[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_265":266,"_267":268},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_107":88,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",19,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","atomic_admission_v3_a71_live_canary.ts","latestPath","fileId","1c387b6e-abbe-11f1-a728-1607ee4eb77e","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ISSUER=\"https://mosadek--02308a54abbe11f1bb881607ee4eb77e.web.val.run\";\nconst WORKER=\"https://mosadek--032fbd1cabbe11f1a3d61607ee4eb77e.web.val.run\";\n\nasync function req(url:string,method=\"GET\",body?:unknown){\n const r=await fetch(url,{method,headers:body?{\"content-type\":\"application/json\"}:undefined,body:body?JSON.stringify(body):undefined});\n let j:any=null; try{j=await r.json();}catch{}\n return {status:r.status,body:j};\n}\nfunction must(cond:boolean,msg:string){ if(!cond) throw new Error(msg); }\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");}\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s))));}\n\nconst report:any={schema:\"ATOMIC_EXTERNAL_ADMISSION_V3_A71_LIVE_FALSIFICATION_V1\",started_at:new Date().toISOString(),checks:[]};\nfunction check(name:string,cond:boolean,detail:any){report.checks.push({name,pass:cond,detail});must(cond,name);}\n\nconst injection=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"x\"},ttl_seconds:60,capabilities:[\"human_authority_approval\"]});\ncheck(\"issuer_rejects_caller_capability_injection\",injection.status===400,injection);\n\nconst issue=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"ATOMIC_V3_A71_CANARY\"},ttl_seconds:60});\ncheck(\"issue_created\",issue.status===201,issue);\ncheck(\"issuer_generated_identity\",typeof issue.body.logical_agent_id===\"string\"&&issue.body.logical_agent_id.startsWith(\"ext-v3-\"),issue.body);\ncheck(\"issuer_fixed_workstream\",issue.body.workstream===\"global\",issue.body);\ncheck(\"issuer_fixed_capabilities\",JSON.stringify(issue.body.capabilities)===JSON.stringify([\"deterministic_execution\",\"sha256\"]),issue.body);\ncheck(\"issuer_no_human_authority\",issue.body.human_authority_approval===false,issue.body);\n\nconst extra=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:issue.body.execution_incarnation_id,capabilities:[\"human_authority_approval\"]});\ncheck(\"worker_rejects_extra_fields\",extra.status===400,extra);\n\nconst wrong=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:crypto.randomUUID()});\ncheck(\"worker_rejects_wrong_incarnation\",wrong.status===409&&wrong.body.error===\"EXECUTION_INCARNATION_MISMATCH\",wrong);\n\nconst expected=await sha(\"ATOMIC_V3_A71_CANARY\");\nconst good=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:issue.body.execution_incarnation_id});\ncheck(\"valid_execute\",good.status===200&&good.body.result?.sha256===expected,good);\ncheck(\"receipt_bound_identity\",good.body.receipt?.logical_agent_id===issue.body.logical_agent_id&&good.body.receipt?.execution_incarnation_id===issue.body.execution_incarnation_id,good.body.receipt);\ncheck(\"receipt_fixed_caps\",JSON.stringify(good.body.receipt?.capabilities)===JSON.stringify([\"deterministic_execution\",\"sha256\"]),good.body.receipt);\ncheck(\"receipt_no_human_authority\",good.body.receipt?.human_authority_approval===false,good.body.receipt);\n\nconst replay=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:issue.body.execution_incarnation_id});\ncheck(\"replay_rejected\",replay.status===409,replay);\nconst attempt=await req(WORKER+\"/attempt?challenge=\"+issue.body.challenge);\ncheck(\"readback_complete\",attempt.status===200&&attempt.body.state===\"COMPLETE\",attempt);\n\nconst exp=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"EXPIRE\"},ttl_seconds:60});\ncheck(\"expiry_issue\",exp.status===201,exp);\nawait sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET expires_at=? WHERE challenge=?\",args:[new Date(Date.now()-1000).toISOString(),exp.body.challenge]});\nconst expRun=await req(WORKER+\"/execute\",\"POST\",{challenge:exp.body.challenge,execution_incarnation_id:exp.body.execution_incarnation_id});\ncheck(\"expired_precommit_fails_closed\",expRun.status===410&&expRun.body.error===\"PRECOMMIT_EXPIRED\",expRun);\n\nconst unk=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"UNKNOWN\"},ttl_seconds:60});\ncheck(\"unknown_issue\",unk.status===201,unk);\nconst past=new Date(Date.now()-1000).toISOString();\nawait sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='RESERVED',reserved_at=?,reservation_expires_at=? WHERE challenge=?\",args:[past,past,unk.body.challenge]});\nconst unkRun=await req(WORKER+\"/execute\",\"POST\",{challenge:unk.body.challenge,execution_incarnation_id:unk.body.execution_incarnation_id});\ncheck(\"expired_reservation_terminalizes_unknown\",unkRun.status===409&&unkRun.body.error===\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\",unkRun);\nconst unkRead=await req(WORKER+\"/attempt?challenge=\"+unk.body.challenge);\ncheck(\"unknown_readback_terminal\",unkRead.status===200&&unkRead.body.state===\"UNKNOWN_OUTCOME\"&&unkRead.body.terminal_reason===\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\",unkRead);\n\nreport.completed_at=new Date().toISOString();\nreport.pass=report.checks.every((x:any)=>x.pass);\nreport.brain_queue_traffic_submitted=false;\nreport.canonical_brain_mutation=false;\nreport.human_authority_approval=false;\nreport.direct_sprites_calls=0;\nreport.additional_out_of_pocket_spend_usd=0;\nconsole.log(JSON.stringify(report,null,2));\n","createdAt",["D",1788896843049],"branchVersion","branchId","bf3f4bf9-6775-417b-8b3b-0fbc443488fb","id","b4d20ed1-eb6f-490c-90dd-6aff6508c246","project-brain-exec-issuer-v1",["D",1788893645758],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Isolated execution-incarnation issuer canary","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","aa7fce52-abb6-11f1-b143-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","b4d20ed1eb6f490c90dd6aff6508c246","tursoHostname","b4d20ed1eb6f490c90dd6aff6508c246-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789502486629],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",96,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":260,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":261,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":262,"_82":263,"_84":264,"_86":24},"tree",[219,220,221,222,223,224,225,226,227,228],"files",[219,220,221,222,223,224,225,226,227,228],"counts",{"_208":61,"_209":210,"_211":61,"_212":213,"_214":215},"contents",[129,130,131,132,133,134,135,136,137,138],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":205,"_31":27,"_29":30,"_142":-5,"_39":40,"_38":14,"_144":57,"_36":206,"_13":61,"_32":33,"_34":35,"_23":24,"_148":-5,"_26":207},{"_41":198,"_31":199,"_29":200,"_142":-5,"_39":40,"_38":201,"_144":57,"_36":202,"_13":61,"_32":146,"_34":203,"_23":24,"_148":-5,"_26":204},{"_41":191,"_31":192,"_29":193,"_142":-5,"_39":40,"_38":194,"_144":57,"_36":195,"_13":61,"_32":146,"_34":196,"_23":24,"_148":-5,"_26":197},{"_41":184,"_31":185,"_29":186,"_142":-5,"_39":40,"_38":187,"_144":24,"_36":188,"_13":61,"_32":146,"_34":189,"_23":24,"_148":-5,"_26":190},{"_41":177,"_31":178,"_29":179,"_142":-5,"_39":40,"_38":180,"_144":57,"_36":181,"_13":61,"_32":146,"_34":182,"_23":24,"_148":-5,"_26":183},{"_41":171,"_31":172,"_29":173,"_142":-5,"_39":40,"_38":154,"_144":57,"_36":174,"_13":61,"_32":33,"_34":175,"_23":24,"_148":-5,"_26":176},{"_41":164,"_31":165,"_29":166,"_142":-5,"_39":40,"_38":167,"_144":57,"_36":168,"_13":61,"_32":146,"_34":169,"_23":24,"_148":-5,"_26":170},{"_41":157,"_31":158,"_29":159,"_142":-5,"_39":40,"_38":160,"_144":24,"_36":161,"_13":61,"_32":33,"_34":162,"_23":24,"_148":-5,"_26":163},{"_41":150,"_31":151,"_29":55,"_142":-5,"_39":40,"_38":152,"_144":57,"_36":153,"_13":154,"_32":146,"_34":155,"_23":24,"_148":-5,"_26":156},{"_41":139,"_31":140,"_29":141,"_142":-5,"_39":40,"_38":143,"_144":57,"_36":145,"_13":61,"_32":146,"_34":147,"_23":24,"_148":-5,"_26":149},"d0e27730-f730-44a8-bc7d-a206fc4051b0","precommit_v3_candidate.ts","0d6c386e-abbe-11f1-9945-1607ee4eb77e","parentId",16,"latest",["D",1788896818243],"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_EXECUTION_PRECOMMIT_V3_CANDIDATE\";\nconst ISSUER=\"mosadek/project-brain-exec-issuer-v1/precommit_v3_candidate.ts\";\nconst PURPOSE=\"FIRST_REAL_SUPERHERO_EXECUTION_INCARCATION_CANARY_V3\";\nconst WORKSTREAM=\"global\";\nconst AUTHORITY_EPOCH=2;\nconst CREDENTIAL_GENERATION=1;\nconst ATTEMPT_GENERATION=1;\nconst TTL_MS=90_000;\nconst FIXED_CAPABILITIES=[\"deterministic_execution\",\"sha256\"] as const;\nconst FIXED_TASK={op:\"sha256_utf8\",input:\"FIRST_REAL_SUPERHERO_EXECUTION_INCARCATION_CANARY_V3\"};\n\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function sha256Utf8(s:string){return hex(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))}\nfunction randomHex(n=32){const b=new Uint8Array(n);crypto.getRandomValues(b);return hex(b)}\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_precommits_v3(\n incarnation_id TEXT PRIMARY KEY,\n bearer_digest TEXT NOT NULL UNIQUE,\n challenge TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n task_json TEXT NOT NULL,\n task_sha256 TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n credential_generation INTEGER NOT NULL,\n attempt_generation INTEGER NOT NULL,\n state TEXT NOT NULL,\n issued_at_ms INTEGER NOT NULL,\n expires_at_ms INTEGER NOT NULL,\n reserved_at_ms INTEGER,\n completed_at_ms INTEGER,\n execution_id TEXT,\n result_json TEXT,\n receipt_json TEXT\n )`);\n}\nexport default async function(req:Request){\n await init();\n const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,issuer:ISSUER,state:\"CANDIDATE_NONAUTHORITY\",production_admission_eligible:false});\n if(req.method===\"GET\"&&u.pathname===\"/precommit\"){\n const id=u.searchParams.get(\"incarnation_id\")||\"\";\n const q=await sqlite.execute({sql:`SELECT incarnation_id,challenge,logical_agent_id,workstream,capabilities_json,task_sha256,authority_epoch,credential_generation,attempt_generation,state,issued_at_ms,expires_at_ms,reserved_at_ms,completed_at_ms,execution_id,result_json,receipt_json FROM execution_precommits_v3 WHERE incarnation_id=?`,args:[id]});\n if(!q.rows.length)return json({error:\"NOT_FOUND\"},404);\n const r:any=q.rows[0];\n return json({...r,capabilities:JSON.parse(String(r.capabilities_json)),result:r.result_json?JSON.parse(String(r.result_json)):null,receipt:r.receipt_json?JSON.parse(String(r.receipt_json)):null,capabilities_json:undefined,result_json:undefined,receipt_json:undefined});\n }\n if(req.method===\"POST\"&&u.pathname===\"/reconcile\"){\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!body||Object.keys(body).length!==1||typeof body.incarnation_id!==\"string\")return json({error:\"BODY_INVALID\"},400);\n const now=Date.now();\n await sqlite.execute({sql:`UPDATE execution_precommits_v3 SET state='EXPIRED_UNCONSUMED' WHERE incarnation_id=? AND state='ISSUED' AND expires_at_ms<=?`,args:[body.incarnation_id,now]});\n await sqlite.execute({sql:`UPDATE execution_precommits_v3 SET state='UNKNOWN_OUTCOME' WHERE incarnation_id=? AND state='RESERVED' AND expires_at_ms<=?`,args:[body.incarnation_id,now]});\n const q=await sqlite.execute({sql:\"SELECT state FROM execution_precommits_v3 WHERE incarnation_id=?\",args:[body.incarnation_id]});\n if(!q.rows.length)return json({error:\"NOT_FOUND\"},404);\n return json({incarnation_id:body.incarnation_id,state:String((q.rows[0] as any).state),replay_allowed:false});\n }\n if(req.method!==\"POST\"||u.pathname!==\"/issue\")return json({error:\"NOT_FOUND\"},404);\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!body||typeof body!==\"object\"||Array.isArray(body)||JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"purpose\"]))return json({error:\"BODY_KEYS_INVALID\"},400);\n if(body.purpose!==PURPOSE)return json({error:\"PURPOSE_INVALID\"},400);\n const now=Date.now();\n const incarnationId=crypto.randomUUID();\n const logicalAgentId=\"extchat-\"+crypto.randomUUID();\n const challenge=randomHex(32);\n const bearer=randomHex(32);\n const bearerDigest=await sha256Utf8(\"PB_EXECUTION_BEARER_V3\\0\"+bearer);\n const taskJson=JSON.stringify(FIXED_TASK);\n const taskSha256=await sha256Utf8(taskJson);\n const expiresAt=now+TTL_MS;\n await sqlite.execute({sql:`INSERT INTO execution_precommits_v3(incarnation_id,bearer_digest,challenge,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,authority_epoch,credential_generation,attempt_generation,state,issued_at_ms,expires_at_ms)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,'ISSUED',?,?)`,args:[incarnationId,bearerDigest,challenge,logicalAgentId,WORKSTREAM,JSON.stringify(FIXED_CAPABILITIES),taskJson,taskSha256,AUTHORITY_EPOCH,CREDENTIAL_GENERATION,ATTEMPT_GENERATION,now,expiresAt]});\n return json({schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_ONE_TIME_EXECUTION_PRECOMMIT\",issuer:ISSUER,purpose:PURPOSE,incarnation_id:incarnationId,logical_agent_id:logicalAgentId,workstream:WORKSTREAM,capabilities:[...FIXED_CAPABILITIES],challenge,task_sha256:taskSha256,authority_epoch:AUTHORITY_EPOCH,credential_generation:CREDENTIAL_GENERATION,attempt_generation:ATTEMPT_GENERATION,issued_at_ms:now,expires_at_ms:expiresAt,bearer,raw_bearer_storage:\"RETURNED_ONCE_NOT_PERSISTED_BY_ISSUER\",production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0},201);\n}","label",[140],"da1f72d8-7c1b-4f0d-a554-0c9409750d7d","main.ts",4,["D",1788893872452],2,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ISSUER = \"mosadek/project-brain-exec-issuer-v1\";\nconst SCHEMA = \"PROJECT_BRAIN_EXTERNAL_EXECUTION_RECEIPT_CANARY_V1\";\n\nfunction hex(b: Uint8Array) {\n return [...b].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction randomHex(n = 32) {\n const b = new Uint8Array(n);\n crypto.getRandomValues(b);\n return hex(b);\n}\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_receipts(\n execution_id TEXT PRIMARY KEY,\n challenge TEXT NOT NULL,\n logical_agent_id TEXT NOT NULL,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n runtime_nonce TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n receipt_json TEXT NOT NULL\n )`);\n}\nfunction validate(x: any) {\n if (!x || typeof x !== \"object\" || Array.isArray(x)) return \"BODY_NOT_OBJECT\";\n const keys = Object.keys(x).sort();\n const allowed = [\"capabilities\",\"challenge\",\"logical_agent_id\",\"ttl_seconds\",\"workstream\"].sort();\n if (JSON.stringify(keys) !== JSON.stringify(allowed)) return \"BODY_KEYS_INVALID\";\n if (typeof x.challenge !== \"string\" || !/^[0-9a-f]{64}$/.test(x.challenge)) return \"CHALLENGE_INVALID\";\n if (typeof x.logical_agent_id !== \"string\" || x.logical_agent_id.length < 3 || x.logical_agent_id.length > 128) return \"AGENT_ID_INVALID\";\n if (typeof x.workstream !== \"string\" || x.workstream.length < 1 || x.workstream.length > 96) return \"WORKSTREAM_INVALID\";\n if (!Array.isArray(x.capabilities) || x.capabilities.length > 64 || !x.capabilities.every((v: unknown) => typeof v === \"string\" && v.length >= 1 && v.length <= 96)) return \"CAPABILITIES_INVALID\";\n if (!Number.isInteger(x.ttl_seconds) || x.ttl_seconds < 30 || x.ttl_seconds > 300) return \"TTL_INVALID\";\n return null;\n}\n\nexport default async function(req: Request) {\n await init();\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return json({ schema: SCHEMA, issuer: ISSUER, state: \"CANARY_NONAUTHORITY\", now: new Date().toISOString() });\n }\n if (req.method === \"GET\" && url.pathname === \"/receipt\") {\n const id = url.searchParams.get(\"id\") || \"\";\n const r = await sqlite.execute({ sql: \"SELECT receipt_json FROM execution_receipts WHERE execution_id=?\", args: [id] });\n if (!r.rows.length) return json({ error: \"NOT_FOUND\" }, 404);\n return json(JSON.parse(String((r.rows[0] as any).receipt_json)));\n }\n if (req.method !== \"POST\" || url.pathname !== \"/issue\") return json({ error: \"NOT_FOUND\" }, 404);\n\n let body: any;\n try { body = await req.json(); } catch { return json({ error: \"INVALID_JSON\" }, 400); }\n const err = validate(body);\n if (err) return json({ error: err }, 400);\n\n const issued = new Date();\n const expires = new Date(issued.getTime() + body.ttl_seconds * 1000);\n const receipt = {\n schema: SCHEMA,\n classification: \"CANDIDATE_NONAUTHORITY_EXECUTION_RECEIPT\",\n issuer: ISSUER,\n execution_id: crypto.randomUUID(),\n challenge: body.challenge,\n logical_agent_id: body.logical_agent_id,\n workstream: body.workstream,\n capabilities: [...new Set(body.capabilities)].sort(),\n runtime_nonce: randomHex(32),\n issued_at: issued.toISOString(),\n observed_at: issued.toISOString(),\n replay_valid_until: expires.toISOString(),\n execution_observation: \"HTTP_HANDLER_EXECUTED\",\n human_authority_approval: false,\n additional_out_of_pocket_spend_usd: 0\n };\n await sqlite.execute({\n sql: `INSERT INTO execution_receipts(execution_id,challenge,logical_agent_id,workstream,capabilities_json,runtime_nonce,issued_at,expires_at,receipt_json)\n VALUES(?,?,?,?,?,?,?,?,?)`,\n args: [receipt.execution_id, receipt.challenge, receipt.logical_agent_id, receipt.workstream, JSON.stringify(receipt.capabilities), receipt.runtime_nonce, receipt.issued_at, receipt.replay_valid_until, JSON.stringify(receipt)]\n });\n return json(receipt, 201);\n}",[151],"82681cd6-2304-4959-b4ad-0c40ac07fba2","chat_unproven_v5_policy_test_tmp.ts","1a1c7e5c-abbe-11f1-9292-1607ee4eb77e",18,["D",1788896839528],"const HEAD=\"ac6be68568b14c54fc4919f00eae51baa6fa5770be8fcd7b3151cdb0d4ecbc83\";\nconst FIXED_AGENT=\"chatgpt-unproven-global-v1\";\nconst SAFE_ROOT=\"external:val-town:mosadek/project-brain-live-v1-durable:evidence/organism/first-real-superhero/unproven-contributions/\";\nconst ALLOWED_REQ=new Set([\"reasoning\",\"file_analysis\",\"code_execution\",\"web_research\",\"val_town_read\"]);\nconst FORBID_TRUE=[\"requires_execution_independence\",\"reviewer_must_be_distinct\",\"physical_execution_independence_required\",\"capacity_promotion\",\"superhero_qualification\",\"p_real_increment\",\"authority_promotion\",\"human_authority_approval\",\"policy_self_modification\"];\nfunction canon(x:any):string{if(x===null||typeof x!==\"object\")return JSON.stringify(x);if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\"}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function hmac(key:string,data:string){const k=await crypto.subtle.importKey(\"raw\",new TextEncoder().encode(key),{name:\"HMAC\",hash:\"SHA-256\"},false,[\"sign\"]);const s=await crypto.subtle.sign(\"HMAC\",k,new TextEncoder().encode(data));return[...new Uint8Array(s)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction taskEligible(t:any,base:any){\n const c=t.context||{}, req=t.requires||[], writes=t.writes||[];\n if(t.state!==\"READY\"||t.workstream!==\"global\"||!t.dedupe_key)return false;\n if(t.assigned_agent!==null&&t.assigned_agent!==FIXED_AGENT)return false;\n if(c.execution_allowed===false)return false;\n if(c.chat_unproven_eligible!==true||c.chat_unproven_lane_version!==5||c.chat_unproven_completion_scope!==\"CANDIDATE_EVIDENCE_ONLY\"||c.candidate_only!==true||c.production_mutation!==false)return false;\n for(const k of FORBID_TRUE)if(c[k]===true)return false;\n if(c.p_real_increment!==undefined&&c.p_real_increment!==false)return false;\n if(!Array.isArray(req)||req.some((r:any)=>typeof r!==\"string\"||!ALLOWED_REQ.has(r)))return false;\n if(writes.length!==1||writes[0]!==SAFE_ROOT+t.id)return false;\n return !!(base.caps&&base.deps&&base.guards&&!base.conflict&&base.nonAgent);\n}\nfunction bestReady(tasks:any[],base:any){for(const t of [...tasks].sort((a,b)=>b.priority-a.priority||a.id.localeCompare(b.id)))if(taskEligible(t,base))return t;return null}\nfunction mk(id:string,priority:number,over:any={}){\n return {id,priority,state:\"READY\",workstream:\"global\",dedupe_key:\"d-\"+id,assigned_agent:null,requires:[\"reasoning\"],writes:[SAFE_ROOT+id],context:{chat_unproven_eligible:true,chat_unproven_lane_version:5,chat_unproven_completion_scope:\"CANDIDATE_EVIDENCE_ONLY\",candidate_only:true,production_mutation:false,p_real_increment:false},...over}\n}\ntype Slot={epoch:number,head:string,generation:number,state:string,expires:number,task:string|null};\nfunction auth(slot:Slot|null,now:number,env:{epoch:number,head:string,generation:number}){if(!slot)return\"NO_SLOT\";if(slot.expires<=now)return\"EXPIRED\";if(slot.epoch!==env.epoch)return\"EPOCH\";if(slot.head!==env.head)return\"HEAD\";if(slot.generation!==env.generation)return\"GEN\";return\"OK\"}\nconst RECEIPT_FIELDS=[\"job_id\",\"operation\",\"payload_sha256\",\"authority_epoch\",\"cognition_head_sha256\",\"slot_generation\",\"fixed_agent_id\",\"task_id\",\"issued_at\",\"expires_at\"];\nasync function signReceipt(key:string,r:any){const body:any={};for(const f of RECEIPT_FIELDS)body[f]=r[f];return hmac(\"PROJECT_BRAIN_CHAT_UNPROVEN_INGRESS_V5\\0\"+key,canon(body))}\nasync function verifyReceipt(key:string,r:any,env:any){\n if(!r||Object.keys(r).sort().join(\",\")!==[...RECEIPT_FIELDS,\"mac\"].sort().join(\",\"))return false;\n if(r.fixed_agent_id!==FIXED_AGENT||r.authority_epoch!==env.epoch||r.cognition_head_sha256!==env.head||r.slot_generation!==env.generation)return false;\n if(r.expires_at<=env.now||r.issued_at>env.now||r.expires_at<=r.issued_at)return false;\n return r.mac===await signReceipt(key,r);\n}\nfunction validateDrop(d:any,b:any){\n const keys=[\"schema\",\"task_id\",\"slot_generation\",\"cognition_head_sha256\",\"result\",\"evidence\",\"human_authority_approval\"].sort();\n if(!d||Object.keys(d).sort().join(\",\")!==keys.join(\",\"))return false;\n return d.schema===\"CHAT_UNPROVEN_RESULT_V5\"&&d.task_id===b.task&&d.slot_generation===b.generation&&d.cognition_head_sha256===b.head&&d.human_authority_approval===false&&Array.isArray(d.evidence);\n}\nconst tests:any[]=[];const add=(n:string,p:boolean,g?:any)=>tests.push({name:n,pass:p,got:g});\nconst base={caps:true,deps:true,guards:true,conflict:false,nonAgent:true};\nconst good=mk(\"BRAIN-UNPROVEN-EVIDENCE-A\",50);\nadd(\"positive_task\",taskEligible(good,base));\nadd(\"higher_ineligible_skipped\",bestReady([mk(\"HIGH\",100,{context:{...good.context,chat_unproven_eligible:false}}),good],base)?.id===good.id);\nadd(\"higher_forbidden_write_skipped\",bestReady([mk(\"HIGH2\",100,{writes:[\"external:val-town:mosadek/project-brain-live-v1-durable:val_native_kernel_v1.ts\"]}),good],base)?.id===good.id);\nfor(const [k,v] of [[\"chat_unproven_eligible\",false],[\"chat_unproven_lane_version\",4],[\"chat_unproven_completion_scope\",\"OTHER\"],[\"candidate_only\",false],[\"production_mutation\",true]]) add(\"reject_ctx_\"+k,!taskEligible(mk(\"X\"+k,1,{context:{...good.context,[k]:v}}),base));\nfor(const k of FORBID_TRUE)add(\"reject_flag_\"+k,!taskEligible(mk(\"F\"+k,1,{context:{...good.context,[k]:true}}),base));\nfor(const r of [\"val_town_write\",\"val_town_blob\",\"val_town_sql\",\"independent_verification\",\"human_authority_approval\",\"unknown\"])add(\"reject_req_\"+r,!taskEligible(mk(\"R\"+r,1,{requires:[\"reasoning\",r]}),base));\nfor(const r of ALLOWED_REQ)add(\"allow_req_\"+r,taskEligible(mk(\"A\"+r,1,{requires:[r]}),base));\nadd(\"reject_zero_writes\",!taskEligible(mk(\"W0\",1,{writes:[]}),base));\nadd(\"reject_two_writes\",!taskEligible(mk(\"W2\",1,{writes:[SAFE_ROOT+\"W2\",SAFE_ROOT+\"other\"]}),base));\nadd(\"reject_parent_prefix\",!taskEligible(mk(\"WP\",1,{writes:[SAFE_ROOT]}),base));\nadd(\"reject_near_match\",!taskEligible(mk(\"WN\",1,{writes:[SAFE_ROOT+\"WN/extra\"]}),base));\nadd(\"reject_kernel\",!taskEligible(mk(\"WK\",1,{writes:[\"external:val-town:mosadek/project-brain-live-v1-durable:val_native_kernel_v1.ts\"]}),base));\nadd(\"reject_user_directives\",!taskEligible(mk(\"WU\",1,{writes:[\"external:val-town:mosadek/project-brain-live-v1-durable:evidence/user-directives\"]}),base));\nadd(\"reject_sql\",!taskEligible(mk(\"WS\",1,{writes:[\"external:val-town:mosadek/project-brain-live-v1-durable:sqlite:brainvn_tasks\"]}),base));\nadd(\"assigned_other\",!taskEligible(mk(\"ASS\",1,{assigned_agent:\"other\"}),base));\nadd(\"assigned_fixed\",taskEligible(mk(\"ASF\",1,{assigned_agent:FIXED_AGENT}),base));\nfor(const k of [\"caps\",\"deps\",\"guards\",\"nonAgent\"])add(\"preserve_\"+k,!taskEligible(good,{...base,[k]:false}));\nadd(\"preserve_conflict\",!taskEligible(good,{...base,conflict:true}));\nadd(\"execution_allowed_false\",!taskEligible(mk(\"EA\",1,{context:{...good.context,execution_allowed:false}}),base));\nadd(\"missing_dedupe\",!taskEligible(mk(\"DD\",1,{dedupe_key:\"\"}),base));\nadd(\"non_global\",!taskEligible(mk(\"NG\",1,{workstream:\"other\"}),base));\nconst slot:Slot={epoch:2,head:HEAD,generation:7,state:\"WORKING\",expires:2000,task:\"T\"};\nadd(\"auth_current\",auth(slot,1000,{epoch:2,head:HEAD,generation:7})===\"OK\");\nadd(\"head_change\",auth(slot,1000,{epoch:2,head:\"f\".repeat(64),generation:7})===\"HEAD\");\nadd(\"epoch_change\",auth(slot,1000,{epoch:3,head:HEAD,generation:7})===\"EPOCH\");\nadd(\"generation_change\",auth(slot,1000,{epoch:2,head:HEAD,generation:8})===\"GEN\");\nadd(\"expired\",auth(slot,2000,{epoch:2,head:HEAD,generation:7})===\"EXPIRED\");\nconst key=\"test-secret-not-production\";\nconst payloadSha=await sha('{\"args\":[\"claim\"],\"timeout\":60}');\nlet rec:any={job_id:\"j1\",operation:\"claim\",payload_sha256:payloadSha,authority_epoch:2,cognition_head_sha256:HEAD,slot_generation:7,fixed_agent_id:FIXED_AGENT,task_id:null,issued_at:1000,expires_at:1100};\nrec.mac=await signReceipt(key,rec);\nadd(\"receipt_positive\",await verifyReceipt(key,rec,{epoch:2,head:HEAD,generation:7,now:1050}));\nfor(const [n,patch] of [[\"payload\",{payload_sha256:\"0\".repeat(64)}],[\"epoch\",{authority_epoch:3}],[\"head\",{cognition_head_sha256:\"1\".repeat(64)}],[\"generation\",{slot_generation:8}],[\"agent\",{fixed_agent_id:\"other\"}],[\"job\",{job_id:\"j2\"}],[\"op\",{operation:\"commit\"}],[\"task\",{task_id:\"X\"}]]){add(\"receipt_tamper_\"+n,!await verifyReceipt(key,{...rec,...patch},{epoch:2,head:HEAD,generation:7,now:1050}))}\nadd(\"receipt_expired\",!await verifyReceipt(key,{...rec},{epoch:2,head:HEAD,generation:7,now:1100}));\nadd(\"receipt_wrong_key\",!await verifyReceipt(\"wrong\",rec,{epoch:2,head:HEAD,generation:7,now:1050}));\nconst drop={schema:\"CHAT_UNPROVEN_RESULT_V5\",task_id:\"T\",slot_generation:7,cognition_head_sha256:HEAD,result:{x:1},evidence:[],human_authority_approval:false};\nadd(\"drop_positive\",validateDrop(drop,{task:\"T\",generation:7,head:HEAD}));\nfor(const [n,patch] of [[\"task\",{task_id:\"X\"}],[\"gen\",{slot_generation:8}],[\"head\",{cognition_head_sha256:\"2\".repeat(64)}],[\"human\",{human_authority_approval:true}],[\"schema\",{schema:\"X\"}]])add(\"drop_reject_\"+n,!validateDrop({...drop,...patch},{task:\"T\",generation:7,head:HEAD}));\nadd(\"parameterless_authority_surface\",true,{caller_arguments:[],fixed_agent_id:FIXED_AGENT});\nadd(\"p_real_zero\",true,0);add(\"superhero_count_zero\",true,0);add(\"reviewer_quorum_zero\",true,0);\nconst failed=tests.filter(x=>!x.pass);const report={schema:\"CHAT_UNPROVEN_PARAMETERLESS_POSITIVE_SAFE_V5_POLICY_TEST_REPORT_V1\",classification:\"CANDIDATE_NONAUTHORITY_REFERENCE_MODEL\",total:tests.length,passed:tests.length-failed.length,failed:failed.length,all_pass:failed.length===0,tests,p_real_increment:0,superhero_count_increment:0,human_authority_approval:false,direct_sprites_calls:0};\nconsole.log(JSON.stringify(report));export default report;",[158],"5320fbff-56ee-4673-874d-8b5a923fc2c0","challenge_issuer_v3_a71.ts","02308a54-abbe-11f1-bb88-1607ee4eb77e",14,["D",1788896799385],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA = \"PROJECT_BRAIN_EXTERNAL_EXECUTION_PRECOMMIT_V3_CANDIDATE\";\nconst ISSUER_ID = \"mosadek/project-brain-exec-issuer-v1/challenge_issuer_v3_a71.ts\";\nconst WORKSTREAM = \"global\";\nconst FIXED_CAPABILITIES = [\"deterministic_execution\",\"sha256\"] as const;\n\nfunction hex(b: Uint8Array) { return [...b].map(x => x.toString(16).padStart(2,\"0\")).join(\"\"); }\nfunction randomHex(n=32){ const b=new Uint8Array(n); crypto.getRandomValues(b); return hex(b); }\nasync function sha256Utf8(s:string){ return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))); }\nfunction json(body:unknown,status=200){ return new Response(JSON.stringify(body),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}}); }\n\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_precommits_v3_a71(\n challenge TEXT PRIMARY KEY,\n execution_incarnation_id TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n task_json TEXT NOT NULL,\n task_sha256 TEXT NOT NULL,\n state TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n reserved_at TEXT,\n reservation_expires_at TEXT,\n completed_at TEXT,\n result_json TEXT,\n receipt_json TEXT,\n terminal_reason TEXT\n )`);\n}\nfunction validateIssue(body:any):string|null{\n if(!body||typeof body!==\"object\"||Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n if(JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"task\",\"ttl_seconds\"])) return \"BODY_KEYS_INVALID\";\n if(!Number.isInteger(body.ttl_seconds)||body.ttl_seconds<30||body.ttl_seconds>300) return \"TTL_INVALID\";\n if(!body.task||typeof body.task!==\"object\"||Array.isArray(body.task)) return \"TASK_INVALID\";\n if(JSON.stringify(Object.keys(body.task).sort())!==JSON.stringify([\"input\",\"op\"])) return \"TASK_KEYS_INVALID\";\n if(body.task.op!==\"sha256_utf8\") return \"OP_NOT_ALLOWED\";\n if(typeof body.task.input!==\"string\"||body.task.input.length>65536) return \"TASK_INPUT_INVALID\";\n return null;\n}\n\nexport default async function(req:Request){\n await init();\n const url=new URL(req.url);\n if(req.method===\"GET\"&&url.pathname===\"/health\"){\n return json({schema:SCHEMA,issuer_id:ISSUER_ID,state:\"CANDIDATE_NONAUTHORITY\",workstream:WORKSTREAM,fixed_capabilities:FIXED_CAPABILITIES,production_admission_eligible:false});\n }\n if(req.method===\"GET\"&&url.pathname===\"/precommit\"){\n const challenge=url.searchParams.get(\"challenge\")||\"\";\n const q=await sqlite.execute({sql:`SELECT execution_incarnation_id,logical_agent_id,workstream,capabilities_json,task_sha256,state,issued_at,expires_at,reserved_at,reservation_expires_at,completed_at,terminal_reason FROM atomic_precommits_v3_a71 WHERE challenge=?`,args:[challenge]});\n if(!q.rows.length) return json({error:\"NOT_FOUND\"},404);\n const r:any=q.rows[0];\n return json({challenge,...r,capabilities:JSON.parse(String(r.capabilities_json)),capabilities_json:undefined});\n }\n if(req.method!==\"POST\"||url.pathname!==\"/issue\") return json({error:\"NOT_FOUND\"},404);\n let body:any; try{body=await req.json();}catch{return json({error:\"INVALID_JSON\"},400);}\n const invalid=validateIssue(body); if(invalid) return json({error:invalid},400);\n\n const issuedAt=new Date();\n const expiresAt=new Date(issuedAt.getTime()+body.ttl_seconds*1000);\n const executionIncarnationId=crypto.randomUUID();\n const logicalAgentId=\"ext-v3-\"+executionIncarnationId;\n const taskJson=JSON.stringify(body.task);\n const taskSha256=await sha256Utf8(taskJson);\n const capabilitiesJson=JSON.stringify([...FIXED_CAPABILITIES]);\n let challenge=\"\";\n let inserted=false;\n for(let i=0;i<3&&!inserted;i++){\n challenge=randomHex(32);\n const r=await sqlite.execute({sql:`INSERT INTO atomic_precommits_v3_a71\n (challenge,execution_incarnation_id,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,state,issued_at,expires_at)\n VALUES(?,?,?,?,?,?,?,'ISSUED',?,?) ON CONFLICT(challenge) DO NOTHING`,\n args:[challenge,executionIncarnationId,logicalAgentId,WORKSTREAM,capabilitiesJson,taskJson,taskSha256,issuedAt.toISOString(),expiresAt.toISOString()]});\n inserted=r.rowsAffected===1;\n }\n if(!inserted) return json({error:\"CHALLENGE_COLLISION\"},500);\n return json({\n schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_PRECOMMIT\",\n issuer_id:ISSUER_ID,challenge,execution_incarnation_id:executionIncarnationId,\n logical_agent_id:logicalAgentId,workstream:WORKSTREAM,capabilities:[...FIXED_CAPABILITIES],\n task_sha256:taskSha256,issued_at:issuedAt.toISOString(),expires_at:expiresAt.toISOString(),\n binding:\"PROJECT_ISSUER_DERIVED_ID_WORKSTREAM_CAPABILITIES_AND_TASK_HASH\",\n production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0\n },201);\n}\n",[165],"8fdefd7f-f193-4f48-9ecb-468fe6939804","canary_call.ts","c713c500-abb6-11f1-bbc5-1607ee4eb77e",["D",1788893693732],"const endpoint = \"https://mosadek--aa7fce52abb611f1b1431607ee4eb77e.web.val.run/issue\";\nconst body = {\n capabilities: [\"reasoning\",\"val_town\",\"web_research\",\"file_analysis\"],\n challenge: \"cb9e0782bfd239ba4f2b4be86cc9a4c4c5e143f7541dcc83d79875845491533e\",\n logical_agent_id: \"external-val-canary-20260908-2054\",\n ttl_seconds: 180,\n workstream: \"global\"\n};\nconst res = await fetch(endpoint, {\n method: \"POST\",\n headers: {\"content-type\":\"application/json\"},\n body: JSON.stringify(body)\n});\nconst text = await res.text();\nif (res.status !== 201) throw new Error(\"ISSUER_HTTP_FAILED:\"+res.status+\":\"+text);\nconst receipt = JSON.parse(text);\nif (receipt.challenge !== body.challenge) throw new Error(\"CHALLENGE_MISMATCH\");\nif (receipt.logical_agent_id !== body.logical_agent_id) throw new Error(\"AGENT_MISMATCH\");\nif (receipt.workstream !== body.workstream) throw new Error(\"WORKSTREAM_MISMATCH\");\nif (receipt.execution_state !== \"RUNNING\") throw new Error(\"STATE_MISMATCH\");\nconsole.log(JSON.stringify({status:res.status,receipt}));\nexport default {status:res.status,receipt};",[172],"64e3d8d0-6bd7-42b6-93c3-636e7016eacf","atomic_worker_v3_candidate.ts","0e726b02-abbe-11f1-bc32-1607ee4eb77e",17,["D",1788896819917],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst SCHEMA=\"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V3_PRECOMMIT_CANDIDATE\";\nconst WORKER_ID=\"mosadek/project-brain-exec-issuer-v1/atomic_worker_v3_candidate.ts\";\nconst AUTHORITY_EPOCH=2;\nconst FIXED_CAPABILITIES=[\"deterministic_execution\",\"sha256\"] as const;\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function sha256Utf8(s:string){return hex(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))}\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nasync function init(){await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_precommits_v3(\n incarnation_id TEXT PRIMARY KEY,bearer_digest TEXT NOT NULL UNIQUE,challenge TEXT NOT NULL UNIQUE,logical_agent_id TEXT NOT NULL UNIQUE,workstream TEXT NOT NULL,capabilities_json TEXT NOT NULL,task_json TEXT NOT NULL,task_sha256 TEXT NOT NULL,authority_epoch INTEGER NOT NULL,credential_generation INTEGER NOT NULL,attempt_generation INTEGER NOT NULL,state TEXT NOT NULL,issued_at_ms INTEGER NOT NULL,expires_at_ms INTEGER NOT NULL,reserved_at_ms INTEGER,completed_at_ms INTEGER,execution_id TEXT,result_json TEXT,receipt_json TEXT)`)}\nexport default async function(req:Request){\n await init(); const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",fixed_capabilities:FIXED_CAPABILITIES,production_admission_eligible:false});\n if(req.method!==\"POST\"||u.pathname!==\"/execute\")return json({error:\"NOT_FOUND\"},404);\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!body||typeof body!==\"object\"||Array.isArray(body)||JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"bearer\",\"incarnation_id\"]))return json({error:\"BODY_KEYS_INVALID\"},400);\n if(typeof body.incarnation_id!==\"string\"||body.incarnation_id.length<10||body.incarnation_id.length>128)return json({error:\"INCARCATION_ID_INVALID\"},400);\n if(typeof body.bearer!==\"string\"||!/^[0-9a-f]{64}$/.test(body.bearer))return json({error:\"BEARER_INVALID\"},400);\n const now=Date.now(); const executionId=crypto.randomUUID(); const digest=await sha256Utf8(\"PB_EXECUTION_BEARER_V3\\0\"+body.bearer);\n const reserve=await sqlite.execute({sql:`UPDATE execution_precommits_v3 SET state='RESERVED',reserved_at_ms=?,execution_id=? WHERE incarnation_id=? AND bearer_digest=? AND state='ISSUED' AND authority_epoch=? AND expires_at_ms>? AND attempt_generation=1`,args:[now,executionId,body.incarnation_id,digest,AUTHORITY_EPOCH,now]});\n if(reserve.rowsAffected!==1){\n const q=await sqlite.execute({sql:\"SELECT state,expires_at_ms,authority_epoch,attempt_generation FROM execution_precommits_v3 WHERE incarnation_id=?\",args:[body.incarnation_id]});\n if(!q.rows.length)return json({error:\"PRECOMMIT_NOT_FOUND\"},404);\n const r:any=q.rows[0]; if(Number(r.expires_at_ms)<=now)return json({error:\"PRECOMMIT_EXPIRED\",state:r.state},410);\n return json({error:\"PRECOMMIT_NOT_CONSUMABLE\",state:r.state,authority_epoch:r.authority_epoch,attempt_generation:r.attempt_generation},409);\n }\n const q=await sqlite.execute({sql:\"SELECT challenge,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,authority_epoch,credential_generation,attempt_generation,issued_at_ms,expires_at_ms FROM execution_precommits_v3 WHERE incarnation_id=? AND execution_id=? AND state='RESERVED'\",args:[body.incarnation_id,executionId]});\n if(q.rows.length!==1)return json({error:\"RESERVATION_READBACK_FAILED\"},500);\n const r:any=q.rows[0];\n const caps=JSON.parse(String(r.capabilities_json)); const task=JSON.parse(String(r.task_json));\n if(String(r.workstream)!==\"global\"||JSON.stringify(caps)!==JSON.stringify(FIXED_CAPABILITIES)||Number(r.authority_epoch)!==AUTHORITY_EPOCH||Number(r.attempt_generation)!==1)return json({error:\"PROJECT_PRECOMMIT_TUPLE_INVALID\"},500);\n if(await sha256Utf8(String(r.task_json))!==String(r.task_sha256))return json({error:\"TASK_HASH_MISMATCH\"},500);\n if(task?.op!==\"sha256_utf8\"||typeof task?.input!==\"string\")return json({error:\"TASK_NOT_EXECUTABLE_FIXED_PROFILE\"},500);\n const result={op:\"sha256_utf8\",sha256:await sha256Utf8(task.input)}; const resultJson=JSON.stringify(result); const completed=Date.now();\n if(completed>Number(r.expires_at_ms)){\n await sqlite.execute({sql:\"UPDATE execution_precommits_v3 SET state='UNKNOWN_OUTCOME',completed_at_ms=?,result_json=? WHERE incarnation_id=? AND execution_id=? AND state='RESERVED'\",args:[completed,resultJson,body.incarnation_id,executionId]});\n return json({error:\"COMPLETED_AFTER_EXPIRY_UNKNOWN_OUTCOME\"},409);\n }\n const receipt={schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",worker_id:WORKER_ID,execution_id:executionId,incarnation_id:body.incarnation_id,challenge:String(r.challenge),logical_agent_id:String(r.logical_agent_id),workstream:String(r.workstream),capabilities:[...FIXED_CAPABILITIES],capability_source:\"PROJECT_PRECOMMITTED_EXECUTABLE_FIXED_SET\",identity_binding:\"PROJECT_ISSUER_PRECOMMITTED\",challenge_binding:\"PROJECT_ISSUER_PRECOMMITTED\",task_binding:\"PROJECT_ISSUER_PRECOMMITTED_HASH_MATCH\",bearer_binding:\"ONE_TIME_DOMAIN_SEPARATED_DIGEST_POSSESSION\",authority_epoch:Number(r.authority_epoch),credential_generation:Number(r.credential_generation),attempt_generation:Number(r.attempt_generation),task_sha256:String(r.task_sha256),result_sha256:await sha256Utf8(resultJson),issued_at_ms:Number(r.issued_at_ms),reserved_at_ms:now,completed_at_ms:completed,expires_at_ms:Number(r.expires_at_ms),execution_observation:\"PRECOMMITTED_ONE_TIME_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0};\n const done=await sqlite.execute({sql:\"UPDATE execution_precommits_v3 SET state='COMPLETE',completed_at_ms=?,result_json=?,receipt_json=? WHERE incarnation_id=? AND execution_id=? AND state='RESERVED'\",args:[completed,resultJson,JSON.stringify(receipt),body.incarnation_id,executionId]});\n if(done.rowsAffected!==1)return json({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return json({result,receipt},200);\n}",[178],"ecc48039-373d-4dad-b616-92df5dc0108a","atomic_worker_v3_a71.ts","032fbd1c-abbe-11f1-a3d6-1607ee4eb77e",15,["D",1788896801057],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V3_CANDIDATE\";\nconst WORKER_ID=\"mosadek/project-brain-exec-issuer-v1/atomic_worker_v3_a71.ts\";\nconst FIXED_CAPABILITIES=[\"deterministic_execution\",\"sha256\"] as const;\nconst RESERVATION_TTL_MS=30000;\n\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");}\nasync function sha256Utf8(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s))));}\nfunction json(body:unknown,status=200){return new Response(JSON.stringify(body),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}});}\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_precommits_v3_a71(\n challenge TEXT PRIMARY KEY, execution_incarnation_id TEXT NOT NULL UNIQUE, logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL, capabilities_json TEXT NOT NULL, task_json TEXT NOT NULL, task_sha256 TEXT NOT NULL,\n state TEXT NOT NULL, issued_at TEXT NOT NULL, expires_at TEXT NOT NULL, reserved_at TEXT, reservation_expires_at TEXT,\n completed_at TEXT, result_json TEXT, receipt_json TEXT, terminal_reason TEXT\n )`);\n}\nfunction validateExecute(body:any):string|null{\n if(!body||typeof body!==\"object\"||Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n if(JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"challenge\",\"execution_incarnation_id\"])) return \"BODY_KEYS_INVALID\";\n if(typeof body.challenge!==\"string\"||!/^[0-9a-f]{64}$/.test(body.challenge)) return \"CHALLENGE_INVALID\";\n if(typeof body.execution_incarnation_id!==\"string\"||body.execution_incarnation_id.length<10||body.execution_incarnation_id.length>128) return \"EXECUTION_INCARNATION_INVALID\";\n return null;\n}\n\nexport default async function(req:Request){\n await init();\n const url=new URL(req.url);\n if(req.method===\"GET\"&&url.pathname===\"/health\") return json({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",fixed_capabilities:FIXED_CAPABILITIES,production_admission_eligible:false});\n if(req.method===\"GET\"&&url.pathname===\"/attempt\"){\n const challenge=url.searchParams.get(\"challenge\")||\"\";\n const q=await sqlite.execute({sql:\"SELECT state,reserved_at,reservation_expires_at,completed_at,result_json,receipt_json,terminal_reason FROM atomic_precommits_v3_a71 WHERE challenge=?\",args:[challenge]});\n if(!q.rows.length) return json({error:\"NOT_FOUND\"},404);\n const r:any=q.rows[0];\n return json({state:r.state,reserved_at:r.reserved_at,reservation_expires_at:r.reservation_expires_at,completed_at:r.completed_at,\n result:r.result_json?JSON.parse(String(r.result_json)):null,receipt:r.receipt_json?JSON.parse(String(r.receipt_json)):null,terminal_reason:r.terminal_reason});\n }\n if(req.method!==\"POST\"||url.pathname!==\"/execute\") return json({error:\"NOT_FOUND\"},404);\n let body:any; try{body=await req.json();}catch{return json({error:\"INVALID_JSON\"},400);}\n const invalid=validateExecute(body); if(invalid) return json({error:invalid},400);\n\n const q=await sqlite.execute({sql:\"SELECT * FROM atomic_precommits_v3_a71 WHERE challenge=?\",args:[body.challenge]});\n if(!q.rows.length) return json({error:\"PRECOMMIT_NOT_FOUND\"},404);\n const row:any=q.rows[0];\n if(String(row.execution_incarnation_id)!==body.execution_incarnation_id) return json({error:\"EXECUTION_INCARNATION_MISMATCH\"},409);\n const now=new Date();\n if(String(row.state)===\"RESERVED\"){\n const reservationExpiry=Date.parse(String(row.reservation_expires_at||\"\"));\n if(Number.isFinite(reservationExpiry)&&reservationExpiry<=now.getTime()){\n await sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='UNKNOWN_OUTCOME',terminal_reason='RESERVATION_EXPIRED_OUTCOME_UNKNOWN' WHERE challenge=? AND execution_incarnation_id=? AND state='RESERVED' AND reservation_expires_at<=?\",\n args:[body.challenge,body.execution_incarnation_id,now.toISOString()]});\n return json({error:\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\"},409);\n }\n return json({error:\"ATTEMPT_ALREADY_RESERVED\"},409);\n }\n if(String(row.state)!==\"ISSUED\") return json({error:\"PRECOMMIT_STATE_NOT_ISSUED\",state:String(row.state)},409);\n if(Date.parse(String(row.expires_at))<=now.getTime()){\n await sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='EXPIRED',terminal_reason='PRECOMMIT_EXPIRED' WHERE challenge=? AND execution_incarnation_id=? AND state='ISSUED'\",\n args:[body.challenge,body.execution_incarnation_id]});\n return json({error:\"PRECOMMIT_EXPIRED\"},410);\n }\n const expectedCaps=JSON.stringify([...FIXED_CAPABILITIES]);\n if(String(row.capabilities_json)!==expectedCaps) return json({error:\"PRECOMMIT_CAPABILITY_BINDING_INVALID\"},409);\n const taskJson=String(row.task_json);\n if(await sha256Utf8(taskJson)!==String(row.task_sha256)) return json({error:\"PRECOMMIT_TASK_HASH_MISMATCH\"},409);\n\n const reservedAt=now.toISOString();\n const reservationExpiresAt=new Date(now.getTime()+RESERVATION_TTL_MS).toISOString();\n const reserved=await sqlite.execute({sql:`UPDATE atomic_precommits_v3_a71 SET state='RESERVED',reserved_at=?,reservation_expires_at=?\n WHERE challenge=? AND execution_incarnation_id=? AND state='ISSUED' AND expires_at>?`,\n args:[reservedAt,reservationExpiresAt,body.challenge,body.execution_incarnation_id,reservedAt]});\n if(reserved.rowsAffected!==1) return json({error:\"ATOMIC_RESERVATION_CAS_FAILED\"},409);\n\n let task:any; try{task=JSON.parse(taskJson);}catch{return json({error:\"STORED_TASK_JSON_INVALID\"},500);}\n if(!task||task.op!==\"sha256_utf8\"||typeof task.input!==\"string\") return json({error:\"STORED_TASK_INVALID\"},500);\n const result={op:\"sha256_utf8\",sha256:await sha256Utf8(task.input)};\n const resultJson=JSON.stringify(result);\n const completedAt=new Date().toISOString();\n const receipt={\n schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",\n worker_id:WORKER_ID,execution_incarnation_id:String(row.execution_incarnation_id),challenge:body.challenge,\n logical_agent_id:String(row.logical_agent_id),workstream:String(row.workstream),capabilities:[...FIXED_CAPABILITIES],\n capability_source:\"EXECUTABLE_FIXED_SET_AND_ISSUER_PRECOMMIT\",identity_source:\"PROJECT_ISSUER_GENERATED\",\n task_sha256:String(row.task_sha256),result_sha256:await sha256Utf8(resultJson),\n issued_at:String(row.issued_at),reserved_at:reservedAt,reservation_expires_at:reservationExpiresAt,completed_at:completedAt,\n execution_observation:\"ATOMIC_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",unknown_outcome_policy:\"EXPIRED_RESERVATION_TERMINATES_UNKNOWN_NO_RETRY_SAME_CHALLENGE\",\n production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0\n };\n const done=await sqlite.execute({sql:`UPDATE atomic_precommits_v3_a71 SET state='COMPLETE',completed_at=?,result_json=?,receipt_json=?\n WHERE challenge=? AND execution_incarnation_id=? AND state='RESERVED' AND reserved_at=?`,\n args:[completedAt,resultJson,JSON.stringify(receipt),body.challenge,body.execution_incarnation_id,reservedAt]});\n if(done.rowsAffected!==1) return json({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return json({result,receipt},200);\n}\n",[185],"0e2e039c-cc81-4cf2-9ded-d3184d17bf85","atomic_worker_v2_candidate.ts","097e09c2-abbd-11f1-b428-1607ee4eb77e",12,["D",1788896382138],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA = \"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V2_CANDIDATE\";\nconst WORKER_ID = \"mosadek/project-brain-exec-issuer-v1/atomic_worker_v2_candidate.ts\";\nconst FIXED_CAPABILITIES = [\"deterministic_execution\",\"sha256\"] as const;\nconst FORBIDDEN_CAPABILITY = \"human_authority_approval\";\n\nfunction hex(b: ArrayBuffer | Uint8Array) {\n const a = b instanceof Uint8Array ? b : new Uint8Array(b);\n return [...a].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function sha256Utf8(s: string) {\n return hex(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s)));\n}\nfunction response(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}\n });\n}\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_attempts_v2(\n challenge TEXT PRIMARY KEY,\n execution_id TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL,\n workstream TEXT NOT NULL,\n task_json TEXT NOT NULL,\n state TEXT NOT NULL,\n reserved_at TEXT NOT NULL,\n completed_at TEXT,\n result_json TEXT,\n receipt_json TEXT\n )`);\n}\nfunction canonicalCapabilities(xs: unknown[]): string[] {\n return [...new Set(xs as string[])].sort();\n}\nexport function validateV2(body: any): string | null {\n if (!body || typeof body !== \"object\" || Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n const keys = Object.keys(body).sort();\n const allowed = [\"capabilities\",\"challenge\",\"logical_agent_id\",\"task\",\"workstream\"].sort();\n if (JSON.stringify(keys) !== JSON.stringify(allowed)) return \"BODY_KEYS_INVALID\";\n if (typeof body.challenge !== \"string\" || !/^[0-9a-f]{64}$/.test(body.challenge)) return \"CHALLENGE_INVALID\";\n if (typeof body.logical_agent_id !== \"string\" || body.logical_agent_id.length < 3 || body.logical_agent_id.length > 128) return \"AGENT_ID_INVALID\";\n if (typeof body.workstream !== \"string\" || body.workstream.length < 1 || body.workstream.length > 96) return \"WORKSTREAM_INVALID\";\n if (!Array.isArray(body.capabilities) || body.capabilities.length > 64 ||\n !body.capabilities.every((x: unknown) => typeof x === \"string\" && x.length >= 1 && x.length <= 96)) return \"CAPABILITIES_INVALID\";\n if (body.capabilities.includes(FORBIDDEN_CAPABILITY)) return \"HUMAN_AUTHORITY_CAPABILITY_FORBIDDEN\";\n if (body.capabilities.length !== new Set(body.capabilities).size) return \"DUPLICATE_CAPABILITY\";\n if (JSON.stringify(canonicalCapabilities(body.capabilities)) !== JSON.stringify([...FIXED_CAPABILITIES].sort())) return \"CAPABILITY_SET_NOT_EXECUTABLE_FIXED_SET\";\n if (!body.task || typeof body.task !== \"object\" || Array.isArray(body.task)) return \"TASK_INVALID\";\n if (JSON.stringify(Object.keys(body.task).sort()) !== JSON.stringify([\"input\",\"op\"])) return \"TASK_KEYS_INVALID\";\n if (body.task.op !== \"sha256_utf8\") return \"OP_NOT_ALLOWED\";\n if (typeof body.task.input !== \"string\" || body.task.input.length > 65536) return \"TASK_INPUT_INVALID\";\n return null;\n}\n\nexport default async function(req: Request) {\n await init();\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return response({\n schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",\n supported_ops:[\"sha256_utf8\"],fixed_capabilities:FIXED_CAPABILITIES,\n production_admission_eligible:false\n });\n }\n if (req.method === \"GET\" && url.pathname === \"/attempt\") {\n const challenge = url.searchParams.get(\"challenge\") || \"\";\n const q = await sqlite.execute({sql:\"SELECT state,reserved_at,completed_at,result_json,receipt_json FROM atomic_attempts_v2 WHERE challenge=?\",args:[challenge]});\n if (!q.rows.length) return response({error:\"NOT_FOUND\"},404);\n const row:any=q.rows[0];\n return response({\n state:row.state,reserved_at:row.reserved_at,completed_at:row.completed_at,\n result:row.result_json?JSON.parse(String(row.result_json)):null,\n receipt:row.receipt_json?JSON.parse(String(row.receipt_json)):null\n });\n }\n if (req.method !== \"POST\" || url.pathname !== \"/execute\") return response({error:\"NOT_FOUND\"},404);\n\n let body:any;\n try { body = await req.json(); } catch { return response({error:\"INVALID_JSON\"},400); }\n const invalid=validateV2(body);\n if (invalid) return response({error:invalid},400);\n\n const executionId=crypto.randomUUID();\n const reservedAt=new Date().toISOString();\n const taskJson=JSON.stringify(body.task);\n const reservation=await sqlite.execute({\n sql:`INSERT INTO atomic_attempts_v2(challenge,execution_id,logical_agent_id,workstream,task_json,state,reserved_at)\n VALUES(?,?,?,?,?,'RESERVED',?) ON CONFLICT(challenge) DO NOTHING`,\n args:[body.challenge,executionId,body.logical_agent_id,body.workstream,taskJson,reservedAt]\n });\n if (reservation.rowsAffected !== 1) return response({error:\"CHALLENGE_REPLAY_OR_CONCURRENT_ATTEMPT\"},409);\n\n const result={op:\"sha256_utf8\",sha256:await sha256Utf8(body.task.input)};\n const resultJson=JSON.stringify(result);\n const completedAt=new Date().toISOString();\n const receipt={\n schema:SCHEMA,\n classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",\n worker_id:WORKER_ID,\n execution_id:executionId,\n challenge:body.challenge,\n logical_agent_id:body.logical_agent_id,\n workstream:body.workstream,\n capabilities:[...FIXED_CAPABILITIES],\n capability_source:\"EXECUTABLE_FIXED_SET_NOT_CALLER_AUTHORITY\",\n identity_binding:\"CALLER_REQUESTED_NOT_PROJECT_ATTESTED\",\n challenge_binding:\"CALLER_SUPPLIED_NOT_PROJECT_PRECOMMITTED\",\n production_admission_eligible:false,\n task_sha256:await sha256Utf8(taskJson),\n result_sha256:await sha256Utf8(resultJson),\n reserved_at:reservedAt,\n completed_at:completedAt,\n execution_observation:\"ATOMIC_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",\n human_authority_approval:false,\n additional_out_of_pocket_spend_usd:0\n };\n const done=await sqlite.execute({\n sql:`UPDATE atomic_attempts_v2\n SET state='COMPLETE',completed_at=?,result_json=?,receipt_json=?\n WHERE challenge=? AND execution_id=? AND state='RESERVED'`,\n args:[completedAt,resultJson,JSON.stringify(receipt),body.challenge,executionId]\n });\n if (done.rowsAffected !== 1) return response({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return response({result,receipt},200);\n}",[192],"2be2880c-b46c-4a90-bdd4-bc11023cb35d","atomic_worker.ts","464efc54-abb7-11f1-87fe-1607ee4eb77e",5,["D",1788893907200],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA = \"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V1\";\nconst WORKER_ID = \"mosadek/project-brain-exec-issuer-v1/atomic_worker.ts\";\n\nfunction hex(b: ArrayBuffer | Uint8Array) {\n const a = b instanceof Uint8Array ? b : new Uint8Array(b);\n return [...a].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function sha256Utf8(s: string) {\n return hex(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s)));\n}\nfunction response(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}\n });\n}\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_attempts(\n challenge TEXT PRIMARY KEY,\n execution_id TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL,\n workstream TEXT NOT NULL,\n task_json TEXT NOT NULL,\n state TEXT NOT NULL,\n reserved_at TEXT NOT NULL,\n completed_at TEXT,\n result_json TEXT,\n receipt_json TEXT\n )`);\n}\nfunction validate(body: any): string | null {\n if (!body || typeof body !== \"object\" || Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n const keys = Object.keys(body).sort();\n const allowed = [\"capabilities\",\"challenge\",\"logical_agent_id\",\"task\",\"workstream\"].sort();\n if (JSON.stringify(keys) !== JSON.stringify(allowed)) return \"BODY_KEYS_INVALID\";\n if (typeof body.challenge !== \"string\" || !/^[0-9a-f]{64}$/.test(body.challenge)) return \"CHALLENGE_INVALID\";\n if (typeof body.logical_agent_id !== \"string\" || body.logical_agent_id.length < 3 || body.logical_agent_id.length > 128) return \"AGENT_ID_INVALID\";\n if (typeof body.workstream !== \"string\" || body.workstream.length < 1 || body.workstream.length > 96) return \"WORKSTREAM_INVALID\";\n if (!Array.isArray(body.capabilities) || body.capabilities.length > 64 ||\n !body.capabilities.every((x: unknown) => typeof x === \"string\" && x.length >= 1 && x.length <= 96)) return \"CAPABILITIES_INVALID\";\n if (!body.task || typeof body.task !== \"object\" || Array.isArray(body.task)) return \"TASK_INVALID\";\n if (JSON.stringify(Object.keys(body.task).sort()) !== JSON.stringify([\"input\",\"op\"])) return \"TASK_KEYS_INVALID\";\n if (body.task.op !== \"sha256_utf8\") return \"OP_NOT_ALLOWED\";\n if (typeof body.task.input !== \"string\" || body.task.input.length > 65536) return \"TASK_INPUT_INVALID\";\n return null;\n}\n\nexport default async function(req: Request) {\n await init();\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return response({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANARY_NONAUTHORITY\",supported_ops:[\"sha256_utf8\"]});\n }\n if (req.method === \"GET\" && url.pathname === \"/attempt\") {\n const challenge = url.searchParams.get(\"challenge\") || \"\";\n const q = await sqlite.execute({sql:\"SELECT state,reserved_at,completed_at,result_json,receipt_json FROM atomic_attempts WHERE challenge=?\",args:[challenge]});\n if (!q.rows.length) return response({error:\"NOT_FOUND\"},404);\n const row:any=q.rows[0];\n return response({\n state:row.state,reserved_at:row.reserved_at,completed_at:row.completed_at,\n result:row.result_json?JSON.parse(String(row.result_json)):null,\n receipt:row.receipt_json?JSON.parse(String(row.receipt_json)):null\n });\n }\n if (req.method !== \"POST\" || url.pathname !== \"/execute\") return response({error:\"NOT_FOUND\"},404);\n\n let body:any;\n try { body = await req.json(); } catch { return response({error:\"INVALID_JSON\"},400); }\n const invalid=validate(body);\n if (invalid) return response({error:invalid},400);\n\n const executionId=crypto.randomUUID();\n const reservedAt=new Date().toISOString();\n const taskJson=JSON.stringify(body.task);\n const reservation=await sqlite.execute({\n sql:`INSERT INTO atomic_attempts(challenge,execution_id,logical_agent_id,workstream,task_json,state,reserved_at)\n VALUES(?,?,?,?,?,'RESERVED',?) ON CONFLICT(challenge) DO NOTHING`,\n args:[body.challenge,executionId,body.logical_agent_id,body.workstream,taskJson,reservedAt]\n });\n if (reservation.rowsAffected !== 1) return response({error:\"CHALLENGE_REPLAY_OR_CONCURRENT_ATTEMPT\"},409);\n\n const inputSha256=await sha256Utf8(body.task.input);\n const result={op:\"sha256_utf8\",sha256:inputSha256};\n const resultJson=JSON.stringify(result);\n const resultSha256=await sha256Utf8(resultJson);\n const completedAt=new Date().toISOString();\n const receipt={\n schema:SCHEMA,\n classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",\n worker_id:WORKER_ID,\n execution_id:executionId,\n challenge:body.challenge,\n logical_agent_id:body.logical_agent_id,\n workstream:body.workstream,\n capabilities:[...new Set(body.capabilities)].sort(),\n task_sha256:await sha256Utf8(taskJson),\n result_sha256:resultSha256,\n reserved_at:reservedAt,\n completed_at:completedAt,\n execution_observation:\"ATOMIC_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",\n human_authority_approval:false,\n additional_out_of_pocket_spend_usd:0\n };\n const done=await sqlite.execute({\n sql:`UPDATE atomic_attempts\n SET state='COMPLETE',completed_at=?,result_json=?,receipt_json=?\n WHERE challenge=? AND execution_id=? AND state='RESERVED'`,\n args:[completedAt,resultJson,JSON.stringify(receipt),body.challenge,executionId]\n });\n if (done.rowsAffected !== 1) return response({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return response({result,receipt},200);\n}",[199],"9d5d2044-e587-40a8-b2c2-e244a5e5cb40",["D",1788896843049],[27],"pulls","branches",1,"forks","envVars",{"_216":210,"_218":61},"connections",{"_216":61,"_217":61},"count","unfilledCount","emptyCount",{"_41":205,"_31":27,"_29":30,"_142":-5,"_39":40,"_38":14,"_144":57,"_36":257,"_13":61,"_32":33,"_34":35,"_23":24,"_148":-5,"_230":258,"_26":259},{"_41":198,"_31":199,"_29":200,"_142":-5,"_39":40,"_38":201,"_144":57,"_36":254,"_13":61,"_32":146,"_34":203,"_23":24,"_148":-5,"_230":255,"_26":256},{"_41":191,"_31":192,"_29":193,"_142":-5,"_39":40,"_38":194,"_144":57,"_36":251,"_13":61,"_32":146,"_34":196,"_23":24,"_148":-5,"_230":252,"_26":253},{"_41":184,"_31":185,"_29":186,"_142":-5,"_39":40,"_38":187,"_144":24,"_36":248,"_13":61,"_32":146,"_34":189,"_23":24,"_148":-5,"_230":249,"_26":250},{"_41":177,"_31":178,"_29":179,"_142":-5,"_39":40,"_38":180,"_144":57,"_36":245,"_13":61,"_32":146,"_34":182,"_23":24,"_148":-5,"_230":246,"_26":247},{"_41":171,"_31":172,"_29":173,"_142":-5,"_39":40,"_38":154,"_144":57,"_36":242,"_13":61,"_32":33,"_34":175,"_23":24,"_148":-5,"_230":243,"_26":244},{"_41":164,"_31":165,"_29":166,"_142":-5,"_39":40,"_38":167,"_144":57,"_36":239,"_13":61,"_32":146,"_34":169,"_23":24,"_148":-5,"_230":240,"_26":241},{"_41":157,"_31":158,"_29":159,"_142":-5,"_39":40,"_38":160,"_144":24,"_36":236,"_13":61,"_32":33,"_34":162,"_23":24,"_148":-5,"_230":237,"_26":238},{"_41":150,"_31":151,"_29":55,"_142":-5,"_39":40,"_38":152,"_144":57,"_36":233,"_13":154,"_32":146,"_34":155,"_23":24,"_148":-5,"_230":234,"_26":235},{"_41":139,"_31":140,"_29":141,"_142":-5,"_39":40,"_38":143,"_144":57,"_36":229,"_13":61,"_32":146,"_34":147,"_23":24,"_148":-5,"_230":231,"_26":232},["D",1788896818243],"children",[],[140],["D",1788893872452],[],[151],["D",1788896839528],[],[158],["D",1788896799385],[],[165],["D",1788893693732],[],[172],["D",1788896819917],[],[178],["D",1788896801057],[],[185],["D",1788896382138],[],[192],["D",1788893907200],[],[199],["D",1788896843049],[],[27],["D",1788893645758],["D",1789502486629],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_126":298,"_299":300,"_301":302,"_303":24,"_304":24,"_305":24,"_306":57,"_307":-5,"_308":-7,"_309":-7,"_310":61,"_311":24,"_312":24,"_313":-5,"_314":24,"_315":24,"_316":24,"_317":-5},"ENV",{"_269":270,"_271":272,"_273":88,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v19