenIndependenceSensitive(req,ctx))continue;if([...req].some(x=>NON_AGENT.has(x)))continue;if([...req].some(x=>!C.has(x)))continue;\n if(!await depsSatisfied(r)||!await guardsSatisfied(r,agentId)||await writeConflict(r))continue;return r\n }return null\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nasync function register(args:string[]){\n if(args.length<2)throw new Error(\"REGISTER_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),role=String(f.role||\"\"),type=String(f.type||\"\"),parent=f.parent??null,caps=cleanCaps(parseJson(f.capabilities||\"[]\",\"CAPS\"));\n if(!ws||!role||!type)throw new Error(\"REGISTER_FIELDS_REQUIRED\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(parent){if(String(parent)===id)throw new Error(\"AGENT_CANNOT_PARENT_SELF\");const pr:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[parent]);if(!pr)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(String(pr.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_PARENT\")}\n const ex:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(ex){const same=String(ex.workstream)===ws&&String(ex.role)===role&&String(ex.type)===type&&(ex.parent_id??null)===(parent??null)&&String(ex.capabilities_json)===canon(caps);if(!same)throw new Error(\"AGENT_REJOIN_IDENTITY_MISMATCH\");await sqlite.execute({sql:`UPDATE ${P}agents SET last_seen=? WHERE id=?`,args:[now(),id]});return{ok:true,created:false,agent_id:id,generation:await generation()}}\n const g0=await generation();await sqlite.execute({sql:`INSERT INTO ${P}agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES(?,?,?,?,?,'READY',?,?,?,?)`,args:[id,parent,type,ws,role,g0,g0,now(),canon(caps)]});await appendEvent(ws,id,null,\"AGENT_REGISTERED\",{type,role,parent,boot_generation:g0,capabilities:caps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=? WHERE id=?`,args:[ng,id]});return{ok:true,created:true,agent_id:id,generation:ng}\n}\nasync function ensureTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");if(!ws||!dedupe)throw new Error(\"ENSURE_FIELDS_REQUIRED\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));\n if(!Array.isArray(deps)||!ctx||Array.isArray(ctx)||!Array.isArray(req))throw new Error(\"BAD_JSON_SHAPE\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing)return{ok:true,created:false,task_id:existing.id,state:existing.state,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe};\n if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority);if(!Number.isFinite(priority))throw new Error(\"BAD_PRIORITY\");\n await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,NULL,NULL,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,canon(writes),canon(guards)]});\n await appendEvent(ws,f.agent??null,id,\"TASK_CREATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe}\n}\nasync function claim(args:string[]){\n const f=flags(args,1),id=String(f.agent||\"\"),mode=String(f.mode||\"INTERACTIVE\"),secs=f[\"lease-seconds\"]===undefined?(mode===\"INTERACTIVE\"?1800:900):Number(f[\"lease-seconds\"]);if(!id)throw new Error(\"AGENT_REQUIRED\");if(![\"INTERACTIVE\",\"PROCESS\"].includes(mode)||secs<60||secs>7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,claim_id:id,statement_sha256:h,generation:ng}\n}\nasync function invalidateClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),reason=String(f.reason||\"\"),agent=f.agent??null;const root:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[id]);if(!root)throw new Error(\"UNKNOWN_CLAIM\");const todo=[id],seen=new Set(),changed:any[]=[];\n while(todo.length){const q=String(todo.pop());if(seen.has(q))continue;seen.add(q);const row:any=await one(`SELECT status FROM ${P}claims WHERE id=?`,[q]);if(row&&![\"FALSIFIED\",\"STALE\"].includes(String(row.status))){const ns=q===id?\"FALSIFIED\":\"STALE\";await sqlite.execute({sql:`UPDATE ${P}claims SET status=?,invalidated_by=?,updated_at=? WHERE id=?`,args:[ns,id,now(),q]});changed.push([q,ns])}const kids:any[]=(await sqlite.execute({sql:`SELECT child_claim FROM ${P}claim_deps WHERE parent_claim=?`,args:[q]})).rows as any[];for(const k of kids)todo.push(String(k.child_claim))}\n await appendEvent(String(root.workstream),agent,null,\"CLAIM_INVALIDATED\",{root_claim:id,reason,affected:changed});const propagated=await propagateImpossible(String(root.workstream),agent,{type:\"claim_invalidated\",claim_id:id,reason});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),root.workstream]});return{ok:true,root_claim:id,affected:changed,generation:ng,propagated_blocked:propagated}\n}\nasync function recordExternalArtifact(args:string[]){\n const spec=parseExternalArtifactSpec(args);\n const ws:any=await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[spec.workstream]);if(!ws)throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(spec.agent!==null){const a:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[spec.agent]);if(!a)throw new Error(\"UNKNOWN_ARTIFACT_AGENT\");if(String(a.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_AGENT\")}\n if(spec.task!==null){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[spec.task]);if(!t)throw new Error(\"UNKNOWN_ARTIFACT_TASK\");if(String(t.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_TASK\")}\n const integrity=await verifyExternalArtifactBlobBytes(spec);\n const found:any=await sqlite.execute({sql:`SELECT sha256,size,logical_name,producer_agent,task_id,storage_json FROM ${P}artifacts WHERE lower(sha256)=?`,args:[spec.sha256]});\n const rows:any[]=found.rows||[];if(rows.length>1)throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_CANONICAL_ROWS\");\n const decision=externalArtifactExistingDecision(rows[0]??null,spec);\n if(decision.kind===\"CONFLICT\")throw new Error(decision.reason);\n if(decision.kind===\"ALREADY_RECORDED\")return{ok:true,created:false,already_recorded:true,sha256:spec.sha256,generation:await generation(),semantic_generation_unchanged:true,integrity};\n const t=now();\n await sqlite.execute({sql:`INSERT INTO ${P}artifacts(sha256,size,logical_name,producer_agent,task_id,storage_json,created_at) VALUES(?,?,?,?,?,?,?)`,\n args:[spec.sha256,spec.size,spec.name,spec.agent,spec.task,canon([spec.uri]),t]});\n const payload={sha256:spec.sha256,size:spec.size,logical_name:spec.name,storage_uri:spec.uri,producer_agent:spec.agent,task_id:spec.task};\n const ev=await appendEvent(spec.workstream,spec.agent,spec.task,\"EXTERNAL_ARTIFACT_RECORDED\",payload);\n const ng=await bump();\n await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),spec.workstream]});\n return{ok:true,created:true,already_recorded:false,sha256:spec.sha256,generation:ng,event_id:PREDECESSOR_EVENTS+Number(ev.seq),event_hash:ev.event_hash,integrity};\n}\n\nasync function commitFull(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId||![\"COMPLETE\",\"INVALID\",\"BLOCKED\"].includes(state))throw new Error(\"BAD_COMMIT\");const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT_FORBIDDEN\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task.lease_expires_at&&String(task.lease_expires_at)g?.type===EXECUTION_DISTINCT_GUARD))throw new Error(\"CHAT_UNPROVEN_INDEPENDENCE_COMMIT_FORBIDDEN\");\n payload={...payload,contributor_trust_class:\"CHAT_UNPROVEN\",contributor_agent_type:\"CHAT_UNPROVEN\",independence_eligible:false,p_real_eligible:false};\n }else if(payload&&typeof payload===\"object\"&&!Array.isArray(payload)&&reserved.some(k=>Object.prototype.hasOwnProperty.call(payload,k))){\n throw new Error(\"CALLER_CONTROLLED_TRUST_METADATA_FORBIDDEN\");\n }\n const ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_RESULT_COMMITTED\",payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);await sqlite.execute({sql:`UPDATE ${P}tasks SET state=?,result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=?`,args:[state,eid,now(),taskId]});let propagated:any[]=[];if([\"INVALID\",\"BLOCKED\"].includes(state))propagated=await propagateImpossible(String(task.workstream),agent,{type:\"task_terminal\",task_id:taskId,state});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET status='READY',last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,generation:ng,event_id:eid,propagated_blocked:propagated}\n}\nconst CHECKPOINT_STATE_TABLES=[\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"task_context_history\",\"task_invariant_history\"];\nfunction checkpointSortedRows(rows:any[]){return [...(rows||[])].sort((a:any,b:any)=>canon(a).localeCompare(canon(b)))}\nasync function checkpointStateView(){\n const m:any=await meta(),tables:any={};\n for(const t of CHECKPOINT_STATE_TABLES)tables[t]=checkpointSortedRows((await sqlite.execute(`SELECT * FROM ${P}${t}`)).rows||[]);\n const events=(await sqlite.execute(`SELECT * FROM ${P}epoch_events ORDER BY local_seq`)).rows||[];\n const stateSha256=await sha(canon({epoch_meta:m,events,state:tables}));\n return{m,tables,events,state_sha256:stateSha256};\n}\nasync function captureCheckpointSnapshot(){\n return await withTransaction(\"read\",async()=>{\n const v:any=await checkpointStateView();\n const payload={schema:\"BRAIN_VAL_NATIVE_SNAPSHOT_V2\",lineage:{predecessor_generation:v.m.predecessor_generation,predecessor_event_count:v.m.predecessor_event_count,predecessor_head:v.m.predecessor_head},epoch_meta:v.m,events:v.events,state:v.tables,state_sha256:v.state_sha256,exported_at:now()};\n const raw=JSON.stringify(payload,null,2)+\"\\n\",h=await sha(raw),key=`snapshots/val_native/brain_snapshot_epoch${v.m.epoch}_g${v.m.generation}_${h.slice(0,16)}.json`;\n return{...v,raw,snapshot_sha256:h,key};\n });\n}\nasync function checkpointNativeBound(payloadJson:string,c:BoundTransportContext){\n const cmd=\"checkpoint\";\n const captured:any=await withTransaction(\"read\",async()=>{\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return{early:pre};\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return{early:prior};\n return await captureCheckpointSnapshot();\n });\n if(captured.early!==undefined)return captured.early;\n await blob.set(captured.key,captured.raw);\n const rb:any=await blob.get(captured.key),rbRaw=await rb.text(),rbSha=await sha(rbRaw);\n if(rbRaw!==captured.raw||rbSha!==captured.snapshot_sha256)throw new Error(\"CHECKPOINT_BLOB_READBACK_MISMATCH\");\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return prior;\n const current:any=await checkpointStateView();\n if(String(current.state_sha256)!==String(captured.state_sha256))return{ok:false,reason:\"CHECKPOINT_CAPTURE_STALE\",captured_generation:Number(captured.m.generation),current_generation:Number(current.m.generation),captured_event_head_hash:String(captured.m.event_head_hash),current_event_head_hash:String(current.m.event_head_hash),captured_state_sha256:String(captured.state_sha256),current_state_sha256:String(current.state_sha256),orphan_blob_noncanonical:true,orphan_blob_uri:`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`};\n const id=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}replicas`)).n),uri=`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`;\n await sqlite.execute({sql:`INSERT INTO ${P}replicas(id,generation,provider,uri,snapshot_sha256,event_head_hash,verified,created_at) VALUES(?,?,?,?,?,?,1,?)`,args:[id,Number(captured.m.generation),\"val-town-native\",uri,String(captured.snapshot_sha256),String(captured.m.event_head_hash),now()]});\n const post:any=await boundTransportGuard(c,payloadJson,cmd);if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_CHECKPOINT_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n const result={ok:true,generation:Number(captured.m.generation),durability_lag_generations:Number(current.m.generation)-Number(captured.m.generation),snapshot_sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),event_head_hash:String(captured.m.event_head_hash),uri,attempts:[{attempt:1,generation:Number(captured.m.generation),sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),size:enc.encode(captured.raw).length,ok:true,uri,lag_after_ack:Number(current.m.generation)-Number(captured.m.generation)}],orphan_blob_policy:\"CONTENT_ADDRESSED_BLOB_HAS_NO_CANONICAL_CHECKPOINT_MEANING_UNTIL_REPLICA_ROW_AND_BOUND_MUTATION_RECEIPT_COMMIT\"};\n const m:any=await meta(),payloadSha=await sha(payloadJson);\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[c.job_id,c.lease_attempt_id,c.lease_instance_id,c.lease_owner,c.transport_lease_generation,c.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\nfunction transportContextShapeOk(c:any):c is BoundTransportContext{\n return !!c&&typeof c===\"object\"&&!Array.isArray(c)&&\n typeof c.job_id===\"string\"&&!!c.job_id&&\n Number.isInteger(c.transport_lease_generation)&&c.transport_lease_generation>=1&&\n typeof c.lease_owner===\"string\"&&!!c.lease_owner&&\n typeof c.lease_instance_id===\"string\"&&!!c.lease_instance_id&&\n typeof c.lease_attempt_id===\"string\"&&!!c.lease_attempt_id&&\n Number.isInteger(c.authority_epoch)&&c.authority_epoch>=1&&\n typeof c.payload_json===\"string\"&&!!c.payload_json;\n}\nasync function boundTransportGuard(c:BoundTransportContext,payloadJson:string,cmd:string){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n if(!authority||Number(authority.epoch)!==c.authority_epoch||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_AUTHORITY_FENCED\",command:cmd,authority:authority??null};\n }\n const job:any=await one(`SELECT id,op,payload_json,state,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM brain_bridge_jobs\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND lease_expires_at>datetime('now')`,\n [c.job_id,c.lease_owner,c.lease_instance_id,c.lease_attempt_id,c.transport_lease_generation]);\n if(!job)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_ATTEMPT_FENCED\",command:cmd,job_id:c.job_id};\n if(String(job.op)!==\"brain\")return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_OP_MISMATCH\",command:cmd,job_id:c.job_id};\n if(String(job.payload_json)!==c.payload_json||payloadJson!==c.payload_json)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_PAYLOAD_MISMATCH\",command:cmd,job_id:c.job_id};\n return{ok:true,authority,job};\n}\nasync function existingBoundReceipt(c:BoundTransportContext,payloadJson:string,cmd:string){\n const r:any=await one(`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,result_json\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[c.job_id,c.lease_attempt_id]);\n if(!r)return null;\n const psha=await sha(payloadJson);\n if(String(r.lease_instance_id)!==c.lease_instance_id||String(r.lease_owner)!==c.lease_owner||\n Number(r.transport_lease_generation)!==c.transport_lease_generation||Number(r.authority_epoch)!==c.authority_epoch||\n String(r.command)!==cmd||String(r.payload_sha256)!==psha)throw new Error(\"MUTATION_RECEIPT_BINDING_MISMATCH\");\n return parseJson(r.result_json,\"MUTATION_RECEIPT_RESULT\");\n}\nasync function dispatchFull(payloadJson:string,transportContext?:BoundTransportContext){\n const q=parseJson(payloadJson,\"PAYLOAD\");if(!exactTop(q))throw new Error(\"PAYLOAD_SCHEMA_NOT_CLOSED\");const cmd=String(q.args[0]);\n const full=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"delegate-task\",\"claim\",\"renew-lease\",\"commit\",\"checkpoint\",\"add-claim\",\"invalidate-claim\",\"supersede-task-context\",\"migrate-task-invariants\",\"reconcile-causal-blocks\",\"recover-stale\",\"record-external-artifact\"]);if(!full.has(cmd))throw new Error(\"BRAIN_SUBCOMMAND_NOT_ALLOWED\");\n const invoke=async(argsOverride?:any[])=>{\n const a=argsOverride??q.args;\n if(cmd===\"status\")return await status();if(cmd===\"verify-chain\")return await verifyChain();if(cmd===\"verify-claim-graph\")return await verifyClaimGraph();if(cmd===\"register-agent\")return await register(a);if(cmd===\"ensure-task\")return await ensureTask(a);if(cmd===\"delegate-task\")return await delegateTask(a);if(cmd===\"claim\")return await claim(a);if(cmd===\"renew-lease\")return await renew(a);if(cmd===\"commit\")return await commitFull(a);if(cmd===\"checkpoint\")return await checkpointNative();if(cmd===\"add-claim\")return await addClaimFull(a);if(cmd===\"invalidate-claim\")return await invalidateClaimFull(a);if(cmd===\"supersede-task-context\")return await supersedeContext(a);if(cmd===\"migrate-task-invariants\")return await migrateInvariants(a);if(cmd===\"reconcile-causal-blocks\")return await reconcileCausal(a);if(cmd===\"record-external-artifact\")return await recordExternalArtifact(a);if(cmd===\"recover-stale\"){if(a.length!==1)throw new Error(\"RECOVER_STALE_ARGS_INVALID\");return await recover()}throw new Error(\"UNREACHABLE\");\n };\n if(READ_ONLY_COMMANDS.has(cmd))return await withTransaction(\"read\",()=>invoke());\n const emergencyCanary=transportContextShapeOk(transportContext)&&transportContext.job_id===EMERGENCY_MUTATION_CANARY_JOB_ID;\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_EMERGENCY_FROZEN\",command:cmd,authority:authority??null};\n }\n if(!REACTIVATION_MUTATION_ALLOWLIST.has(cmd))return{ok:false,reason:\"VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED\",command:cmd};\n if(!transportContextShapeOk(transportContext))return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_CONTEXT_REQUIRED\",command:cmd};\n if(cmd===\"checkpoint\")return await checkpointNativeBound(payloadJson,transportContext);\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n await ensureMutationRetryAuthTable();\n const pre:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(transportContext,payloadJson,cmd);\n if(prior!==null)return prior;\n const payloadSha=await sha(payloadJson);\n let result:any=null,retriableStale=false;\n const req:any=transportContext.stable_retry_request;\n if(cmd!==\"commit\"&&(transportContext.stable_retry_probe!==undefined||req!==undefined)){\n result={ok:false,reason:\"STABLE_RETRY_METADATA_NONCOMMIT_FORBIDDEN\",command:cmd};\n }else if(cmd===\"commit\"&&req!==undefined){\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n if(!stableRetryRequestOk(req)||originalExpected===null){\n result={ok:false,reason:\"STABLE_RETRY_REQUEST_INVALID\"};\n }else{\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n const bindingOk=!!ar&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&String(ar.lease_owner)===transportContext.lease_owner&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation&&Number(ar.authority_epoch)===transportContext.authority_epoch&&\n String(ar.command)===\"commit\"&&String(ar.payload_sha256)===payloadSha&&Number(ar.stale_expected_workstream_generation)===originalExpected&&\n String(ar.stable_snapshot_sha256)===String(req.stable_snapshot_sha256)&&Number(req.from_expected_workstream_generation)===originalExpected&&\n Number(req.retry_index)===Number(ar.retry_count)+1;\n if(!bindingOk){\n result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_FENCED\"};\n }else{\n const u:any=await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE}\n SET retry_count=retry_count+1,updated_at=? WHERE job_id=? AND lease_attempt_id=? AND retry_count=? RETURNING retry_count`,\n args:[now(),transportContext.job_id,transportContext.lease_attempt_id,Number(ar.retry_count)]});\n if(!(u.rows||[]).length)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_RACE\"};\n else{\n result=await invoke(withCommitExpectedWorkstreamGeneration(q.args,Number(req.to_expected_workstream_generation)));\n if(result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n retriableStale=true;\n if(Number.isInteger(Number(result.actual)))await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE} SET observed_workstream_generation=?,updated_at=? WHERE job_id=? AND lease_attempt_id=?`,\n args:[Number(result.actual),now(),transportContext.job_id,transportContext.lease_attempt_id]});\n }else{\n await sqlite.execute({sql:`DELETE FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[transportContext.job_id,transportContext.lease_attempt_id]});\n }\n }\n }\n }\n }else{\n result=await invoke();\n if(cmd===\"commit\"&&result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n const probe:any=transportContext.stable_retry_probe;\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n const eligible=stableRetryProbeOk(probe)&&probe.retry_guard_snapshot_complete===true&&originalExpected!==null&&\n Number(result.expected)===originalExpected&&Number.isInteger(Number(result.actual));\n if(eligible){\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${MUTATION_RETRY_AUTH_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,\n stale_expected_workstream_generation,observed_workstream_generation,stable_snapshot_sha256,retry_count,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,\"commit\",payloadSha,originalExpected,Number(result.actual),\n probe.stable_snapshot_sha256,0,now(),now()]});\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n retriableStale=!!ar&&String(ar.payload_sha256)===payloadSha&&String(ar.stable_snapshot_sha256)===probe.stable_snapshot_sha256&&\n Number(ar.stale_expected_workstream_generation)===originalExpected&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation;\n if(!retriableStale)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_CONFLICT\"};\n }\n }\n }\n const post:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n if(retriableStale)return{...result,stable_retry_authorized:true};\n const m:any=await meta();\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\n\n\nasync function brainStatusSafe(){return await withTransaction(\"read\",()=>status())}\nasync function verifyBrainChainSafe(){return await withTransaction(\"read\",()=>verifyChain())}\nasync function verifyBrainClaimGraphSafe(){return await withTransaction(\"read\",()=>verifyClaimGraph())}\nasync function checkpointBrainNativeSafe(){return await dispatchFull(JSON.stringify({args:[\"checkpoint\"],timeout:120}))}\nasync function recoverBrainStaleSafe(){return await dispatchFull(JSON.stringify({args:[\"recover-stale\"],timeout:120}))}\nasync function registerBrainAgentSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function claimBrainTaskSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function brainGenerationSafe(){return await withTransaction(\"read\",()=>generation())}\n\nexport {\n dispatchFull as dispatchBrain,\n brainStatusSafe as brainStatus,\n verifyBrainChainSafe as verifyBrainChain,\n verifyBrainClaimGraphSafe as verifyBrainClaimGraph,\n checkpointBrainNativeSafe as checkpointBrainNative,\n recoverBrainStaleSafe as recoverBrainStale,\n registerBrainAgentSafe as registerBrainAgent,\n claimBrainTaskSafe as claimBrainTask,\n brainGenerationSafe as brainGeneration\n};\n",[155],"74af62e3-1122-4ac7-bd5a-463a18f37232","integrated_seam_v1_test.ts","7eeac61e-abc2-11f1-8a9c-1607ee4eb77e",5,["D",1788898752891],"\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst p=\"seamv1_\", PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst enc=new TextEncoder();\nconst H=async(s:string)=>[...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",enc.encode(s)))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconst canon=(x:any):string=>x===null||typeof x!==\"object\"?JSON.stringify(x):Array.isArray(x)?\"[\"+x.map(canon).join(\",\")+\"]\":\"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\nconst one=async(db:any,sql:string,args:any[]=[])=>((await db.execute({sql,args})).rows||[])[0]??null;\nasync function writeTx(fn:(db:any)=>Promise){const db:any=await (sqlite as any).transaction(\"write\");try{const out=await fn(db);await db.commit();return out}catch(e){try{await db.rollback()}catch{}throw e}}\nasync function reset(mode=\"EXTERNAL_WORKER_PROMOTION_ONLY\"){\n for(const t of [\"tasks\",\"stages\",\"admissions\",\"events\"])await sqlite.execute(`DROP TABLE IF EXISTS ${p}${t}`);\n await sqlite.execute(`CREATE TABLE ${p}tasks(id TEXT PRIMARY KEY,workstream TEXT,state TEXT,lease_owner TEXT,lease_generation INTEGER,lease_expires_ms INTEGER,commit_mode TEXT,result_event_id INTEGER)`);\n await sqlite.execute(`CREATE TABLE ${p}stages(id TEXT PRIMARY KEY,status TEXT,statement_sha256 TEXT,statement_json TEXT,task_id TEXT,attempt_id TEXT,worker_slot TEXT,capsule_sha256 TEXT,result_sha256 TEXT,trace_id TEXT,validator_sha256 TEXT)`);\n await sqlite.execute(`CREATE TABLE ${p}admissions(id TEXT PRIMARY KEY,status TEXT,stage_id TEXT,task_id TEXT,attempt_id TEXT,worker_slot TEXT)`);\n await sqlite.execute(`CREATE TABLE ${p}events(id INTEGER PRIMARY KEY AUTOINCREMENT,type TEXT,payload_json TEXT)`);\n await sqlite.execute({sql:`INSERT INTO ${p}tasks VALUES(?,?,?,?,?,?,?,NULL)`,args:[\"T\",\"global\",\"LEASED\",\"D\",101,9999999999999,mode]});\n}\nasync function task(db:any=sqlite){return await one(db,`SELECT * FROM ${p}tasks WHERE id='T'`)}\nasync function attemptId(t:any){return await H(canon({schema:\"PROJECT_BRAIN_CANONICAL_TASK_LEASE_ATTEMPT_ID_V1\",project:PROJECT,task_id:t.id,workstream:t.workstream,lease_owner:t.lease_owner,lease_generation:Number(t.lease_generation)}))}\ntype Receipt={task_id:string,attempt_id:string,dispatcher:string,worker_slot:string,capsule_sha256:string,result_sha256:string,trace_id:string,validator_sha256:string,decision:string};\nasync function mk(over:any={}):Promise{const t=await task(),aid=await attemptId(t);return{task_id:\"T\",attempt_id:aid,dispatcher:\"D\",worker_slot:\"W\",capsule_sha256:await H(\"cap\"),result_sha256:await H(\"res\"),trace_id:\"TR1\",validator_sha256:await H(\"validator\"),decision:\"ELIGIBLE_FOR_CANONICAL_IMPORT_ONLY_NOT_P_REAL\",...over}}\nasync function stage(r:Receipt,{crash=false}:{crash?:boolean}={}){\n return await writeTx(async db=>{\n const t=await task(db); if(!t||t.state!==\"LEASED\"||Number(t.lease_expires_ms)<=Date.now())return{kind:\"REJECT\",reason:\"LEASE\"};\n const aid=await attemptId(t);\n if(r.task_id!==t.id||r.dispatcher!==t.lease_owner||r.attempt_id!==aid)return{kind:\"REJECT\",reason:\"ATTEMPT_BINDING\"};\n if(![\"ELIGIBLE_FOR_CANONICAL_IMPORT_ONLY_NOT_P_REAL\",\"ELIGIBLE_FOR_FIRST_CLASS_ADMISSION_REVIEW\"].includes(r.decision))return{kind:\"REJECT\",reason:\"DECISION\"};\n const statement={schema:\"BRAIN_EXTERNAL_WORKER_STAGED_CANDIDATE_V3\",task_id:r.task_id,attempt_id:r.attempt_id,worker_slot:r.worker_slot,capsule_sha256:r.capsule_sha256,result_sha256:r.result_sha256,trace_id:r.trace_id,validator_sha256:r.validator_sha256,validator_decision:r.decision,p_real_eligible:false,requires_separate_promotion:true};\n const id=\"EWST-\"+(await H(canon([\"EW_STAGE_V3\",r.task_id,r.attempt_id,r.worker_slot,r.capsule_sha256,r.result_sha256]))).slice(0,48), sh=await H(canon(statement));\n const old=await one(db,`SELECT * FROM ${p}stages WHERE id=?`,[id]);\n if(old)return old.statement_sha256===sh?{kind:\"IDEMPOTENT\",id}:{kind:\"CONFLICT\",reason:\"STAGE_BINDING_CONFLICT\"};\n if(crash)throw new Error(\"INJECTED_STAGE_CRASH\");\n await db.execute({sql:`INSERT INTO ${p}stages VALUES(?,?,?,?,?,?,?,?,?,?,?)`,args:[id,\"CANDIDATE\",sh,canon(statement),r.task_id,r.attempt_id,r.worker_slot,r.capsule_sha256,r.result_sha256,r.trace_id,r.validator_sha256]});\n await db.execute({sql:`INSERT INTO ${p}events(type,payload_json) VALUES(?,?)`,args:[\"EXTERNAL_RESULT_CANDIDATE_STAGED\",canon({stage_id:id})]});\n return{kind:\"CREATED\",id};\n })\n}\nasync function ordinaryCommit(owner:string){\n return await writeTx(async db=>{\n const t=await task(db);if(!t||t.state!==\"LEASED\"||t.lease_owner!==owner)return{ok:false,reason:\"LEASE\"};\n if(t.commit_mode===\"EXTERNAL_WORKER_PROMOTION_ONLY\")return{ok:false,reason:\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"};\n await db.execute({sql:`INSERT INTO ${p}events(type,payload_json) VALUES('TASK_RESULT_COMMITTED','{}')`});const e=await one(db,`SELECT MAX(id) id FROM ${p}events`);await db.execute({sql:`UPDATE ${p}tasks SET state='COMPLETE',result_event_id=? WHERE id='T'`,args:[e.id]});return{ok:true};\n })\n}\nasync function addAdmission(stageId:string,status=\"VERIFIED\",over:any={}){\n const s:any=await one(sqlite,`SELECT * FROM ${p}stages WHERE id=?`,[stageId]); if(!s)throw new Error(\"NO_STAGE\");\n const a={id:\"ADM-\"+stageId,status,stage_id:stageId,task_id:s.task_id,attempt_id:s.attempt_id,worker_slot:s.worker_slot,...over};\n await sqlite.execute({sql:`INSERT INTO ${p}admissions VALUES(?,?,?,?,?,?)`,args:[a.id,a.status,a.stage_id,a.task_id,a.attempt_id,a.worker_slot]});return a.id;\n}\nasync function promote(owner:string,stageId:string,admissionId:string){\n return await writeTx(async db=>{\n const t=await task(db);if(!t||t.state!==\"LEASED\"||t.lease_owner!==owner)return{ok:false,reason:\"LEASE\"};\n if(t.commit_mode!==\"EXTERNAL_WORKER_PROMOTION_ONLY\")return{ok:false,reason:\"MODE\"};\n const aid=await attemptId(t),s=await one(db,`SELECT * FROM ${p}stages WHERE id=?`,[stageId]),a=await one(db,`SELECT * FROM ${p}admissions WHERE id=?`,[admissionId]);\n if(!s||s.status!==\"CANDIDATE\"||s.task_id!==t.id||s.attempt_id!==aid)return{ok:false,reason:\"BAD_STAGE\"};\n if(!a||a.status!==\"VERIFIED\"||a.stage_id!==s.id||a.task_id!==t.id||a.attempt_id!==aid||a.worker_slot!==s.worker_slot)return{ok:false,reason:\"ADMISSION_NOT_VERIFIED_OR_NOT_BOUND\"};\n await db.execute({sql:`INSERT INTO ${p}events(type,payload_json) VALUES(?,?)`,args:[\"EXTERNAL_RESULT_PROMOTED_AND_COMMITTED\",canon({stage_id:s.id,admission_id:a.id})]});const e=await one(db,`SELECT MAX(id) id FROM ${p}events`);await db.execute({sql:`UPDATE ${p}tasks SET state='COMPLETE',result_event_id=? WHERE id='T'`,args:[e.id]});return{ok:true};\n })\n}\nconst tests:any[]=[];const ok=(name:string,pass:boolean,detail:any=null)=>tests.push({name,pass,detail});\nawait reset();let t:any=await task(),a1=await attemptId(t);await sqlite.execute(`UPDATE ${p}tasks SET lease_expires_ms=lease_expires_ms+1000`);let a1r=await attemptId(await task());ok(\"attempt_id_stable_across_renewal\",a1===a1r,{a1});\nawait sqlite.execute(`UPDATE ${p}tasks SET state='READY',lease_owner=NULL,lease_generation=NULL`);await sqlite.execute({sql:`UPDATE ${p}tasks SET state='LEASED',lease_owner='D',lease_generation=202 WHERE id='T'`});let a2=await attemptId(await task());ok(\"attempt_id_changes_after_recover_reclaim_same_owner\",a1!==a2,{a1,a2});\nawait reset();let r=await mk(),s=await stage(r),st:any=await one(sqlite,`SELECT * FROM ${p}stages WHERE id=?`,[s.id]),tt=await task();ok(\"stage_candidate_noncausal\",s.kind===\"CREATED\"&&st.status===\"CANDIDATE\"&&tt.state===\"LEASED\"&&tt.result_event_id===null,{s,state:tt.state});\nlet s2=await stage(r),ec:any=await one(sqlite,`SELECT COUNT(*) n FROM ${p}events`);ok(\"exact_stage_replay_idempotent\",s2.kind===\"IDEMPOTENT\"&&Number(ec.n)===1,{s2,events:ec.n});\nawait sqlite.execute(`UPDATE ${p}tasks SET lease_generation=303`);let stale=await stage(r);ok(\"stale_receipt_after_reclaim_rejects\",stale.kind===\"REJECT\"&&stale.reason===\"ATTEMPT_BINDING\",{stale});\nawait reset();r=await mk();s=await stage(r);let stronger=await mk({decision:\"ELIGIBLE_FOR_FIRST_CLASS_ADMISSION_REVIEW\",trace_id:\"TR2\"}),conf=await stage(stronger);ok(\"same_result_changed_statement_conflicts\",conf.kind===\"CONFLICT\",{conf});\nlet oc=await ordinaryCommit(\"D\"),t2=await task();ok(\"promotion_only_blocks_generic_commit\",!oc.ok&&oc.reason===\"EXTERNAL_RESULT_REQUIRES_PROMOTION_COMMIT\"&&t2.state===\"LEASED\",{oc,state:t2.state});\nlet adm=await addAdmission(s.id,\"CANDIDATE\"),pr=await promote(\"D\",s.id,adm);ok(\"candidate_admission_cannot_promote\",!pr.ok,{pr});\nawait sqlite.execute(`DELETE FROM ${p}admissions`);adm=await addAdmission(s.id,\"VERIFIED\",{worker_slot:\"OTHER\"});pr=await promote(\"D\",s.id,adm);ok(\"wrong_worker_verified_admission_rejects\",!pr.ok,{pr});\nawait sqlite.execute(`DELETE FROM ${p}admissions`);adm=await addAdmission(s.id,\"VERIFIED\");pr=await promote(\"D\",s.id,adm);t2=await task();ok(\"exact_verified_admission_promotes_and_completes\",pr.ok&&t2.state===\"COMPLETE\",{pr,state:t2.state});\nawait reset(\"NORMAL\");oc=await ordinaryCommit(\"D\");t2=await task();ok(\"normal_tasks_unaffected\",oc.ok&&t2.state===\"COMPLETE\",{oc,state:t2.state});\nawait reset();r=await mk();try{await stage(r,{crash:true})}catch{}let sc:any=await one(sqlite,`SELECT COUNT(*) n FROM ${p}stages`),ee:any=await one(sqlite,`SELECT COUNT(*) n FROM ${p}events`);ok(\"stage_crash_rolls_back\",Number(sc.n)===0&&Number(ee.n)===0,{stages:sc.n,events:ee.n});\nawait reset();r=await mk({decision:\"REJECT\"});let bad=await stage(r);ok(\"ineligible_validator_decision_rejects\",bad.kind===\"REJECT\"&&bad.reason===\"DECISION\",{bad,note:\"Full V3R1 byte/capsule validation remains a separate prerequisite; this seam consumes only an eligible bound validator receipt.\"});\nawait reset();r=await mk();s=await stage(r);await sqlite.execute(`UPDATE ${p}tasks SET lease_generation=404`);adm=await addAdmission(s.id,\"VERIFIED\");pr=await promote(\"D\",s.id,adm);ok(\"old_staged_result_cannot_promote_after_reclaim\",!pr.ok&&pr.reason===\"BAD_STAGE\",{pr});\nconst out={schema:\"EXTERNAL_WORKER_INTEGRATED_NONCAUSAL_STAGE_PROMOTION_SEAM_PROVIDER_TEST_V1\",classification:\"CANDIDATE_NONAUTHORITY_ISOLATED_PROVIDER_EXECUTION_EVIDENCE\",total:tests.length,passed:tests.filter(x=>x.pass).length,tests,verdict:tests.every(x=>x.pass)?\"PASS\":\"FAIL\",architecture:{new_task_lease_column_required:false,source_task_completed_at_stage:false,generic_commit_blocked_for_external_candidate:true,separate_verified_admission_required:true},canonical_brain_mutation:false,p_real_increment:0};\nconsole.log(JSON.stringify(out,null,2));export default out;\n",[162],"pulls","branches","forks","envVars",{"_175":61,"_177":61},"connections",{"_175":61,"_176":61},"count","unfilledCount","emptyCount",{"_43":161,"_32":162,"_30":163,"_134":-5,"_41":42,"_40":164,"_135":136,"_38":196,"_13":138,"_33":34,"_35":166,"_24":25,"_139":-5,"_184":197,"_27":198},{"_43":154,"_32":155,"_30":156,"_134":-5,"_41":42,"_40":157,"_135":136,"_38":193,"_13":138,"_33":34,"_35":159,"_24":25,"_139":-5,"_184":194,"_27":195},{"_43":147,"_32":148,"_30":149,"_134":-5,"_41":42,"_40":150,"_135":136,"_38":190,"_13":61,"_33":34,"_35":152,"_24":25,"_139":-5,"_184":191,"_27":192},{"_43":141,"_32":142,"_30":143,"_134":-5,"_41":42,"_40":138,"_135":136,"_38":187,"_13":61,"_33":34,"_35":145,"_24":25,"_139":-5,"_184":188,"_27":189},{"_43":133,"_32":28,"_30":31,"_134":-5,"_41":42,"_40":14,"_135":136,"_38":183,"_13":138,"_33":34,"_35":37,"_24":25,"_139":-5,"_184":185,"_27":186},["D",1788899181039],"children",[],[28],["D",1788898505407],[],[142],["D",1788898614005],[],[148],["D",1788898854339],[],[155],["D",1788898752891],[],[162],["D",1788898505244],["D",1789511441255],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":55,"_102":103,"_104":25},{"_13":14,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"ctx",{"_80":-5,"_125":237,"_238":239,"_240":241,"_242":25,"_243":25,"_244":25,"_245":136,"_246":-5,"_247":-7,"_248":-7,"_249":61,"_250":25,"_251":25,"_252":-5,"_253":25,"_254":25,"_255":25,"_256":-5},"ENV",{"_208":209,"_210":211,"_212":87,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8