[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_260":261,"_262":263},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_107":88,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":24,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","BASE_val_native_executor_prod.ts","latestPath","fileId","01a0a1e4-06dc-72fa-9f61-ab036afc5a72","name","fileType","script","content","import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst sqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { leaseOneSql } from \"./brain_bridge_worker.ts\";\nimport { classifyValidCoalesceResult } from \"./brain_bridge_readonly_coalesce_v4.ts\";\nimport { dispatchBrain, verifyBrainChain, verifyBrainClaimGraph } from \"./val_native_kernel_v1.ts\";\n\nconst JOB_TABLE=\"brain_bridge_jobs\";\nconst AUTH_TABLE=\"brain_control_plane_authority_v1\";\n// A unique module query-string creates an independent worker incarnation inside the\n// same Val runtime. The default preserves the canonical executor identity.\nconst moduleUrl=new URL(import.meta.url);\nconst WORKER=moduleUrl.searchParams.get(\"worker\")||\"project-brain-val-native-v1\";\nconst INSTANCE=moduleUrl.searchParams.get(\"instance\")||\"val-native-epoch2\";\nconst LEASE_SECONDS=180;\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst RUNTIME_TICK_TABLE=\"val_native_executor_runtime_v1\";\nconst RUNTIME_TICK_TTL_SECONDS=300;\nconst PRELEASE_RANK_RECEIPT_TABLE=\"brain_bridge_prelease_rank_receipts_v1\";\n// R8K2 installs in two phases: helpers first, then only enable after the exact\n// rebased source passes remote Deno/libSQL qualification and production readback.\nconst PRELEASE_READ_COALESCE_V1_ENABLED=false;\nasync function ensureMutationReceiptTable(db:any=sqlite){\n await db.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction safeSqlTableV1(t:string){\n if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(t))throw new Error(\"BAD_TABLE\");\n return t;\n}\nfunction canonicalJsonV1(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canonicalJsonV1).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canonicalJsonV1(x[k])).join(\",\")+\"}\";\n}\nexport async function ensurePreleaseRankReceiptTableV1(db:any=sqlite,table=PRELEASE_RANK_RECEIPT_TABLE){\n table=safeSqlTableV1(table);\n await db.execute(`CREATE TABLE IF NOT EXISTS ${table}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n rank0_id TEXT NOT NULL,\n rank1_id TEXT,\n rank_snapshot_sha256 TEXT NOT NULL,\n created_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nexport function orderedReadyTop2SqlV1(table=JOB_TABLE){\n table=safeSqlTableV1(table);\n const raw=leaseOneSql(table);\n const marker=`SELECT j.id FROM ${table} j`;\n const start=raw.indexOf(marker);\n const end=raw.indexOf(\"\\n LIMIT 1\",start);\n if(start<0||end<0)throw new Error(\"PRELEASE_SELECTOR_SHAPE_DRIFT\");\n const selector=raw.slice(start,end).replace(marker,`SELECT j.rowid AS queue_rowid,j.* FROM ${table} j`);\n if((selector.match(/\\?/g)||[]).length!==1)throw new Error(\"PRELEASE_SELECTOR_PLACEHOLDER_DRIFT\");\n return selector+\"\\n LIMIT 2\";\n}\nexport async function acquireWithPreleaseRankReceiptV1(db:any,opts:{qTable?:string;rTable?:string;worker:string;instance:string;attempt:string;injectReceiptFailure?:boolean}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const active:any=await tx.execute(`SELECT id FROM ${q} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id LIMIT 2`);\n const activeRows:any[]=active.rows||[];\n if(activeRows.length>1){await tx.rollback();done=true;return {kind:\"conflict\",active:activeRows}}\n if(activeRows.length===1){await tx.rollback();done=true;return {kind:\"busy\",active:activeRows[0]}}\n const ranked:any=await tx.execute({sql:orderedReadyTop2SqlV1(q),args:[opts.worker]});\n const rows:any[]=ranked.rows||[];\n if(!rows.length){await tx.rollback();done=true;return {kind:\"empty\"}}\n const leader=rows[0],follower=rows[1]??null;\n const u:any=await tx.execute({sql:`UPDATE ${q}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(SELECT 1 FROM ${q} x WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now'))\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[opts.worker,opts.instance,opts.attempt,String(leader.id)]});\n const leased:any=u.rows?.[0]??null;if(!leased)throw new Error(\"PRELEASE_LEASE_CAS_FAILED\");\n const snap={\n rank0:{id:String(leader.id),op:String(leader.op),payload_json:String(leader.payload_json),priority:Number(leader.priority),created_at:String(leader.created_at)},\n rank1:follower?{id:String(follower.id),op:String(follower.op),payload_json:String(follower.payload_json),priority:Number(follower.priority),created_at:String(follower.created_at)}:null,\n };\n const rankSnapshotSha256=await sha256Text(canonicalJsonV1(snap));\n await tx.execute({sql:`INSERT INTO ${r}(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,rank0_id,rank1_id,rank_snapshot_sha256,created_at)\n VALUES(?,?,?,?,?,?,?,?,datetime('now'))`,args:[String(leased.id),opts.attempt,opts.instance,opts.worker,Number(leased.transport_lease_generation),String(leader.id),follower?String(follower.id):null,opts.injectReceiptFailure?\"INVALID\":rankSnapshotSha256]});\n if(opts.injectReceiptFailure)throw new Error(\"INJECTED_PRELEASE_RECEIPT_FAILURE\");\n await tx.commit();done=true;\n return {kind:\"leased\",job:leased,rank0:String(leader.id),rank1:follower?String(follower.id):null,rank_snapshot_sha256:rankSnapshotSha256};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nfunction exactObjectKeysV1(v:any,keys:string[]){\n if(!v||typeof v!==\"object\"||Array.isArray(v))return false;\n const a=Object.keys(v).sort(),b=[...keys].sort();\n return a.length===b.length&&a.every((x,i)=>x===b[i]);\n}\nexport function classifyValNativeCoalesceResultV1(resultJson:string){\n let r:any;try{r=JSON.parse(resultJson)}catch{return null}\n if(!exactObjectKeysV1(r,[\"returncode\",\"stderr\",\"stdout\"]))return null;\n return classifyValidCoalesceResult(JSON.stringify({returncode:r.returncode,stdout:r.stdout,stderr:r.stderr,stdout_truncated:false,stderr_truncated:false}));\n}\nexport function preleaseReceiptBindingReasonV1(job:any,x:any){\n if(!x)return \"PRELEASE_RECEIPT_MISSING\";\n if(String(x.job_id)!==String(job.id)||String(x.rank0_id)!==String(job.id))return \"PRELEASE_RECEIPT_CORRUPT\";\n if(String(x.lease_owner)!==String(job.lease_owner)||String(x.lease_instance_id)!==String(job.lease_instance_id)||String(x.lease_attempt_id)!==String(job.lease_attempt_id)||Number(x.transport_lease_generation)!==Number(job.transport_lease_generation))return \"PRELEASE_RECEIPT_STALE_OR_MISBOUND\";\n if(!/^[0-9a-f]{64}$/.test(String(x.rank_snapshot_sha256)))return \"PRELEASE_RECEIPT_HASH_INVALID\";\n if(x.rank1_id==null)return \"PRELEASE_RECEIPT_NO_FOLLOWER\";\n return \"OK\";\n}\nexport async function finalizeLeaderOptionalPreleaseFollowerV1(db:any,opts:{qTable?:string;rTable?:string;job:any;expected:any}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const command=opts.expected?.state===\"COMPLETE\"&&opts.expected?.error_json==null&&typeof opts.expected?.result_json===\"string\"\n ? classifyValNativeCoalesceResultV1(opts.expected.result_json):null;\n const job=opts.job;\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const lr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')`,\n args:[String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n const leader:any=lr.rows?.[0]??null;\n if(!leader){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerId:string|null=null,receiptReason=\"NOT_COALESCIBLE\";\n if(command){\n const rr:any=await tx.execute({sql:`SELECT * FROM ${r} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const recs:any[]=rr.rows||[];\n if(recs.length!==1)receiptReason=recs.length>1?\"AMBIGUOUS_PRELEASE_RECEIPTS\":\"PRELEASE_RECEIPT_MISSING\";\n else{\n const x:any=recs[0];\n receiptReason=preleaseReceiptBindingReasonV1(job,x);\n if(receiptReason===\"OK\"){\n const fr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=?`,args:[String(x.rank1_id)]});\n const f:any=fr.rows?.[0]??null;\n if(f&&String(f.state)===\"READY\"&&String(f.op)===String(leader.op)&&String(f.payload_json)===String(leader.payload_json)&&Number(f.priority)===Number(leader.priority))followerId=String(f.id);\n else receiptReason=\"PRELEASE_FOLLOWER_NO_LONGER_EXACT_READY_MATCH\";\n }\n }\n }\n const lu:any=await tx.execute({sql:`UPDATE ${q}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(opts.expected.state),opts.expected.result_json??null,opts.expected.error_json??null,String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(lu.rows||[]).length){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerCompleted=false;\n if(followerId){\n const fu:any=await tx.execute({sql:`UPDATE ${q} SET state='COMPLETE',result_json=?,error_json=NULL,updated_at=datetime('now') WHERE id=? AND state='READY' AND op=? AND payload_json=? AND priority=? RETURNING id`,\n args:[opts.expected.result_json,followerId,String(leader.op),String(leader.payload_json),Number(leader.priority)]});\n followerCompleted=(fu.rows||[]).length===1;\n }\n await tx.commit();done=true;\n return {ok:true,id:String(job.id),state:String(opts.expected.state),command,receipt_reason:receiptReason,follower_completed:followerCompleted,follower_id:followerCompleted?followerId:null};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\n\nfunction legacyEnvelope(v:any){return JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify(v)+\"\\n\"})}\nasync function sha256Text(s:string){\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nasync function authority(){\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTH_TABLE} WHERE id=1`);\n return r.rows?.[0]??null;\n}\nconst RESULT_FINALIZATION_HELPER_V1_SHA256=\"b82e4f00c3f7b3eb721871e780d0f7c43180e32516b9a5c87112a956e550677f\";\nconst RESULT_FINALIZATION_HELPER_V1_SOURCE=String.raw`// RESULT_FINALIZATION_EXACT_ATTEMPT_RECONCILIATION_V1\n// Candidate-only pure helper. It never dispatches/re-dispatches a Brain command.\n// Production integration supplies narrowly-scoped queue/authority/receipt operations.\n\nexport const READ_ONLY_COMMANDS_V1 = new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\n\nexport function canonV1(x) {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canonV1).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k => JSON.stringify(k) + \":\" + canonV1(x[k])).join(\",\") + \"}\";\n}\n\nexport function legacyEnvelopeV1(v) {\n return JSON.stringify({returncode:0, stderr:\"\", stdout:JSON.stringify(v) + \"\\n\"});\n}\n\nexport async function sha256TextV1(s) {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x => x.toString(16).padStart(2,\"0\")).join(\"\");\n}\n\nfunction errText(e) {\n return e instanceof Error ? e.message : String(e);\n}\n\nfunction authorityMatches(a, epoch, mode) {\n return !!a &&\n Number(a.epoch) === Number(epoch) &&\n String(a.writer) === \"val_native\" &&\n String(a.mode) === String(mode);\n}\n\nfunction expectedTerminal(dispatchOk, dispatchValue) {\n return dispatchOk\n ? {state:\"COMPLETE\", result_json:legacyEnvelopeV1(dispatchValue), error_json:null}\n : {state:\"FAILED\", result_json:null, error_json:JSON.stringify(dispatchValue)};\n}\n\nfunction sameNullable(a,b) {\n return (a ?? null) === (b ?? null);\n}\n\nfunction exactStaticJobBinding(row, job) {\n return !!row &&\n String(row.id) === String(job.id) &&\n String(row.op) === String(job.op) &&\n String(row.payload_json) === String(job.payload_json) &&\n Number(row.transport_lease_generation) === Number(job.transport_lease_generation);\n}\n\nfunction exactLiveAttempt(row, job) {\n return exactStaticJobBinding(row, job) &&\n String(row.lease_instance_id) === String(job.lease_instance_id) &&\n String(row.lease_attempt_id) === String(job.lease_attempt_id);\n}\n\nfunction exactTerminal(row, job, expected) {\n return exactLiveAttempt(row, job) &&\n String(row.state) === expected.state &&\n sameNullable(row.result_json, expected.result_json) &&\n sameNullable(row.error_json, expected.error_json) &&\n row.lease_owner == null &&\n row.lease_expires_at == null;\n}\n\nfunction leaseUnexpired(row, nowIso) {\n return !!row?.lease_expires_at && String(row.lease_expires_at) > String(nowIso);\n}\n\nfunction isExpiryUnknown(row) {\n if (!row || String(row.state) !== \"FAILED\" || row.result_json != null) return false;\n try {\n const e = JSON.parse(String(row.error_json || \"{}\"));\n return e?.classification === \"TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION\";\n } catch {\n return false;\n }\n}\n\nasync function exactReceipt(receipts, job, expectedEpoch, command, dispatchValue) {\n if (!Array.isArray(receipts) || receipts.length !== 1) return {ok:false, reason:receipts?.length > 1 ? \"AMBIGUOUS_MUTATION_RECEIPTS\" : \"MUTATION_RECEIPT_MISSING\"};\n const r = receipts[0];\n const payloadSha = await sha256TextV1(String(job.payload_json));\n if (String(r.job_id) !== String(job.id)) return {ok:false,reason:\"RECEIPT_JOB_MISMATCH\"};\n if (String(r.lease_attempt_id) !== String(job.lease_attempt_id)) return {ok:false,reason:\"RECEIPT_ATTEMPT_MISMATCH\"};\n if (String(r.lease_instance_id) !== String(job.lease_instance_id)) return {ok:false,reason:\"RECEIPT_INSTANCE_MISMATCH\"};\n if (String(r.lease_owner) !== String(job.lease_owner)) return {ok:false,reason:\"RECEIPT_OWNER_MISMATCH\"};\n if (Number(r.transport_lease_generation) !== Number(job.transport_lease_generation)) return {ok:false,reason:\"RECEIPT_GENERATION_MISMATCH\"};\n if (Number(r.authority_epoch) !== Number(expectedEpoch)) return {ok:false,reason:\"RECEIPT_AUTHORITY_EPOCH_MISMATCH\"};\n if (String(r.command) !== String(command)) return {ok:false,reason:\"RECEIPT_COMMAND_MISMATCH\"};\n if (String(r.payload_sha256) !== payloadSha) return {ok:false,reason:\"RECEIPT_PAYLOAD_MISMATCH\"};\n if (String(r.result_json) !== canonV1(dispatchValue)) return {ok:false,reason:\"RECEIPT_RESULT_MISMATCH\"};\n return {ok:true, receipt:r, payload_sha256:payloadSha};\n}\n\nasync function readOnlyStillFresh(command, preDispatchGeneration, deps) {\n if (!READ_ONLY_COMMANDS_V1.has(command)) return {ok:true};\n if (!Number.isInteger(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_PRE_DISPATCH_GENERATION_REQUIRED\"};\n const g = await deps.readCanonicalGeneration();\n if (Number(g) !== Number(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_CANONICAL_GENERATION_DRIFT\",expected:preDispatchGeneration,actual:Number(g)};\n return {ok:true};\n}\n\n/**\n * deps contract:\n * - readAuthority()\n * - readJob(id)\n * - readCanonicalGeneration()\n * - finishOncePreservingAttempt(job, expected) // exact attempt UPDATE; at most called twice total: initial + one retry\n * - readMutationReceipts(jobId, attemptId)\n * - finalizeExpiredMutationFromReceipt(job, expected, receipt)\n * - nowIso()\n *\n * No dispatch/re-dispatch function is accepted by this helper.\n */\nexport async function finalizeExactAttemptV1({\n job,\n expectedAuthorityEpoch,\n expectedAuthorityMode,\n command,\n dispatchOk,\n dispatchValue,\n preDispatchGeneration,\n deps,\n}) {\n const expected = expectedTerminal(dispatchOk, dispatchValue);\n const readOnly = READ_ONLY_COMMANDS_V1.has(command);\n const trace = [];\n let finishCalls = 0;\n\n const a0 = await deps.readAuthority();\n if (!authorityMatches(a0, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_PRE\",trace,finish_calls:finishCalls};\n }\n const fresh0 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh0.ok) return {...fresh0,trace,finish_calls:finishCalls};\n\n // Normal path. Candidate production finishOnce must preserve lease_instance_id and\n // lease_attempt_id on terminal rows so a client-unknown finish can be read back\n // as the exact attempt rather than merely the same job id.\n try {\n finishCalls++;\n const f = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_initial\",returned:f});\n if (f?.ok === true) {\n const rb = await deps.readJob(job.id);\n if (!exactTerminal(rb,job,expected)) return {ok:false,reason:\"FINISH_SUCCESS_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n return {ok:true,reconciled:false,path:\"INITIAL_FINISH\",trace,finish_calls:finishCalls};\n }\n trace.push({phase:\"finish_initial_nonok\",value:f});\n } catch (e) {\n trace.push({phase:\"finish_initial_throw\",error:errText(e)});\n }\n\n // Outcome-aware reconciliation begins. Re-read authority after the uncertain client outcome.\n const a1 = await deps.readAuthority();\n if (!authorityMatches(a1, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_RECONCILE\",trace,finish_calls:finishCalls};\n }\n const fresh1 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh1.ok) return {...fresh1,trace,finish_calls:finishCalls};\n\n let row = await deps.readJob(job.id);\n if (!row || !exactStaticJobBinding(row,job)) {\n return {ok:false,reason:\"QUEUE_JOB_BINDING_MISMATCH\",trace,finish_calls:finishCalls};\n }\n\n // Case A: UPDATE committed but client threw. Terminal readback itself proves completion,\n // but only because candidate finish preserves exact attempt identity.\n if (exactTerminal(row,job,expected)) {\n return {ok:true,reconciled:true,path:\"TERMINAL_EXACT_READBACK\",trace,finish_calls:finishCalls};\n }\n\n // Case B: UPDATE did not commit. Retry the exact finish at most once, only while this\n // exact attempt is still leased and unexpired.\n if (String(row.state) === \"LEASED\" && exactLiveAttempt(row,job) && String(row.lease_owner) === String(job.lease_owner) && leaseUnexpired(row,deps.nowIso())) {\n try {\n finishCalls++;\n const f2 = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_retry_once\",returned:f2});\n } catch (e) {\n trace.push({phase:\"finish_retry_once_throw\",error:errText(e)});\n }\n const fresh2 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh2.ok) return {...fresh2,trace,finish_calls:finishCalls};\n const rb2 = await deps.readJob(job.id);\n if (exactTerminal(rb2,job,expected)) {\n return {ok:true,reconciled:true,path:\"ONE_EXACT_FINISH_RETRY\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"ONE_FINISH_RETRY_EXHAUSTED\",trace,finish_calls:finishCalls};\n }\n\n // Read-only results may never be resurrected after lease expiry/reassignment, and they\n // may never cross canonical generation drift.\n if (readOnly) {\n return {ok:false,reason:\"READ_ONLY_RESULT_NOT_SAFE_TO_RECONCILE\",trace,finish_calls:finishCalls};\n }\n\n // A mutation receipt is not a license to reinterpret a still-LEASED row from another\n // attempt/instance. Receipt-bound recovery below is only for the exact known\n // expiry-terminalization state, never for a live/reassigned lease.\n if (String(row.state) === \"LEASED\") {\n if (!exactLiveAttempt(row,job)) {\n return {ok:false,reason:\"LIVE_ATTEMPT_IDENTITY_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"LEASED_ATTEMPT_EXPIRED_OR_UNSAFE_AFTER_ONE_RETRY\",trace,finish_calls:finishCalls};\n }\n\n // Case C: mutation dispatch is canonically known from the exact bound receipt.\n // This may repair the historical FAILED/OUTCOME_UNKNOWN transport row without\n // re-dispatching the canonical mutation.\n if (dispatchOk !== true) {\n return {ok:false,reason:\"MUTATION_DISPATCH_EXCEPTION_HAS_NO_SAFE_RECEIPT_ASSUMPTION\",trace,finish_calls:finishCalls};\n }\n const receipts = await deps.readMutationReceipts(job.id,job.lease_attempt_id);\n const rr = await exactReceipt(receipts,job,expectedAuthorityEpoch,command,dispatchValue);\n if (!rr.ok) return {...rr,trace,finish_calls:finishCalls};\n\n // Only the exact known expiry terminalization is repairable after expiry. Transport\n // generation equality proves no later lease generation was issued for this job.\n if (!isExpiryUnknown(row) || Number(row.transport_lease_generation) !== Number(job.transport_lease_generation)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_NOT_ELIGIBLE\",trace,finish_calls:finishCalls};\n }\n if (row.lease_owner != null || row.lease_expires_at != null) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_STILL_OWNED\",trace,finish_calls:finishCalls};\n }\n // Historical recovery cleared attempt/instance. If present, they must still match.\n if (row.lease_attempt_id != null && String(row.lease_attempt_id) !== String(job.lease_attempt_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_ATTEMPT_CONFLICT\",trace,finish_calls:finishCalls};\n }\n if (row.lease_instance_id != null && String(row.lease_instance_id) !== String(job.lease_instance_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_INSTANCE_CONFLICT\",trace,finish_calls:finishCalls};\n }\n\n const rec = await deps.finalizeExpiredMutationFromReceipt(job,expected,rr.receipt);\n trace.push({phase:\"receipt_bound_expiry_recovery\",returned:rec});\n const a2 = await deps.readAuthority();\n if (!authorityMatches(a2, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_POST_RECEIPT\",trace,finish_calls:finishCalls};\n }\n const rb3 = await deps.readJob(job.id);\n if (!exactTerminal(rb3,job,expected)) {\n return {ok:false,reason:\"RECEIPT_RECOVERY_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:true,reconciled:true,path:\"EXACT_MUTATION_RECEIPT_EXPIRY_RECOVERY\",trace,finish_calls:finishCalls};\n}\n`;\nlet resultFinalizationHelperV1Promise:Promise|null=null;\nasync function resultFinalizationHelperV1(){\n const h=await sha256Text(RESULT_FINALIZATION_HELPER_V1_SOURCE);\n if(h!==RESULT_FINALIZATION_HELPER_V1_SHA256)throw new Error(\"RESULT_FINALIZATION_HELPER_INTEGRITY_MISMATCH\");\n if(!resultFinalizationHelperV1Promise){\n resultFinalizationHelperV1Promise=import(\"data:text/javascript;charset=utf-8,\"+encodeURIComponent(RESULT_FINALIZATION_HELPER_V1_SOURCE));\n }\n return await resultFinalizationHelperV1Promise;\n}\n\nasync function canonicalAnchor(){\n const r:any=await sqlite.execute(\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const row:any=r.rows?.[0]??null;\n const g=Number(row?.generation),head=String(row?.event_head_hash??\"\");\n if(!Number.isInteger(g)||g<0||!/^[0-9a-f]{64}$/.test(head))throw new Error(\"CANONICAL_ANCHOR_UNAVAILABLE\");\n return {generation:g,event_head_hash:head};\n}\nasync function canonicalGeneration(){return (await canonicalAnchor()).generation;}\nasync function normalizedFinalizationAuthority(){\n const g:any=await admit();\n if(g?.ok===true)return {epoch:Number(g.epoch),writer:\"val_native\",mode:String(g.mode)};\n const a:any=g?.authority??await authority();\n return {epoch:Number(a?.epoch),writer:String(a?.writer??\"\"),mode:String(a?.mode)===\"PREPARED\"?\"PREPARED_READ_ONLY\":String(a?.mode??\"\")};\n}\n\nasync function emitRuntimeTick(){\n const a:any=await authority();\n if(!a||String(a.writer)!==\"val_native\"||![\"ACTIVE\",\"PREPARED\"].includes(String(a.mode))){\n return {ok:false,emitted:false,reason:\"VAL_NATIVE_NOT_SELECTED\",authority:a??null};\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNTIME_TICK_TABLE}(\n id TEXT PRIMARY KEY,\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n state TEXT NOT NULL,\n tick_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n metadata_json TEXT NOT NULL\n )`);\n const metadata=JSON.stringify({\n classification:\"NONAUTHORITY_EXECUTOR_RUNTIME_TICK\",\n grants_brain_authority:false,\n extends_canonical_lease:false,\n source:\"val_native_executor_prod.drain\"\n });\n await sqlite.execute({\n sql:`INSERT INTO ${RUNTIME_TICK_TABLE}(id,worker_id,instance_id,authority_epoch,state,tick_at,expires_at,metadata_json)\n VALUES('val-native-executor',?,?,?,'RUNNING',datetime('now'),datetime('now','+${RUNTIME_TICK_TTL_SECONDS} seconds'),?)\n ON CONFLICT(id) DO UPDATE SET\n worker_id=excluded.worker_id,\n instance_id=excluded.instance_id,\n authority_epoch=excluded.authority_epoch,\n state='RUNNING',\n tick_at=excluded.tick_at,\n expires_at=excluded.expires_at,\n metadata_json=excluded.metadata_json`,\n args:[WORKER,INSTANCE,Number(a.epoch),metadata]\n });\n return {ok:true,emitted:true,authority_epoch:Number(a.epoch),ttl_seconds:RUNTIME_TICK_TTL_SECONDS};\n}\nasync function admit(){\n const a:any=await authority();\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\",authority:null};\n if(String(a.writer)!==\"val_native\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n const mode=String(a.mode);\n if(mode===\"ACTIVE\")return {ok:true,epoch:Number(a.epoch),mode:\"ACTIVE\",authority:a};\n if(mode===\"PREPARED\")return {ok:true,epoch:Number(a.epoch),mode:\"PREPARED_READ_ONLY\",authority:a};\n return {ok:false,reason:\"AUTHORITY_MODE_NOT_ADMITTED\",authority:a};\n}\nconst ACQUIRE_RECONCILE_ATTEMPTS_R2=3;\ntype LeaseReconcileResultR2=\n | {kind:\"leased\";job:any;epoch:number;mode:string;acquisition_reconciled:true;acquisition_error:string}\n | {kind:\"none\";attempt_id:string}\n | {kind:\"outcome_unknown\";attempt_id:string;errors:string[]};\nexport async function reconcileExactLeaseAttemptR2(\n attempt:string,\n expectedEpoch:number,\n expectedMode:string,\n acquisitionError:unknown,\n):Promise{\n const errors:string[]=[];\n for(let i=0;i=1\n AND lease_expires_at>datetime('now')\n ORDER BY id`,args:[WORKER,INSTANCE,attempt]});\n const rows:any[]=r.rows||[];\n if(rows.length===0)return {kind:\"none\",attempt_id:attempt};\n if(rows.length!==1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,`ATTEMPT_CARDINALITY_CONFLICT_${rows.length}`]};\n }\n const job=rows[0];\n if(String(job.lease_instance_id)!==INSTANCE||String(job.lease_attempt_id)!==attempt||Number(job.transport_lease_generation)<1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,\"ATTEMPT_IDENTITY_POSTCONDITION_FAILED\"]};\n }\n return {\n kind:\"leased\",\n job,\n epoch:expectedEpoch,\n mode:expectedMode,\n acquisition_reconciled:true,\n acquisition_error:acquisitionError instanceof Error?acquisitionError.message:String(acquisitionError),\n };\n }catch(e){\n errors.push(e instanceof Error?e.message:String(e));\n }\n }\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors};\n}\nasync function recoverExpiredTransport(){\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const r:any=await tx.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at<=datetime('now') ORDER BY id`);\n const outcomes:any[]=[];\n for(const j of (r.rows||[])){\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION',\n 'receipt_policy','SIDE_RECEIPTS_DIAGNOSTIC_ONLY_NOT_COMPLETION_AUTHORITY',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner IS ? AND lease_instance_id IS ? AND lease_attempt_id IS ? AND transport_lease_generation=? AND lease_expires_at<=datetime('now')\n RETURNING id`,\n args:[j.id,j.lease_owner,j.lease_instance_id,j.lease_attempt_id,j.transport_lease_generation]});\n if((u.rows||[]).length)outcomes.push({id:j.id,state:\"FAILED\",reconciled_from_receipt:false,outcome_unknown:true});\n }\n await tx.commit();done=true;return{ok:true,outcomes};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function activeLeases(){\n const r:any=await sqlite.execute(`SELECT id,lease_owner,lease_instance_id,lease_attempt_id,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id`);\n return r.rows||[];\n}\nfunction atomicizeLeaseSql(sql:string){\n const setNeedle=`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')`;\n const retNeedle=\"RETURNING id,op,payload_json,priority,lease_expires_at\";\n if(sql.split(setNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_SET_SHAPE_DRIFT\");\n if(sql.split(retNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_RETURNING_SHAPE_DRIFT\");\n return sql.replace(setNeedle,`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')`)\n .replace(retNeedle,\"RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\");\n}\nasync function leaseOne(){\n const gate=await admit();if(!gate.ok)return {kind:\"fenced\",gate} as const;\n await recoverExpiredTransport();\n const active=await activeLeases();\n if(active.length>1)return {kind:\"conflict\",active} as const;\n if(active.length===1)return {kind:\"busy\",active:active[0]} as const;\n const preparedReadOnly=gate.mode===\"PREPARED_READ_ONLY\";\n const attempt=crypto.randomUUID();\n const expectedMode=String(gate.mode);\n let core:any;\n try{\n if(!preparedReadOnly&&!EMERGENCY_MUTATIONS_FROZEN&&PRELEASE_READ_COALESCE_V1_ENABLED){\n const acq:any=await acquireWithPreleaseRankReceiptV1(sqlite,{worker:WORKER,instance:INSTANCE,attempt});\n if(acq.kind===\"leased\"){\n const j:any=acq.job;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode,prelease_receipt:{rank0:acq.rank0,rank1:acq.rank1,rank_snapshot_sha256:acq.rank_snapshot_sha256}} as const;\n }\n return acq;\n }\n core=preparedReadOnly\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${JOB_TABLE} j\n WHERE j.state='READY' AND j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND 120\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE} x\n WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now')\n )\n ORDER BY\n CASE json_extract(j.payload_json,'$.args[0]')\n WHEN 'status' THEN 0\n WHEN 'verify-chain' THEN 1\n WHEN 'verify-claim-graph' THEN 2\n ELSE 3\n END,\n CASE WHEN j.priority>1000000000 THEN 1000000000 ELSE j.priority END DESC,\n j.created_at,j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt]})\n : EMERGENCY_MUTATIONS_FROZEN\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at>datetime('now')\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt,EMERGENCY_MUTATION_CANARY_JOB_ID,WORKER]})\n : await sqlite.execute({sql:atomicizeLeaseSql(leaseOneSql(JOB_TABLE)),args:[WORKER,INSTANCE,attempt,WORKER]});\n }catch(e){\n const rr=await reconcileExactLeaseAttemptR2(attempt,gate.epoch,expectedMode,e);\n if(rr.kind===\"leased\")return rr;\n if(rr.kind===\"none\")return {\n kind:\"acquisition_failed_no_bound_lease\",\n attempt_id:attempt,\n reason:e instanceof Error?e.message:String(e),\n } as const;\n return {kind:\"acquisition_outcome_unknown\",attempt_id:attempt,errors:rr.errors} as const;\n }\n const j:any=core.rows?.[0]??null;if(!j)return {kind:\"empty\"} as const;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode} as const;\n}\nasync function readQueueJob(id:string){\n const r:any=await sqlite.execute({sql:`SELECT * FROM ${JOB_TABLE} WHERE id=?`,args:[id]});\n return r.rows?.[0]??null;\n}\nasync function finishOncePreservingAttempt(job:any,expected:any){\n if(PRELEASE_READ_COALESCE_V1_ENABLED&&expected?.state===\"COMPLETE\"&&expected?.error_json==null&&typeof expected?.result_json===\"string\"&&classifyValNativeCoalesceResultV1(expected.result_json)){\n return await finalizeLeaderOptionalPreleaseFollowerV1(sqlite,{job:{...job,lease_owner:String(job.lease_owner||WORKER)},expected});\n }\n const r:any=await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,job.id,String(job.lease_owner||WORKER),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(r.rows||[]).length)return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"};\n return {ok:true,id:job.id,state:String(expected.state)};\n}\nasync function readMutationReceiptsExact(jobId:string,attemptId:string){\n await ensureMutationReceiptTable();\n const r:any=await sqlite.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE}\n WHERE job_id=? AND lease_attempt_id=?\n ORDER BY committed_at,job_id,lease_attempt_id`,args:[jobId,attemptId]});\n return r.rows||[];\n}\nfunction sameReceiptRow(a:any,b:any){\n const keys=[\"job_id\",\"lease_attempt_id\",\"lease_instance_id\",\"lease_owner\",\"transport_lease_generation\",\"authority_epoch\",\"command\",\"payload_sha256\",\"committed_generation\",\"event_head_hash\",\"result_json\",\"committed_at\"];\n return keys.every(k=>String(a?.[k]??\"\")===String(b?.[k]??\"\"));\n}\nasync function finalizeExpiredMutationFromReceiptExact(job:any,expected:any,receipt:any){\n await ensureMutationReceiptTable();\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const rr:any=await tx.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const rows:any[]=rr.rows||[];\n if(rows.length!==1||!sameReceiptRow(rows[0],receipt)){\n await tx.rollback();done=true;\n return {ok:false,reason:rows.length>1?\"AMBIGUOUS_MUTATION_RECEIPTS\":\"MUTATION_RECEIPT_CHANGED_OR_MISSING\"};\n }\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,\n lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='FAILED' AND op=? AND payload_json=? AND transport_lease_generation=?\n AND result_json IS NULL AND lease_owner IS NULL AND lease_expires_at IS NULL\n AND (lease_instance_id IS NULL OR lease_instance_id=?)\n AND (lease_attempt_id IS NULL OR lease_attempt_id=?)\n AND json_valid(error_json)=1\n AND json_extract(error_json,'$.classification')='TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION'\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,String(job.lease_instance_id),String(job.lease_attempt_id),\n String(job.id),String(job.op),String(job.payload_json),Number(job.transport_lease_generation),String(job.lease_instance_id),String(job.lease_attempt_id)]});\n if((u.rows||[]).length!==1){\n await tx.rollback();done=true;\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_UPDATE_REJECTED\"};\n }\n await tx.commit();done=true;\n return {ok:true,receipt_job_id:String(receipt.job_id)};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function finalizeJobExactAttempt(job:any,epoch:number,mode:string,command:string,dispatchOk:boolean,dispatchValue:any,preDispatchGeneration:number|undefined){\n const helper:any=await resultFinalizationHelperV1();\n const boundJob={...job,lease_owner:WORKER,lease_instance_id:String(job.lease_instance_id),lease_attempt_id:String(job.lease_attempt_id)};\n return await helper.finalizeExactAttemptV1({\n job:boundJob,\n expectedAuthorityEpoch:Number(epoch),\n expectedAuthorityMode:String(mode),\n command:String(command),\n dispatchOk:dispatchOk===true,\n dispatchValue,\n preDispatchGeneration,\n deps:{\n readAuthority:normalizedFinalizationAuthority,\n readJob:readQueueJob,\n readCanonicalGeneration:canonicalGeneration,\n finishOncePreservingAttempt,\n readMutationReceipts:readMutationReceiptsExact,\n finalizeExpiredMutationFromReceipt:finalizeExpiredMutationFromReceiptExact,\n nowIso:()=>new Date().toISOString().replace(\"Z\",\"+00:00\")\n }\n });\n}\nconst CHAIN_FAILURE_READ_ONLY=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; kernel allowlist still fences every unqualified mutator.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nfunction brainCommand(raw:string){\n try{const p=JSON.parse(raw);return Array.isArray(p?.args)?String(p.args[0]||\"\"):\"\"}catch{return \"\"}\n}\nasync function chainCircuitBreaker(raw:string,jobId:string){\n const command=brainCommand(raw);\n if(CHAIN_FAILURE_READ_ONLY.has(command))return {allow:true,command,integrity:null};\n const emergencyCanary=EMERGENCY_MUTATIONS_FROZEN&&jobId===EMERGENCY_MUTATION_CANARY_JOB_ID&&command===\"register-agent\";\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary)return {allow:false,command,integrity:{ok:false,reason:\"EPOCH2_MUTATIONS_EMERGENCY_FROZEN_PENDING_ATOMICITY_REPAIR\"}};\n let chain:any,graph:any;\n try{chain=await verifyBrainChain()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CHAIN_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n if(chain?.ok!==true)return {allow:false,command,integrity:{chain,graph:null}};\n try{graph=await verifyBrainClaimGraph()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CLAIM_GRAPH_EXCEPTION\",detail:e instanceof Error?e.message:String(e),chain}}}\n if(graph?.ok!==true)return {allow:false,command,integrity:{chain,graph}};\n return {allow:true,command,integrity:{chain,graph}};\n}\nfunction parseArr(v:any){try{const x=JSON.parse(String(v??\"[]\"));return Array.isArray(x)?x:[]}catch{return []}}\nasync function localCommitSnapshot(taskId:string,agent:string){\n const t:any=(await sqlite.execute({sql:`SELECT id,workstream,state,lease_owner,lease_generation,lease_expires_at,context_manifest,success_condition,decision_value,depends_json,requires_json,writes_json,guards_json\n FROM brainvn_tasks WHERE id=?`,args:[taskId]})).rows?.[0]??null;\n if(!t)return{ok:false,reason:\"TASK_MISSING\"};\n if(String(t.state)!==\"LEASED\"||String(t.lease_owner)!==agent)return{ok:false,reason:\"LEASE_CHANGED\",task:t};\n if(t.lease_expires_at&&String(t.lease_expires_at)<=new Date().toISOString().replace(\"Z\",\"+00:00\"))return{ok:false,reason:\"LEASE_EXPIRED\",task:t};\n const deps=parseArr(t.depends_json),guards=parseArr(t.guards_json);\n const depRows:any[]=[];\n for(const id of deps){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(id)]})).rows?.[0]??null;\n depRows.push(r??{id:String(id),state:\"MISSING\"});\n }\n const guardRows:any[]=[];\n let retryGuardSnapshotComplete=true;\n for(const g of guards){\n if(g?.type===\"task_complete\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),state:\"MISSING\"}});\n }else if(g?.type===\"claim_verified\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,status,updated_at FROM brainvn_claims WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),status:\"MISSING\"}});\n }else{\n retryGuardSnapshotComplete=false;\n guardRows.push({guard:g,resolved:null});\n }\n }\n const ws:any=(await sqlite.execute({sql:\"SELECT id,mission,verified_state FROM brainvn_workstreams WHERE id=?\",args:[String(t.workstream)]})).rows?.[0]??null;\n const stable={\n task:{id:t.id,workstream:t.workstream,state:t.state,lease_owner:t.lease_owner,lease_generation:t.lease_generation,\n context_manifest:t.context_manifest,success_condition:t.success_condition,decision_value:t.decision_value,\n depends_json:t.depends_json,requires_json:t.requires_json,writes_json:t.writes_json,guards_json:t.guards_json},\n dependencies:depRows,guards:guardRows,workstream_semantics:ws\n };\n return{ok:true,stable,lease_expires_at:t.lease_expires_at,workstream:String(t.workstream),retry_guard_snapshot_complete:retryGuardSnapshotComplete};\n}\nfunction sameSnapshot(a:any,b:any){return JSON.stringify(a?.stable)===JSON.stringify(b?.stable)}\nfunction mutationFields(args:any[]){\n let agent=\"\",task=\"\";\n for(let i=1;i{\n let found:number|null=null;\n for(let i=1;iJSON.stringify(k)+\":\"+cohortCanon(x[k])).join(\",\")+\"}\";\n}\nfunction cohortStrictJson(s:any,kind:string){\n try{return JSON.parse(String(s))}\n catch{throw new Error(\"COHORT_BAD_JSON_\"+kind)}\n}\nfunction cohortStrictObjectJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!v||typeof v!==\"object\"||Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_OBJECT\");\n return v;\n}\nfunction cohortStrictListJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_LIST\");\n return v;\n}\nfunction cohortStrictStringListJson(s:any,kind:string){\n const v=cohortStrictListJson(s,kind);\n if(v.some((x:any)=>typeof x!==\"string\"||!x))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_STRING_LIST\");\n return v;\n}\nfunction cohortCleanCaps(x:any){\n if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v))throw new Error(\"COHORT_BAD_CAPS\");\n return [...new Set(x)].sort();\n}\nfunction cohortFlagMap(args:any[],start:number,allowed:Set){\n if(!Array.isArray(args)||args.some(x=>typeof x!==\"string\"))return null;\n if((args.length-start)%2!==0)return null;\n const out:any={};\n for(let i=start;i=args.length)return null;\n const name=k.slice(2);\n if(!allowed.has(name)||Object.prototype.hasOwnProperty.call(out,name))return null;\n out[name]=String(args[i+1]);\n }\n return out;\n}\nfunction cohortExactEnvelope(row:any){\n if(String(row?.op)!==\"brain\")return null;\n let q:any;\n try{q=JSON.parse(String(row.payload_json))}\n catch{return null}\n if(!q||typeof q!==\"object\"||Array.isArray(q))return null;\n const keys=Object.keys(q).sort();\n if(keys.length!==2||keys[0]!==\"args\"||keys[1]!==\"timeout\")return null;\n if(!Array.isArray(q.args)||!Number.isInteger(q.timeout)||q.timeout<1||q.timeout>120)return null;\n return q;\n}\nfunction cohortParseRegister(row:any){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"register-agent\"||typeof q.args[1]!==\"string\"||!q.args[1])return null;\n const f=cohortFlagMap(q.args,2,new Set([\"workstream\",\"role\",\"type\",\"capabilities\"]));if(!f)return null;\n if(f.workstream!==\"global\"||!f.role||f.type!==\"CHAT_UNPROVEN\"||typeof f.capabilities!==\"string\")return null;\n let caps:any;try{caps=cohortCleanCaps(JSON.parse(f.capabilities))}catch{return null}\n return {row,q,member:{id:String(q.args[1]),workstream:\"global\",role:String(f.role),type:\"CHAT_UNPROVEN\",parent:null,capabilities:caps}};\n}\nfunction cohortParseClaim(row:any,agentId:string){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"claim\")return null;\n const f=cohortFlagMap(q.args,1,new Set([\"agent\",\"mode\",\"lease-seconds\",\"constitution-version\",\"constitution-sha256\",\"registry-version\"]));if(!f)return null;\n if(f.agent!==agentId)return null;\n if(f.mode!==undefined&&f.mode!==\"INTERACTIVE\")return null;\n if(f[\"lease-seconds\"]!==undefined&&f[\"lease-seconds\"]!==\"1800\")return null;\n return {row,q};\n}\nfunction cohortIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\"prevent_self_review\",\"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n return ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\";\n}\nasync function cohortTxRows(tx:any,sql:string,args:any[]=[]){\n const r:any=await tx.execute({sql,args});return r.rows||[];\n}\nasync function cohortTxOne(tx:any,sql:string,args:any[]=[]){\n return (await cohortTxRows(tx,sql,args))[0]??null;\n}\nasync function cohortSnapshot(tx:any){\n return {\n workstreams:await cohortTxRows(tx,\"SELECT * FROM brainvn_workstreams ORDER BY id\"),\n agents:await cohortTxRows(tx,\"SELECT * FROM brainvn_agents ORDER BY id\"),\n tasks:await cohortTxRows(tx,\"SELECT * FROM brainvn_tasks ORDER BY id\"),\n claims:await cohortTxRows(tx,\"SELECT * FROM brainvn_claims ORDER BY id\"),\n deps:await cohortTxRows(tx,\"SELECT * FROM brainvn_claim_deps ORDER BY parent_claim,child_claim\"),\n artifacts:await cohortTxRows(tx,\"SELECT * FROM brainvn_artifacts ORDER BY sha256\")\n };\n}\nfunction cohortParseTask(t:any){\n return {\n row:t,\n ctx:cohortStrictObjectJson(t.context_manifest,\"CTX\"),\n req:cohortStrictStringListJson(t.requires_json,\"REQ\"),\n deps:cohortStrictListJson(t.depends_json,\"DEPS\"),\n guards:cohortStrictListJson(t.guards_json,\"GUARDS\"),\n writes:cohortStrictStringListJson(t.writes_json,\"WRITES\")\n };\n}\nfunction cohortOverlap(a:string[],b:string[]){const B=new Set(b);return a.some(x=>B.has(x))}\nasync function cohortActivationOk(tx:any){\n const meta:any=await cohortTxOne(tx,\"SELECT predecessor_event_count FROM brainvn_epoch_meta WHERE id=1\");\n const t:any=await cohortTxOne(tx,\"SELECT state,result_event_id FROM brainvn_tasks WHERE id=?\",[COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK]);\n if(!meta||!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return false;\n const localSeq=Number(t.result_event_id)-Number(meta.predecessor_event_count);\n if(!Number.isInteger(localSeq)||localSeq<1)return false;\n const ev:any=await cohortTxOne(tx,\"SELECT agent_id,type,task_id FROM brainvn_epoch_events WHERE local_seq=?\",[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK||!ev.agent_id)return false;\n const a:any=await cohortTxOne(tx,\"SELECT type FROM brainvn_agents WHERE id=?\",[String(ev.agent_id)]);\n return !!a&&String(a.type)!==\"CHAT_UNPROVEN\";\n}\nfunction cohortOrderedReadySql(){\n const raw=leaseOneSql(JOB_TABLE);\n const start=raw.indexOf(\"SELECT j.id FROM \");\n const limit=raw.indexOf(\"LIMIT 1\",start);\n if(start<0||limit<0)throw new Error(\"COHORT_LEASE_ORDER_SHAPE_DRIFT\");\n let inner=raw.slice(start,limit)+\"LIMIT \"+COHORT_ADMISSION_FASTPATH_V3R2R1_SCAN_JOBS;\n inner=inner.replace(\"SELECT j.id FROM \",\"SELECT j.rowid AS queue_rowid,j.* FROM \");\n const qCount=(inner.match(/\\?/g)||[]).length;\n if(qCount!==1)throw new Error(\"COHORT_LEASE_ORDER_PLACEHOLDER_DRIFT_\"+qCount);\n return inner;\n}\nasync function cohortBaseReceipt(){\n const chain:any=await verifyBrainChain();\n if(chain?.ok!==true)return {ok:false,reason:\"CHAIN_NOT_VERIFIED\",chain};\n const graph:any=await verifyBrainClaimGraph();\n if(graph?.ok!==true)return {ok:false,reason:\"CLAIM_GRAPH_NOT_VERIFIED\",graph};\n const tx:any=await (sqlite as any).transaction(\"read\");let done=false;\n try{\n const meta:any=await cohortTxOne(tx,\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const authority:any=await cohortTxOne(tx,\"SELECT epoch,writer,mode,source_generation,source_head FROM \"+AUTH_TABLE+\" WHERE id=1\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||Number(meta.generation)!==Number(chain.generation)||String(meta.event_head_hash)!==String(chain.stored_head)){\n await tx.rollback();done=true;return {ok:false,reason:\"CHAIN_RECEIPT_STALE\"};\n }\n if(!authority||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n await tx.rollback();done=true;return {ok:false,reason:\"AUTHORITY_NOT_ACTIVE\"};\n }\n await tx.commit();done=true;\n return {ok:true,generation:Number(meta.generation),head:String(meta.event_head_hash),admission_digest:digest,\n authority:{epoch:Number(authority.epoch),writer:String(authority.writer),mode:String(authority.mode),\n source_generation:Number(authority.source_generation),source_head:String(authority.source_head)}};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}return {ok:false,reason:e instanceof Error?e.message:String(e)}}\n}\nfunction cohortEventBody(e:any){\n return cohortCanon({event_uuid:e.event_uuid,ts:e.ts,workstream:e.workstream,agent_id:e.agent_id,task_id:e.task_id,type:e.type,payload:e.payload,prev_hash:e.prev_hash});\n}\nasync function cohortEventHash(e:any){return await sha256Text(cohortEventBody(e))}\nfunction cohortNow(ms=Date.now()){return new Date(ms).toISOString().replace(\"Z\",\"+00:00\")}\nasync function tryCohortAdmissionFastpathV3R2R1(maxPairs:number){\n if(!COHORT_ADMISSION_FASTPATH_V3R2R1_ENABLED||maxPairsdatetime('now') ORDER BY id LIMIT 2\");\n if(activeInside.length){await tx.rollback();done=true;return {kind:\"not_applicable\"} as const}\n const meta:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_epoch_meta WHERE id=1\");\n const ws:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_workstreams WHERE id='global'\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||!ws||Number(meta.generation)!==Number(base.generation)||String(meta.event_head_hash)!==String(base.head)||digest!==String(base.admission_digest)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_BASE_DRIFT\"} as const;\n }\n if(!(await cohortActivationOk(tx))){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_ACTIVATION_NOT_VERIFIED\"} as const;\n }\n const ordered:any[]=await cohortTxRows(tx,cohortOrderedReadySql(),[WORKER]);\n const pairs:any[]=[];const seen=new Set();\n const pairCap=Math.min(COHORT_ADMISSION_FASTPATH_V3R2R1_MAX_PAIRS,maxPairs);\n for(let i=0;i+1[String(a.id),a]));\n for(const p of pairs)if(existing.has(p.reg.member.id)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_EXISTING_AGENT\"} as const;\n }\n let ready:any[],leased:any[];\n try{\n ready=state.tasks.filter((t:any)=>String(t.workstream)===\"global\"&&String(t.state)===\"READY\")\n .sort((a:any,b:any)=>Number(b.priority)-Number(a.priority)||String(a.id).localeCompare(String(b.id)))\n .map((t:any)=>cohortParseTask(t));\n leased=state.tasks.filter((t:any)=>String(t.state)===\"LEASED\").map((t:any)=>cohortParseTask(t));\n }catch{\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_SCHEDULER_SHAPE_FALLBACK\"} as const;\n }\n const used=new Set(),activeWrites:string[][]=leased.map((p:any)=>p.writes),assignments:any[]=[];\n for(const p of pairs){\n const m=p.reg.member,C=new Set(m.capabilities);let chosen:any=null;\n for(const t0 of ready){\n const t=t0.row;\n if(used.has(String(t.id)))continue;\n if(!t.dedupe_key)continue;\n if(t.assigned_agent!==null&&String(t.assigned_agent)!==m.id)continue;\n if(t0.ctx.execution_allowed===false)continue;\n const sensitive=cohortIndependenceSensitive(new Set(t0.req),t0.ctx);\n if(sensitive&&(m.type===\"CHAT_UNPROVEN\"||COHORT_EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true))continue;\n if(t0.req.some((x:string)=>COHORT_NON_AGENT_CAPS.has(x)))continue;\n if(t0.req.some((x:string)=>!C.has(x)))continue;\n if(t0.deps.length||t0.guards.length){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_DYNAMIC_CAUSAL_FALLBACK\"} as const;\n }\n if(activeWrites.some((x:string[])=>cohortOverlap(t0.writes,x)))continue;\n chosen=t0;used.add(String(t.id));activeWrites.push(t0.writes);break;\n }\n if(!chosen){await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_NO_READY_FALLBACK\"} as const}\n assignments.push({pair:p,member:m,task:chosen});\n }\n\n const queueAttempts:any[]=[];\n for(const a of assignments){\n for(const kind of [\"reg\",\"claim\"]){\n const qr=a.pair[kind].row,attempt=crypto.randomUUID();\n const u:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+\"+LEASE_SECONDS+\" seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now') WHERE rowid=? AND id=? AND state='READY' AND op=? AND payload_json=? RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\",\n args:[WORKER,INSTANCE,attempt,Number(qr.queue_rowid),String(qr.id),String(qr.op),String(qr.payload_json)]});\n const row:any=u.rows?.[0]??null;if(!row)throw new Error(\"COHORT_QUEUE_CAS_FAILED_\"+String(qr.id));\n queueAttempts.push({...row,kind,agent_id:a.member.id});\n }\n }\n\n const startGen=Number(meta.generation),startHead=String(meta.event_head_hash);\n let g=startGen,head=startHead;\n const maxSeq:any=await cohortTxOne(tx,\"SELECT COALESCE(MAX(local_seq),0) n FROM brainvn_epoch_events\");\n let seq=Number(maxSeq?.n??0);\n const events:any[]=[],agents:any[]=[],taskUpdates:any[]=[],results:any[]=[];\n const baseMs=Date.now();\n for(let i=0;iArray.from({length:count},()=>(\"(\" + Array.from({length:n},()=>\"?\").join(\",\") + \")\")).join(\",\");\n const aArgs:any[]=[];for(const a of agents)aArgs.push(a.id,a.parent_id,a.type,a.workstream,a.role,a.status,a.boot_generation,a.last_generation,a.last_seen,a.capabilities_json);\n await tx.execute({sql:\"INSERT INTO brainvn_agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES \"+valueRows(10,agents.length),args:aArgs});\n const taskIds=taskUpdates.map(x=>x.id);\n const ownerCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),genCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),expCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),updCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \");\n const tArgs:any[]=[];for(const t of taskUpdates)tArgs.push(t.id,t.owner);for(const t of taskUpdates)tArgs.push(t.id,t.lease_generation);for(const t of taskUpdates)tArgs.push(t.id,t.lease_expires_at);for(const t of taskUpdates)tArgs.push(t.id,t.updated_at);tArgs.push(...taskIds);\n const tu:any=await tx.execute({sql:\"UPDATE brainvn_tasks SET state='LEASED',lease_owner=CASE id \"+ownerCase+\" END,lease_mode='INTERACTIVE',lease_generation=CASE id \"+genCase+\" END,lease_expires_at=CASE id \"+expCase+\" END,updated_at=CASE id \"+updCase+\" END WHERE id IN (\"+taskIds.map(()=>\"?\").join(\",\")+\") AND state='READY' RETURNING id\",args:tArgs});\n if((tu.rows||[]).length!==taskUpdates.length)throw new Error(\"COHORT_TASK_BULK_CAS_MISMATCH\");\n const eArgs:any[]=[];for(const e of events)eArgs.push(e.local_seq,e.event_uuid,e.ts,e.workstream,e.agent_id,e.task_id,e.type,e.payload_json,e.prev_hash,e.event_hash,e.transaction_generation);\n await tx.execute({sql:\"INSERT INTO brainvn_epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation) VALUES \"+valueRows(11,events.length),args:eArgs});\n const mu:any=await tx.execute({sql:\"UPDATE brainvn_epoch_meta SET generation=?,event_head_hash=?,new_event_count=new_event_count+? WHERE id=1 AND generation=? AND event_head_hash=? RETURNING generation\",args:[g,head,events.length,startGen,startHead]});\n if(!(mu.rows||[]).length)throw new Error(\"COHORT_META_CAS_MISMATCH\");\n await tx.execute({sql:\"UPDATE brainvn_workstreams SET head_generation=?,updated_at=? WHERE id='global'\",args:[g,cohortNow()]});\n\n const byAgent=new Map(results.map(x=>[x.agent_id,x]));\n const outputItems:any[]=[];\n for(const q of queueAttempts){\n const rr:any=byAgent.get(q.agent_id),result=q.kind===\"reg\"?rr.regResult:rr.claimResult;\n const committedGeneration=q.kind===\"reg\"?rr.regGeneration:rr.claimGeneration;\n const committedHead=q.kind===\"reg\"?rr.regHead:rr.claimHead;\n const committedAt=q.kind===\"reg\"?rr.regTs:rr.claimTs;\n const payloadSha=await sha256Text(String(q.payload_json));\n await tx.execute({sql:\"INSERT INTO \"+MUTATION_RECEIPT_TABLE+\"(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\",\n args:[String(q.id),String(q.lease_attempt_id),String(q.lease_instance_id),WORKER,Number(q.transport_lease_generation),Number(authority.epoch),\n q.kind===\"reg\"?\"register-agent\":\"claim\",payloadSha,committedGeneration,committedHead,cohortCanon(result),committedAt]});\n const fq:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? RETURNING id,state\",\n args:[legacyEnvelope(result),String(q.id),WORKER,String(q.lease_instance_id),String(q.lease_attempt_id),Number(q.transport_lease_generation),String(q.op),String(q.payload_json)]});\n if((fq.rows||[]).length!==1)throw new Error(\"COHORT_QUEUE_FINALIZE_CAS_FAILED_\"+String(q.id));\n outputItems.push({id:String(q.id),transport_lease_generation:Number(q.transport_lease_generation),attempt_id:String(q.lease_attempt_id),\n dispatch_ok:true,result,finish:{ok:true,id:String(q.id),state:\"COMPLETE\",path:\"COHORT_ATOMIC_SAME_DB\"},\n cohort_fastpath:{schema:\"COHORT_ADMISSION_FASTPATH_V3R2R1_PRODUCTION_V1\",candidate_sha256:COHORT_ADMISSION_FASTPATH_V3R2R1_CANDIDATE_SHA256,\n pair_count:assignments.length,atomic_same_db:true,serial_pairwise_prefix:true}});\n }\n\n await tx.commit();done=true;\n const postChain:any=await verifyBrainChain(),postGraph:any=await verifyBrainClaimGraph();\n return {kind:\"completed\",items:outputItems,pairs:assignments.length,post_integrity:{chain_ok:postChain?.ok===true,claim_graph_ok:postGraph?.ok===true,\n generation:postChain?.generation,head:postChain?.stored_head},base_generation:startGen,post_generation:g} as const;\n }catch(e){\n if(!done){try{await tx.rollback()}catch{}}\n return {kind:\"not_applicable\",reason:e instanceof Error?e.message:String(e)} as const;\n }\n}\n\nasync function executeJob(job:any,epoch:number){\n const raw=String(job.payload_json);\n const fallbackCommand=brainCommand(raw);\n let command=fallbackCommand;\n let preDispatchGeneration:number|undefined=undefined;\n if(String(job.op)!==\"brain\")return {ok:false,value:{classification:\"VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP\",op:String(job.op)},command,preDispatchGeneration};\n try{\n const gate=await chainCircuitBreaker(raw,String(job.id));\n command=String(gate.command||fallbackCommand||\"\");\n if(!gate.allow)return {ok:false,value:{\n classification:\"VAL_NATIVE_CHAIN_INTEGRITY_CIRCUIT_BREAKER\",\n command:command||\"UNKNOWN\",\n integrity:gate.integrity,\n retry_policy:\"RESTORE_VERIFIED_CHAIN_THEN_SUBMIT_NEW_JOB_ID\",\n canonical_dispatch_performed:false\n },command,preDispatchGeneration};\n if(CHAIN_FAILURE_READ_ONLY.has(command))preDispatchGeneration=await canonicalGeneration();\n const value=await dispatchWithStableMutationRetry(raw,boundTransportContext(job,epoch));\n return {ok:true,value,command,preDispatchGeneration};\n }catch(e){\n return {ok:false,value:{type:e instanceof Error?e.name:\"Error\",detail:e instanceof Error?e.message:String(e)},command,preDispatchGeneration};\n }\n}\nexport async function drain(maxJobs=32){\n const started=new Date().toISOString(),items:any[]=[];\n let runtime_tick:any=null;\n try{runtime_tick=await emitRuntimeTick();}\n catch(e){runtime_tick={ok:false,emitted:false,reason:\"RUNTIME_TICK_WRITE_FAILED\",detail:e instanceof Error?e.message:String(e)};}\n while(items.length=COHORT_ADMISSION_FASTPATH_V3R2R1_MIN_PAIRS*2){\n const cohort:any=await tryCohortAdmissionFastpathV3R2R1(Math.floor(remaining/2));\n if(cohort.kind===\"completed\"){\n items.push(...cohort.items);\n if(cohort.post_integrity?.chain_ok!==true||cohort.post_integrity?.claim_graph_ok!==true){\n return {ok:false,started,finished:new Date().toISOString(),runtime_tick,\n stop:{kind:\"cohort_post_integrity_failed\",post_integrity:cohort.post_integrity},processed:items.length,items};\n }\n continue;\n }\n }\n const l:any=await leaseOne();\n if(l.kind!==\"leased\"){\n const acquisitionFault=l.kind===\"acquisition_failed_no_bound_lease\"||l.kind===\"acquisition_outcome_unknown\";\n return {ok:!acquisitionFault&&l.kind!==\"conflict\"&&l.kind!==\"fenced\",started,finished:new Date().toISOString(),runtime_tick,stop:l,processed:items.length,items};\n }\n const ex=await executeJob(l.job,l.epoch);\n const fin=await finalizeJobExactAttempt(l.job,l.epoch,String(l.mode),String(ex.command||brainCommand(String(l.job.payload_json))),ex.ok,ex.value,ex.preDispatchGeneration);\n items.push({id:l.job.id,transport_lease_generation:l.job.transport_lease_generation,attempt_id:l.job.lease_attempt_id,dispatch_ok:ex.ok,result:ex.value,finish:fin});\n if(!fin.ok)return {ok:false,started,finished:new Date().toISOString(),runtime_tick,stop:fin,processed:items.length,items};\n }\n return {ok:true,started,finished:new Date().toISOString(),runtime_tick,stop:{kind:\"max_jobs\"},processed:items.length,items};\n}\nexport default drain;\n","createdAt",["D",1789422470876],"branchVersion","branchId","1883f527-bdaf-4d99-8f65-b01cefc9df05","id","0a88ec41-dc1d-4090-88ae-aece799e8aaa","brain-x7q4-f8k2",["D",1789422310520],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Isolated candidate-only Brain uniqueness rebase","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","01a0a1eb-09e7-749d-853a-facbefc775a1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","0a88ec41dc1d409088aeaece799e8aaa","tursoHostname","0a88ec41dc1d409088aeaece799e8aaa-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789522252250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",52,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":255,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":256,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":257,"_82":258,"_84":259,"_86":24},"tree",[214,215,216,217,218,219,220,221,222,223],"files",[214,215,216,217,218,219,220,221,222,223],"counts",{"_204":61,"_205":185,"_206":61,"_207":208,"_209":210},"contents",[129,130,131,132,133,134,135,136,137,138],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":201,"_31":27,"_29":30,"_142":-5,"_39":40,"_38":14,"_144":57,"_36":202,"_13":61,"_32":33,"_34":35,"_23":24,"_147":-5,"_26":203},{"_41":195,"_31":196,"_29":197,"_142":-5,"_39":40,"_38":198,"_144":57,"_36":199,"_13":61,"_32":33,"_34":146,"_23":24,"_147":-5,"_26":200},{"_41":189,"_31":190,"_29":191,"_142":-5,"_39":40,"_38":143,"_144":57,"_36":192,"_13":61,"_32":20,"_34":193,"_23":24,"_147":-5,"_26":194},{"_41":182,"_31":183,"_29":184,"_142":-5,"_39":40,"_38":185,"_144":57,"_36":186,"_13":61,"_32":20,"_34":187,"_23":24,"_147":-5,"_26":188},{"_41":175,"_31":176,"_29":177,"_142":-5,"_39":40,"_38":178,"_144":57,"_36":179,"_13":61,"_32":33,"_34":180,"_23":24,"_147":-5,"_26":181},{"_41":168,"_31":169,"_29":170,"_142":-5,"_39":40,"_38":171,"_144":57,"_36":172,"_13":61,"_32":33,"_34":173,"_23":24,"_147":-5,"_26":174},{"_41":161,"_31":162,"_29":163,"_142":-5,"_39":40,"_38":164,"_144":57,"_36":165,"_13":61,"_32":33,"_34":166,"_23":24,"_147":-5,"_26":167},{"_41":154,"_31":155,"_29":156,"_142":-5,"_39":40,"_38":157,"_144":57,"_36":158,"_13":61,"_32":33,"_34":159,"_23":24,"_147":-5,"_26":160},{"_41":149,"_31":150,"_29":151,"_142":-5,"_39":40,"_38":143,"_144":24,"_36":152,"_13":61,"_32":33,"_34":35,"_23":24,"_147":-5,"_26":153},{"_41":139,"_31":140,"_29":141,"_142":-5,"_39":40,"_38":143,"_144":24,"_36":145,"_13":61,"_32":33,"_34":146,"_23":24,"_147":-5,"_26":148},"3a031f70-25b5-41fa-a75a-a4b90aae3f1b","val_native_kernel_v1.ts","01a0a1e1-b318-76d2-87d6-6e3de5ba52fc","parentId",2,"latest",["D",1789422318356],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst rootSqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nconst CHAT_UNPROVEN_ACTIVATION_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908\";\nasync function chatUnprovenActivation(){\n const t:any=await one(`SELECT state,result_event_id FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_ACTIVATION_TASK]);\n if(!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return{active:false,reason:\"ACTIVATION_TASK_NOT_AUTHORIZED_COMPLETE\"};\n const localSeq=Number(t.result_event_id)-PREDECESSOR_EVENTS;\n if(!Number.isInteger(localSeq)||localSeq<1)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_INVALID\"};\n const ev:any=await one(`SELECT agent_id,type,task_id FROM ${P}epoch_events WHERE local_seq=?`,[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==CHAT_UNPROVEN_ACTIVATION_TASK||!ev.agent_id)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_MISSING_OR_MISBOUND\"};\n const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[String(ev.agent_id)]);\n if(!a||String(a.type)===\"CHAT_UNPROVEN\")return{active:false,reason:\"CIRCULAR_CHAT_UNPROVEN_ACTIVATION_FORBIDDEN\",activator_agent_id:String(ev.agent_id)};\n return{active:true,reason:null,activator_agent_id:String(ev.agent_id),activator_type:String(a.type)};\n}\nasync function requireChatUnprovenActivation(){\n const a:any=await chatUnprovenActivation();\n return a.active===true?null:{ok:false,reason:\"CHAT_UNPROVEN_PROTOCOL_V5_NOT_ACTIVE\",activation:a,activation_task_id:CHAT_UNPROVEN_ACTIVATION_TASK,generation:await generation()};\n}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nconst RUNTIME_FOCUS_POLICY_CARRIER_TASK=\"BRAIN-RUNTIME-TEMPORARY-FOCUS-POLICY-CARRIER-P0-V1-20260910\";\nconst RUNTIME_FOCUS_POLICY_SCHEMA=\"BRAIN_RUNTIME_FOCUS_POLICY_V1\";\ntype RuntimeFocusPolicy={valid:boolean;active:boolean;allowed:Set;revision:number;source_sha256:string;reason:string|null};\nasync function runtimeFocusPolicy():Promise{\n const row:any=await one(`SELECT state,context_manifest FROM ${P}tasks WHERE id=?`,[RUNTIME_FOCUS_POLICY_CARRIER_TASK]);\n if(!row)return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_MISSING\"};\n let c:any;try{c=parseJson(row.context_manifest||\"{}\",\"FOCUS_POLICY\")}catch{return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CONTEXT_INVALID\"}}\n const allowed=Array.isArray(c.allowed_classes)&&c.allowed_classes.length>0&&c.allowed_classes.every((x:any)=>typeof x===\"string\"&&!!x)&&new Set(c.allowed_classes).size===c.allowed_classes.length?new Set(c.allowed_classes):null;\n const sourceSha=String(c.source_sha256||\"\").toLowerCase();\n const valid=String(row.state)===\"READY\"&&c.schema===RUNTIME_FOCUS_POLICY_SCHEMA&&c.execution_allowed===false&&typeof c.active===\"boolean\"&&Number.isInteger(c.revision)&&c.revision>=1&&typeof c.source_uri===\"string\"&&c.source_uri.startsWith(\"valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/\")&&HEX64.test(sourceSha)&&!!allowed;\n return valid?{valid:true,active:c.active,allowed:allowed!,revision:c.revision,source_sha256:sourceSha,reason:null}:{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_INVALID\"};\n}\nconst FOCUS_DIRECT_CLASSES=new Set([\"HARNESS\",\"RELEVANT_OPENAI_MECHANISM\"]);\nconst FOCUS_STRICT_CLASS=\"STRICT_NECESSARY_DEPENDENCY\";\nconst FOCUS_LIVE_TARGET_STATES=new Set([\"READY\",\"LEASED\",\"BLOCKED\"]);\nconst FOCUS_CAUSAL_STATES=new Set([\"READY\",\"LEASED\"]);\ntype FocusNormalizedTask={id:string;state:string;depends:string[];supported:boolean;executionAllowed:boolean;policyExact:boolean;cls:string;direct:boolean;strict:boolean};\ntype FocusSnapshot={ok:boolean;reason:string|null;byId:Map;cyclicStrict:Set;strictParents:Map};\nfunction focusObjectJson(raw:any){try{const v=JSON.parse(String(raw));return v&&typeof v===\"object\"&&!Array.isArray(v)?v:null}catch{return null}}\nfunction focusDepsJson(raw:any){try{const v=JSON.parse(String(raw));if(!Array.isArray(v)||v.some((x:any)=>typeof x!==\"string\"||!x)||new Set(v).size!==v.length)return null;return v as string[]}catch{return null}}\nfunction focusPolicyExact(ctx:any,policy:RuntimeFocusPolicy){const rev=Number(ctx?.temporary_focus_policy_revision),src=String(ctx?.temporary_focus_source_sha256||\"\").toLowerCase();return Number.isInteger(rev)&&rev===policy.revision&&src===policy.source_sha256}\nfunction buildFocusSnapshot(rows:any[],policy:RuntimeFocusPolicy):FocusSnapshot{\n const empty={ok:false,reason:\"FOCUS_SNAPSHOT_INVALID\",byId:new Map(),cyclicStrict:new Set(),strictParents:new Map()};\n if(!policy.valid||!Array.isArray(rows))return empty;\n const counts=new Map();for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(id)counts.set(id,(counts.get(id)||0)+1)}\n const byId=new Map();\n for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(!id||counts.get(id)!==1)continue;const ctx=focusObjectJson(r.context_manifest),deps=focusDepsJson(r.depends_json),state=typeof r.state===\"string\"?r.state:\"\",cls=ctx&&typeof ctx.temporary_focus_classification===\"string\"?ctx.temporary_focus_classification:\"\";const supported=!!ctx&&deps!==null&&typeof ctx.execution_allowed===\"boolean\"&&typeof ctx.temporary_focus_classification===\"string\"&&Number.isInteger(ctx.temporary_focus_policy_revision)&&typeof ctx.temporary_focus_source_sha256===\"string\";byId.set(id,{id,state,depends:deps||[],supported,executionAllowed:ctx?.execution_allowed===true,policyExact:!!ctx&&focusPolicyExact(ctx,policy),cls,direct:FOCUS_DIRECT_CLASSES.has(cls),strict:cls===FOCUS_STRICT_CLASS})}\n const graph=new Map();\n for(const t of byId.values())if(FOCUS_CAUSAL_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&(t.direct||t.strict))graph.set(t.id,t.depends.filter(d=>byId.has(d)));\n const cyclicStrict=new Set(),nodeCount=graph.size;\n for(const t of byId.values())if(t.strict&&graph.has(t.id)){const seen=new Set([t.id]),stack=[...(graph.get(t.id)||[])];let steps=0;while(stack.length&&steps++<=nodeCount+1){const x=stack.pop()!;if(x===t.id){cyclicStrict.add(t.id);break}if(seen.has(x)||!graph.has(x))continue;seen.add(x);for(const d of graph.get(x)||[])stack.push(d)}}\n const strictParents=new Map();\n for(const p of byId.values())if(graph.has(p.id)){for(const d of graph.get(p.id)||[]){const child=byId.get(d);if(!child?.strict||cyclicStrict.has(d))continue;const a=strictParents.get(d)||[];a.push(p.id);strictParents.set(d,a)}}\n for(const a of strictParents.values())a.sort();return{ok:true,reason:null,byId,cyclicStrict,strictParents}\n}\nfunction focusTaskDecision(taskId:string,policy:RuntimeFocusPolicy,snap:FocusSnapshot){\n if(!policy.valid||!snap.ok)return{allowed:false,reason:policy.valid?snap.reason:\"FOCUS_POLICY_INVALID\",roots:[] as string[]};const t=snap.byId.get(taskId);if(!t)return{allowed:false,reason:\"TARGET_ID_NOT_UNIQUE_OR_MISSING\",roots:[] as string[]};\n if(!policy.active)return FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed?{allowed:true,reason:\"FOCUS_INACTIVE\",roots:[] as string[]}:{allowed:false,reason:\"TARGET_CANONICAL_SHAPE_OR_EXECUTION_INVALID\",roots:[] as string[]};\n if(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.direct)return{allowed:true,reason:\"DIRECT_FOCUS_CLASS\",roots:[t.id]};\n if(!(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.strict))return{allowed:false,reason:\"FOCUS_CLASS_OR_BINDING_REJECTED\",roots:[] as string[]};\n if(!FOCUS_CAUSAL_STATES.has(t.state))return{allowed:false,reason:\"STRICT_TARGET_NOT_CAUSALLY_LIVE\",roots:[] as string[]};if(snap.cyclicStrict.has(t.id))return{allowed:false,reason:\"STRICT_TARGET_CYCLIC\",roots:[] as string[]};\n const roots=new Set(),seen=new Set([t.id]),q=[t.id];let steps=0,max=Math.max(1,snap.byId.size+1);\n while(q.length&&steps++<=max){const x=q.shift()!;for(const p of snap.strictParents.get(x)||[]){const pt=snap.byId.get(p);if(!pt||!FOCUS_CAUSAL_STATES.has(pt.state)||!pt.supported||!pt.executionAllowed||!pt.policyExact)continue;if(pt.direct){roots.add(pt.id);continue}if(pt.strict&&!snap.cyclicStrict.has(pt.id)&&!seen.has(pt.id)){seen.add(pt.id);q.push(pt.id)}}}\n const rs=[...roots].sort();return rs.length?{allowed:true,reason:\"STRICT_CAUSAL_PATH_QUALIFIED\",roots:rs}:{allowed:false,reason:\"STRICT_CAUSAL_PATH_NOT_QUALIFIED\",roots:rs};\n}\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\ntype NoReadyReason=\"MISSING_DEDUPE\"|\"ASSIGNED_OTHER\"|\"FOCUS_POLICY_INVALID\"|\"TEMPORARY_FOCUS_INELIGIBLE\"|\"EXECUTION_DISABLED\"|\"CHAT_UNPROVEN_INDEPENDENCE\"|\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\"|\"NON_AGENT_REQUIREMENT\"|\"MISSING_CAPABILITY\"|\"DEPENDENCY_UNSATISFIED\"|\"GUARD_UNSATISFIED\"|\"WRITE_CONFLICT\";\nconst NO_READY_REASONS:NoReadyReason[]=[\"MISSING_DEDUPE\",\"ASSIGNED_OTHER\",\"FOCUS_POLICY_INVALID\",\"TEMPORARY_FOCUS_INELIGIBLE\",\"EXECUTION_DISABLED\",\"CHAT_UNPROVEN_INDEPENDENCE\",\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\",\"NON_AGENT_REQUIREMENT\",\"MISSING_CAPABILITY\",\"DEPENDENCY_UNSATISFIED\",\"GUARD_UNSATISFIED\",\"WRITE_CONFLICT\"];\n// STANDALONE_CLAIM_SETBASED_FASTPATH_REV3_PRODUCTION_V1\n// Source candidate SHA-256: 9ac06b7e18eb101375dc4a3196fce3e225c4675c379f0468a24973b6e881dcff\n// Positive CHAT_UNPROVEN selection only. Any malformed, unsupported, ambiguous,\n// dynamically unproven, or no-ready case falls back to the canonical serial path\n// before any canonical mutation.\nconst STANDALONE_CLAIM_SETBASED_SOURCE_SHA256=\"9ac06b7e18eb101375dc4a3196fce3e225c4675c379f0468a24973b6e881dcff\";\nconst STANDALONE_CLAIM_SETBASED_FOCUS_REVISION=3;\nconst STANDALONE_CLAIM_SETBASED_FOCUS_SHA256=\"5502b3da5b7e688ee821db89d9e0f73dbac1df6d9abe306156ba57f4f49ae41e\";\nconst STANDALONE_CLAIM_SETBASED_LIVE=new Set([\"READY\",\"LEASED\",\"BLOCKED\"]);\nfunction standaloneSetbasedJson(raw:any){try{return JSON.parse(String(raw))}catch{return Symbol.for(\"STANDALONE_SETBASED_BAD_JSON\")}}\nfunction standaloneSetbasedExactList(v:any){return Array.isArray(v)&&v.every((x:any)=>typeof x===\"string\"&&x.length>0)&&new Set(v).size===v.length}\nfunction standaloneSetbasedMultiplicity(rows:any[],key:(x:any)=>string){const m=new Map();for(const r of rows){const k=key(r),a=m.get(k)||[];a.push(r);m.set(k,a)}return m}\nfunction standaloneSetbasedOne(m:Map,k:string){const a=m.get(k)||[];return a.length===1?a[0]:null}\nfunction standaloneSetbasedAmbiguous(m:Map,k:string){return (m.get(k)||[]).length!==1}\nfunction standaloneSetbasedOverlap(a:string[],b:string[]){const B=new Set(b);return a.some(x=>B.has(x))}\nfunction standaloneSetbasedParseTask(t:any){\n const ctx=standaloneSetbasedJson(t.context_manifest??\"{}\"),req=standaloneSetbasedJson(t.requires_json??\"[]\"),deps=standaloneSetbasedJson(t.depends_json??\"[]\"),guards=standaloneSetbasedJson(t.guards_json??\"[]\"),writes=standaloneSetbasedJson(t.writes_json??\"[]\");\n const BAD=Symbol.for(\"STANDALONE_SETBASED_BAD_JSON\");\n if(ctx===BAD||!ctx||typeof ctx!==\"object\"||Array.isArray(ctx))return null;\n if(!Array.isArray(req)||req.some((x:any)=>typeof x!==\"string\"))return null;\n if(!standaloneSetbasedExactList(deps)||!Array.isArray(guards)||guards.some((g:any)=>!g||typeof g!==\"object\"||Array.isArray(g)))return null;\n if(!Array.isArray(writes)||writes.some((x:any)=>typeof x!==\"string\"))return null;\n return{row:t,ctx,req,deps,guards,writes};\n}\nasync function standaloneClaimSetBasedPickV1(agentId:string){\n const policy=await runtimeFocusPolicy();\n if(!policy.valid||policy.active!==true||policy.revision!==STANDALONE_CLAIM_SETBASED_FOCUS_REVISION||policy.source_sha256!==STANDALONE_CLAIM_SETBASED_FOCUS_SHA256)\n return{kind:\"fallback\",reason:\"FOCUS_POLICY_BINDING_NOT_EXACT\"} as const;\n const agents:any[]=(await sqlite.execute(`SELECT * FROM ${P}agents ORDER BY id`)).rows as any[];\n const tasks:any[]=(await sqlite.execute(`SELECT * FROM ${P}tasks ORDER BY rowid`)).rows as any[];\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[];\n const artifacts:any[]=(await sqlite.execute(`SELECT * FROM ${P}artifacts ORDER BY sha256`)).rows as any[];\n const agentMulti=standaloneSetbasedMultiplicity(agents,(x:any)=>String(x.id)),taskMulti=standaloneSetbasedMultiplicity(tasks,(x:any)=>String(x.id)),claimMulti=standaloneSetbasedMultiplicity(claims,(x:any)=>String(x.id)),artifactMulti=standaloneSetbasedMultiplicity(artifacts,(x:any)=>String(x.sha256));\n if(standaloneSetbasedAmbiguous(agentMulti,agentId))return{kind:\"fallback\",reason:\"AGENT_CARDINALITY\"} as const;\n const ag:any=standaloneSetbasedOne(agentMulti,agentId);if(!ag||String(ag.type)!==\"CHAT_UNPROVEN\")return{kind:\"fallback\",reason:\"NON_CHAT_UNPROVEN\"} as const;\n const capsRaw=standaloneSetbasedJson(ag.capabilities_json??\"[]\");if(!Array.isArray(capsRaw)||capsRaw.some((x:any)=>typeof x!==\"string\"))return{kind:\"fallback\",reason:\"MALFORMED_CAPS\"} as const;const caps=new Set(capsRaw);\n const parsed:any[]=[];for(const t of tasks){const p=standaloneSetbasedParseTask(t);if(!p)return{kind:\"fallback\",reason:\"MALFORMED_TASK_ROW\"} as const;parsed.push(p)}\n const focusSnap=buildFocusSnapshot(tasks,policy);if(!focusSnap.ok)return{kind:\"fallback\",reason:\"FOCUS_SNAPSHOT_INVALID\"} as const;\n const ready=parsed.filter(p=>String(p.row.workstream)===String(ag.workstream)&&String(p.row.state)===\"READY\").sort((a,b)=>Number(b.row.priority)-Number(a.row.priority)||String(a.row.id).localeCompare(String(b.row.id)));\n const leased=parsed.filter(p=>String(p.row.state)===\"LEASED\");\n for(const p of ready){const t=p.row,id=String(t.id);\n if(standaloneSetbasedAmbiguous(taskMulti,id))return{kind:\"fallback\",reason:\"TASK_ID_MULTIPLICITY\"} as const;\n if(!t.dedupe_key)continue;if(t.assigned_agent!==null&&t.assigned_agent!==undefined&&String(t.assigned_agent)!==agentId)continue;\n const focusDecision=focusTaskDecision(id,policy,focusSnap);if(!focusDecision.allowed)continue;if(p.ctx.execution_allowed===false)continue;\n if(unprovenIndependenceSensitive(new Set(p.req),p.ctx))continue;\n if(p.req.some((x:string)=>NON_AGENT.has(x))||p.req.some((x:string)=>!caps.has(x)))continue;\n let blocked=false;for(const d of p.deps){if(standaloneSetbasedAmbiguous(taskMulti,d))return{kind:\"fallback\",reason:\"DEP_ID_MULTIPLICITY\"} as const;if(String((standaloneSetbasedOne(taskMulti,d) as any).state)!==\"COMPLETE\"){blocked=true;break}}if(blocked)continue;\n let guardsOk=true;for(const g of p.guards){\n if(g.type===\"task_complete\"){const k=String(g.id);if(standaloneSetbasedAmbiguous(taskMulti,k))return{kind:\"fallback\",reason:\"GUARD_TASK_MULTIPLICITY\"} as const;const x:any=standaloneSetbasedOne(taskMulti,k);if(String(x.workstream)!==String(t.workstream)||String(x.state)!==\"COMPLETE\"){guardsOk=false;break}}\n else if(g.type===\"claim_verified\"){const k=String(g.id);if(standaloneSetbasedAmbiguous(claimMulti,k))return{kind:\"fallback\",reason:\"GUARD_CLAIM_MULTIPLICITY\"} as const;const x:any=standaloneSetbasedOne(claimMulti,k);if(String(x.workstream)!==String(t.workstream)||String(x.status)!==\"VERIFIED\"){guardsOk=false;break}}\n else if(g.type===\"artifact_present\"){const k=String(g.sha256);if(standaloneSetbasedAmbiguous(artifactMulti,k))return{kind:\"fallback\",reason:\"ARTIFACT_MULTIPLICITY\"} as const;const a:any=standaloneSetbasedOne(artifactMulti,k);let belongs=false;if(a.task_id!==null&&a.task_id!==undefined){const q=String(a.task_id);if(standaloneSetbasedAmbiguous(taskMulti,q))return{kind:\"fallback\",reason:\"ARTIFACT_TASK_MULTIPLICITY\"} as const;belongs=String((standaloneSetbasedOne(taskMulti,q) as any).workstream)===String(t.workstream)}if(!belongs&&a.producer_agent!==null&&a.producer_agent!==undefined){const q=String(a.producer_agent);if(standaloneSetbasedAmbiguous(agentMulti,q))return{kind:\"fallback\",reason:\"ARTIFACT_AGENT_MULTIPLICITY\"} as const;belongs=String((standaloneSetbasedOne(agentMulti,q) as any).workstream)===String(t.workstream)}if(!belongs){guardsOk=false;break}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){guardsOk=false;break}else return{kind:\"fallback\",reason:\"UNKNOWN_GUARD\"} as const;\n }\n if(!guardsOk)continue;if(leased.some(o=>standaloneSetbasedOverlap(p.writes,o.writes)))continue;\n return{kind:\"task\",task:t,source_sha256:STANDALONE_CLAIM_SETBASED_SOURCE_SHA256} as const;\n }\n return{kind:\"fallback\",reason:\"NO_READY_EXACT_RESULT_MUST_USE_CANONICAL_SERIAL\"} as const;\n}\n\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n const focusPolicy=await runtimeFocusPolicy(),focusRows:any[]=(await sqlite.execute(`SELECT id,state,depends_json,context_manifest FROM ${P}tasks ORDER BY rowid`)).rows as any[],focusSnap=buildFocusSnapshot(focusRows,focusPolicy);\n const reasonCounts:Record=Object.fromEntries(NO_READY_REASONS.map(x=>[x,0])) as Record;let highest:any=null,readyRowsSeen=0;\n const reject=(r:any,reason:NoReadyReason)=>{reasonCounts[reason]++;if(highest===null){const p=Number(r.priority);highest={task_id:String(r.id).slice(0,200),priority:Number.isFinite(p)?p:null,reason}}};\n for(const r of q.rows||[]){\n readyRowsSeen++;\n if(!r.dedupe_key){reject(r,\"MISSING_DEDUPE\");continue}if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId){reject(r,\"ASSIGNED_OTHER\");continue}\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n const focusDecision=focusTaskDecision(String(r.id),focusPolicy,focusSnap);if(!focusDecision.allowed){reject(r,focusPolicy.valid?\"TEMPORARY_FOCUS_INELIGIBLE\":\"FOCUS_POLICY_INVALID\");continue}\n if(ctx.execution_allowed===false){reject(r,\"EXECUTION_DISABLED\");continue}const independenceSensitive=unprovenIndependenceSensitive(req,ctx);if(independenceSensitive&&unproven){reject(r,\"CHAT_UNPROVEN_INDEPENDENCE\");continue}if(independenceSensitive&&EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true){reject(r,\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\");continue}if([...req].some(x=>NON_AGENT.has(x))){reject(r,\"NON_AGENT_REQUIREMENT\");continue}if([...req].some(x=>!C.has(x))){reject(r,\"MISSING_CAPABILITY\");continue}\n if(!await depsSatisfied(r)){reject(r,\"DEPENDENCY_UNSATISFIED\");continue}if(!await guardsSatisfied(r,agentId)){reject(r,\"GUARD_UNSATISFIED\");continue}if(await writeConflict(r)){reject(r,\"WRITE_CONFLICT\");continue}return{task:r,no_ready_diagnostics:null}\n }\n return{task:null,no_ready_diagnostics:{schema:\"NO_READY_TASK_EXPLANATION_V7\",frontier_class:readyRowsSeen===0?\"TRUE_EMPTY_FRONTIER\":\"ALL_READY_ROWS_REJECTED\",ready_rows_seen:readyRowsSeen,reason_counts:reasonCounts,highest_priority_rejected:highest,focus_policy:{valid:focusPolicy.valid,active:focusPolicy.active,revision:focusPolicy.revision,reason:focusPolicy.reason}}}\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nasync function register(args:string[]){\n if(args.length<2)throw new Error(\"REGISTER_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),role=String(f.role||\"\"),type=String(f.type||\"\"),parent=f.parent??null,caps=cleanCaps(parseJson(f.capabilities||\"[]\",\"CAPS\"));\n if(!ws||!role||!type)throw new Error(\"REGISTER_FIELDS_REQUIRED\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(type===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}\n if(parent){if(String(parent)===id)throw new Error(\"AGENT_CANNOT_PARENT_SELF\");const pr:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[parent]);if(!pr)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(String(pr.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_PARENT\")}\n const ex:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(ex){const same=String(ex.workstream)===ws&&String(ex.role)===role&&String(ex.type)===type&&(ex.parent_id??null)===(parent??null)&&String(ex.capabilities_json)===canon(caps);if(!same)throw new Error(\"AGENT_REJOIN_IDENTITY_MISMATCH\");await sqlite.execute({sql:`UPDATE ${P}agents SET last_seen=? WHERE id=?`,args:[now(),id]});return{ok:true,created:false,agent_id:id,generation:await generation()}}\n const g0=await generation();await sqlite.execute({sql:`INSERT INTO ${P}agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES(?,?,?,?,?,'READY',?,?,?,?)`,args:[id,parent,type,ws,role,g0,g0,now(),canon(caps)]});await appendEvent(ws,id,null,\"AGENT_REGISTERED\",{type,role,parent,boot_generation:g0,capabilities:caps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=? WHERE id=?`,args:[ng,id]});return{ok:true,created:true,agent_id:id,generation:ng}\n}\nasync function ensureTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");if(!ws||!dedupe)throw new Error(\"ENSURE_FIELDS_REQUIRED\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));\n if(!Array.isArray(deps)||!ctx||Array.isArray(ctx)||!Array.isArray(req))throw new Error(\"BAD_JSON_SHAPE\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing)return{ok:true,created:false,task_id:existing.id,state:existing.state,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe};\n if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority);if(!Number.isFinite(priority))throw new Error(\"BAD_PRIORITY\");\n await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,NULL,NULL,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,canon(writes),canon(guards)]});\n await appendEvent(ws,f.agent??null,id,\"TASK_CREATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe}\n}\nasync function claim(args:string[]){\n const f=flags(args,1),id=String(f.agent||\"\"),mode=String(f.mode||\"INTERACTIVE\"),secs=f[\"lease-seconds\"]===undefined?(mode===\"INTERACTIVE\"?1800:900):Number(f[\"lease-seconds\"]);if(!id)throw new Error(\"AGENT_REQUIRED\");if(![\"INTERACTIVE\",\"PROCESS\"].includes(mode)||secs<60||secs>7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.type)===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task===CHAT_UNPROVEN_ACTIVATION_TASK){const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agent]);if(String(a?.type||\"\")===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\"}}}if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,claim_id:id,statement_sha256:h,generation:ng}\n}\nasync function invalidateClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),reason=String(f.reason||\"\"),agent=f.agent??null;const root:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[id]);if(!root)throw new Error(\"UNKNOWN_CLAIM\");const todo=[id],seen=new Set(),changed:any[]=[];\n while(todo.length){const q=String(todo.pop());if(seen.has(q))continue;seen.add(q);const row:any=await one(`SELECT status FROM ${P}claims WHERE id=?`,[q]);if(row&&![\"FALSIFIED\",\"STALE\"].includes(String(row.status))){const ns=q===id?\"FALSIFIED\":\"STALE\";await sqlite.execute({sql:`UPDATE ${P}claims SET status=?,invalidated_by=?,updated_at=? WHERE id=?`,args:[ns,id,now(),q]});changed.push([q,ns])}const kids:any[]=(await sqlite.execute({sql:`SELECT child_claim FROM ${P}claim_deps WHERE parent_claim=?`,args:[q]})).rows as any[];for(const k of kids)todo.push(String(k.child_claim))}\n await appendEvent(String(root.workstream),agent,null,\"CLAIM_INVALIDATED\",{root_claim:id,reason,affected:changed});const propagated=await propagateImpossible(String(root.workstream),agent,{type:\"claim_invalidated\",claim_id:id,reason});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),root.workstream]});return{ok:true,root_claim:id,affected:changed,generation:ng,propagated_blocked:propagated}\n}\nasync function recordExternalArtifact(args:string[]){\n const spec=parseExternalArtifactSpec(args);\n const ws:any=await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[spec.workstream]);if(!ws)throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(spec.agent!==null){const a:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[spec.agent]);if(!a)throw new Error(\"UNKNOWN_ARTIFACT_AGENT\");if(String(a.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_AGENT\")}\n if(spec.task!==null){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[spec.task]);if(!t)throw new Error(\"UNKNOWN_ARTIFACT_TASK\");if(String(t.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_TASK\")}\n const integrity=await verifyExternalArtifactBlobBytes(spec);\n const found:any=await sqlite.execute({sql:`SELECT sha256,size,logical_name,producer_agent,task_id,storage_json FROM ${P}artifacts WHERE lower(sha256)=?`,args:[spec.sha256]});\n const rows:any[]=found.rows||[];if(rows.length>1)throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_CANONICAL_ROWS\");\n const decision=externalArtifactExistingDecision(rows[0]??null,spec);\n if(decision.kind===\"CONFLICT\")throw new Error(decision.reason);\n if(decision.kind===\"ALREADY_RECORDED\")return{ok:true,created:false,already_recorded:true,sha256:spec.sha256,generation:await generation(),semantic_generation_unchanged:true,integrity};\n const t=now();\n await sqlite.execute({sql:`INSERT INTO ${P}artifacts(sha256,size,logical_name,producer_agent,task_id,storage_json,created_at) VALUES(?,?,?,?,?,?,?)`,\n args:[spec.sha256,spec.size,spec.name,spec.agent,spec.task,canon([spec.uri]),t]});\n const payload={sha256:spec.sha256,size:spec.size,logical_name:spec.name,storage_uri:spec.uri,producer_agent:spec.agent,task_id:spec.task};\n const ev=await appendEvent(spec.workstream,spec.agent,spec.task,\"EXTERNAL_ARTIFACT_RECORDED\",payload);\n const ng=await bump();\n await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),spec.workstream]});\n return{ok:true,created:true,already_recorded:false,sha256:spec.sha256,generation:ng,event_id:PREDECESSOR_EVENTS+Number(ev.seq),event_hash:ev.event_hash,integrity};\n}\n\nasync function commitFull(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId||![\"COMPLETE\",\"INVALID\",\"BLOCKED\"].includes(state))throw new Error(\"BAD_COMMIT\");const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT_FORBIDDEN\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)g?.type===EXECUTION_DISTINCT_GUARD))throw new Error(\"CHAT_UNPROVEN_INDEPENDENCE_COMMIT_FORBIDDEN\");\n payload={...payload,contributor_trust_class:\"CHAT_UNPROVEN\",contributor_agent_type:\"CHAT_UNPROVEN\",independence_eligible:false,p_real_eligible:false};\n }else if(payload&&typeof payload===\"object\"&&!Array.isArray(payload)&&reserved.some(k=>Object.prototype.hasOwnProperty.call(payload,k))){\n throw new Error(\"CALLER_CONTROLLED_TRUST_METADATA_FORBIDDEN\");\n }\n const ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_RESULT_COMMITTED\",payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);await sqlite.execute({sql:`UPDATE ${P}tasks SET state=?,result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=?`,args:[state,eid,now(),taskId]});let propagated:any[]=[];if([\"INVALID\",\"BLOCKED\"].includes(state))propagated=await propagateImpossible(String(task.workstream),agent,{type:\"task_terminal\",task_id:taskId,state});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET status='READY',last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,generation:ng,event_id:eid,propagated_blocked:propagated}\n}\nconst CHECKPOINT_STATE_TABLES=[\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"task_context_history\",\"task_invariant_history\"];\nfunction checkpointSortedRows(rows:any[]){return [...(rows||[])].sort((a:any,b:any)=>canon(a).localeCompare(canon(b)))}\nasync function checkpointStateView(){\n const m:any=await meta(),tables:any={};\n for(const t of CHECKPOINT_STATE_TABLES)tables[t]=checkpointSortedRows((await sqlite.execute(`SELECT * FROM ${P}${t}`)).rows||[]);\n const events=(await sqlite.execute(`SELECT * FROM ${P}epoch_events ORDER BY local_seq`)).rows||[];\n const stateSha256=await sha(canon({epoch_meta:m,events,state:tables}));\n return{m,tables,events,state_sha256:stateSha256};\n}\nasync function captureCheckpointSnapshot(){\n return await withTransaction(\"read\",async()=>{\n const v:any=await checkpointStateView();\n const payload={schema:\"BRAIN_VAL_NATIVE_SNAPSHOT_V2\",lineage:{predecessor_generation:v.m.predecessor_generation,predecessor_event_count:v.m.predecessor_event_count,predecessor_head:v.m.predecessor_head},epoch_meta:v.m,events:v.events,state:v.tables,state_sha256:v.state_sha256,exported_at:now()};\n const raw=JSON.stringify(payload,null,2)+\"\\n\",h=await sha(raw),key=`snapshots/val_native/brain_snapshot_epoch${v.m.epoch}_g${v.m.generation}_${h.slice(0,16)}.json`;\n return{...v,raw,snapshot_sha256:h,key};\n });\n}\nasync function checkpointNativeBound(payloadJson:string,c:BoundTransportContext){\n const cmd=\"checkpoint\";\n const captured:any=await withTransaction(\"read\",async()=>{\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return{early:pre};\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return{early:prior};\n return await captureCheckpointSnapshot();\n });\n if(captured.early!==undefined)return captured.early;\n await blob.set(captured.key,captured.raw);\n const rb:any=await blob.get(captured.key),rbRaw=await rb.text(),rbSha=await sha(rbRaw);\n if(rbRaw!==captured.raw||rbSha!==captured.snapshot_sha256)throw new Error(\"CHECKPOINT_BLOB_READBACK_MISMATCH\");\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return prior;\n const current:any=await checkpointStateView();\n if(String(current.state_sha256)!==String(captured.state_sha256))return{ok:false,reason:\"CHECKPOINT_CAPTURE_STALE\",captured_generation:Number(captured.m.generation),current_generation:Number(current.m.generation),captured_event_head_hash:String(captured.m.event_head_hash),current_event_head_hash:String(current.m.event_head_hash),captured_state_sha256:String(captured.state_sha256),current_state_sha256:String(current.state_sha256),orphan_blob_noncanonical:true,orphan_blob_uri:`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`};\n const id=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}replicas`)).n),uri=`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`;\n await sqlite.execute({sql:`INSERT INTO ${P}replicas(id,generation,provider,uri,snapshot_sha256,event_head_hash,verified,created_at) VALUES(?,?,?,?,?,?,1,?)`,args:[id,Number(captured.m.generation),\"val-town-native\",uri,String(captured.snapshot_sha256),String(captured.m.event_head_hash),now()]});\n const post:any=await boundTransportGuard(c,payloadJson,cmd);if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_CHECKPOINT_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n const result={ok:true,generation:Number(captured.m.generation),durability_lag_generations:Number(current.m.generation)-Number(captured.m.generation),snapshot_sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),event_head_hash:String(captured.m.event_head_hash),uri,attempts:[{attempt:1,generation:Number(captured.m.generation),sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),size:enc.encode(captured.raw).length,ok:true,uri,lag_after_ack:Number(current.m.generation)-Number(captured.m.generation)}],orphan_blob_policy:\"CONTENT_ADDRESSED_BLOB_HAS_NO_CANONICAL_CHECKPOINT_MEANING_UNTIL_REPLICA_ROW_AND_BOUND_MUTATION_RECEIPT_COMMIT\"};\n const m:any=await meta(),payloadSha=await sha(payloadJson);\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[c.job_id,c.lease_attempt_id,c.lease_instance_id,c.lease_owner,c.transport_lease_generation,c.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\nfunction transportContextShapeOk(c:any):c is BoundTransportContext{\n return !!c&&typeof c===\"object\"&&!Array.isArray(c)&&\n typeof c.job_id===\"string\"&&!!c.job_id&&\n Number.isInteger(c.transport_lease_generation)&&c.transport_lease_generation>=1&&\n typeof c.lease_owner===\"string\"&&!!c.lease_owner&&\n typeof c.lease_instance_id===\"string\"&&!!c.lease_instance_id&&\n typeof c.lease_attempt_id===\"string\"&&!!c.lease_attempt_id&&\n Number.isInteger(c.authority_epoch)&&c.authority_epoch>=1&&\n typeof c.payload_json===\"string\"&&!!c.payload_json;\n}\nasync function boundTransportGuard(c:BoundTransportContext,payloadJson:string,cmd:string){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n if(!authority||Number(authority.epoch)!==c.authority_epoch||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_AUTHORITY_FENCED\",command:cmd,authority:authority??null};\n }\n const job:any=await one(`SELECT id,op,payload_json,state,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM brain_bridge_jobs\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND lease_expires_at>datetime('now')`,\n [c.job_id,c.lease_owner,c.lease_instance_id,c.lease_attempt_id,c.transport_lease_generation]);\n if(!job)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_ATTEMPT_FENCED\",command:cmd,job_id:c.job_id};\n if(String(job.op)!==\"brain\")return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_OP_MISMATCH\",command:cmd,job_id:c.job_id};\n if(String(job.payload_json)!==c.payload_json||payloadJson!==c.payload_json)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_PAYLOAD_MISMATCH\",command:cmd,job_id:c.job_id};\n return{ok:true,authority,job};\n}\nasync function existingBoundReceipt(c:BoundTransportContext,payloadJson:string,cmd:string){\n const r:any=await one(`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,result_json\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[c.job_id,c.lease_attempt_id]);\n if(!r)return null;\n const psha=await sha(payloadJson);\n if(String(r.lease_instance_id)!==c.lease_instance_id||String(r.lease_owner)!==c.lease_owner||\n Number(r.transport_lease_generation)!==c.transport_lease_generation||Number(r.authority_epoch)!==c.authority_epoch||\n String(r.command)!==cmd||String(r.payload_sha256)!==psha)throw new Error(\"MUTATION_RECEIPT_BINDING_MISMATCH\");\n return parseJson(r.result_json,\"MUTATION_RECEIPT_RESULT\");\n}\nasync function dispatchFull(payloadJson:string,transportContext?:BoundTransportContext){\n const q=parseJson(payloadJson,\"PAYLOAD\");if(!exactTop(q))throw new Error(\"PAYLOAD_SCHEMA_NOT_CLOSED\");const cmd=String(q.args[0]);\n const full=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"delegate-task\",\"claim\",\"renew-lease\",\"commit\",\"checkpoint\",\"add-claim\",\"invalidate-claim\",\"supersede-task-context\",\"migrate-task-invariants\",\"reconcile-causal-blocks\",\"recover-stale\",\"record-external-artifact\"]);if(!full.has(cmd))throw new Error(\"BRAIN_SUBCOMMAND_NOT_ALLOWED\");\n const invoke=async(argsOverride?:any[])=>{\n const a=argsOverride??q.args;\n if(cmd===\"status\")return await status();if(cmd===\"verify-chain\")return await verifyChain();if(cmd===\"verify-claim-graph\")return await verifyClaimGraph();if(cmd===\"register-agent\")return await register(a);if(cmd===\"ensure-task\")return await ensureTask(a);if(cmd===\"delegate-task\")return await delegateTask(a);if(cmd===\"claim\")return await claim(a);if(cmd===\"renew-lease\")return await renew(a);if(cmd===\"commit\")return await commitFull(a);if(cmd===\"checkpoint\")return await checkpointNative();if(cmd===\"add-claim\")return await addClaimFull(a);if(cmd===\"invalidate-claim\")return await invalidateClaimFull(a);if(cmd===\"supersede-task-context\")return await supersedeContext(a);if(cmd===\"migrate-task-invariants\")return await migrateInvariants(a);if(cmd===\"reconcile-causal-blocks\")return await reconcileCausal(a);if(cmd===\"record-external-artifact\")return await recordExternalArtifact(a);if(cmd===\"recover-stale\"){if(a.length!==1)throw new Error(\"RECOVER_STALE_ARGS_INVALID\");return await recover()}throw new Error(\"UNREACHABLE\");\n };\n if(READ_ONLY_COMMANDS.has(cmd))return await withTransaction(\"read\",()=>invoke());\n const emergencyCanary=transportContextShapeOk(transportContext)&&transportContext.job_id===EMERGENCY_MUTATION_CANARY_JOB_ID;\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_EMERGENCY_FROZEN\",command:cmd,authority:authority??null};\n }\n if(!REACTIVATION_MUTATION_ALLOWLIST.has(cmd))return{ok:false,reason:\"VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED\",command:cmd};\n if(!transportContextShapeOk(transportContext))return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_CONTEXT_REQUIRED\",command:cmd};\n if(cmd===\"checkpoint\")return await checkpointNativeBound(payloadJson,transportContext);\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n await ensureMutationRetryAuthTable();\n const pre:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(transportContext,payloadJson,cmd);\n if(prior!==null)return prior;\n const payloadSha=await sha(payloadJson);\n let result:any=null,retriableStale=false;\n const req:any=transportContext.stable_retry_request;\n if(cmd!==\"commit\"&&(transportContext.stable_retry_probe!==undefined||req!==undefined)){\n result={ok:false,reason:\"STABLE_RETRY_METADATA_NONCOMMIT_FORBIDDEN\",command:cmd};\n }else if(cmd===\"commit\"&&req!==undefined){\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n if(!stableRetryRequestOk(req)||originalExpected===null){\n result={ok:false,reason:\"STABLE_RETRY_REQUEST_INVALID\"};\n }else{\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n const bindingOk=!!ar&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&String(ar.lease_owner)===transportContext.lease_owner&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation&&Number(ar.authority_epoch)===transportContext.authority_epoch&&\n String(ar.command)===\"commit\"&&String(ar.payload_sha256)===payloadSha&&Number(ar.stale_expected_workstream_generation)===originalExpected&&\n String(ar.stable_snapshot_sha256)===String(req.stable_snapshot_sha256)&&Number(req.from_expected_workstream_generation)===originalExpected&&\n Number(req.retry_index)===Number(ar.retry_count)+1;\n if(!bindingOk){\n result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_FENCED\"};\n }else{\n const u:any=await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE}\n SET retry_count=retry_count+1,updated_at=? WHERE job_id=? AND lease_attempt_id=? AND retry_count=? RETURNING retry_count`,\n args:[now(),transportContext.job_id,transportContext.lease_attempt_id,Number(ar.retry_count)]});\n if(!(u.rows||[]).length)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_RACE\"};\n else{\n result=await invoke(withCommitExpectedWorkstreamGeneration(q.args,Number(req.to_expected_workstream_generation)));\n if(result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n retriableStale=true;\n if(Number.isInteger(Number(result.actual)))await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE} SET observed_workstream_generation=?,updated_at=? WHERE job_id=? AND lease_attempt_id=?`,\n args:[Number(result.actual),now(),transportContext.job_id,transportContext.lease_attempt_id]});\n }else{\n // Keep the exact-attempt authorization row as immutable-ish audit evidence.\n // The successful mutation receipt is the idempotent completion authority;\n // deleting this row is unnecessary and conflicts with canonical no-delete hardening.\n }\n }\n }\n }\n }else{\n result=await invoke();\n if(cmd===\"commit\"&&result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n const probe:any=transportContext.stable_retry_probe;\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n const eligible=stableRetryProbeOk(probe)&&probe.retry_guard_snapshot_complete===true&&originalExpected!==null&&\n Number(result.expected)===originalExpected&&Number.isInteger(Number(result.actual));\n if(eligible){\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${MUTATION_RETRY_AUTH_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,\n stale_expected_workstream_generation,observed_workstream_generation,stable_snapshot_sha256,retry_count,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,\"commit\",payloadSha,originalExpected,Number(result.actual),\n probe.stable_snapshot_sha256,0,now(),now()]});\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n retriableStale=!!ar&&String(ar.payload_sha256)===payloadSha&&String(ar.stable_snapshot_sha256)===probe.stable_snapshot_sha256&&\n Number(ar.stale_expected_workstream_generation)===originalExpected&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation;\n if(!retriableStale)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_CONFLICT\"};\n }\n }\n }\n const post:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n if(retriableStale)return{...result,stable_retry_authorized:true};\n const m:any=await meta();\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\n\n\nasync function brainStatusSafe(){return await withTransaction(\"read\",()=>status())}\nasync function verifyBrainChainSafe(){return await withTransaction(\"read\",()=>verifyChain())}\nasync function verifyBrainClaimGraphSafe(){return await withTransaction(\"read\",()=>verifyClaimGraph())}\nasync function checkpointBrainNativeSafe(){return await dispatchFull(JSON.stringify({args:[\"checkpoint\"],timeout:120}))}\nasync function recoverBrainStaleSafe(){return await dispatchFull(JSON.stringify({args:[\"recover-stale\"],timeout:120}))}\nasync function registerBrainAgentSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function claimBrainTaskSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function brainGenerationSafe(){return await withTransaction(\"read\",()=>generation())}\n\nexport {\n dispatchFull as dispatchBrain,\n brainStatusSafe as brainStatus,\n verifyBrainChainSafe as verifyBrainChain,\n verifyBrainClaimGraphSafe as verifyBrainClaimGraph,\n checkpointBrainNativeSafe as checkpointBrainNative,\n recoverBrainStaleSafe as recoverBrainStale,\n registerBrainAgentSafe as registerBrainAgent,\n claimBrainTaskSafe as claimBrainTask,\n brainGenerationSafe as brainGeneration\n};\n","label",[140],"29433f34-b903-49c2-8151-44b5c20d230a","val_native_executor_prod.ts","01a0a1e1-b318-76d2-87d6-7367453f2f8d",["D",1789422318356],[150],"68738b40-7a5c-4cb9-9c0b-6051ec3df77f","scan_task_identity_paths.ts","c1c7d004-b085-11f1-957c-1607ee4eb77e",5,["D",1789422395330],"import { readFile } from \"https://esm.town/v/std/utils/index.ts\";\nfor(const file of ['val_native_kernel_v1.ts','val_native_executor_prod.ts']){\n const text=await readFile('/'+file,import.meta.url); const lines=text.split('\\n');\n console.log('=== '+file+' ===');\n for(let i=0;i=0){console.log(t.slice(Math.max(0,i-1200),Math.min(t.length,i+9000)));break;}}",[169],"bfc099b5-5624-42ac-9e32-652075ad0fef","inspect_current.ts","9a53a9da-b085-11f1-a366-1607ee4eb77e",3,["D",1789422329136],"import { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nasync function sha256(s:string){const b=new TextEncoder().encode(s);const d=await crypto.subtle.digest(\"SHA-256\",b);return {bytes:b.length,sha256:[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}}\nconst kernel=await readFile(\"/val_native_kernel_v1.ts\",import.meta.url);\nconst executor=await readFile(\"/val_native_executor_prod.ts\",import.meta.url);\nconst protocol=await readFile(\"/BRAIN_VAL_BRIDGE_PROTOCOL.md\",import.meta.url);\nconst probes=[\n \"taskRowsById(\",\"taskResolution(\",\"uniqueTaskById(\",\"TASK_ID_AMBIGUOUS\", \"TASK_ID_DEFINITION_CONFLICT\",\n \"__task_rowid\", \"AGENT_LEASE_MULTIPLICITY_AMBIGUOUS\", \"TASK_IDENTITY_LOST_DURING_COMMIT\",\n \"localUniqueTaskRow(\", \"AMBIGUOUS_TASK_ID_MULTIPLICITY\", \"COHORT_TASK_BULK_CAS_MISMATCH\"\n];\nconsole.log(JSON.stringify({kernel:await sha256(kernel),executor:await sha256(executor),protocol:await sha256(protocol),probe_hits:Object.fromEntries(probes.map(p=>[p,{kernel:kernel.includes(p),executor:executor.includes(p)}]))},null,2));",[176],"47da601e-8ab1-4793-804a-b50f12b1bac2","README.md","8f453e82-b085-11f1-a9de-1607ee4eb77e",1,["D",1789422310582],"Candidate-only isolated workspace for BRAIN-HARNESS-TASK-ID-UNIQUENESS-CURRENT-HEAD-REBASE-PRECOMPUTE-P0-V1-20260911-X7Q4. No production authority.",[183],"7aadf7ec-30a2-46f8-b713-e77ae46af93a","BRAIN_VAL_BRIDGE_PROTOCOL.md","01a0a1e1-b318-76d2-87d6-77efea7d1787",["D",1789422318356],"# PROJECT BRAIN VAL BRIDGE PROTOCOL V7\n\n> **Canonical activation condition:** This protocol is authoritative only while the exact production kernel bytes bound below are installed, the current admission-head artifacts match their pinned identities, and fresh production `status` + `verify-chain` + `verify-claim-graph` pass. Any mismatch fails closed before registration or claim.\n\n> **Activation gate:** Protocol V7 no-receipt `CHAT_UNPROVEN` registration/claim is authorized **if and only if** canonical task `BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908` is `COMPLETE`, its `result_event_id` binds to a `TASK_RESULT_COMMITTED` event for that exact task, and the committing activator is not `CHAT_UNPROVEN`. Until then, a no-receipt execution may perform only local Val Town artifact/source reads plus bounded read-only verification after the admission bundle passes; it MUST NOT `register-agent` or `claim`. A preactivation `CHAT_UNPROVEN` lease may not renew or self-commit the activation task. This gate does not grant physical execution provenance or `P_real`.\n\n> **V6 reconciliation delta:** Exact historical comparison shows the Protocol-V5-pinned kernel was 83008 bytes / SHA-256 `600ddab6a1591a34a7e22e06a41fb2f5a838267f3b56e33c809d08ac6471f756`, while current production is 84299 bytes / SHA-256 `087cb4b5a57c16a6f19353357704fe943d7341961690aff11ec36c75ca5d8af9`. The four post-V5 drift regions are not accepted wholesale. Protocol V6 restores the V5-pinned claim-selector semantics, including all legacy reviewer/distinctness context fences, and removes the hard `<128 active slots => scaling-only claims` rule because `SUPERHERO_REALIZATION_FOCUS_POLICY_V1` explicitly requires first-superhero completion before staged scaling. Two deliberate hardenings remain: (1) the previously protocol-level CHAT_UNPROVEN activation rule is now structurally enforced in the kernel, including exact activation-task/event binding and anti-self-activation fences; and (2) `migrate-task-invariants` is removed from the atomically qualified mutation allowlist while remaining recognized/fail-closed. Bound production kernel: 85474 bytes / SHA-256 `e38c8bc4b78aed9199ba5e3f4b79b95f5914a508f9069fe10e75fcf8767227c9`. Builder static/semantic regression is 38/38 PASS. External model review attempts were non-diagnostic and are not counted as verification.\n\n## V7 autonomous-capacity strategy reconciliation\n\nProtocol V7 began by preserving the exact V6 production kernel and admission-head bundle. Canonical task `BRAIN-FOCUS-RUNTIME-POLICY-GATE-PROTOCOL-RECONCILED-PRODUCTION-INTEGRATION-P0-V1-20260910` later adds only the active runtime-focus claim/renew gate described below; admission-head, constitution, superhero-definition, superhero-focus-policy, executor, and worker bytes remain unchanged by that integration.\n\nFor **autonomous agent harnessing, worker supply, capacity scaling, browser-actuator decisions, account/workspace multiplier planning, and execution-route comparison**, workers MUST additionally load:\n\n- strategy head: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/CURRENT_AUTONOMOUS_CAPACITY_STRATEGY_HEAD.json`;\n- active strategy V2 exact-prompt immutable: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/AUTONOMOUS_CAPACITY_STRATEGY_V2_EXACT_PROMPT_IMMUTABLE_20260910.json`, 3961 bytes, SHA-256 `ead948a5f30ea24f99e71c0524dbc67ac2067c8e30baeb59fb792fb37e01f155`;\n- browser-actuator supersession V2 immutable: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/BROWSER_UI_CAPACITY_ACTUATOR_SUPERSESSION_V2_IMMUTABLE_20260910.json`, 2005 bytes, SHA-256 `710a438d8ead32aa66b573926e847e12fe372442e035c30143d7d4993a0d973e`.\n\nThe capacity-strategy head is a domain-policy pointer, not a replacement for the mandatory Thinking Constitution head. The strategy refines harness/capacity planning only. Current explicit user instruction still outranks it.\n\nMandatory domain laws:\n- **BEST PART IS NO PART:** delete or merge any harness/supply component that does not improve end-to-end verified completion;\n- **ALWAYS OPTIMAL:** compare the best currently evidenced routes and use the fastest right route; recompute when evidence changes;\n- **UNKNOWN LIMIT != REAL LIMIT** and **CURRENT IMPLEMENTATION/UI/ACCOUNT/PROVIDER/BROWSER/TOOL LIMIT != MISSION LIMIT**;\n- treat the user's real usable email pool as a legitimate account/workspace discovery resource, without counting email/account records as capacity;\n- browser-launched ChatGPT workers, programmable Luna workers, and other proven zero-cost substrates are sibling supply routes under the Brain supply controller;\n- the browser actuator contains only actuation, the user-editable persistent prompt, out-of-band launch provenance, and demand/backpressure controls; it MUST dispatch the prompt byte-identically until the user edits it and MUST NOT append/prepend launch metadata to the prompt; Brain owns changing project state, tasks, evidence, verification, recovery, and routing;\n- no UI/account/profile/tab/chat/model-call count increments `P_real`; positive execution provenance plus consequential Brain work remains required;\n- do not use account multiplicity to evade an explicitly established provider restriction or enforced usage protection; change route instead.\n\nAny capacity/harness worker that does not load and hash-verify the current strategy artifacts before architecture choice or route-limit interpretation is cognitively incomplete for that domain.\n\n### Active runtime-focus policy gate\n\nCurrent production `val_native_kernel_v1.ts` loads singleton carrier `BRAIN-RUNTIME-TEMPORARY-FOCUS-POLICY-CARRIER-P0-V1-20260910` (`schema=BRAIN_RUNTIME_FOCUS_POLICY_V1`). The current active carrier is revision `3`, source SHA-256 `5502b3da5b7e688ee821db89d9e0f73dbac1df6d9abe306156ba57f4f49ae41e`, primary task `BRAIN-HARNESS-LIVE-COMPOSER-INSERT-SEND-ROLLOVER-REPAIR-P0-V1-20260911-CMP1`, and objective `MAKE_THE_BROWSER_ACTUATOR_RELIABLY_INSERT_THE_EXACT_PERSISTENT_PROMPT_IN_THE_REAL_CHATGPT_PROJECT_COMPOSER_SEND_IT_CREATE_A_FRESH_PROJECT_CHAT_AND_REPEAT_AUTOMATICALLY`, with allowed classes `HARNESS`, `RELEVANT_OPENAI_MECHANISM`, and `STRICT_NECESSARY_DEPENDENCY`.\n\nWhile a valid carrier is active, direct `HARNESS` and `RELEVANT_OPENAI_MECHANISM` tasks remain eligible only when their `temporary_focus_policy_revision` and `temporary_focus_source_sha256` exactly match the active carrier. `STRICT_NECESSARY_DEPENDENCY` is not self-authorizing: both `bestReady` and `renew-lease` now evaluate one same-transaction canonical task snapshot and require a positive `depends_json` path from at least one `READY` or `LEASED`, `execution_allowed=true`, exact-policy direct HARNESS/OpenAI root to the strict target through only exact-policy live strict intermediates. Duplicate canonical task IDs, malformed context/dependency shapes, stale policy binding, orphan strict labels, terminal-only routes, and strict members of directed cycles fail closed; a healthy acyclic route remains valid even when a separate branch is cyclic. Missing, stale, malformed, or mismatched policy/task metadata fails closed. `commit` remains unchanged so already-produced consequential evidence is not stranded. Setting the carrier `active=false` resumes ordinary eligibility while preserving all pre-existing capability, dependency, guard, write-conflict, assignment, `execution_allowed`, authority, and `CHAT_UNPROVEN` fences. The carrier itself remains `READY` with `execution_allowed=false` and is therefore non-executable.\n\n## Purpose\n\nNormal ChatGPT project work uses Val Town as the only ChatGPT-facing transport to the canonical Project Brain. Direct Sprites connector calls are maintenance-only because they can trigger separate file-materialization approval prompts.\n\nNormal path:\n\n`ChatGPT → Val Town → brain_bridge_jobs → authority-selected Brain executor → canonical Brain`\n\nVal/project: `mosadek/project-brain-live-v1-durable` \nQueue: `brain_bridge_jobs` \nControl-plane authority: `brain_control_plane_authority_v1`\n\n## Mandatory cognitive constitution\n\nBefore substantive Project Brain reasoning, planning, claiming, implementation, review, or promotion, every worker MUST load the current constitution-head pointer:\n\n- head pointer: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`\n\nThen load the exact registry and constitution URIs named by that head and verify the constitution bytes against the head's SHA-256 before relying on it.\n\nCurrent verified admission-head artifacts for Protocol V7, unchanged from the V6 kernel/admission bundle (still re-read the head pointer; these values are not a substitute for it):\n- head: `evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`, 1824 bytes, SHA-256 `ac6be68568b14c54fc4919f00eae51baa6fa5770be8fcd7b3151cdb0d4ecbc83`;\n- constitution V4: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/PROJECT_BRAIN_THINKING_CONSTITUTION_V4.md`, 24630 bytes, SHA-256 `36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62`;\n- teaching registry V5: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/USER_TEACHING_REGISTRY_V5.json`, 4257 bytes, SHA-256 `05c85b6a0e98a711263d9042b4ea728ac99d16fe032840eb199b729fb6a7dbde`;\n- canonical superhero definition V1: 7786 bytes, SHA-256 `50fdd99f02b78aff8ba5fb89a98124c176c311ca8a08f7a92777be570f193a29`;\n- superhero realization focus policy V1: 3433 bytes, SHA-256 `a4dfc1a488a50ac8eb2471085a88c3aa9b27a2cdfe455be8d6e235811865fa62`.\n\nThe constitution is project-level operating law after system/safety/platform-enforced policy and the user's current explicit instruction.\n\nBoot is cognitively incomplete if the constitution head was not loaded. Memory summaries, old prompts, role descriptions, and historical architecture are discovery pointers only and do not substitute for the current head.\n\nMandatory reasoning invariants include:\n- FASTEST RIGHT WAY: minimize real wall-clock time to the correct independently verified goal;\n- first-principles decomposition before accepting architecture assumptions;\n- CURRENT IMPLEMENTATION LIMIT != MISSION LIMIT;\n- do not label platform/tool/quota/API/UI limitations fundamental without active elimination attempts;\n- delete/replace useless or materially suboptimal mechanisms when that improves the mission objective;\n- continuously recompute the critical path;\n- treat platforms/providers/tools as replaceable tactics;\n- prefer structural enforcement over permanent intelligent babysitting when both preserve the invariant;\n- preserve exact evidence and fail closed rather than hallucinating success;\n- distinguish COMPLETE from PASS, configuration from execution, and logical identity from real execution provenance.\n\nFuture durable user teachings are cumulative unless explicitly superseded. Preserve them as immutable user-directive evidence, classify them as EXTENDS / REFINES / SUPERSEDES, create a successor constitution version, update the registry head, and preserve prior versions. Never silently overwrite the user's reasoning doctrine.\n\nAt epoch 2 the live canonical writer is currently `val_native`. The historical host worker identity `project-brain-live-v1-worker-v2` remains compatibility evidence, not current writer authority.\n\n## Mandatory health interpretation\n\nThe HTTP endpoint being reachable is NOT proof that the authority-selected Brain executor is alive.\n\n`brain_bridge_worker.ts /health` is the historical host-bridge worker health surface. Its `worker_state` applies only to that host worker. Read `control_plane_authority.writer` before interpreting it:\n\n- if writer is `host_bridge`, HTTP 200/503 and `worker_state` are relevant to canonical executor liveness;\n- if writer is `val_native`, a stale host heartbeat does NOT mean the canonical control plane is down;\n- `endpoint_ok:true` only proves the Val endpoint itself is executing;\n- `worker_health_scope:HOST_BRIDGE_WORKER_ONLY` is an explicit interpretation fence;\n- `instance_identity_available:false` means the historical host worker has not supplied a distinct process instance ID. Do not overclaim process identity;\n- canonical status/chain/claim-graph receipts remain the authoritative proof of Brain state reached through the current writer path.\n\nCurrent Val-side invariants:\n- priority cap: `1_000_000_000`;\n- selection above the cap: FIFO by `created_at,id`;\n- maximum Brain command timeout: `120 seconds`;\n- queue lease: `180 seconds`;\n- atomic single-flight per `worker_id`;\n- an active unexpired lease is not redelivered to another poll sharing that worker ID;\n- a pre-existing duplicate active lease for one worker ID fails closed;\n- expired queue leases are terminalized `FAILED` on a worker poll with `TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN`; they are not automatically returned to READY;\n- an expired/unknown attempt must be reconciled against canonical state before any retry is submitted under a new job ID;\n- results are accepted only for the current unexpired lease owner.\n\nThese are transport invariants, not Brain authority.\n\n## Canonical freshness vs durability\n\nCanonical Brain integrity and independently verified replica durability are separate facts.\n\nThe worker health body exposes:\n\n- `durability.canonical_generation`;\n- `durability.max_verified_replica_generation`;\n- `durability.verified_replica_count`;\n- `durability.lag_generations`;\n- `durability.state = CURRENT | LAGGING | UNKNOWN`.\n\nInterpretation:\n\n- a canonical generation newer than the latest verified replica is valid canonical progress, but it is NOT fully replicated durability;\n- never report `fully durable` while `lag_generations > 0`;\n- durability lag does not by itself invalidate read-only canonical status/verification;\n- before destructive cleanup, authority transition, or a claim whose consequence depends on recoverability, explicitly account for the lag and preserve consequential evidence first;\n- never hide durability lag by reading an older replica as though it were current canonical state.\n\n## Val-native bound-attempt commit liveness\n\nThe Brain kernel keeps the strict `expected-workstream-generation` commit guard, and the epoch-2 Val-native executor keeps the authenticated queue `payload_json` byte-identical for the lifetime of one transport attempt. Production does not transparently rewrite a commit payload to inject a fresher generation.\n\nTo prevent admission churn from starving an already-READY commit, the transport selector applies a bounded commit-position barrier. A valid READY `status`, `verify-chain`, `verify-claim-graph`, `register-agent`, or `claim` job may not leapfrog a valid READY `commit` that is older by `created_at`, with `rowid` breaking same-timestamp ties. `recover-stale` remains recovery-first. Admission/read jobs genuinely older than the commit retain their existing place, and the same-second register-before-claim invariant remains unchanged.\n\nThis barrier does not declare unrelated canonical mutations semantically harmless. If an earlier mutation legitimately advances the workstream before a commit executes, the strict kernel may still return `STALE_WORKSTREAM_WRITE`; the caller must reconcile canonical state and submit a new job ID with a fresh expected generation. The bounded guarantee is narrower and auditable: later boot/read admission traffic cannot indefinitely leapfrog an older READY commit. Exact job, lease instance, lease attempt, transport generation, authority epoch, payload identity, task lease, dependency/guard/write semantics, and duplicate-terminal fences remain unchanged.\n\nHistorical evidence for the earlier task-local stable-retry design remains at `valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/val_native_stable_commit_retry_v1.json`, including its independent `artifact_present` falsification and repair. That mechanism is historical evidence, not the current production dispatch behavior.\n\n\n## Live-fabric boot admission (normal path)\n\nA fresh ChatGPT context is **not** proof of a physically distinct or superhero-qualified execution merely because it can choose a new `agent_id`, write a queue row, or read this protocol. Logical identity is not physical execution provenance.\n\nBefore a normal worker emits any boot-cohort queue traffic (`status`, `verify-chain`, `verify-claim-graph`, `register-agent`, or `claim`), the current cognitive-constitution head and every current registry/definition/focus-policy artifact it relies on for admission MUST be loaded from the connected Val Town project surfaces and byte/hash-verified. Missing, stale, ambiguous, or mismatched hashes fail closed before registration or claim.\n\nFor **Protocol V7**, the exact admission bundle remains the V6 kernel/admission bundle:\n\n- head: `evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`, 1824 bytes, SHA-256 `ac6be68568b14c54fc4919f00eae51baa6fa5770be8fcd7b3151cdb0d4ecbc83`;\n- constitution V4: 24630 bytes, SHA-256 `36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62`;\n- teaching registry V5: 4257 bytes, SHA-256 `05c85b6a0e98a711263d9042b4ea728ac99d16fe032840eb199b729fb6a7dbde`;\n- canonical superhero definition V1: 7786 bytes, SHA-256 `50fdd99f02b78aff8ba5fb89a98124c176c311ca8a08f7a92777be570f193a29`;\n- superhero realization focus policy V1: 3433 bytes, SHA-256 `a4dfc1a488a50ac8eb2471085a88c3aa9b27a2cdfe455be8d6e235811865fa62`;\n- production `val_native_kernel_v1.ts`: 102890 bytes, SHA-256 `643e54d69abd4cdd36acbd9b2d6e0c411095afd18e42d50b44b08bdfdf3748ed`. This V7 reconciliation retains exact-attempt stable-retry authorization rows after successful retry instead of deleting them, preserving the installed canonical no-delete hardening while the mutation receipt remains the idempotent completion authority, and integrates the qualified strict-causal runtime-focus gate into both claim selection and lease renewal.\n\nThe head's referenced URIs are authoritative for the four directive artifacts above. Protocol V7 is active only while canonical production matches the bound kernel identity and the activation gate above is satisfied. Any later admission-head, referenced-artifact, production-kernel, or mandatory capacity-strategy hash mismatch makes the affected V7 path stale and fail-closed until a successor explicitly reconciles the new bytes. Never treat historical candidate identity, comments, or builder tests as production activation evidence.\n\nAfter that verification there are exactly two ChatGPT admission classes:\n\n1. **Positively admitted execution.** If this execution is given a current project-controlled fabric/admission execution-incarnation receipt, validate the receipt exactly as before: it must be positively exposed rather than invented in model text, indicate `BOOTING` or `RUNNING`, carry an unexpired liveness signal, bind the intended logical identity/workstream/capability declaration, and contain no unresolved duplicate-incarnation ambiguity.\n2. **Ordinary unproven contribution.** If no positive execution-incarnation receipt is exposed, the execution MAY enter only as agent `type=CHAT_UNPROVEN`. This is a useful-contribution lane, not execution provenance. It proves neither physical distinctness, independent-review eligibility, autonomous proven supply, superhero capacity, nor any `P_real` increment.\n\nCaller-authored payload fields, a registry row, a queue row, a chat transcript, memory, a different `agent_id`, schedule ownership, heartbeat ownership, or a candidate-only attestation never upgrade `CHAT_UNPROVEN` into a proven execution.\n\nThe production kernel is the trust boundary for the unproven lane. Before using that lane, callers MUST verify that the current authority-selected kernel still enforces all of the following machine semantics:\n\n- `execution_distinct` is fail-closed unless a separately accepted positive ingress exists;\n- `CHAT_UNPROVEN` is categorically rejected for `execution_distinct`, even if a later positive ingress exists;\n- legacy machine-readable independence markers, including `independent_verification` and the current reviewer/distinctness context flags, are skipped by `CHAT_UNPROVEN`;\n- a `CHAT_UNPROVEN` `TASK_RESULT_COMMITTED` event receives kernel-injected `contributor_trust_class=CHAT_UNPROVEN`, `contributor_agent_type=CHAT_UNPROVEN`, `independence_eligible=false`, and `p_real_eligible=false`;\n- caller-controlled trust metadata cannot upgrade the result;\n- ordinary claim, lease, CAS, write-conflict, dependency, guard, and authority fences remain unchanged.\n\nIf those kernel semantics cannot be positively verified, the no-receipt lane fails closed and MUST NOT register or claim.\n\nFor either admission class, consume a current shared/coalesced status + chain + claim-graph receipt when one is available and correctly bound to the current authority/head. A `CHAT_UNPROVEN` execution may refresh missing/stale read-only verification through the normal Val-native queue only after the local hash prerequisites above pass; avoid one redundant verification trio per execution whenever a valid shared receipt exists.\n\nCurrent verified ChatGPT-specific boundary at this revision remains:\n\n- `BRAIN-CHAT-MCP-SESSION-EXECUTION-PROVENANCE-P0-V1-20260908` concluded `EXTERNAL_PRODUCT_CONNECTION_BOUNDARY`;\n- positive physical ChatGPT-session provenance is **not proven**;\n- `P_real` increment from that candidate is `0`;\n- a different logical `agent_id` alone is not evidence of a distinct ChatGPT execution.\n\nTherefore lack of a positive execution-incarnation receipt no longer blocks all useful work. It restricts the execution to `CHAT_UNPROVEN` ordinary contribution, with independence-sensitive work and proven-capacity accounting structurally unavailable.\n\nThe repaired cohort fast path is also **not production-qualified** at this revision. Current reconciled V3R1 candidate SHA-256 is `4031e62868abc9d7562f33e3986f0f5a29ec71c0a19b8e75ee4520071ef6e7ee`; its builder/self-falsification evidence is candidate-only, its genuinely distinct second-party gate remains required, and production integration is forbidden until that gate and any later promotion/integration gates pass. Do not route normal boot through it merely because it is faster in tests.\n\nBoth the positively admitted path and the `CHAT_UNPROVEN` fallback use the individual compatibility sequence described below when no qualified cohort path is available. That sequence creates a logical Brain identity and task lease; it does not retroactively prove the physical execution that invoked it.\n\n### V7 causal-context state transfer\n\nAfter admission-class selection and before consequential task cognition, workers SHOULD construct/consume a bounded causal working-set capsule from current canonical Brain state. This is a logical state-transfer contract, not a new execution-provenance class and not an authority upgrade.\n\nThe causal capsule is closed-schema and contains only:\n- immutable mandatory policy-head pointers with exact URI/hash/size identities;\n- current authority epoch/writer/mode plus a shared integrity receipt, with refresh required before consequential mutation when integrity is stale;\n- exact agent/workstream/task/lease identity and a task-contract digest covering `success_condition`, `decision_value`, `context_manifest`, `requires_json`, `depends_json`, `guards_json`, and `writes_json`;\n- resolved dependency, guard, and write/resource-conflict state sufficient to fail closed;\n- task-relevant content-addressed artifact/checkpoint pointers with size/hash/provenance, with bodies fetched only on demand;\n- an explicit unresolved-needs list and bounded continuation/checkpoint state.\n\nDo NOT serialize or treat as authoritative global `tasks`, `agents`, `history`, `transcript`, `messages`, or `all_artifacts`. Conversation text, Project memory, summaries, and stale project caches are discovery/non-authority data only. Precedence remains: current user instruction > canonical Brain state > hash-verified governing policy heads > scoped mutable task state > non-authoritative cache/transcript/memory.\n\nMissing, ambiguous, stale, or retrieval-failed facts require a targeted canonical fetch or fail closed. Never complete missing state from memory or conversation text. Freshness is semantic-scope based: unchanged hashed policy bytes remain valid until their governing head changes; task-local state remains valid only while its exact bound identities remain unchanged; task-context supersession or relevant dependency/guard/write/checkpoint change invalidates the affected scope; authority/integrity is revalidated before consequential mutation/commit.\n\nThe capsule MUST NOT weaken `CHAT_UNPROVEN`, execution-distinctness, independent-review, authority, or `P_real` fences. No new logical `agent_id`, queue row, schedule, tab, browser session, transcript, or capsule instance by itself proves physical execution distinctness or increments `P_real`.\n\nZero per-worker file-upload boot remains the default. Payload growth must remain bounded by `O(mandatory policy heads + task causal closure + referenced evidence)`, not `O(total tasks + agents + history)`. No numeric ChatGPT context-window threshold is inferred or invented from this mechanism.\n\nA duplicate or replayed capsule is rejected. This transfer mechanism is a bounded working-set optimization around canonical Brain truth; it does not replace Brain authority, task leases, CAS, verification, or fail-closed admission.\n### Browser-actuator capacity actuation\n\nThe prior categorical prohibition on browser/UI-based ChatGPT capacity actuation is superseded by the V7 autonomous-capacity strategy reconciliation above. For harness/capacity work, load and hash-verify `CURRENT_AUTONOMOUS_CAPACITY_STRATEGY_HEAD.json` and its referenced V2 artifacts. User-authorized browser/UI launching may supply fresh ChatGPT execution contexts and submit the user's persistent Brain bootstrap prompt byte-identically until the user edits it; launch provenance stays out-of-band. The launched worker still boots through canonical Brain and UI/account/profile/tab/chat/model-call counts remain unproven capacity. System- or platform-enforced policy still outranks Project Brain.\n\n## Submit a Brain command\n\nInsert a unique job:\n\n```sql\nINSERT INTO brain_bridge_jobs\n(id, priority, op, payload_json, state, lease_owner, lease_expires_at,\n result_json, error_json, created_at, updated_at)\nVALUES (?, ?, 'brain', ?, 'READY', NULL, NULL, NULL, NULL,\n datetime('now'), datetime('now'))\n```\n\nBrain payload is closed-schema:\n\n```json\n{\"args\":[\"status\"],\"timeout\":60}\n```\n\nRequirements:\n- exact top-level keys: `args`, `timeout`;\n- `args` is a non-empty string array;\n- `timeout` is an integer from 1 through 120;\n- `status`, `verify-chain`, and `verify-claim-graph` take no additional Brain arguments;\n- `renew-lease` uses canonical `--seconds`; stale `--lease-seconds` is rejected fail-closed;\n- `boot`, `boot-agent`, `recover-leases`, unsupported artifact commands, and payloads with extra top-level fields are not compatibility aliases.\n\nRecognized Brain subcommands at the bridge syntax layer:\n- status\n- verify-chain\n- verify-claim-graph\n- register-agent\n- ensure-task\n- delegate-task\n- claim\n- renew-lease\n- commit\n- checkpoint\n- add-claim\n- invalidate-claim\n- supersede-task-context\n- migrate-task-invariants\n- reconcile-causal-blocks\n- recover-stale\n\nDo not confuse `recognized` with `currently executable`.\n\nWhile control-plane authority is epoch-2 `val_native`, the current atomically qualified execution surface is exactly:\n- read-only: `status`, `verify-chain`, `verify-claim-graph`;\n- mutation: `register-agent`, `ensure-task`, `claim`, `renew-lease`, `commit`, `recover-stale`, `supersede-task-context`.\n\nThe remaining recognized mutators other than the explicitly qualified set above are implemented but deliberately fail closed with `VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED` until an independently verified reactivation changes the canonical Val-native allowlist. Clients MUST NOT enqueue them merely because the syntax layer recognizes their names. Re-read the current authority-selected executor before relying on a newly reactivated mutator.\n\nAnything outside the recognized syntax surface fails at Val-side dispatch rather than being sent onward.\n\n## Boot semantics\n\nThere is currently NO valid atomic `boot` bridge command.\n\nThe public bridge previously advertised `boot`, but the live kernel accepts `boot-agent` while the persistent executor rejects raw `boot-agent`. Therefore neither spelling is a valid end-to-end bridge operation.\n\n**Normal fresh-chat boot is the live-fabric admission gate above, not blind `register-agent → claim`.** A fresh context must first verify the current constitution/registry/definition/focus-policy hashes and the current authority-selected kernel semantics.\n\nAfter those checks:\n\n- if a valid positive execution-incarnation receipt is exposed, use the admitted execution class and preserve its exact receipt-bound type/capability semantics;\n- if no positive receipt is exposed, use only `type=CHAT_UNPROVEN`;\n- if the required hashes, chain/claim-graph state, or `CHAT_UNPROVEN` kernel fences cannot be verified, stop before registration/claim.\n\n### Pre-registration ordinary-capability inventory\n\nFor a **fresh logical agent identity only**, before constructing its first `register-agent` payload, inventory only ordinary execution surfaces that are positively exposed to the current ChatGPT execution. This is omission prevention under the existing caller-truth model, not execution-surface attestation and not an authority or independence upgrade.\n\nUse only this closed surface → capability mapping:\n\n- `model_reasoning` → `reasoning`\n- `file_analysis_surface` → `file_analysis`\n- `code_runtime` → `code_execution`\n- `deterministic_verifier` → `deterministic_verification`\n- `public_web_research` → `web_research`\n- `plugin_invocation_surface` → `plugin_orchestration`\n- `val_town_read_surface` → `val_town_read`\n- `val_town_write_surface` → `val_town_write`\n- `val_town_blob_surface` → `val_town_blob`\n- `val_town_sql_surface` → `val_town_sql`\n\nUnknown or ambiguous surfaces grant no capability and remain listed as unresolved. Do not expand generic aliases such as `val_town`. Canonicalize the mapped ordinary capability labels by exact string sort and de-duplication. Reject any requested extra capability label not produced by this closed mapping, and categorically exclude `human_authority_approval`, `independent_verification`, `execution_distinct`, reviewer/physical-distinctness labels, `p_real`, promotion-authority, and authority labels.\n\nBefore registration, bind a **nonauthority inventory digest** as SHA-256 over the UTF-8 bytes of the exact compact JSON object `{\"capabilities\":[...],\"unresolved_surfaces\":[...]}`, with both arrays exact-string-sorted and deduplicated. The digest is evidence of what the caller inventoried; it does not prove the surfaces independently. Submit `register-agent` with exactly the mapped capability array.\n\nIf that logical identity already exists or is rejoining, this block MUST NOT add, remove, substitute, or otherwise mutate its canonical capability set. Rejoin with the existing canonical set exactly; route newly observed ordinary additions to the separately gated capability-reconciliation path. This block does not relax positive execution-incarnation attestation, `CHAT_UNPROVEN`, independence, authority, promotion, `P_real`, runtime-focus, lease, CAS, write-conflict, or zero-spend fences.\n\nThe individual **compatibility** sequence for either allowed class is:\n\n1. consume or refresh bounded `status` + `verify-chain` + `verify-claim-graph` evidence as required by the live-fabric rules;\n2. `register-agent`;\n3. `claim`.\n\nThis sequence establishes only the logical Brain identity and task lease. For `CHAT_UNPROVEN`, it explicitly does **not** prove private model cognition, distinct physical ChatGPT execution, independent-review eligibility, superhero capacity, autonomous proven supply, or `P_real`.\n\nThe transport selector preserves a same-second paired compatibility invariant: when READY `register-agent` and `claim` jobs have the same `created_at` and exact agent identity, the registration is selected before its claim even if the claim has a higher submitted priority. Clients must not depend on priority to reverse that order.\n\nRegister only capabilities actually present in the execution. Never claim `human_authority_approval`. A no-receipt execution MUST register with `--type CHAT_UNPROVEN`; using `CHAT`, `PROVEN_EXECUTION`, or another stronger label without the corresponding positive admission evidence is forbidden.\n\nNo-receipt ordinary contribution example:\n\n```text\nregister-agent --workstream --role \n --type CHAT_UNPROVEN --capabilities \n\nclaim --agent --mode INTERACTIVE --lease-seconds 1800\n --constitution-version \n --constitution-sha256 \n --registry-version \n```\n\nA positively admitted execution may use the same sequence with its exact receipt-authorized type instead of `CHAT_UNPROVEN`.\n\nDo not submit `boot` or `boot-agent` until a later verified bridge/executor revision explicitly restores an atomic wrapper. Do not promote the candidate cohort path until its required distinct second-party and production-integration gates actually pass.\n\n## Lease recovery semantics\n\nCanonical Brain task-lease recovery is exposed through exactly one bridge spelling:\n\n```json\n{\"args\":[\"recover-stale\"],\"timeout\":60}\n```\n\nRequirements:\n- the Brain subcommand is exactly `recover-stale`;\n- `args` contains exactly that one string and no additional arguments;\n- `timeout` remains an integer from 1 through 120;\n- `recover-leases` is intentionally rejected and is not an alias;\n- unknown recovery spellings fail closed at Val-side dispatch.\n\nVal transport queue-lease expiry remains a separate transport mechanism. The worker detects expired transport attempts on poll and terminalizes them `FAILED` with unknown canonical outcome; it does not treat transport expiry as proof that the Brain command had no effect.\n\nEnd-to-end evidence: queue job `chat-sol-20260906-0139-recover-stale-v5-z91` completed through the persistent V5 worker at Brain generation 1321 and recovered three expired canonical task leases. This establishes the current recovery path; it does not prove permanent executor liveness or transport attempt-fencing.\n\n## Poll a job result\n\n```sql\nSELECT id,state,lease_owner,lease_expires_at,result_json,error_json,updated_at\nFROM brain_bridge_jobs\nWHERE id=?\n```\n\nTerminal states:\n- COMPLETE\n- FAILED\n\nA READY job means it has not been executed. A LEASED job is not complete. Do not infer canonical mutation from queue state alone.\n\n## Read project/Brain text without Sprites\n\nThe currently authoritative epoch-2 `val_native` executor accepts only `op='brain'`. It rejects queue `op='read_text'` with `VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP`.\n\nTherefore while `brain_control_plane_authority_v1.writer='val_native'`:\n\n- DO NOT enqueue `read_text` jobs for `/brain/JOIN_PROTOCOL.md` or artifacts;\n- read Val-hosted project source/protocol files through the connected Val Town file tools;\n- obtain canonical Brain state through the allowed `brain` commands and bounded project-controlled read-only canonical views;\n- do not convert a missing transport read operation into a reason to call Sprites.\n\nThe historical host bridge still contains a bounded `read_text` implementation for compatibility. It is eligible only if `host_bridge` is again the authoritative writer and the exact current executor path is independently shown to support it. Historical successful reads do not establish epoch-2 support.\n\n## Hard transport rule\n\nRoutine ChatGPT work:\n- DO NOT call Sprites;\n- DO NOT call Sprites.exec;\n- DO NOT call Sprites.file_read/file_write/file_copy/file_delete;\n- DO NOT call Sprites service/checkpoint/file/blob operations.\n\nIf a required operation is missing:\n1. use an existing valid non-Sprites substrate when possible;\n2. route or build a bridge extension;\n3. fail closed if the missing operation is necessary;\n4. direct Sprites remains an explicit maintenance emergency, not an automatic fallback.\n\n## Failure behavior\n\nIf a fresh context lacks a valid positive execution incarnation:\n- verify the current constitution/registry/definition/focus-policy hashes and the current authority-selected `CHAT_UNPROVEN` kernel fences;\n- if those checks pass, enter only through the bounded `CHAT_UNPROVEN` ordinary-contribution path;\n- if any prerequisite is missing, stale, ambiguous, mismatched, or the kernel no longer enforces the unproven trust boundary, enqueue no registration/claim and return the exact failing prerequisite;\n- never reinterpret absence of a positive receipt as physical-session proof, independent-review eligibility, proven autonomous supply, superhero capacity, or `P_real`.\n\nFor already-admitted work, if jobs stay READY:\n1. inspect `/health`;\n2. inspect worker endpoint traces;\n3. inspect the current active/expired queue leases;\n4. do not raise transport priorities above the cap to win a queue arms race;\n5. do not interpret the Val endpoint being online as the Brain worker being online.\n\nIf worker health is DOWN:\n- queued commands remain pending;\n- no live Brain registration, claim, commit, status, or verification should be invented;\n- Val-side code/evidence work may continue when it does not pretend to mutate canonical Brain;\n- repair/restore the persistent executor through an authorized route, then resume queue processing.\n\n## Proven facts and bounded claims\n\nThe reverse bridge has successfully:\n- read Brain status;\n- created canonical Brain tasks;\n- registered CHAT agents;\n- claimed tasks;\n- committed task results;\n- run verify-chain and verify-claim-graph.\n\nThe Val-side worker has independently reproduced and repaired the same-worker concurrent lease race in isolated queue tests. This does NOT prove the persistent Sprite-side executor is permanently supervised or continuously alive.\n\n## Val branch capacity rule\n\nNormal ChatGPT/Brain work MUST NOT create one Val Town branch per agent.\n\nUse task-scoped project blobs for scratch/evidence first. Use task-namespaced files on `main` only when shared executable/source bytes are necessary and the Brain task's declared write-resource lease permits them. Use a bounded reusable scratch branch only when branch isolation is causally required. A net-new branch requires an explicit task need, a branch-headroom check, and a preservation/cleanup plan.\n\nDo not delete a branch merely because it is old, low-version, or apparently merged. Before deletion apply `VAL_BRANCH_LIFECYCLE_POLICY_V1.md`; any unresolved dependency or unique-evidence question means KEEP.\n\nThe scaling invariant is:\n\n`d(live_branch_count) / d(agent_count) = 0`\n\nThis keeps the reproduced Val Town branch ceiling out of the normal agent-admission path.\n\n## Goal\n\nNormal project work must stay materialization-free from ChatGPT while remaining fail-closed:\n\n`verified local project state → {positive admitted execution | CHAT_UNPROVEN ordinary contributor} → Val Town → durable queue → authority-selected live executor → verified Brain`\n\nA fresh ChatGPT context with no positively exposed project-controlled execution incarnation may now contribute ordinary work only as `CHAT_UNPROVEN` after the required hash/kernel/Brain checks pass. It remains excluded from independence-sensitive acceptance and proven-capacity accounting. If the live executor disappears, the system must say so rather than smiling with HTTP 200 like a malfunctioning status page.\n\n## Epoch-2 external-artifact registration candidate (not production-qualified)\n\n`record-external-artifact` is implemented in `val_native_kernel_v1.ts` as a **candidate-only** current-epoch port. It is intentionally absent from `REACTIVATION_MUTATION_ALLOWLIST`, so production dispatch must return `VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED` and perform no canonical artifact/event mutation.\n\nThe candidate:\n- accepts only the closed `{args, timeout}` envelope and a closed artifact flag grammar;\n- forbids `human_authority_approval` escalation;\n- accepts only project-scoped `valblob:mosadek/project-brain-live-v1-durable/…` evidence and verifies exact blob size + SHA-256;\n- makes an exact repeated registration a semantic no-op at artifact/event/generation/workstream-head level;\n- fails closed on conflicting metadata or duplicate canonical rows for the same SHA-256;\n- inherits epoch-2 exact-attempt mutation receipts, transport fencing, chain/claim-graph circuit breaking, and unknown-outcome terminalization.\n\nDo **not** add this command to the live mutation allowlist, advertise it as qualified capacity, or execute the preserved 137-byte canonical probe until a genuinely distinct second-party review returns PASS under the current CHAT-execution distinctness rules. A different `agent_id` alone is not proof of a different physical ChatGPT execution.\n",[190],"9c115104-cd87-4dec-8778-97deaf006618","BASE_val_native_kernel_v1.ts","01a0a1e3-f900-758b-8dd8-976df4ca106f",7,["D",1789422467327],[196],"23a2bd4b-c24d-4930-977b-a928ed9cc27e",["D",1789422470876],[27],"pulls","branches","forks","envVars",{"_211":61,"_213":61},"connections",{"_211":61,"_212":61},"count","unfilledCount","emptyCount",{"_41":201,"_31":27,"_29":30,"_142":-5,"_39":40,"_38":14,"_144":57,"_36":252,"_13":61,"_32":33,"_34":35,"_23":24,"_147":-5,"_225":253,"_26":254},{"_41":195,"_31":196,"_29":197,"_142":-5,"_39":40,"_38":198,"_144":57,"_36":249,"_13":61,"_32":33,"_34":146,"_23":24,"_147":-5,"_225":250,"_26":251},{"_41":189,"_31":190,"_29":191,"_142":-5,"_39":40,"_38":143,"_144":57,"_36":246,"_13":61,"_32":20,"_34":193,"_23":24,"_147":-5,"_225":247,"_26":248},{"_41":182,"_31":183,"_29":184,"_142":-5,"_39":40,"_38":185,"_144":57,"_36":243,"_13":61,"_32":20,"_34":187,"_23":24,"_147":-5,"_225":244,"_26":245},{"_41":175,"_31":176,"_29":177,"_142":-5,"_39":40,"_38":178,"_144":57,"_36":240,"_13":61,"_32":33,"_34":180,"_23":24,"_147":-5,"_225":241,"_26":242},{"_41":168,"_31":169,"_29":170,"_142":-5,"_39":40,"_38":171,"_144":57,"_36":237,"_13":61,"_32":33,"_34":173,"_23":24,"_147":-5,"_225":238,"_26":239},{"_41":161,"_31":162,"_29":163,"_142":-5,"_39":40,"_38":164,"_144":57,"_36":234,"_13":61,"_32":33,"_34":166,"_23":24,"_147":-5,"_225":235,"_26":236},{"_41":154,"_31":155,"_29":156,"_142":-5,"_39":40,"_38":157,"_144":57,"_36":231,"_13":61,"_32":33,"_34":159,"_23":24,"_147":-5,"_225":232,"_26":233},{"_41":149,"_31":150,"_29":151,"_142":-5,"_39":40,"_38":143,"_144":24,"_36":228,"_13":61,"_32":33,"_34":35,"_23":24,"_147":-5,"_225":229,"_26":230},{"_41":139,"_31":140,"_29":141,"_142":-5,"_39":40,"_38":143,"_144":24,"_36":224,"_13":61,"_32":33,"_34":146,"_23":24,"_147":-5,"_225":226,"_26":227},["D",1789422318356],"children",[],[140],["D",1789422318356],[],[150],["D",1789422395330],[],[155],["D",1789422376830],[],[162],["D",1789422412553],[],[169],["D",1789422329136],[],[176],["D",1789422310582],[],[183],["D",1789422318356],[],[190],["D",1789422467327],[],[196],["D",1789422470876],[],[27],["D",1789422310520],["D",1789522252250],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_126":293,"_294":295,"_296":297,"_298":24,"_299":24,"_300":24,"_301":57,"_302":-5,"_303":-7,"_304":-7,"_305":61,"_306":24,"_307":24,"_308":-5,"_309":24,"_310":24,"_311":24,"_312":-5},"ENV",{"_264":265,"_266":267,"_268":88,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290,"_291":292},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8