[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_366":367,"_368":369},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_107":88,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",26,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","r3r1_source_hash.ts","latestPath","fileId","5d65a852-af09-11f1-ab38-1607ee4eb77e","name","fileType","script","content","const url=\"https://esm.town/v/mosadek/pb-r8k2-libsql-qual-20260911@main/val_native_executor_prod.ts\";\nconst r=await fetch(url,{cache:\"no-store\"});\nconst b=new Uint8Array(await r.arrayBuffer());\nconst d=await crypto.subtle.digest(\"SHA-256\",b);\nconst h=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconst s=new TextDecoder().decode(b);\nconst i=s.indexOf(\"PRELEASE_READ_COALESCE_V1_ENABLED\");\nconsole.log(JSON.stringify({status:r.status,bytes:b.length,sha256:h,flag_context:i>=0?s.slice(Math.max(0,i-40),i+80):null,starts:s.slice(0,80)}));\nexport default {status:r.status,bytes:b.length,sha256:h};","createdAt",["D",1789259018116],"branchVersion","branchId","135bdb83-a5ef-4663-8e8c-8e5cf123ceb2","id","ef2de6a5-356a-4dd1-b3f2-03ea3ef80bac","pb-r8k2-libsql-qual-20260911",["D",1789142237758],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Disposable Deno/libSQL qualification","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","01a09825-28fd-752a-8096-c7efb43e365e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","ef2de6a5356a4dd1b3f203ea3ef80bac","tursoHostname","ef2de6a5356a4dd1b3f203ea3ef80bac-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789489912439],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",47,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":361,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":362,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":363,"_82":364,"_84":365,"_86":24},"tree",[280,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298],"files",[280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298],"counts",{"_270":61,"_271":213,"_272":162,"_273":274,"_275":276},"contents",[129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":263,"_31":264,"_29":265,"_150":-5,"_39":40,"_38":266,"_152":57,"_36":267,"_13":61,"_32":268,"_34":-5,"_23":24,"_155":-5,"_26":269},{"_41":257,"_31":258,"_29":259,"_150":-5,"_39":40,"_38":151,"_152":57,"_36":260,"_13":61,"_32":33,"_34":261,"_23":24,"_155":-5,"_26":262},{"_41":251,"_31":252,"_29":55,"_150":-5,"_39":40,"_38":151,"_152":57,"_36":253,"_13":61,"_32":254,"_34":255,"_23":24,"_155":-5,"_26":256},{"_41":244,"_31":245,"_29":246,"_150":-5,"_39":40,"_38":247,"_152":57,"_36":248,"_13":61,"_32":33,"_34":249,"_23":24,"_155":-5,"_26":250},{"_41":237,"_31":238,"_29":239,"_150":-5,"_39":40,"_38":240,"_152":57,"_36":241,"_13":61,"_32":33,"_34":242,"_23":24,"_155":-5,"_26":243},{"_41":230,"_31":231,"_29":232,"_150":-5,"_39":40,"_38":233,"_152":57,"_36":234,"_13":213,"_32":33,"_34":235,"_23":24,"_155":-5,"_26":236},{"_41":223,"_31":224,"_29":225,"_150":-5,"_39":40,"_38":226,"_152":57,"_36":227,"_13":162,"_32":33,"_34":228,"_23":24,"_155":-5,"_26":229},{"_41":217,"_31":218,"_29":219,"_150":-5,"_39":40,"_38":162,"_152":57,"_36":220,"_13":61,"_32":33,"_34":221,"_23":24,"_155":-5,"_26":222},{"_41":210,"_31":211,"_29":212,"_150":-5,"_39":40,"_38":213,"_152":57,"_36":214,"_13":61,"_32":33,"_34":215,"_23":24,"_155":-5,"_26":216},{"_41":204,"_31":205,"_29":206,"_150":-5,"_39":40,"_38":201,"_152":57,"_36":207,"_13":162,"_32":33,"_34":208,"_23":24,"_155":-5,"_26":209},{"_41":196,"_31":197,"_29":198,"_150":-5,"_39":40,"_38":199,"_152":57,"_36":200,"_13":201,"_32":33,"_34":202,"_23":24,"_155":-5,"_26":203},{"_41":189,"_31":190,"_29":191,"_150":-5,"_39":40,"_38":192,"_152":57,"_36":193,"_13":61,"_32":33,"_34":194,"_23":24,"_155":-5,"_26":195},{"_41":182,"_31":183,"_29":184,"_150":-5,"_39":40,"_38":185,"_152":57,"_36":186,"_13":162,"_32":33,"_34":187,"_23":24,"_155":-5,"_26":188},{"_41":175,"_31":176,"_29":177,"_150":-5,"_39":40,"_38":178,"_152":57,"_36":179,"_13":61,"_32":33,"_34":180,"_23":24,"_155":-5,"_26":181},{"_41":172,"_31":27,"_29":30,"_150":-5,"_39":40,"_38":14,"_152":24,"_36":173,"_13":61,"_32":33,"_34":35,"_23":24,"_155":-5,"_26":174},{"_41":165,"_31":166,"_29":167,"_150":-5,"_39":40,"_38":168,"_152":57,"_36":169,"_13":61,"_32":33,"_34":170,"_23":24,"_155":-5,"_26":171},{"_41":157,"_31":158,"_29":159,"_150":-5,"_39":40,"_38":160,"_152":24,"_36":161,"_13":162,"_32":33,"_34":163,"_23":24,"_155":-5,"_26":164},{"_41":147,"_31":148,"_29":149,"_150":-5,"_39":40,"_38":151,"_152":57,"_36":153,"_13":61,"_32":33,"_34":154,"_23":24,"_155":-5,"_26":156},"499b8bef-6f42-4c3d-bb63-882ebf7f63ba","val_native_kernel_v1.ts","01a09825-28fd-752a-8096-c0f1da3e67d6","parentId",24,"latest",["D",1789258967296],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst rootSqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nconst CHAT_UNPROVEN_ACTIVATION_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908\";\nasync function chatUnprovenActivation(){\n const t:any=await one(`SELECT state,result_event_id FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_ACTIVATION_TASK]);\n if(!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return{active:false,reason:\"ACTIVATION_TASK_NOT_AUTHORIZED_COMPLETE\"};\n const localSeq=Number(t.result_event_id)-PREDECESSOR_EVENTS;\n if(!Number.isInteger(localSeq)||localSeq<1)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_INVALID\"};\n const ev:any=await one(`SELECT agent_id,type,task_id FROM ${P}epoch_events WHERE local_seq=?`,[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==CHAT_UNPROVEN_ACTIVATION_TASK||!ev.agent_id)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_MISSING_OR_MISBOUND\"};\n const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[String(ev.agent_id)]);\n if(!a||String(a.type)===\"CHAT_UNPROVEN\")return{active:false,reason:\"CIRCULAR_CHAT_UNPROVEN_ACTIVATION_FORBIDDEN\",activator_agent_id:String(ev.agent_id)};\n return{active:true,reason:null,activator_agent_id:String(ev.agent_id),activator_type:String(a.type)};\n}\nasync function requireChatUnprovenActivation(){\n const a:any=await chatUnprovenActivation();\n return a.active===true?null:{ok:false,reason:\"CHAT_UNPROVEN_PROTOCOL_V5_NOT_ACTIVE\",activation:a,activation_task_id:CHAT_UNPROVEN_ACTIVATION_TASK,generation:await generation()};\n}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nconst RUNTIME_FOCUS_POLICY_CARRIER_TASK=\"BRAIN-RUNTIME-TEMPORARY-FOCUS-POLICY-CARRIER-P0-V1-20260910\";\nconst RUNTIME_FOCUS_POLICY_SCHEMA=\"BRAIN_RUNTIME_FOCUS_POLICY_V1\";\ntype RuntimeFocusPolicy={valid:boolean;active:boolean;allowed:Set;revision:number;source_sha256:string;reason:string|null};\nasync function runtimeFocusPolicy():Promise{\n const row:any=await one(`SELECT state,context_manifest FROM ${P}tasks WHERE id=?`,[RUNTIME_FOCUS_POLICY_CARRIER_TASK]);\n if(!row)return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_MISSING\"};\n let c:any;try{c=parseJson(row.context_manifest||\"{}\",\"FOCUS_POLICY\")}catch{return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CONTEXT_INVALID\"}}\n const allowed=Array.isArray(c.allowed_classes)&&c.allowed_classes.length>0&&c.allowed_classes.every((x:any)=>typeof x===\"string\"&&!!x)&&new Set(c.allowed_classes).size===c.allowed_classes.length?new Set(c.allowed_classes):null;\n const sourceSha=String(c.source_sha256||\"\").toLowerCase();\n const valid=String(row.state)===\"READY\"&&c.schema===RUNTIME_FOCUS_POLICY_SCHEMA&&c.execution_allowed===false&&typeof c.active===\"boolean\"&&Number.isInteger(c.revision)&&c.revision>=1&&typeof c.source_uri===\"string\"&&c.source_uri.startsWith(\"valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/\")&&HEX64.test(sourceSha)&&!!allowed;\n return valid?{valid:true,active:c.active,allowed:allowed!,revision:c.revision,source_sha256:sourceSha,reason:null}:{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_INVALID\"};\n}\nconst FOCUS_DIRECT_CLASSES=new Set([\"HARNESS\",\"RELEVANT_OPENAI_MECHANISM\"]);\nconst FOCUS_STRICT_CLASS=\"STRICT_NECESSARY_DEPENDENCY\";\nconst FOCUS_LIVE_TARGET_STATES=new Set([\"READY\",\"LEASED\",\"BLOCKED\"]);\nconst FOCUS_CAUSAL_STATES=new Set([\"READY\",\"LEASED\"]);\ntype FocusNormalizedTask={id:string;state:string;depends:string[];supported:boolean;executionAllowed:boolean;policyExact:boolean;cls:string;direct:boolean;strict:boolean};\ntype FocusSnapshot={ok:boolean;reason:string|null;byId:Map;cyclicStrict:Set;strictParents:Map};\nfunction focusObjectJson(raw:any){try{const v=JSON.parse(String(raw));return v&&typeof v===\"object\"&&!Array.isArray(v)?v:null}catch{return null}}\nfunction focusDepsJson(raw:any){try{const v=JSON.parse(String(raw));if(!Array.isArray(v)||v.some((x:any)=>typeof x!==\"string\"||!x)||new Set(v).size!==v.length)return null;return v as string[]}catch{return null}}\nfunction focusPolicyExact(ctx:any,policy:RuntimeFocusPolicy){const rev=Number(ctx?.temporary_focus_policy_revision),src=String(ctx?.temporary_focus_source_sha256||\"\").toLowerCase();return Number.isInteger(rev)&&rev===policy.revision&&src===policy.source_sha256}\nfunction buildFocusSnapshot(rows:any[],policy:RuntimeFocusPolicy):FocusSnapshot{\n const empty={ok:false,reason:\"FOCUS_SNAPSHOT_INVALID\",byId:new Map(),cyclicStrict:new Set(),strictParents:new Map()};\n if(!policy.valid||!Array.isArray(rows))return empty;\n const counts=new Map();for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(id)counts.set(id,(counts.get(id)||0)+1)}\n const byId=new Map();\n for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(!id||counts.get(id)!==1)continue;const ctx=focusObjectJson(r.context_manifest),deps=focusDepsJson(r.depends_json),state=typeof r.state===\"string\"?r.state:\"\",cls=ctx&&typeof ctx.temporary_focus_classification===\"string\"?ctx.temporary_focus_classification:\"\";const supported=!!ctx&&deps!==null&&typeof ctx.execution_allowed===\"boolean\"&&typeof ctx.temporary_focus_classification===\"string\"&&Number.isInteger(ctx.temporary_focus_policy_revision)&&typeof ctx.temporary_focus_source_sha256===\"string\";byId.set(id,{id,state,depends:deps||[],supported,executionAllowed:ctx?.execution_allowed===true,policyExact:!!ctx&&focusPolicyExact(ctx,policy),cls,direct:FOCUS_DIRECT_CLASSES.has(cls),strict:cls===FOCUS_STRICT_CLASS})}\n const graph=new Map();\n for(const t of byId.values())if(FOCUS_CAUSAL_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&(t.direct||t.strict))graph.set(t.id,t.depends.filter(d=>byId.has(d)));\n const cyclicStrict=new Set(),nodeCount=graph.size;\n for(const t of byId.values())if(t.strict&&graph.has(t.id)){const seen=new Set([t.id]),stack=[...(graph.get(t.id)||[])];let steps=0;while(stack.length&&steps++<=nodeCount+1){const x=stack.pop()!;if(x===t.id){cyclicStrict.add(t.id);break}if(seen.has(x)||!graph.has(x))continue;seen.add(x);for(const d of graph.get(x)||[])stack.push(d)}}\n const strictParents=new Map();\n for(const p of byId.values())if(graph.has(p.id)){for(const d of graph.get(p.id)||[]){const child=byId.get(d);if(!child?.strict||cyclicStrict.has(d))continue;const a=strictParents.get(d)||[];a.push(p.id);strictParents.set(d,a)}}\n for(const a of strictParents.values())a.sort();return{ok:true,reason:null,byId,cyclicStrict,strictParents}\n}\nfunction focusTaskDecision(taskId:string,policy:RuntimeFocusPolicy,snap:FocusSnapshot){\n if(!policy.valid||!snap.ok)return{allowed:false,reason:policy.valid?snap.reason:\"FOCUS_POLICY_INVALID\",roots:[] as string[]};const t=snap.byId.get(taskId);if(!t)return{allowed:false,reason:\"TARGET_ID_NOT_UNIQUE_OR_MISSING\",roots:[] as string[]};\n if(!policy.active)return FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed?{allowed:true,reason:\"FOCUS_INACTIVE\",roots:[] as string[]}:{allowed:false,reason:\"TARGET_CANONICAL_SHAPE_OR_EXECUTION_INVALID\",roots:[] as string[]};\n if(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.direct)return{allowed:true,reason:\"DIRECT_FOCUS_CLASS\",roots:[t.id]};\n if(!(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.strict))return{allowed:false,reason:\"FOCUS_CLASS_OR_BINDING_REJECTED\",roots:[] as string[]};\n if(!FOCUS_CAUSAL_STATES.has(t.state))return{allowed:false,reason:\"STRICT_TARGET_NOT_CAUSALLY_LIVE\",roots:[] as string[]};if(snap.cyclicStrict.has(t.id))return{allowed:false,reason:\"STRICT_TARGET_CYCLIC\",roots:[] as string[]};\n const roots=new Set(),seen=new Set([t.id]),q=[t.id];let steps=0,max=Math.max(1,snap.byId.size+1);\n while(q.length&&steps++<=max){const x=q.shift()!;for(const p of snap.strictParents.get(x)||[]){const pt=snap.byId.get(p);if(!pt||!FOCUS_CAUSAL_STATES.has(pt.state)||!pt.supported||!pt.executionAllowed||!pt.policyExact)continue;if(pt.direct){roots.add(pt.id);continue}if(pt.strict&&!snap.cyclicStrict.has(pt.id)&&!seen.has(pt.id)){seen.add(pt.id);q.push(pt.id)}}}\n const rs=[...roots].sort();return rs.length?{allowed:true,reason:\"STRICT_CAUSAL_PATH_QUALIFIED\",roots:rs}:{allowed:false,reason:\"STRICT_CAUSAL_PATH_NOT_QUALIFIED\",roots:rs};\n}\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\ntype NoReadyReason=\"MISSING_DEDUPE\"|\"ASSIGNED_OTHER\"|\"FOCUS_POLICY_INVALID\"|\"TEMPORARY_FOCUS_INELIGIBLE\"|\"EXECUTION_DISABLED\"|\"CHAT_UNPROVEN_INDEPENDENCE\"|\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\"|\"NON_AGENT_REQUIREMENT\"|\"MISSING_CAPABILITY\"|\"DEPENDENCY_UNSATISFIED\"|\"GUARD_UNSATISFIED\"|\"WRITE_CONFLICT\";\nconst NO_READY_REASONS:NoReadyReason[]=[\"MISSING_DEDUPE\",\"ASSIGNED_OTHER\",\"FOCUS_POLICY_INVALID\",\"TEMPORARY_FOCUS_INELIGIBLE\",\"EXECUTION_DISABLED\",\"CHAT_UNPROVEN_INDEPENDENCE\",\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\",\"NON_AGENT_REQUIREMENT\",\"MISSING_CAPABILITY\",\"DEPENDENCY_UNSATISFIED\",\"GUARD_UNSATISFIED\",\"WRITE_CONFLICT\"];\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n const focusPolicy=await runtimeFocusPolicy(),focusRows:any[]=(await sqlite.execute(`SELECT id,state,depends_json,context_manifest FROM ${P}tasks ORDER BY rowid`)).rows as any[],focusSnap=buildFocusSnapshot(focusRows,focusPolicy);\n const reasonCounts:Record=Object.fromEntries(NO_READY_REASONS.map(x=>[x,0])) as Record;let highest:any=null,readyRowsSeen=0;\n const reject=(r:any,reason:NoReadyReason)=>{reasonCounts[reason]++;if(highest===null){const p=Number(r.priority);highest={task_id:String(r.id).slice(0,200),priority:Number.isFinite(p)?p:null,reason}}};\n for(const r of q.rows||[]){\n readyRowsSeen++;\n if(!r.dedupe_key){reject(r,\"MISSING_DEDUPE\");continue}if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId){reject(r,\"ASSIGNED_OTHER\");continue}\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n const focusDecision=focusTaskDecision(String(r.id),focusPolicy,focusSnap);if(!focusDecision.allowed){reject(r,focusPolicy.valid?\"TEMPORARY_FOCUS_INELIGIBLE\":\"FOCUS_POLICY_INVALID\");continue}\n if(ctx.execution_allowed===false){reject(r,\"EXECUTION_DISABLED\");continue}const independenceSensitive=unprovenIndependenceSensitive(req,ctx);if(independenceSensitive&&unproven){reject(r,\"CHAT_UNPROVEN_INDEPENDENCE\");continue}if(independenceSensitive&&EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true){reject(r,\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\");continue}if([...req].some(x=>NON_AGENT.has(x))){reject(r,\"NON_AGENT_REQUIREMENT\");continue}if([...req].some(x=>!C.has(x))){reject(r,\"MISSING_CAPABILITY\");continue}\n if(!await depsSatisfied(r)){reject(r,\"DEPENDENCY_UNSATISFIED\");continue}if(!await guardsSatisfied(r,agentId)){reject(r,\"GUARD_UNSATISFIED\");continue}if(await writeConflict(r)){reject(r,\"WRITE_CONFLICT\");continue}return{task:r,no_ready_diagnostics:null}\n }\n return{task:null,no_ready_diagnostics:{schema:\"NO_READY_TASK_EXPLANATION_V7\",frontier_class:readyRowsSeen===0?\"TRUE_EMPTY_FRONTIER\":\"ALL_READY_ROWS_REJECTED\",ready_rows_seen:readyRowsSeen,reason_counts:reasonCounts,highest_priority_rejected:highest,focus_policy:{valid:focusPolicy.valid,active:focusPolicy.active,revision:focusPolicy.revision,reason:focusPolicy.reason}}}\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nasync function register(args:string[]){\n if(args.length<2)throw new Error(\"REGISTER_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),role=String(f.role||\"\"),type=String(f.type||\"\"),parent=f.parent??null,caps=cleanCaps(parseJson(f.capabilities||\"[]\",\"CAPS\"));\n if(!ws||!role||!type)throw new Error(\"REGISTER_FIELDS_REQUIRED\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(type===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}\n if(parent){if(String(parent)===id)throw new Error(\"AGENT_CANNOT_PARENT_SELF\");const pr:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[parent]);if(!pr)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(String(pr.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_PARENT\")}\n const ex:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(ex){const same=String(ex.workstream)===ws&&String(ex.role)===role&&String(ex.type)===type&&(ex.parent_id??null)===(parent??null)&&String(ex.capabilities_json)===canon(caps);if(!same)throw new Error(\"AGENT_REJOIN_IDENTITY_MISMATCH\");await sqlite.execute({sql:`UPDATE ${P}agents SET last_seen=? WHERE id=?`,args:[now(),id]});return{ok:true,created:false,agent_id:id,generation:await generation()}}\n const g0=await generation();await sqlite.execute({sql:`INSERT INTO ${P}agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES(?,?,?,?,?,'READY',?,?,?,?)`,args:[id,parent,type,ws,role,g0,g0,now(),canon(caps)]});await appendEvent(ws,id,null,\"AGENT_REGISTERED\",{type,role,parent,boot_generation:g0,capabilities:caps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=? WHERE id=?`,args:[ng,id]});return{ok:true,created:true,agent_id:id,generation:ng}\n}\nasync function ensureTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");if(!ws||!dedupe)throw new Error(\"ENSURE_FIELDS_REQUIRED\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));\n if(!Array.isArray(deps)||!ctx||Array.isArray(ctx)||!Array.isArray(req))throw new Error(\"BAD_JSON_SHAPE\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing)return{ok:true,created:false,task_id:existing.id,state:existing.state,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe};\n if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority);if(!Number.isFinite(priority))throw new Error(\"BAD_PRIORITY\");\n await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,NULL,NULL,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,canon(writes),canon(guards)]});\n await appendEvent(ws,f.agent??null,id,\"TASK_CREATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe}\n}\nasync function claim(args:string[]){\n const f=flags(args,1),id=String(f.agent||\"\"),mode=String(f.mode||\"INTERACTIVE\"),secs=f[\"lease-seconds\"]===undefined?(mode===\"INTERACTIVE\"?1800:900):Number(f[\"lease-seconds\"]);if(!id)throw new Error(\"AGENT_REQUIRED\");if(![\"INTERACTIVE\",\"PROCESS\"].includes(mode)||secs<60||secs>7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.type)===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task===CHAT_UNPROVEN_ACTIVATION_TASK){const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agent]);if(String(a?.type||\"\")===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\"}}}if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,claim_id:id,statement_sha256:h,generation:ng}\n}\nasync function invalidateClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),reason=String(f.reason||\"\"),agent=f.agent??null;const root:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[id]);if(!root)throw new Error(\"UNKNOWN_CLAIM\");const todo=[id],seen=new Set(),changed:any[]=[];\n while(todo.length){const q=String(todo.pop());if(seen.has(q))continue;seen.add(q);const row:any=await one(`SELECT status FROM ${P}claims WHERE id=?`,[q]);if(row&&![\"FALSIFIED\",\"STALE\"].includes(String(row.status))){const ns=q===id?\"FALSIFIED\":\"STALE\";await sqlite.execute({sql:`UPDATE ${P}claims SET status=?,invalidated_by=?,updated_at=? WHERE id=?`,args:[ns,id,now(),q]});changed.push([q,ns])}const kids:any[]=(await sqlite.execute({sql:`SELECT child_claim FROM ${P}claim_deps WHERE parent_claim=?`,args:[q]})).rows as any[];for(const k of kids)todo.push(String(k.child_claim))}\n await appendEvent(String(root.workstream),agent,null,\"CLAIM_INVALIDATED\",{root_claim:id,reason,affected:changed});const propagated=await propagateImpossible(String(root.workstream),agent,{type:\"claim_invalidated\",claim_id:id,reason});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),root.workstream]});return{ok:true,root_claim:id,affected:changed,generation:ng,propagated_blocked:propagated}\n}\nasync function recordExternalArtifact(args:string[]){\n const spec=parseExternalArtifactSpec(args);\n const ws:any=await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[spec.workstream]);if(!ws)throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(spec.agent!==null){const a:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[spec.agent]);if(!a)throw new Error(\"UNKNOWN_ARTIFACT_AGENT\");if(String(a.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_AGENT\")}\n if(spec.task!==null){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[spec.task]);if(!t)throw new Error(\"UNKNOWN_ARTIFACT_TASK\");if(String(t.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_TASK\")}\n const integrity=await verifyExternalArtifactBlobBytes(spec);\n const found:any=await sqlite.execute({sql:`SELECT sha256,size,logical_name,producer_agent,task_id,storage_json FROM ${P}artifacts WHERE lower(sha256)=?`,args:[spec.sha256]});\n const rows:any[]=found.rows||[];if(rows.length>1)throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_CANONICAL_ROWS\");\n const decision=externalArtifactExistingDecision(rows[0]??null,spec);\n if(decision.kind===\"CONFLICT\")throw new Error(decision.reason);\n if(decision.kind===\"ALREADY_RECORDED\")return{ok:true,created:false,already_recorded:true,sha256:spec.sha256,generation:await generation(),semantic_generation_unchanged:true,integrity};\n const t=now();\n await sqlite.execute({sql:`INSERT INTO ${P}artifacts(sha256,size,logical_name,producer_agent,task_id,storage_json,created_at) VALUES(?,?,?,?,?,?,?)`,\n args:[spec.sha256,spec.size,spec.name,spec.agent,spec.task,canon([spec.uri]),t]});\n const payload={sha256:spec.sha256,size:spec.size,logical_name:spec.name,storage_uri:spec.uri,producer_agent:spec.agent,task_id:spec.task};\n const ev=await appendEvent(spec.workstream,spec.agent,spec.task,\"EXTERNAL_ARTIFACT_RECORDED\",payload);\n const ng=await bump();\n await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),spec.workstream]});\n return{ok:true,created:true,already_recorded:false,sha256:spec.sha256,generation:ng,event_id:PREDECESSOR_EVENTS+Number(ev.seq),event_hash:ev.event_hash,integrity};\n}\n\nasync function commitFull(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId||![\"COMPLETE\",\"INVALID\",\"BLOCKED\"].includes(state))throw new Error(\"BAD_COMMIT\");const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT_FORBIDDEN\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)g?.type===EXECUTION_DISTINCT_GUARD))throw new Error(\"CHAT_UNPROVEN_INDEPENDENCE_COMMIT_FORBIDDEN\");\n payload={...payload,contributor_trust_class:\"CHAT_UNPROVEN\",contributor_agent_type:\"CHAT_UNPROVEN\",independence_eligible:false,p_real_eligible:false};\n }else if(payload&&typeof payload===\"object\"&&!Array.isArray(payload)&&reserved.some(k=>Object.prototype.hasOwnProperty.call(payload,k))){\n throw new Error(\"CALLER_CONTROLLED_TRUST_METADATA_FORBIDDEN\");\n }\n const ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_RESULT_COMMITTED\",payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);await sqlite.execute({sql:`UPDATE ${P}tasks SET state=?,result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=?`,args:[state,eid,now(),taskId]});let propagated:any[]=[];if([\"INVALID\",\"BLOCKED\"].includes(state))propagated=await propagateImpossible(String(task.workstream),agent,{type:\"task_terminal\",task_id:taskId,state});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET status='READY',last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,generation:ng,event_id:eid,propagated_blocked:propagated}\n}\nconst CHECKPOINT_STATE_TABLES=[\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"task_context_history\",\"task_invariant_history\"];\nfunction checkpointSortedRows(rows:any[]){return [...(rows||[])].sort((a:any,b:any)=>canon(a).localeCompare(canon(b)))}\nasync function checkpointStateView(){\n const m:any=await meta(),tables:any={};\n for(const t of CHECKPOINT_STATE_TABLES)tables[t]=checkpointSortedRows((await sqlite.execute(`SELECT * FROM ${P}${t}`)).rows||[]);\n const events=(await sqlite.execute(`SELECT * FROM ${P}epoch_events ORDER BY local_seq`)).rows||[];\n const stateSha256=await sha(canon({epoch_meta:m,events,state:tables}));\n return{m,tables,events,state_sha256:stateSha256};\n}\nasync function captureCheckpointSnapshot(){\n return await withTransaction(\"read\",async()=>{\n const v:any=await checkpointStateView();\n const payload={schema:\"BRAIN_VAL_NATIVE_SNAPSHOT_V2\",lineage:{predecessor_generation:v.m.predecessor_generation,predecessor_event_count:v.m.predecessor_event_count,predecessor_head:v.m.predecessor_head},epoch_meta:v.m,events:v.events,state:v.tables,state_sha256:v.state_sha256,exported_at:now()};\n const raw=JSON.stringify(payload,null,2)+\"\\n\",h=await sha(raw),key=`snapshots/val_native/brain_snapshot_epoch${v.m.epoch}_g${v.m.generation}_${h.slice(0,16)}.json`;\n return{...v,raw,snapshot_sha256:h,key};\n });\n}\nasync function checkpointNativeBound(payloadJson:string,c:BoundTransportContext){\n const cmd=\"checkpoint\";\n const captured:any=await withTransaction(\"read\",async()=>{\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return{early:pre};\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return{early:prior};\n return await captureCheckpointSnapshot();\n });\n if(captured.early!==undefined)return captured.early;\n await blob.set(captured.key,captured.raw);\n const rb:any=await blob.get(captured.key),rbRaw=await rb.text(),rbSha=await sha(rbRaw);\n if(rbRaw!==captured.raw||rbSha!==captured.snapshot_sha256)throw new Error(\"CHECKPOINT_BLOB_READBACK_MISMATCH\");\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return prior;\n const current:any=await checkpointStateView();\n if(String(current.state_sha256)!==String(captured.state_sha256))return{ok:false,reason:\"CHECKPOINT_CAPTURE_STALE\",captured_generation:Number(captured.m.generation),current_generation:Number(current.m.generation),captured_event_head_hash:String(captured.m.event_head_hash),current_event_head_hash:String(current.m.event_head_hash),captured_state_sha256:String(captured.state_sha256),current_state_sha256:String(current.state_sha256),orphan_blob_noncanonical:true,orphan_blob_uri:`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`};\n const id=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}replicas`)).n),uri=`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`;\n await sqlite.execute({sql:`INSERT INTO ${P}replicas(id,generation,provider,uri,snapshot_sha256,event_head_hash,verified,created_at) VALUES(?,?,?,?,?,?,1,?)`,args:[id,Number(captured.m.generation),\"val-town-native\",uri,String(captured.snapshot_sha256),String(captured.m.event_head_hash),now()]});\n const post:any=await boundTransportGuard(c,payloadJson,cmd);if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_CHECKPOINT_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n const result={ok:true,generation:Number(captured.m.generation),durability_lag_generations:Number(current.m.generation)-Number(captured.m.generation),snapshot_sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),event_head_hash:String(captured.m.event_head_hash),uri,attempts:[{attempt:1,generation:Number(captured.m.generation),sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),size:enc.encode(captured.raw).length,ok:true,uri,lag_after_ack:Number(current.m.generation)-Number(captured.m.generation)}],orphan_blob_policy:\"CONTENT_ADDRESSED_BLOB_HAS_NO_CANONICAL_CHECKPOINT_MEANING_UNTIL_REPLICA_ROW_AND_BOUND_MUTATION_RECEIPT_COMMIT\"};\n const m:any=await meta(),payloadSha=await sha(payloadJson);\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[c.job_id,c.lease_attempt_id,c.lease_instance_id,c.lease_owner,c.transport_lease_generation,c.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\nfunction transportContextShapeOk(c:any):c is BoundTransportContext{\n return !!c&&typeof c===\"object\"&&!Array.isArray(c)&&\n typeof c.job_id===\"string\"&&!!c.job_id&&\n Number.isInteger(c.transport_lease_generation)&&c.transport_lease_generation>=1&&\n typeof c.lease_owner===\"string\"&&!!c.lease_owner&&\n typeof c.lease_instance_id===\"string\"&&!!c.lease_instance_id&&\n typeof c.lease_attempt_id===\"string\"&&!!c.lease_attempt_id&&\n Number.isInteger(c.authority_epoch)&&c.authority_epoch>=1&&\n typeof c.payload_json===\"string\"&&!!c.payload_json;\n}\nasync function boundTransportGuard(c:BoundTransportContext,payloadJson:string,cmd:string){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n if(!authority||Number(authority.epoch)!==c.authority_epoch||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_AUTHORITY_FENCED\",command:cmd,authority:authority??null};\n }\n const job:any=await one(`SELECT id,op,payload_json,state,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM brain_bridge_jobs\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND lease_expires_at>datetime('now')`,\n [c.job_id,c.lease_owner,c.lease_instance_id,c.lease_attempt_id,c.transport_lease_generation]);\n if(!job)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_ATTEMPT_FENCED\",command:cmd,job_id:c.job_id};\n if(String(job.op)!==\"brain\")return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_OP_MISMATCH\",command:cmd,job_id:c.job_id};\n if(String(job.payload_json)!==c.payload_json||payloadJson!==c.payload_json)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_PAYLOAD_MISMATCH\",command:cmd,job_id:c.job_id};\n return{ok:true,authority,job};\n}\nasync function existingBoundReceipt(c:BoundTransportContext,payloadJson:string,cmd:string){\n const r:any=await one(`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,result_json\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[c.job_id,c.lease_attempt_id]);\n if(!r)return null;\n const psha=await sha(payloadJson);\n if(String(r.lease_instance_id)!==c.lease_instance_id||String(r.lease_owner)!==c.lease_owner||\n Number(r.transport_lease_generation)!==c.transport_lease_generation||Number(r.authority_epoch)!==c.authority_epoch||\n String(r.command)!==cmd||String(r.payload_sha256)!==psha)throw new Error(\"MUTATION_RECEIPT_BINDING_MISMATCH\");\n return parseJson(r.result_json,\"MUTATION_RECEIPT_RESULT\");\n}\nasync function dispatchFull(payloadJson:string,transportContext?:BoundTransportContext){\n const q=parseJson(payloadJson,\"PAYLOAD\");if(!exactTop(q))throw new Error(\"PAYLOAD_SCHEMA_NOT_CLOSED\");const cmd=String(q.args[0]);\n const full=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"delegate-task\",\"claim\",\"renew-lease\",\"commit\",\"checkpoint\",\"add-claim\",\"invalidate-claim\",\"supersede-task-context\",\"migrate-task-invariants\",\"reconcile-causal-blocks\",\"recover-stale\",\"record-external-artifact\"]);if(!full.has(cmd))throw new Error(\"BRAIN_SUBCOMMAND_NOT_ALLOWED\");\n const invoke=async(argsOverride?:any[])=>{\n const a=argsOverride??q.args;\n if(cmd===\"status\")return await status();if(cmd===\"verify-chain\")return await verifyChain();if(cmd===\"verify-claim-graph\")return await verifyClaimGraph();if(cmd===\"register-agent\")return await register(a);if(cmd===\"ensure-task\")return await ensureTask(a);if(cmd===\"delegate-task\")return await delegateTask(a);if(cmd===\"claim\")return await claim(a);if(cmd===\"renew-lease\")return await renew(a);if(cmd===\"commit\")return await commitFull(a);if(cmd===\"checkpoint\")return await checkpointNative();if(cmd===\"add-claim\")return await addClaimFull(a);if(cmd===\"invalidate-claim\")return await invalidateClaimFull(a);if(cmd===\"supersede-task-context\")return await supersedeContext(a);if(cmd===\"migrate-task-invariants\")return await migrateInvariants(a);if(cmd===\"reconcile-causal-blocks\")return await reconcileCausal(a);if(cmd===\"record-external-artifact\")return await recordExternalArtifact(a);if(cmd===\"recover-stale\"){if(a.length!==1)throw new Error(\"RECOVER_STALE_ARGS_INVALID\");return await recover()}throw new Error(\"UNREACHABLE\");\n };\n if(READ_ONLY_COMMANDS.has(cmd))return await withTransaction(\"read\",()=>invoke());\n const emergencyCanary=transportContextShapeOk(transportContext)&&transportContext.job_id===EMERGENCY_MUTATION_CANARY_JOB_ID;\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_EMERGENCY_FROZEN\",command:cmd,authority:authority??null};\n }\n if(!REACTIVATION_MUTATION_ALLOWLIST.has(cmd))return{ok:false,reason:\"VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED\",command:cmd};\n if(!transportContextShapeOk(transportContext))return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_CONTEXT_REQUIRED\",command:cmd};\n if(cmd===\"checkpoint\")return await checkpointNativeBound(payloadJson,transportContext);\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n await ensureMutationRetryAuthTable();\n const pre:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(transportContext,payloadJson,cmd);\n if(prior!==null)return prior;\n const payloadSha=await sha(payloadJson);\n let result:any=null,retriableStale=false;\n const req:any=transportContext.stable_retry_request;\n if(cmd!==\"commit\"&&(transportContext.stable_retry_probe!==undefined||req!==undefined)){\n result={ok:false,reason:\"STABLE_RETRY_METADATA_NONCOMMIT_FORBIDDEN\",command:cmd};\n }else if(cmd===\"commit\"&&req!==undefined){\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n if(!stableRetryRequestOk(req)||originalExpected===null){\n result={ok:false,reason:\"STABLE_RETRY_REQUEST_INVALID\"};\n }else{\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n const bindingOk=!!ar&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&String(ar.lease_owner)===transportContext.lease_owner&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation&&Number(ar.authority_epoch)===transportContext.authority_epoch&&\n String(ar.command)===\"commit\"&&String(ar.payload_sha256)===payloadSha&&Number(ar.stale_expected_workstream_generation)===originalExpected&&\n String(ar.stable_snapshot_sha256)===String(req.stable_snapshot_sha256)&&Number(req.from_expected_workstream_generation)===originalExpected&&\n Number(req.retry_index)===Number(ar.retry_count)+1;\n if(!bindingOk){\n result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_FENCED\"};\n }else{\n const u:any=await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE}\n SET retry_count=retry_count+1,updated_at=? WHERE job_id=? AND lease_attempt_id=? AND retry_count=? RETURNING retry_count`,\n args:[now(),transportContext.job_id,transportContext.lease_attempt_id,Number(ar.retry_count)]});\n if(!(u.rows||[]).length)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_RACE\"};\n else{\n result=await invoke(withCommitExpectedWorkstreamGeneration(q.args,Number(req.to_expected_workstream_generation)));\n if(result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n retriableStale=true;\n if(Number.isInteger(Number(result.actual)))await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE} SET observed_workstream_generation=?,updated_at=? WHERE job_id=? AND lease_attempt_id=?`,\n args:[Number(result.actual),now(),transportContext.job_id,transportContext.lease_attempt_id]});\n }else{\n // Keep the exact-attempt authorization row as immutable-ish audit evidence.\n // The successful mutation receipt is the idempotent completion authority;\n // deleting this row is unnecessary and conflicts with canonical no-delete hardening.\n }\n }\n }\n }\n }else{\n result=await invoke();\n if(cmd===\"commit\"&&result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n const probe:any=transportContext.stable_retry_probe;\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n const eligible=stableRetryProbeOk(probe)&&probe.retry_guard_snapshot_complete===true&&originalExpected!==null&&\n Number(result.expected)===originalExpected&&Number.isInteger(Number(result.actual));\n if(eligible){\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${MUTATION_RETRY_AUTH_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,\n stale_expected_workstream_generation,observed_workstream_generation,stable_snapshot_sha256,retry_count,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,\"commit\",payloadSha,originalExpected,Number(result.actual),\n probe.stable_snapshot_sha256,0,now(),now()]});\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n retriableStale=!!ar&&String(ar.payload_sha256)===payloadSha&&String(ar.stable_snapshot_sha256)===probe.stable_snapshot_sha256&&\n Number(ar.stale_expected_workstream_generation)===originalExpected&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation;\n if(!retriableStale)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_CONFLICT\"};\n }\n }\n }\n const post:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n if(retriableStale)return{...result,stable_retry_authorized:true};\n const m:any=await meta();\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\n\n\nasync function brainStatusSafe(){return await withTransaction(\"read\",()=>status())}\nasync function verifyBrainChainSafe(){return await withTransaction(\"read\",()=>verifyChain())}\nasync function verifyBrainClaimGraphSafe(){return await withTransaction(\"read\",()=>verifyClaimGraph())}\nasync function checkpointBrainNativeSafe(){return await dispatchFull(JSON.stringify({args:[\"checkpoint\"],timeout:120}))}\nasync function recoverBrainStaleSafe(){return await dispatchFull(JSON.stringify({args:[\"recover-stale\"],timeout:120}))}\nasync function registerBrainAgentSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function claimBrainTaskSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function brainGenerationSafe(){return await withTransaction(\"read\",()=>generation())}\n\nexport {\n dispatchFull as dispatchBrain,\n brainStatusSafe as brainStatus,\n verifyBrainChainSafe as verifyBrainChain,\n verifyBrainClaimGraphSafe as verifyBrainClaimGraph,\n checkpointBrainNativeSafe as checkpointBrainNative,\n recoverBrainStaleSafe as recoverBrainStale,\n registerBrainAgentSafe as registerBrainAgent,\n claimBrainTaskSafe as claimBrainTask,\n brainGenerationSafe as brainGeneration\n};\n","label",[148],"d592cefb-1c42-4d14-8457-584f21204eec","val_native_executor_prod.ts","01a09825-28fd-752a-8096-be83ace9906d",25,["D",1789258990735],1,"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst sqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { leaseOneSql } from \"./brain_bridge_worker.ts\";\nimport { classifyValidCoalesceResult } from \"./brain_bridge_readonly_coalesce_v4.ts\";\nimport { dispatchBrain, verifyBrainChain, verifyBrainClaimGraph } from \"./val_native_kernel_v1.ts\";\n\nconst JOB_TABLE=\"brain_bridge_jobs\";\nconst AUTH_TABLE=\"brain_control_plane_authority_v1\";\n// A unique module query-string creates an independent worker incarnation inside the\n// same Val runtime. The default preserves the canonical executor identity.\nconst moduleUrl=new URL(import.meta.url);\nconst WORKER=moduleUrl.searchParams.get(\"worker\")||\"project-brain-val-native-v1\";\nconst INSTANCE=moduleUrl.searchParams.get(\"instance\")||\"val-native-epoch2\";\nconst LEASE_SECONDS=180;\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst RUNTIME_TICK_TABLE=\"val_native_executor_runtime_v1\";\nconst RUNTIME_TICK_TTL_SECONDS=300;\nconst PRELEASE_RANK_RECEIPT_TABLE=\"brain_bridge_prelease_rank_receipts_v1\";\n// R8K2 installs in two phases: helpers first, then only enable after the exact\n// rebased source passes remote Deno/libSQL qualification and production readback.\nconst PRELEASE_READ_COALESCE_V1_ENABLED=true;\nasync function ensureMutationReceiptTable(db:any=sqlite){\n await db.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction safeSqlTableV1(t:string){\n if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(t))throw new Error(\"BAD_TABLE\");\n return t;\n}\nfunction canonicalJsonV1(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canonicalJsonV1).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canonicalJsonV1(x[k])).join(\",\")+\"}\";\n}\nexport async function ensurePreleaseRankReceiptTableV1(db:any=sqlite,table=PRELEASE_RANK_RECEIPT_TABLE){\n table=safeSqlTableV1(table);\n await db.execute(`CREATE TABLE IF NOT EXISTS ${table}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n rank0_id TEXT NOT NULL,\n rank1_id TEXT,\n rank_snapshot_sha256 TEXT NOT NULL,\n created_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nexport function orderedReadyTop2SqlV1(table=JOB_TABLE){\n table=safeSqlTableV1(table);\n const raw=leaseOneSql(table);\n const marker=`SELECT j.id FROM ${table} j`;\n const start=raw.indexOf(marker);\n const end=raw.indexOf(\"\\n LIMIT 1\",start);\n if(start<0||end<0)throw new Error(\"PRELEASE_SELECTOR_SHAPE_DRIFT\");\n const selector=raw.slice(start,end).replace(marker,`SELECT j.rowid AS queue_rowid,j.* FROM ${table} j`);\n if((selector.match(/\\?/g)||[]).length!==1)throw new Error(\"PRELEASE_SELECTOR_PLACEHOLDER_DRIFT\");\n return selector+\"\\n LIMIT 2\";\n}\nexport async function acquireWithPreleaseRankReceiptV1(db:any,opts:{qTable?:string;rTable?:string;worker:string;instance:string;attempt:string;injectReceiptFailure?:boolean}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const active:any=await tx.execute(`SELECT id FROM ${q} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id LIMIT 2`);\n const activeRows:any[]=active.rows||[];\n if(activeRows.length>1){await tx.rollback();done=true;return {kind:\"conflict\",active:activeRows}}\n if(activeRows.length===1){await tx.rollback();done=true;return {kind:\"busy\",active:activeRows[0]}}\n const ranked:any=await tx.execute({sql:orderedReadyTop2SqlV1(q),args:[opts.worker]});\n const rows:any[]=ranked.rows||[];\n if(!rows.length){await tx.rollback();done=true;return {kind:\"empty\"}}\n const leader=rows[0],follower=rows[1]??null;\n const u:any=await tx.execute({sql:`UPDATE ${q}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(SELECT 1 FROM ${q} x WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now'))\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[opts.worker,opts.instance,opts.attempt,String(leader.id)]});\n const leased:any=u.rows?.[0]??null;if(!leased)throw new Error(\"PRELEASE_LEASE_CAS_FAILED\");\n const snap={\n rank0:{id:String(leader.id),op:String(leader.op),payload_json:String(leader.payload_json),priority:Number(leader.priority),created_at:String(leader.created_at)},\n rank1:follower?{id:String(follower.id),op:String(follower.op),payload_json:String(follower.payload_json),priority:Number(follower.priority),created_at:String(follower.created_at)}:null,\n };\n const rankSnapshotSha256=await sha256Text(canonicalJsonV1(snap));\n await tx.execute({sql:`INSERT INTO ${r}(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,rank0_id,rank1_id,rank_snapshot_sha256,created_at)\n VALUES(?,?,?,?,?,?,?,?,datetime('now'))`,args:[String(leased.id),opts.attempt,opts.instance,opts.worker,Number(leased.transport_lease_generation),String(leader.id),follower?String(follower.id):null,opts.injectReceiptFailure?\"INVALID\":rankSnapshotSha256]});\n if(opts.injectReceiptFailure)throw new Error(\"INJECTED_PRELEASE_RECEIPT_FAILURE\");\n await tx.commit();done=true;\n return {kind:\"leased\",job:leased,rank0:String(leader.id),rank1:follower?String(follower.id):null,rank_snapshot_sha256:rankSnapshotSha256};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nfunction exactObjectKeysV1(v:any,keys:string[]){\n if(!v||typeof v!==\"object\"||Array.isArray(v))return false;\n const a=Object.keys(v).sort(),b=[...keys].sort();\n return a.length===b.length&&a.every((x,i)=>x===b[i]);\n}\nexport function classifyValNativeCoalesceResultV1(resultJson:string){\n let r:any;try{r=JSON.parse(resultJson)}catch{return null}\n if(!exactObjectKeysV1(r,[\"returncode\",\"stderr\",\"stdout\"]))return null;\n return classifyValidCoalesceResult(JSON.stringify({returncode:r.returncode,stdout:r.stdout,stderr:r.stderr,stdout_truncated:false,stderr_truncated:false}));\n}\nexport function preleaseReceiptBindingReasonV1(job:any,x:any){\n if(!x)return \"PRELEASE_RECEIPT_MISSING\";\n if(String(x.job_id)!==String(job.id)||String(x.rank0_id)!==String(job.id))return \"PRELEASE_RECEIPT_CORRUPT\";\n if(String(x.lease_owner)!==String(job.lease_owner)||String(x.lease_instance_id)!==String(job.lease_instance_id)||String(x.lease_attempt_id)!==String(job.lease_attempt_id)||Number(x.transport_lease_generation)!==Number(job.transport_lease_generation))return \"PRELEASE_RECEIPT_STALE_OR_MISBOUND\";\n if(!/^[0-9a-f]{64}$/.test(String(x.rank_snapshot_sha256)))return \"PRELEASE_RECEIPT_HASH_INVALID\";\n if(x.rank1_id==null)return \"PRELEASE_RECEIPT_NO_FOLLOWER\";\n return \"OK\";\n}\nexport async function finalizeLeaderOptionalPreleaseFollowerV1(db:any,opts:{qTable?:string;rTable?:string;job:any;expected:any}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const command=opts.expected?.state===\"COMPLETE\"&&opts.expected?.error_json==null&&typeof opts.expected?.result_json===\"string\"\n ? classifyValNativeCoalesceResultV1(opts.expected.result_json):null;\n const job=opts.job;\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const lr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')`,\n args:[String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n const leader:any=lr.rows?.[0]??null;\n if(!leader){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerId:string|null=null,receiptReason=\"NOT_COALESCIBLE\";\n if(command){\n const rr:any=await tx.execute({sql:`SELECT * FROM ${r} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const recs:any[]=rr.rows||[];\n if(recs.length!==1)receiptReason=recs.length>1?\"AMBIGUOUS_PRELEASE_RECEIPTS\":\"PRELEASE_RECEIPT_MISSING\";\n else{\n const x:any=recs[0];\n receiptReason=preleaseReceiptBindingReasonV1(job,x);\n if(receiptReason===\"OK\"){\n const fr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=?`,args:[String(x.rank1_id)]});\n const f:any=fr.rows?.[0]??null;\n if(f&&String(f.state)===\"READY\"&&String(f.op)===String(leader.op)&&String(f.payload_json)===String(leader.payload_json)&&Number(f.priority)===Number(leader.priority))followerId=String(f.id);\n else receiptReason=\"PRELEASE_FOLLOWER_NO_LONGER_EXACT_READY_MATCH\";\n }\n }\n }\n const lu:any=await tx.execute({sql:`UPDATE ${q}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(opts.expected.state),opts.expected.result_json??null,opts.expected.error_json??null,String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(lu.rows||[]).length){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerCompleted=false;\n if(followerId){\n const fu:any=await tx.execute({sql:`UPDATE ${q} SET state='COMPLETE',result_json=?,error_json=NULL,updated_at=datetime('now') WHERE id=? AND state='READY' AND op=? AND payload_json=? AND priority=? RETURNING id`,\n args:[opts.expected.result_json,followerId,String(leader.op),String(leader.payload_json),Number(leader.priority)]});\n followerCompleted=(fu.rows||[]).length===1;\n }\n await tx.commit();done=true;\n return {ok:true,id:String(job.id),state:String(opts.expected.state),command,receipt_reason:receiptReason,follower_completed:followerCompleted,follower_id:followerCompleted?followerId:null};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\n\nfunction legacyEnvelope(v:any){return JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify(v)+\"\\n\"})}\nasync function sha256Text(s:string){\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nasync function authority(){\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTH_TABLE} WHERE id=1`);\n return r.rows?.[0]??null;\n}\nconst RESULT_FINALIZATION_HELPER_V1_SHA256=\"b82e4f00c3f7b3eb721871e780d0f7c43180e32516b9a5c87112a956e550677f\";\nconst RESULT_FINALIZATION_HELPER_V1_SOURCE=String.raw`// RESULT_FINALIZATION_EXACT_ATTEMPT_RECONCILIATION_V1\n// Candidate-only pure helper. It never dispatches/re-dispatches a Brain command.\n// Production integration supplies narrowly-scoped queue/authority/receipt operations.\n\nexport const READ_ONLY_COMMANDS_V1 = new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\n\nexport function canonV1(x) {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canonV1).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k => JSON.stringify(k) + \":\" + canonV1(x[k])).join(\",\") + \"}\";\n}\n\nexport function legacyEnvelopeV1(v) {\n return JSON.stringify({returncode:0, stderr:\"\", stdout:JSON.stringify(v) + \"\\n\"});\n}\n\nexport async function sha256TextV1(s) {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x => x.toString(16).padStart(2,\"0\")).join(\"\");\n}\n\nfunction errText(e) {\n return e instanceof Error ? e.message : String(e);\n}\n\nfunction authorityMatches(a, epoch, mode) {\n return !!a &&\n Number(a.epoch) === Number(epoch) &&\n String(a.writer) === \"val_native\" &&\n String(a.mode) === String(mode);\n}\n\nfunction expectedTerminal(dispatchOk, dispatchValue) {\n return dispatchOk\n ? {state:\"COMPLETE\", result_json:legacyEnvelopeV1(dispatchValue), error_json:null}\n : {state:\"FAILED\", result_json:null, error_json:JSON.stringify(dispatchValue)};\n}\n\nfunction sameNullable(a,b) {\n return (a ?? null) === (b ?? null);\n}\n\nfunction exactStaticJobBinding(row, job) {\n return !!row &&\n String(row.id) === String(job.id) &&\n String(row.op) === String(job.op) &&\n String(row.payload_json) === String(job.payload_json) &&\n Number(row.transport_lease_generation) === Number(job.transport_lease_generation);\n}\n\nfunction exactLiveAttempt(row, job) {\n return exactStaticJobBinding(row, job) &&\n String(row.lease_instance_id) === String(job.lease_instance_id) &&\n String(row.lease_attempt_id) === String(job.lease_attempt_id);\n}\n\nfunction exactTerminal(row, job, expected) {\n return exactLiveAttempt(row, job) &&\n String(row.state) === expected.state &&\n sameNullable(row.result_json, expected.result_json) &&\n sameNullable(row.error_json, expected.error_json) &&\n row.lease_owner == null &&\n row.lease_expires_at == null;\n}\n\nfunction leaseUnexpired(row, nowIso) {\n return !!row?.lease_expires_at && String(row.lease_expires_at) > String(nowIso);\n}\n\nfunction isExpiryUnknown(row) {\n if (!row || String(row.state) !== \"FAILED\" || row.result_json != null) return false;\n try {\n const e = JSON.parse(String(row.error_json || \"{}\"));\n return e?.classification === \"TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION\";\n } catch {\n return false;\n }\n}\n\nasync function exactReceipt(receipts, job, expectedEpoch, command, dispatchValue) {\n if (!Array.isArray(receipts) || receipts.length !== 1) return {ok:false, reason:receipts?.length > 1 ? \"AMBIGUOUS_MUTATION_RECEIPTS\" : \"MUTATION_RECEIPT_MISSING\"};\n const r = receipts[0];\n const payloadSha = await sha256TextV1(String(job.payload_json));\n if (String(r.job_id) !== String(job.id)) return {ok:false,reason:\"RECEIPT_JOB_MISMATCH\"};\n if (String(r.lease_attempt_id) !== String(job.lease_attempt_id)) return {ok:false,reason:\"RECEIPT_ATTEMPT_MISMATCH\"};\n if (String(r.lease_instance_id) !== String(job.lease_instance_id)) return {ok:false,reason:\"RECEIPT_INSTANCE_MISMATCH\"};\n if (String(r.lease_owner) !== String(job.lease_owner)) return {ok:false,reason:\"RECEIPT_OWNER_MISMATCH\"};\n if (Number(r.transport_lease_generation) !== Number(job.transport_lease_generation)) return {ok:false,reason:\"RECEIPT_GENERATION_MISMATCH\"};\n if (Number(r.authority_epoch) !== Number(expectedEpoch)) return {ok:false,reason:\"RECEIPT_AUTHORITY_EPOCH_MISMATCH\"};\n if (String(r.command) !== String(command)) return {ok:false,reason:\"RECEIPT_COMMAND_MISMATCH\"};\n if (String(r.payload_sha256) !== payloadSha) return {ok:false,reason:\"RECEIPT_PAYLOAD_MISMATCH\"};\n if (String(r.result_json) !== canonV1(dispatchValue)) return {ok:false,reason:\"RECEIPT_RESULT_MISMATCH\"};\n return {ok:true, receipt:r, payload_sha256:payloadSha};\n}\n\nasync function readOnlyStillFresh(command, preDispatchGeneration, deps) {\n if (!READ_ONLY_COMMANDS_V1.has(command)) return {ok:true};\n if (!Number.isInteger(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_PRE_DISPATCH_GENERATION_REQUIRED\"};\n const g = await deps.readCanonicalGeneration();\n if (Number(g) !== Number(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_CANONICAL_GENERATION_DRIFT\",expected:preDispatchGeneration,actual:Number(g)};\n return {ok:true};\n}\n\n/**\n * deps contract:\n * - readAuthority()\n * - readJob(id)\n * - readCanonicalGeneration()\n * - finishOncePreservingAttempt(job, expected) // exact attempt UPDATE; at most called twice total: initial + one retry\n * - readMutationReceipts(jobId, attemptId)\n * - finalizeExpiredMutationFromReceipt(job, expected, receipt)\n * - nowIso()\n *\n * No dispatch/re-dispatch function is accepted by this helper.\n */\nexport async function finalizeExactAttemptV1({\n job,\n expectedAuthorityEpoch,\n expectedAuthorityMode,\n command,\n dispatchOk,\n dispatchValue,\n preDispatchGeneration,\n deps,\n}) {\n const expected = expectedTerminal(dispatchOk, dispatchValue);\n const readOnly = READ_ONLY_COMMANDS_V1.has(command);\n const trace = [];\n let finishCalls = 0;\n\n const a0 = await deps.readAuthority();\n if (!authorityMatches(a0, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_PRE\",trace,finish_calls:finishCalls};\n }\n const fresh0 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh0.ok) return {...fresh0,trace,finish_calls:finishCalls};\n\n // Normal path. Candidate production finishOnce must preserve lease_instance_id and\n // lease_attempt_id on terminal rows so a client-unknown finish can be read back\n // as the exact attempt rather than merely the same job id.\n try {\n finishCalls++;\n const f = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_initial\",returned:f});\n if (f?.ok === true) {\n const rb = await deps.readJob(job.id);\n if (!exactTerminal(rb,job,expected)) return {ok:false,reason:\"FINISH_SUCCESS_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n return {ok:true,reconciled:false,path:\"INITIAL_FINISH\",trace,finish_calls:finishCalls};\n }\n trace.push({phase:\"finish_initial_nonok\",value:f});\n } catch (e) {\n trace.push({phase:\"finish_initial_throw\",error:errText(e)});\n }\n\n // Outcome-aware reconciliation begins. Re-read authority after the uncertain client outcome.\n const a1 = await deps.readAuthority();\n if (!authorityMatches(a1, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_RECONCILE\",trace,finish_calls:finishCalls};\n }\n const fresh1 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh1.ok) return {...fresh1,trace,finish_calls:finishCalls};\n\n let row = await deps.readJob(job.id);\n if (!row || !exactStaticJobBinding(row,job)) {\n return {ok:false,reason:\"QUEUE_JOB_BINDING_MISMATCH\",trace,finish_calls:finishCalls};\n }\n\n // Case A: UPDATE committed but client threw. Terminal readback itself proves completion,\n // but only because candidate finish preserves exact attempt identity.\n if (exactTerminal(row,job,expected)) {\n return {ok:true,reconciled:true,path:\"TERMINAL_EXACT_READBACK\",trace,finish_calls:finishCalls};\n }\n\n // Case B: UPDATE did not commit. Retry the exact finish at most once, only while this\n // exact attempt is still leased and unexpired.\n if (String(row.state) === \"LEASED\" && exactLiveAttempt(row,job) && String(row.lease_owner) === String(job.lease_owner) && leaseUnexpired(row,deps.nowIso())) {\n try {\n finishCalls++;\n const f2 = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_retry_once\",returned:f2});\n } catch (e) {\n trace.push({phase:\"finish_retry_once_throw\",error:errText(e)});\n }\n const fresh2 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh2.ok) return {...fresh2,trace,finish_calls:finishCalls};\n const rb2 = await deps.readJob(job.id);\n if (exactTerminal(rb2,job,expected)) {\n return {ok:true,reconciled:true,path:\"ONE_EXACT_FINISH_RETRY\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"ONE_FINISH_RETRY_EXHAUSTED\",trace,finish_calls:finishCalls};\n }\n\n // Read-only results may never be resurrected after lease expiry/reassignment, and they\n // may never cross canonical generation drift.\n if (readOnly) {\n return {ok:false,reason:\"READ_ONLY_RESULT_NOT_SAFE_TO_RECONCILE\",trace,finish_calls:finishCalls};\n }\n\n // A mutation receipt is not a license to reinterpret a still-LEASED row from another\n // attempt/instance. Receipt-bound recovery below is only for the exact known\n // expiry-terminalization state, never for a live/reassigned lease.\n if (String(row.state) === \"LEASED\") {\n if (!exactLiveAttempt(row,job)) {\n return {ok:false,reason:\"LIVE_ATTEMPT_IDENTITY_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"LEASED_ATTEMPT_EXPIRED_OR_UNSAFE_AFTER_ONE_RETRY\",trace,finish_calls:finishCalls};\n }\n\n // Case C: mutation dispatch is canonically known from the exact bound receipt.\n // This may repair the historical FAILED/OUTCOME_UNKNOWN transport row without\n // re-dispatching the canonical mutation.\n if (dispatchOk !== true) {\n return {ok:false,reason:\"MUTATION_DISPATCH_EXCEPTION_HAS_NO_SAFE_RECEIPT_ASSUMPTION\",trace,finish_calls:finishCalls};\n }\n const receipts = await deps.readMutationReceipts(job.id,job.lease_attempt_id);\n const rr = await exactReceipt(receipts,job,expectedAuthorityEpoch,command,dispatchValue);\n if (!rr.ok) return {...rr,trace,finish_calls:finishCalls};\n\n // Only the exact known expiry terminalization is repairable after expiry. Transport\n // generation equality proves no later lease generation was issued for this job.\n if (!isExpiryUnknown(row) || Number(row.transport_lease_generation) !== Number(job.transport_lease_generation)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_NOT_ELIGIBLE\",trace,finish_calls:finishCalls};\n }\n if (row.lease_owner != null || row.lease_expires_at != null) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_STILL_OWNED\",trace,finish_calls:finishCalls};\n }\n // Historical recovery cleared attempt/instance. If present, they must still match.\n if (row.lease_attempt_id != null && String(row.lease_attempt_id) !== String(job.lease_attempt_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_ATTEMPT_CONFLICT\",trace,finish_calls:finishCalls};\n }\n if (row.lease_instance_id != null && String(row.lease_instance_id) !== String(job.lease_instance_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_INSTANCE_CONFLICT\",trace,finish_calls:finishCalls};\n }\n\n const rec = await deps.finalizeExpiredMutationFromReceipt(job,expected,rr.receipt);\n trace.push({phase:\"receipt_bound_expiry_recovery\",returned:rec});\n const a2 = await deps.readAuthority();\n if (!authorityMatches(a2, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_POST_RECEIPT\",trace,finish_calls:finishCalls};\n }\n const rb3 = await deps.readJob(job.id);\n if (!exactTerminal(rb3,job,expected)) {\n return {ok:false,reason:\"RECEIPT_RECOVERY_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:true,reconciled:true,path:\"EXACT_MUTATION_RECEIPT_EXPIRY_RECOVERY\",trace,finish_calls:finishCalls};\n}\n`;\nlet resultFinalizationHelperV1Promise:Promise|null=null;\nasync function resultFinalizationHelperV1(){\n const h=await sha256Text(RESULT_FINALIZATION_HELPER_V1_SOURCE);\n if(h!==RESULT_FINALIZATION_HELPER_V1_SHA256)throw new Error(\"RESULT_FINALIZATION_HELPER_INTEGRITY_MISMATCH\");\n if(!resultFinalizationHelperV1Promise){\n resultFinalizationHelperV1Promise=import(\"data:text/javascript;charset=utf-8,\"+encodeURIComponent(RESULT_FINALIZATION_HELPER_V1_SOURCE));\n }\n return await resultFinalizationHelperV1Promise;\n}\n\nasync function canonicalAnchor(){\n const r:any=await sqlite.execute(\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const row:any=r.rows?.[0]??null;\n const g=Number(row?.generation),head=String(row?.event_head_hash??\"\");\n if(!Number.isInteger(g)||g<0||!/^[0-9a-f]{64}$/.test(head))throw new Error(\"CANONICAL_ANCHOR_UNAVAILABLE\");\n return {generation:g,event_head_hash:head};\n}\nasync function canonicalGeneration(){return (await canonicalAnchor()).generation;}\nasync function normalizedFinalizationAuthority(){\n const g:any=await admit();\n if(g?.ok===true)return {epoch:Number(g.epoch),writer:\"val_native\",mode:String(g.mode)};\n const a:any=g?.authority??await authority();\n return {epoch:Number(a?.epoch),writer:String(a?.writer??\"\"),mode:String(a?.mode)===\"PREPARED\"?\"PREPARED_READ_ONLY\":String(a?.mode??\"\")};\n}\n\nasync function emitRuntimeTick(){\n const a:any=await authority();\n if(!a||String(a.writer)!==\"val_native\"||![\"ACTIVE\",\"PREPARED\"].includes(String(a.mode))){\n return {ok:false,emitted:false,reason:\"VAL_NATIVE_NOT_SELECTED\",authority:a??null};\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNTIME_TICK_TABLE}(\n id TEXT PRIMARY KEY,\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n state TEXT NOT NULL,\n tick_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n metadata_json TEXT NOT NULL\n )`);\n const metadata=JSON.stringify({\n classification:\"NONAUTHORITY_EXECUTOR_RUNTIME_TICK\",\n grants_brain_authority:false,\n extends_canonical_lease:false,\n source:\"val_native_executor_prod.drain\"\n });\n await sqlite.execute({\n sql:`INSERT INTO ${RUNTIME_TICK_TABLE}(id,worker_id,instance_id,authority_epoch,state,tick_at,expires_at,metadata_json)\n VALUES('val-native-executor',?,?,?,'RUNNING',datetime('now'),datetime('now','+${RUNTIME_TICK_TTL_SECONDS} seconds'),?)\n ON CONFLICT(id) DO UPDATE SET\n worker_id=excluded.worker_id,\n instance_id=excluded.instance_id,\n authority_epoch=excluded.authority_epoch,\n state='RUNNING',\n tick_at=excluded.tick_at,\n expires_at=excluded.expires_at,\n metadata_json=excluded.metadata_json`,\n args:[WORKER,INSTANCE,Number(a.epoch),metadata]\n });\n return {ok:true,emitted:true,authority_epoch:Number(a.epoch),ttl_seconds:RUNTIME_TICK_TTL_SECONDS};\n}\nasync function admit(){\n const a:any=await authority();\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\",authority:null};\n if(String(a.writer)!==\"val_native\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n const mode=String(a.mode);\n if(mode===\"ACTIVE\")return {ok:true,epoch:Number(a.epoch),mode:\"ACTIVE\",authority:a};\n if(mode===\"PREPARED\")return {ok:true,epoch:Number(a.epoch),mode:\"PREPARED_READ_ONLY\",authority:a};\n return {ok:false,reason:\"AUTHORITY_MODE_NOT_ADMITTED\",authority:a};\n}\nconst ACQUIRE_RECONCILE_ATTEMPTS_R2=3;\ntype LeaseReconcileResultR2=\n | {kind:\"leased\";job:any;epoch:number;mode:string;acquisition_reconciled:true;acquisition_error:string}\n | {kind:\"none\";attempt_id:string}\n | {kind:\"outcome_unknown\";attempt_id:string;errors:string[]};\nexport async function reconcileExactLeaseAttemptR2(\n attempt:string,\n expectedEpoch:number,\n expectedMode:string,\n acquisitionError:unknown,\n):Promise{\n const errors:string[]=[];\n for(let i=0;i=1\n AND lease_expires_at>datetime('now')\n ORDER BY id`,args:[WORKER,INSTANCE,attempt]});\n const rows:any[]=r.rows||[];\n if(rows.length===0)return {kind:\"none\",attempt_id:attempt};\n if(rows.length!==1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,`ATTEMPT_CARDINALITY_CONFLICT_${rows.length}`]};\n }\n const job=rows[0];\n if(String(job.lease_instance_id)!==INSTANCE||String(job.lease_attempt_id)!==attempt||Number(job.transport_lease_generation)<1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,\"ATTEMPT_IDENTITY_POSTCONDITION_FAILED\"]};\n }\n return {\n kind:\"leased\",\n job,\n epoch:expectedEpoch,\n mode:expectedMode,\n acquisition_reconciled:true,\n acquisition_error:acquisitionError instanceof Error?acquisitionError.message:String(acquisitionError),\n };\n }catch(e){\n errors.push(e instanceof Error?e.message:String(e));\n }\n }\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors};\n}\nasync function recoverExpiredTransport(){\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const r:any=await tx.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at<=datetime('now') ORDER BY id`);\n const outcomes:any[]=[];\n for(const j of (r.rows||[])){\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION',\n 'receipt_policy','SIDE_RECEIPTS_DIAGNOSTIC_ONLY_NOT_COMPLETION_AUTHORITY',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner IS ? AND lease_instance_id IS ? AND lease_attempt_id IS ? AND transport_lease_generation=? AND lease_expires_at<=datetime('now')\n RETURNING id`,\n args:[j.id,j.lease_owner,j.lease_instance_id,j.lease_attempt_id,j.transport_lease_generation]});\n if((u.rows||[]).length)outcomes.push({id:j.id,state:\"FAILED\",reconciled_from_receipt:false,outcome_unknown:true});\n }\n await tx.commit();done=true;return{ok:true,outcomes};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function activeLeases(){\n const r:any=await sqlite.execute(`SELECT id,lease_owner,lease_instance_id,lease_attempt_id,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id`);\n return r.rows||[];\n}\nfunction atomicizeLeaseSql(sql:string){\n const setNeedle=`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')`;\n const retNeedle=\"RETURNING id,op,payload_json,priority,lease_expires_at\";\n if(sql.split(setNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_SET_SHAPE_DRIFT\");\n if(sql.split(retNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_RETURNING_SHAPE_DRIFT\");\n return sql.replace(setNeedle,`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')`)\n .replace(retNeedle,\"RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\");\n}\nasync function leaseOne(){\n const gate=await admit();if(!gate.ok)return {kind:\"fenced\",gate} as const;\n await recoverExpiredTransport();\n const active=await activeLeases();\n if(active.length>1)return {kind:\"conflict\",active} as const;\n if(active.length===1)return {kind:\"busy\",active:active[0]} as const;\n const preparedReadOnly=gate.mode===\"PREPARED_READ_ONLY\";\n const attempt=crypto.randomUUID();\n const expectedMode=String(gate.mode);\n let core:any;\n try{\n if(!preparedReadOnly&&!EMERGENCY_MUTATIONS_FROZEN&&PRELEASE_READ_COALESCE_V1_ENABLED){\n const acq:any=await acquireWithPreleaseRankReceiptV1(sqlite,{worker:WORKER,instance:INSTANCE,attempt});\n if(acq.kind===\"leased\"){\n const j:any=acq.job;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode,prelease_receipt:{rank0:acq.rank0,rank1:acq.rank1,rank_snapshot_sha256:acq.rank_snapshot_sha256}} as const;\n }\n return acq;\n }\n core=preparedReadOnly\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${JOB_TABLE} j\n WHERE j.state='READY' AND j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND 120\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE} x\n WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now')\n )\n ORDER BY\n CASE json_extract(j.payload_json,'$.args[0]')\n WHEN 'status' THEN 0\n WHEN 'verify-chain' THEN 1\n WHEN 'verify-claim-graph' THEN 2\n ELSE 3\n END,\n CASE WHEN j.priority>1000000000 THEN 1000000000 ELSE j.priority END DESC,\n j.created_at,j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt]})\n : EMERGENCY_MUTATIONS_FROZEN\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at>datetime('now')\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt,EMERGENCY_MUTATION_CANARY_JOB_ID,WORKER]})\n : await sqlite.execute({sql:atomicizeLeaseSql(leaseOneSql(JOB_TABLE)),args:[WORKER,INSTANCE,attempt,WORKER]});\n }catch(e){\n const rr=await reconcileExactLeaseAttemptR2(attempt,gate.epoch,expectedMode,e);\n if(rr.kind===\"leased\")return rr;\n if(rr.kind===\"none\")return {\n kind:\"acquisition_failed_no_bound_lease\",\n attempt_id:attempt,\n reason:e instanceof Error?e.message:String(e),\n } as const;\n return {kind:\"acquisition_outcome_unknown\",attempt_id:attempt,errors:rr.errors} as const;\n }\n const j:any=core.rows?.[0]??null;if(!j)return {kind:\"empty\"} as const;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode} as const;\n}\nasync function readQueueJob(id:string){\n const r:any=await sqlite.execute({sql:`SELECT * FROM ${JOB_TABLE} WHERE id=?`,args:[id]});\n return r.rows?.[0]??null;\n}\nasync function finishOncePreservingAttempt(job:any,expected:any){\n if(PRELEASE_READ_COALESCE_V1_ENABLED&&expected?.state===\"COMPLETE\"&&expected?.error_json==null&&typeof expected?.result_json===\"string\"&&classifyValNativeCoalesceResultV1(expected.result_json)){\n return await finalizeLeaderOptionalPreleaseFollowerV1(sqlite,{job:{...job,lease_owner:String(job.lease_owner||WORKER)},expected});\n }\n const r:any=await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,job.id,String(job.lease_owner||WORKER),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(r.rows||[]).length)return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"};\n return {ok:true,id:job.id,state:String(expected.state)};\n}\nasync function readMutationReceiptsExact(jobId:string,attemptId:string){\n await ensureMutationReceiptTable();\n const r:any=await sqlite.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE}\n WHERE job_id=? AND lease_attempt_id=?\n ORDER BY committed_at,job_id,lease_attempt_id`,args:[jobId,attemptId]});\n return r.rows||[];\n}\nfunction sameReceiptRow(a:any,b:any){\n const keys=[\"job_id\",\"lease_attempt_id\",\"lease_instance_id\",\"lease_owner\",\"transport_lease_generation\",\"authority_epoch\",\"command\",\"payload_sha256\",\"committed_generation\",\"event_head_hash\",\"result_json\",\"committed_at\"];\n return keys.every(k=>String(a?.[k]??\"\")===String(b?.[k]??\"\"));\n}\nasync function finalizeExpiredMutationFromReceiptExact(job:any,expected:any,receipt:any){\n await ensureMutationReceiptTable();\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const rr:any=await tx.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const rows:any[]=rr.rows||[];\n if(rows.length!==1||!sameReceiptRow(rows[0],receipt)){\n await tx.rollback();done=true;\n return {ok:false,reason:rows.length>1?\"AMBIGUOUS_MUTATION_RECEIPTS\":\"MUTATION_RECEIPT_CHANGED_OR_MISSING\"};\n }\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,\n lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='FAILED' AND op=? AND payload_json=? AND transport_lease_generation=?\n AND result_json IS NULL AND lease_owner IS NULL AND lease_expires_at IS NULL\n AND (lease_instance_id IS NULL OR lease_instance_id=?)\n AND (lease_attempt_id IS NULL OR lease_attempt_id=?)\n AND json_valid(error_json)=1\n AND json_extract(error_json,'$.classification')='TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION'\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,String(job.lease_instance_id),String(job.lease_attempt_id),\n String(job.id),String(job.op),String(job.payload_json),Number(job.transport_lease_generation),String(job.lease_instance_id),String(job.lease_attempt_id)]});\n if((u.rows||[]).length!==1){\n await tx.rollback();done=true;\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_UPDATE_REJECTED\"};\n }\n await tx.commit();done=true;\n return {ok:true,receipt_job_id:String(receipt.job_id)};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function finalizeJobExactAttempt(job:any,epoch:number,mode:string,command:string,dispatchOk:boolean,dispatchValue:any,preDispatchGeneration:number|undefined){\n const helper:any=await resultFinalizationHelperV1();\n const boundJob={...job,lease_owner:WORKER,lease_instance_id:String(job.lease_instance_id),lease_attempt_id:String(job.lease_attempt_id)};\n return await helper.finalizeExactAttemptV1({\n job:boundJob,\n expectedAuthorityEpoch:Number(epoch),\n expectedAuthorityMode:String(mode),\n command:String(command),\n dispatchOk:dispatchOk===true,\n dispatchValue,\n preDispatchGeneration,\n deps:{\n readAuthority:normalizedFinalizationAuthority,\n readJob:readQueueJob,\n readCanonicalGeneration:canonicalGeneration,\n finishOncePreservingAttempt,\n readMutationReceipts:readMutationReceiptsExact,\n finalizeExpiredMutationFromReceipt:finalizeExpiredMutationFromReceiptExact,\n nowIso:()=>new Date().toISOString().replace(\"Z\",\"+00:00\")\n }\n });\n}\nconst CHAIN_FAILURE_READ_ONLY=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; kernel allowlist still fences every unqualified mutator.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nfunction brainCommand(raw:string){\n try{const p=JSON.parse(raw);return Array.isArray(p?.args)?String(p.args[0]||\"\"):\"\"}catch{return \"\"}\n}\nasync function chainCircuitBreaker(raw:string,jobId:string){\n const command=brainCommand(raw);\n if(CHAIN_FAILURE_READ_ONLY.has(command))return {allow:true,command,integrity:null};\n const emergencyCanary=EMERGENCY_MUTATIONS_FROZEN&&jobId===EMERGENCY_MUTATION_CANARY_JOB_ID&&command===\"register-agent\";\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary)return {allow:false,command,integrity:{ok:false,reason:\"EPOCH2_MUTATIONS_EMERGENCY_FROZEN_PENDING_ATOMICITY_REPAIR\"}};\n let chain:any,graph:any;\n try{chain=await verifyBrainChain()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CHAIN_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n if(chain?.ok!==true)return {allow:false,command,integrity:{chain,graph:null}};\n try{graph=await verifyBrainClaimGraph()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CLAIM_GRAPH_EXCEPTION\",detail:e instanceof Error?e.message:String(e),chain}}}\n if(graph?.ok!==true)return {allow:false,command,integrity:{chain,graph}};\n return {allow:true,command,integrity:{chain,graph}};\n}\nfunction parseArr(v:any){try{const x=JSON.parse(String(v??\"[]\"));return Array.isArray(x)?x:[]}catch{return []}}\nasync function localCommitSnapshot(taskId:string,agent:string){\n const t:any=(await sqlite.execute({sql:`SELECT id,workstream,state,lease_owner,lease_generation,lease_expires_at,context_manifest,success_condition,decision_value,depends_json,requires_json,writes_json,guards_json\n FROM brainvn_tasks WHERE id=?`,args:[taskId]})).rows?.[0]??null;\n if(!t)return{ok:false,reason:\"TASK_MISSING\"};\n if(String(t.state)!==\"LEASED\"||String(t.lease_owner)!==agent)return{ok:false,reason:\"LEASE_CHANGED\",task:t};\n if(t.lease_expires_at&&String(t.lease_expires_at)<=new Date().toISOString().replace(\"Z\",\"+00:00\"))return{ok:false,reason:\"LEASE_EXPIRED\",task:t};\n const deps=parseArr(t.depends_json),guards=parseArr(t.guards_json);\n const depRows:any[]=[];\n for(const id of deps){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(id)]})).rows?.[0]??null;\n depRows.push(r??{id:String(id),state:\"MISSING\"});\n }\n const guardRows:any[]=[];\n let retryGuardSnapshotComplete=true;\n for(const g of guards){\n if(g?.type===\"task_complete\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),state:\"MISSING\"}});\n }else if(g?.type===\"claim_verified\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,status,updated_at FROM brainvn_claims WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),status:\"MISSING\"}});\n }else{\n retryGuardSnapshotComplete=false;\n guardRows.push({guard:g,resolved:null});\n }\n }\n const ws:any=(await sqlite.execute({sql:\"SELECT id,mission,verified_state FROM brainvn_workstreams WHERE id=?\",args:[String(t.workstream)]})).rows?.[0]??null;\n const stable={\n task:{id:t.id,workstream:t.workstream,state:t.state,lease_owner:t.lease_owner,lease_generation:t.lease_generation,\n context_manifest:t.context_manifest,success_condition:t.success_condition,decision_value:t.decision_value,\n depends_json:t.depends_json,requires_json:t.requires_json,writes_json:t.writes_json,guards_json:t.guards_json},\n dependencies:depRows,guards:guardRows,workstream_semantics:ws\n };\n return{ok:true,stable,lease_expires_at:t.lease_expires_at,workstream:String(t.workstream),retry_guard_snapshot_complete:retryGuardSnapshotComplete};\n}\nfunction sameSnapshot(a:any,b:any){return JSON.stringify(a?.stable)===JSON.stringify(b?.stable)}\nfunction mutationFields(args:any[]){\n let agent=\"\",task=\"\";\n for(let i=1;i{\n let found:number|null=null;\n for(let i=1;iJSON.stringify(k)+\":\"+cohortCanon(x[k])).join(\",\")+\"}\";\n}\nfunction cohortStrictJson(s:any,kind:string){\n try{return JSON.parse(String(s))}\n catch{throw new Error(\"COHORT_BAD_JSON_\"+kind)}\n}\nfunction cohortStrictObjectJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!v||typeof v!==\"object\"||Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_OBJECT\");\n return v;\n}\nfunction cohortStrictListJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_LIST\");\n return v;\n}\nfunction cohortStrictStringListJson(s:any,kind:string){\n const v=cohortStrictListJson(s,kind);\n if(v.some((x:any)=>typeof x!==\"string\"||!x))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_STRING_LIST\");\n return v;\n}\nfunction cohortCleanCaps(x:any){\n if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v))throw new Error(\"COHORT_BAD_CAPS\");\n return [...new Set(x)].sort();\n}\nfunction cohortFlagMap(args:any[],start:number,allowed:Set){\n if(!Array.isArray(args)||args.some(x=>typeof x!==\"string\"))return null;\n if((args.length-start)%2!==0)return null;\n const out:any={};\n for(let i=start;i=args.length)return null;\n const name=k.slice(2);\n if(!allowed.has(name)||Object.prototype.hasOwnProperty.call(out,name))return null;\n out[name]=String(args[i+1]);\n }\n return out;\n}\nfunction cohortExactEnvelope(row:any){\n if(String(row?.op)!==\"brain\")return null;\n let q:any;\n try{q=JSON.parse(String(row.payload_json))}\n catch{return null}\n if(!q||typeof q!==\"object\"||Array.isArray(q))return null;\n const keys=Object.keys(q).sort();\n if(keys.length!==2||keys[0]!==\"args\"||keys[1]!==\"timeout\")return null;\n if(!Array.isArray(q.args)||!Number.isInteger(q.timeout)||q.timeout<1||q.timeout>120)return null;\n return q;\n}\nfunction cohortParseRegister(row:any){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"register-agent\"||typeof q.args[1]!==\"string\"||!q.args[1])return null;\n const f=cohortFlagMap(q.args,2,new Set([\"workstream\",\"role\",\"type\",\"capabilities\"]));if(!f)return null;\n if(f.workstream!==\"global\"||!f.role||f.type!==\"CHAT_UNPROVEN\"||typeof f.capabilities!==\"string\")return null;\n let caps:any;try{caps=cohortCleanCaps(JSON.parse(f.capabilities))}catch{return null}\n return {row,q,member:{id:String(q.args[1]),workstream:\"global\",role:String(f.role),type:\"CHAT_UNPROVEN\",parent:null,capabilities:caps}};\n}\nfunction cohortParseClaim(row:any,agentId:string){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"claim\")return null;\n const f=cohortFlagMap(q.args,1,new Set([\"agent\",\"mode\",\"lease-seconds\",\"constitution-version\",\"constitution-sha256\",\"registry-version\"]));if(!f)return null;\n if(f.agent!==agentId)return null;\n if(f.mode!==undefined&&f.mode!==\"INTERACTIVE\")return null;\n if(f[\"lease-seconds\"]!==undefined&&f[\"lease-seconds\"]!==\"1800\")return null;\n return {row,q};\n}\nfunction cohortIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\"prevent_self_review\",\"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n return ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\";\n}\nasync function cohortTxRows(tx:any,sql:string,args:any[]=[]){\n const r:any=await tx.execute({sql,args});return r.rows||[];\n}\nasync function cohortTxOne(tx:any,sql:string,args:any[]=[]){\n return (await cohortTxRows(tx,sql,args))[0]??null;\n}\nasync function cohortSnapshot(tx:any){\n return {\n workstreams:await cohortTxRows(tx,\"SELECT * FROM brainvn_workstreams ORDER BY id\"),\n agents:await cohortTxRows(tx,\"SELECT * FROM brainvn_agents ORDER BY id\"),\n tasks:await cohortTxRows(tx,\"SELECT * FROM brainvn_tasks ORDER BY id\"),\n claims:await cohortTxRows(tx,\"SELECT * FROM brainvn_claims ORDER BY id\"),\n deps:await cohortTxRows(tx,\"SELECT * FROM brainvn_claim_deps ORDER BY parent_claim,child_claim\"),\n artifacts:await cohortTxRows(tx,\"SELECT * FROM brainvn_artifacts ORDER BY sha256\")\n };\n}\nfunction cohortParseTask(t:any){\n return {\n row:t,\n ctx:cohortStrictObjectJson(t.context_manifest,\"CTX\"),\n req:cohortStrictStringListJson(t.requires_json,\"REQ\"),\n deps:cohortStrictListJson(t.depends_json,\"DEPS\"),\n guards:cohortStrictListJson(t.guards_json,\"GUARDS\"),\n writes:cohortStrictStringListJson(t.writes_json,\"WRITES\")\n };\n}\nfunction cohortOverlap(a:string[],b:string[]){const B=new Set(b);return a.some(x=>B.has(x))}\nasync function cohortActivationOk(tx:any){\n const meta:any=await cohortTxOne(tx,\"SELECT predecessor_event_count FROM brainvn_epoch_meta WHERE id=1\");\n const t:any=await cohortTxOne(tx,\"SELECT state,result_event_id FROM brainvn_tasks WHERE id=?\",[COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK]);\n if(!meta||!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return false;\n const localSeq=Number(t.result_event_id)-Number(meta.predecessor_event_count);\n if(!Number.isInteger(localSeq)||localSeq<1)return false;\n const ev:any=await cohortTxOne(tx,\"SELECT agent_id,type,task_id FROM brainvn_epoch_events WHERE local_seq=?\",[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK||!ev.agent_id)return false;\n const a:any=await cohortTxOne(tx,\"SELECT type FROM brainvn_agents WHERE id=?\",[String(ev.agent_id)]);\n return !!a&&String(a.type)!==\"CHAT_UNPROVEN\";\n}\nfunction cohortOrderedReadySql(){\n const raw=leaseOneSql(JOB_TABLE);\n const start=raw.indexOf(\"SELECT j.id FROM \");\n const limit=raw.indexOf(\"LIMIT 1\",start);\n if(start<0||limit<0)throw new Error(\"COHORT_LEASE_ORDER_SHAPE_DRIFT\");\n let inner=raw.slice(start,limit)+\"LIMIT \"+COHORT_ADMISSION_FASTPATH_V3R2R1_SCAN_JOBS;\n inner=inner.replace(\"SELECT j.id FROM \",\"SELECT j.rowid AS queue_rowid,j.* FROM \");\n const qCount=(inner.match(/\\?/g)||[]).length;\n if(qCount!==1)throw new Error(\"COHORT_LEASE_ORDER_PLACEHOLDER_DRIFT_\"+qCount);\n return inner;\n}\nasync function cohortBaseReceipt(){\n const chain:any=await verifyBrainChain();\n if(chain?.ok!==true)return {ok:false,reason:\"CHAIN_NOT_VERIFIED\",chain};\n const graph:any=await verifyBrainClaimGraph();\n if(graph?.ok!==true)return {ok:false,reason:\"CLAIM_GRAPH_NOT_VERIFIED\",graph};\n const tx:any=await (sqlite as any).transaction(\"read\");let done=false;\n try{\n const meta:any=await cohortTxOne(tx,\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const authority:any=await cohortTxOne(tx,\"SELECT epoch,writer,mode,source_generation,source_head FROM \"+AUTH_TABLE+\" WHERE id=1\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||Number(meta.generation)!==Number(chain.generation)||String(meta.event_head_hash)!==String(chain.stored_head)){\n await tx.rollback();done=true;return {ok:false,reason:\"CHAIN_RECEIPT_STALE\"};\n }\n if(!authority||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n await tx.rollback();done=true;return {ok:false,reason:\"AUTHORITY_NOT_ACTIVE\"};\n }\n await tx.commit();done=true;\n return {ok:true,generation:Number(meta.generation),head:String(meta.event_head_hash),admission_digest:digest,\n authority:{epoch:Number(authority.epoch),writer:String(authority.writer),mode:String(authority.mode),\n source_generation:Number(authority.source_generation),source_head:String(authority.source_head)}};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}return {ok:false,reason:e instanceof Error?e.message:String(e)}}\n}\nfunction cohortEventBody(e:any){\n return cohortCanon({event_uuid:e.event_uuid,ts:e.ts,workstream:e.workstream,agent_id:e.agent_id,task_id:e.task_id,type:e.type,payload:e.payload,prev_hash:e.prev_hash});\n}\nasync function cohortEventHash(e:any){return await sha256Text(cohortEventBody(e))}\nfunction cohortNow(ms=Date.now()){return new Date(ms).toISOString().replace(\"Z\",\"+00:00\")}\nasync function tryCohortAdmissionFastpathV3R2R1(maxPairs:number){\n if(!COHORT_ADMISSION_FASTPATH_V3R2R1_ENABLED||maxPairsdatetime('now') ORDER BY id LIMIT 2\");\n if(activeInside.length){await tx.rollback();done=true;return {kind:\"not_applicable\"} as const}\n const meta:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_epoch_meta WHERE id=1\");\n const ws:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_workstreams WHERE id='global'\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||!ws||Number(meta.generation)!==Number(base.generation)||String(meta.event_head_hash)!==String(base.head)||digest!==String(base.admission_digest)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_BASE_DRIFT\"} as const;\n }\n if(!(await cohortActivationOk(tx))){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_ACTIVATION_NOT_VERIFIED\"} as const;\n }\n const ordered:any[]=await cohortTxRows(tx,cohortOrderedReadySql(),[WORKER]);\n const pairs:any[]=[];const seen=new Set();\n const pairCap=Math.min(COHORT_ADMISSION_FASTPATH_V3R2R1_MAX_PAIRS,maxPairs);\n for(let i=0;i+1[String(a.id),a]));\n for(const p of pairs)if(existing.has(p.reg.member.id)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_EXISTING_AGENT\"} as const;\n }\n let ready:any[],leased:any[];\n try{\n ready=state.tasks.filter((t:any)=>String(t.workstream)===\"global\"&&String(t.state)===\"READY\")\n .sort((a:any,b:any)=>Number(b.priority)-Number(a.priority)||String(a.id).localeCompare(String(b.id)))\n .map((t:any)=>cohortParseTask(t));\n leased=state.tasks.filter((t:any)=>String(t.state)===\"LEASED\").map((t:any)=>cohortParseTask(t));\n }catch{\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_SCHEDULER_SHAPE_FALLBACK\"} as const;\n }\n const used=new Set(),activeWrites:string[][]=leased.map((p:any)=>p.writes),assignments:any[]=[];\n for(const p of pairs){\n const m=p.reg.member,C=new Set(m.capabilities);let chosen:any=null;\n for(const t0 of ready){\n const t=t0.row;\n if(used.has(String(t.id)))continue;\n if(!t.dedupe_key)continue;\n if(t.assigned_agent!==null&&String(t.assigned_agent)!==m.id)continue;\n if(t0.ctx.execution_allowed===false)continue;\n const sensitive=cohortIndependenceSensitive(new Set(t0.req),t0.ctx);\n if(sensitive&&(m.type===\"CHAT_UNPROVEN\"||COHORT_EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true))continue;\n if(t0.req.some((x:string)=>COHORT_NON_AGENT_CAPS.has(x)))continue;\n if(t0.req.some((x:string)=>!C.has(x)))continue;\n if(t0.deps.length||t0.guards.length){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_DYNAMIC_CAUSAL_FALLBACK\"} as const;\n }\n if(activeWrites.some((x:string[])=>cohortOverlap(t0.writes,x)))continue;\n chosen=t0;used.add(String(t.id));activeWrites.push(t0.writes);break;\n }\n if(!chosen){await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_NO_READY_FALLBACK\"} as const}\n assignments.push({pair:p,member:m,task:chosen});\n }\n\n const queueAttempts:any[]=[];\n for(const a of assignments){\n for(const kind of [\"reg\",\"claim\"]){\n const qr=a.pair[kind].row,attempt=crypto.randomUUID();\n const u:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+\"+LEASE_SECONDS+\" seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now') WHERE rowid=? AND id=? AND state='READY' AND op=? AND payload_json=? RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\",\n args:[WORKER,INSTANCE,attempt,Number(qr.queue_rowid),String(qr.id),String(qr.op),String(qr.payload_json)]});\n const row:any=u.rows?.[0]??null;if(!row)throw new Error(\"COHORT_QUEUE_CAS_FAILED_\"+String(qr.id));\n queueAttempts.push({...row,kind,agent_id:a.member.id});\n }\n }\n\n const startGen=Number(meta.generation),startHead=String(meta.event_head_hash);\n let g=startGen,head=startHead;\n const maxSeq:any=await cohortTxOne(tx,\"SELECT COALESCE(MAX(local_seq),0) n FROM brainvn_epoch_events\");\n let seq=Number(maxSeq?.n??0);\n const events:any[]=[],agents:any[]=[],taskUpdates:any[]=[],results:any[]=[];\n const baseMs=Date.now();\n for(let i=0;iArray.from({length:count},()=>(\"(\" + Array.from({length:n},()=>\"?\").join(\",\") + \")\")).join(\",\");\n const aArgs:any[]=[];for(const a of agents)aArgs.push(a.id,a.parent_id,a.type,a.workstream,a.role,a.status,a.boot_generation,a.last_generation,a.last_seen,a.capabilities_json);\n await tx.execute({sql:\"INSERT INTO brainvn_agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES \"+valueRows(10,agents.length),args:aArgs});\n const taskIds=taskUpdates.map(x=>x.id);\n const ownerCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),genCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),expCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),updCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \");\n const tArgs:any[]=[];for(const t of taskUpdates)tArgs.push(t.id,t.owner);for(const t of taskUpdates)tArgs.push(t.id,t.lease_generation);for(const t of taskUpdates)tArgs.push(t.id,t.lease_expires_at);for(const t of taskUpdates)tArgs.push(t.id,t.updated_at);tArgs.push(...taskIds);\n const tu:any=await tx.execute({sql:\"UPDATE brainvn_tasks SET state='LEASED',lease_owner=CASE id \"+ownerCase+\" END,lease_mode='INTERACTIVE',lease_generation=CASE id \"+genCase+\" END,lease_expires_at=CASE id \"+expCase+\" END,updated_at=CASE id \"+updCase+\" END WHERE id IN (\"+taskIds.map(()=>\"?\").join(\",\")+\") AND state='READY' RETURNING id\",args:tArgs});\n if((tu.rows||[]).length!==taskUpdates.length)throw new Error(\"COHORT_TASK_BULK_CAS_MISMATCH\");\n const eArgs:any[]=[];for(const e of events)eArgs.push(e.local_seq,e.event_uuid,e.ts,e.workstream,e.agent_id,e.task_id,e.type,e.payload_json,e.prev_hash,e.event_hash,e.transaction_generation);\n await tx.execute({sql:\"INSERT INTO brainvn_epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation) VALUES \"+valueRows(11,events.length),args:eArgs});\n const mu:any=await tx.execute({sql:\"UPDATE brainvn_epoch_meta SET generation=?,event_head_hash=?,new_event_count=new_event_count+? WHERE id=1 AND generation=? AND event_head_hash=? RETURNING generation\",args:[g,head,events.length,startGen,startHead]});\n if(!(mu.rows||[]).length)throw new Error(\"COHORT_META_CAS_MISMATCH\");\n await tx.execute({sql:\"UPDATE brainvn_workstreams SET head_generation=?,updated_at=? WHERE id='global'\",args:[g,cohortNow()]});\n\n const byAgent=new Map(results.map(x=>[x.agent_id,x]));\n const outputItems:any[]=[];\n for(const q of queueAttempts){\n const rr:any=byAgent.get(q.agent_id),result=q.kind===\"reg\"?rr.regResult:rr.claimResult;\n const committedGeneration=q.kind===\"reg\"?rr.regGeneration:rr.claimGeneration;\n const committedHead=q.kind===\"reg\"?rr.regHead:rr.claimHead;\n const committedAt=q.kind===\"reg\"?rr.regTs:rr.claimTs;\n const payloadSha=await sha256Text(String(q.payload_json));\n await tx.execute({sql:\"INSERT INTO \"+MUTATION_RECEIPT_TABLE+\"(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\",\n args:[String(q.id),String(q.lease_attempt_id),String(q.lease_instance_id),WORKER,Number(q.transport_lease_generation),Number(authority.epoch),\n q.kind===\"reg\"?\"register-agent\":\"claim\",payloadSha,committedGeneration,committedHead,cohortCanon(result),committedAt]});\n const fq:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? RETURNING id,state\",\n args:[legacyEnvelope(result),String(q.id),WORKER,String(q.lease_instance_id),String(q.lease_attempt_id),Number(q.transport_lease_generation),String(q.op),String(q.payload_json)]});\n if((fq.rows||[]).length!==1)throw new Error(\"COHORT_QUEUE_FINALIZE_CAS_FAILED_\"+String(q.id));\n outputItems.push({id:String(q.id),transport_lease_generation:Number(q.transport_lease_generation),attempt_id:String(q.lease_attempt_id),\n dispatch_ok:true,result,finish:{ok:true,id:String(q.id),state:\"COMPLETE\",path:\"COHORT_ATOMIC_SAME_DB\"},\n cohort_fastpath:{schema:\"COHORT_ADMISSION_FASTPATH_V3R2R1_PRODUCTION_V1\",candidate_sha256:COHORT_ADMISSION_FASTPATH_V3R2R1_CANDIDATE_SHA256,\n pair_count:assignments.length,atomic_same_db:true,serial_pairwise_prefix:true}});\n }\n\n await tx.commit();done=true;\n const postChain:any=await verifyBrainChain(),postGraph:any=await verifyBrainClaimGraph();\n return {kind:\"completed\",items:outputItems,pairs:assignments.length,post_integrity:{chain_ok:postChain?.ok===true,claim_graph_ok:postGraph?.ok===true,\n generation:postChain?.generation,head:postChain?.stored_head},base_generation:startGen,post_generation:g} as const;\n }catch(e){\n if(!done){try{await tx.rollback()}catch{}}\n return {kind:\"not_applicable\",reason:e instanceof Error?e.message:String(e)} as const;\n }\n}\n\nasync function executeJob(job:any,epoch:number){\n const raw=String(job.payload_json);\n const fallbackCommand=brainCommand(raw);\n let command=fallbackCommand;\n let preDispatchGeneration:number|undefined=undefined;\n if(String(job.op)!==\"brain\")return {ok:false,value:{classification:\"VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP\",op:String(job.op)},command,preDispatchGeneration};\n try{\n const gate=await chainCircuitBreaker(raw,String(job.id));\n command=String(gate.command||fallbackCommand||\"\");\n if(!gate.allow)return {ok:false,value:{\n classification:\"VAL_NATIVE_CHAIN_INTEGRITY_CIRCUIT_BREAKER\",\n command:command||\"UNKNOWN\",\n integrity:gate.integrity,\n retry_policy:\"RESTORE_VERIFIED_CHAIN_THEN_SUBMIT_NEW_JOB_ID\",\n canonical_dispatch_performed:false\n },command,preDispatchGeneration};\n if(CHAIN_FAILURE_READ_ONLY.has(command))preDispatchGeneration=await canonicalGeneration();\n const value=await dispatchWithStableMutationRetry(raw,boundTransportContext(job,epoch));\n return {ok:true,value,command,preDispatchGeneration};\n }catch(e){\n return {ok:false,value:{type:e instanceof Error?e.name:\"Error\",detail:e instanceof Error?e.message:String(e)},command,preDispatchGeneration};\n }\n}\nexport async function drain(maxJobs=32){\n const started=new Date().toISOString(),items:any[]=[];\n let runtime_tick:any=null;\n try{runtime_tick=await emitRuntimeTick();}\n catch(e){runtime_tick={ok:false,emitted:false,reason:\"RUNTIME_TICK_WRITE_FAILED\",detail:e instanceof Error?e.message:String(e)};}\n while(items.length=COHORT_ADMISSION_FASTPATH_V3R2R1_MIN_PAIRS*2){\n const cohort:any=await tryCohortAdmissionFastpathV3R2R1(Math.floor(remaining/2));\n if(cohort.kind===\"completed\"){\n items.push(...cohort.items);\n if(cohort.post_integrity?.chain_ok!==true||cohort.post_integrity?.claim_graph_ok!==true){\n return {ok:false,started,finished:new Date().toISOString(),runtime_tick,\n stop:{kind:\"cohort_post_integrity_failed\",post_integrity:cohort.post_integrity},processed:items.length,items};\n }\n continue;\n }\n }\n const l:any=await leaseOne();\n if(l.kind!==\"leased\"){\n const acquisitionFault=l.kind===\"acquisition_failed_no_bound_lease\"||l.kind===\"acquisition_outcome_unknown\";\n return {ok:!acquisitionFault&&l.kind!==\"conflict\"&&l.kind!==\"fenced\",started,finished:new Date().toISOString(),runtime_tick,stop:l,processed:items.length,items};\n }\n const ex=await executeJob(l.job,l.epoch);\n const fin=await finalizeJobExactAttempt(l.job,l.epoch,String(l.mode),String(ex.command||brainCommand(String(l.job.payload_json))),ex.ok,ex.value,ex.preDispatchGeneration);\n items.push({id:l.job.id,transport_lease_generation:l.job.transport_lease_generation,attempt_id:l.job.lease_attempt_id,dispatch_ok:ex.ok,result:ex.value,finish:fin});\n if(!fin.ok)return {ok:false,started,finished:new Date().toISOString(),runtime_tick,stop:fin,processed:items.length,items};\n }\n return {ok:true,started,finished:new Date().toISOString(),runtime_tick,stop:{kind:\"max_jobs\"},processed:items.length,items};\n}\nexport default drain;\n",[158],"77046080-13aa-4162-b5be-b717a65eb077","restart_verify.ts","1305d562-adfa-11f1-bbd2-1607ee4eb77e",6,["D",1789142499725],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst nf=globalThis.fetch.bind(globalThis);async function f(input:any,init?:any):Promise{let t:any=input,i:any=init;if(typeof input!==\"string\"&&!(input instanceof URL)){const m=String(input?.method||init?.method||\"GET\"),h=new Headers(),s=input?.headers||init?.headers;if(s?.forEach)s.forEach((v:string,k:string)=>h.set(k,v));else if(s)for(const[k,v]of Object.entries(s))h.set(k,String(v));let b:any=undefined;if(m!==\"GET\"&&m!==\"HEAD\")b=typeof input?.arrayBuffer===\"function\"?new Uint8Array(await input.arrayBuffer()):(input?.body??init?.body);t=String(input?.url||\"\");i={method:m,headers:h,body:b,redirect:\"manual\"}}const r:any=await nf(t,i);if(r?.body==null||typeof r.body.cancel===\"function\")return r;const b=new Uint8Array(await r.arrayBuffer());return new Response(b,{status:r.status,statusText:r.statusText,headers:r.headers})}\nconst db:any=createClient({url:`${API_URL}/v3/sqlite/scoped/`,authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),fetch:f});\nconst rr:any=await db.execute(\"SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,rank0_id,rank1_id,rank_snapshot_sha256,created_at FROM r8k2_receipts WHERE job_id='persist0' AND lease_attempt_id='cross-invocation-attempt'\");\nconst lr:any=await db.execute(\"SELECT id,state,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation FROM r8k2_queue WHERE id='persist0'\");\nconst receipt=rr.rows?.[0]??null,leader=lr.rows?.[0]??null;const ok=!!receipt&&!!leader&&receipt.rank0_id==='persist0'&&receipt.rank1_id==='persist1'&&receipt.lease_attempt_id==='cross-invocation-attempt'&&leader.lease_attempt_id==='cross-invocation-attempt'&&Number(receipt.transport_lease_generation)===Number(leader.transport_lease_generation);\nconsole.log(JSON.stringify({ok,runtime:{deno:Deno.version.deno},receipt,leader}));if(!ok)Deno.exit(2);\n",[166],"b6282b8d-a5e5-4c4a-a132-acc66e415b51",["D",1789259018116],[27],"73f4c191-c89a-4e37-a477-023b6c824b30","r3r1_selector_compact_probe.ts","39fb79d4-ae3f-11f1-83db-1607ee4eb77e",23,["D",1789172200398],"import { orderedReadyTop2SqlV1 } from \"https://esm.town/v/mosadek/project-brain-live-v1-durable@3265-main/val_native_executor_prod.ts\";\nimport { orderedReadySql } from \"./candidate.ts\";\nconst clean=(s:string)=>s.split(\" \").join(\"\").split(\"\\n\").join(\"\").split(\"\\t\").join(\"\").split(\"\\r\").join(\"\");\nconst a=clean(orderedReadyTop2SqlV1(\"q\")),b=clean(orderedReadySql(\"q\"));let i=0;while(is.replace(/\\s+/g,\" \").trim();\nconst a=orderedReadyTop2SqlV1(\"q\"),b=orderedReadySql(\"q\");\nout.selector={exact:a===b,normalized:norm(a)===norm(b),current_sha256:await sha256Text(a),prior_sha256:await sha256Text(b),current_bytes:new TextEncoder().encode(a).length,prior_bytes:new TextEncoder().encode(b).length};\nconsole.log(JSON.stringify(out));\nconst na=norm(a),nb=norm(b);let di=0;while(dih.set(k,v));else if(s)for(const[k,v]of Object.entries(s))h.set(k,String(v));let b:any=undefined;if(m!==\"GET\"&&m!==\"HEAD\")b=typeof input?.arrayBuffer===\"function\"?new Uint8Array(await input.arrayBuffer()):(input?.body??init?.body);t=String(input?.url||\"\");o={method:m,headers:h,body:b,redirect:\"manual\"}}const r:any=await nf(t,o);if(r?.body==null||typeof r.body.cancel===\"function\")return r;const b=new Uint8Array(await r.arrayBuffer());return new Response(b,{status:r.status,statusText:r.statusText,headers:r.headers})}\nconst db:any=createClient({url:`${API_URL}/v3/sqlite/scoped/`,authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),fetch:cf});const Q=\"r8k2r_queue\",R=\"r8k2r_receipts\",W=\"worker-r8k2-rebase\";\nconst before:any=await db.execute(`SELECT * FROM ${Q} WHERE id IN ('persist0','persist1') ORDER BY id`);const rr:any=await db.execute(`SELECT * FROM ${R} WHERE job_id='persist0' AND lease_attempt_id='cross-invocation-attempt'`);const rows:any[]=before.rows||[],recs:any[]=rr.rows||[];if(rows.length!==2||recs.length!==1)throw new Error(\"PERSISTED_ROWS_OR_RECEIPT_MISSING\");const leader=rows.find((x:any)=>x.id==='persist0'),follower=rows.find((x:any)=>x.id==='persist1'),receipt=recs[0];if(leader.state!==\"LEASED\"||follower.state!==\"READY\"||leader.lease_attempt_id!==\"cross-invocation-attempt\"||receipt.rank0_id!==\"persist0\"||receipt.rank1_id!==\"persist1\")throw new Error(\"PERSISTED_BINDING_MISMATCH\");\nconst H=\"0\".repeat(64),valid=JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify({computed_head:H,events:7,ok:true,stored_head:H})+\"\\n\"});const fin:any=await finalizeLeaderOptionalPreleaseFollowerV1(db,{qTable:Q,rTable:R,job:{...leader,lease_owner:W},expected:{state:\"COMPLETE\",result_json:valid,error_json:null}});const after:any=await db.execute(`SELECT id,state,result_json FROM ${Q} WHERE id IN ('persist0','persist1') ORDER BY id`);const ar:any[]=after.rows||[];const ok=fin.ok===true&&fin.follower_completed===true&&fin.receipt_reason===\"OK\"&&ar.length===2&&ar.every((x:any)=>x.state===\"COMPLETE\"&&x.result_json===valid);const report={ok,schema:\"R8K2_REBASED_CROSS_INVOCATION_RESTART_V1\",production_version:3056,before:rows,receipt,finish:fin,after:ar};await blob.set(\"evidence/r8k2/rebase3056/CROSS_INVOCATION_V1.json\",JSON.stringify(report));console.log(JSON.stringify(report));if(!ok)Deno.exit(2);\n",[190],"f598ef99-5edd-4810-a267-ac6037fa8f7c","qualification_rebase_3056.ts","c3c5db62-adfb-11f1-bd69-1607ee4eb77e",19,["D",1789143401253],5,"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nimport { acquireWithPreleaseRankReceiptV1,finalizeLeaderOptionalPreleaseFollowerV1,orderedReadyTop2SqlV1,classifyValNativeCoalesceResultV1,preleaseReceiptBindingReasonV1,ensurePreleaseRankReceiptTableV1 } from \"https://esm.town/v/mosadek/project-brain-live-v1-durable@3056-main/val_native_executor_prod.ts\";\nimport { orderedReadySql,pureSelectorOrder } from \"./candidate.ts\";\nconst nativeFetch=globalThis.fetch.bind(globalThis);\nasync function compat(input:any,init?:any):Promise{let target:any=input,reqInit:any=init;if(typeof input!==\"string\"&&!(input instanceof URL)){const method=String(input?.method||init?.method||\"GET\"),headers=new Headers(),src=input?.headers||init?.headers;if(src?.forEach)src.forEach((v:string,k:string)=>headers.set(k,v));else if(src)for(const[k,v]of Object.entries(src))headers.set(k,String(v));let body:any=undefined;if(method!==\"GET\"&&method!==\"HEAD\")body=typeof input?.arrayBuffer===\"function\"?new Uint8Array(await input.arrayBuffer()):(input?.body??init?.body);target=String(input?.url||\"\");if(!target)throw new Error(\"URL_REQUIRED\");reqInit={method,headers,body,redirect:\"manual\"}}const r:any=await nativeFetch(target,reqInit);if(r?.body==null||typeof r.body.cancel===\"function\")return r;const b=new Uint8Array(await r.arrayBuffer());return new Response(b,{status:r.status,statusText:r.statusText,headers:r.headers})}\nconst db:any=createClient({url:`${API_URL}/v3/sqlite/scoped/`,authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),fetch:compat});\nconst Q=\"r8k2r_queue\",R=\"r8k2r_receipts\",W=\"worker-r8k2-rebase\",I=\"instance-r8k2-rebase\";\nawait db.execute(`CREATE TABLE IF NOT EXISTS ${Q}(id TEXT PRIMARY KEY,priority REAL NOT NULL,op TEXT NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL DEFAULT 'READY',lease_owner TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL,transport_lease_generation INTEGER NOT NULL DEFAULT 0,lease_instance_id TEXT,lease_attempt_id TEXT)`);\nawait ensurePreleaseRankReceiptTableV1(db,R);\nconst checks:any[]=[];function ok(name:string,pass:boolean,detail:any=null){checks.push({name,pass,detail});if(!pass)throw new Error(\"CHECK_FAILED:\"+name+\":\"+JSON.stringify(detail))}\nasync function reset(){await db.batch([{sql:`DELETE FROM ${R}`},{sql:`DELETE FROM ${Q}`}],\"write\")}\nfunction p(cmd:string,args:string[]=[cmd],timeout=60){return JSON.stringify({args,timeout})}\nasync function add(id:string,priority:number,payload:string,created:string){await db.execute({sql:`INSERT INTO ${Q}(id,priority,op,payload_json,state,created_at,updated_at) VALUES(?,?,'brain',?,'READY',?,?)`,args:[id,priority,payload,created,created]})}\nconst H=\"0\".repeat(64),t0=\"2026-09-11 15:00:00\";\nconst valChain=JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify({computed_head:H,events:7,ok:true,stored_head:H})+\"\\n\"});\nconst valGraph=JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify({claims:8,ok:true,problems:[]})+\"\\n\"});\nok(\"classifier-chain\",classifyValNativeCoalesceResultV1(valChain)===\"verify-chain\");\nok(\"classifier-graph\",classifyValNativeCoalesceResultV1(valGraph)===\"verify-claim-graph\");\nok(\"classifier-status-rejected\",classifyValNativeCoalesceResultV1(JSON.stringify({returncode:0,stderr:\"\",stdout:'{\"ok\":true}'}))===null);\nconst prodSql=orderedReadyTop2SqlV1(Q),candSql=orderedReadySql(Q),norm=(s:string)=>s.replace(/\\s+/g,\"\");\nok(\"selector-token-equivalence\",norm(prodSql)===norm(candSql),{prod:norm(prodSql),candidate:norm(candSql)});\nok(\"shape-recovery-first\",prodSql.includes(\"recover-stale\")&&prodSql.indexOf(\"recover-stale\")=1&&q.timeout<=120}\nfunction exactRecover(row:any){const q=parsePayload(row);return row.op===\"brain\"&&q&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length===1&&q.args[0]===\"recover-stale\"&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction validMutationCommand(row:any,cmd:string){const q=parsePayload(row);return row.op===\"brain\"&&q&&Array.isArray(q.args)&&q.args[0]===cmd&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120&&Object.keys(q).sort().join(\",\")===\"args,timeout\"}\nfunction mulberry32(a:number){return()=>{a|=0;a=a+0x6D2B79F5|0;let t=Math.imul(a^a>>>15,1|a);t=t+Math.imul(t^t>>>7,61|t)^t;return((t^t>>>14)>>>0)/4294967296}}\nconst rnd=mulberry32(0x9e3779b9),commands=[\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"claim\",\"commit\",\"ensure-task\",\"renew-lease\",\"recover-stale\",\"other\"];\nfunction desc(r:any,rows:any[],idx:number,nowMs:number){let q:any=null;try{q=JSON.parse(r.payload_json)}catch{}const c=q?.args?.[0]||\"\",closed=q&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120,read=closed&&q.args?.length===1&&[\"status\",\"verify-chain\",\"verify-claim-graph\"].includes(c),boot=read||[\"register-agent\",\"claim\"].includes(c),recover=closed&&q.args?.length===1&&c===\"recover-stale\",older=boot&&rows.some((x:any,j:number)=>{let z:any;try{z=JSON.parse(x.payload_json)}catch{return false}return x.state===\"READY\"&&x.op===\"brain\"&&z?.args?.[0]===\"commit\"&&Object.keys(z).sort().join(\",\")===\"args,timeout\"&&Number.isInteger(z.timeout)&&z.timeout>=1&&z.timeout<=120&&(x.created_at=15,pair=c===\"claim\"&&q?.args?.[1]===\"--agent\"&&rows.some((x:any)=>{try{const z=JSON.parse(x.payload_json);return x.state===\"READY\"&&z.args?.[0]===\"register-agent\"&&z.args?.[1]===q.args?.[2]&&x.created_at===r.created_at}catch{return false}}),co=c===\"status\"?0:c===\"verify-chain\"?1:c===\"verify-claim-graph\"?2:c===\"register-agent\"?3:c===\"claim\"?4:5;return [recover?0:1,older?1:0,mission?0:1,boot?0:1,pair?1:0,-Math.min(r.priority,1e9),r.created_at,co,idx+1,r.id]}\nfunction oracle(rows:any[],nowMs:number){const ready=rows.filter((r:any)=>r.state===\"READY\");const indexed=ready.map((r:any)=>({r,idx:rows.indexOf(r),k:desc(r,rows,rows.indexOf(r),nowMs)}));indexed.sort((a:any,b:any)=>{for(let i=0;ib.k[i])return 1}return 0});return indexed.map((x:any)=>x.r.id)}\nlet parity=0;for(let n=0;n<5000;n++){const nowMs=Date.UTC(2026,8,11,16,0,0),count=2+Math.floor(rnd()*7),rows:any[]=[];for(let i=0;ix.state===\"READY\"&&Number(x.transport_lease_generation)===0)&&Number(rbr.rows[0].n)===0,{rows:rbq.rows,receipts:rbr.rows[0]});\nconst acq:any=await acquireWithPreleaseRankReceiptV1(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"attempt-a\"});ok(\"remote-rank0-rank1\",acq.kind===\"leased\"&&acq.rank0===\"rb0\"&&acq.rank1===\"rb1\",acq);const fin:any=await finalizeLeaderOptionalPreleaseFollowerV1(db,{qTable:Q,rTable:R,job:{...acq.job,lease_owner:W},expected:{state:\"COMPLETE\",result_json:valChain,error_json:null}});ok(\"remote-valid-follower\",fin.ok&&fin.follower_completed&&fin.command===\"verify-chain\",fin);\nawait reset();await add(\"m0\",100,p(\"verify-claim-graph\"),t0);await add(\"m1\",100,p(\"verify-claim-graph\"),\"2026-09-11 15:00:01\");const ma:any=await acquireWithPreleaseRankReceiptV1(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"attempt-m\"});await db.execute({sql:`DELETE FROM ${R} WHERE job_id=?`,args:[ma.rank0]});const mf:any=await finalizeLeaderOptionalPreleaseFollowerV1(db,{qTable:Q,rTable:R,job:{...ma.job,lease_owner:W},expected:{state:\"COMPLETE\",result_json:valGraph,error_json:null}});const mstate:any=await db.execute(`SELECT id,state FROM ${Q} ORDER BY id`);ok(\"remote-missing-receipt-leader-only\",mf.ok&&mf.receipt_reason===\"PRELEASE_RECEIPT_MISSING\"&&!mf.follower_completed&&mstate.rows[0].state===\"COMPLETE\"&&mstate.rows[1].state===\"READY\",{mf,rows:mstate.rows});\nawait reset();await add(\"s0\",100,p(\"verify-chain\"),t0);const sa:any=await acquireWithPreleaseRankReceiptV1(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"attempt-old\"});await db.execute({sql:`UPDATE ${Q} SET lease_attempt_id='attempt-new',transport_lease_generation=transport_lease_generation+1 WHERE id=?`,args:[sa.rank0]});const sf:any=await finalizeLeaderOptionalPreleaseFollowerV1(db,{qTable:Q,rTable:R,job:{...sa.job,lease_owner:W},expected:{state:\"COMPLETE\",result_json:valChain,error_json:null}});const sr:any=await db.execute({sql:`SELECT state FROM ${Q} WHERE id=?`,args:[sa.rank0]});ok(\"remote-stale-aba-reject\",sf.ok===false&&sr.rows[0].state===\"LEASED\",sf);\nawait reset();for(let i=0;i<4;i++)await add(\"c\"+i,100-i,p(\"verify-chain\"),`2026-09-11 15:00:0${i}`);const contenders=await Promise.all(Array.from({length:6},async(_,i)=>{try{return await acquireWithPreleaseRankReceiptV1(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"conc-\"+i})}catch(e){return {kind:\"error\",error:String(e)}}}));const cq:any=await db.execute(`SELECT COUNT(*) n FROM ${Q} WHERE state='LEASED'`),cr:any=await db.execute(`SELECT COUNT(*) n FROM ${R}`);ok(\"remote-concurrent-single-flight\",Number(cq.rows[0].n)===1&&Number(cr.rows[0].n)===1&&contenders.filter((x:any)=>x.kind===\"leased\").length===1,{contenders,leased:cq.rows[0].n,receipts:cr.rows[0].n});const second:any=await acquireWithPreleaseRankReceiptV1(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"after-winner\"});ok(\"remote-same-worker-single-flight\",second.kind===\"busy\",second);\nawait reset();await add(\"persist0\",100,p(\"verify-chain\"),t0);await add(\"persist1\",100,p(\"verify-chain\"),\"2026-09-11 15:00:01\");const pa:any=await acquireWithPreleaseRankReceiptV1(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"cross-invocation-attempt\"});ok(\"cross-invocation-seed\",pa.kind===\"leased\"&&!!pa.rank_snapshot_sha256,pa);\nconst summary={ok:checks.every(x=>x.pass),schema:\"R8K2_REBASED_PRODUCTION_EXPORT_QUALIFICATION_V1\",production_version:3056,production_gate_expected_disabled:true,runtime:{deno:Deno.version.deno,v8:Deno.version.v8,typescript:Deno.version.typescript},libsql:\"@libsql/client@0.17.2/web\",checks,semantic:{passed:sem,total:20},scheduler_shape:{passed:3,total:3},scheduler_parity:{passed:parity,total:5000},selector_equivalent_to_prior_qualified_candidate:norm(prodSql)===norm(candSql),cross_invocation_seed:{job_id:pa.rank0,attempt:\"cross-invocation-attempt\",generation:Number(pa.job.transport_lease_generation),rank1:pa.rank1,rank_snapshot_sha256:pa.rank_snapshot_sha256}};\nawait blob.set(\"evidence/r8k2/rebase3056/REPORT_V1.json\",JSON.stringify(summary));\nconsole.log(JSON.stringify(summary));if(!summary.ok)Deno.exit(2);\n",[197],"f01b1196-3171-488f-a875-b2634707f2f9","qualification.ts","025d34ee-adfa-11f1-be58-1607ee4eb77e",["D",1789142481337],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nimport { acquireWithDurableReceipt,ensureShadowSchema,finalizeLeaderOptionalFollower,orderedReadySql,pureSelectorOrder,receiptBindingDecision,classifyValidCoalesceResult,sha256Text,PRIORITY_CAP } from \"./candidate.ts\";\nconst nativeFetch=globalThis.fetch.bind(globalThis);\nasync function compat(input:any,init?:any):Promise{let target:any=input,reqInit:any=init;if(typeof input!==\"string\"&&!(input instanceof URL)){const method=String(input?.method||init?.method||\"GET\"),headers=new Headers(),src=input?.headers||init?.headers;if(src?.forEach)src.forEach((v:string,k:string)=>headers.set(k,v));else if(src)for(const[k,v]of Object.entries(src))headers.set(k,String(v));let body:any=undefined;if(method!==\"GET\"&&method!==\"HEAD\")body=typeof input?.arrayBuffer===\"function\"?new Uint8Array(await input.arrayBuffer()):(input?.body??init?.body);target=String(input?.url||\"\");if(!target)throw new Error(\"URL_REQUIRED\");reqInit={method,headers,body,redirect:\"manual\"}}const r:any=await nativeFetch(target,reqInit);if(r?.body==null||typeof r.body.cancel===\"function\")return r;const b=new Uint8Array(await r.arrayBuffer());return new Response(b,{status:r.status,statusText:r.statusText,headers:r.headers})}\nconst db:any=createClient({url:`${API_URL}/v3/sqlite/scoped/`,authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),fetch:compat});\nconst Q=\"r8k2_queue\",R=\"r8k2_receipts\",W=\"worker-r8k2\",I=\"instance-r8k2\";\nawait ensureShadowSchema(db,Q,R);\nconst checks:any[]=[];function ok(name:string,pass:boolean,detail:any=null){checks.push({name,pass,detail});if(!pass)throw new Error(\"CHECK_FAILED:\"+name+\":\"+JSON.stringify(detail))}\nasync function reset(){await db.batch([{sql:`DELETE FROM ${R}`},{sql:`DELETE FROM ${Q}`}],\"write\")}\nfunction p(cmd:string,args:string[]=[cmd],timeout=60){return JSON.stringify({args,timeout})}\nasync function add(id:string,priority:number,payload:string,created:string){await db.execute({sql:`INSERT INTO ${Q}(id,priority,op,payload_json,state,created_at,updated_at) VALUES(?,?,'brain',?,'READY',?,?)`,args:[id,priority,payload,created,created]})}\nconst H=\"0\".repeat(64);const validChain=JSON.stringify({returncode:0,stdout:JSON.stringify({computed_head:H,events:7,ok:true,stored_head:H})+\"\\n\",stderr:\"\",stdout_truncated:false,stderr_truncated:false});\nconst validGraph=JSON.stringify({returncode:0,stdout:JSON.stringify({claims:8,ok:true,problems:[]})+\"\\n\",stderr:\"\",stdout_truncated:false,stderr_truncated:false});\n\n// Exact current classifier semantics.\nok(\"classifier-chain\",classifyValidCoalesceResult(validChain)===\"verify-chain\");ok(\"classifier-graph\",classifyValidCoalesceResult(validGraph)===\"verify-claim-graph\");ok(\"classifier-reject-status\",classifyValidCoalesceResult(JSON.stringify({returncode:0,stdout:'{\"ok\":true}',stderr:\"\",stdout_truncated:false,stderr_truncated:false}))===null);\n\n// Three load-bearing selector-shape assertions.\nconst sql=orderedReadySql(Q);ok(\"shape-recovery-first\",sql.includes(\"recover-stale\")&&sql.indexOf(\"recover-stale\")x.state===\"READY\"&&Number(x.transport_lease_generation)===0)&&Number(rbr.rows[0].n)===0,{rows:rbq.rows,receipts:rbr.rows[0]});\n\n// Rank0/rank1 capture and valid follower completion.\nconst acq:any=await acquireWithDurableReceipt(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"attempt-a\"});ok(\"remote-rank0-rank1\",acq.kind===\"leased\"&&acq.rank0===\"rb0\"&&acq.rank1===\"rb1\",acq);\nconst fin:any=await finalizeLeaderOptionalFollower(db,{qTable:Q,rTable:R,leaderId:acq.rank0,worker:W,instance:I,attempt:\"attempt-a\",generation:Number(acq.leader.transport_lease_generation),resultJson:validChain});ok(\"remote-valid-follower\",fin.ok&&fin.leader_completed&&fin.follower_completed&&fin.command===\"verify-chain\",fin);\n\n// Missing receipt never authorizes follower, but ordinary valid leader completion survives.\nawait reset();await add(\"m0\",100,p(\"verify-claim-graph\"),t0);await add(\"m1\",100,p(\"verify-claim-graph\"),\"2026-09-11 15:00:01\");const ma:any=await acquireWithDurableReceipt(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"attempt-m\"});await db.execute({sql:`DELETE FROM ${R} WHERE job_id=?`,args:[ma.rank0]});const mf:any=await finalizeLeaderOptionalFollower(db,{qTable:Q,rTable:R,leaderId:ma.rank0,worker:W,instance:I,attempt:\"attempt-m\",generation:Number(ma.leader.transport_lease_generation),resultJson:validGraph});const mstate:any=await db.execute(`SELECT id,state FROM ${Q} ORDER BY id`);ok(\"remote-missing-receipt-leader-only\",mf.ok&&mf.reason===\"PRELEASE_RECEIPT_MISSING\"&&mf.leader_completed&&!mf.follower_completed&&mstate.rows[0].state===\"COMPLETE\"&&mstate.rows[1].state===\"READY\",{mf,rows:mstate.rows});\n\n// Stale/ABA attempt fails before any terminalization.\nawait reset();await add(\"s0\",100,p(\"verify-chain\"),t0);const sa:any=await acquireWithDurableReceipt(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"attempt-old\"});await db.execute({sql:`UPDATE ${Q} SET lease_attempt_id='attempt-new',transport_lease_generation=transport_lease_generation+1 WHERE id=?`,args:[sa.rank0]});const sf:any=await finalizeLeaderOptionalFollower(db,{qTable:Q,rTable:R,leaderId:sa.rank0,worker:W,instance:I,attempt:\"attempt-old\",generation:Number(sa.leader.transport_lease_generation),resultJson:validChain});const sr:any=await db.execute({sql:`SELECT state FROM ${Q} WHERE id=?`,args:[sa.rank0]});ok(\"remote-stale-aba-reject\",sf.ok===false&&sr.rows[0].state===\"LEASED\",sf);\n\n// Concurrent contenders: one durable winner, all others fail closed/busy/error, never >1 lease or receipt.\nawait reset();for(let i=0;i<4;i++)await add(\"c\"+i,100-i,p(\"verify-chain\"),`2026-09-11 15:00:0${i}`);const contenders=await Promise.all(Array.from({length:6},async(_,i)=>{try{return await acquireWithDurableReceipt(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"conc-\"+i})}catch(e){return {kind:\"error\",error:String(e)}}}));const cq:any=await db.execute(`SELECT COUNT(*) n FROM ${Q} WHERE state='LEASED'`),cr:any=await db.execute(`SELECT COUNT(*) n FROM ${R}`);ok(\"remote-concurrent-single-flight\",Number(cq.rows[0].n)===1&&Number(cr.rows[0].n)===1&&contenders.filter((x:any)=>x.kind===\"leased\").length===1,{contenders,leased:cq.rows[0].n,receipts:cr.rows[0].n});\nconst second:any=await acquireWithDurableReceipt(db,{qTable:Q,rTable:R,worker:W,instance:I,attempt:\"after-winner\"});ok(\"remote-same-worker-single-flight\",second.kind===\"busy\",second);\n\n// Twenty semantic binding vectors, inherited contract but independently rerun in Deno.\nconst baseLeader={id:\"L\",state:\"LEASED\",lease_owner:\"w\",lease_instance_id:\"i\",lease_attempt_id:\"a\",transport_lease_generation:3};const baseReceipt={job_id:\"L\",rank0_id:\"L\",rank1_id:\"F\",lease_owner:\"w\",lease_instance_id:\"i\",lease_attempt_id:\"a\",transport_lease_generation:3};const E={worker:\"w\",instance:\"i\",attempt:\"a\",generation:3};\nconst vectors:any[]=[\n [\"baseline\",baseLeader,baseReceipt,E,\"OK\"],[\"missing\",baseLeader,null,E,\"PRELEASE_RECEIPT_MISSING\"],[\"leader-terminal\",{...baseLeader,state:\"COMPLETE\"},baseReceipt,E,\"LEADER_NOT_CURRENTLY_LEASED\"],[\"wrong-owner\",{...baseLeader,lease_owner:\"x\"},baseReceipt,E,\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"wrong-instance\",{...baseLeader,lease_instance_id:\"x\"},baseReceipt,E,\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"wrong-attempt\",{...baseLeader,lease_attempt_id:\"x\"},baseReceipt,E,\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"wrong-generation\",{...baseLeader,transport_lease_generation:4},baseReceipt,E,\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"receipt-job\",baseLeader,{...baseReceipt,job_id:\"X\"},E,\"PRELEASE_RECEIPT_CORRUPT\"],[\"receipt-rank0\",baseLeader,{...baseReceipt,rank0_id:\"X\"},E,\"PRELEASE_RECEIPT_CORRUPT\"],[\"receipt-owner\",baseLeader,{...baseReceipt,lease_owner:\"x\"},E,\"PRELEASE_RECEIPT_STALE_OR_MISBOUND\"],[\"receipt-instance\",baseLeader,{...baseReceipt,lease_instance_id:\"x\"},E,\"PRELEASE_RECEIPT_STALE_OR_MISBOUND\"],[\"receipt-attempt\",baseLeader,{...baseReceipt,lease_attempt_id:\"x\"},E,\"PRELEASE_RECEIPT_STALE_OR_MISBOUND\"],[\"receipt-generation\",baseLeader,{...baseReceipt,transport_lease_generation:4},E,\"PRELEASE_RECEIPT_STALE_OR_MISBOUND\"],[\"expect-owner\",baseLeader,baseReceipt,{...E,worker:\"x\"},\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"expect-instance\",baseLeader,baseReceipt,{...E,instance:\"x\"},\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"expect-attempt\",baseLeader,baseReceipt,{...E,attempt:\"x\"},\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"expect-generation\",baseLeader,baseReceipt,{...E,generation:4},\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\"],[\"rank1-null\",baseLeader,{...baseReceipt,rank1_id:null},E,\"OK\"],[\"extra-receipt-field\",baseLeader,{...baseReceipt,extra:\"ignored\"},E,\"OK\"],[\"extra-leader-field\",{...baseLeader,extra:\"ignored\"},baseReceipt,E,\"OK\"]];\nlet semPass=0;for(const [name,l,r,e,want] of vectors){const got=receiptBindingDecision(l,r,e);if(got===want)semPass++;else checks.push({name:\"semantic-\"+name,pass:false,detail:{got,want}})}ok(\"semantic-20\",semPass===20,{passed:semPass,total:20});\n\n// 5000 deterministic scheduler parity cases: independent comparator oracle vs candidate pure selector.\nfunction mulberry32(a:number){return()=>{a|=0;a=a+0x6D2B79F5|0;let t=Math.imul(a^a>>>15,1|a);t=t+Math.imul(t^t>>>7,61|t)^t;return((t^t>>>14)>>>0)/4294967296}}\nconst rnd=mulberry32(0x9e3779b9),commands=[\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"claim\",\"commit\",\"ensure-task\",\"renew-lease\",\"recover-stale\",\"other\"];\nfunction desc(r:any,rows:any[],idx:number,nowMs:number){let q:any=null;try{q=JSON.parse(r.payload_json)}catch{}const c=q?.args?.[0]||\"\",closed=q&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120,read=closed&&q.args?.length===1&&[\"status\",\"verify-chain\",\"verify-claim-graph\"].includes(c),boot=read||[\"register-agent\",\"claim\"].includes(c),recover=closed&&q.args?.length===1&&c===\"recover-stale\",older=boot&&rows.some((x:any,j:number)=>{let z:any;try{z=JSON.parse(x.payload_json)}catch{return false}return x.state===\"READY\"&&x.op===\"brain\"&&z?.args?.[0]===\"commit\"&&Object.keys(z).sort().join(\",\")===\"args,timeout\"&&Number.isInteger(z.timeout)&&z.timeout>=1&&z.timeout<=120&&(x.created_at=15,pair=c===\"claim\"&&q?.args?.[1]===\"--agent\"&&rows.some((x:any)=>{try{const z=JSON.parse(x.payload_json);return x.state===\"READY\"&&z.args?.[0]===\"register-agent\"&&z.args?.[1]===q.args?.[2]&&x.created_at===r.created_at}catch{return false}}),co=c===\"status\"?0:c===\"verify-chain\"?1:c===\"verify-claim-graph\"?2:c===\"register-agent\"?3:c===\"claim\"?4:5;return [recover?0:1,older?1:0,mission?0:1,boot?0:1,pair?1:0,-Math.min(r.priority,1e9),r.created_at,co,idx+1,r.id]}\nfunction oracle(rows:any[],nowMs:number){const ready=rows.filter((r:any)=>r.state===\"READY\");const indexed=ready.map((r:any)=>({r,idx:rows.indexOf(r),k:desc(r,rows,rows.indexOf(r),nowMs)}));indexed.sort((a:any,b:any)=>{for(let i=0;ib.k[i])return 1}return 0});return indexed.map((x:any)=>x.r.id)}\nlet parity=0;for(let n=0;n<5000;n++){const nowMs=Date.UTC(2026,8,11,16,0,0),count=2+Math.floor(rnd()*7),rows:any[]=[];for(let i=0;ix.pass),schema:\"R8K2_DENO_LIBSQL_TRANSACTIONAL_ADAPTER_QUALIFICATION_V1\",runtime:{deno:Deno.version.deno,v8:Deno.version.v8,typescript:Deno.version.typescript},libsql:\"@libsql/client@0.17.2/web\",scoped_url:\"API_URL/v3/sqlite/scoped/\",checks,semantic:{passed:semPass,total:20},scheduler_parity:{passed:parity,total:5000},cross_invocation_seed:{job_id:pa.rank0,attempt:\"cross-invocation-attempt\",generation:Number(pa.leader.transport_lease_generation),rank1:pa.rank1,rank_snapshot_sha256:pa.rank_snapshot_sha256}};\nconsole.log(JSON.stringify(summary));if(!summary.ok)Deno.exit(2);\n",[205],"27f41628-f6ae-4a35-a4c0-d05927683283","probe.ts","82bc9ffe-adf9-11f1-a14c-1607ee4eb77e",2,["D",1789142257676],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst nativeFetch=globalThis.fetch.bind(globalThis);\nasync function compat(input:any,init?:any):Promise{\n let target:any=input, reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers(); const src=input?.headers||init?.headers;\n if(src?.forEach)src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src)for(const [k,v] of Object.entries(src))headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\"&&method!==\"HEAD\") body=typeof input?.arrayBuffer===\"function\"?new Uint8Array(await input.arrayBuffer()):(input?.body??init?.body);\n target=String(input?.url||\"\"); if(!target)throw new Error(\"URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await nativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\")return r;\n const b=new Uint8Array(await r.arrayBuffer()); return new Response(b,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst db:any=createClient({url:`${API_URL}/v3/sqlite/scoped/`,authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),fetch:compat});\nconst T=\"r8k2_probe\";\nawait db.execute(`CREATE TABLE IF NOT EXISTS ${T}(id TEXT PRIMARY KEY,v TEXT NOT NULL)`);\nawait db.execute(`DELETE FROM ${T}`);\nlet rollbackThrown=false;\ntry{\n const tx:any=await db.transaction(\"write\");\n try{await tx.execute({sql:`INSERT INTO ${T}(id,v) VALUES(?,?)`,args:[\"rollback\",\"x\"]}); throw new Error(\"INJECTED\");}\n catch(e){await tx.rollback(); rollbackThrown=String(e).includes(\"INJECTED\");}\n}catch(e){console.log(JSON.stringify({ok:false,phase:\"rollback\",error:String(e)}));Deno.exit(1)}\nconst rb:any=await db.execute(`SELECT COUNT(*) n FROM ${T} WHERE id='rollback'`);\nconst tx:any=await db.transaction(\"write\");\nawait tx.execute({sql:`INSERT INTO ${T}(id,v) VALUES(?,?)`,args:[\"persist\",\"y\"]});\nawait tx.commit();\nconst persisted:any=await db.execute(`SELECT id,v FROM ${T} WHERE id='persist'`);\nconst out={ok:rollbackThrown&&Number(rb.rows?.[0]?.n||0)===0&&persisted.rows?.length===1,runtime:{deno:Deno.version.deno,v8:Deno.version.v8,typescript:Deno.version.typescript},libsql:\"@libsql/client@0.17.2/web\",rollback_zero:Number(rb.rows?.[0]?.n||0)===0,persisted:persisted.rows?.[0]??null};\nconsole.log(JSON.stringify(out));\nif(!out.ok)Deno.exit(2);\n",[211],"84ae5f32-64d3-4db7-8e1a-92ff0b42aa87","main.ts","76f0f0e4-adf9-11f1-8468-1607ee4eb77e",["D",1789142237871],"console.log(JSON.stringify({ok:true,fixture:\"r8k2\"}));\n",[218],"ba8782ef-2b39-4492-af08-af563cbbf80c","hash_sources.ts","1ad18c6e-adfa-11f1-86c0-1607ee4eb77e",8,["D",1789142529414],"async function sha(s:string){const d=await crypto.subtle.digest('SHA-256',new TextEncoder().encode(s));return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,'0')).join('')}\nconst out:any={import_meta_url:import.meta.url,files:{}};for(const p of ['./candidate.ts','./qualification.ts','./restart_verify.ts']){try{const u=new URL(p,import.meta.url);const r=await fetch(u);const s=await r.text();out.files[p]={url:String(u),status:r.status,bytes:new TextEncoder().encode(s).length,sha256:await sha(s),prefix:s.slice(0,80)}}catch(e){out.files[p]={error:String(e)}}}console.log(JSON.stringify(out));\n",[224],"5660c9ff-09e1-4136-9354-473b9d744638","hash_prod.ts","26bd97d8-adfb-11f1-bfd6-1607ee4eb77e",13,["D",1789143135212],"const enc=new TextEncoder();\nasync function h(path:string){const url=`https://esm.town/v/mosadek/project-brain-live-v1-durable@3054-main/${path}`;const r=await fetch(url);if(!r.ok)throw new Error(`${r.status} ${url}`);const s=await r.text();const b=enc.encode(s);const d=await crypto.subtle.digest('SHA-256',b);return {path,url,bytes:b.length,sha256:[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,'0')).join('')};}\nconst paths=['brain_bridge_worker.ts','brain_bridge_readonly_coalesce_admission_v1.ts','brain_bridge_readonly_coalesce_v4.ts','val_native_executor_prod.ts','val_native_kernel_v1.ts','BRAIN_VAL_BRIDGE_PROTOCOL.md'];\nconsole.log(JSON.stringify({version:3054,files:await Promise.all(paths.map(h))}));\n",[231],"76578ea0-571d-421e-826e-87ab7e545317","canonical_hash.ts","2c486c2e-adfa-11f1-959c-1607ee4eb77e",9,["D",1789142542136],"async function sha(s:string){const d=await crypto.subtle.digest('SHA-256',new TextEncoder().encode(s));return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,'0')).join('')}\nconst base='https://esm.town/v/mosadek/project-brain-live-v1-durable/';const names=['brain_bridge_worker.ts','brain_bridge_readonly_coalesce_admission_v1.ts','brain_bridge_readonly_coalesce_v4.ts','val_native_executor_prod.ts','val_native_kernel_v1.ts','BRAIN_VAL_BRIDGE_PROTOCOL.md'];const out:any={};for(const n of names){const r=await fetch(base+n);const s=await r.text();out[n]={status:r.status,bytes:new TextEncoder().encode(s).length,sha256:await sha(s),prefix:s.slice(0,50)}}console.log(JSON.stringify(out));\n",[238],"5d7b7826-4854-4116-a826-284faab707fc","candidate.ts","dba1e1ce-adf9-11f1-8179-1607ee4eb77e",3,["D",1789142406837],"export const PRIORITY_CAP=1_000_000_000;\nexport const MAX_JOB_TIMEOUT=120;\nexport const LEASE_SECONDS=180;\nexport const MISSION_FAIRNESS_AGE_SECONDS=15;\nexport const COALESCE_COMMANDS=new Set([\"verify-chain\",\"verify-claim-graph\"]);\n\nfunction safeTable(t:string){if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(t))throw new Error(\"BAD_TABLE\");return t}\nfunction canon(x:any):string{if(x===null||typeof x!==\"object\")return JSON.stringify(x);if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\"}\nexport async function sha256Text(s:string){const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\n\nexport function orderedReadySql(table:string){\n table=safeTable(table);\n return `SELECT j.rowid AS queue_rowid,j.* FROM ${table} j\n WHERE j.state='READY'\n AND NOT EXISTS(SELECT 1 FROM ${table} x WHERE x.state='LEASED' AND x.lease_owner=? AND x.lease_expires_at>datetime('now'))\n ORDER BY\n CASE WHEN j.op='brain' AND json_valid(j.payload_json)=1 THEN CASE\n WHEN json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]')='recover-stale'\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2 THEN 0 ELSE 1 END ELSE 1 END ASC,\n CASE WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND ((json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2)\n OR json_extract(j.payload_json,'$.args[0]') IN ('register-agent','claim'))\n AND EXISTS(SELECT 1 FROM ${table} c WHERE c.state='READY' AND c.op='brain' AND json_valid(c.payload_json)=1\n AND json_type(c.payload_json,'$.args')='array' AND json_extract(c.payload_json,'$.args[0]')='commit'\n AND json_type(c.payload_json,'$.timeout')='integer' AND json_extract(c.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(c.payload_json))=2\n AND (c.created_at=${MISSION_FAIRNESS_AGE_SECONDS}\n THEN 0 ELSE 1 END ASC,\n CASE WHEN j.op='brain' AND json_valid(j.payload_json)=1 AND json_type(j.payload_json,'$.args')='array'\n AND ((json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer' AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2)\n OR json_extract(j.payload_json,'$.args[0]') IN ('register-agent','claim'))\n THEN 0 ELSE 1 END ASC,\n CASE WHEN j.op='brain' AND json_valid(j.payload_json)=1 AND json_extract(j.payload_json,'$.args[0]')='claim'\n AND json_extract(j.payload_json,'$.args[1]')='--agent'\n AND EXISTS(SELECT 1 FROM ${table} r WHERE r.state='READY' AND r.op='brain' AND json_valid(r.payload_json)=1\n AND json_extract(r.payload_json,'$.args[0]')='register-agent'\n AND json_extract(r.payload_json,'$.args[1]')=json_extract(j.payload_json,'$.args[2]') AND r.created_at=j.created_at)\n THEN 1 ELSE 0 END ASC,\n CASE WHEN j.priority>${PRIORITY_CAP} THEN ${PRIORITY_CAP} ELSE j.priority END DESC,\n j.created_at,\n CASE WHEN j.op='brain' AND json_valid(j.payload_json)=1 AND json_extract(j.payload_json,'$.args[0]')='status' THEN 0\n WHEN j.op='brain' AND json_valid(j.payload_json)=1 AND json_extract(j.payload_json,'$.args[0]')='verify-chain' THEN 1\n WHEN j.op='brain' AND json_valid(j.payload_json)=1 AND json_extract(j.payload_json,'$.args[0]')='verify-claim-graph' THEN 2\n WHEN j.op='brain' AND json_valid(j.payload_json)=1 AND json_extract(j.payload_json,'$.args[0]')='register-agent' THEN 3\n WHEN j.op='brain' AND json_valid(j.payload_json)=1 AND json_extract(j.payload_json,'$.args[0]')='claim' THEN 4 ELSE 5 END ASC,\n j.rowid,j.id LIMIT 2`;\n}\n\nexport async function ensureShadowSchema(db:any,qTable:string,rTable:string){\n qTable=safeTable(qTable);rTable=safeTable(rTable);\n await db.execute(`CREATE TABLE IF NOT EXISTS ${qTable}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,op TEXT NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL DEFAULT 'READY',\n lease_owner TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL DEFAULT 0,lease_instance_id TEXT,lease_attempt_id TEXT)`);\n await db.execute(`CREATE TABLE IF NOT EXISTS ${rTable}(\n job_id TEXT NOT NULL,lease_attempt_id TEXT NOT NULL,lease_instance_id TEXT NOT NULL,lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,rank0_id TEXT NOT NULL,rank1_id TEXT,rank_snapshot_sha256 TEXT NOT NULL,\n created_at TEXT NOT NULL,injection_guard INTEGER NOT NULL DEFAULT 0 CHECK(injection_guard=0),PRIMARY KEY(job_id,lease_attempt_id))`);\n}\n\nexport async function acquireWithDurableReceipt(db:any,opts:{qTable:string,rTable:string,worker:string,instance:string,attempt:string,injectReceiptFailure?:boolean}){\n const q=safeTable(opts.qTable),r=safeTable(opts.rTable);const tx:any=await db.transaction(\"write\");\n try{\n const active:any=await tx.execute(`SELECT id FROM ${q} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id LIMIT 2`);\n if((active.rows||[]).length){await tx.rollback();return {kind:\"busy\",active_ids:(active.rows||[]).map((x:any)=>String(x.id))}}\n const ranked:any=await tx.execute({sql:orderedReadySql(q),args:[opts.worker]});const rows:any[]=ranked.rows||[];\n if(!rows.length){await tx.rollback();return {kind:\"empty\"}}\n const leader=rows[0],follower=rows[1]??null;\n const u:any=await tx.execute({sql:`UPDATE ${q} SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now') WHERE id=? AND state='READY' RETURNING *`,args:[opts.worker,opts.instance,opts.attempt,String(leader.id)]});\n const leased:any=u.rows?.[0];if(!leased)throw new Error(\"LEASE_CAS_FAILED\");\n const snap={rank0:{id:String(leader.id),op:String(leader.op),payload_json:String(leader.payload_json),priority:Number(leader.priority),created_at:String(leader.created_at)},rank1:follower?{id:String(follower.id),op:String(follower.op),payload_json:String(follower.payload_json),priority:Number(follower.priority),created_at:String(follower.created_at)}:null};\n const h=await sha256Text(canon(snap));\n await tx.execute({sql:`INSERT INTO ${r}(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,rank0_id,rank1_id,rank_snapshot_sha256,created_at,injection_guard) VALUES(?,?,?,?,?,?,?,?,datetime('now'),?)`,args:[String(leased.id),opts.attempt,opts.instance,opts.worker,Number(leased.transport_lease_generation),String(leader.id),follower?String(follower.id):null,h,opts.injectReceiptFailure?1:0]});\n await tx.commit();return {kind:\"leased\",leader:leased,rank0:String(leader.id),rank1:follower?String(follower.id):null,rank_snapshot_sha256:h};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nfunction plainObject(v:any){return !!v&&typeof v===\"object\"&&!Array.isArray(v)}\nfunction exactKeys(v:any,keys:string[]){const a=Object.keys(v).sort(),b=[...keys].sort();return a.length===b.length&&a.every((x,i)=>x===b[i])}\nfunction hex64(v:any){return typeof v===\"string\"&&/^[0-9a-f]{64}$/.test(v)}\nexport function classifyValidCoalesceResult(resultJson:string):\"verify-chain\"|\"verify-claim-graph\"|null{\n let r:any;try{r=JSON.parse(resultJson)}catch{return null}\n if(!plainObject(r)||!exactKeys(r,[\"returncode\",\"stdout\",\"stderr\",\"stdout_truncated\",\"stderr_truncated\"]))return null;\n if(r.returncode!==0||typeof r.stdout!==\"string\"||r.stderr!==\"\"||r.stdout_truncated!==false||r.stderr_truncated!==false)return null;\n let out:any;try{out=JSON.parse(r.stdout.trim())}catch{return null}if(!plainObject(out))return null;\n if(exactKeys(out,[\"computed_head\",\"events\",\"ok\",\"stored_head\"])&&out.ok===true&&Number.isInteger(out.events)&&out.events>=0&&hex64(out.stored_head)&&out.stored_head===out.computed_head)return \"verify-chain\";\n if(exactKeys(out,[\"claims\",\"ok\",\"problems\"])&&out.ok===true&&Number.isInteger(out.claims)&&out.claims>=0&&Array.isArray(out.problems)&&out.problems.length===0)return \"verify-claim-graph\";\n return null;\n}\n\nexport function receiptBindingDecision(leader:any,receipt:any,expected:{worker:string,instance:string,attempt:string,generation:number}){\n if(!leader||String(leader.state)!==\"LEASED\")return \"LEADER_NOT_CURRENTLY_LEASED\";\n if(String(leader.lease_owner)!==expected.worker||String(leader.lease_instance_id)!==expected.instance||String(leader.lease_attempt_id)!==expected.attempt||Number(leader.transport_lease_generation)!==expected.generation)return \"CURRENT_ATTEMPT_IDENTITY_MISMATCH\";\n if(!receipt)return \"PRELEASE_RECEIPT_MISSING\";\n if(String(receipt.job_id)!==String(leader.id)||String(receipt.rank0_id)!==String(leader.id))return \"PRELEASE_RECEIPT_CORRUPT\";\n if(String(receipt.lease_owner)!==expected.worker||String(receipt.lease_instance_id)!==expected.instance||String(receipt.lease_attempt_id)!==expected.attempt||Number(receipt.transport_lease_generation)!==expected.generation)return \"PRELEASE_RECEIPT_STALE_OR_MISBOUND\";\n return \"OK\";\n}\n\nexport async function finalizeLeaderOptionalFollower(db:any,opts:{qTable:string,rTable:string,leaderId:string,worker:string,instance:string,attempt:string,generation:number,resultJson:string}){\n const q=safeTable(opts.qTable),r=safeTable(opts.rTable);const tx:any=await db.transaction(\"write\");\n try{\n const lr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND lease_expires_at>datetime('now')`,args:[opts.leaderId,opts.worker,opts.instance,opts.attempt,opts.generation]});\n const leader:any=lr.rows?.[0]??null;if(!leader){await tx.rollback();return {ok:false,reason:\"CURRENT_ATTEMPT_IDENTITY_MISMATCH\",leader_completed:false,follower_completed:false}}\n const rr:any=await tx.execute({sql:`SELECT * FROM ${r} WHERE job_id=? AND lease_attempt_id=? ORDER BY created_at`,args:[opts.leaderId,opts.attempt]});const recs:any[]=rr.rows||[];const receipt=recs.length===1?recs[0]:null;\n const receiptReason=recs.length>1?\"AMBIGUOUS_PRELEASE_RECEIPTS\":receiptBindingDecision(leader,receipt,{worker:opts.worker,instance:opts.instance,attempt:opts.attempt,generation:opts.generation});\n let followerId:string|null=null;const command=classifyValidCoalesceResult(opts.resultJson);\n if(receiptReason===\"OK\"&&command&&receipt?.rank1_id){\n const fr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=?`,args:[String(receipt.rank1_id)]});const f:any=fr.rows?.[0]??null;\n if(f&&String(f.state)===\"READY\"&&String(f.op)===String(leader.op)&&String(f.payload_json)===String(leader.payload_json)&&Number(f.priority)===Number(leader.priority))followerId=String(f.id);\n }\n const lu:any=await tx.execute({sql:`UPDATE ${q} SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? RETURNING id`,args:[opts.resultJson,opts.leaderId,opts.worker,opts.instance,opts.attempt,opts.generation]});\n if(!(lu.rows||[]).length){await tx.rollback();return {ok:false,reason:\"LEADER_RESULT_FENCE_REJECTED\",leader_completed:false,follower_completed:false}}\n let followerCompleted=false;\n if(followerId){const fu:any=await tx.execute({sql:`UPDATE ${q} SET state='COMPLETE',result_json=?,error_json=NULL,updated_at=datetime('now') WHERE id=? AND state='READY' RETURNING id`,args:[opts.resultJson,followerId]});followerCompleted=(fu.rows||[]).length===1}\n await tx.commit();return {ok:true,reason:receiptReason,command,leader_completed:true,follower_completed:followerCompleted,follower_id:followerCompleted?followerId:null};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nfunction parsePayload(row:any){try{const q=JSON.parse(String(row.payload_json));return q&&typeof q===\"object\"&&!Array.isArray(q)?q:null}catch{return null}}\nfunction closedRead(row:any){const q=parsePayload(row);return row.op===\"brain\"&&q&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length===1&&[\"status\",\"verify-chain\",\"verify-claim-graph\"].includes(q.args[0])&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction exactRecover(row:any){const q=parsePayload(row);return row.op===\"brain\"&&q&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length===1&&q.args[0]===\"recover-stale\"&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction validMutationCommand(row:any,cmd:string){const q=parsePayload(row);return row.op===\"brain\"&&q&&Array.isArray(q.args)&&q.args[0]===cmd&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120&&Object.keys(q).sort().join(\",\")===\"args,timeout\"}\nexport function pureSelectorOrder(rows:any[],worker:string,nowMs:number){\n const ready=rows.filter(r=>r.state===\"READY\");\n const active=rows.some(r=>r.state===\"LEASED\"&&r.lease_owner===worker&&Date.parse(String(r.lease_expires_at).replace(\" \",\"T\")+(/[zZ]|[+-]\\d\\d:\\d\\d$/.test(String(r.lease_expires_at))?\"\":\"Z\"))>nowMs);if(active)return [];\n const rowid=new Map(rows.map((r,i)=>[r.id,i+1]));\n const cmd=(r:any)=>parsePayload(r)?.args?.[0]??\"\";\n const validBoot=(r:any)=>closedRead(r)||[\"register-agent\",\"claim\"].includes(cmd(r));\n const olderCommit=(r:any)=>ready.some(c=>validMutationCommand(c,\"commit\")&&(String(c.created_at)[\"ensure-task\",\"renew-lease\",\"supersede-task-context\",\"migrate-task-invariants\"].includes(cmd(r))&&validMutationCommand(r,cmd(r))&&(nowMs-Date.parse(String(r.created_at).replace(\" \",\"T\")+\"Z\"))/1000>=15;\n const pair=(r:any)=>cmd(r)===\"claim\"&&parsePayload(r)?.args?.[1]===\"--agent\"&&ready.some(x=>cmd(x)===\"register-agent\"&&parsePayload(x)?.args?.[1]===parsePayload(r)?.args?.[2]&&String(x.created_at)===String(r.created_at));\n const corder=(r:any)=>cmd(r)===\"status\"?0:cmd(r)===\"verify-chain\"?1:cmd(r)===\"verify-claim-graph\"?2:cmd(r)===\"register-agent\"?3:cmd(r)===\"claim\"?4:5;\n return [...ready].sort((a,b)=>{\n const ka:any[]=[exactRecover(a)?0:1,(validBoot(a)&&olderCommit(a))?1:0,mission(a)?0:1,validBoot(a)?0:1,pair(a)?1:0,-Math.min(Number(a.priority),PRIORITY_CAP),String(a.created_at),corder(a),Number(rowid.get(a.id)),String(a.id)];\n const kb:any[]=[exactRecover(b)?0:1,(validBoot(b)&&olderCommit(b))?1:0,mission(b)?0:1,validBoot(b)?0:1,pair(b)?1:0,-Math.min(Number(b.priority),PRIORITY_CAP),String(b.created_at),corder(b),Number(rowid.get(b.id)),String(b.id)];\n for(let i=0;ikb[i])return 1}return 0;\n }).map(r=>r.id);\n}\n",[245],"231db6df-6a8f-4faf-9a97-f4e4354e3f22","brain_bridge_worker.ts",["D",1789258967296],"http","import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\n\nconst scopedToken=Deno.env.get(\"VAL_TOWN_API_KEY\")||\"\";\nconst nativeFetch=async(input:any,init?:any):Promise=>{\n if(typeof input===\"string\" || input instanceof URL) return await globalThis.fetch(input,init);\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n return await globalThis.fetch(String(input.url),{method,headers,body,redirect:\"manual\"});\n};\nconst sqlite:any=createClient({url:`${API_URL}/v3/sqlite/scoped/`,authToken:scopedToken,fetch:nativeFetch});\nimport { prepareAdmissionAwareCoalescePlan as prepareAtomicCoalescePlan } from \"./brain_bridge_readonly_coalesce_admission_v1.ts\";\nimport { AUTHORITY_TABLE, ensureAuthorityTable } from \"./brain_bridge_authority_epoch_v1.ts\";\n\nconst WORKER_TOKEN = Deno.env.get(\"BRAIN_BRIDGE_WORKER_TOKEN\") || \"\";\nconst JOB_TABLE = \"brain_bridge_jobs\";\nexport const STALE_SECONDS = 90;\nexport const DEAD_SECONDS = 180;\nexport const PRIORITY_CAP = 1_000_000_000;\nexport const MAX_JOB_TIMEOUT = 120;\nexport const LEASE_SECONDS = 180;\nexport const MISSION_FAIRNESS_AGE_SECONDS = 15;\nexport const MAX_READ_BYTES = 200_000;\n\nexport const SUPPORTED_BRAIN_COMMANDS = [\n \"status\",\n \"verify-chain\",\n \"verify-claim-graph\",\n \"register-agent\",\n \"ensure-task\",\n \"delegate-task\",\n \"claim\",\n \"renew-lease\",\n \"commit\",\n \"checkpoint\",\n \"add-claim\",\n \"invalidate-claim\",\n \"supersede-task-context\",\n \"migrate-task-invariants\",\n \"reconcile-causal-blocks\",\n \"recover-stale\"\n] as const;\nexport const VAL_NATIVE_ATOMICALLY_QUALIFIED_COMMANDS = [\n \"status\",\n \"verify-chain\",\n \"verify-claim-graph\",\n \"register-agent\",\n \"ensure-task\",\n \"claim\",\n \"renew-lease\",\n \"commit\",\n \"recover-stale\",\n \"supersede-task-context\"\n] as const;\nconst SUPPORTED = new Set(SUPPORTED_BRAIN_COMMANDS);\n\nexport function commandSurfaceForAuthority(writer:string|null|undefined){\n const recognized=[...SUPPORTED_BRAIN_COMMANDS];\n if(writer===\"val_native\") return {\n writer,\n recognized,\n currently_executable:[...VAL_NATIVE_ATOMICALLY_QUALIFIED_COMMANDS],\n fence:\"OTHER_RECOGNIZED_MUTATORS_REQUIRE_INDEPENDENT_ATOMIC_REACTIVATION\"\n };\n if(writer===\"host_bridge\") return {\n writer,\n recognized,\n currently_executable:[...SUPPORTED_BRAIN_COMMANDS],\n fence:\"HOST_BRIDGE_COMPATIBILITY_SURFACE_ONLY_WHILE_AUTHORITY_SELECTED\"\n };\n return {writer:writer??null,recognized,currently_executable:[],fence:\"NO_AUTHORITY_SELECTED_EXECUTION_SURFACE\"};\n}\n\nfunction json(v:unknown,status=200){return Response.json(v,{status});}\nfunction tableName(table:string){if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(table))throw new Error(\"BAD_TABLE\");return table;}\n\nexport function classifyWorkerAge(ageSeconds:number|null){\n if(ageSeconds===null || !Number.isFinite(ageSeconds)) return {state:\"UNKNOWN\",reason:\"NO_WORKER_HEARTBEAT\"};\n if(ageSeconds<=STALE_SECONDS) return {state:\"HEALTHY\",reason:\"RECENT_WORKER_POLL\"};\n if(ageSeconds<=DEAD_SECONDS) return {state:\"DEGRADED\",reason:\"WORKER_POLL_STALE\"};\n return {state:\"DOWN\",reason:\"WORKER_POLL_DEAD\"};\n}\nexport function effectivePriority(x:number){if(!Number.isFinite(x))return 0;return Math.min(x,PRIORITY_CAP);}\nexport function healthHttpStatus(workerState:string,duplicateActiveLeases:number,expiredLeases:number){\n return workerState===\"HEALTHY\" && duplicateActiveLeases===0 && expiredLeases===0 ? 200 : 503;\n}\nexport function activeLeaseDecision(rows:any[]){\n if(rows.length>1)return {kind:\"conflict\" as const,count:rows.length};\n if(rows[0])return {kind:\"busy\" as const,active_job_id:String(rows[0].id),lease_expires_at:rows[0].lease_expires_at};\n return {kind:\"free\" as const};\n}\n\nexport function recoverExpiredSql(table=JOB_TABLE){\n table=tableName(table);\n return `UPDATE ${table}\n SET state='FAILED',\n result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,\n lease_expires_at=NULL,\n updated_at=datetime('now')\n WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at <= datetime('now')`;\n}\nexport function activeLeaseSql(table=JOB_TABLE){\n table=tableName(table);\n return `SELECT id,op,payload_json,priority,lease_expires_at\n FROM ${table}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at > datetime('now')\n ORDER BY lease_expires_at,id LIMIT 2`;\n}\nexport function leaseOneSql(table=JOB_TABLE){\n table=tableName(table);\n return `UPDATE ${table}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${table} j\n WHERE j.state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${table} x\n WHERE x.state='LEASED' AND x.lease_owner=? AND x.lease_expires_at > datetime('now')\n )\n ORDER BY\n CASE\n WHEN j.op='brain' AND json_valid(j.payload_json)=1 THEN\n CASE\n WHEN json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]')='recover-stale'\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n THEN 0 ELSE 1\n END\n ELSE 1\n END ASC,\n CASE\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND (\n (\n json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n )\n OR json_extract(j.payload_json,'$.args[0]') IN ('register-agent','claim')\n )\n AND EXISTS(\n SELECT 1 FROM ${table} c\n WHERE c.state='READY'\n AND c.op='brain'\n AND json_valid(c.payload_json)=1\n AND json_type(c.payload_json,'$.args')='array'\n AND json_extract(c.payload_json,'$.args[0]')='commit'\n AND json_type(c.payload_json,'$.timeout')='integer'\n AND json_extract(c.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(c.payload_json))=2\n AND (\n c.created_at < j.created_at\n OR (c.created_at=j.created_at AND c.rowid < j.rowid)\n )\n )\n THEN 1 ELSE 0\n END ASC,\n CASE\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_extract(j.payload_json,'$.args[0]') IN ('ensure-task','renew-lease','supersede-task-context','migrate-task-invariants')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND (julianday('now') - julianday(j.created_at))*86400.0 >= ${MISSION_FAIRNESS_AGE_SECONDS}\n THEN 0 ELSE 1\n END ASC,\n CASE\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND (\n (\n json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n )\n OR json_extract(j.payload_json,'$.args[0]') IN ('register-agent','claim')\n )\n THEN 0 ELSE 1\n END ASC,\n CASE\n WHEN j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_extract(j.payload_json,'$.args[0]')='claim'\n AND json_extract(j.payload_json,'$.args[1]')='--agent'\n AND EXISTS(\n SELECT 1 FROM ${table} r\n WHERE r.state='READY'\n AND r.op='brain'\n AND json_valid(r.payload_json)=1\n AND json_extract(r.payload_json,'$.args[0]')='register-agent'\n AND json_extract(r.payload_json,'$.args[1]')=json_extract(j.payload_json,'$.args[2]')\n AND r.created_at=j.created_at\n )\n THEN 1 ELSE 0\n END ASC,\n CASE WHEN j.priority > ${PRIORITY_CAP} THEN ${PRIORITY_CAP} ELSE j.priority END DESC,\n j.created_at,\n CASE\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_extract(j.payload_json,'$.args[0]')='status' THEN 0\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_extract(j.payload_json,'$.args[0]')='verify-chain' THEN 1\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_extract(j.payload_json,'$.args[0]')='verify-claim-graph' THEN 2\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_extract(j.payload_json,'$.args[0]')='register-agent' THEN 3\n WHEN j.op='brain' AND json_valid(j.payload_json)=1\n AND json_extract(j.payload_json,'$.args[0]')='claim' THEN 4\n ELSE 5\n END ASC,\n j.rowid,\n j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at`;\n}\nexport function resultSql(table=JOB_TABLE){\n table=tableName(table);\n return `UPDATE ${table}\n SET state=?,result_json=?,error_json=?,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_expires_at > datetime('now')\n RETURNING id,state`;\n}\n\nexport type DispatchResult=\n | {ok:true;payload_json:string}\n | {ok:false;error:string};\n\nfunction exactKeys(q:any, expected:string[]){\n const got=Object.keys(q).sort();\n const want=[...expected].sort();\n return got.length===want.length && got.every((k,i)=>k===want[i]);\n}\n\nexport function normalizeDispatch(op:string,payloadJson:string):DispatchResult{\n let q:any;try{q=JSON.parse(payloadJson)}catch{return {ok:false,error:\"PAYLOAD_JSON_INVALID\"}}\n if(!q || typeof q!==\"object\" || Array.isArray(q))return {ok:false,error:\"PAYLOAD_OBJECT_REQUIRED\"};\n\n if(op===\"brain\"){\n if(!exactKeys(q,[\"args\",\"timeout\"]))return {ok:false,error:\"BRAIN_PAYLOAD_SCHEMA_NOT_CLOSED\"};\n if(!Array.isArray(q.args) || q.args.length<1 || q.args.some((x:any)=>typeof x!==\"string\"))return {ok:false,error:\"BRAIN_ARGS_INVALID\"};\n if(!Number.isInteger(q.timeout) || q.timeout<1 || q.timeout>MAX_JOB_TIMEOUT)return {ok:false,error:\"BRAIN_TIMEOUT_INVALID\"};\n const cmd=q.args[0];\n if([\"status\",\"verify-chain\",\"verify-claim-graph\"].includes(cmd) && q.args.length!==1){\n return {ok:false,error:\"READ_ONLY_COMMAND_ARGS_FORBIDDEN\"};\n }\n if(cmd===\"boot\")return {ok:false,error:\"BOOT_NOT_ATOMIC_USE_REGISTER_AGENT_THEN_CLAIM\"};\n if(cmd===\"boot-agent\")return {ok:false,error:\"BOOT_AGENT_NOT_END_TO_END_USE_REGISTER_AGENT_THEN_CLAIM\"};\n if(cmd===\"renew-lease\" && q.args.includes(\"--lease-seconds\")){\n return {ok:false,error:\"RENEW_LEASE_USE_SECONDS_NOT_LEASE_SECONDS\"};\n }\n if(cmd===\"recover-leases\")return {ok:false,error:\"RECOVER_LEASE_ALIAS_NOT_AVAILABLE_ON_CURRENT_EXECUTOR\"};\n if(cmd===\"recover-stale\" && q.args.length!==1)return {ok:false,error:\"RECOVER_STALE_ARGS_INVALID\"};\n if(!SUPPORTED.has(cmd))return {ok:false,error:\"BRAIN_SUBCOMMAND_NOT_ALLOWED\"};\n return {ok:true,payload_json:JSON.stringify({args:q.args,timeout:q.timeout})};\n }\n\n if(op===\"read_text\"){\n if(!exactKeys(q,[\"path\",\"max_bytes\"]))return {ok:false,error:\"READ_TEXT_SCHEMA_NOT_CLOSED\"};\n if(typeof q.path!==\"string\")return {ok:false,error:\"READ_TEXT_PATH_REQUIRED\"};\n if(q.path.includes(\"\\0\") || q.path.includes(\"\\\\\") || q.path.split(\"/\").some((s:string)=>s===\".\" || s===\"..\")){\n return {ok:false,error:\"READ_TEXT_TRAVERSAL_REJECTED\"};\n }\n const artifactFile=q.path.startsWith(\"/brain/artifacts/\") && q.path.length>\"/brain/artifacts/\".length && !q.path.endsWith(\"/\");\n if(!(q.path===\"/brain/JOIN_PROTOCOL.md\" || artifactFile))return {ok:false,error:\"READ_TEXT_PATH_FORBIDDEN\"};\n if(!Number.isInteger(q.max_bytes) || q.max_bytes<1 || q.max_bytes>MAX_READ_BYTES)return {ok:false,error:\"READ_TEXT_MAX_BYTES_INVALID\"};\n return {ok:true,payload_json:JSON.stringify({path:q.path,max_bytes:q.max_bytes})};\n }\n return {ok:false,error:\"OP_UNSUPPORTED\"};\n}\n\nlet schemaReady:Promise|null=null;\nasync function ensureTables(){\n if(!schemaReady){\n schemaReady=(async()=>{\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS brain_bridge_workers_v4 (\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n first_seen_at TEXT NOT NULL,\n last_poll_at TEXT,\n last_result_at TEXT,\n lease_count INTEGER NOT NULL DEFAULT 0,\n result_count INTEGER NOT NULL DEFAULT 0,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(worker_id,instance_id)\n )`);\n await ensureAuthorityTable(sqlite);\n })();\n }\n try{await schemaReady}catch(e){schemaReady=null;throw e}\n}\nasync function admitHostWriter(){\n await ensureTables();\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTHORITY_TABLE} WHERE id=1`);\n const a:any=r.rows?.[0]||null;\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\"};\n if(String(a.mode)!==\"ACTIVE\")return {ok:false,reason:\"AUTHORITY_PREPARED_NO_WRITER\",authority:a};\n if(String(a.writer)!==\"host_bridge\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n return {ok:true,epoch:Number(a.epoch),authority:a};\n}\nfunction instanceOf(q:any){const v=String(q?.instance_id||\"\").trim();return v||\"LEGACY_UNATTESTED_INSTANCE\";}\n\nasync function workerHealth(){\n await ensureTables();\n const [wr,qc,dup,auth,dur]:any[]=await sqlite.batch([\n {sql:`SELECT worker_id,instance_id,last_poll_at,last_result_at,lease_count,result_count,\n CAST((julianday('now')-julianday(last_poll_at))*86400 AS INTEGER) AS poll_age_seconds\n FROM brain_bridge_workers_v4\n ORDER BY last_poll_at DESC LIMIT 1`},\n {sql:`SELECT\n SUM(CASE WHEN state='READY' THEN 1 ELSE 0 END) AS ready_count,\n SUM(CASE WHEN state='LEASED' THEN 1 ELSE 0 END) AS leased_count,\n SUM(CASE WHEN state='LEASED' AND lease_expires_at <= datetime('now') THEN 1 ELSE 0 END) AS expired_lease_count,\n SUM(CASE WHEN state='READY' AND priority > ? THEN 1 ELSE 0 END) AS overcap_ready_count,\n MIN(CASE WHEN state='READY' THEN created_at END) AS oldest_ready_at,\n MIN(CASE WHEN state='LEASED' THEN lease_expires_at END) AS earliest_lease_expiry\n FROM brain_bridge_jobs`,args:[PRIORITY_CAP]},\n {sql:`SELECT COUNT(*) AS duplicate_worker_count FROM (\n SELECT lease_owner FROM brain_bridge_jobs\n WHERE state='LEASED' AND lease_expires_at > datetime('now') AND lease_owner IS NOT NULL\n GROUP BY lease_owner HAVING COUNT(*) > 1\n )`},\n {sql:`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at\n FROM ${AUTHORITY_TABLE} WHERE id=1`},\n {sql:`SELECT\n (SELECT generation FROM brainvn_epoch_meta WHERE id=1) AS canonical_generation,\n (SELECT MAX(generation) FROM brainvn_replicas WHERE verified=1) AS max_verified_replica_generation,\n (SELECT COUNT(*) FROM brainvn_replicas WHERE verified=1) AS verified_replica_count`}\n ],\"read\");\n const w=wr.rows?.[0]||null;\n const q=qc.rows?.[0]||{};\n const a=auth.rows?.[0]||null;\n const d=dur.rows?.[0]||{};\n const canonicalGeneration=d.canonical_generation==null?null:Number(d.canonical_generation);\n const maxVerifiedReplicaGeneration=d.max_verified_replica_generation==null?null:Number(d.max_verified_replica_generation);\n const durabilityLagGenerations=\n canonicalGeneration==null||maxVerifiedReplicaGeneration==null\n ? null\n : Math.max(0,canonicalGeneration-maxVerifiedReplicaGeneration);\n const durabilityState=\n durabilityLagGenerations==null ? \"UNKNOWN\" :\n durabilityLagGenerations===0 ? \"CURRENT\" : \"LAGGING\";\n const duplicateActiveLeases=Number(dup.rows?.[0]?.duplicate_worker_count||0);\n const cls=classifyWorkerAge(w?Number(w.poll_age_seconds):null);\n const expiredLeases=Number(q.expired_lease_count||0);\n const status=healthHttpStatus(cls.state,duplicateActiveLeases,expiredLeases);\n return {status,body:{\n endpoint_ok:true,\n service:\"brain-bridge-worker-v5-boot-cohort-fair-v1\",\n control_plane_authority:a,\n brain_command_surface:commandSurfaceForAuthority(a?.writer==null?null:String(a.writer)),\n worker:w,\n worker_state:cls.state,\n worker_reason:cls.reason,\n worker_health_scope:\"HOST_BRIDGE_WORKER_ONLY\",\n instance_identity_available:w ? w.instance_id!==\"LEGACY_UNATTESTED_INSTANCE\" : false,\n duplicate_active_worker_leases:duplicateActiveLeases,\n queue:q,\n durability:{\n canonical_generation:canonicalGeneration,\n max_verified_replica_generation:maxVerifiedReplicaGeneration,\n verified_replica_count:Number(d.verified_replica_count||0),\n lag_generations:durabilityLagGenerations,\n state:durabilityState\n },\n transport_priority_cap:PRIORITY_CAP,\n max_brain_timeout_seconds:MAX_JOB_TIMEOUT,\n queue_lease_seconds:LEASE_SECONDS,\n selection_policy:\"RECOVERY_FIRST_THEN_OLDER_READY_COMMIT_BARRIER_THEN_AGED_NONBOOT_MISSION_15S_ESCAPE_THEN_BOOT_COHORT_PAIRED_REGISTER_BEFORE_CLAIM_THEN_CLAMPED_PRIORITY_FIFO_SINGLE_FLIGHT\",\n atomic_single_flight:true,\n fail_closed_http_status:status\n }};\n}\n\nasync function rejectInvalidLease(worker:string,id:string,error:string){\n await sqlite.execute({\n sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,error_json=?,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=?`,\n args:[JSON.stringify({classification:\"BRIDGE_DISPATCH_REJECTED\",error}),id,worker]\n });\n}\n\nexport default async function(req:Request):Promise{\n const u=new URL(req.url);\n if(req.method===\"GET\" && u.pathname.endsWith(\"/health\")){\n const h=await workerHealth();return json(h.body,h.status);\n }\n if(req.method!==\"POST\")return json({ok:false,error:\"METHOD\"},405);\n const supplied=req.headers.get(\"x-brain-worker-token\")||\"\";\n if(!WORKER_TOKEN || supplied!==WORKER_TOKEN)return json({ok:false,error:\"UNAUTHORIZED\"},401);\n let q:any;try{q=await req.json()}catch{return json({ok:false,error:\"BAD_JSON\"},400)}\n await ensureTables();\n\n if(u.pathname.endsWith(\"/poll\")){\n const worker=String(q.worker_id||\"\").trim();\n if(!worker || worker.length>128)return json({ok:false,error:\"WORKER_REQUIRED\"},400);\n const authority=await admitHostWriter();\n if(!authority.ok)return json({ok:false,error:\"CONTROL_PLANE_WRITER_FENCED\",reason:authority.reason,authority:authority.authority??null},409);\n const instance=instanceOf(q);\n const pollBatch:any[]=await sqlite.batch([\n {sql:`INSERT INTO brain_bridge_workers_v4(worker_id,instance_id,first_seen_at,last_poll_at,updated_at)\n VALUES(?,?,datetime('now'),datetime('now'),datetime('now'))\n ON CONFLICT(worker_id,instance_id) DO UPDATE SET last_poll_at=datetime('now'),updated_at=datetime('now')`,args:[worker,instance]},\n {sql:recoverExpiredSql()},\n {sql:activeLeaseSql(),args:[worker]},\n {sql:leaseOneSql(),args:[worker,worker]}\n ],\"write\");\n const ar:any=pollBatch[2];\n const r:any=pollBatch[3];\n const before=activeLeaseDecision(ar.rows||[]);\n if(before.kind===\"conflict\")return json({ok:false,error:\"MULTIPLE_ACTIVE_LEASES\",worker_id:worker,count:before.count},409);\n if(before.kind===\"busy\")return json({ok:true,job:null,reason:\"ACTIVE_LEASE_EXISTS\",active_lease:{id:before.active_job_id,lease_expires_at:before.lease_expires_at},worker_id:worker,instance_id:instance});\n if(!r.rows?.[0]){\n return json({ok:true,job:null,reason:\"NO_READY_JOB_OR_RACED_ACTIVE_LEASE\",worker_id:worker,instance_id:instance,priority_cap:PRIORITY_CAP});\n }\n\n const row=r.rows[0];\n const normalized=normalizeDispatch(String(row.op),String(row.payload_json));\n if(!normalized.ok){\n await rejectInvalidLease(worker,String(row.id),normalized.error);\n return json({ok:true,job:null,reason:\"DISPATCH_REJECTED\",rejected_job:String(row.id),dispatch_error:normalized.error,worker_id:worker,instance_id:instance});\n }\n\n await sqlite.execute({\n sql:\"UPDATE brain_bridge_workers_v4 SET lease_count=lease_count+1,updated_at=datetime('now') WHERE worker_id=? AND instance_id=?\",\n args:[worker,instance]\n });\n return json({ok:true,job:{...row,payload_json:normalized.payload_json},worker_id:worker,instance_id:instance,priority_cap:PRIORITY_CAP,lease_seconds:LEASE_SECONDS});\n }\n\n if(u.pathname.endsWith(\"/result\")){\n const worker=String(q.worker_id||\"\").trim(),id=String(q.id||\"\").trim(),success=q.success===true;\n const instance=instanceOf(q);\n if(!worker||!id)return json({ok:false,error:\"BAD_RESULT_ID\"},400);\n const authority=await admitHostWriter();\n if(!authority.ok)return json({ok:false,error:\"CONTROL_PLANE_RESULT_FENCED\",reason:authority.reason,authority:authority.authority??null},409);\n\n const resultJson=success?JSON.stringify(q.result??null):null;\n const plan=success&&resultJson ? prepareAtomicCoalescePlan(resultJson,id,worker,true) : null;\n let state:string;\n let coalescedIds:string[]=[];\n\n if(plan){\n const cr:any=await sqlite.execute({sql:plan.sql,args:plan.args});\n const ids=(cr.rows||[]).map((x:any)=>String(x.id));\n if(!ids.includes(id))return json({ok:false,error:\"LEASE_MISMATCH_OR_EXPIRED\"},409);\n state=\"COMPLETE\";\n coalescedIds=ids.filter((x:string)=>x!==id);\n }else{\n const r:any=await sqlite.execute({\n sql:resultSql(),\n args:[success?\"COMPLETE\":\"FAILED\",resultJson,success?null:JSON.stringify(q.error??null),id,worker]\n });\n if(!r.rows?.length)return json({ok:false,error:\"LEASE_MISMATCH_OR_EXPIRED\"},409);\n state=String(r.rows[0].state);\n }\n\n await sqlite.execute({\n sql:\"UPDATE brain_bridge_workers_v4 SET last_result_at=datetime('now'),result_count=result_count+1,updated_at=datetime('now') WHERE worker_id=? AND instance_id=?\",\n args:[worker,instance]\n });\n return json({ok:true,id,state,worker_id:worker,instance_id:instance,\n coalesced_count:coalescedIds.length,coalesced_ids:coalescedIds});\n }\n return json({ok:false,error:\"NOT_FOUND\"},404);\n}\n",[252],"d4a6635b-2e18-45f4-8a9b-e7876785742e","brain_bridge_readonly_coalesce_v4.ts","01a09825-28fe-7340-a128-9efa4dffeacd",["D",1789258967296],"export const READ_ONLY_BRAIN_COMMANDS = new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nexport const COALESCE_COMMANDS = new Set([\"verify-chain\",\"verify-claim-graph\"]);\nexport const TRANSPORT_PRIORITY_CAP = 1_000_000_000;\nexport const MAX_JOB_TIMEOUT = 120;\n\nexport type ReadonlyBrainCommand = \"status\"|\"verify-chain\"|\"verify-claim-graph\";\nexport type CoalesceCommand = \"verify-chain\"|\"verify-claim-graph\";\nexport type AtomicPlan = {sql:string;args:unknown[];command:CoalesceCommand};\n\nfunction plainObject(v:any):v is Record{\n return !!v && typeof v===\"object\" && !Array.isArray(v);\n}\nfunction exactKeys(v:Record,expected:string[]){\n const a=Object.keys(v).sort(),b=[...expected].sort();\n return a.length===b.length && a.every((x,i)=>x===b[i]);\n}\nfunction tableName(t:string){\n if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(t))throw new Error(\"BAD_TABLE\");\n return t;\n}\nfunction hex64(v:unknown){\n return typeof v===\"string\" && /^[0-9a-f]{64}$/.test(v);\n}\n\nexport function readonlyBrainCommand(op:string,payloadJson:string):ReadonlyBrainCommand|null{\n if(op!==\"brain\")return null;\n let q:any;try{q=JSON.parse(payloadJson)}catch{return null}\n if(!plainObject(q)||!exactKeys(q,[\"args\",\"timeout\"]))return null;\n if(!Array.isArray(q.args)||q.args.length!==1||typeof q.args[0]!==\"string\")return null;\n if(!Number.isInteger(q.timeout)||q.timeout<1||q.timeout>MAX_JOB_TIMEOUT)return null;\n return READ_ONLY_BRAIN_COMMANDS.has(q.args[0]) ? q.args[0] as ReadonlyBrainCommand : null;\n}\nexport function coalescibleBrainCommand(op:string,payloadJson:string):CoalesceCommand|null{\n const c=readonlyBrainCommand(op,payloadJson);\n return c && COALESCE_COMMANDS.has(c) ? c as CoalesceCommand : null;\n}\n\n/* Infer the command from the closed successful worker result itself.\n Status is deliberately never classified for coalescing: current live status\n routinely hits MAX_OUTPUT_BYTES and a copied huge snapshot is not a safe cache. */\nexport function classifyValidCoalesceResult(resultJson:string):CoalesceCommand|null{\n let r:any;try{r=JSON.parse(resultJson)}catch{return null}\n if(!plainObject(r)||!exactKeys(r,[\"returncode\",\"stdout\",\"stderr\",\"stdout_truncated\",\"stderr_truncated\"]))return null;\n if(r.returncode!==0||typeof r.stdout!==\"string\"||r.stderr!==\"\"||r.stdout_truncated!==false||r.stderr_truncated!==false)return null;\n let out:any;try{out=JSON.parse(r.stdout.trim())}catch{return null}\n if(!plainObject(out))return null;\n if(exactKeys(out,[\"computed_head\",\"events\",\"ok\",\"stored_head\"])\n && out.ok===true\n && Number.isInteger(out.events)&&out.events>=0\n && hex64(out.stored_head)&&out.stored_head===out.computed_head){\n return \"verify-chain\";\n }\n if(exactKeys(out,[\"claims\",\"ok\",\"problems\"])\n && out.ok===true\n && Number.isInteger(out.claims)&&out.claims>=0\n && Array.isArray(out.problems)&&out.problems.length===0){\n return \"verify-claim-graph\";\n }\n return null;\n}\n\nfunction closedReadonlySql(a:string){\n return `(${a}.op='brain'\n AND json_valid(${a}.payload_json)=1\n AND json_type(${a}.payload_json,'$.args')='array'\n AND json_array_length(json_extract(${a}.payload_json,'$.args'))=1\n AND json_extract(${a}.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(${a}.payload_json,'$.timeout')='integer'\n AND json_extract(${a}.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(${a}.payload_json))=2)`;\n}\nfunction validRecoverStaleSql(a:string){\n return `(${a}.op='brain'\n AND json_valid(${a}.payload_json)=1\n AND json_type(${a}.payload_json,'$.args')='array'\n AND json_array_length(json_extract(${a}.payload_json,'$.args'))=1\n AND json_extract(${a}.payload_json,'$.args[0]')='recover-stale'\n AND json_type(${a}.payload_json,'$.timeout')='integer'\n AND json_extract(${a}.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(${a}.payload_json))=2)`;\n}\nfunction canonicalMutationSql(a:string){\n return `(${a}.op='brain' AND NOT ${closedReadonlySql(a)})`;\n}\nfunction effectivePrioritySql(a:string){\n return `(CASE WHEN ${a}.priority > ${TRANSPORT_PRIORITY_CAP} THEN ${TRANSPORT_PRIORITY_CAP} ELSE ${a}.priority END)`;\n}\n/* Exact current scheduler order for a mutating READY row b relative to read follower f:\n recovery-first, then clamped priority DESC, then created_at,id FIFO. */\nfunction mutatingReadyPrecedesSql(b:string,f:string){\n const br=validRecoverStaleSql(b);\n const bp=effectivePrioritySql(b),fp=effectivePrioritySql(f);\n return `(${canonicalMutationSql(b)} AND (\n ${br}\n OR (\n NOT ${br}\n AND (\n ${bp} > ${fp}\n OR (${bp}=${fp} AND (\n ${b}.created_at < ${f}.created_at\n OR (${b}.created_at=${f}.created_at AND ${b}.id<${f}.id)\n ))\n )\n )\n ))`;\n}\nfunction leaderValidSql(a:string){\n return `(${a}.id=?\n AND ${a}.state='LEASED'\n AND ${a}.lease_owner=?\n AND ${a}.lease_expires_at IS NOT NULL\n AND ${a}.lease_expires_at > datetime('now')\n AND ${a}.op='brain'\n AND json_valid(${a}.payload_json)=1\n AND json_type(${a}.payload_json,'$.args')='array'\n AND json_array_length(json_extract(${a}.payload_json,'$.args'))=1\n AND json_extract(${a}.payload_json,'$.args[0]')=?\n AND json_type(${a}.payload_json,'$.timeout')='integer'\n AND json_extract(${a}.payload_json,'$.timeout') BETWEEN 1 AND ${MAX_JOB_TIMEOUT}\n AND (SELECT COUNT(*) FROM json_each(${a}.payload_json))=2)`;\n}\n\nexport function atomicSuccessfulCoalesceSql(table=\"brain_bridge_jobs\"){\n table=tableName(table);\n const leaderL=leaderValidSql(\"l\");\n return `WITH leader AS MATERIALIZED (\n SELECT l.id,l.op,l.payload_json,l.priority,l.updated_at AS leased_at\n FROM ${table} AS l\n WHERE ${leaderL}\n )\n UPDATE ${table} AS j\n SET state='COMPLETE',\n result_json=?,\n error_json=NULL,\n lease_owner=NULL,\n lease_expires_at=NULL,\n updated_at=datetime('now')\n WHERE\n j.id IN (SELECT id FROM leader)\n OR (\n j.state='READY'\n AND EXISTS(\n SELECT 1 FROM leader AS l\n WHERE j.op=l.op\n AND j.payload_json=l.payload_json\n AND j.priority=l.priority\n AND j.created_at < l.leased_at\n\n /* A READY canonical mutation that scheduler order puts before j\n must execute before j; do not move j across it. */\n AND NOT EXISTS(\n SELECT 1 FROM ${table} AS b\n WHERE b.id<>j.id AND b.id<>l.id\n AND b.state='READY'\n AND ${mutatingReadyPrecedesSql(\"b\",\"j\")}\n )\n\n /* Any canonical mutation already in flight can change state\n independently of queue priority. Its older lease timestamp\n must not make it invisible. */\n AND NOT EXISTS(\n SELECT 1 FROM ${table} AS m\n WHERE m.id<>j.id AND m.id<>l.id\n AND m.state='LEASED'\n AND ${canonicalMutationSql(\"m\")}\n )\n\n /* Terminal mutations after the leader lease are state changes or\n unknown/failure boundaries that the leader snapshot may not\n safely represent for j. Same-second timestamps block\n conservatively because sqlite datetime() is second-granularity. */\n AND NOT EXISTS(\n SELECT 1 FROM ${table} AS t\n WHERE t.id<>j.id AND t.id<>l.id\n AND t.state IN ('COMPLETE','FAILED')\n AND t.updated_at >= l.leased_at\n AND ${canonicalMutationSql(\"t\")}\n )\n )\n )\n RETURNING id`;\n}\n\nexport function prepareAtomicCoalescePlan(\n resultJson:string,\n id:string,\n worker:string,\n success:boolean,\n table=\"brain_bridge_jobs\",\n):AtomicPlan|null{\n if(success!==true||!id||!worker)return null;\n const command=classifyValidCoalesceResult(resultJson);\n if(command===null)return null;\n return {\n command,\n sql:atomicSuccessfulCoalesceSql(table),\n args:[id,worker,command,resultJson],\n };\n}\n",[258],"58a25570-ce9b-4610-8e52-f8de833d21fb","rollback","01a0913a-d008-734d-8d0b-cde82abe4fb0",10,["D",1789142945808],"directory",[264],"pulls","branches","forks","envVars",{"_277":61,"_279":61},"connections",{"_277":61,"_278":61},"count","unfilledCount","emptyCount",{"_41":263,"_31":264,"_29":265,"_150":-5,"_39":40,"_38":266,"_152":57,"_36":358,"_13":61,"_32":268,"_34":-5,"_23":24,"_155":-5,"_300":359,"_26":360},{"_41":351,"_31":352,"_29":353,"_150":265,"_39":40,"_38":266,"_152":57,"_36":354,"_13":61,"_32":33,"_34":355,"_23":24,"_155":-5,"_300":356,"_26":357},{"_41":257,"_31":258,"_29":259,"_150":-5,"_39":40,"_38":151,"_152":57,"_36":348,"_13":61,"_32":33,"_34":261,"_23":24,"_155":-5,"_300":349,"_26":350},{"_41":251,"_31":252,"_29":55,"_150":-5,"_39":40,"_38":151,"_152":57,"_36":345,"_13":61,"_32":254,"_34":255,"_23":24,"_155":-5,"_300":346,"_26":347},{"_41":244,"_31":245,"_29":246,"_150":-5,"_39":40,"_38":247,"_152":57,"_36":342,"_13":61,"_32":33,"_34":249,"_23":24,"_155":-5,"_300":343,"_26":344},{"_41":237,"_31":238,"_29":239,"_150":-5,"_39":40,"_38":240,"_152":57,"_36":339,"_13":61,"_32":33,"_34":242,"_23":24,"_155":-5,"_300":340,"_26":341},{"_41":230,"_31":231,"_29":232,"_150":-5,"_39":40,"_38":233,"_152":57,"_36":336,"_13":213,"_32":33,"_34":235,"_23":24,"_155":-5,"_300":337,"_26":338},{"_41":223,"_31":224,"_29":225,"_150":-5,"_39":40,"_38":226,"_152":57,"_36":333,"_13":162,"_32":33,"_34":228,"_23":24,"_155":-5,"_300":334,"_26":335},{"_41":217,"_31":218,"_29":219,"_150":-5,"_39":40,"_38":162,"_152":57,"_36":330,"_13":61,"_32":33,"_34":221,"_23":24,"_155":-5,"_300":331,"_26":332},{"_41":210,"_31":211,"_29":212,"_150":-5,"_39":40,"_38":213,"_152":57,"_36":327,"_13":61,"_32":33,"_34":215,"_23":24,"_155":-5,"_300":328,"_26":329},{"_41":204,"_31":205,"_29":206,"_150":-5,"_39":40,"_38":201,"_152":57,"_36":324,"_13":162,"_32":33,"_34":208,"_23":24,"_155":-5,"_300":325,"_26":326},{"_41":196,"_31":197,"_29":198,"_150":-5,"_39":40,"_38":199,"_152":57,"_36":321,"_13":201,"_32":33,"_34":202,"_23":24,"_155":-5,"_300":322,"_26":323},{"_41":189,"_31":190,"_29":191,"_150":-5,"_39":40,"_38":192,"_152":57,"_36":318,"_13":61,"_32":33,"_34":194,"_23":24,"_155":-5,"_300":319,"_26":320},{"_41":182,"_31":183,"_29":184,"_150":-5,"_39":40,"_38":185,"_152":57,"_36":315,"_13":162,"_32":33,"_34":187,"_23":24,"_155":-5,"_300":316,"_26":317},{"_41":175,"_31":176,"_29":177,"_150":-5,"_39":40,"_38":178,"_152":57,"_36":312,"_13":61,"_32":33,"_34":180,"_23":24,"_155":-5,"_300":313,"_26":314},{"_41":172,"_31":27,"_29":30,"_150":-5,"_39":40,"_38":14,"_152":24,"_36":309,"_13":61,"_32":33,"_34":35,"_23":24,"_155":-5,"_300":310,"_26":311},{"_41":165,"_31":166,"_29":167,"_150":-5,"_39":40,"_38":168,"_152":57,"_36":306,"_13":61,"_32":33,"_34":170,"_23":24,"_155":-5,"_300":307,"_26":308},{"_41":157,"_31":158,"_29":159,"_150":-5,"_39":40,"_38":160,"_152":24,"_36":303,"_13":162,"_32":33,"_34":163,"_23":24,"_155":-5,"_300":304,"_26":305},{"_41":147,"_31":148,"_29":149,"_150":-5,"_39":40,"_38":151,"_152":57,"_36":299,"_13":61,"_32":33,"_34":154,"_23":24,"_155":-5,"_300":301,"_26":302},["D",1789258967296],"children",[],[148],["D",1789258990735],[],[158],["D",1789142499725],[],[166],["D",1789259018116],[],[27],["D",1789172200398],[],[176],["D",1789172184916],[],[183],["D",1789143493940],[],[190],["D",1789143401253],[],[197],["D",1789142481337],[],[205],["D",1789142257676],[],[211],["D",1789142237871],[],[218],["D",1789142529414],[],[224],["D",1789143135212],[],[231],["D",1789142542136],[],[238],["D",1789142406837],[],[245],["D",1789258967296],[],[252],["D",1789258967296],[],[258],"126e3cdc-c0ab-4efe-94ad-25de4248a41a","val_native_executor_prod.pre_r8k2.ts","01a0913a-d008-734d-8d0b-d0851beddd49",["D",1789142945808],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst sqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { leaseOneSql } from \"./brain_bridge_worker.ts\";\nimport { dispatchBrain, verifyBrainChain, verifyBrainClaimGraph } from \"./val_native_kernel_v1.ts\";\n\nconst JOB_TABLE=\"brain_bridge_jobs\";\nconst AUTH_TABLE=\"brain_control_plane_authority_v1\";\n// A unique module query-string creates an independent worker incarnation inside the\n// same Val runtime. The default preserves the canonical executor identity.\nconst moduleUrl=new URL(import.meta.url);\nconst WORKER=moduleUrl.searchParams.get(\"worker\")||\"project-brain-val-native-v1\";\nconst INSTANCE=moduleUrl.searchParams.get(\"instance\")||\"val-native-epoch2\";\nconst LEASE_SECONDS=180;\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst RUNTIME_TICK_TABLE=\"val_native_executor_runtime_v1\";\nconst RUNTIME_TICK_TTL_SECONDS=300;\nasync function ensureMutationReceiptTable(db:any=sqlite){\n await db.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction legacyEnvelope(v:any){return JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify(v)+\"\\n\"})}\nasync function sha256Text(s:string){\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nasync function authority(){\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTH_TABLE} WHERE id=1`);\n return r.rows?.[0]??null;\n}\nconst RESULT_FINALIZATION_HELPER_V1_SHA256=\"b82e4f00c3f7b3eb721871e780d0f7c43180e32516b9a5c87112a956e550677f\";\nconst RESULT_FINALIZATION_HELPER_V1_SOURCE=String.raw`// RESULT_FINALIZATION_EXACT_ATTEMPT_RECONCILIATION_V1\n// Candidate-only pure helper. It never dispatches/re-dispatches a Brain command.\n// Production integration supplies narrowly-scoped queue/authority/receipt operations.\n\nexport const READ_ONLY_COMMANDS_V1 = new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\n\nexport function canonV1(x) {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canonV1).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k => JSON.stringify(k) + \":\" + canonV1(x[k])).join(\",\") + \"}\";\n}\n\nexport function legacyEnvelopeV1(v) {\n return JSON.stringify({returncode:0, stderr:\"\", stdout:JSON.stringify(v) + \"\\n\"});\n}\n\nexport async function sha256TextV1(s) {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x => x.toString(16).padStart(2,\"0\")).join(\"\");\n}\n\nfunction errText(e) {\n return e instanceof Error ? e.message : String(e);\n}\n\nfunction authorityMatches(a, epoch, mode) {\n return !!a &&\n Number(a.epoch) === Number(epoch) &&\n String(a.writer) === \"val_native\" &&\n String(a.mode) === String(mode);\n}\n\nfunction expectedTerminal(dispatchOk, dispatchValue) {\n return dispatchOk\n ? {state:\"COMPLETE\", result_json:legacyEnvelopeV1(dispatchValue), error_json:null}\n : {state:\"FAILED\", result_json:null, error_json:JSON.stringify(dispatchValue)};\n}\n\nfunction sameNullable(a,b) {\n return (a ?? null) === (b ?? null);\n}\n\nfunction exactStaticJobBinding(row, job) {\n return !!row &&\n String(row.id) === String(job.id) &&\n String(row.op) === String(job.op) &&\n String(row.payload_json) === String(job.payload_json) &&\n Number(row.transport_lease_generation) === Number(job.transport_lease_generation);\n}\n\nfunction exactLiveAttempt(row, job) {\n return exactStaticJobBinding(row, job) &&\n String(row.lease_instance_id) === String(job.lease_instance_id) &&\n String(row.lease_attempt_id) === String(job.lease_attempt_id);\n}\n\nfunction exactTerminal(row, job, expected) {\n return exactLiveAttempt(row, job) &&\n String(row.state) === expected.state &&\n sameNullable(row.result_json, expected.result_json) &&\n sameNullable(row.error_json, expected.error_json) &&\n row.lease_owner == null &&\n row.lease_expires_at == null;\n}\n\nfunction leaseUnexpired(row, nowIso) {\n return !!row?.lease_expires_at && String(row.lease_expires_at) > String(nowIso);\n}\n\nfunction isExpiryUnknown(row) {\n if (!row || String(row.state) !== \"FAILED\" || row.result_json != null) return false;\n try {\n const e = JSON.parse(String(row.error_json || \"{}\"));\n return e?.classification === \"TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION\";\n } catch {\n return false;\n }\n}\n\nasync function exactReceipt(receipts, job, expectedEpoch, command, dispatchValue) {\n if (!Array.isArray(receipts) || receipts.length !== 1) return {ok:false, reason:receipts?.length > 1 ? \"AMBIGUOUS_MUTATION_RECEIPTS\" : \"MUTATION_RECEIPT_MISSING\"};\n const r = receipts[0];\n const payloadSha = await sha256TextV1(String(job.payload_json));\n if (String(r.job_id) !== String(job.id)) return {ok:false,reason:\"RECEIPT_JOB_MISMATCH\"};\n if (String(r.lease_attempt_id) !== String(job.lease_attempt_id)) return {ok:false,reason:\"RECEIPT_ATTEMPT_MISMATCH\"};\n if (String(r.lease_instance_id) !== String(job.lease_instance_id)) return {ok:false,reason:\"RECEIPT_INSTANCE_MISMATCH\"};\n if (String(r.lease_owner) !== String(job.lease_owner)) return {ok:false,reason:\"RECEIPT_OWNER_MISMATCH\"};\n if (Number(r.transport_lease_generation) !== Number(job.transport_lease_generation)) return {ok:false,reason:\"RECEIPT_GENERATION_MISMATCH\"};\n if (Number(r.authority_epoch) !== Number(expectedEpoch)) return {ok:false,reason:\"RECEIPT_AUTHORITY_EPOCH_MISMATCH\"};\n if (String(r.command) !== String(command)) return {ok:false,reason:\"RECEIPT_COMMAND_MISMATCH\"};\n if (String(r.payload_sha256) !== payloadSha) return {ok:false,reason:\"RECEIPT_PAYLOAD_MISMATCH\"};\n if (String(r.result_json) !== canonV1(dispatchValue)) return {ok:false,reason:\"RECEIPT_RESULT_MISMATCH\"};\n return {ok:true, receipt:r, payload_sha256:payloadSha};\n}\n\nasync function readOnlyStillFresh(command, preDispatchGeneration, deps) {\n if (!READ_ONLY_COMMANDS_V1.has(command)) return {ok:true};\n if (!Number.isInteger(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_PRE_DISPATCH_GENERATION_REQUIRED\"};\n const g = await deps.readCanonicalGeneration();\n if (Number(g) !== Number(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_CANONICAL_GENERATION_DRIFT\",expected:preDispatchGeneration,actual:Number(g)};\n return {ok:true};\n}\n\n/**\n * deps contract:\n * - readAuthority()\n * - readJob(id)\n * - readCanonicalGeneration()\n * - finishOncePreservingAttempt(job, expected) // exact attempt UPDATE; at most called twice total: initial + one retry\n * - readMutationReceipts(jobId, attemptId)\n * - finalizeExpiredMutationFromReceipt(job, expected, receipt)\n * - nowIso()\n *\n * No dispatch/re-dispatch function is accepted by this helper.\n */\nexport async function finalizeExactAttemptV1({\n job,\n expectedAuthorityEpoch,\n expectedAuthorityMode,\n command,\n dispatchOk,\n dispatchValue,\n preDispatchGeneration,\n deps,\n}) {\n const expected = expectedTerminal(dispatchOk, dispatchValue);\n const readOnly = READ_ONLY_COMMANDS_V1.has(command);\n const trace = [];\n let finishCalls = 0;\n\n const a0 = await deps.readAuthority();\n if (!authorityMatches(a0, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_PRE\",trace,finish_calls:finishCalls};\n }\n const fresh0 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh0.ok) return {...fresh0,trace,finish_calls:finishCalls};\n\n // Normal path. Candidate production finishOnce must preserve lease_instance_id and\n // lease_attempt_id on terminal rows so a client-unknown finish can be read back\n // as the exact attempt rather than merely the same job id.\n try {\n finishCalls++;\n const f = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_initial\",returned:f});\n if (f?.ok === true) {\n const rb = await deps.readJob(job.id);\n if (!exactTerminal(rb,job,expected)) return {ok:false,reason:\"FINISH_SUCCESS_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n return {ok:true,reconciled:false,path:\"INITIAL_FINISH\",trace,finish_calls:finishCalls};\n }\n trace.push({phase:\"finish_initial_nonok\",value:f});\n } catch (e) {\n trace.push({phase:\"finish_initial_throw\",error:errText(e)});\n }\n\n // Outcome-aware reconciliation begins. Re-read authority after the uncertain client outcome.\n const a1 = await deps.readAuthority();\n if (!authorityMatches(a1, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_RECONCILE\",trace,finish_calls:finishCalls};\n }\n const fresh1 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh1.ok) return {...fresh1,trace,finish_calls:finishCalls};\n\n let row = await deps.readJob(job.id);\n if (!row || !exactStaticJobBinding(row,job)) {\n return {ok:false,reason:\"QUEUE_JOB_BINDING_MISMATCH\",trace,finish_calls:finishCalls};\n }\n\n // Case A: UPDATE committed but client threw. Terminal readback itself proves completion,\n // but only because candidate finish preserves exact attempt identity.\n if (exactTerminal(row,job,expected)) {\n return {ok:true,reconciled:true,path:\"TERMINAL_EXACT_READBACK\",trace,finish_calls:finishCalls};\n }\n\n // Case B: UPDATE did not commit. Retry the exact finish at most once, only while this\n // exact attempt is still leased and unexpired.\n if (String(row.state) === \"LEASED\" && exactLiveAttempt(row,job) && String(row.lease_owner) === String(job.lease_owner) && leaseUnexpired(row,deps.nowIso())) {\n try {\n finishCalls++;\n const f2 = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_retry_once\",returned:f2});\n } catch (e) {\n trace.push({phase:\"finish_retry_once_throw\",error:errText(e)});\n }\n const fresh2 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh2.ok) return {...fresh2,trace,finish_calls:finishCalls};\n const rb2 = await deps.readJob(job.id);\n if (exactTerminal(rb2,job,expected)) {\n return {ok:true,reconciled:true,path:\"ONE_EXACT_FINISH_RETRY\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"ONE_FINISH_RETRY_EXHAUSTED\",trace,finish_calls:finishCalls};\n }\n\n // Read-only results may never be resurrected after lease expiry/reassignment, and they\n // may never cross canonical generation drift.\n if (readOnly) {\n return {ok:false,reason:\"READ_ONLY_RESULT_NOT_SAFE_TO_RECONCILE\",trace,finish_calls:finishCalls};\n }\n\n // A mutation receipt is not a license to reinterpret a still-LEASED row from another\n // attempt/instance. Receipt-bound recovery below is only for the exact known\n // expiry-terminalization state, never for a live/reassigned lease.\n if (String(row.state) === \"LEASED\") {\n if (!exactLiveAttempt(row,job)) {\n return {ok:false,reason:\"LIVE_ATTEMPT_IDENTITY_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"LEASED_ATTEMPT_EXPIRED_OR_UNSAFE_AFTER_ONE_RETRY\",trace,finish_calls:finishCalls};\n }\n\n // Case C: mutation dispatch is canonically known from the exact bound receipt.\n // This may repair the historical FAILED/OUTCOME_UNKNOWN transport row without\n // re-dispatching the canonical mutation.\n if (dispatchOk !== true) {\n return {ok:false,reason:\"MUTATION_DISPATCH_EXCEPTION_HAS_NO_SAFE_RECEIPT_ASSUMPTION\",trace,finish_calls:finishCalls};\n }\n const receipts = await deps.readMutationReceipts(job.id,job.lease_attempt_id);\n const rr = await exactReceipt(receipts,job,expectedAuthorityEpoch,command,dispatchValue);\n if (!rr.ok) return {...rr,trace,finish_calls:finishCalls};\n\n // Only the exact known expiry terminalization is repairable after expiry. Transport\n // generation equality proves no later lease generation was issued for this job.\n if (!isExpiryUnknown(row) || Number(row.transport_lease_generation) !== Number(job.transport_lease_generation)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_NOT_ELIGIBLE\",trace,finish_calls:finishCalls};\n }\n if (row.lease_owner != null || row.lease_expires_at != null) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_STILL_OWNED\",trace,finish_calls:finishCalls};\n }\n // Historical recovery cleared attempt/instance. If present, they must still match.\n if (row.lease_attempt_id != null && String(row.lease_attempt_id) !== String(job.lease_attempt_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_ATTEMPT_CONFLICT\",trace,finish_calls:finishCalls};\n }\n if (row.lease_instance_id != null && String(row.lease_instance_id) !== String(job.lease_instance_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_INSTANCE_CONFLICT\",trace,finish_calls:finishCalls};\n }\n\n const rec = await deps.finalizeExpiredMutationFromReceipt(job,expected,rr.receipt);\n trace.push({phase:\"receipt_bound_expiry_recovery\",returned:rec});\n const a2 = await deps.readAuthority();\n if (!authorityMatches(a2, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_POST_RECEIPT\",trace,finish_calls:finishCalls};\n }\n const rb3 = await deps.readJob(job.id);\n if (!exactTerminal(rb3,job,expected)) {\n return {ok:false,reason:\"RECEIPT_RECOVERY_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:true,reconciled:true,path:\"EXACT_MUTATION_RECEIPT_EXPIRY_RECOVERY\",trace,finish_calls:finishCalls};\n}\n`;\nlet resultFinalizationHelperV1Promise:Promise|null=null;\nasync function resultFinalizationHelperV1(){\n const h=await sha256Text(RESULT_FINALIZATION_HELPER_V1_SOURCE);\n if(h!==RESULT_FINALIZATION_HELPER_V1_SHA256)throw new Error(\"RESULT_FINALIZATION_HELPER_INTEGRITY_MISMATCH\");\n if(!resultFinalizationHelperV1Promise){\n resultFinalizationHelperV1Promise=import(\"data:text/javascript;charset=utf-8,\"+encodeURIComponent(RESULT_FINALIZATION_HELPER_V1_SOURCE));\n }\n return await resultFinalizationHelperV1Promise;\n}\n\nasync function canonicalAnchor(){\n const r:any=await sqlite.execute(\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const row:any=r.rows?.[0]??null;\n const g=Number(row?.generation),head=String(row?.event_head_hash??\"\");\n if(!Number.isInteger(g)||g<0||!/^[0-9a-f]{64}$/.test(head))throw new Error(\"CANONICAL_ANCHOR_UNAVAILABLE\");\n return {generation:g,event_head_hash:head};\n}\nasync function canonicalGeneration(){return (await canonicalAnchor()).generation;}\nasync function normalizedFinalizationAuthority(){\n const g:any=await admit();\n if(g?.ok===true)return {epoch:Number(g.epoch),writer:\"val_native\",mode:String(g.mode)};\n const a:any=g?.authority??await authority();\n return {epoch:Number(a?.epoch),writer:String(a?.writer??\"\"),mode:String(a?.mode)===\"PREPARED\"?\"PREPARED_READ_ONLY\":String(a?.mode??\"\")};\n}\n\nasync function emitRuntimeTick(){\n const a:any=await authority();\n if(!a||String(a.writer)!==\"val_native\"||![\"ACTIVE\",\"PREPARED\"].includes(String(a.mode))){\n return {ok:false,emitted:false,reason:\"VAL_NATIVE_NOT_SELECTED\",authority:a??null};\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNTIME_TICK_TABLE}(\n id TEXT PRIMARY KEY,\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n state TEXT NOT NULL,\n tick_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n metadata_json TEXT NOT NULL\n )`);\n const metadata=JSON.stringify({\n classification:\"NONAUTHORITY_EXECUTOR_RUNTIME_TICK\",\n grants_brain_authority:false,\n extends_canonical_lease:false,\n source:\"val_native_executor_prod.drain\"\n });\n await sqlite.execute({\n sql:`INSERT INTO ${RUNTIME_TICK_TABLE}(id,worker_id,instance_id,authority_epoch,state,tick_at,expires_at,metadata_json)\n VALUES('val-native-executor',?,?,?,'RUNNING',datetime('now'),datetime('now','+${RUNTIME_TICK_TTL_SECONDS} seconds'),?)\n ON CONFLICT(id) DO UPDATE SET\n worker_id=excluded.worker_id,\n instance_id=excluded.instance_id,\n authority_epoch=excluded.authority_epoch,\n state='RUNNING',\n tick_at=excluded.tick_at,\n expires_at=excluded.expires_at,\n metadata_json=excluded.metadata_json`,\n args:[WORKER,INSTANCE,Number(a.epoch),metadata]\n });\n return {ok:true,emitted:true,authority_epoch:Number(a.epoch),ttl_seconds:RUNTIME_TICK_TTL_SECONDS};\n}\nasync function admit(){\n const a:any=await authority();\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\",authority:null};\n if(String(a.writer)!==\"val_native\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n const mode=String(a.mode);\n if(mode===\"ACTIVE\")return {ok:true,epoch:Number(a.epoch),mode:\"ACTIVE\",authority:a};\n if(mode===\"PREPARED\")return {ok:true,epoch:Number(a.epoch),mode:\"PREPARED_READ_ONLY\",authority:a};\n return {ok:false,reason:\"AUTHORITY_MODE_NOT_ADMITTED\",authority:a};\n}\nconst ACQUIRE_RECONCILE_ATTEMPTS_R2=3;\ntype LeaseReconcileResultR2=\n | {kind:\"leased\";job:any;epoch:number;mode:string;acquisition_reconciled:true;acquisition_error:string}\n | {kind:\"none\";attempt_id:string}\n | {kind:\"outcome_unknown\";attempt_id:string;errors:string[]};\nexport async function reconcileExactLeaseAttemptR2(\n attempt:string,\n expectedEpoch:number,\n expectedMode:string,\n acquisitionError:unknown,\n):Promise{\n const errors:string[]=[];\n for(let i=0;i=1\n AND lease_expires_at>datetime('now')\n ORDER BY id`,args:[WORKER,INSTANCE,attempt]});\n const rows:any[]=r.rows||[];\n if(rows.length===0)return {kind:\"none\",attempt_id:attempt};\n if(rows.length!==1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,`ATTEMPT_CARDINALITY_CONFLICT_${rows.length}`]};\n }\n const job=rows[0];\n if(String(job.lease_instance_id)!==INSTANCE||String(job.lease_attempt_id)!==attempt||Number(job.transport_lease_generation)<1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,\"ATTEMPT_IDENTITY_POSTCONDITION_FAILED\"]};\n }\n return {\n kind:\"leased\",\n job,\n epoch:expectedEpoch,\n mode:expectedMode,\n acquisition_reconciled:true,\n acquisition_error:acquisitionError instanceof Error?acquisitionError.message:String(acquisitionError),\n };\n }catch(e){\n errors.push(e instanceof Error?e.message:String(e));\n }\n }\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors};\n}\nasync function recoverExpiredTransport(){\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const r:any=await tx.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at<=datetime('now') ORDER BY id`);\n const outcomes:any[]=[];\n for(const j of (r.rows||[])){\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION',\n 'receipt_policy','SIDE_RECEIPTS_DIAGNOSTIC_ONLY_NOT_COMPLETION_AUTHORITY',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner IS ? AND lease_instance_id IS ? AND lease_attempt_id IS ? AND transport_lease_generation=? AND lease_expires_at<=datetime('now')\n RETURNING id`,\n args:[j.id,j.lease_owner,j.lease_instance_id,j.lease_attempt_id,j.transport_lease_generation]});\n if((u.rows||[]).length)outcomes.push({id:j.id,state:\"FAILED\",reconciled_from_receipt:false,outcome_unknown:true});\n }\n await tx.commit();done=true;return{ok:true,outcomes};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function activeLeases(){\n const r:any=await sqlite.execute(`SELECT id,lease_owner,lease_instance_id,lease_attempt_id,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id`);\n return r.rows||[];\n}\nfunction atomicizeLeaseSql(sql:string){\n const setNeedle=`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')`;\n const retNeedle=\"RETURNING id,op,payload_json,priority,lease_expires_at\";\n if(sql.split(setNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_SET_SHAPE_DRIFT\");\n if(sql.split(retNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_RETURNING_SHAPE_DRIFT\");\n return sql.replace(setNeedle,`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')`)\n .replace(retNeedle,\"RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\");\n}\nasync function leaseOne(){\n const gate=await admit();if(!gate.ok)return {kind:\"fenced\",gate} as const;\n await recoverExpiredTransport();\n const active=await activeLeases();\n if(active.length>1)return {kind:\"conflict\",active} as const;\n if(active.length===1)return {kind:\"busy\",active:active[0]} as const;\n const preparedReadOnly=gate.mode===\"PREPARED_READ_ONLY\";\n const attempt=crypto.randomUUID();\n const expectedMode=String(gate.mode);\n let core:any;\n try{\n core=preparedReadOnly\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${JOB_TABLE} j\n WHERE j.state='READY' AND j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND 120\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE} x\n WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now')\n )\n ORDER BY\n CASE json_extract(j.payload_json,'$.args[0]')\n WHEN 'status' THEN 0\n WHEN 'verify-chain' THEN 1\n WHEN 'verify-claim-graph' THEN 2\n ELSE 3\n END,\n CASE WHEN j.priority>1000000000 THEN 1000000000 ELSE j.priority END DESC,\n j.created_at,j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt]})\n : EMERGENCY_MUTATIONS_FROZEN\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at>datetime('now')\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt,EMERGENCY_MUTATION_CANARY_JOB_ID,WORKER]})\n : await sqlite.execute({sql:atomicizeLeaseSql(leaseOneSql(JOB_TABLE)),args:[WORKER,INSTANCE,attempt,WORKER]});\n }catch(e){\n const rr=await reconcileExactLeaseAttemptR2(attempt,gate.epoch,expectedMode,e);\n if(rr.kind===\"leased\")return rr;\n if(rr.kind===\"none\")return {\n kind:\"acquisition_failed_no_bound_lease\",\n attempt_id:attempt,\n reason:e instanceof Error?e.message:String(e),\n } as const;\n return {kind:\"acquisition_outcome_unknown\",attempt_id:attempt,errors:rr.errors} as const;\n }\n const j:any=core.rows?.[0]??null;if(!j)return {kind:\"empty\"} as const;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode} as const;\n}\nasync function readQueueJob(id:string){\n const r:any=await sqlite.execute({sql:`SELECT * FROM ${JOB_TABLE} WHERE id=?`,args:[id]});\n return r.rows?.[0]??null;\n}\nasync function finishOncePreservingAttempt(job:any,expected:any){\n const r:any=await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,job.id,String(job.lease_owner||WORKER),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(r.rows||[]).length)return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"};\n return {ok:true,id:job.id,state:String(expected.state)};\n}\nasync function readMutationReceiptsExact(jobId:string,attemptId:string){\n await ensureMutationReceiptTable();\n const r:any=await sqlite.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE}\n WHERE job_id=? AND lease_attempt_id=?\n ORDER BY committed_at,job_id,lease_attempt_id`,args:[jobId,attemptId]});\n return r.rows||[];\n}\nfunction sameReceiptRow(a:any,b:any){\n const keys=[\"job_id\",\"lease_attempt_id\",\"lease_instance_id\",\"lease_owner\",\"transport_lease_generation\",\"authority_epoch\",\"command\",\"payload_sha256\",\"committed_generation\",\"event_head_hash\",\"result_json\",\"committed_at\"];\n return keys.every(k=>String(a?.[k]??\"\")===String(b?.[k]??\"\"));\n}\nasync function finalizeExpiredMutationFromReceiptExact(job:any,expected:any,receipt:any){\n await ensureMutationReceiptTable();\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const rr:any=await tx.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const rows:any[]=rr.rows||[];\n if(rows.length!==1||!sameReceiptRow(rows[0],receipt)){\n await tx.rollback();done=true;\n return {ok:false,reason:rows.length>1?\"AMBIGUOUS_MUTATION_RECEIPTS\":\"MUTATION_RECEIPT_CHANGED_OR_MISSING\"};\n }\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,\n lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='FAILED' AND op=? AND payload_json=? AND transport_lease_generation=?\n AND result_json IS NULL AND lease_owner IS NULL AND lease_expires_at IS NULL\n AND (lease_instance_id IS NULL OR lease_instance_id=?)\n AND (lease_attempt_id IS NULL OR lease_attempt_id=?)\n AND json_valid(error_json)=1\n AND json_extract(error_json,'$.classification')='TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION'\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,String(job.lease_instance_id),String(job.lease_attempt_id),\n String(job.id),String(job.op),String(job.payload_json),Number(job.transport_lease_generation),String(job.lease_instance_id),String(job.lease_attempt_id)]});\n if((u.rows||[]).length!==1){\n await tx.rollback();done=true;\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_UPDATE_REJECTED\"};\n }\n await tx.commit();done=true;\n return {ok:true,receipt_job_id:String(receipt.job_id)};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function finalizeJobExactAttempt(job:any,epoch:number,mode:string,command:string,dispatchOk:boolean,dispatchValue:any,preDispatchGeneration:number|undefined){\n const helper:any=await resultFinalizationHelperV1();\n const boundJob={...job,lease_owner:WORKER,lease_instance_id:String(job.lease_instance_id),lease_attempt_id:String(job.lease_attempt_id)};\n return await helper.finalizeExactAttemptV1({\n job:boundJob,\n expectedAuthorityEpoch:Number(epoch),\n expectedAuthorityMode:String(mode),\n command:String(command),\n dispatchOk:dispatchOk===true,\n dispatchValue,\n preDispatchGeneration,\n deps:{\n readAuthority:normalizedFinalizationAuthority,\n readJob:readQueueJob,\n readCanonicalGeneration:canonicalGeneration,\n finishOncePreservingAttempt,\n readMutationReceipts:readMutationReceiptsExact,\n finalizeExpiredMutationFromReceipt:finalizeExpiredMutationFromReceiptExact,\n nowIso:()=>new Date().toISOString().replace(\"Z\",\"+00:00\")\n }\n });\n}\nconst CHAIN_FAILURE_READ_ONLY=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; kernel allowlist still fences every unqualified mutator.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nfunction brainCommand(raw:string){\n try{const p=JSON.parse(raw);return Array.isArray(p?.args)?String(p.args[0]||\"\"):\"\"}catch{return \"\"}\n}\nasync function chainCircuitBreaker(raw:string,jobId:string){\n const command=brainCommand(raw);\n if(CHAIN_FAILURE_READ_ONLY.has(command))return {allow:true,command,integrity:null};\n const emergencyCanary=EMERGENCY_MUTATIONS_FROZEN&&jobId===EMERGENCY_MUTATION_CANARY_JOB_ID&&command===\"register-agent\";\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary)return {allow:false,command,integrity:{ok:false,reason:\"EPOCH2_MUTATIONS_EMERGENCY_FROZEN_PENDING_ATOMICITY_REPAIR\"}};\n let chain:any,graph:any;\n try{chain=await verifyBrainChain()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CHAIN_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n if(chain?.ok!==true)return {allow:false,command,integrity:{chain,graph:null}};\n try{graph=await verifyBrainClaimGraph()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CLAIM_GRAPH_EXCEPTION\",detail:e instanceof Error?e.message:String(e),chain}}}\n if(graph?.ok!==true)return {allow:false,command,integrity:{chain,graph}};\n return {allow:true,command,integrity:{chain,graph}};\n}\nfunction parseArr(v:any){try{const x=JSON.parse(String(v??\"[]\"));return Array.isArray(x)?x:[]}catch{return []}}\nasync function localCommitSnapshot(taskId:string,agent:string){\n const t:any=(await sqlite.execute({sql:`SELECT id,workstream,state,lease_owner,lease_generation,lease_expires_at,context_manifest,success_condition,decision_value,depends_json,requires_json,writes_json,guards_json\n FROM brainvn_tasks WHERE id=?`,args:[taskId]})).rows?.[0]??null;\n if(!t)return{ok:false,reason:\"TASK_MISSING\"};\n if(String(t.state)!==\"LEASED\"||String(t.lease_owner)!==agent)return{ok:false,reason:\"LEASE_CHANGED\",task:t};\n if(t.lease_expires_at&&String(t.lease_expires_at)<=new Date().toISOString().replace(\"Z\",\"+00:00\"))return{ok:false,reason:\"LEASE_EXPIRED\",task:t};\n const deps=parseArr(t.depends_json),guards=parseArr(t.guards_json);\n const depRows:any[]=[];\n for(const id of deps){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(id)]})).rows?.[0]??null;\n depRows.push(r??{id:String(id),state:\"MISSING\"});\n }\n const guardRows:any[]=[];\n let retryGuardSnapshotComplete=true;\n for(const g of guards){\n if(g?.type===\"task_complete\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),state:\"MISSING\"}});\n }else if(g?.type===\"claim_verified\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,status,updated_at FROM brainvn_claims WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),status:\"MISSING\"}});\n }else{\n retryGuardSnapshotComplete=false;\n guardRows.push({guard:g,resolved:null});\n }\n }\n const ws:any=(await sqlite.execute({sql:\"SELECT id,mission,verified_state FROM brainvn_workstreams WHERE id=?\",args:[String(t.workstream)]})).rows?.[0]??null;\n const stable={\n task:{id:t.id,workstream:t.workstream,state:t.state,lease_owner:t.lease_owner,lease_generation:t.lease_generation,\n context_manifest:t.context_manifest,success_condition:t.success_condition,decision_value:t.decision_value,\n depends_json:t.depends_json,requires_json:t.requires_json,writes_json:t.writes_json,guards_json:t.guards_json},\n dependencies:depRows,guards:guardRows,workstream_semantics:ws\n };\n return{ok:true,stable,lease_expires_at:t.lease_expires_at,workstream:String(t.workstream),retry_guard_snapshot_complete:retryGuardSnapshotComplete};\n}\nfunction sameSnapshot(a:any,b:any){return JSON.stringify(a?.stable)===JSON.stringify(b?.stable)}\nfunction mutationFields(args:any[]){\n let agent=\"\",task=\"\";\n for(let i=1;i{\n let found:number|null=null;\n for(let i=1;iJSON.stringify(k)+\":\"+cohortCanon(x[k])).join(\",\")+\"}\";\n}\nfunction cohortStrictJson(s:any,kind:string){\n try{return JSON.parse(String(s))}\n catch{throw new Error(\"COHORT_BAD_JSON_\"+kind)}\n}\nfunction cohortStrictObjectJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!v||typeof v!==\"object\"||Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_OBJECT\");\n return v;\n}\nfunction cohortStrictListJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_LIST\");\n return v;\n}\nfunction cohortStrictStringListJson(s:any,kind:string){\n const v=cohortStrictListJson(s,kind);\n if(v.some((x:any)=>typeof x!==\"string\"||!x))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_STRING_LIST\");\n return v;\n}\nfunction cohortCleanCaps(x:any){\n if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v))throw new Error(\"COHORT_BAD_CAPS\");\n return [...new Set(x)].sort();\n}\nfunction cohortFlagMap(args:any[],start:number,allowed:Set){\n if(!Array.isArray(args)||args.some(x=>typeof x!==\"string\"))return null;\n if((args.length-start)%2!==0)return null;\n const out:any={};\n for(let i=start;i=args.length)return null;\n const name=k.slice(2);\n if(!allowed.has(name)||Object.prototype.hasOwnProperty.call(out,name))return null;\n out[name]=String(args[i+1]);\n }\n return out;\n}\nfunction cohortExactEnvelope(row:any){\n if(String(row?.op)!==\"brain\")return null;\n let q:any;\n try{q=JSON.parse(String(row.payload_json))}\n catch{return null}\n if(!q||typeof q!==\"object\"||Array.isArray(q))return null;\n const keys=Object.keys(q).sort();\n if(keys.length!==2||keys[0]!==\"args\"||keys[1]!==\"timeout\")return null;\n if(!Array.isArray(q.args)||!Number.isInteger(q.timeout)||q.timeout<1||q.timeout>120)return null;\n return q;\n}\nfunction cohortParseRegister(row:any){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"register-agent\"||typeof q.args[1]!==\"string\"||!q.args[1])return null;\n const f=cohortFlagMap(q.args,2,new Set([\"workstream\",\"role\",\"type\",\"capabilities\"]));if(!f)return null;\n if(f.workstream!==\"global\"||!f.role||f.type!==\"CHAT_UNPROVEN\"||typeof f.capabilities!==\"string\")return null;\n let caps:any;try{caps=cohortCleanCaps(JSON.parse(f.capabilities))}catch{return null}\n return {row,q,member:{id:String(q.args[1]),workstream:\"global\",role:String(f.role),type:\"CHAT_UNPROVEN\",parent:null,capabilities:caps}};\n}\nfunction cohortParseClaim(row:any,agentId:string){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"claim\")return null;\n const f=cohortFlagMap(q.args,1,new Set([\"agent\",\"mode\",\"lease-seconds\",\"constitution-version\",\"constitution-sha256\",\"registry-version\"]));if(!f)return null;\n if(f.agent!==agentId)return null;\n if(f.mode!==undefined&&f.mode!==\"INTERACTIVE\")return null;\n if(f[\"lease-seconds\"]!==undefined&&f[\"lease-seconds\"]!==\"1800\")return null;\n return {row,q};\n}\nfunction cohortIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\"prevent_self_review\",\"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n return ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\";\n}\nasync function cohortTxRows(tx:any,sql:string,args:any[]=[]){\n const r:any=await tx.execute({sql,args});return r.rows||[];\n}\nasync function cohortTxOne(tx:any,sql:string,args:any[]=[]){\n return (await cohortTxRows(tx,sql,args))[0]??null;\n}\nasync function cohortSnapshot(tx:any){\n return {\n workstreams:await cohortTxRows(tx,\"SELECT * FROM brainvn_workstreams ORDER BY id\"),\n agents:await cohortTxRows(tx,\"SELECT * FROM brainvn_agents ORDER BY id\"),\n tasks:await cohortTxRows(tx,\"SELECT * FROM brainvn_tasks ORDER BY id\"),\n claims:await cohortTxRows(tx,\"SELECT * FROM brainvn_claims ORDER BY id\"),\n deps:await cohortTxRows(tx,\"SELECT * FROM brainvn_claim_deps ORDER BY parent_claim,child_claim\"),\n artifacts:await cohortTxRows(tx,\"SELECT * FROM brainvn_artifacts ORDER BY sha256\")\n };\n}\nfunction cohortParseTask(t:any){\n return {\n row:t,\n ctx:cohortStrictObjectJson(t.context_manifest,\"CTX\"),\n req:cohortStrictStringListJson(t.requires_json,\"REQ\"),\n deps:cohortStrictListJson(t.depends_json,\"DEPS\"),\n guards:cohortStrictListJson(t.guards_json,\"GUARDS\"),\n writes:cohortStrictStringListJson(t.writes_json,\"WRITES\")\n };\n}\nfunction cohortOverlap(a:string[],b:string[]){const B=new Set(b);return a.some(x=>B.has(x))}\nasync function cohortActivationOk(tx:any){\n const meta:any=await cohortTxOne(tx,\"SELECT predecessor_event_count FROM brainvn_epoch_meta WHERE id=1\");\n const t:any=await cohortTxOne(tx,\"SELECT state,result_event_id FROM brainvn_tasks WHERE id=?\",[COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK]);\n if(!meta||!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return false;\n const localSeq=Number(t.result_event_id)-Number(meta.predecessor_event_count);\n if(!Number.isInteger(localSeq)||localSeq<1)return false;\n const ev:any=await cohortTxOne(tx,\"SELECT agent_id,type,task_id FROM brainvn_epoch_events WHERE local_seq=?\",[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK||!ev.agent_id)return false;\n const a:any=await cohortTxOne(tx,\"SELECT type FROM brainvn_agents WHERE id=?\",[String(ev.agent_id)]);\n return !!a&&String(a.type)!==\"CHAT_UNPROVEN\";\n}\nfunction cohortOrderedReadySql(){\n const raw=leaseOneSql(JOB_TABLE);\n const start=raw.indexOf(\"SELECT j.id FROM \");\n const limit=raw.indexOf(\"LIMIT 1\",start);\n if(start<0||limit<0)throw new Error(\"COHORT_LEASE_ORDER_SHAPE_DRIFT\");\n let inner=raw.slice(start,limit)+\"LIMIT \"+COHORT_ADMISSION_FASTPATH_V3R2R1_SCAN_JOBS;\n inner=inner.replace(\"SELECT j.id FROM \",\"SELECT j.rowid AS queue_rowid,j.* FROM \");\n const qCount=(inner.match(/\\?/g)||[]).length;\n if(qCount!==1)throw new Error(\"COHORT_LEASE_ORDER_PLACEHOLDER_DRIFT_\"+qCount);\n return inner;\n}\nasync function cohortBaseReceipt(){\n const chain:any=await verifyBrainChain();\n if(chain?.ok!==true)return {ok:false,reason:\"CHAIN_NOT_VERIFIED\",chain};\n const graph:any=await verifyBrainClaimGraph();\n if(graph?.ok!==true)return {ok:false,reason:\"CLAIM_GRAPH_NOT_VERIFIED\",graph};\n const tx:any=await (sqlite as any).transaction(\"read\");let done=false;\n try{\n const meta:any=await cohortTxOne(tx,\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const authority:any=await cohortTxOne(tx,\"SELECT epoch,writer,mode,source_generation,source_head FROM \"+AUTH_TABLE+\" WHERE id=1\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||Number(meta.generation)!==Number(chain.generation)||String(meta.event_head_hash)!==String(chain.stored_head)){\n await tx.rollback();done=true;return {ok:false,reason:\"CHAIN_RECEIPT_STALE\"};\n }\n if(!authority||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n await tx.rollback();done=true;return {ok:false,reason:\"AUTHORITY_NOT_ACTIVE\"};\n }\n await tx.commit();done=true;\n return {ok:true,generation:Number(meta.generation),head:String(meta.event_head_hash),admission_digest:digest,\n authority:{epoch:Number(authority.epoch),writer:String(authority.writer),mode:String(authority.mode),\n source_generation:Number(authority.source_generation),source_head:String(authority.source_head)}};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}return {ok:false,reason:e instanceof Error?e.message:String(e)}}\n}\nfunction cohortEventBody(e:any){\n return cohortCanon({event_uuid:e.event_uuid,ts:e.ts,workstream:e.workstream,agent_id:e.agent_id,task_id:e.task_id,type:e.type,payload:e.payload,prev_hash:e.prev_hash});\n}\nasync function cohortEventHash(e:any){return await sha256Text(cohortEventBody(e))}\nfunction cohortNow(ms=Date.now()){return new Date(ms).toISOString().replace(\"Z\",\"+00:00\")}\nasync function tryCohortAdmissionFastpathV3R2R1(maxPairs:number){\n if(!COHORT_ADMISSION_FASTPATH_V3R2R1_ENABLED||maxPairsdatetime('now') ORDER BY id LIMIT 2\");\n if(activeInside.length){await tx.rollback();done=true;return {kind:\"not_applicable\"} as const}\n const meta:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_epoch_meta WHERE id=1\");\n const ws:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_workstreams WHERE id='global'\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||!ws||Number(meta.generation)!==Number(base.generation)||String(meta.event_head_hash)!==String(base.head)||digest!==String(base.admission_digest)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_BASE_DRIFT\"} as const;\n }\n if(!(await cohortActivationOk(tx))){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_ACTIVATION_NOT_VERIFIED\"} as const;\n }\n const ordered:any[]=await cohortTxRows(tx,cohortOrderedReadySql(),[WORKER]);\n const pairs:any[]=[];const seen=new Set();\n const pairCap=Math.min(COHORT_ADMISSION_FASTPATH_V3R2R1_MAX_PAIRS,maxPairs);\n for(let i=0;i+1[String(a.id),a]));\n for(const p of pairs)if(existing.has(p.reg.member.id)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_EXISTING_AGENT\"} as const;\n }\n let ready:any[],leased:any[];\n try{\n ready=state.tasks.filter((t:any)=>String(t.workstream)===\"global\"&&String(t.state)===\"READY\")\n .sort((a:any,b:any)=>Number(b.priority)-Number(a.priority)||String(a.id).localeCompare(String(b.id)))\n .map((t:any)=>cohortParseTask(t));\n leased=state.tasks.filter((t:any)=>String(t.state)===\"LEASED\").map((t:any)=>cohortParseTask(t));\n }catch{\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_SCHEDULER_SHAPE_FALLBACK\"} as const;\n }\n const used=new Set(),activeWrites:string[][]=leased.map((p:any)=>p.writes),assignments:any[]=[];\n for(const p of pairs){\n const m=p.reg.member,C=new Set(m.capabilities);let chosen:any=null;\n for(const t0 of ready){\n const t=t0.row;\n if(used.has(String(t.id)))continue;\n if(!t.dedupe_key)continue;\n if(t.assigned_agent!==null&&String(t.assigned_agent)!==m.id)continue;\n if(t0.ctx.execution_allowed===false)continue;\n const sensitive=cohortIndependenceSensitive(new Set(t0.req),t0.ctx);\n if(sensitive&&(m.type===\"CHAT_UNPROVEN\"||COHORT_EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true))continue;\n if(t0.req.some((x:string)=>COHORT_NON_AGENT_CAPS.has(x)))continue;\n if(t0.req.some((x:string)=>!C.has(x)))continue;\n if(t0.deps.length||t0.guards.length){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_DYNAMIC_CAUSAL_FALLBACK\"} as const;\n }\n if(activeWrites.some((x:string[])=>cohortOverlap(t0.writes,x)))continue;\n chosen=t0;used.add(String(t.id));activeWrites.push(t0.writes);break;\n }\n if(!chosen){await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_NO_READY_FALLBACK\"} as const}\n assignments.push({pair:p,member:m,task:chosen});\n }\n\n const queueAttempts:any[]=[];\n for(const a of assignments){\n for(const kind of [\"reg\",\"claim\"]){\n const qr=a.pair[kind].row,attempt=crypto.randomUUID();\n const u:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+\"+LEASE_SECONDS+\" seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now') WHERE rowid=? AND id=? AND state='READY' AND op=? AND payload_json=? RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\",\n args:[WORKER,INSTANCE,attempt,Number(qr.queue_rowid),String(qr.id),String(qr.op),String(qr.payload_json)]});\n const row:any=u.rows?.[0]??null;if(!row)throw new Error(\"COHORT_QUEUE_CAS_FAILED_\"+String(qr.id));\n queueAttempts.push({...row,kind,agent_id:a.member.id});\n }\n }\n\n const startGen=Number(meta.generation),startHead=String(meta.event_head_hash);\n let g=startGen,head=startHead;\n const maxSeq:any=await cohortTxOne(tx,\"SELECT COALESCE(MAX(local_seq),0) n FROM brainvn_epoch_events\");\n let seq=Number(maxSeq?.n??0);\n const events:any[]=[],agents:any[]=[],taskUpdates:any[]=[],results:any[]=[];\n const baseMs=Date.now();\n for(let i=0;iArray.from({length:count},()=>(\"(\" + Array.from({length:n},()=>\"?\").join(\",\") + \")\")).join(\",\");\n const aArgs:any[]=[];for(const a of agents)aArgs.push(a.id,a.parent_id,a.type,a.workstream,a.role,a.status,a.boot_generation,a.last_generation,a.last_seen,a.capabilities_json);\n await tx.execute({sql:\"INSERT INTO brainvn_agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES \"+valueRows(10,agents.length),args:aArgs});\n const taskIds=taskUpdates.map(x=>x.id);\n const ownerCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),genCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),expCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),updCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \");\n const tArgs:any[]=[];for(const t of taskUpdates)tArgs.push(t.id,t.owner);for(const t of taskUpdates)tArgs.push(t.id,t.lease_generation);for(const t of taskUpdates)tArgs.push(t.id,t.lease_expires_at);for(const t of taskUpdates)tArgs.push(t.id,t.updated_at);tArgs.push(...taskIds);\n const tu:any=await tx.execute({sql:\"UPDATE brainvn_tasks SET state='LEASED',lease_owner=CASE id \"+ownerCase+\" END,lease_mode='INTERACTIVE',lease_generation=CASE id \"+genCase+\" END,lease_expires_at=CASE id \"+expCase+\" END,updated_at=CASE id \"+updCase+\" END WHERE id IN (\"+taskIds.map(()=>\"?\").join(\",\")+\") AND state='READY' RETURNING id\",args:tArgs});\n if((tu.rows||[]).length!==taskUpdates.length)throw new Error(\"COHORT_TASK_BULK_CAS_MISMATCH\");\n const eArgs:any[]=[];for(const e of events)eArgs.push(e.local_seq,e.event_uuid,e.ts,e.workstream,e.agent_id,e.task_id,e.type,e.payload_json,e.prev_hash,e.event_hash,e.transaction_generation);\n await tx.execute({sql:\"INSERT INTO brainvn_epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation) VALUES \"+valueRows(11,events.length),args:eArgs});\n const mu:any=await tx.execute({sql:\"UPDATE brainvn_epoch_meta SET generation=?,event_head_hash=?,new_event_count=new_event_count+? WHERE id=1 AND generation=? AND event_head_hash=? RETURNING generation\",args:[g,head,events.length,startGen,startHead]});\n if(!(mu.rows||[]).length)throw new Error(\"COHORT_META_CAS_MISMATCH\");\n await tx.execute({sql:\"UPDATE brainvn_workstreams SET head_generation=?,updated_at=? WHERE id='global'\",args:[g,cohortNow()]});\n\n const byAgent=new Map(results.map(x=>[x.agent_id,x]));\n const outputItems:any[]=[];\n for(const q of queueAttempts){\n const rr:any=byAgent.get(q.agent_id),result=q.kind===\"reg\"?rr.regResult:rr.claimResult;\n const committedGeneration=q.kind===\"reg\"?rr.regGeneration:rr.claimGeneration;\n const committedHead=q.kind===\"reg\"?rr.regHead:rr.claimHead;\n const committedAt=q.kind===\"reg\"?rr.regTs:rr.claimTs;\n const payloadSha=await sha256Text(String(q.payload_json));\n await tx.execute({sql:\"INSERT INTO \"+MUTATION_RECEIPT_TABLE+\"(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\",\n args:[String(q.id),String(q.lease_attempt_id),String(q.lease_instance_id),WORKER,Number(q.transport_lease_generation),Number(authority.epoch),\n q.kind===\"reg\"?\"register-agent\":\"claim\",payloadSha,committedGeneration,committedHead,cohortCanon(result),committedAt]});\n const fq:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? RETURNING id,state\",\n args:[legacyEnvelope(result),String(q.id),WORKER,String(q.lease_instance_id),String(q.lease_attempt_id),Number(q.transport_lease_generation),String(q.op),String(q.payload_json)]});\n if((fq.rows||[]).length!==1)throw new Error(\"COHORT_QUEUE_FINALIZE_CAS_FAILED_\"+String(q.id));\n outputItems.push({id:String(q.id),transport_lease_generation:Number(q.transport_lease_generation),attempt_id:String(q.lease_attempt_id),\n dispatch_ok:true,result,finish:{ok:true,id:String(q.id),state:\"COMPLETE\",path:\"COHORT_ATOMIC_SAME_DB\"},\n cohort_fastpath:{schema:\"COHORT_ADMISSION_FASTPATH_V3R2R1_PRODUCTION_V1\",candidate_sha256:COHORT_ADMISSION_FASTPATH_V3R2R1_CANDIDATE_SHA256,\n pair_count:assignments.length,atomic_same_db:true,serial_pairwise_prefix:true}});\n }\n\n await tx.commit();done=true;\n const postChain:any=await verifyBrainChain(),postGraph:any=await verifyBrainClaimGraph();\n return {kind:\"completed\",items:outputItems,pairs:assignments.length,post_integrity:{chain_ok:postChain?.ok===true,claim_graph_ok:postGraph?.ok===true,\n generation:postChain?.generation,head:postChain?.stored_head},base_generation:startGen,post_generation:g} as const;\n }catch(e){\n if(!done){try{await tx.rollback()}catch{}}\n return {kind:\"not_applicable\",reason:e instanceof Error?e.message:String(e)} as const;\n }\n}\n\nasync function executeJob(job:any,epoch:number){\n const raw=String(job.payload_json);\n const fallbackCommand=brainCommand(raw);\n let command=fallbackCommand;\n let preDispatchGeneration:number|undefined=undefined;\n if(String(job.op)!==\"brain\")return {ok:false,value:{classification:\"VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP\",op:String(job.op)},command,preDispatchGeneration};\n try{\n const gate=await chainCircuitBreaker(raw,String(job.id));\n command=String(gate.command||fallbackCommand||\"\");\n if(!gate.allow)return {ok:false,value:{\n classification:\"VAL_NATIVE_CHAIN_INTEGRITY_CIRCUIT_BREAKER\",\n command:command||\"UNKNOWN\",\n integrity:gate.integrity,\n retry_policy:\"RESTORE_VERIFIED_CHAIN_THEN_SUBMIT_NEW_JOB_ID\",\n canonical_dispatch_performed:false\n },command,preDispatchGeneration};\n if(CHAIN_FAILURE_READ_ONLY.has(command))preDispatchGeneration=await canonicalGeneration();\n const value=await dispatchWithStableMutationRetry(raw,boundTransportContext(job,epoch));\n return {ok:true,value,command,preDispatchGeneration};\n }catch(e){\n return {ok:false,value:{type:e instanceof Error?e.name:\"Error\",detail:e instanceof Error?e.message:String(e)},command,preDispatchGeneration};\n }\n}\nexport async function drain(maxJobs=32){\n const started=new Date().toISOString(),items:any[]=[];\n let runtime_tick:any=null;\n try{runtime_tick=await emitRuntimeTick();}\n catch(e){runtime_tick={ok:false,emitted:false,reason:\"RUNTIME_TICK_WRITE_FAILED\",detail:e instanceof Error?e.message:String(e)};}\n while(items.length=COHORT_ADMISSION_FASTPATH_V3R2R1_MIN_PAIRS*2){\n const cohort:any=await tryCohortAdmissionFastpathV3R2R1(Math.floor(remaining/2));\n if(cohort.kind===\"completed\"){\n items.push(...cohort.items);\n if(cohort.post_integrity?.chain_ok!==true||cohort.post_integrity?.claim_graph_ok!==true){\n return {ok:false,started,finished:new Date().toISOString(),runtime_tick,\n stop:{kind:\"cohort_post_integrity_failed\",post_integrity:cohort.post_integrity},processed:items.length,items};\n }\n continue;\n }\n }\n const l:any=await leaseOne();\n if(l.kind!==\"leased\"){\n const acquisitionFault=l.kind===\"acquisition_failed_no_bound_lease\"||l.kind===\"acquisition_outcome_unknown\";\n return {ok:!acquisitionFault&&l.kind!==\"conflict\"&&l.kind!==\"fenced\",started,finished:new Date().toISOString(),runtime_tick,stop:l,processed:items.length,items};\n }\n const ex=await executeJob(l.job,l.epoch);\n const fin=await finalizeJobExactAttempt(l.job,l.epoch,String(l.mode),String(ex.command||brainCommand(String(l.job.payload_json))),ex.ok,ex.value,ex.preDispatchGeneration);\n items.push({id:l.job.id,transport_lease_generation:l.job.transport_lease_generation,attempt_id:l.job.lease_attempt_id,dispatch_ok:ex.ok,result:ex.value,finish:fin});\n if(!fin.ok)return {ok:false,started,finished:new Date().toISOString(),runtime_tick,stop:fin,processed:items.length,items};\n }\n return {ok:true,started,finished:new Date().toISOString(),runtime_tick,stop:{kind:\"max_jobs\"},processed:items.length,items};\n}\nexport default drain;\n",[],[264,352],["D",1789142945808],[281],[264],["D",1789142237758],["D",1789489912439],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_126":399,"_400":401,"_402":403,"_404":24,"_405":24,"_406":24,"_407":57,"_408":-5,"_409":-7,"_410":-7,"_411":61,"_412":24,"_413":24,"_414":-5,"_415":24,"_416":24,"_417":24,"_418":-5},"ENV",{"_370":371,"_372":373,"_374":88,"_375":376,"_377":378,"_379":380,"_381":382,"_383":384,"_385":386,"_387":388,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v26