[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_196":197,"_198":199},"routes/_app.x.$handle.$name",{"_98":97,"_32":44,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":26,"_122":123,"_124":24,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":26,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":24,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":26},"version",20,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":26,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":26},"previous","deleted",true,"deletedHere",false,"path","hash_v2.ts","latestPath","fileId","c8917530-a922-11f1-bbf3-1607ee4eb77e","name","fileType","script","content","const te=new TextEncoder();async function sha(s:string){return [...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s)))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")};console.log(JSON.stringify({main_sha256:await sha(\"import { sqlite } from \\\"https://esm.town/v/std/sqlite/main.ts\\\";\\nconst te=new TextEncoder();\\nconst GUARD=\\\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\\\";\\nconst PUB=\\\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\\\";\\nconst PUBSHA=\\\"d3fe054be501f6eb8c050be85f540ffd07e0bbfff079a62cd3e87d3aaafa90fc\\\";\\nconst GENPAY=\\\"c555778a4b3ef3195ba02e878dedfc42fdc844dc9a7835eba6b4853403bc5701\\\";\\nconst GENEV=\\\"17d252f86fceda0eafd016c88ab3128d210fa50faf9cc1911fa0441afc879920\\\";\\nfunction canon(v:any):string{if(v===null||typeof v!==\\\"object\\\")return JSON.stringify(v);if(Array.isArray(v))return \\\"[\\\"+v.map(canon).join(\\\",\\\")+\\\"]\\\";return \\\"{\\\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\\\":\\\"+canon(v[k])).join(\\\",\\\")+\\\"}\\\"}\\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\\\"0\\\")).join(\\\"\\\")}\\nfunction b64(b:Uint8Array){let s=\\\"\\\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\\\"SHA-256\\\",te.encode(s))))}\\nasync function key(){const s=Deno.env.get(\\\"EW_SIGNING_KEY_PKCS8_B64\\\");if(!s)throw Error(\\\"SIGNING_KEY_MISSING\\\");return crypto.subtle.importKey(\\\"pkcs8\\\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"sign\\\"])}\\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\\\"Ed25519\\\",await key(),te.encode(canon(o)))))}\\nasync function mac(s:string,m:string){const k=await crypto.subtle.importKey(\\\"raw\\\",te.encode(s),{name:\\\"HMAC\\\",hash:\\\"SHA-256\\\"},false,[\\\"sign\\\"]);return hex(new Uint8Array(await crypto.subtle.sign(\\\"HMAC\\\",k,te.encode(m))))}\\nfunction eq(a:string,b:string){if(a.length!==b.length)return false;let x=0;for(let i=0;ic.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"verify\\\"])}\\nasync function head(){const r=await sqlite.execute(\\\"select * from ew_heads order by seq asc\\\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b})));if(!ok)throw Error(\\\"HEAD_SIGNATURE_INVALID_ROW_\\\"+i);prev=x.head_hash;last=x}return last}\\nasync function validLease(l:any){if(!l)return false;let b:any;try{b=JSON.parse(l.lease_body)}catch{return false}if(b.lease_id!==l.id||b.challenge_id!==l.challenge_id||b.session_id!==l.session_id||b.user_turn_sha256!==l.user_turn_sha256||b.guard_sha256!==l.guard_sha256||b.expected_head_hash!==l.expected_head_hash||Number(b.expires_at)!==Number(l.expires_at)||b.one_time!==true||b.guard_sha256!==GUARD)return false;return crypto.subtle.verify(\\\"Ed25519\\\",await vkey(),Uint8Array.from(atob(l.lease_signature),c=>c.charCodeAt(0)),te.encode(canon(b)))}\\nasync function event(type:string,body:any){const t=Date.now(),eb=canon({event_type:type,created_at:t,body}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:type,created_at:t});await sqlite.execute({sql:\\\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\\\",args:[type,eb,eh,es,t]})}\\nasync function body(req:Request){if(!(req.headers.get(\\\"content-type\\\")||\\\"\\\").includes(\\\"application/json\\\"))throw Error(\\\"JSON_REQUIRED\\\");return req.json()}\\nasync function status(){await init();const h=await head(),p=await sqlite.execute(\\\"select count(*) as n from ew_proposals where status='PENDING'\\\");return res({ok:true,service:\\\"enforcement-watch-gate\\\",version:\\\"EW_GATE_V2\\\",guard_sha256:GUARD,public_key_raw_b64:PUB,public_key_sha256:PUBSHA,current_head:{seq:h.seq,head_hash:h.head_hash,predecessor_hash:h.predecessor_hash,payload_sha256:h.payload_sha256,evidence_manifest_sha256:h.evidence_manifest_sha256,proposal_id:h.proposal_id,lease_id:h.lease_id,created_at:h.created_at,head_body:JSON.parse(h.head_body),head_signature:h.head_signature},pending_proposals:Number((p.rows as any[])[0].n),rules:{unactivated_output:\\\"CANDIDATE_NONAUTHORITY\\\",public_mutation_endpoints:false,activation_requires:[\\\"authenticated Val Town MCP request staging\\\",\\\"turn-bound signed one-time lease\\\"],commit_requires:[\\\"valid signed lease\\\",\\\"exact predecessor CAS\\\",\\\"internal signer\\\"],host_admin_boundary:\\\"SEPARATE_ROOT_AUTHORITY_TRANSITION\\\"}})}\\nasync function challenge(req:Request){await init();const b:any=await body(req);if(!id(b.session_id))return bad(\\\"BAD_SESSION_ID\\\");if(!sh(b.user_turn_sha256))return bad(\\\"BAD_USER_TURN_SHA256\\\");const h=await head(),cid=crypto.randomUUID(),nonce=b64(crypto.getRandomValues(new Uint8Array(32))).replace(/=+$/,\\\"\\\"),nh=await sha(nonce),exp=Date.now()+300000;await sqlite.execute({sql:\\\"insert into ew_challenges(id,nonce_hash,session_id,user_turn_sha256,expected_head_hash,expires_at,used) values(?,?,?,?,?,?,0)\\\",args:[cid,nh,b.session_id,b.user_turn_sha256,h.head_hash,exp]});const o={challenge_id:cid,nonce,session_id:b.session_id,user_turn_sha256:b.user_turn_sha256,expected_head_hash:h.head_hash,guard_sha256:GUARD,expires_at:exp};return res({ok:true,...o,challenge_signature:await sign(o),activation_mac_message:[cid,nonce,b.session_id,b.user_turn_sha256,GUARD,h.head_hash].join(\\\"|\\\")})}\\nasync function activate(req:Request){await init();const b:any=await body(req);if(!id(b.challenge_id)||!id(b.session_id)||!sh(b.user_turn_sha256)||b.guard_sha256!==GUARD||!sh(b.expected_head_hash)||!sh(b.activation_mac))return bad(\\\"BAD_ACTIVATION_FIELDS\\\");const q=await sqlite.execute({sql:\\\"select * from ew_challenges where id=?\\\",args:[b.challenge_id]}),c=(q.rows as any[])[0];if(!c)return bad(\\\"CHALLENGE_NOT_FOUND\\\",404);if(Number(c.used)!==0)return bad(\\\"CHALLENGE_ALREADY_USED\\\",409);if(Date.now()>Number(c.expires_at))return bad(\\\"CHALLENGE_EXPIRED\\\",409);if(!eq(await sha(b.nonce),c.nonce_hash)||b.session_id!==c.session_id||b.user_turn_sha256!==c.user_turn_sha256||b.expected_head_hash!==c.expected_head_hash)return bad(\\\"CHALLENGE_BINDING_MISMATCH\\\",409);const s=Deno.env.get(\\\"EW_ACTIVATION_SHARED_SECRET\\\");if(!s)return bad(\\\"ACTIVATION_SECRET_MISSING\\\",500);const msg=[b.challenge_id,b.nonce,b.session_id,b.user_turn_sha256,GUARD,b.expected_head_hash].join(\\\"|\\\");if(!eq(await mac(s,msg),b.activation_mac))return bad(\\\"ACTIVATION_CAPABILITY_REJECTED\\\",403);const h=await head();if(h.head_hash!==b.expected_head_hash)return bad(\\\"HEAD_MOVED_RECHALLENGE_REQUIRED\\\",409,{actual:h.head_hash});const lid=crypto.randomUUID(),exp=Date.now()+600000,lb={lease_id:lid,challenge_id:b.challenge_id,session_id:b.session_id,user_turn_sha256:b.user_turn_sha256,guard_sha256:GUARD,expected_head_hash:b.expected_head_hash,expires_at:exp,one_time:true},ls=await sign(lb);await sqlite.batch([{sql:\\\"update ew_challenges set used=1 where id=? and used=0\\\",args:[b.challenge_id]},{sql:\\\"insert into ew_leases values(?,?,?,?,?,?,?,0,?,?)\\\",args:[lid,b.challenge_id,b.session_id,b.user_turn_sha256,GUARD,b.expected_head_hash,exp,canon(lb),ls]}]);await event(\\\"ACTIVATION_LEASE_ISSUED\\\",{lease_id:lid,expected_head_hash:b.expected_head_hash,user_turn_sha256:b.user_turn_sha256});return res({ok:true,lease:lb,lease_signature:ls})}\\nasync function propose(req:Request){await init();const b:any=await body(req);if(!id(b.lease_id)||!sh(b.expected_head_hash)||!sh(b.payload_sha256)||!sh(b.evidence_manifest_sha256)||b.classification!==\\\"VERIFIED_CANDIDATE_PROMOTION\\\")return bad(\\\"BAD_PROPOSAL_FIELDS\\\");const q=await sqlite.execute({sql:\\\"select * from ew_leases where id=?\\\",args:[b.lease_id]}),l=(q.rows as any[])[0];if(!l)return bad(\\\"LEASE_NOT_FOUND\\\",404);if(!await validLease(l)||Number(l.used)!==0||Date.now()>Number(l.expires_at)||l.guard_sha256!==GUARD||l.expected_head_hash!==b.expected_head_hash)return bad(\\\"LEASE_INVALID\\\",409);const h=await head();if(h.head_hash!==b.expected_head_hash)return bad(\\\"HEAD_MOVED_REACTIVATION_REQUIRED\\\",409,{actual:h.head_hash});const pid=crypto.randomUUID();try{await sqlite.execute({sql:\\\"insert into ew_proposals(id,lease_id,expected_head_hash,payload_sha256,evidence_manifest_sha256,classification,created_at,status) values(?,?,?,?,?,?,?,'PENDING')\\\",args:[pid,b.lease_id,b.expected_head_hash,b.payload_sha256,b.evidence_manifest_sha256,b.classification,Date.now()]})}catch(e){return bad(\\\"LEASE_ALREADY_HAS_PROPOSAL\\\",409,String(e))}await event(\\\"PROPOSAL_ACCEPTED_PENDING_INTERNAL_COMMIT\\\",{proposal_id:pid,lease_id:b.lease_id,expected_head_hash:b.expected_head_hash,payload_sha256:b.payload_sha256,evidence_manifest_sha256:b.evidence_manifest_sha256});return res({ok:true,proposal_id:pid,status:\\\"PENDING_INTERNAL_COMMIT\\\"})}\\nasync function ledger(req:Request){await init();const n=Math.max(1,Math.min(50,Number(new URL(req.url).searchParams.get(\\\"limit\\\")||20))),r=await sqlite.execute({sql:\\\"select * from ew_ledger order by seq desc limit ?\\\",args:[n]});return res({ok:true,events:r.rows})}\\nexport default async function(req:Request){try{const p=new URL(req.url).pathname;if(req.method===\\\"GET\\\"&&(p===\\\"/\\\"||p===\\\"/status\\\"))return status();if(req.method===\\\"GET\\\"&&p===\\\"/ledger\\\")return ledger(req);if(req.method!==\\\"GET\\\")return bad(\\\"PUBLIC_MUTATION_DISABLED\\\",405);return bad(\\\"NOT_FOUND\\\",404)}catch(e){console.error(e);return bad(\\\"INTERNAL_ERROR\\\",500,String(e))}}\"),main_bytes:te.encode(\"import { sqlite } from \\\"https://esm.town/v/std/sqlite/main.ts\\\";\\nconst te=new TextEncoder();\\nconst GUARD=\\\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\\\";\\nconst PUB=\\\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\\\";\\nconst PUBSHA=\\\"d3fe054be501f6eb8c050be85f540ffd07e0bbfff079a62cd3e87d3aaafa90fc\\\";\\nconst GENPAY=\\\"c555778a4b3ef3195ba02e878dedfc42fdc844dc9a7835eba6b4853403bc5701\\\";\\nconst GENEV=\\\"17d252f86fceda0eafd016c88ab3128d210fa50faf9cc1911fa0441afc879920\\\";\\nfunction canon(v:any):string{if(v===null||typeof v!==\\\"object\\\")return JSON.stringify(v);if(Array.isArray(v))return \\\"[\\\"+v.map(canon).join(\\\",\\\")+\\\"]\\\";return \\\"{\\\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\\\":\\\"+canon(v[k])).join(\\\",\\\")+\\\"}\\\"}\\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\\\"0\\\")).join(\\\"\\\")}\\nfunction b64(b:Uint8Array){let s=\\\"\\\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\\\"SHA-256\\\",te.encode(s))))}\\nasync function key(){const s=Deno.env.get(\\\"EW_SIGNING_KEY_PKCS8_B64\\\");if(!s)throw Error(\\\"SIGNING_KEY_MISSING\\\");return crypto.subtle.importKey(\\\"pkcs8\\\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"sign\\\"])}\\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\\\"Ed25519\\\",await key(),te.encode(canon(o)))))}\\nasync function mac(s:string,m:string){const k=await crypto.subtle.importKey(\\\"raw\\\",te.encode(s),{name:\\\"HMAC\\\",hash:\\\"SHA-256\\\"},false,[\\\"sign\\\"]);return hex(new Uint8Array(await crypto.subtle.sign(\\\"HMAC\\\",k,te.encode(m))))}\\nfunction eq(a:string,b:string){if(a.length!==b.length)return false;let x=0;for(let i=0;ic.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"verify\\\"])}\\nasync function head(){const r=await sqlite.execute(\\\"select * from ew_heads order by seq asc\\\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b})));if(!ok)throw Error(\\\"HEAD_SIGNATURE_INVALID_ROW_\\\"+i);prev=x.head_hash;last=x}return last}\\nasync function validLease(l:any){if(!l)return false;let b:any;try{b=JSON.parse(l.lease_body)}catch{return false}if(b.lease_id!==l.id||b.challenge_id!==l.challenge_id||b.session_id!==l.session_id||b.user_turn_sha256!==l.user_turn_sha256||b.guard_sha256!==l.guard_sha256||b.expected_head_hash!==l.expected_head_hash||Number(b.expires_at)!==Number(l.expires_at)||b.one_time!==true||b.guard_sha256!==GUARD)return false;return crypto.subtle.verify(\\\"Ed25519\\\",await vkey(),Uint8Array.from(atob(l.lease_signature),c=>c.charCodeAt(0)),te.encode(canon(b)))}\\nasync function event(type:string,body:any){const t=Date.now(),eb=canon({event_type:type,created_at:t,body}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:type,created_at:t});await sqlite.execute({sql:\\\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\\\",args:[type,eb,eh,es,t]})}\\nasync function body(req:Request){if(!(req.headers.get(\\\"content-type\\\")||\\\"\\\").includes(\\\"application/json\\\"))throw Error(\\\"JSON_REQUIRED\\\");return req.json()}\\nasync function status(){await init();const h=await head(),p=await sqlite.execute(\\\"select count(*) as n from ew_proposals where status='PENDING'\\\");return res({ok:true,service:\\\"enforcement-watch-gate\\\",version:\\\"EW_GATE_V2\\\",guard_sha256:GUARD,public_key_raw_b64:PUB,public_key_sha256:PUBSHA,current_head:{seq:h.seq,head_hash:h.head_hash,predecessor_hash:h.predecessor_hash,payload_sha256:h.payload_sha256,evidence_manifest_sha256:h.evidence_manifest_sha256,proposal_id:h.proposal_id,lease_id:h.lease_id,created_at:h.created_at,head_body:JSON.parse(h.head_body),head_signature:h.head_signature},pending_proposals:Number((p.rows as any[])[0].n),rules:{unactivated_output:\\\"CANDIDATE_NONAUTHORITY\\\",public_mutation_endpoints:false,activation_requires:[\\\"authenticated Val Town MCP request staging\\\",\\\"turn-bound signed one-time lease\\\"],commit_requires:[\\\"valid signed lease\\\",\\\"exact predecessor CAS\\\",\\\"internal signer\\\"],host_admin_boundary:\\\"SEPARATE_ROOT_AUTHORITY_TRANSITION\\\"}})}\\nasync function challenge(req:Request){await init();const b:any=await body(req);if(!id(b.session_id))return bad(\\\"BAD_SESSION_ID\\\");if(!sh(b.user_turn_sha256))return bad(\\\"BAD_USER_TURN_SHA256\\\");const h=await head(),cid=crypto.randomUUID(),nonce=b64(crypto.getRandomValues(new Uint8Array(32))).replace(/=+$/,\\\"\\\"),nh=await sha(nonce),exp=Date.now()+300000;await sqlite.execute({sql:\\\"insert into ew_challenges(id,nonce_hash,session_id,user_turn_sha256,expected_head_hash,expires_at,used) values(?,?,?,?,?,?,0)\\\",args:[cid,nh,b.session_id,b.user_turn_sha256,h.head_hash,exp]});const o={challenge_id:cid,nonce,session_id:b.session_id,user_turn_sha256:b.user_turn_sha256,expected_head_hash:h.head_hash,guard_sha256:GUARD,expires_at:exp};return res({ok:true,...o,challenge_signature:await sign(o),activation_mac_message:[cid,nonce,b.session_id,b.user_turn_sha256,GUARD,h.head_hash].join(\\\"|\\\")})}\\nasync function activate(req:Request){await init();const b:any=await body(req);if(!id(b.challenge_id)||!id(b.session_id)||!sh(b.user_turn_sha256)||b.guard_sha256!==GUARD||!sh(b.expected_head_hash)||!sh(b.activation_mac))return bad(\\\"BAD_ACTIVATION_FIELDS\\\");const q=await sqlite.execute({sql:\\\"select * from ew_challenges where id=?\\\",args:[b.challenge_id]}),c=(q.rows as any[])[0];if(!c)return bad(\\\"CHALLENGE_NOT_FOUND\\\",404);if(Number(c.used)!==0)return bad(\\\"CHALLENGE_ALREADY_USED\\\",409);if(Date.now()>Number(c.expires_at))return bad(\\\"CHALLENGE_EXPIRED\\\",409);if(!eq(await sha(b.nonce),c.nonce_hash)||b.session_id!==c.session_id||b.user_turn_sha256!==c.user_turn_sha256||b.expected_head_hash!==c.expected_head_hash)return bad(\\\"CHALLENGE_BINDING_MISMATCH\\\",409);const s=Deno.env.get(\\\"EW_ACTIVATION_SHARED_SECRET\\\");if(!s)return bad(\\\"ACTIVATION_SECRET_MISSING\\\",500);const msg=[b.challenge_id,b.nonce,b.session_id,b.user_turn_sha256,GUARD,b.expected_head_hash].join(\\\"|\\\");if(!eq(await mac(s,msg),b.activation_mac))return bad(\\\"ACTIVATION_CAPABILITY_REJECTED\\\",403);const h=await head();if(h.head_hash!==b.expected_head_hash)return bad(\\\"HEAD_MOVED_RECHALLENGE_REQUIRED\\\",409,{actual:h.head_hash});const lid=crypto.randomUUID(),exp=Date.now()+600000,lb={lease_id:lid,challenge_id:b.challenge_id,session_id:b.session_id,user_turn_sha256:b.user_turn_sha256,guard_sha256:GUARD,expected_head_hash:b.expected_head_hash,expires_at:exp,one_time:true},ls=await sign(lb);await sqlite.batch([{sql:\\\"update ew_challenges set used=1 where id=? and used=0\\\",args:[b.challenge_id]},{sql:\\\"insert into ew_leases values(?,?,?,?,?,?,?,0,?,?)\\\",args:[lid,b.challenge_id,b.session_id,b.user_turn_sha256,GUARD,b.expected_head_hash,exp,canon(lb),ls]}]);await event(\\\"ACTIVATION_LEASE_ISSUED\\\",{lease_id:lid,expected_head_hash:b.expected_head_hash,user_turn_sha256:b.user_turn_sha256});return res({ok:true,lease:lb,lease_signature:ls})}\\nasync function propose(req:Request){await init();const b:any=await body(req);if(!id(b.lease_id)||!sh(b.expected_head_hash)||!sh(b.payload_sha256)||!sh(b.evidence_manifest_sha256)||b.classification!==\\\"VERIFIED_CANDIDATE_PROMOTION\\\")return bad(\\\"BAD_PROPOSAL_FIELDS\\\");const q=await sqlite.execute({sql:\\\"select * from ew_leases where id=?\\\",args:[b.lease_id]}),l=(q.rows as any[])[0];if(!l)return bad(\\\"LEASE_NOT_FOUND\\\",404);if(!await validLease(l)||Number(l.used)!==0||Date.now()>Number(l.expires_at)||l.guard_sha256!==GUARD||l.expected_head_hash!==b.expected_head_hash)return bad(\\\"LEASE_INVALID\\\",409);const h=await head();if(h.head_hash!==b.expected_head_hash)return bad(\\\"HEAD_MOVED_REACTIVATION_REQUIRED\\\",409,{actual:h.head_hash});const pid=crypto.randomUUID();try{await sqlite.execute({sql:\\\"insert into ew_proposals(id,lease_id,expected_head_hash,payload_sha256,evidence_manifest_sha256,classification,created_at,status) values(?,?,?,?,?,?,?,'PENDING')\\\",args:[pid,b.lease_id,b.expected_head_hash,b.payload_sha256,b.evidence_manifest_sha256,b.classification,Date.now()]})}catch(e){return bad(\\\"LEASE_ALREADY_HAS_PROPOSAL\\\",409,String(e))}await event(\\\"PROPOSAL_ACCEPTED_PENDING_INTERNAL_COMMIT\\\",{proposal_id:pid,lease_id:b.lease_id,expected_head_hash:b.expected_head_hash,payload_sha256:b.payload_sha256,evidence_manifest_sha256:b.evidence_manifest_sha256});return res({ok:true,proposal_id:pid,status:\\\"PENDING_INTERNAL_COMMIT\\\"})}\\nasync function ledger(req:Request){await init();const n=Math.max(1,Math.min(50,Number(new URL(req.url).searchParams.get(\\\"limit\\\")||20))),r=await sqlite.execute({sql:\\\"select * from ew_ledger order by seq desc limit ?\\\",args:[n]});return res({ok:true,events:r.rows})}\\nexport default async function(req:Request){try{const p=new URL(req.url).pathname;if(req.method===\\\"GET\\\"&&(p===\\\"/\\\"||p===\\\"/status\\\"))return status();if(req.method===\\\"GET\\\"&&p===\\\"/ledger\\\")return ledger(req);if(req.method!==\\\"GET\\\")return bad(\\\"PUBLIC_MUTATION_DISABLED\\\",405);return bad(\\\"NOT_FOUND\\\",404)}catch(e){console.error(e);return bad(\\\"INTERNAL_ERROR\\\",500,String(e))}}\").length,activate_sha256:await sha(\"import { sqlite } from \\\"https://esm.town/v/std/sqlite/main.ts\\\";\\nconst te=new TextEncoder(),GUARD=\\\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\\\",PUB=\\\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\\\";\\nfunction canon(v:any):string{if(v===null||typeof v!==\\\"object\\\")return JSON.stringify(v);if(Array.isArray(v))return \\\"[\\\"+v.map(canon).join(\\\",\\\")+\\\"]\\\";return \\\"{\\\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\\\":\\\"+canon(v[k])).join(\\\",\\\")+\\\"}\\\"}\\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\\\"0\\\")).join(\\\"\\\")}function b64(b:Uint8Array){let s=\\\"\\\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\\\"SHA-256\\\",te.encode(s))))}\\nasync function key(){const s=Deno.env.get(\\\"EW_SIGNING_KEY_PKCS8_B64\\\");if(!s)throw Error(\\\"SIGNING_KEY_MISSING\\\");return crypto.subtle.importKey(\\\"pkcs8\\\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"sign\\\"])}\\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\\\"Ed25519\\\",await key(),te.encode(canon(o)))))}\\nasync function vkey(){return crypto.subtle.importKey(\\\"raw\\\",Uint8Array.from(atob(PUB),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"verify\\\"])}\\nasync function head(){const r=await sqlite.execute(\\\"select * from ew_heads order by seq asc\\\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b}))))throw Error(\\\"HEAD_SIGNATURE_INVALID_ROW_\\\"+i);prev=x.head_hash;last=x}return last}\\nasync function event(type:string,body:any){const t=Date.now(),eb=canon({event_type:type,created_at:t,body}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:type,created_at:t});await sqlite.execute({sql:\\\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\\\",args:[type,eb,eh,es,t]})}\\nconst q=await sqlite.execute(\\\"select * from ew_activation_requests where status='PENDING' order by created_at desc limit 1\\\"),r=(q.rows as any[])[0];\\nif(!r)console.log(JSON.stringify({status:\\\"NO_PENDING_ACTIVATION_REQUEST\\\"}));else{let reject:string|null=null;if(typeof r.session_id!==\\\"string\\\"||!/^[A-Za-z0-9_.:\\\\-]{8,160}$/.test(r.session_id))reject=\\\"BAD_SESSION_ID\\\";else if(typeof r.user_turn_sha256!==\\\"string\\\"||!/^[0-9a-f]{64}$/.test(r.user_turn_sha256))reject=\\\"BAD_USER_TURN_SHA256\\\";else if(Date.now()-Number(r.created_at)>300000||Number(r.created_at)>Date.now()+30000)reject=\\\"REQUEST_EXPIRED_OR_FUTURE\\\";const h=await head();if(!reject&&r.expected_head_hash!==h.head_hash)reject=\\\"HEAD_CAS_MISMATCH\\\";if(reject){await sqlite.execute({sql:\\\"update ew_activation_requests set status=? where id=? and status='PENDING'\\\",args:[\\\"REJECTED_\\\"+reject,r.id]});console.log(JSON.stringify({status:\\\"REJECTED\\\",reason:reject,request_id:r.id}))}else{const lid=crypto.randomUUID(),exp=Date.now()+600000,lb={lease_id:lid,challenge_id:r.id,session_id:r.session_id,user_turn_sha256:r.user_turn_sha256,guard_sha256:GUARD,expected_head_hash:r.expected_head_hash,expires_at:exp,one_time:true},ls=await sign(lb);await sqlite.batch([{sql:\\\"update ew_activation_requests set status='ISSUED' where id=? and status='PENDING'\\\",args:[r.id]},{sql:\\\"insert into ew_leases values(?,?,?,?,?,?,?,0,?,?)\\\",args:[lid,r.id,r.session_id,r.user_turn_sha256,GUARD,r.expected_head_hash,exp,canon(lb),ls]}]);await event(\\\"AUTHENTICATED_MCP_ACTIVATION_LEASE_ISSUED\\\",{request_id:r.id,lease_id:lid,expected_head_hash:r.expected_head_hash,user_turn_sha256:r.user_turn_sha256});console.log(JSON.stringify({status:\\\"LEASE_ISSUED\\\",request_id:r.id,lease:lb,lease_signature:ls}))}}\"),activate_bytes:te.encode(\"import { sqlite } from \\\"https://esm.town/v/std/sqlite/main.ts\\\";\\nconst te=new TextEncoder(),GUARD=\\\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\\\",PUB=\\\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\\\";\\nfunction canon(v:any):string{if(v===null||typeof v!==\\\"object\\\")return JSON.stringify(v);if(Array.isArray(v))return \\\"[\\\"+v.map(canon).join(\\\",\\\")+\\\"]\\\";return \\\"{\\\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\\\":\\\"+canon(v[k])).join(\\\",\\\")+\\\"}\\\"}\\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\\\"0\\\")).join(\\\"\\\")}function b64(b:Uint8Array){let s=\\\"\\\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\\\"SHA-256\\\",te.encode(s))))}\\nasync function key(){const s=Deno.env.get(\\\"EW_SIGNING_KEY_PKCS8_B64\\\");if(!s)throw Error(\\\"SIGNING_KEY_MISSING\\\");return crypto.subtle.importKey(\\\"pkcs8\\\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"sign\\\"])}\\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\\\"Ed25519\\\",await key(),te.encode(canon(o)))))}\\nasync function vkey(){return crypto.subtle.importKey(\\\"raw\\\",Uint8Array.from(atob(PUB),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"verify\\\"])}\\nasync function head(){const r=await sqlite.execute(\\\"select * from ew_heads order by seq asc\\\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b}))))throw Error(\\\"HEAD_SIGNATURE_INVALID_ROW_\\\"+i);prev=x.head_hash;last=x}return last}\\nasync function event(type:string,body:any){const t=Date.now(),eb=canon({event_type:type,created_at:t,body}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:type,created_at:t});await sqlite.execute({sql:\\\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\\\",args:[type,eb,eh,es,t]})}\\nconst q=await sqlite.execute(\\\"select * from ew_activation_requests where status='PENDING' order by created_at desc limit 1\\\"),r=(q.rows as any[])[0];\\nif(!r)console.log(JSON.stringify({status:\\\"NO_PENDING_ACTIVATION_REQUEST\\\"}));else{let reject:string|null=null;if(typeof r.session_id!==\\\"string\\\"||!/^[A-Za-z0-9_.:\\\\-]{8,160}$/.test(r.session_id))reject=\\\"BAD_SESSION_ID\\\";else if(typeof r.user_turn_sha256!==\\\"string\\\"||!/^[0-9a-f]{64}$/.test(r.user_turn_sha256))reject=\\\"BAD_USER_TURN_SHA256\\\";else if(Date.now()-Number(r.created_at)>300000||Number(r.created_at)>Date.now()+30000)reject=\\\"REQUEST_EXPIRED_OR_FUTURE\\\";const h=await head();if(!reject&&r.expected_head_hash!==h.head_hash)reject=\\\"HEAD_CAS_MISMATCH\\\";if(reject){await sqlite.execute({sql:\\\"update ew_activation_requests set status=? where id=? and status='PENDING'\\\",args:[\\\"REJECTED_\\\"+reject,r.id]});console.log(JSON.stringify({status:\\\"REJECTED\\\",reason:reject,request_id:r.id}))}else{const lid=crypto.randomUUID(),exp=Date.now()+600000,lb={lease_id:lid,challenge_id:r.id,session_id:r.session_id,user_turn_sha256:r.user_turn_sha256,guard_sha256:GUARD,expected_head_hash:r.expected_head_hash,expires_at:exp,one_time:true},ls=await sign(lb);await sqlite.batch([{sql:\\\"update ew_activation_requests set status='ISSUED' where id=? and status='PENDING'\\\",args:[r.id]},{sql:\\\"insert into ew_leases values(?,?,?,?,?,?,?,0,?,?)\\\",args:[lid,r.id,r.session_id,r.user_turn_sha256,GUARD,r.expected_head_hash,exp,canon(lb),ls]}]);await event(\\\"AUTHENTICATED_MCP_ACTIVATION_LEASE_ISSUED\\\",{request_id:r.id,lease_id:lid,expected_head_hash:r.expected_head_hash,user_turn_sha256:r.user_turn_sha256});console.log(JSON.stringify({status:\\\"LEASE_ISSUED\\\",request_id:r.id,lease:lb,lease_signature:ls}))}}\").length,commit_sha256:await sha(\"import { sqlite } from \\\"https://esm.town/v/std/sqlite/main.ts\\\";\\nconst te=new TextEncoder(),GUARD=\\\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\\\",PUB=\\\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\\\";\\nfunction canon(v:any):string{if(v===null||typeof v!==\\\"object\\\")return JSON.stringify(v);if(Array.isArray(v))return \\\"[\\\"+v.map(canon).join(\\\",\\\")+\\\"]\\\";return \\\"{\\\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\\\":\\\"+canon(v[k])).join(\\\",\\\")+\\\"}\\\"}\\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\\\"0\\\")).join(\\\"\\\")}\\nfunction b64(b:Uint8Array){let s=\\\"\\\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\\\"SHA-256\\\",te.encode(s))))}\\nasync function key(){const s=Deno.env.get(\\\"EW_SIGNING_KEY_PKCS8_B64\\\");if(!s)throw Error(\\\"SIGNING_KEY_MISSING\\\");return crypto.subtle.importKey(\\\"pkcs8\\\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"sign\\\"])}\\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\\\"Ed25519\\\",await key(),te.encode(canon(o)))))}\\nasync function vkey(){return crypto.subtle.importKey(\\\"raw\\\",Uint8Array.from(atob(PUB),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"verify\\\"])}\\nasync function validHead(){const r=await sqlite.execute(\\\"select * from ew_heads order by seq asc\\\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b}))))throw Error(\\\"HEAD_SIGNATURE_INVALID_ROW_\\\"+i);prev=x.head_hash;last=x}return last}\\nasync function validLease(l:any){if(!l)return false;let b:any;try{b=JSON.parse(l.lease_body)}catch{return false}if(b.lease_id!==l.id||b.challenge_id!==l.challenge_id||b.session_id!==l.session_id||b.user_turn_sha256!==l.user_turn_sha256||b.guard_sha256!==l.guard_sha256||b.expected_head_hash!==l.expected_head_hash||Number(b.expires_at)!==Number(l.expires_at)||b.one_time!==true||b.guard_sha256!==GUARD)return false;return crypto.subtle.verify(\\\"Ed25519\\\",await vkey(),Uint8Array.from(atob(l.lease_signature),c=>c.charCodeAt(0)),te.encode(canon(b)))}\\nconst pr=await sqlite.execute(\\\"select * from ew_proposals where status='PENDING' order by created_at asc limit 1\\\"),p=(pr.rows as any[])[0];\\nif(!p)console.log(JSON.stringify({status:\\\"NO_PENDING_PROPOSAL\\\"}));else{const lr=await sqlite.execute({sql:\\\"select * from ew_leases where id=?\\\",args:[p.lease_id]}),l=(lr.rows as any[])[0],h=await validHead();let reject:string|null=null;if(!l)reject=\\\"LEASE_NOT_FOUND\\\";else if(!await validLease(l))reject=\\\"LEASE_SIGNATURE_INVALID\\\";else if(Number(l.used)!==0)reject=\\\"LEASE_ALREADY_USED\\\";else if(Date.now()>Number(l.expires_at))reject=\\\"LEASE_EXPIRED\\\";else if(l.guard_sha256!==GUARD)reject=\\\"LEASE_GUARD_MISMATCH\\\";else if(!h)reject=\\\"HEAD_MISSING\\\";else if(p.expected_head_hash!==h.head_hash||l.expected_head_hash!==h.head_hash)reject=\\\"HEAD_CAS_MISMATCH\\\";else if(p.classification!==\\\"VERIFIED_CANDIDATE_PROMOTION\\\")reject=\\\"BAD_CLASSIFICATION\\\";if(reject){await sqlite.execute({sql:\\\"update ew_proposals set status=? where id=?\\\",args:[\\\"REJECTED_\\\"+reject,p.id]});console.log(JSON.stringify({status:\\\"REJECTED\\\",reason:reject,proposal_id:p.id}))}else{const seq=Number(h.seq)+1,t=Date.now(),body={seq,predecessor_hash:h.head_hash,payload_sha256:p.payload_sha256,evidence_manifest_sha256:p.evidence_manifest_sha256,proposal_id:p.id,lease_id:p.lease_id,guard_sha256:GUARD,created_at:t},bj=canon(body),hh=await sha(bj),sig=await sign({head_hash:hh,body});await sqlite.batch([{sql:\\\"update ew_leases set used=1 where id=? and used=0\\\",args:[p.lease_id]},{sql:\\\"update ew_proposals set status='COMMITTED' where id=? and status='PENDING'\\\",args:[p.id]},{sql:\\\"insert into ew_heads values(?,?,?,?,?,?,?,?,?,?)\\\",args:[seq,hh,h.head_hash,p.payload_sha256,p.evidence_manifest_sha256,p.id,p.lease_id,t,bj,sig]}]);const eb=canon({event_type:\\\"AUTHORITATIVE_HEAD_COMMITTED\\\",created_at:t,body:{seq,head_hash:hh,predecessor_hash:h.head_hash,proposal_id:p.id,lease_id:p.lease_id}}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:\\\"AUTHORITATIVE_HEAD_COMMITTED\\\",created_at:t});await sqlite.execute({sql:\\\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\\\",args:[\\\"AUTHORITATIVE_HEAD_COMMITTED\\\",eb,eh,es,t]});console.log(JSON.stringify({status:\\\"COMMITTED\\\",seq,head_hash:hh,head_signature:sig,body}))}}\"),commit_bytes:te.encode(\"import { sqlite } from \\\"https://esm.town/v/std/sqlite/main.ts\\\";\\nconst te=new TextEncoder(),GUARD=\\\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\\\",PUB=\\\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\\\";\\nfunction canon(v:any):string{if(v===null||typeof v!==\\\"object\\\")return JSON.stringify(v);if(Array.isArray(v))return \\\"[\\\"+v.map(canon).join(\\\",\\\")+\\\"]\\\";return \\\"{\\\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\\\":\\\"+canon(v[k])).join(\\\",\\\")+\\\"}\\\"}\\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\\\"0\\\")).join(\\\"\\\")}\\nfunction b64(b:Uint8Array){let s=\\\"\\\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\\\"SHA-256\\\",te.encode(s))))}\\nasync function key(){const s=Deno.env.get(\\\"EW_SIGNING_KEY_PKCS8_B64\\\");if(!s)throw Error(\\\"SIGNING_KEY_MISSING\\\");return crypto.subtle.importKey(\\\"pkcs8\\\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"sign\\\"])}\\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\\\"Ed25519\\\",await key(),te.encode(canon(o)))))}\\nasync function vkey(){return crypto.subtle.importKey(\\\"raw\\\",Uint8Array.from(atob(PUB),c=>c.charCodeAt(0)),{name:\\\"Ed25519\\\"},false,[\\\"verify\\\"])}\\nasync function validHead(){const r=await sqlite.execute(\\\"select * from ew_heads order by seq asc\\\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b}))))throw Error(\\\"HEAD_SIGNATURE_INVALID_ROW_\\\"+i);prev=x.head_hash;last=x}return last}\\nasync function validLease(l:any){if(!l)return false;let b:any;try{b=JSON.parse(l.lease_body)}catch{return false}if(b.lease_id!==l.id||b.challenge_id!==l.challenge_id||b.session_id!==l.session_id||b.user_turn_sha256!==l.user_turn_sha256||b.guard_sha256!==l.guard_sha256||b.expected_head_hash!==l.expected_head_hash||Number(b.expires_at)!==Number(l.expires_at)||b.one_time!==true||b.guard_sha256!==GUARD)return false;return crypto.subtle.verify(\\\"Ed25519\\\",await vkey(),Uint8Array.from(atob(l.lease_signature),c=>c.charCodeAt(0)),te.encode(canon(b)))}\\nconst pr=await sqlite.execute(\\\"select * from ew_proposals where status='PENDING' order by created_at asc limit 1\\\"),p=(pr.rows as any[])[0];\\nif(!p)console.log(JSON.stringify({status:\\\"NO_PENDING_PROPOSAL\\\"}));else{const lr=await sqlite.execute({sql:\\\"select * from ew_leases where id=?\\\",args:[p.lease_id]}),l=(lr.rows as any[])[0],h=await validHead();let reject:string|null=null;if(!l)reject=\\\"LEASE_NOT_FOUND\\\";else if(!await validLease(l))reject=\\\"LEASE_SIGNATURE_INVALID\\\";else if(Number(l.used)!==0)reject=\\\"LEASE_ALREADY_USED\\\";else if(Date.now()>Number(l.expires_at))reject=\\\"LEASE_EXPIRED\\\";else if(l.guard_sha256!==GUARD)reject=\\\"LEASE_GUARD_MISMATCH\\\";else if(!h)reject=\\\"HEAD_MISSING\\\";else if(p.expected_head_hash!==h.head_hash||l.expected_head_hash!==h.head_hash)reject=\\\"HEAD_CAS_MISMATCH\\\";else if(p.classification!==\\\"VERIFIED_CANDIDATE_PROMOTION\\\")reject=\\\"BAD_CLASSIFICATION\\\";if(reject){await sqlite.execute({sql:\\\"update ew_proposals set status=? where id=?\\\",args:[\\\"REJECTED_\\\"+reject,p.id]});console.log(JSON.stringify({status:\\\"REJECTED\\\",reason:reject,proposal_id:p.id}))}else{const seq=Number(h.seq)+1,t=Date.now(),body={seq,predecessor_hash:h.head_hash,payload_sha256:p.payload_sha256,evidence_manifest_sha256:p.evidence_manifest_sha256,proposal_id:p.id,lease_id:p.lease_id,guard_sha256:GUARD,created_at:t},bj=canon(body),hh=await sha(bj),sig=await sign({head_hash:hh,body});await sqlite.batch([{sql:\\\"update ew_leases set used=1 where id=? and used=0\\\",args:[p.lease_id]},{sql:\\\"update ew_proposals set status='COMMITTED' where id=? and status='PENDING'\\\",args:[p.id]},{sql:\\\"insert into ew_heads values(?,?,?,?,?,?,?,?,?,?)\\\",args:[seq,hh,h.head_hash,p.payload_sha256,p.evidence_manifest_sha256,p.id,p.lease_id,t,bj,sig]}]);const eb=canon({event_type:\\\"AUTHORITATIVE_HEAD_COMMITTED\\\",created_at:t,body:{seq,head_hash:hh,predecessor_hash:h.head_hash,proposal_id:p.id,lease_id:p.lease_id}}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:\\\"AUTHORITATIVE_HEAD_COMMITTED\\\",created_at:t});await sqlite.execute({sql:\\\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\\\",args:[\\\"AUTHORITATIVE_HEAD_COMMITTED\\\",eb,eh,es,t]});console.log(JSON.stringify({status:\\\"COMMITTED\\\",seq,head_hash:hh,head_signature:sig,body}))}}\").length}))","createdAt",["D",1788610228402],"branchVersion","branchId","8725077f-12a5-4f94-8269-01932a7752a4","id","97208e2b-3f6a-411e-9a01-e1a08329ff5b","enforcement-watch-gate",["D",1788608984397],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Cryptographic authority gate for Enforcement Watch","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","e32286b2-a91f-11f1-baf2-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","97208e2b3f6a411e9a01e1a08329ff5b","tursoHostname","97208e2b3f6a411e9a01e1a08329ff5b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789564859486],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":26},"branch",{"_13":87,"_32":88,"_42":41,"_89":43,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":44,"_96":97},"isOwned",24,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":191,"_46":-5,"_47":26,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":24,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":192,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":193,"_82":194,"_84":195,"_86":26},"tree",[174,175,176,177],"files",[174,175,176,177],"counts",{"_162":61,"_163":164,"_165":61,"_166":167,"_168":169},"contents",[129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":155,"_32":156,"_30":157,"_135":-5,"_40":41,"_39":158,"_137":24,"_37":159,"_13":61,"_33":34,"_35":160,"_23":26,"_142":-5,"_27":161},{"_42":147,"_32":148,"_30":149,"_135":-5,"_40":41,"_39":150,"_137":24,"_37":151,"_13":152,"_33":34,"_35":153,"_23":26,"_142":-5,"_27":154},{"_42":144,"_32":28,"_30":31,"_135":-5,"_40":41,"_39":14,"_137":26,"_37":145,"_13":61,"_33":34,"_35":36,"_23":26,"_142":-5,"_27":146},{"_42":133,"_32":134,"_30":56,"_135":-5,"_40":41,"_39":136,"_137":26,"_37":138,"_13":139,"_33":140,"_35":141,"_23":26,"_142":-5,"_27":143},"9b7fb24b-e043-4373-896f-550f0a70f897","main.ts","parentId",18,"latest",["D",1788610177414],9,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst te=new TextEncoder();\nconst GUARD=\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\";\nconst PUB=\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\";\nconst PUBSHA=\"d3fe054be501f6eb8c050be85f540ffd07e0bbfff079a62cd3e87d3aaafa90fc\";\nconst GENPAY=\"c555778a4b3ef3195ba02e878dedfc42fdc844dc9a7835eba6b4853403bc5701\";\nconst GENEV=\"17d252f86fceda0eafd016c88ab3128d210fa50faf9cc1911fa0441afc879920\";\nfunction canon(v:any):string{if(v===null||typeof v!==\"object\")return JSON.stringify(v);if(Array.isArray(v))return \"[\"+v.map(canon).join(\",\")+\"]\";return \"{\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\":\"+canon(v[k])).join(\",\")+\"}\"}\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction b64(b:Uint8Array){let s=\"\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s))))}\nasync function key(){const s=Deno.env.get(\"EW_SIGNING_KEY_PKCS8_B64\");if(!s)throw Error(\"SIGNING_KEY_MISSING\");return crypto.subtle.importKey(\"pkcs8\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\"Ed25519\"},false,[\"sign\"])}\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\"Ed25519\",await key(),te.encode(canon(o)))))}\nasync function mac(s:string,m:string){const k=await crypto.subtle.importKey(\"raw\",te.encode(s),{name:\"HMAC\",hash:\"SHA-256\"},false,[\"sign\"]);return hex(new Uint8Array(await crypto.subtle.sign(\"HMAC\",k,te.encode(m))))}\nfunction eq(a:string,b:string){if(a.length!==b.length)return false;let x=0;for(let i=0;ic.charCodeAt(0)),{name:\"Ed25519\"},false,[\"verify\"])}\nasync function head(){const r=await sqlite.execute(\"select * from ew_heads order by seq asc\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b})));if(!ok)throw Error(\"HEAD_SIGNATURE_INVALID_ROW_\"+i);prev=x.head_hash;last=x}return last}\nasync function validLease(l:any){if(!l)return false;let b:any;try{b=JSON.parse(l.lease_body)}catch{return false}if(b.lease_id!==l.id||b.challenge_id!==l.challenge_id||b.session_id!==l.session_id||b.user_turn_sha256!==l.user_turn_sha256||b.guard_sha256!==l.guard_sha256||b.expected_head_hash!==l.expected_head_hash||Number(b.expires_at)!==Number(l.expires_at)||b.one_time!==true||b.guard_sha256!==GUARD)return false;return crypto.subtle.verify(\"Ed25519\",await vkey(),Uint8Array.from(atob(l.lease_signature),c=>c.charCodeAt(0)),te.encode(canon(b)))}\nasync function event(type:string,body:any){const t=Date.now(),eb=canon({event_type:type,created_at:t,body}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:type,created_at:t});await sqlite.execute({sql:\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\",args:[type,eb,eh,es,t]})}\nasync function body(req:Request){if(!(req.headers.get(\"content-type\")||\"\").includes(\"application/json\"))throw Error(\"JSON_REQUIRED\");return req.json()}\nasync function status(){await init();const h=await head(),p=await sqlite.execute(\"select count(*) as n from ew_proposals where status='PENDING'\");return res({ok:true,service:\"enforcement-watch-gate\",version:\"EW_GATE_V2\",guard_sha256:GUARD,public_key_raw_b64:PUB,public_key_sha256:PUBSHA,current_head:{seq:h.seq,head_hash:h.head_hash,predecessor_hash:h.predecessor_hash,payload_sha256:h.payload_sha256,evidence_manifest_sha256:h.evidence_manifest_sha256,proposal_id:h.proposal_id,lease_id:h.lease_id,created_at:h.created_at,head_body:JSON.parse(h.head_body),head_signature:h.head_signature},pending_proposals:Number((p.rows as any[])[0].n),rules:{unactivated_output:\"CANDIDATE_NONAUTHORITY\",public_mutation_endpoints:false,activation_requires:[\"authenticated Val Town MCP request staging\",\"turn-bound signed one-time lease\"],commit_requires:[\"valid signed lease\",\"exact predecessor CAS\",\"internal signer\"],host_admin_boundary:\"SEPARATE_ROOT_AUTHORITY_TRANSITION\"}})}\nasync function challenge(req:Request){await init();const b:any=await body(req);if(!id(b.session_id))return bad(\"BAD_SESSION_ID\");if(!sh(b.user_turn_sha256))return bad(\"BAD_USER_TURN_SHA256\");const h=await head(),cid=crypto.randomUUID(),nonce=b64(crypto.getRandomValues(new Uint8Array(32))).replace(/=+$/,\"\"),nh=await sha(nonce),exp=Date.now()+300000;await sqlite.execute({sql:\"insert into ew_challenges(id,nonce_hash,session_id,user_turn_sha256,expected_head_hash,expires_at,used) values(?,?,?,?,?,?,0)\",args:[cid,nh,b.session_id,b.user_turn_sha256,h.head_hash,exp]});const o={challenge_id:cid,nonce,session_id:b.session_id,user_turn_sha256:b.user_turn_sha256,expected_head_hash:h.head_hash,guard_sha256:GUARD,expires_at:exp};return res({ok:true,...o,challenge_signature:await sign(o),activation_mac_message:[cid,nonce,b.session_id,b.user_turn_sha256,GUARD,h.head_hash].join(\"|\")})}\nasync function activate(req:Request){await init();const b:any=await body(req);if(!id(b.challenge_id)||!id(b.session_id)||!sh(b.user_turn_sha256)||b.guard_sha256!==GUARD||!sh(b.expected_head_hash)||!sh(b.activation_mac))return bad(\"BAD_ACTIVATION_FIELDS\");const q=await sqlite.execute({sql:\"select * from ew_challenges where id=?\",args:[b.challenge_id]}),c=(q.rows as any[])[0];if(!c)return bad(\"CHALLENGE_NOT_FOUND\",404);if(Number(c.used)!==0)return bad(\"CHALLENGE_ALREADY_USED\",409);if(Date.now()>Number(c.expires_at))return bad(\"CHALLENGE_EXPIRED\",409);if(!eq(await sha(b.nonce),c.nonce_hash)||b.session_id!==c.session_id||b.user_turn_sha256!==c.user_turn_sha256||b.expected_head_hash!==c.expected_head_hash)return bad(\"CHALLENGE_BINDING_MISMATCH\",409);const s=Deno.env.get(\"EW_ACTIVATION_SHARED_SECRET\");if(!s)return bad(\"ACTIVATION_SECRET_MISSING\",500);const msg=[b.challenge_id,b.nonce,b.session_id,b.user_turn_sha256,GUARD,b.expected_head_hash].join(\"|\");if(!eq(await mac(s,msg),b.activation_mac))return bad(\"ACTIVATION_CAPABILITY_REJECTED\",403);const h=await head();if(h.head_hash!==b.expected_head_hash)return bad(\"HEAD_MOVED_RECHALLENGE_REQUIRED\",409,{actual:h.head_hash});const lid=crypto.randomUUID(),exp=Date.now()+600000,lb={lease_id:lid,challenge_id:b.challenge_id,session_id:b.session_id,user_turn_sha256:b.user_turn_sha256,guard_sha256:GUARD,expected_head_hash:b.expected_head_hash,expires_at:exp,one_time:true},ls=await sign(lb);await sqlite.batch([{sql:\"update ew_challenges set used=1 where id=? and used=0\",args:[b.challenge_id]},{sql:\"insert into ew_leases values(?,?,?,?,?,?,?,0,?,?)\",args:[lid,b.challenge_id,b.session_id,b.user_turn_sha256,GUARD,b.expected_head_hash,exp,canon(lb),ls]}]);await event(\"ACTIVATION_LEASE_ISSUED\",{lease_id:lid,expected_head_hash:b.expected_head_hash,user_turn_sha256:b.user_turn_sha256});return res({ok:true,lease:lb,lease_signature:ls})}\nasync function propose(req:Request){await init();const b:any=await body(req);if(!id(b.lease_id)||!sh(b.expected_head_hash)||!sh(b.payload_sha256)||!sh(b.evidence_manifest_sha256)||b.classification!==\"VERIFIED_CANDIDATE_PROMOTION\")return bad(\"BAD_PROPOSAL_FIELDS\");const q=await sqlite.execute({sql:\"select * from ew_leases where id=?\",args:[b.lease_id]}),l=(q.rows as any[])[0];if(!l)return bad(\"LEASE_NOT_FOUND\",404);if(!await validLease(l)||Number(l.used)!==0||Date.now()>Number(l.expires_at)||l.guard_sha256!==GUARD||l.expected_head_hash!==b.expected_head_hash)return bad(\"LEASE_INVALID\",409);const h=await head();if(h.head_hash!==b.expected_head_hash)return bad(\"HEAD_MOVED_REACTIVATION_REQUIRED\",409,{actual:h.head_hash});const pid=crypto.randomUUID();try{await sqlite.execute({sql:\"insert into ew_proposals(id,lease_id,expected_head_hash,payload_sha256,evidence_manifest_sha256,classification,created_at,status) values(?,?,?,?,?,?,?,'PENDING')\",args:[pid,b.lease_id,b.expected_head_hash,b.payload_sha256,b.evidence_manifest_sha256,b.classification,Date.now()]})}catch(e){return bad(\"LEASE_ALREADY_HAS_PROPOSAL\",409,String(e))}await event(\"PROPOSAL_ACCEPTED_PENDING_INTERNAL_COMMIT\",{proposal_id:pid,lease_id:b.lease_id,expected_head_hash:b.expected_head_hash,payload_sha256:b.payload_sha256,evidence_manifest_sha256:b.evidence_manifest_sha256});return res({ok:true,proposal_id:pid,status:\"PENDING_INTERNAL_COMMIT\"})}\nasync function ledger(req:Request){await init();const n=Math.max(1,Math.min(50,Number(new URL(req.url).searchParams.get(\"limit\")||20))),r=await sqlite.execute({sql:\"select * from ew_ledger order by seq desc limit ?\",args:[n]});return res({ok:true,events:r.rows})}\nexport default async function(req:Request){try{const p=new URL(req.url).pathname;if(req.method===\"GET\"&&(p===\"/\"||p===\"/status\"))return status();if(req.method===\"GET\"&&p===\"/ledger\")return ledger(req);if(req.method!==\"GET\")return bad(\"PUBLIC_MUTATION_DISABLED\",405);return bad(\"NOT_FOUND\",404)}catch(e){console.error(e);return bad(\"INTERNAL_ERROR\",500,String(e))}}","label",[134],"d7ee719b-30bd-4763-be70-a202091b0e9b",["D",1788610228402],[28],"7bd4d5fb-6f4a-4d04-8747-07629e98569f","commit.ts","ff56423c-a920-11f1-abf3-1607ee4eb77e",12,["D",1788609842455],5,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst te=new TextEncoder(),GUARD=\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\",PUB=\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\";\nfunction canon(v:any):string{if(v===null||typeof v!==\"object\")return JSON.stringify(v);if(Array.isArray(v))return \"[\"+v.map(canon).join(\",\")+\"]\";return \"{\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\":\"+canon(v[k])).join(\",\")+\"}\"}\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction b64(b:Uint8Array){let s=\"\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s))))}\nasync function key(){const s=Deno.env.get(\"EW_SIGNING_KEY_PKCS8_B64\");if(!s)throw Error(\"SIGNING_KEY_MISSING\");return crypto.subtle.importKey(\"pkcs8\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\"Ed25519\"},false,[\"sign\"])}\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\"Ed25519\",await key(),te.encode(canon(o)))))}\nasync function vkey(){return crypto.subtle.importKey(\"raw\",Uint8Array.from(atob(PUB),c=>c.charCodeAt(0)),{name:\"Ed25519\"},false,[\"verify\"])}\nasync function validHead(){const r=await sqlite.execute(\"select * from ew_heads order by seq asc\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b}))))throw Error(\"HEAD_SIGNATURE_INVALID_ROW_\"+i);prev=x.head_hash;last=x}return last}\nasync function validLease(l:any){if(!l)return false;let b:any;try{b=JSON.parse(l.lease_body)}catch{return false}if(b.lease_id!==l.id||b.challenge_id!==l.challenge_id||b.session_id!==l.session_id||b.user_turn_sha256!==l.user_turn_sha256||b.guard_sha256!==l.guard_sha256||b.expected_head_hash!==l.expected_head_hash||Number(b.expires_at)!==Number(l.expires_at)||b.one_time!==true||b.guard_sha256!==GUARD)return false;return crypto.subtle.verify(\"Ed25519\",await vkey(),Uint8Array.from(atob(l.lease_signature),c=>c.charCodeAt(0)),te.encode(canon(b)))}\nconst pr=await sqlite.execute(\"select * from ew_proposals where status='PENDING' order by created_at asc limit 1\"),p=(pr.rows as any[])[0];\nif(!p)console.log(JSON.stringify({status:\"NO_PENDING_PROPOSAL\"}));else{const lr=await sqlite.execute({sql:\"select * from ew_leases where id=?\",args:[p.lease_id]}),l=(lr.rows as any[])[0],h=await validHead();let reject:string|null=null;if(!l)reject=\"LEASE_NOT_FOUND\";else if(!await validLease(l))reject=\"LEASE_SIGNATURE_INVALID\";else if(Number(l.used)!==0)reject=\"LEASE_ALREADY_USED\";else if(Date.now()>Number(l.expires_at))reject=\"LEASE_EXPIRED\";else if(l.guard_sha256!==GUARD)reject=\"LEASE_GUARD_MISMATCH\";else if(!h)reject=\"HEAD_MISSING\";else if(p.expected_head_hash!==h.head_hash||l.expected_head_hash!==h.head_hash)reject=\"HEAD_CAS_MISMATCH\";else if(p.classification!==\"VERIFIED_CANDIDATE_PROMOTION\")reject=\"BAD_CLASSIFICATION\";if(reject){await sqlite.execute({sql:\"update ew_proposals set status=? where id=?\",args:[\"REJECTED_\"+reject,p.id]});console.log(JSON.stringify({status:\"REJECTED\",reason:reject,proposal_id:p.id}))}else{const seq=Number(h.seq)+1,t=Date.now(),body={seq,predecessor_hash:h.head_hash,payload_sha256:p.payload_sha256,evidence_manifest_sha256:p.evidence_manifest_sha256,proposal_id:p.id,lease_id:p.lease_id,guard_sha256:GUARD,created_at:t},bj=canon(body),hh=await sha(bj),sig=await sign({head_hash:hh,body});await sqlite.batch([{sql:\"update ew_leases set used=1 where id=? and used=0\",args:[p.lease_id]},{sql:\"update ew_proposals set status='COMMITTED' where id=? and status='PENDING'\",args:[p.id]},{sql:\"insert into ew_heads values(?,?,?,?,?,?,?,?,?,?)\",args:[seq,hh,h.head_hash,p.payload_sha256,p.evidence_manifest_sha256,p.id,p.lease_id,t,bj,sig]}]);const eb=canon({event_type:\"AUTHORITATIVE_HEAD_COMMITTED\",created_at:t,body:{seq,head_hash:hh,predecessor_hash:h.head_hash,proposal_id:p.id,lease_id:p.lease_id}}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:\"AUTHORITATIVE_HEAD_COMMITTED\",created_at:t});await sqlite.execute({sql:\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\",args:[\"AUTHORITATIVE_HEAD_COMMITTED\",eb,eh,es,t]});console.log(JSON.stringify({status:\"COMMITTED\",seq,head_hash:hh,head_signature:sig,body}))}}",[148],"75e871ff-4c5f-4a6a-9884-71498fe90d62","activate.ts","b9ceaa36-a922-11f1-b89e-1607ee4eb77e",19,["D",1788610203629],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst te=new TextEncoder(),GUARD=\"9a687c200b6e7981367ce4d6ac515e57e04418b60efb527de4d3d85d2629fb04\",PUB=\"LUkwl9FFH16yNmIOkgD+sMVMiXbVz9zj1we2zlwE4V8=\";\nfunction canon(v:any):string{if(v===null||typeof v!==\"object\")return JSON.stringify(v);if(Array.isArray(v))return \"[\"+v.map(canon).join(\",\")+\"]\";return \"{\"+Object.keys(v).sort().map(k=>JSON.stringify(k)+\":\"+canon(v[k])).join(\",\")+\"}\"}\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}function b64(b:Uint8Array){let s=\"\";for(const x of b)s+=String.fromCharCode(x);return btoa(s)}\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s))))}\nasync function key(){const s=Deno.env.get(\"EW_SIGNING_KEY_PKCS8_B64\");if(!s)throw Error(\"SIGNING_KEY_MISSING\");return crypto.subtle.importKey(\"pkcs8\",Uint8Array.from(atob(s),c=>c.charCodeAt(0)),{name:\"Ed25519\"},false,[\"sign\"])}\nasync function sign(o:any){return b64(new Uint8Array(await crypto.subtle.sign(\"Ed25519\",await key(),te.encode(canon(o)))))}\nasync function vkey(){return crypto.subtle.importKey(\"raw\",Uint8Array.from(atob(PUB),c=>c.charCodeAt(0)),{name:\"Ed25519\"},false,[\"verify\"])}\nasync function head(){const r=await sqlite.execute(\"select * from ew_heads order by seq asc\"),rows=r.rows as any[];let prev:string|null=null,last:any=null;for(let i=0;ic.charCodeAt(0)),te.encode(canon({head_hash:x.head_hash,body:b}))))throw Error(\"HEAD_SIGNATURE_INVALID_ROW_\"+i);prev=x.head_hash;last=x}return last}\nasync function event(type:string,body:any){const t=Date.now(),eb=canon({event_type:type,created_at:t,body}),eh=await sha(eb),es=await sign({event_hash:eh,event_type:type,created_at:t});await sqlite.execute({sql:\"insert into ew_ledger(event_type,event_body,event_hash,event_signature,created_at) values(?,?,?,?,?)\",args:[type,eb,eh,es,t]})}\nconst q=await sqlite.execute(\"select * from ew_activation_requests where status='PENDING' order by created_at desc limit 1\"),r=(q.rows as any[])[0];\nif(!r)console.log(JSON.stringify({status:\"NO_PENDING_ACTIVATION_REQUEST\"}));else{let reject:string|null=null;if(typeof r.session_id!==\"string\"||!/^[A-Za-z0-9_.:\\-]{8,160}$/.test(r.session_id))reject=\"BAD_SESSION_ID\";else if(typeof r.user_turn_sha256!==\"string\"||!/^[0-9a-f]{64}$/.test(r.user_turn_sha256))reject=\"BAD_USER_TURN_SHA256\";else if(Date.now()-Number(r.created_at)>300000||Number(r.created_at)>Date.now()+30000)reject=\"REQUEST_EXPIRED_OR_FUTURE\";const h=await head();if(!reject&&r.expected_head_hash!==h.head_hash)reject=\"HEAD_CAS_MISMATCH\";if(reject){await sqlite.execute({sql:\"update ew_activation_requests set status=? where id=? and status='PENDING'\",args:[\"REJECTED_\"+reject,r.id]});console.log(JSON.stringify({status:\"REJECTED\",reason:reject,request_id:r.id}))}else{const lid=crypto.randomUUID(),exp=Date.now()+600000,lb={lease_id:lid,challenge_id:r.id,session_id:r.session_id,user_turn_sha256:r.user_turn_sha256,guard_sha256:GUARD,expected_head_hash:r.expected_head_hash,expires_at:exp,one_time:true},ls=await sign(lb);await sqlite.batch([{sql:\"update ew_activation_requests set status='ISSUED' where id=? and status='PENDING'\",args:[r.id]},{sql:\"insert into ew_leases values(?,?,?,?,?,?,?,0,?,?)\",args:[lid,r.id,r.session_id,r.user_turn_sha256,GUARD,r.expected_head_hash,exp,canon(lb),ls]}]);await event(\"AUTHENTICATED_MCP_ACTIVATION_LEASE_ISSUED\",{request_id:r.id,lease_id:lid,expected_head_hash:r.expected_head_hash,user_turn_sha256:r.user_turn_sha256});console.log(JSON.stringify({status:\"LEASE_ISSUED\",request_id:r.id,lease:lb,lease_signature:ls}))}}",[156],"pulls","branches",1,"forks","envVars",{"_170":172,"_173":61},"connections",{"_170":61,"_171":61},"count","unfilledCount",2,"emptyCount",{"_42":155,"_32":156,"_30":157,"_135":-5,"_40":41,"_39":158,"_137":24,"_37":188,"_13":61,"_33":34,"_35":160,"_23":26,"_142":-5,"_179":189,"_27":190},{"_42":147,"_32":148,"_30":149,"_135":-5,"_40":41,"_39":150,"_137":24,"_37":185,"_13":152,"_33":34,"_35":153,"_23":26,"_142":-5,"_179":186,"_27":187},{"_42":144,"_32":28,"_30":31,"_135":-5,"_40":41,"_39":14,"_137":26,"_37":182,"_13":61,"_33":34,"_35":36,"_23":26,"_142":-5,"_179":183,"_27":184},{"_42":133,"_32":134,"_30":56,"_135":-5,"_40":41,"_39":136,"_137":26,"_37":178,"_13":139,"_33":140,"_35":141,"_23":26,"_142":-5,"_179":180,"_27":181},["D",1788610177414],"children",[],[134],["D",1788610228402],[],[28],["D",1788609842455],[],[148],["D",1788610203629],[],[156],["D",1788608984397],["D",1789564859486],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":26},{"_13":87,"_32":88,"_42":41,"_89":43,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":44,"_96":97},"ctx",{"_80":-5,"_126":229,"_230":231,"_232":233,"_234":26,"_235":26,"_236":26,"_237":24,"_238":-5,"_239":-7,"_240":-7,"_241":61,"_242":26,"_243":26,"_244":-5,"_245":26,"_246":26,"_247":26,"_248":-5},"ENV",{"_200":201,"_202":203,"_204":88,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v20