{children}

\n \n \n );\n}\n","01a09c3e-e924-71d6-a76c-7c4b5d740e02",["D",1789327762933],"branchVersion","label",[158,68],"components","pulls","branches","forks","envVars",{"_166":26,"_168":26},"connections",{"_166":26,"_167":26},"count","unfilledCount","emptyCount",{"_32":236,"_13":158,"_66":153,"_42":-5,"_34":35,"_155":39,"_181":88,"_36":237,"_38":26,"_69":238,"_151":-5,"_71":24,"_156":-5,"_185":239,"_17":240},{"_32":229,"_13":230,"_66":231,"_42":153,"_34":35,"_155":39,"_181":88,"_36":232,"_38":26,"_69":70,"_151":233,"_71":24,"_156":-5,"_185":234,"_17":235},{"_32":150,"_13":68,"_66":67,"_42":153,"_34":35,"_155":39,"_181":88,"_36":226,"_38":26,"_69":70,"_151":152,"_71":24,"_156":-5,"_185":227,"_17":228},{"_32":219,"_13":220,"_66":221,"_42":153,"_34":35,"_155":39,"_181":88,"_36":222,"_38":26,"_69":70,"_151":223,"_71":24,"_156":-5,"_185":224,"_17":225},{"_32":211,"_13":212,"_66":213,"_42":-5,"_34":35,"_155":214,"_181":88,"_36":215,"_38":39,"_69":21,"_151":216,"_71":24,"_156":-5,"_185":217,"_17":218},{"_32":203,"_13":204,"_66":205,"_42":-5,"_34":35,"_155":206,"_181":88,"_36":207,"_38":183,"_69":70,"_151":208,"_71":24,"_156":-5,"_185":209,"_17":210},{"_32":196,"_13":197,"_66":86,"_42":-5,"_34":35,"_155":183,"_181":88,"_36":198,"_38":39,"_69":199,"_151":200,"_71":24,"_156":-5,"_185":201,"_17":202},{"_32":188,"_13":189,"_66":190,"_42":-5,"_34":35,"_155":191,"_181":88,"_36":192,"_38":39,"_69":70,"_151":193,"_71":24,"_156":-5,"_185":194,"_17":195},{"_32":178,"_13":179,"_66":180,"_42":-5,"_34":35,"_155":114,"_181":88,"_36":182,"_38":183,"_69":70,"_151":184,"_71":24,"_156":-5,"_185":186,"_17":187},"2135d107-8b2c-450c-a5a9-b63d39b8f8c9","stage_a_seal.ts","94695c56-afb6-11f1-bafd-1607ee4eb77e","latest",["D",1789333672799],3,"import { sha256Hex, stableJson } from \"https://esm.town/v/mosadek/long-run-continuity-isolated-canary/db.ts?v=10\";\nimport testResult from \"https://esm.town/v/mosadek/long-run-continuity-isolated-canary/stage_a_adversarial_test.ts?v=10\";\n\nconst BRANCH_VERSION=10;\nconst names=[\"db.ts\",\"main.tsx\",\"stage_a_adversarial_test.ts\"];\nconst enc=new TextEncoder();\nconst out:any={schema:\"LRC_STAGE_A_SOURCE_SEAL_V2\",project:\"mosadek/long-run-continuity-isolated-canary\",branch_version:BRANCH_VERSION,files:[]};\nfor(const name of names){\n const url=`https://esm.town/v/mosadek/long-run-continuity-isolated-canary/${name}?v=${BRANCH_VERSION}`;\n try{\n const r=await fetch(url,{headers:{accept:\"text/plain, application/typescript;q=0.9, */*;q=0.1\"}});\n const text=await r.text();\n out.files.push({name,url,status:r.status,bytes:enc.encode(text).byteLength,sha256:r.ok?await sha256Hex(text):null});\n }catch(e){out.files.push({name,url,error:e instanceof Error?e.message:String(e)});}\n}\nout.test_result=testResult;\nout.test_result_sha256=await sha256Hex(stableJson(testResult));\nconst manifestBody={schema:out.schema,project:out.project,branch_version:out.branch_version,files:out.files,test_result_sha256:out.test_result_sha256};\nout.manifest_sha256=await sha256Hex(stableJson(manifestBody));\nconsole.log(JSON.stringify(out,null,2));\nexport default out;","children",[],[179],"a44d33c2-a2f3-433b-840c-25b1cf4bc8a3","stage_a_adversarial_test.ts","70ed0a20-afb6-11f1-ba47-1607ee4eb77e",10,["D",1789333624349],"import { POLICY, debugDurableRows, deleteCanaryForTest, finish, heartbeat, receipt, sha256Hex, stableJson, startCanary } from \"./db.ts\";\n\nfunction assert(cond: unknown, message: string): asserts cond { if (!cond) throw new Error(message); }\nfunction eq(a: unknown, b: unknown, message: string) { if (a !== b) throw new Error(`${message}: ${String(a)} !== ${String(b)}`); }\n\nconst tests: Array<{name:string; pass:boolean; detail?:unknown}> = [];\nasync function test(name:string, fn:()=>Promise) { try { await fn(); tests.push({name,pass:true}); } catch (e) { tests.push({name,pass:false,detail:e instanceof Error?e.message:String(e)}); } }\n\nasync function withCanary(agent:string, now:number, fn:(s:any)=>Promise) {\n const s:any = await startCanary(agent, now);\n assert(s.ok, \"start failed\");\n try { await fn(s); } finally { await deleteCanaryForTest(s.canary_id); }\n}\n\nawait test(\"policy frozen before scored use\", async()=>{\n eq(POLICY.maxHeartbeatGapMs,8*60*1000,\"max gap\");\n assert(POLICY.maxHeartbeatGapMs<=10*60*1000,\"gap exceeds 10m\");\n assert(POLICY.targetDurationMs>=100*60*1000,\"duration under 100m\");\n eq(POLICY.rawTokenDurability,\"FORBIDDEN\",\"raw token durability\");\n});\n\nawait test(\"concurrent same-token race accepts exactly one\", async()=>{\n await withCanary(\"agent-race\",1_000_000,async s=>{\n const [a,b]:any[] = await Promise.all([\n heartbeat(s.canary_id,s.agent_id,s.token,1_060_000),\n heartbeat(s.canary_id,s.agent_id,s.token,1_060_000),\n ]);\n eq([a,b].filter(x=>x.ok).length,1,\"success cardinality\");\n const loser=[a,b].find(x=>!x.ok);\n eq(loser.code,\"REPLAYED_TOKEN\",\"race loser must be replay\");\n assert(loser.terminal===true&&loser.state===\"INVALID\",\"replay must revoke active chain\");\n const winner=[a,b].find(x=>x.ok);\n const revoked:any=await heartbeat(s.canary_id,s.agent_id,winner.token,1_120_000);\n eq(revoked.code,\"TERMINAL\",\"winner replacement must be revoked after replay detection\");\n });\n});\n\nawait test(\"stale token after rotation invalidates token family\", async()=>{\n await withCanary(\"agent-stale\",2_000_000,async s=>{\n const h:any=await heartbeat(s.canary_id,s.agent_id,s.token,2_060_000); assert(h.ok,\"heartbeat failed\");\n const replay:any=await heartbeat(s.canary_id,s.agent_id,s.token,2_120_000); eq(replay.code,\"REPLAYED_TOKEN\",\"stale token classification\");\n assert(replay.terminal===true&&replay.state===\"INVALID\",\"replay did not invalidate chain\");\n const revoked:any=await heartbeat(s.canary_id,s.agent_id,h.token,2_180_000); eq(revoked.code,\"TERMINAL\",\"replacement survived replay invalidation\");\n const r:any=await receipt(s.canary_id,s.agent_id); assert(r.ok,\"receipt\");\n assert(r.evidence.events.some((e:any)=>e.kind===\"REPLAY_DETECTED\"&&e.reason===\"REPLAYED_TOKEN\"),\"replay evidence missing\");\n });\n});\n\nawait test(\"wrong canary and wrong agent rejected\", async()=>{\n await withCanary(\"agent-a\",3_000_000,async s=>{\n const unknown:any=await heartbeat(\"missing-canary\",s.agent_id,s.token,3_060_000); eq(unknown.code,\"UNKNOWN_CANARY\",\"unknown canary\");\n const wrong:any=await heartbeat(s.canary_id,\"agent-b\",s.token,3_060_000); eq(wrong.code,\"WRONG_AGENT\",\"wrong agent\");\n });\n});\n\nawait test(\"late heartbeat terminalizes fail closed\", async()=>{\n await withCanary(\"agent-late\",4_000_000,async s=>{\n const late:any=await heartbeat(s.canary_id,s.agent_id,s.token,4_000_000+POLICY.maxHeartbeatGapMs+1); assert(late.ok&&late.terminal,\"late heartbeat did not terminalize\");\n eq(late.state,\"INVALID\",\"late state\"); eq(late.terminal_reason,\"HEARTBEAT_GAP_EXCEEDED\",\"late reason\");\n const again:any=await heartbeat(s.canary_id,s.agent_id,s.token,4_000_000+POLICY.maxHeartbeatGapMs+2); eq(again.code,\"TERMINAL\",\"terminal replay\");\n });\n});\n\nawait test(\"absolute expiry terminalizes\", async()=>{\n await withCanary(\"agent-expiry\",5_000_000,async s=>{\n const expired:any=await heartbeat(s.canary_id,s.agent_id,s.token,5_000_000+POLICY.absoluteLifetimeMs+1); assert(expired.ok&&expired.terminal,\"expiry did not terminalize\");\n eq(expired.state,\"INVALID\",\"expiry state\"); eq(expired.terminal_reason,\"ABSOLUTE_DEADLINE_EXCEEDED\",\"expiry reason\");\n });\n});\n\nawait test(\"state survives module-style restart and current token continues\", async()=>{\n await withCanary(\"agent-restart\",6_000_000,async s=>{\n const h:any=await heartbeat(s.canary_id,s.agent_id,s.token,6_060_000); assert(h.ok,\"first heartbeat\");\n const mod=await import(`./db.ts?restart=${crypto.randomUUID()}`);\n const h2:any=await mod.heartbeat(s.canary_id,s.agent_id,h.token,6_120_000); assert(h2.ok,\"post-restart heartbeat\");\n eq(h2.seq,2,\"post-restart seq\");\n });\n});\n\nawait test(\"durable evidence contains hashes only, never raw token\", async()=>{\n await withCanary(\"agent-hash\",7_000_000,async s=>{\n const h:any=await heartbeat(s.canary_id,s.agent_id,s.token,7_060_000); assert(h.ok,\"heartbeat\");\n const rows=await debugDurableRows(s.canary_id);\n const durable=JSON.stringify(rows);\n assert(!durable.includes(s.token),\"start raw token leaked durably\");\n assert(!durable.includes(h.token),\"rotated raw token leaked durably\");\n assert(durable.includes(await sha256Hex(s.token)),\"start hash missing\");\n assert(durable.includes(await sha256Hex(h.token)),\"rotated hash missing\");\n });\n});\n\nawait test(\"terminal replay rejected and hash destroyed\", async()=>{\n await withCanary(\"agent-terminal\",8_000_000,async s=>{\n let token=s.token; let now=8_000_000;\n while(now < 8_000_000+POLICY.targetDurationMs){ now += POLICY.maxHeartbeatGapMs; const h:any=await heartbeat(s.canary_id,s.agent_id,token,now); assert(h.ok,\"heartbeat chain\"); token=h.token; }\n const f:any=await finish(s.canary_id,s.agent_id,token,now); assert(f.ok,\"finish failed\"); eq(f.state,\"PASS\",\"terminal pass\");\n const replay:any=await finish(s.canary_id,s.agent_id,token,now+1); eq(replay.code,\"TERMINAL\",\"terminal replay code\");\n const rows:any=await debugDurableRows(s.canary_id); eq(rows.canary[0].token_hash,null,\"terminal hash not destroyed\");\n });\n});\n\nawait test(\"malformed input rejected\", async()=>{\n const h:any=await heartbeat(\"\",\"\",\"\",9_000_000); eq(h.code,\"MALFORMED_INPUT\",\"heartbeat malformed\");\n const f:any=await finish(\"\",\"\",\"\",9_000_000); eq(f.code,\"MALFORMED_INPUT\",\"finish malformed\");\n});\n\nawait test(\"receipt reconstruction is deterministic\", async()=>{\n await withCanary(\"agent-receipt\",10_000_000,async s=>{\n const h:any=await heartbeat(s.canary_id,s.agent_id,s.token,10_060_000); assert(h.ok,\"heartbeat\");\n const r1:any=await receipt(s.canary_id,s.agent_id); const r2:any=await receipt(s.canary_id,s.agent_id);\n assert(r1.ok&&r2.ok,\"receipt failed\"); eq(r1.receipt_sha256,r2.receipt_sha256,\"receipt hash drift\");\n eq(r1.receipt_sha256,await sha256Hex(stableJson(r1.evidence)),\"receipt reconstruction mismatch\");\n });\n});\n\nconst passed=tests.filter(x=>x.pass).length;\nconst result={schema:\"LRC_STAGE_A_ADVERSARIAL_TEST_RESULT_V1\",passed,total:tests.length,all_pass:passed===tests.length,tests,policy:POLICY,direct_sprites_calls:0,additional_spend_usd:0,p_real_increment:0,human_authority_approval:false};\nconsole.log(JSON.stringify(result,null,2));\nif(!result.all_pass) throw new Error(`LRC_STAGE_A_TEST_FAILURE_${passed}_${tests.length}`);\nexport default result;\n",[],[189],"e84c4825-428e-4663-9131-733bcb8b056c","main.tsx",["D",1789328114404],"http","import { POLICY, finish, heartbeat, receipt, startCanary } from \"./db.ts\";\n\nfunction json(data: unknown, status = 200) {\n return Response.json(data, { status, headers: { \"Cache-Control\": \"no-store\" } });\n}\n\nasync function readBody(req: Request) {\n try { return await req.json(); } catch { return null; }\n}\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && (url.pathname === \"/\" || url.pathname === \"/health\")) {\n return json({ ok:true, schema:\"LRC_STAGE_A_HTTP_V1\", classification:\"ISOLATED_NONPRODUCTION_CONTINUITY_CANARY\", policy:POLICY, raw_token_durability:\"FORBIDDEN\", production_brain_mutation:false });\n }\n if (req.method === \"POST\" && url.pathname === \"/start\") {\n const b = await readBody(req) as {agent_id?:string}|null;\n const r = await startCanary(String(b?.agent_id ?? \"\"));\n return json(r, r.ok ? 200 : 400);\n }\n if (req.method === \"POST\" && url.pathname === \"/heartbeat\") {\n const b = await readBody(req) as {canary_id?:string;agent_id?:string;token?:string}|null;\n const r = await heartbeat(String(b?.canary_id ?? \"\"), String(b?.agent_id ?? \"\"), String(b?.token ?? \"\"));\n return json(r, r.ok ? 200 : 409);\n }\n if (req.method === \"POST\" && url.pathname === \"/finish\") {\n const b = await readBody(req) as {canary_id?:string;agent_id?:string;token?:string}|null;\n const r = await finish(String(b?.canary_id ?? \"\"), String(b?.agent_id ?? \"\"), String(b?.token ?? \"\"));\n return json(r, r.ok ? 200 : 409);\n }\n if (req.method === \"GET\" && url.pathname === \"/receipt\") {\n const r = await receipt(url.searchParams.get(\"canary_id\") ?? \"\", url.searchParams.get(\"agent_id\") ?? \"\");\n return json(r, r.ok ? 200 : 404);\n }\n return json({ok:false,code:\"NOT_FOUND\"},404);\n}\n",[],[197],"816f8db7-dac9-46b5-bca2-5df4e5b36cc3","db.ts","01a09c3e-e924-71d6-a76c-85e3f879a1a5",9,["D",1789333613727],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const POLICY = Object.freeze({\n schema: \"LRC_STAGE_A_POLICY_V1\",\n maxHeartbeatGapMs: 8 * 60 * 1000,\n targetDurationMs: 100 * 60 * 1000,\n absoluteLifetimeMs: 120 * 60 * 1000,\n tokenBytes: 32,\n rawTokenDurability: \"FORBIDDEN\",\n semantics: \"RFC9700_REFRESH_TOKEN_ROTATION_REPLAY_DETECTION_ADAPTED\",\n});\n\nconst enc = new TextEncoder();\nlet schemaReady = false;\n\nexport async function sha256Hex(value: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(value));\n return [...new Uint8Array(d)].map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function randomOpaqueToken() {\n const b = new Uint8Array(POLICY.tokenBytes);\n crypto.getRandomValues(b);\n return btoa(String.fromCharCode(...b)).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replaceAll(\"=\", \"\");\n}\n\nexport function stableJson(v: unknown): string {\n if (v === null || typeof v !== \"object\") return JSON.stringify(v);\n if (Array.isArray(v)) return `[${v.map(stableJson).join(\",\")}]`;\n const o = v as Record;\n return `{${Object.keys(o).sort().map(k => `${JSON.stringify(k)}:${stableJson(o[k])}`).join(\",\")}}`;\n}\n\nexport async function ensureSchema() {\n if (schemaReady) return;\n await sqlite.batch([\n { sql: `CREATE TABLE IF NOT EXISTS canaries (\n canary_id TEXT PRIMARY KEY, agent_id TEXT NOT NULL, created_at_ms INTEGER NOT NULL,\n absolute_deadline_ms INTEGER NOT NULL, max_gap_ms INTEGER NOT NULL,\n target_duration_ms INTEGER NOT NULL, seq INTEGER NOT NULL,\n state TEXT NOT NULL CHECK(state IN ('ACTIVE','PASS','FAIL','INVALID')),\n token_hash TEXT, last_accepted_at_ms INTEGER NOT NULL, terminal_at_ms INTEGER,\n terminal_reason TEXT, version INTEGER NOT NULL)` },\n { sql: `CREATE TABLE IF NOT EXISTS used_tokens (\n canary_id TEXT NOT NULL, token_hash TEXT NOT NULL, used_at_ms INTEGER NOT NULL,\n seq INTEGER NOT NULL, PRIMARY KEY(canary_id, token_hash))` },\n { sql: `CREATE TABLE IF NOT EXISTS continuity_events (\n canary_id TEXT NOT NULL, seq INTEGER NOT NULL, kind TEXT NOT NULL,\n accepted_at_ms INTEGER NOT NULL, input_token_hash TEXT, output_token_hash TEXT,\n state TEXT NOT NULL, reason TEXT, PRIMARY KEY(canary_id, seq, kind))` },\n { sql: `CREATE TRIGGER IF NOT EXISTS lrc_log_rotation AFTER UPDATE OF token_hash ON canaries\n WHEN OLD.token_hash IS NOT NULL AND NEW.token_hash IS NOT NULL AND NEW.seq=OLD.seq+1 BEGIN\n INSERT OR IGNORE INTO used_tokens VALUES(NEW.canary_id,OLD.token_hash,NEW.last_accepted_at_ms,NEW.seq);\n INSERT OR IGNORE INTO continuity_events VALUES(NEW.canary_id,NEW.seq,'HEARTBEAT',NEW.last_accepted_at_ms,OLD.token_hash,NEW.token_hash,NEW.state,NULL);\n END` },\n { sql: `CREATE TRIGGER IF NOT EXISTS lrc_log_terminal AFTER UPDATE OF token_hash ON canaries\n WHEN OLD.token_hash IS NOT NULL AND NEW.token_hash IS NULL AND NEW.seq=OLD.seq+1 BEGIN\n INSERT OR IGNORE INTO used_tokens VALUES(NEW.canary_id,OLD.token_hash,NEW.last_accepted_at_ms,NEW.seq);\n INSERT OR IGNORE INTO continuity_events VALUES(NEW.canary_id,NEW.seq,'TERMINAL',NEW.last_accepted_at_ms,OLD.token_hash,NULL,NEW.state,NEW.terminal_reason);\n END` },\n ]);\n schemaReady = true;\n}\n\ntype Canary = {\n canary_id:string; agent_id:string; created_at_ms:number; absolute_deadline_ms:number;\n max_gap_ms:number; target_duration_ms:number; seq:number; state:string; token_hash:string|null;\n last_accepted_at_ms:number; terminal_at_ms:number|null; terminal_reason:string|null; version:number;\n};\n\nasync function getCanary(id:string): Promise {\n await ensureSchema();\n const r = await sqlite.execute({sql:\"SELECT * FROM canaries WHERE canary_id=?\",args:[id]});\n return (r.rows?.[0] as unknown as Canary) ?? null;\n}\n\nasync function used(id:string, hash:string) {\n const r = await sqlite.execute({sql:\"SELECT 1 AS x FROM used_tokens WHERE canary_id=? AND token_hash=? LIMIT 1\",args:[id,hash]});\n return Boolean(r.rows?.length);\n}\n\nfunction publicState(c:Canary) {\n return {\n canary_id:c.canary_id, agent_id:c.agent_id, created_at_ms:Number(c.created_at_ms),\n absolute_deadline_ms:Number(c.absolute_deadline_ms), max_gap_ms:Number(c.max_gap_ms),\n target_duration_ms:Number(c.target_duration_ms), seq:Number(c.seq), state:c.state,\n last_accepted_at_ms:Number(c.last_accepted_at_ms),\n terminal_at_ms:c.terminal_at_ms==null?null:Number(c.terminal_at_ms),\n terminal_reason:c.terminal_reason, version:Number(c.version),\n };\n}\n\nexport async function startCanary(agentId:string, nowMs=Date.now()) {\n await ensureSchema();\n if (!agentId || agentId.length>256) return {ok:false,code:\"BAD_AGENT_ID\"} as const;\n const id=crypto.randomUUID(), token=randomOpaqueToken(), hash=await sha256Hex(token);\n await sqlite.batch([\n {sql:`INSERT INTO canaries(canary_id,agent_id,created_at_ms,absolute_deadline_ms,max_gap_ms,target_duration_ms,seq,state,token_hash,last_accepted_at_ms,version)\n VALUES(?,?,?,?,?,?,0,'ACTIVE',?,?,0)`,args:[id,agentId,nowMs,nowMs+POLICY.absoluteLifetimeMs,POLICY.maxHeartbeatGapMs,POLICY.targetDurationMs,hash,nowMs]},\n {sql:\"INSERT INTO continuity_events VALUES(?,0,'START',?,NULL,?,'ACTIVE',NULL)\",args:[id,nowMs,hash]},\n ]);\n return {ok:true,canary_id:id,agent_id:agentId,token,seq:0,accepted_at_ms:nowMs,policy:POLICY} as const;\n}\n\nasync function classify(c:Canary|null, agentId:string, hash:string, nowMs:number) {\n if (!c) return {ok:false,code:\"UNKNOWN_CANARY\"} as const;\n if (c.agent_id!==agentId) return {ok:false,code:\"WRONG_AGENT\"} as const;\n if (c.state!==\"ACTIVE\") return {ok:false,code:\"TERMINAL\",state:c.state,reason:c.terminal_reason} as const;\n if (c.token_hash!==hash) {\n if (await used(c.canary_id,hash)) {\n return (await invalidateReplay(c,hash,nowMs)) ?? {ok:false,code:\"CAS_LOST_RETRY_FORBIDDEN\"} as const;\n }\n return {ok:false,code:\"WRONG_TOKEN\"} as const;\n }\n if (nowMs>Number(c.absolute_deadline_ms)) return {ok:false,code:\"ABSOLUTE_DEADLINE_EXCEEDED\"} as const;\n if (nowMs-Number(c.last_accepted_at_ms)>Number(c.max_gap_ms)) return {ok:false,code:\"HEARTBEAT_GAP_EXCEEDED\"} as const;\n return {ok:false,code:\"CAS_LOST_RETRY_FORBIDDEN\"} as const;\n}\n\nasync function terminalize(c:Canary, hash:string, nowMs:number, state:\"PASS\"|\"FAIL\"|\"INVALID\", reason:string) {\n const u=await sqlite.execute({sql:`UPDATE canaries SET state=?,terminal_reason=?,terminal_at_ms=?,last_accepted_at_ms=?,token_hash=NULL,seq=seq+1,version=version+1\n WHERE canary_id=? AND agent_id=? AND state='ACTIVE' AND token_hash=? AND version=? RETURNING *`,\n args:[state,reason,nowMs,nowMs,c.canary_id,c.agent_id,hash,Number(c.version)]});\n const out=(u.rows?.[0] as unknown as Canary)??null;\n return out?{ok:true,terminal:true,...publicState(out)}:null;\n}\n\nasync function invalidateReplay(c:Canary, replayHash:string, nowMs:number) {\n if (!c.token_hash) return null;\n const activeHash=String(c.token_hash), nextVersion=Number(c.version)+1;\n const batch:any=await sqlite.batch([\n {sql:`UPDATE canaries SET state='INVALID',terminal_reason='REPLAYED_TOKEN',terminal_at_ms=?,last_accepted_at_ms=?,token_hash=NULL,seq=seq+1,version=version+1\n WHERE canary_id=? AND agent_id=? AND state='ACTIVE' AND token_hash=? AND version=? RETURNING *`,\n args:[nowMs,nowMs,c.canary_id,c.agent_id,activeHash,Number(c.version)]},\n {sql:`INSERT OR IGNORE INTO continuity_events(canary_id,seq,kind,accepted_at_ms,input_token_hash,output_token_hash,state,reason)\n SELECT canary_id,seq,'REPLAY_DETECTED',?,?,?,?,? FROM canaries\n WHERE canary_id=? AND agent_id=? AND state='INVALID' AND terminal_reason='REPLAYED_TOKEN' AND version=?`,\n args:[nowMs,replayHash,activeHash,\"INVALID\",\"REPLAYED_TOKEN\",c.canary_id,c.agent_id,nextVersion]},\n ]);\n const out=(batch?.[0]?.rows?.[0] as unknown as Canary)??null;\n return out?{ok:false,code:\"REPLAYED_TOKEN\",terminal:true,...publicState(out)}:null;\n}\n\nexport async function heartbeat(canaryId:string, agentId:string, token:string, nowMs=Date.now()) {\n await ensureSchema();\n if (!canaryId||!agentId||!token) return {ok:false,code:\"MALFORMED_INPUT\"} as const;\n const hash=await sha256Hex(token), c=await getCanary(canaryId);\n if (!c||c.agent_id!==agentId||c.state!==\"ACTIVE\"||c.token_hash!==hash) return await classify(c,agentId,hash,nowMs);\n if (nowMs>Number(c.absolute_deadline_ms)) return (await terminalize(c,hash,nowMs,\"INVALID\",\"ABSOLUTE_DEADLINE_EXCEEDED\")) ?? await classify(await getCanary(canaryId),agentId,hash,nowMs);\n if (nowMs-Number(c.last_accepted_at_ms)>Number(c.max_gap_ms)) return (await terminalize(c,hash,nowMs,\"INVALID\",\"HEARTBEAT_GAP_EXCEEDED\")) ?? await classify(await getCanary(canaryId),agentId,hash,nowMs);\n const nextToken=randomOpaqueToken(), nextHash=await sha256Hex(nextToken);\n const u=await sqlite.execute({sql:`UPDATE canaries SET token_hash=?,last_accepted_at_ms=?,seq=seq+1,version=version+1\n WHERE canary_id=? AND agent_id=? AND state='ACTIVE' AND token_hash=? AND version=? AND ?<=absolute_deadline_ms AND ?-last_accepted_at_ms<=max_gap_ms RETURNING *`,\n args:[nextHash,nowMs,canaryId,agentId,hash,Number(c.version),nowMs,nowMs]});\n const out=(u.rows?.[0] as unknown as Canary)??null;\n if (!out) return await classify(await getCanary(canaryId),agentId,hash,nowMs);\n return {ok:true,canary_id:canaryId,agent_id:agentId,token:nextToken,seq:Number(out.seq),accepted_at_ms:nowMs} as const;\n}\n\nexport async function finish(canaryId:string, agentId:string, token:string, nowMs=Date.now()) {\n await ensureSchema();\n if (!canaryId||!agentId||!token) return {ok:false,code:\"MALFORMED_INPUT\"} as const;\n const hash=await sha256Hex(token), c=await getCanary(canaryId);\n if (!c||c.agent_id!==agentId||c.state!==\"ACTIVE\"||c.token_hash!==hash) return await classify(c,agentId,hash,nowMs);\n if (nowMs>Number(c.absolute_deadline_ms)) return (await terminalize(c,hash,nowMs,\"INVALID\",\"ABSOLUTE_DEADLINE_EXCEEDED\")) ?? await classify(await getCanary(canaryId),agentId,hash,nowMs);\n if (nowMs-Number(c.last_accepted_at_ms)>Number(c.max_gap_ms)) return (await terminalize(c,hash,nowMs,\"INVALID\",\"HEARTBEAT_GAP_EXCEEDED\")) ?? await classify(await getCanary(canaryId),agentId,hash,nowMs);\n const pass=nowMs-Number(c.created_at_ms)>=Number(c.target_duration_ms);\n return (await terminalize(c,hash,nowMs,pass?\"PASS\":\"FAIL\",pass?\"TARGET_DURATION_REACHED\":\"EARLY_FINISH\")) ?? await classify(await getCanary(canaryId),agentId,hash,nowMs);\n}\n\nexport async function receipt(canaryId:string, agentId:string) {\n await ensureSchema();\n const c=await getCanary(canaryId);\n if (!c) return {ok:false,code:\"UNKNOWN_CANARY\"} as const;\n if (c.agent_id!==agentId) return {ok:false,code:\"WRONG_AGENT\"} as const;\n const e=await sqlite.execute({sql:\"SELECT seq,kind,accepted_at_ms,input_token_hash,output_token_hash,state,reason FROM continuity_events WHERE canary_id=? ORDER BY seq,kind\",args:[canaryId]});\n const evidence={schema:\"LRC_STAGE_A_RECEIPT_V1\",policy:POLICY,canary:publicState(c),events:e.rows.map(x=>({seq:Number(x.seq),kind:String(x.kind),accepted_at_ms:Number(x.accepted_at_ms),input_token_hash:x.input_token_hash==null?null:String(x.input_token_hash),output_token_hash:x.output_token_hash==null?null:String(x.output_token_hash),state:String(x.state),reason:x.reason==null?null:String(x.reason)}))};\n return {ok:true,evidence,receipt_sha256:await sha256Hex(stableJson(evidence))} as const;\n}\n\nexport async function debugDurableRows(canaryId:string) {\n await ensureSchema();\n const [a,b,c]=await Promise.all([\n sqlite.execute({sql:\"SELECT * FROM canaries WHERE canary_id=?\",args:[canaryId]}),\n sqlite.execute({sql:\"SELECT * FROM used_tokens WHERE canary_id=? ORDER BY seq\",args:[canaryId]}),\n sqlite.execute({sql:\"SELECT * FROM continuity_events WHERE canary_id=? ORDER BY seq,kind\",args:[canaryId]}),\n ]);\n return {canary:a.rows,used_tokens:b.rows,events:c.rows};\n}\n\nexport async function deleteCanaryForTest(canaryId:string) {\n await ensureSchema();\n await sqlite.batch([\n {sql:\"DELETE FROM continuity_events WHERE canary_id=?\",args:[canaryId]},\n {sql:\"DELETE FROM used_tokens WHERE canary_id=?\",args:[canaryId]},\n {sql:\"DELETE FROM canaries WHERE canary_id=?\",args:[canaryId]},\n ]);\n}\n",[],[204],"587a830d-d135-4644-9396-9bfa5f46ff12","README.md","01a09c3e-e924-71d6-a76c-826c0984a20b",7,["D",1789333583545],"# Long-Run Continuity Canary — Stage A\n\nIsolated, non-production Val Town canary for directly testing whether one cloud execution retains a one-use rotating capability continuously for at least 100 wall-clock minutes.\n\n## Frozen scored-run policy\n\n- Target duration: **100 minutes**.\n- Maximum accepted heartbeat gap: **8 minutes** (hard requirement ≤10 minutes).\n- Absolute lifetime: **120 minutes**.\n- Tokens: 32-byte CSPRNG opaque values.\n- Durable state stores **SHA-256 digests only**. Raw continuity tokens must never be written to Brain blobs/files, scheduled prompts, checkpoints, or successor handoffs.\n- Every accepted heartbeat atomically consumes the presented token and returns exactly one fresh token.\n- Wrong, replayed, late, expired, terminal, ambiguous, or CAS-losing uses fail closed. There is no blind retry that can recreate continuity.\n\nThe protocol adapts OAuth refresh-token rotation / replay-detection semantics (RFC 9700 §4.14.2) to continuity measurement. Passing Stage A does not establish physical identity, independence, P_real, Work product identity, or superhero capacity.\n\n## HTTP surface\n\n`GET /health` returns the frozen policy and non-production classification.\n\n`POST /start` with `{ \"agent_id\": \"...\" }` creates one canary and returns the raw start token once.\n\n`POST /heartbeat` with `{ \"canary_id\": \"...\", \"agent_id\": \"...\", \"token\": \"...\" }` atomically consumes that token and returns the rotated token once.\n\n`POST /finish` with the same binding terminalizes the run. PASS is possible only after the 100-minute target; early finish is FAIL.\n\n`GET /receipt?canary_id=...&agent_id=...` returns hash/timestamp/sequence evidence only.\n\n## Qualification\n\nRun `stage_a_adversarial_test.ts`. It covers concurrent same-token race, stale-token replay, wrong canary/agent, late heartbeat, absolute expiry, module/runtime reload persistence, hash-only durable evidence, terminal replay, malformed input, deterministic receipt reconstruction, and policy freeze.\n\nThis Val is intentionally isolated from the canonical Brain kernel/admission/protocol. It performs zero paid spend and no Sprites calls.\n",[],[212],"638526ea-cdfd-4440-a071-2b8b51461a52","SubmissionsPage.tsx","01a09c3e-e924-71d6-a76c-79a7ddbe00ad",["D",1789327762933],"/** @jsxImportSource npm:hono/jsx */\nimport type { Submission } from \"../db.ts\";\nimport Layout from \"./Layout.tsx\";\n\nexport default function SubmissionsPage({ submissions }: { submissions: Submission[] }) {\n return (\n \n

Submissions ({submissions.length})

\n {submissions.length === 0\n ?

Nothing yet. Be the first to submit the form.

\n : (\n

\n
\n {s.name}\n {s.created_at}\n
\n
{s.email}
\n
{s.message}
\n

\n )}\n

\n back to form\n view source\n

\n \n );\n}\n",[],[158,220],["D",1789327762933],[],[158,68],"9b874b29-eaa3-47be-81bf-03e616f2f379","FormPage.tsx","01a09c3e-e924-71d6-a76c-700f15155d2a",["D",1789327762933],"/** @jsxImportSource npm:hono/jsx */\nimport Layout from \"./Layout.tsx\";\n\nexport default function FormPage() {\n return (\n \n

Contact form

\n Submissions are saved to this val's SQLite database.\n

\n \n

\n view submissions\n view source\n

\n \n );\n}\n",[],[158,230],"f1b632e9-07ca-4344-9a79-321ef719b009",["D",1789327762933],"directory",[170,171,172],[158],["D",1789327762933],["D",1789501878689],{"_11":12,"_128":74},{"_11":12,"_123":124,"_73":74,"_30":72,"_125":126,"_127":24},{"_38":114,"_13":16,"_32":35,"_115":76,"_116":-5,"_117":-5,"_118":-5,"_119":-5,"_120":-5,"_121":14,"_122":12},"ctx",{"_53":-5,"_147":279,"_280":281,"_282":283,"_284":24,"_285":24,"_286":24,"_287":88,"_288":-5,"_289":-7,"_290":-7,"_291":26,"_292":24,"_293":24,"_294":-5,"_295":24,"_296":24,"_297":24,"_298":-5},"ENV",{"_250":251,"_252":253,"_254":16,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · Layout.tsx