[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_592":593,"_594":595},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":59,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",95,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","v5r1_rotating_bearer_canary.ts","latestPath","fileId","01a082aa-2787-72f6-a812-4d49d9b83817","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { issueFixedV5R1, V5R1, readV5R1 } from \"./issuer_v5r1_rotating_bearer_preboot.ts\";\nconst W5=\"https://mosadek--01a082a847e57418ae72bbcbfbd920a6.web.val.run\";\nasync function call(base:string,path:string,method=\"GET\",body?:unknown){const r=await fetch(base+path,{method,headers:body?{\"content-type\":\"application/json\"}:undefined,body:body?JSON.stringify(body):undefined});let j:any=null;try{j=await r.json()}catch{};return {status:r.status,body:j}}\nfunction must(x:boolean,n:string){if(!x)throw new Error(n)}\nconst checks:any[]=[];const ck=(n:string,p:boolean,d?:any)=>{checks.push({name:n,pass:p,detail:d});must(p,n)};\nconst worker=(globalThis as any).__V5R1_WORKER_URL__||W5;\nconst pre:any=await readV5R1();\nif(pre&&String(pre.state)===\"RUNNING\"){const past=new Date(Date.now()-1000).toISOString();await sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET liveness_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,V5R1.slot_id,Number(pre.generation)]});await readV5R1();}\nif(pre&&String(pre.state)===\"BOOTING\"){const past=new Date(Date.now()-1000).toISOString();await sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET preboot_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,V5R1.slot_id,Number(pre.generation)]});await readV5R1();}\nlet a:any=await issueFixedV5R1();\nck(\"issue_booting_single_holder\",a.ok===true&&a.state===\"BOOTING\"&&a.public_http_issuer===false,a);\nconst wrong=await call(worker,\"/activate\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:\"00\".repeat(32)});\nck(\"wrong_bearer_activate_rejected\",wrong.status===403&&wrong.body?.error===\"BEARER_STALE_OR_MISMATCH\",wrong);\nconst attempts=await Promise.all(Array.from({length:2},()=>call(worker,\"/activate\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer})));\nconst wins=attempts.filter(x=>x.status===200),losses=attempts.filter(x=>x.status!==200);\nck(\"concurrent_activate_exactly_one_winner\",wins.length===1&&losses.length===1,{wins:wins.length,losses:losses.map(x=>({status:x.status,error:x.body?.error}))});\nconst ar=wins[0].body?.receipt;\nconst runBearer=wins[0].body?.continuation_bearer;\nck(\"running_receipt_has_unexpired_liveness\",ar?.state===\"RUNNING\"&&ar?.current_liveness_signal===true&&Date.parse(ar?.liveness_expires_at)>Date.now(),{state:ar?.state,current_liveness_signal:ar?.current_liveness_signal});\nck(\"activation_rotates_bearer\",typeof runBearer===\"string\"&&/^[0-9a-f]{64}$/.test(runBearer)&&runBearer!==a.bearer,{rotated:true});\nconst oldActivationBearer=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer,heartbeat_seq_expected:0});\nck(\"initial_bearer_dead_after_activation\",oldActivationBearer.status===403&&oldActivationBearer.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:oldActivationBearer.status,error:oldActivationBearer.body?.error});\nconst busy:any=await issueFixedV5R1();\nck(\"duplicate_issue_while_running_blocked\",busy.ok===false&&busy.error===\"SLOT_BUSY\"&&busy.state===\"RUNNING\",{error:busy.error,state:busy.state});\nconst wrongHb=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:\"11\".repeat(32),heartbeat_seq_expected:0});\nck(\"wrong_bearer_heartbeat_rejected\",wrongHb.status===403&&wrongHb.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:wrongHb.status,error:wrongHb.body?.error});\nconst hb=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:runBearer,heartbeat_seq_expected:0});\nck(\"heartbeat_advances_seq_and_liveness\",hb.status===200&&hb.body?.heartbeat_seq===1&&Date.parse(hb.body?.liveness_expires_at)>Date.now(),{status:hb.status,seq:hb.body?.heartbeat_seq});\nconst nextBearer=hb.body?.continuation_bearer;\nck(\"heartbeat_rotates_bearer\",typeof nextBearer===\"string\"&&/^[0-9a-f]{64}$/.test(nextBearer)&&nextBearer!==runBearer,{rotated:true});\nconst replay=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:runBearer,heartbeat_seq_expected:0});\nck(\"previous_bearer_replay_rejected\",replay.status===403&&replay.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:replay.status,error:replay.body?.error});\nconst loserResync=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:runBearer,heartbeat_seq_expected:1});\nck(\"loser_cannot_resync_with_public_sequence\",loserResync.status===403&&loserResync.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:loserResync.status,error:loserResync.body?.error});\nconst winnerContinue=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:nextBearer,heartbeat_seq_expected:1});\nck(\"winner_continues_only_with_rotated_bearer\",winnerContinue.status===200&&winnerContinue.body?.heartbeat_seq===2,{status:winnerContinue.status,seq:winnerContinue.body?.heartbeat_seq});\nconst previousBearerDead=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:nextBearer,heartbeat_seq_expected:2});\nck(\"previous_heartbeat_bearer_dead\",previousBearerDead.status===403&&previousBearerDead.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:previousBearerDead.status,error:previousBearerDead.body?.error});\nconst pub=await call(worker,\"/attempt\");\nck(\"public_readback_sanitized_running\",pub.status===200&&pub.body?.state===\"RUNNING\"&&pub.body?.bearer_present===false&&pub.body?.bearer_digest_exposed===false&&!Object.prototype.hasOwnProperty.call(pub.body?.activation_receipt||{},\"continuation_bearer\"),{state:pub.body?.state,bearer_present:pub.body?.bearer_present,bearer_digest_exposed:pub.body?.bearer_digest_exposed});\nconst past=new Date(Date.now()-1000).toISOString();\nawait sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET liveness_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,a.slot_id,a.generation]});\nawait readV5R1();\nconst expired=await call(worker,\"/attempt\");\nck(\"running_liveness_expiry_terminal\",expired.status===200&&expired.body?.state===\"EXPIRED_LIVENESS\",expired);\nconst b:any=await issueFixedV5R1();\nck(\"reissue_after_expiry\",b.ok===true&&b.generation===a.generation+1&&b.state===\"BOOTING\",b);\nconst bAct=await call(worker,\"/activate\",\"POST\",{slot_id:b.slot_id,generation:b.generation,incarnation_id:b.incarnation_id,bearer:b.bearer});\nck(\"fresh_activation_after_expiry\",bAct.status===200&&bAct.body?.receipt?.state===\"RUNNING\",bAct);\nconst final=await call(worker,\"/attempt\");\nck(\"final_running_readback\",final.status===200&&final.body?.state===\"RUNNING\"&&final.body?.heartbeat_seq===0,final);\nconst report={schema:\"PROJECT_BRAIN_EXTERNAL_ADMISSION_V5R1_ROTATING_BEARER_LIVE_FALSIFICATION_V1\",classification:\"CANDIDATE_NONAUTHORITY_LIVE_TEST\",observed_at:new Date().toISOString(),\nchecks_total:checks.length,pass:checks.every(x=>x.pass),checks,production_admission_eligible:false,physical_chat_session_distinctness_proven:false,canonical_brain_mutation:false,brain_queue_traffic_submitted:false,p_real_increment:0,superhero_count_increment:0,human_authority_approval:false,direct_sprites_calls:0,additional_out_of_pocket_spend_usd:0};\nconsole.log(JSON.stringify(report,null,2));export default report;","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { issueFixedV5R1, V5R1, readV5R1 } from \"./issuer_v5r1_rotating_bearer_preboot.ts\";\nconst W5=\"https://mosadek--01a082a847e57418ae72bbcbfbd920a6.web.val.run\";\nasync function call(base:string,path:string,method=\"GET\",body?:unknown){const r=await fetch(base+path,{method,headers:body?{\"content-type\":\"application/json\"}:undefined,body:body?JSON.stringify(body):undefined});let j:any=null;try{j=await r.json()}catch{};return {status:r.status,body:j}}\nfunction must(x:boolean,n:string){if(!x)throw new Error(n)}\nconst checks:any[]=[];const ck=(n:string,p:boolean,d?:any)=>{checks.push({name:n,pass:p,detail:d});must(p,n)};\nconst worker=(globalThis as any).__V5R1_WORKER_URL__||W5;\nconst pre:any=await readV5R1();\nif(pre&&String(pre.state)===\"RUNNING\"){const past=new Date(Date.now()-1000).toISOString();await sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET liveness_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,V5R1.slot_id,Number(pre.generation)]});await readV5R1();}\nif(pre&&String(pre.state)===\"BOOTING\"){const past=new Date(Date.now()-1000).toISOString();await sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET preboot_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,V5R1.slot_id,Number(pre.generation)]});await readV5R1();}\nlet a:any=await issueFixedV5R1();\nck(\"issue_booting_single_holder\",a.ok===true&&a.state===\"BOOTING\"&&a.public_http_issuer===false,{ok:a.ok,state:a.state,generation:a.generation,incarnation_id:a.incarnation_id});\nconst wrong=await call(worker,\"/activate\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:\"00\".repeat(32)});\nck(\"wrong_bearer_activate_rejected\",wrong.status===403&&wrong.body?.error===\"BEARER_STALE_OR_MISMATCH\",wrong);\nconst attempts=await Promise.all(Array.from({length:2},()=>call(worker,\"/activate\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer})));\nconst wins=attempts.filter(x=>x.status===200),losses=attempts.filter(x=>x.status!==200);\nck(\"concurrent_activate_exactly_one_winner\",wins.length===1&&losses.length===1,{wins:wins.length,losses:losses.map(x=>({status:x.status,error:x.body?.error}))});\nconst ar=wins[0].body?.receipt;\nconst runBearer=wins[0].body?.continuation_bearer;\nck(\"running_receipt_has_unexpired_liveness\",ar?.state===\"RUNNING\"&&ar?.current_liveness_signal===true&&Date.parse(ar?.liveness_expires_at)>Date.now(),{state:ar?.state,current_liveness_signal:ar?.current_liveness_signal});\nck(\"activation_rotates_bearer\",typeof runBearer===\"string\"&&/^[0-9a-f]{64}$/.test(runBearer)&&runBearer!==a.bearer,{rotated:true});\nconst oldActivationBearer=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer,heartbeat_seq_expected:0});\nck(\"initial_bearer_dead_after_activation\",oldActivationBearer.status===403&&oldActivationBearer.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:oldActivationBearer.status,error:oldActivationBearer.body?.error});\nconst busy:any=await issueFixedV5R1();\nck(\"duplicate_issue_while_running_blocked\",busy.ok===false&&busy.error===\"SLOT_BUSY\"&&busy.state===\"RUNNING\",{error:busy.error,state:busy.state});\nconst wrongHb=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:\"11\".repeat(32),heartbeat_seq_expected:0});\nck(\"wrong_bearer_heartbeat_rejected\",wrongHb.status===403&&wrongHb.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:wrongHb.status,error:wrongHb.body?.error});\nconst hb=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:runBearer,heartbeat_seq_expected:0});\nck(\"heartbeat_advances_seq_and_liveness\",hb.status===200&&hb.body?.heartbeat_seq===1&&Date.parse(hb.body?.liveness_expires_at)>Date.now(),{status:hb.status,seq:hb.body?.heartbeat_seq});\nconst nextBearer=hb.body?.continuation_bearer;\nck(\"heartbeat_rotates_bearer\",typeof nextBearer===\"string\"&&/^[0-9a-f]{64}$/.test(nextBearer)&&nextBearer!==runBearer,{rotated:true});\nconst replay=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:runBearer,heartbeat_seq_expected:0});\nck(\"previous_bearer_replay_rejected\",replay.status===403&&replay.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:replay.status,error:replay.body?.error});\nconst loserResync=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:runBearer,heartbeat_seq_expected:1});\nck(\"loser_cannot_resync_with_public_sequence\",loserResync.status===403&&loserResync.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:loserResync.status,error:loserResync.body?.error});\nconst winnerContinue=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:nextBearer,heartbeat_seq_expected:1});\nck(\"winner_continues_only_with_rotated_bearer\",winnerContinue.status===200&&winnerContinue.body?.heartbeat_seq===2,{status:winnerContinue.status,seq:winnerContinue.body?.heartbeat_seq});\nconst previousBearerDead=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:nextBearer,heartbeat_seq_expected:2});\nck(\"previous_heartbeat_bearer_dead\",previousBearerDead.status===403&&previousBearerDead.body?.error===\"BEARER_STALE_OR_MISMATCH\",{status:previousBearerDead.status,error:previousBearerDead.body?.error});\nconst pub=await call(worker,\"/attempt\");\nck(\"public_readback_sanitized_running\",pub.status===200&&pub.body?.state===\"RUNNING\"&&pub.body?.bearer_present===false&&pub.body?.bearer_digest_exposed===false&&!Object.prototype.hasOwnProperty.call(pub.body?.activation_receipt||{},\"continuation_bearer\"),{state:pub.body?.state,bearer_present:pub.body?.bearer_present,bearer_digest_exposed:pub.body?.bearer_digest_exposed});\nconst past=new Date(Date.now()-1000).toISOString();\nawait sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET liveness_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,a.slot_id,a.generation]});\nawait readV5R1();\nconst expired=await call(worker,\"/attempt\");\nck(\"running_liveness_expiry_terminal\",expired.status===200&&expired.body?.state===\"EXPIRED_LIVENESS\",expired);\nconst b:any=await issueFixedV5R1();\nck(\"reissue_after_expiry\",b.ok===true&&b.generation===a.generation+1&&b.state===\"BOOTING\",{ok:b.ok,generation:b.generation,state:b.state,incarnation_id:b.incarnation_id});\nconst bAct=await call(worker,\"/activate\",\"POST\",{slot_id:b.slot_id,generation:b.generation,incarnation_id:b.incarnation_id,bearer:b.bearer});\nck(\"fresh_activation_after_expiry\",bAct.status===200&&bAct.body?.receipt?.state===\"RUNNING\",{status:bAct.status,state:bAct.body?.receipt?.state});\nconst final=await call(worker,\"/attempt\");\nck(\"final_running_readback\",final.status===200&&final.body?.state===\"RUNNING\"&&final.body?.heartbeat_seq===0,final);\nconst report={schema:\"PROJECT_BRAIN_EXTERNAL_ADMISSION_V5R1_ROTATING_BEARER_LIVE_FALSIFICATION_V1\",classification:\"CANDIDATE_NONAUTHORITY_LIVE_TEST\",observed_at:new Date().toISOString(),\nchecks_total:checks.length,pass:checks.every(x=>x.pass),checks,raw_bearer_logged:false,production_admission_eligible:false,physical_chat_session_distinctness_proven:false,canonical_brain_mutation:false,brain_queue_traffic_submitted:false,p_real_increment:0,superhero_count_increment:0,human_authority_approval:false,direct_sprites_calls:0,additional_out_of_pocket_spend_usd:0};\nconsole.log(JSON.stringify(report,null,2));export default report;","createdAt",["D",1788898680480],"branchVersion","branchId","bf3f4bf9-6775-417b-8b3b-0fbc443488fb","id","b4d20ed1-eb6f-490c-90dd-6aff6508c246","project-brain-exec-issuer-v1",["D",1788893645758],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Isolated execution-incarnation issuer canary","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","aa7fce52-abb6-11f1-b143-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","b4d20ed1eb6f490c90dd6aff6508c246","tursoHostname","b4d20ed1eb6f490c90dd6aff6508c246-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789502486629],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",96,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":587,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":588,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":589,"_84":590,"_86":591,"_88":25},"tree",[438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474],"files",[438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474],"counts",{"_428":63,"_429":207,"_430":63,"_431":432,"_433":434},"contents",[131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":421,"_32":422,"_30":423,"_171":-5,"_41":42,"_40":424,"_173":59,"_38":425,"_13":63,"_33":34,"_35":426,"_24":25,"_178":-5,"_27":427},{"_43":414,"_32":415,"_30":416,"_171":-5,"_41":42,"_40":417,"_173":59,"_38":418,"_13":63,"_33":34,"_35":419,"_24":25,"_178":-5,"_27":420},{"_43":407,"_32":408,"_30":409,"_171":-5,"_41":42,"_40":410,"_173":59,"_38":411,"_13":63,"_33":34,"_35":412,"_24":25,"_178":-5,"_27":413},{"_43":401,"_32":402,"_30":403,"_171":-5,"_41":42,"_40":175,"_173":59,"_38":404,"_13":63,"_33":176,"_35":405,"_24":25,"_178":-5,"_27":406},{"_43":394,"_32":395,"_30":396,"_171":-5,"_41":42,"_40":397,"_173":59,"_38":398,"_13":63,"_33":176,"_35":399,"_24":25,"_178":-5,"_27":400},{"_43":387,"_32":388,"_30":389,"_171":-5,"_41":42,"_40":390,"_173":59,"_38":391,"_13":207,"_33":176,"_35":392,"_24":25,"_178":-5,"_27":393},{"_43":380,"_32":381,"_30":382,"_171":-5,"_41":42,"_40":383,"_173":59,"_38":384,"_13":63,"_33":176,"_35":385,"_24":25,"_178":-5,"_27":386},{"_43":374,"_32":375,"_30":376,"_171":-5,"_41":42,"_40":185,"_173":59,"_38":377,"_13":63,"_33":34,"_35":378,"_24":25,"_178":-5,"_27":379},{"_43":367,"_32":368,"_30":369,"_171":-5,"_41":42,"_40":370,"_173":59,"_38":371,"_13":63,"_33":176,"_35":372,"_24":25,"_178":-5,"_27":373},{"_43":360,"_32":361,"_30":362,"_171":-5,"_41":42,"_40":363,"_173":59,"_38":364,"_13":63,"_33":34,"_35":365,"_24":25,"_178":-5,"_27":366},{"_43":353,"_32":354,"_30":355,"_171":-5,"_41":42,"_40":356,"_173":59,"_38":357,"_13":63,"_33":176,"_35":358,"_24":25,"_178":-5,"_27":359},{"_43":346,"_32":347,"_30":348,"_171":-5,"_41":42,"_40":349,"_173":59,"_38":350,"_13":63,"_33":34,"_35":351,"_24":25,"_178":-5,"_27":352},{"_43":339,"_32":340,"_30":341,"_171":-5,"_41":42,"_40":342,"_173":59,"_38":343,"_13":63,"_33":34,"_35":344,"_24":25,"_178":-5,"_27":345},{"_43":332,"_32":333,"_30":334,"_171":-5,"_41":42,"_40":335,"_173":59,"_38":336,"_13":63,"_33":34,"_35":337,"_24":25,"_178":-5,"_27":338},{"_43":325,"_32":326,"_30":327,"_171":-5,"_41":42,"_40":328,"_173":59,"_38":329,"_13":63,"_33":34,"_35":330,"_24":25,"_178":-5,"_27":331},{"_43":318,"_32":319,"_30":320,"_171":-5,"_41":42,"_40":321,"_173":59,"_38":322,"_13":63,"_33":34,"_35":323,"_24":25,"_178":-5,"_27":324},{"_43":311,"_32":312,"_30":313,"_171":-5,"_41":42,"_40":314,"_173":59,"_38":315,"_13":63,"_33":34,"_35":316,"_24":25,"_178":-5,"_27":317},{"_43":304,"_32":305,"_30":306,"_171":-5,"_41":42,"_40":307,"_173":59,"_38":308,"_13":63,"_33":34,"_35":309,"_24":25,"_178":-5,"_27":310},{"_43":297,"_32":298,"_30":299,"_171":-5,"_41":42,"_40":300,"_173":59,"_38":301,"_13":207,"_33":34,"_35":302,"_24":25,"_178":-5,"_27":303},{"_43":290,"_32":291,"_30":292,"_171":-5,"_41":42,"_40":293,"_173":59,"_38":294,"_13":212,"_33":34,"_35":295,"_24":25,"_178":-5,"_27":296},{"_43":283,"_32":284,"_30":285,"_171":-5,"_41":42,"_40":286,"_173":59,"_38":287,"_13":63,"_33":34,"_35":288,"_24":25,"_178":-5,"_27":289},{"_43":277,"_32":278,"_30":57,"_171":-5,"_41":42,"_40":279,"_173":59,"_38":280,"_13":185,"_33":176,"_35":281,"_24":25,"_178":-5,"_27":282},{"_43":270,"_32":271,"_30":272,"_171":-5,"_41":42,"_40":273,"_173":59,"_38":274,"_13":63,"_33":176,"_35":275,"_24":25,"_178":-5,"_27":276},{"_43":263,"_32":264,"_30":265,"_171":-5,"_41":42,"_40":266,"_173":59,"_38":267,"_13":63,"_33":34,"_35":268,"_24":25,"_178":-5,"_27":269},{"_43":256,"_32":257,"_30":258,"_171":-5,"_41":42,"_40":259,"_173":59,"_38":260,"_13":63,"_33":34,"_35":261,"_24":25,"_178":-5,"_27":262},{"_43":249,"_32":250,"_30":251,"_171":-5,"_41":42,"_40":252,"_173":59,"_38":253,"_13":63,"_33":34,"_35":254,"_24":25,"_178":-5,"_27":255},{"_43":242,"_32":243,"_30":244,"_171":-5,"_41":42,"_40":245,"_173":59,"_38":246,"_13":63,"_33":34,"_35":247,"_24":25,"_178":-5,"_27":248},{"_43":235,"_32":236,"_30":237,"_171":-5,"_41":42,"_40":238,"_173":59,"_38":239,"_13":63,"_33":34,"_35":240,"_24":25,"_178":-5,"_27":241},{"_43":228,"_32":229,"_30":230,"_171":-5,"_41":42,"_40":231,"_173":59,"_38":232,"_13":63,"_33":34,"_35":233,"_24":25,"_178":-5,"_27":234},{"_43":221,"_32":222,"_30":223,"_171":-5,"_41":42,"_40":224,"_173":59,"_38":225,"_13":207,"_33":34,"_35":226,"_24":25,"_178":-5,"_27":227},{"_43":214,"_32":215,"_30":216,"_171":-5,"_41":42,"_40":217,"_173":59,"_38":218,"_13":212,"_33":34,"_35":219,"_24":25,"_178":-5,"_27":220},{"_43":210,"_32":28,"_30":31,"_171":-5,"_41":42,"_40":14,"_173":25,"_38":211,"_13":212,"_33":34,"_35":37,"_24":25,"_178":-5,"_27":213},{"_43":202,"_32":203,"_30":204,"_171":-5,"_41":42,"_40":205,"_173":59,"_38":206,"_13":207,"_33":34,"_35":208,"_24":25,"_178":-5,"_27":209},{"_43":195,"_32":196,"_30":197,"_171":-5,"_41":42,"_40":198,"_173":59,"_38":199,"_13":185,"_33":176,"_35":200,"_24":25,"_178":-5,"_27":201},{"_43":188,"_32":189,"_30":190,"_171":-5,"_41":42,"_40":191,"_173":59,"_38":192,"_13":63,"_33":176,"_35":193,"_24":25,"_178":-5,"_27":194},{"_43":180,"_32":181,"_30":182,"_171":-5,"_41":42,"_40":183,"_173":59,"_38":184,"_13":185,"_33":176,"_35":186,"_24":25,"_178":-5,"_27":187},{"_43":168,"_32":169,"_30":170,"_171":-5,"_41":42,"_40":172,"_173":59,"_38":174,"_13":175,"_33":176,"_35":177,"_24":25,"_178":-5,"_27":179},"47ff7126-2d74-441f-9b3d-c85740f4c12b","worker_v6e_encrypted_delivery.ts","da4701aa-abc0-11f1-a520-1607ee4eb77e","parentId",93,"latest",["D",1788898625856],5,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { V6E,bearerDigest,sha256Utf8,reconcileV6E } from \"./issuer_v6e_encrypted_delivery.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_SINGLETON_ENCRYPTED_DELIVERY_WORKER_V6E_CANDIDATE\";\nconst POP_SCHEMA=\"PROJECT_BRAIN_SINGLETON_PROOF_OF_POSSESSION_V7_CANDIDATE\";\nconst POP_SLOT=\"chatgpt-unattested-singleton-pop-v7\";\nconst POP_TTL_MS=120000;\nconst POP_RUNNING_TTL_MS=180000;\nconst PUBLIC_SPKI_B64=\"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlavMnzzQiRX50lcBoSP6ClES3MqWCrxeUceU6mOROms5Wm1QCNdVfUegDvwmcZQMV9k5uHkh7Q+V+JlsQgWhrUdAi4Avoq3N5fcrURLYmLN4IlyY6hk8W3WpgR6yC1JuUOARF35UgjZynW1pXctnBtiCg7OZStIqr3HOl0K43rewuS6Pv9AZUv7HSAze8jvJ/qek/ubsP5y9FVH9P0f3ZgMaqJNzI3e7HV+dd6/Qw0PzhdvbYCRubX8bWYQgBGal9f9vMgw3L/Jq7NSR6iKqCnufCSH6bVxOJaVuIdDSEnL0f+9tkqg2MaWfoMigoYmAaoOhDLIsgm2WkHT6vusx5QIDAQAB\";\nconst PUBLIC_KEY_SHA256=\"5e18e38511cc5f376e2faaf50cf1f77c53254bad381500d5bfe4b4651d2b700b\";\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nfunction exactKeys(x:any,ks:string[]){return x&&typeof x===\"object\"&&!Array.isArray(x)&&JSON.stringify(Object.keys(x).sort())===JSON.stringify([...ks].sort())}\nfunction unb64(s:string){const x=atob(s),a=new Uint8Array(x.length);for(let i=0;ix.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function readSlot(){const q=await sqlite.execute({sql:\"SELECT * FROM singleton_encrypted_v6e WHERE slot_id=?\",args:[V6E.slot_id]});return q.rows.length?(q.rows[0] as any):null}\nasync function initPop(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS singleton_pop_v7(\n slot_id TEXT PRIMARY KEY,generation INTEGER NOT NULL,public_key_sha256 TEXT NOT NULL,challenge TEXT NOT NULL UNIQUE,\n state TEXT NOT NULL,issued_at TEXT NOT NULL,expires_at TEXT NOT NULL,proved_at TEXT,signature_sha256 TEXT,\n authority_epoch INTEGER NOT NULL,constitution_version INTEGER NOT NULL,constitution_sha256 TEXT NOT NULL,registry_version INTEGER NOT NULL\n )`);\n}\nasync function reconcilePop(){\n await initPop();\n await sqlite.execute({sql:\"UPDATE singleton_pop_v7 SET state='EXPIRED' WHERE slot_id=? AND state IN ('CHALLENGE_ISSUED','PROVEN_RUNNING') AND julianday(expires_at)<=julianday('now')\",args:[POP_SLOT]});\n}\nasync function readPop(){\n await reconcilePop();\n const q=await sqlite.execute({sql:\"SELECT * FROM singleton_pop_v7 WHERE slot_id=?\",args:[POP_SLOT]});\n return q.rows.length?(q.rows[0] as any):null;\n}\nfunction popMessage(r:any){\n return [\n \"PROJECT_BRAIN_SINGLETON_POP_V7\",\n \"slot_id=\"+String(r.slot_id),\n \"generation=\"+String(r.generation),\n \"public_key_sha256=\"+String(r.public_key_sha256),\n \"challenge=\"+String(r.challenge),\n \"expires_at=\"+String(r.expires_at),\n \"authority_epoch=\"+String(r.authority_epoch),\n \"constitution_version=\"+String(r.constitution_version),\n \"constitution_sha256=\"+String(r.constitution_sha256),\n \"registry_version=\"+String(r.registry_version)\n ].join(\"\\n\");\n}\nasync function verifyPopSignature(message:string,sigB64url:string){\n try{\n const key=await crypto.subtle.importKey(\"spki\",unb64(PUBLIC_SPKI_B64),{name:\"RSA-PSS\",hash:\"SHA-256\"},false,[\"verify\"]);\n return await crypto.subtle.verify({name:\"RSA-PSS\",saltLength:32},key,unb64url(sigB64url),new TextEncoder().encode(message));\n }catch{return false}\n}\nasync function issuePop(){\n await reconcilePop();const old=await readPop();\n if(old&&[\"CHALLENGE_ISSUED\",\"PROVEN_RUNNING\"].includes(String(old.state)))return {ok:false,error:\"SLOT_BUSY\",state:String(old.state),generation:Number(old.generation),expires_at:String(old.expires_at)};\n const generation=old?Number(old.generation)+1:1,challenge=randomHex(32),now=new Date(),expires=new Date(now.getTime()+POP_TTL_MS);\n let c;\n if(!old)c=await sqlite.execute({sql:\"INSERT INTO singleton_pop_v7(slot_id,generation,public_key_sha256,challenge,state,issued_at,expires_at,authority_epoch,constitution_version,constitution_sha256,registry_version) VALUES(?,?,?,?, 'CHALLENGE_ISSUED',?,?,?,?,?,?) ON CONFLICT(slot_id) DO NOTHING\",args:[POP_SLOT,generation,PUBLIC_KEY_SHA256,challenge,now.toISOString(),expires.toISOString(),V6E.authority_epoch,V6E.constitution_version,V6E.constitution_sha256,V6E.registry_version]});\n else c=await sqlite.execute({sql:\"UPDATE singleton_pop_v7 SET generation=?,public_key_sha256=?,challenge=?,state='CHALLENGE_ISSUED',issued_at=?,expires_at=?,proved_at=NULL,signature_sha256=NULL,authority_epoch=?,constitution_version=?,constitution_sha256=?,registry_version=? WHERE slot_id=? AND generation=? AND state IN ('EXPIRED','PROVEN','FAILED')\",args:[generation,PUBLIC_KEY_SHA256,challenge,now.toISOString(),expires.toISOString(),V6E.authority_epoch,V6E.constitution_version,V6E.constitution_sha256,V6E.registry_version,POP_SLOT,Number(old.generation)]});\n if(c.rowsAffected!==1)return {ok:false,error:\"ATOMIC_SLOT_ACQUIRE_LOST_RACE\"};\n const r=await readPop();\n return {ok:true,schema:POP_SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_PUBLIC_CHALLENGE_BOUND_TO_EXECUTION_PUBLIC_KEY\",slot_id:POP_SLOT,generation,public_key_sha256:PUBLIC_KEY_SHA256,challenge,expires_at:String(r.expires_at),message_to_sign:popMessage(r),production_admission_eligible:false,p_real_delta:0,human_authority_approval:false};\n}\nexport default async function(req:Request){\n await reconcileV6E();const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/pop/issue\"){const out=await issuePop();return json(out,out.ok?201:409)}\n if(req.method===\"GET\"&&u.pathname===\"/pop/state\"){const r=await readPop();if(!r)return json({error:\"NOT_FOUND\"},404);return json({schema:POP_SCHEMA,slot_id:POP_SLOT,generation:Number(r.generation),public_key_sha256:String(r.public_key_sha256),challenge:String(r.challenge),state:String(r.state),issued_at:String(r.issued_at),expires_at:String(r.expires_at),proved_at:r.proved_at?String(r.proved_at):null,authority_epoch:Number(r.authority_epoch),constitution_version:Number(r.constitution_version),constitution_sha256:String(r.constitution_sha256),registry_version:Number(r.registry_version),secret_material_exposed:false})}\n if(req.method===\"GET\"&&u.pathname===\"/pop/prove\"){\n const r=await readPop();if(!r)return json({error:\"NOT_FOUND\"},404);\n const generation=Number(u.searchParams.get(\"generation\")),sig=String(u.searchParams.get(\"signature\")||\"\");\n if(!Number.isInteger(generation)||generation!==Number(r.generation))return json({error:\"GENERATION_MISMATCH\",state:String(r.state)},409);\n if(String(r.state)===\"EXPIRED\")return json({error:\"CHALLENGE_EXPIRED\"},410);\n if(String(r.state)!==\"CHALLENGE_ISSUED\")return json({error:\"CHALLENGE_NOT_PROVABLE\",state:String(r.state)},409);\n if(!/^[A-Za-z0-9_-]{100,1024}$/.test(sig))return json({error:\"SIGNATURE_SHAPE_INVALID\"},400);\n const message=popMessage(r),valid=await verifyPopSignature(message,sig);\n if(!valid)return json({error:\"SIGNATURE_INVALID\"},403);\n const sigSha=await sha256Utf8(sig),nowDate=new Date(),now=nowDate.toISOString(),liveUntil=new Date(nowDate.getTime()+POP_RUNNING_TTL_MS).toISOString();\n const changed=await sqlite.execute({sql:\"UPDATE singleton_pop_v7 SET state='PROVEN_RUNNING',proved_at=?,signature_sha256=?,expires_at=? WHERE slot_id=? AND generation=? AND state='CHALLENGE_ISSUED' AND julianday(expires_at)>julianday('now')\",args:[now,sigSha,liveUntil,POP_SLOT,generation]});\n if(changed.rowsAffected!==1){await reconcilePop();const q=await readPop();return json({error:\"PROOF_CAS_FAILED\",state:q?String(q.state):\"MISSING\"},409)}\n return json({schema:POP_SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_SINGLETON_PRIVATE_KEY_POSSESSION_RECEIPT\",slot_id:POP_SLOT,generation,public_key_sha256:PUBLIC_KEY_SHA256,state:\"PROVEN_RUNNING\",proved_at:now,liveness_expires_at:liveUntil,execution_secret_possession_proven:true,duplicate_live_incarnation_count_upper_bound:1,physical_chat_session_distinctness_proven:false,production_admission_eligible:false,independent_review_eligible:false,p_real_delta:0,human_authority_approval:false},200);\n }\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,state:\"CANDIDATE_NONAUTHORITY\",production_admission_eligible:false});\n if(req.method===\"GET\"&&u.pathname===\"/state\"){const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);return json({slot_id:r.slot_id,generation:Number(r.generation),public_key_sha256:String(r.public_key_sha256),state:String(r.state),issued_at:String(r.issued_at),expires_at:String(r.expires_at),consumed_at:r.consumed_at?String(r.consumed_at):null,result_sha256:r.result_sha256?String(r.result_sha256):null,bearer_present:false,bearer_digest_exposed:false});}\n if(req.method!==\"POST\"||u.pathname!==\"/consume\")return json({error:\"NOT_FOUND\"},404);\n let b:any;try{b=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!exactKeys(b,[\"slot_id\",\"generation\",\"public_key_sha256\",\"bearer\"]))return json({error:\"BODY_KEYS_INVALID\"},400);\n if(b.slot_id!==V6E.slot_id||!Number.isInteger(b.generation)||b.generation<1||typeof b.public_key_sha256!==\"string\"||!/^[0-9a-f]{64}$/.test(b.public_key_sha256)||typeof b.bearer!==\"string\"||!/^[0-9a-f]{64}$/.test(b.bearer))return json({error:\"FIELDS_INVALID\"},400);\n const digest=await bearerDigest(b.bearer),now=new Date().toISOString();\n const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);\n if(Number(r.generation)!==b.generation)return json({error:\"GENERATION_MISMATCH\",state:String(r.state)},409);\n if(String(r.public_key_sha256)!==b.public_key_sha256)return json({error:\"PUBLIC_KEY_BINDING_MISMATCH\"},403);\n if(String(r.bearer_digest)!==digest)return json({error:\"BEARER_MISMATCH\"},403);\n if(String(r.state)===\"EXPIRED_UNCONSUMED\")return json({error:\"BEARER_EXPIRED\"},410);\n if(String(r.state)!==\"ISSUED\")return json({error:\"SLOT_NOT_CONSUMABLE\",state:String(r.state)},409);\n if(Number(r.authority_epoch)!==V6E.authority_epoch||Number(r.constitution_version)!==V6E.constitution_version||String(r.constitution_sha256)!==V6E.constitution_sha256||Number(r.registry_version)!==V6E.registry_version)return json({error:\"AUTHORITY_OR_CONSTITUTION_BINDING_MISMATCH\"},409);\n const taskJson=String(r.task_json);if(await sha256Utf8(taskJson)!==String(r.task_sha256))return json({error:\"TASK_HASH_MISMATCH\"},500);\n let task:any;try{task=JSON.parse(taskJson)}catch{return json({error:\"TASK_JSON_INVALID\"},500)}\n if(task?.op!==\"sha256_utf8\"||typeof task?.input!==\"string\")return json({error:\"TASK_PROFILE_INVALID\"},500);\n const resultSha=await sha256Utf8(task.input);\n const changed=await sqlite.execute({sql:\"UPDATE singleton_encrypted_v6e SET state='CONSUMED',consumed_at=?,result_sha256=? WHERE slot_id=? AND generation=? AND bearer_digest=? AND public_key_sha256=? AND state='ISSUED' AND expires_at>?\",args:[now,resultSha,V6E.slot_id,b.generation,digest,b.public_key_sha256,now]});\n if(changed.rowsAffected!==1){await reconcileV6E();const q=await readSlot();return json({error:\"CONSUME_CAS_FAILED\",state:q?String(q.state):\"MISSING\"},409)}\n return json({schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_ENCRYPTED_BEARER_POSSESSION_EXECUTION_RECEIPT\",slot_id:V6E.slot_id,generation:b.generation,fixed_agent_id:V6E.fixed_agent_id,public_key_sha256:b.public_key_sha256,task_sha256:String(r.task_sha256),result_sha256:resultSha,state:\"CONSUMED\",consumed_at:now,execution_observation:\"BEARER_POSSESSION_REQUIRED_FOR_ATOMIC_STATE_TRANSITION\",raw_bearer_persisted_by_worker:false,physical_chat_session_distinctness_proven:false,production_admission_eligible:false,independent_review_eligible:false,p_real_delta:0,human_authority_approval:false},200);\n}","label",[169],"68aeb38a-4c86-44fa-8a16-ca261dc16a61","worker_v5r1_rotating_bearer_candidate.ts","01a082a8-47e5-7418-ae72-bbcbfbd920a6",85,["D",1788898570183],2,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { V5R1, bearerDigest, sha256Utf8, randomHex, reconcileV5R1 } from \"./issuer_v5r1_rotating_bearer_preboot.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V5R1_ROTATING_BEARER_CANDIDATE\";\nconst WORKER_ID=\"mosadek/project-brain-exec-issuer-v1/worker_v5r1_rotating_bearer_candidate.ts\";\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nfunction exactKeys(x:any,ks:string[]){return x&&typeof x===\"object\"&&!Array.isArray(x)&&JSON.stringify(Object.keys(x).sort())===JSON.stringify([...ks].sort())}\nasync function readSlot(){const q=await sqlite.execute({sql:\"SELECT * FROM external_admission_v5r1 WHERE slot_id=?\",args:[V5R1.slot_id]});return q.rows.length?(q.rows[0] as any):null}\nfunction publicAttempt(r:any){\n return {\n slot_id:String(r.slot_id),generation:Number(r.generation),incarnation_id:String(r.incarnation_id),logical_agent_id:String(r.logical_agent_id),\n workstream:String(r.workstream),capabilities:JSON.parse(String(r.capabilities_json)),task_sha256:String(r.task_sha256),\n authority_epoch:Number(r.authority_epoch),constitution_version:Number(r.constitution_version),constitution_sha256:String(r.constitution_sha256),\n registry_version:Number(r.registry_version),state:String(r.state),issued_at:String(r.issued_at),preboot_expires_at:String(r.preboot_expires_at),\n activated_at:r.activated_at?String(r.activated_at):null,liveness_expires_at:r.liveness_expires_at?String(r.liveness_expires_at):null,\n last_heartbeat_at:r.last_heartbeat_at?String(r.last_heartbeat_at):null,heartbeat_seq:Number(r.heartbeat_seq),\n canary_result_sha256:r.canary_result_sha256?String(r.canary_result_sha256):null,terminal_reason:r.terminal_reason?String(r.terminal_reason):null,\n activation_receipt:r.activation_receipt_json?JSON.parse(String(r.activation_receipt_json)):null,bearer_present:false,bearer_digest_exposed:false\n };\n}\nfunction validateCommon(body:any,keys:string[]){\n if(!exactKeys(body,keys))return \"BODY_KEYS_INVALID\";\n if(body.slot_id!==V5R1.slot_id)return \"SLOT_ID_INVALID\";\n if(!Number.isInteger(body.generation)||body.generation<1)return \"GENERATION_INVALID\";\n if(typeof body.incarnation_id!==\"string\"||body.incarnation_id.length<16||body.incarnation_id.length>128)return \"INCARNATION_INVALID\";\n if(typeof body.bearer!==\"string\"||!/^[0-9a-f]{64}$/.test(body.bearer))return \"BEARER_INVALID\";\n return null;\n}\nexport default async function(req:Request){\n await reconcileV5R1(); const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",fixed_slot_id:V5R1.slot_id,production_admission_eligible:false});\n if(req.method===\"GET\"&&u.pathname===\"/attempt\"){const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);return json(publicAttempt(r))}\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(req.method===\"POST\"&&u.pathname===\"/activate\"){\n const er=validateCommon(body,[\"slot_id\",\"generation\",\"incarnation_id\",\"bearer\"]);if(er)return json({error:er},400);\n const usedDigest=await bearerDigest(body.bearer),nextBearer=randomHex(32),nextDigest=await bearerDigest(nextBearer),now=new Date(),nowIso=now.toISOString(),liveUntil=new Date(now.getTime()+V5R1.liveness_ttl_ms).toISOString();\n const q=await readSlot();if(!q)return json({error:\"NOT_FOUND\"},404);\n const taskJson=String(q.task_json);if(await sha256Utf8(taskJson)!==String(q.task_sha256))return json({error:\"TASK_HASH_MISMATCH\"},500);\n let task:any;try{task=JSON.parse(taskJson)}catch{return json({error:\"STORED_TASK_INVALID_JSON\"},500)}\n if(task?.op!==\"sha256_utf8\"||typeof task?.input!==\"string\")return json({error:\"STORED_TASK_PROFILE_INVALID\"},500);\n const canary=await sha256Utf8(task.input);\n const receipt={\n schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_BEARER_HOLDER_RUNNING_RECEIPT\",worker_id:WORKER_ID,slot_id:V5R1.slot_id,\n generation:body.generation,incarnation_id:body.incarnation_id,logical_agent_id:String(q.logical_agent_id),workstream:String(q.workstream),\n capabilities:JSON.parse(String(q.capabilities_json)),task_sha256:String(q.task_sha256),canary_result_sha256:canary,state:\"RUNNING\",\n authority_epoch:Number(q.authority_epoch),constitution_version:Number(q.constitution_version),constitution_sha256:String(q.constitution_sha256),\n registry_version:Number(q.registry_version),activated_at:nowIso,liveness_expires_at:liveUntil,heartbeat_seq:0,\n issuance_surface:\"VAL_TOWN_AUTHENTICATED_RUN_FILE_SCRIPT_ONLY\",bearer_binding:\"ONE_ACTIVE_SLOT_ROTATING_DOMAIN_SEPARATED_SHA256_DIGEST\",\n current_liveness_signal:true,physical_chat_session_distinctness_proven:false,production_admission_eligible:false,\n independent_review_eligible:false,human_authority_approval:false,p_real_delta:0,superhero_count_increment:0\n };\n const changed=await sqlite.execute({sql:`UPDATE external_admission_v5r1 SET state='RUNNING',bearer_digest=?,activated_at=?,liveness_expires_at=?,last_heartbeat_at=?,heartbeat_seq=0,canary_result_sha256=?,activation_receipt_json=?\n WHERE slot_id=? AND generation=? AND incarnation_id=? AND bearer_digest=? AND state='BOOTING' AND preboot_expires_at>?\n AND authority_epoch=? AND constitution_version=? AND constitution_sha256=? AND registry_version=?`,\n args:[nextDigest,nowIso,liveUntil,nowIso,canary,JSON.stringify(receipt),V5R1.slot_id,body.generation,body.incarnation_id,usedDigest,nowIso,V5R1.authority_epoch,V5R1.constitution_version,V5R1.constitution_sha256,V5R1.registry_version]});\n if(changed.rowsAffected!==1){\n const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);\n if(String(r.incarnation_id)!==body.incarnation_id||Number(r.generation)!==body.generation)return json({error:\"STALE_OR_WRONG_INCARNATION\",state:String(r.state)},409);\n if(String(r.bearer_digest)!==usedDigest)return json({error:\"BEARER_STALE_OR_MISMATCH\"},403);\n if(String(r.state)===\"EXPIRED_UNACTIVATED\")return json({error:\"PREBOOT_LIVENESS_EXPIRED\"},410);\n return json({error:\"PREBOOT_NOT_ACTIVATABLE\",state:String(r.state)},409);\n }\n return json({receipt,continuation_bearer:nextBearer},200);\n }\n if(req.method===\"POST\"&&u.pathname===\"/heartbeat\"){\n const er=validateCommon(body,[\"slot_id\",\"generation\",\"incarnation_id\",\"bearer\",\"heartbeat_seq_expected\"]);if(er)return json({error:er},400);\n if(!Number.isInteger(body.heartbeat_seq_expected)||body.heartbeat_seq_expected<0)return json({error:\"HEARTBEAT_SEQ_INVALID\"},400);\n const usedDigest=await bearerDigest(body.bearer),nextBearer=randomHex(32),nextDigest=await bearerDigest(nextBearer),now=new Date(),nowIso=now.toISOString(),liveUntil=new Date(now.getTime()+V5R1.liveness_ttl_ms).toISOString();\n const changed=await sqlite.execute({sql:`UPDATE external_admission_v5r1 SET bearer_digest=?,last_heartbeat_at=?,liveness_expires_at=?,heartbeat_seq=heartbeat_seq+1\n WHERE slot_id=? AND generation=? AND incarnation_id=? AND bearer_digest=? AND state='RUNNING' AND liveness_expires_at>? AND heartbeat_seq=?`,\n args:[nextDigest,nowIso,liveUntil,V5R1.slot_id,body.generation,body.incarnation_id,usedDigest,nowIso,body.heartbeat_seq_expected]});\n if(changed.rowsAffected!==1){\n const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);\n if(String(r.incarnation_id)!==body.incarnation_id||Number(r.generation)!==body.generation)return json({error:\"STALE_OR_WRONG_INCARNATION\",state:String(r.state)},409);\n if(String(r.bearer_digest)!==usedDigest)return json({error:\"BEARER_STALE_OR_MISMATCH\"},403);\n if(String(r.state)===\"EXPIRED_LIVENESS\")return json({error:\"RUNNING_LIVENESS_EXPIRED\"},410);\n if(String(r.state)!==\"RUNNING\")return json({error:\"NOT_RUNNING\",state:String(r.state)},409);\n return json({error:\"HEARTBEAT_SEQUENCE_MISMATCH\"},409);\n }\n const r=await readSlot();\n return json({schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_LIVENESS_HEARTBEAT\",slot_id:V5R1.slot_id,generation:body.generation,incarnation_id:body.incarnation_id,\n state:String(r?.state),heartbeat_seq:Number(r?.heartbeat_seq),last_heartbeat_at:String(r?.last_heartbeat_at),liveness_expires_at:String(r?.liveness_expires_at),\n current_liveness_signal:true,continuation_bearer:nextBearer,production_admission_eligible:false,physical_chat_session_distinctness_proven:false,human_authority_approval:false,p_real_delta:0},200);\n }\n return json({error:\"NOT_FOUND\"},404);\n}\n",[181],"70e5492f-763a-4e3a-953a-a6a1a1537129","worker_v5_liveness_candidate.ts","3852316c-abc0-11f1-bb42-1607ee4eb77e",59,["D",1788897749200],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { V5, bearerDigest, sha256Utf8, reconcileV5 } from \"./issuer_v5_liveness_preboot.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V5_LIVENESS_CANDIDATE\";\nconst WORKER_ID=\"mosadek/project-brain-exec-issuer-v1/worker_v5_liveness_candidate.ts\";\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nfunction exactKeys(x:any,ks:string[]){return x&&typeof x===\"object\"&&!Array.isArray(x)&&JSON.stringify(Object.keys(x).sort())===JSON.stringify([...ks].sort())}\nasync function readSlot(){const q=await sqlite.execute({sql:\"SELECT * FROM external_admission_v5 WHERE slot_id=?\",args:[V5.slot_id]});return q.rows.length?(q.rows[0] as any):null}\nfunction publicAttempt(r:any){\n return {\n slot_id:String(r.slot_id),generation:Number(r.generation),incarnation_id:String(r.incarnation_id),logical_agent_id:String(r.logical_agent_id),\n workstream:String(r.workstream),capabilities:JSON.parse(String(r.capabilities_json)),task_sha256:String(r.task_sha256),\n authority_epoch:Number(r.authority_epoch),constitution_version:Number(r.constitution_version),constitution_sha256:String(r.constitution_sha256),\n registry_version:Number(r.registry_version),state:String(r.state),issued_at:String(r.issued_at),preboot_expires_at:String(r.preboot_expires_at),\n activated_at:r.activated_at?String(r.activated_at):null,liveness_expires_at:r.liveness_expires_at?String(r.liveness_expires_at):null,\n last_heartbeat_at:r.last_heartbeat_at?String(r.last_heartbeat_at):null,heartbeat_seq:Number(r.heartbeat_seq),\n canary_result_sha256:r.canary_result_sha256?String(r.canary_result_sha256):null,terminal_reason:r.terminal_reason?String(r.terminal_reason):null,\n activation_receipt:r.activation_receipt_json?JSON.parse(String(r.activation_receipt_json)):null,bearer_present:false,bearer_digest_exposed:false\n };\n}\nfunction validateCommon(body:any,keys:string[]){\n if(!exactKeys(body,keys))return \"BODY_KEYS_INVALID\";\n if(body.slot_id!==V5.slot_id)return \"SLOT_ID_INVALID\";\n if(!Number.isInteger(body.generation)||body.generation<1)return \"GENERATION_INVALID\";\n if(typeof body.incarnation_id!==\"string\"||body.incarnation_id.length<16||body.incarnation_id.length>128)return \"INCARNATION_INVALID\";\n if(typeof body.bearer!==\"string\"||!/^[0-9a-f]{64}$/.test(body.bearer))return \"BEARER_INVALID\";\n return null;\n}\nexport default async function(req:Request){\n await reconcileV5(); const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",fixed_slot_id:V5.slot_id,production_admission_eligible:false});\n if(req.method===\"GET\"&&u.pathname===\"/attempt\"){const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);return json(publicAttempt(r))}\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(req.method===\"POST\"&&u.pathname===\"/activate\"){\n const er=validateCommon(body,[\"slot_id\",\"generation\",\"incarnation_id\",\"bearer\"]);if(er)return json({error:er},400);\n const digest=await bearerDigest(body.bearer),now=new Date(),nowIso=now.toISOString(),liveUntil=new Date(now.getTime()+V5.liveness_ttl_ms).toISOString();\n const q=await readSlot();if(!q)return json({error:\"NOT_FOUND\"},404);\n const taskJson=String(q.task_json);if(await sha256Utf8(taskJson)!==String(q.task_sha256))return json({error:\"TASK_HASH_MISMATCH\"},500);\n let task:any;try{task=JSON.parse(taskJson)}catch{return json({error:\"STORED_TASK_INVALID_JSON\"},500)}\n if(task?.op!==\"sha256_utf8\"||typeof task?.input!==\"string\")return json({error:\"STORED_TASK_PROFILE_INVALID\"},500);\n const canary=await sha256Utf8(task.input);\n const receipt={\n schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_BEARER_HOLDER_RUNNING_RECEIPT\",worker_id:WORKER_ID,slot_id:V5.slot_id,\n generation:body.generation,incarnation_id:body.incarnation_id,logical_agent_id:String(q.logical_agent_id),workstream:String(q.workstream),\n capabilities:JSON.parse(String(q.capabilities_json)),task_sha256:String(q.task_sha256),canary_result_sha256:canary,state:\"RUNNING\",\n authority_epoch:Number(q.authority_epoch),constitution_version:Number(q.constitution_version),constitution_sha256:String(q.constitution_sha256),\n registry_version:Number(q.registry_version),activated_at:nowIso,liveness_expires_at:liveUntil,heartbeat_seq:0,\n issuance_surface:\"VAL_TOWN_AUTHENTICATED_RUN_FILE_SCRIPT_ONLY\",bearer_binding:\"ONE_ACTIVE_SLOT_ONE_TIME_DOMAIN_SEPARATED_SHA256_DIGEST\",\n current_liveness_signal:true,physical_chat_session_distinctness_proven:false,production_admission_eligible:false,\n independent_review_eligible:false,human_authority_approval:false,p_real_delta:0,superhero_count_increment:0\n };\n const changed=await sqlite.execute({sql:`UPDATE external_admission_v5 SET state='RUNNING',activated_at=?,liveness_expires_at=?,last_heartbeat_at=?,heartbeat_seq=0,canary_result_sha256=?,activation_receipt_json=?\n WHERE slot_id=? AND generation=? AND incarnation_id=? AND bearer_digest=? AND state='BOOTING' AND preboot_expires_at>?\n AND authority_epoch=? AND constitution_version=? AND constitution_sha256=? AND registry_version=?`,\n args:[nowIso,liveUntil,nowIso,canary,JSON.stringify(receipt),V5.slot_id,body.generation,body.incarnation_id,digest,nowIso,V5.authority_epoch,V5.constitution_version,V5.constitution_sha256,V5.registry_version]});\n if(changed.rowsAffected!==1){\n const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);\n if(String(r.incarnation_id)!==body.incarnation_id||Number(r.generation)!==body.generation)return json({error:\"STALE_OR_WRONG_INCARNATION\",state:String(r.state)},409);\n if(String(r.bearer_digest)!==digest)return json({error:\"BEARER_MISMATCH\"},403);\n if(String(r.state)===\"EXPIRED_UNACTIVATED\")return json({error:\"PREBOOT_LIVENESS_EXPIRED\"},410);\n return json({error:\"PREBOOT_NOT_ACTIVATABLE\",state:String(r.state)},409);\n }\n return json({receipt},200);\n }\n if(req.method===\"POST\"&&u.pathname===\"/heartbeat\"){\n const er=validateCommon(body,[\"slot_id\",\"generation\",\"incarnation_id\",\"bearer\",\"heartbeat_seq_expected\"]);if(er)return json({error:er},400);\n if(!Number.isInteger(body.heartbeat_seq_expected)||body.heartbeat_seq_expected<0)return json({error:\"HEARTBEAT_SEQ_INVALID\"},400);\n const digest=await bearerDigest(body.bearer),now=new Date(),nowIso=now.toISOString(),liveUntil=new Date(now.getTime()+V5.liveness_ttl_ms).toISOString();\n const changed=await sqlite.execute({sql:`UPDATE external_admission_v5 SET last_heartbeat_at=?,liveness_expires_at=?,heartbeat_seq=heartbeat_seq+1\n WHERE slot_id=? AND generation=? AND incarnation_id=? AND bearer_digest=? AND state='RUNNING' AND liveness_expires_at>? AND heartbeat_seq=?`,\n args:[nowIso,liveUntil,V5.slot_id,body.generation,body.incarnation_id,digest,nowIso,body.heartbeat_seq_expected]});\n if(changed.rowsAffected!==1){\n const r=await readSlot();if(!r)return json({error:\"NOT_FOUND\"},404);\n if(String(r.incarnation_id)!==body.incarnation_id||Number(r.generation)!==body.generation)return json({error:\"STALE_OR_WRONG_INCARNATION\",state:String(r.state)},409);\n if(String(r.bearer_digest)!==digest)return json({error:\"BEARER_MISMATCH\"},403);\n if(String(r.state)===\"EXPIRED_LIVENESS\")return json({error:\"RUNNING_LIVENESS_EXPIRED\"},410);\n if(String(r.state)!==\"RUNNING\")return json({error:\"NOT_RUNNING\",state:String(r.state)},409);\n return json({error:\"HEARTBEAT_SEQUENCE_MISMATCH\",current_seq:Number(r.heartbeat_seq)},409);\n }\n const r=await readSlot();\n return json({schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_LIVENESS_HEARTBEAT\",slot_id:V5.slot_id,generation:body.generation,incarnation_id:body.incarnation_id,\n state:String(r?.state),heartbeat_seq:Number(r?.heartbeat_seq),last_heartbeat_at:String(r?.last_heartbeat_at),liveness_expires_at:String(r?.liveness_expires_at),\n current_liveness_signal:true,production_admission_eligible:false,physical_chat_session_distinctness_proven:false,human_authority_approval:false,p_real_delta:0},200);\n }\n return json({error:\"NOT_FOUND\"},404);\n}\n",[189],"fa9f66ec-3445-4652-b018-ceb994f71916","worker_v4_candidate.ts","b75c58fe-abbe-11f1-9644-1607ee4eb77e",68,["D",1788897880857],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { V4, bearerDigest, sha256Utf8, reconcileV4 } from \"./issuer_v4_lib.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V4_CANDIDATE\";\nconst WORKER_ID=\"mosadek/project-brain-exec-issuer-v1/worker_v4_candidate.ts\";\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nfunction exactKeys(x:any,ks:string[]){return x&&typeof x===\"object\"&&!Array.isArray(x)&&JSON.stringify(Object.keys(x).sort())===JSON.stringify([...ks].sort())}\nasync function readSlot(){\n const q=await sqlite.execute({sql:\"SELECT * FROM external_admission_v4 WHERE slot_id=?\",args:[V4.slot_id]});\n return q.rows.length?(q.rows[0] as any):null;\n}\nfunction publicAttempt(r:any){\n return {\n slot_id:String(r.slot_id),generation:Number(r.generation),incarnation_id:String(r.incarnation_id),challenge:String(r.challenge),\n logical_agent_id:String(r.logical_agent_id),workstream:String(r.workstream),capabilities:JSON.parse(String(r.capabilities_json)),\n task_sha256:String(r.task_sha256),authority_epoch:Number(r.authority_epoch),constitution_version:Number(r.constitution_version),\n constitution_sha256:String(r.constitution_sha256),registry_version:Number(r.registry_version),state:String(r.state),\n issued_at:String(r.issued_at),expires_at:String(r.expires_at),reserved_at:r.reserved_at?String(r.reserved_at):null,\n reservation_expires_at:r.reservation_expires_at?String(r.reservation_expires_at):null,completed_at:r.completed_at?String(r.completed_at):null,\n terminal_reason:r.terminal_reason?String(r.terminal_reason):null,result:r.result_json?JSON.parse(String(r.result_json)):null,\n receipt:r.receipt_json?JSON.parse(String(r.receipt_json)):null,bearer_present:false,bearer_digest_exposed:false\n };\n}\nexport default async function(req:Request){\n await reconcileV4(); const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",public_http_issuer:false,fixed_slot_id:V4.slot_id,production_admission_eligible:false});\n if(req.method===\"GET\"&&u.pathname===\"/attempt\"){\n const r=await readSlot(); if(!r)return json({error:\"NOT_FOUND\"},404); return json(publicAttempt(r));\n }\n if(req.method===\"GET\"&&u.pathname===\"/attest\"){\n const expected=[\"slot_id\",\"generation\",\"incarnation_id\",\"challenge\",\"task_sha256\",\"result_sha256\",\"constitution_sha256\",\"review_nonce\"].sort();\n const got=[...u.searchParams.keys()].sort();\n if(JSON.stringify(got)!==JSON.stringify(expected))return json({error:\"ATTEST_QUERY_KEYS_INVALID\"},400);\n const reviewNonce=u.searchParams.get(\"review_nonce\");\n if(typeof reviewNonce!==\"string\"||!/^[0-9a-f]{64}$/.test(reviewNonce))return json({error:\"ATTEST_REVIEW_NONCE_INVALID\"},400);\n const r=await readSlot(); if(!r)return json({error:\"NOT_FOUND\"},404);\n if(String(r.state)!==\"COMPLETE\"||!r.receipt_json||!r.result_json)return json({error:\"ATTEST_NOT_COMPLETE\",state:String(r.state)},409);\n let receipt:any;try{receipt=JSON.parse(String(r.receipt_json))}catch{return json({error:\"ATTEST_RECEIPT_INVALID\"},500)}\n const generation=Number(u.searchParams.get(\"generation\"));\n const resultSha=await sha256Utf8(String(r.result_json));\n const ok=\n u.searchParams.get(\"slot_id\")===String(r.slot_id)&&\n Number.isInteger(generation)&&generation===Number(r.generation)&&\n u.searchParams.get(\"incarnation_id\")===String(r.incarnation_id)&&\n u.searchParams.get(\"challenge\")===String(r.challenge)&&\n u.searchParams.get(\"task_sha256\")===String(r.task_sha256)&&\n u.searchParams.get(\"result_sha256\")===resultSha&&\n u.searchParams.get(\"result_sha256\")===String(receipt.result_sha256)&&\n u.searchParams.get(\"constitution_sha256\")===String(r.constitution_sha256);\n if(!ok)return json({error:\"ATTEST_TUPLE_MISMATCH\"},409);\n return json({\n status:\"ok\",schema:\"PROJECT_BRAIN_V4_PROVIDER_TRACE_ATTESTATION_V1\",slot_id:String(r.slot_id),generation:Number(r.generation),\n incarnation_id:String(r.incarnation_id),challenge:String(r.challenge),task_sha256:String(r.task_sha256),result_sha256:resultSha,\n constitution_sha256:String(r.constitution_sha256),worker_id:WORKER_ID,\n source_binding:\"EXTERNAL_PROVIDER_TRACE_PLUS_SOURCE_VERSION_HASH_BRACKET_REQUIRED\",production_admission_eligible:false,\n human_authority_approval:false,p_real_delta:0\n });\n }\n if(req.method!==\"POST\"||u.pathname!==\"/execute\")return json({error:\"NOT_FOUND\"},404);\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!exactKeys(body,[\"slot_id\",\"generation\",\"incarnation_id\",\"bearer\"]))return json({error:\"BODY_KEYS_INVALID\"},400);\n if(body.slot_id!==V4.slot_id)return json({error:\"SLOT_ID_INVALID\"},400);\n if(!Number.isInteger(body.generation)||body.generation<1)return json({error:\"GENERATION_INVALID\"},400);\n if(typeof body.incarnation_id!==\"string\"||body.incarnation_id.length<16||body.incarnation_id.length>128)return json({error:\"INCARNATION_INVALID\"},400);\n if(typeof body.bearer!==\"string\"||!/^[0-9a-f]{64}$/.test(body.bearer))return json({error:\"BEARER_INVALID\"},400);\n const digest=await bearerDigest(body.bearer),now=new Date(),nowIso=now.toISOString(),executionId=crypto.randomUUID(),reservedUntil=new Date(now.getTime()+V4.reservation_ttl_ms).toISOString();\n const reserved=await sqlite.execute({sql:`UPDATE external_admission_v4 SET state='RESERVED',execution_id=?,reserved_at=?,reservation_expires_at=?\n WHERE slot_id=? AND generation=? AND incarnation_id=? AND bearer_digest=? AND state='ISSUED' AND expires_at>?\n AND authority_epoch=? AND constitution_version=? AND constitution_sha256=? AND registry_version=?`,\n args:[executionId,nowIso,reservedUntil,V4.slot_id,body.generation,body.incarnation_id,digest,nowIso,V4.authority_epoch,V4.constitution_version,V4.constitution_sha256,V4.registry_version]});\n if(reserved.rowsAffected!==1){\n const r=await readSlot(); if(!r)return json({error:\"NOT_FOUND\"},404);\n if(String(r.incarnation_id)!==body.incarnation_id||Number(r.generation)!==body.generation)return json({error:\"STALE_OR_WRONG_INCARNATION\",state:String(r.state)},409);\n if(String(r.state)===\"UNKNOWN_OUTCOME\")return json({error:\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\"},409);\n if(String(r.state)===\"EXPIRED_UNCONSUMED\")return json({error:\"PRECOMMIT_EXPIRED\"},410);\n if(String(r.bearer_digest)!==digest)return json({error:\"BEARER_MISMATCH\"},403);\n return json({error:\"PRECOMMIT_NOT_CONSUMABLE\",state:String(r.state)},409);\n }\n const r=await readSlot(); if(!r||String(r.execution_id)!==executionId||String(r.state)!==\"RESERVED\")return json({error:\"RESERVATION_READBACK_FAILED\"},500);\n const caps=JSON.parse(String(r.capabilities_json));\n if(String(r.logical_agent_id)!==V4.logical_agent_id||String(r.workstream)!==V4.workstream||JSON.stringify(caps)!==JSON.stringify(V4.capabilities))return json({error:\"BOUND_TUPLE_INVALID\"},500);\n const taskJson=String(r.task_json); if(await sha256Utf8(taskJson)!==String(r.task_sha256))return json({error:\"TASK_HASH_MISMATCH\"},500);\n let task:any;try{task=JSON.parse(taskJson)}catch{return json({error:\"STORED_TASK_INVALID_JSON\"},500)}\n if(task?.op!==\"sha256_utf8\"||typeof task?.input!==\"string\")return json({error:\"STORED_TASK_PROFILE_INVALID\"},500);\n const result={op:\"sha256_utf8\",sha256:await sha256Utf8(task.input)},resultJson=JSON.stringify(result),completedAt=new Date().toISOString();\n const receipt={\n schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_PROJECT_TOOL_BOUND_ATOMIC_EXECUTION_RECEIPT\",\n worker_id:WORKER_ID,slot_id:V4.slot_id,generation:Number(r.generation),execution_id:executionId,incarnation_id:String(r.incarnation_id),challenge:String(r.challenge),\n logical_agent_id:String(r.logical_agent_id),workstream:String(r.workstream),capabilities:[...V4.capabilities],task_sha256:String(r.task_sha256),\n result_sha256:await sha256Utf8(resultJson),authority_epoch:Number(r.authority_epoch),constitution_version:Number(r.constitution_version),\n constitution_sha256:String(r.constitution_sha256),registry_version:Number(r.registry_version),issued_at:String(r.issued_at),reserved_at:nowIso,\n reservation_expires_at:reservedUntil,completed_at:completedAt,issuance_surface:\"VAL_TOWN_AUTHENTICATED_RUN_FILE_SCRIPT_ONLY\",\n bearer_binding:\"ONE_TIME_DOMAIN_SEPARATED_SHA256_DIGEST\",execution_observation:\"BOUNDED_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",\n persistent_liveness_claim:false,physical_chat_session_distinctness_proven:false,independent_review_eligible:false,production_admission_eligible:false,\n human_authority_approval:false,p_real_delta:0,superhero_count_increment:0,additional_out_of_pocket_spend_usd:0\n };\n const done=await sqlite.execute({sql:\"UPDATE external_admission_v4 SET state='COMPLETE',completed_at=?,result_json=?,receipt_json=? WHERE slot_id=? AND generation=? AND incarnation_id=? AND execution_id=? AND state='RESERVED'\",args:[completedAt,resultJson,JSON.stringify(receipt),V4.slot_id,body.generation,body.incarnation_id,executionId]});\n if(done.rowsAffected!==1)return json({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return json({result,receipt},200);\n}",[196],"e6cbd90d-83d2-44f2-86c8-3a4c471e8d1d","v6_crossval_capability_probe.ts","c75431f8-abc0-11f1-97a4-1607ee4eb77e",75,["D",1788898027327],1,"import ValTown from \"npm:@valtown/sdk\";\nconst vt:any=new ValTown();\nconst targetId=\"df64bad7-8359-4eef-a1e2-4da70bc08aae\";\nconst needles=[\n\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\",\n\"05c85b6a0e98a711263d9042b4ea728ac99d16fe032840eb199b729fb6a7dbde\",\n\"CURRENT_THINKING_CONSTITUTION_HEAD\"\n];\nconst hits:any[]=[];\nfor await (const f of vt.vals.files.retrieve(targetId,{path:\"\",recursive:true})) {\n if(f?.type===\"directory\") continue;\n const path=String(f?.path||\"\");\n try{\n const resp=await vt.vals.files.getContent(targetId,{path});\n const s=await resp.text();\n const matched=needles.filter(n=>s.includes(n));\n if(matched.length) hits.push({path,version:f?.version,matched});\n }catch{}\n}\nconsole.log(JSON.stringify({hits},null,2));\nexport default {ok:true};",[203],"7d05fe6c-c353-454f-9d04-1b20ea1917f5",["D",1788898680480],3,[28],"eab6c332-b9e7-496b-a547-5b79f45f0014","v5_liveness_canary.ts","39627c4c-abc0-11f1-beab-1607ee4eb77e",67,["D",1788897877010],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { issueFixedV5, V5, readV5 } from \"./issuer_v5_liveness_preboot.ts\";\nconst W5=\"https://mosadek--3852316cabc011f1bb421607ee4eb77e.web.val.run\";\nasync function call(base:string,path:string,method=\"GET\",body?:unknown){const r=await fetch(base+path,{method,headers:body?{\"content-type\":\"application/json\"}:undefined,body:body?JSON.stringify(body):undefined});let j:any=null;try{j=await r.json()}catch{};return {status:r.status,body:j}}\nfunction must(x:boolean,n:string){if(!x)throw new Error(n)}\nconst checks:any[]=[];const ck=(n:string,p:boolean,d?:any)=>{checks.push({name:n,pass:p,detail:d});must(p,n)};\nconst worker=(globalThis as any).__V5_WORKER_URL__||W5;\nconst pre:any=await readV5();\nif(pre&&String(pre.state)===\"RUNNING\"){const past=new Date(Date.now()-1000).toISOString();await sqlite.execute({sql:\"UPDATE external_admission_v5 SET liveness_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,V5.slot_id,Number(pre.generation)]});await readV5();}\nif(pre&&String(pre.state)===\"BOOTING\"){const past=new Date(Date.now()-1000).toISOString();await sqlite.execute({sql:\"UPDATE external_admission_v5 SET preboot_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,V5.slot_id,Number(pre.generation)]});await readV5();}\nlet a:any=await issueFixedV5();\nck(\"issue_booting_single_holder\",a.ok===true&&a.state===\"BOOTING\"&&a.public_http_issuer===false,a);\nconst wrong=await call(worker,\"/activate\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:\"00\".repeat(32)});\nck(\"wrong_bearer_activate_rejected\",wrong.status===403&&wrong.body?.error===\"BEARER_MISMATCH\",wrong);\nconst attempts=await Promise.all(Array.from({length:8},()=>call(worker,\"/activate\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer})));\nconst wins=attempts.filter(x=>x.status===200),losses=attempts.filter(x=>x.status!==200);\nck(\"concurrent_activate_exactly_one_winner\",wins.length===1&&losses.length===7,{wins:wins.length,losses:losses.map(x=>({status:x.status,error:x.body?.error}))});\nconst ar=wins[0].body?.receipt;\nck(\"running_receipt_has_unexpired_liveness\",ar?.state===\"RUNNING\"&&ar?.current_liveness_signal===true&&Date.parse(ar?.liveness_expires_at)>Date.now(),ar);\nconst busy:any=await issueFixedV5();\nck(\"duplicate_issue_while_running_blocked\",busy.ok===false&&busy.error===\"SLOT_BUSY\"&&busy.state===\"RUNNING\",busy);\nconst wrongHb=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:\"11\".repeat(32),heartbeat_seq_expected:0});\nck(\"wrong_bearer_heartbeat_rejected\",wrongHb.status===403&&wrongHb.body?.error===\"BEARER_MISMATCH\",wrongHb);\nconst hb=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer,heartbeat_seq_expected:0});\nck(\"heartbeat_advances_seq_and_liveness\",hb.status===200&&hb.body?.heartbeat_seq===1&&Date.parse(hb.body?.liveness_expires_at)>Date.now(),hb);\nconst replay=await call(worker,\"/heartbeat\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer,heartbeat_seq_expected:0});\nck(\"heartbeat_replay_rejected\",replay.status===409&&replay.body?.error===\"HEARTBEAT_SEQUENCE_MISMATCH\",replay);\nconst pub=await call(worker,\"/attempt\");\nck(\"public_readback_sanitized_running\",pub.status===200&&pub.body?.state===\"RUNNING\"&&pub.body?.bearer_present===false&&pub.body?.bearer_digest_exposed===false,pub);\nconst past=new Date(Date.now()-1000).toISOString();\nawait sqlite.execute({sql:\"UPDATE external_admission_v5 SET liveness_expires_at=? WHERE slot_id=? AND generation=?\",args:[past,a.slot_id,a.generation]});\nawait readV5();\nconst expired=await call(worker,\"/attempt\");\nck(\"running_liveness_expiry_terminal\",expired.status===200&&expired.body?.state===\"EXPIRED_LIVENESS\",expired);\nconst b:any=await issueFixedV5();\nck(\"reissue_after_expiry\",b.ok===true&&b.generation===a.generation+1&&b.state===\"BOOTING\",b);\nconst bAct=await call(worker,\"/activate\",\"POST\",{slot_id:b.slot_id,generation:b.generation,incarnation_id:b.incarnation_id,bearer:b.bearer});\nck(\"fresh_activation_after_expiry\",bAct.status===200&&bAct.body?.receipt?.state===\"RUNNING\",bAct);\nconst final=await call(worker,\"/attempt\");\nck(\"final_running_readback\",final.status===200&&final.body?.state===\"RUNNING\"&&final.body?.heartbeat_seq===0,final);\nconst report={schema:\"PROJECT_BRAIN_EXTERNAL_ADMISSION_V5_LIVENESS_LIVE_FALSIFICATION_V1\",classification:\"CANDIDATE_NONAUTHORITY_LIVE_TEST\",observed_at:new Date().toISOString(),\nchecks_total:checks.length,pass:checks.every(x=>x.pass),checks,production_admission_eligible:false,physical_chat_session_distinctness_proven:false,canonical_brain_mutation:false,brain_queue_traffic_submitted:false,p_real_increment:0,superhero_count_increment:0,human_authority_approval:false,direct_sprites_calls:0,additional_out_of_pocket_spend_usd:0};\nconsole.log(JSON.stringify(report,null,2));export default report;",[215],"9b68ecae-bf69-4725-9436-6e8f63d71af5","v4_provider_trace_attestation_test.ts","48cd7fc4-abc0-11f1-8901-1607ee4eb77e",64,["D",1788897862941],"const BASE=\"https://mosadek--b75c58feabbe11f196441607ee4eb77e.web.val.run\";\nfunction assert(c:boolean,m:string){if(!c)throw new Error(\"ASSERT:\"+m)}\nconst a=await fetch(BASE+\"/attempt\",{headers:{\"cache-control\":\"no-cache\"}});\nassert(a.status===200,\"attempt_read\");\nconst j:any=await a.json();\nassert(j.state===\"COMPLETE\",\"complete_attempt_required\");\nassert(j.receipt&&typeof j.receipt.result_sha256===\"string\",\"receipt_result_hash\");\nconst q=new URLSearchParams({\n slot_id:String(j.slot_id),\n generation:String(j.generation),\n incarnation_id:String(j.incarnation_id),\n challenge:String(j.challenge),\n task_sha256:String(j.task_sha256),\n result_sha256:String(j.receipt.result_sha256),\n constitution_sha256:String(j.constitution_sha256),\n review_nonce:\"9f4a2c0e7b1d43d59f5e9b7a6d2c4f8e1a3b5c7d9e0f112233445566778899aa\"\n});\nconst r=await fetch(BASE+\"/attest?\"+q.toString(),{headers:{\"cache-control\":\"no-cache\"}});\nassert(r.status===200,\"attest_status_200_got_\"+r.status);\nconst out:any=await r.json();\nassert(out.status===\"ok\",\"attest_status_ok\");\nassert(out.result_sha256===j.receipt.result_sha256,\"result_hash_bound\");\nconsole.log(JSON.stringify({pass:true,status:r.status,result_sha256:out.result_sha256}));\nexport default {pass:true};",[222],"d5aa9468-fdb1-4a4d-b9b7-addae96cff49","v4_live_canary_summary.ts","3a11ab50-abbf-11f1-aa31-1607ee4eb77e",41,["D",1788897322633],"import report from \"./v4_live_canary.ts\";\n\nconst safe = {\n schema:\"PROJECT_BRAIN_EXTERNAL_ADMISSION_V4_SANITIZED_SUMMARY_V1\",\n classification:\"CANDIDATE_NONAUTHORITY_LIVE_TEST_SUMMARY\",\n observed_at:report.observed_at,\n checks_total:report.checks_total,\n pass:report.pass,\n check_names:(report.checks||[]).map((x:any)=>({name:x.name,pass:x.pass})),\n public_issuer_surface:false,\n raw_bearer_persisted:false,\n canonical_brain_mutation:false,\n brain_queue_traffic_submitted:false,\n production_admission_eligible:false,\n p_real_increment:0,\n superhero_count_increment:0,\n human_authority_approval:false,\n direct_sprites_calls:0,\n additional_out_of_pocket_spend_usd:0\n};\nconsole.log(JSON.stringify(safe));\nexport default safe;",[229],"44d9e5a2-7a29-4354-ac27-a00bf4e1d04c","v4_live_canary.ts","cbbe944c-abbe-11f1-92cb-1607ee4eb77e",32,["D",1788897137545],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { issueFixedV4, V4, sha256Utf8, readV4 } from \"./issuer_v4_lib.ts\";\n\nconst WORKER=\"https://mosadek--b75c58feabbe11f196441607ee4eb77e.web.val.run\";\nasync function call(path:string,method=\"GET\",body?:unknown){\n const r=await fetch(WORKER+path,{method,headers:body?{\"content-type\":\"application/json\"}:undefined,body:body?JSON.stringify(body):undefined});\n let j:any=null;try{j=await r.json()}catch{};return {status:r.status,body:j};\n}\nfunction must(x:boolean,n:string){if(!x)throw new Error(n)}\nconst checks:any[]=[];const ck=(n:string,p:boolean,d?:any)=>{checks.push({name:n,pass:p,detail:d});must(p,n)};\n\nlet a:any=await issueFixedV4();\nck(\"issue_from_script_only\",a.ok===true&&a.public_http_issuer===false,a);\nconst wrong=await call(\"/execute\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:\"00\".repeat(32)});\nck(\"wrong_bearer_rejected\",wrong.status===403&&wrong.body?.error===\"BEARER_MISMATCH\",wrong);\nconst good=await call(\"/execute\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer});\nconst expected=await sha256Utf8(V4.task.input);\nck(\"valid_execute\",good.status===200&&good.body?.result?.sha256===expected,good);\nck(\"receipt_no_fake_liveness\",good.body?.receipt?.persistent_liveness_claim===false&&good.body?.receipt?.production_admission_eligible===false,good.body?.receipt);\nconst replay=await call(\"/execute\",\"POST\",{slot_id:a.slot_id,generation:a.generation,incarnation_id:a.incarnation_id,bearer:a.bearer});\nck(\"replay_rejected\",replay.status===409,replay);\nconst attempt=await call(\"/attempt\");\nck(\"public_readback_no_bearer\",attempt.status===200&&attempt.body?.bearer_present===false&&attempt.body?.bearer_digest_exposed===false,attempt);\n\nconst contenders=await Promise.all(Array.from({length:8},()=>issueFixedV4()));\nconst wins=contenders.filter((x:any)=>x.ok===true),losses=contenders.filter((x:any)=>x.ok!==true);\nck(\"atomic_script_issuance_one_winner\",wins.length===1&&losses.length===7,{wins:wins.length,losses:losses.length,loser_errors:losses.map((x:any)=>x.error)});\nconst b:any=wins[0];\nconst past=new Date(Date.now()-1000).toISOString();\nawait sqlite.execute({sql:\"UPDATE external_admission_v4 SET state='RESERVED',reserved_at=?,reservation_expires_at=? WHERE slot_id=? AND generation=? AND incarnation_id=?\",args:[past,past,b.slot_id,b.generation,b.incarnation_id]});\nconst unknown=await call(\"/execute\",\"POST\",{slot_id:b.slot_id,generation:b.generation,incarnation_id:b.incarnation_id,bearer:b.bearer});\nck(\"expired_reservation_unknown_outcome\",unknown.status===409&&unknown.body?.error===\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\",unknown);\nconst br=await readV4();\nck(\"unknown_outcome_terminal\",String(br?.state)===\"UNKNOWN_OUTCOME\",{state:br?.state,reason:br?.terminal_reason});\n\nconst c:any=await issueFixedV4();\nck(\"reissue_after_terminal\",c.ok===true&&c.generation===b.generation+1,c);\nconst finalRun=await call(\"/execute\",\"POST\",{slot_id:c.slot_id,generation:c.generation,incarnation_id:c.incarnation_id,bearer:c.bearer});\nck(\"final_clean_complete\",finalRun.status===200&&finalRun.body?.result?.sha256===expected,finalRun);\nconst final=await call(\"/attempt\");\nck(\"final_readback_complete\",final.status===200&&final.body?.state===\"COMPLETE\",final);\n\nconst report={schema:\"PROJECT_BRAIN_EXTERNAL_ADMISSION_V4_LIVE_FALSIFICATION_V1\",classification:\"CANDIDATE_NONAUTHORITY_LIVE_TEST\",observed_at:new Date().toISOString(),checks_total:checks.length,pass:checks.every(x=>x.pass),checks,public_issuer_surface:false,canonical_brain_mutation:false,brain_queue_traffic_submitted:false,production_admission_eligible:false,p_real_increment:0,superhero_count_increment:0,human_authority_approval:false,direct_sprites_calls:0,additional_out_of_pocket_spend_usd:0};\nconsole.log(JSON.stringify(report,null,2));export default report;",[236],"2b7aec54-6e5f-4567-b248-93b03ce8f1f1","same_run_attempt_v1.ts","21a4f98e-abc2-11f1-881c-1607ee4eb77e",84,["D",1788898570099],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const TABLE = \"first_real_superhero_live_attempt_v1\";\nconst STATES = new Set([\"BOOTING\",\"RUNNING\",\"COMPLETE\",\"FAILED\",\"UNKNOWN_OUTCOME\"]);\n\nexport type FrozenAttempt = {\n experiment_id: string;\n candidate_id: string;\n source_sha256: string;\n source_bytes: number;\n source_version: number;\n equivalence_contract_sha256: string;\n public_contract_sha256: string;\n authority_epoch: number;\n constitution_version: number;\n constitution_sha256: string;\n registry_version: number;\n workstream: string;\n capabilities_json: string;\n ttl_ms: number;\n max_lifetime_ms: number;\n};\n\nfunction assertHex64(x:string,name:string){ if(!/^[0-9a-f]{64}$/.test(x)) throw new Error(name+\"_INVALID\"); }\nfunction assertFrozen(x:FrozenAttempt){\n if(!x.experiment_id || x.experiment_id.length>200) throw new Error(\"EXPERIMENT_ID_INVALID\");\n if(!x.candidate_id || x.candidate_id.length>200) throw new Error(\"CANDIDATE_ID_INVALID\");\n assertHex64(x.source_sha256,\"SOURCE_SHA256\");\n assertHex64(x.equivalence_contract_sha256,\"EQUIVALENCE_CONTRACT_SHA256\");\n assertHex64(x.public_contract_sha256,\"PUBLIC_CONTRACT_SHA256\");\n assertHex64(x.constitution_sha256,\"CONSTITUTION_SHA256\");\n if(!Number.isInteger(x.source_bytes)||x.source_bytes<=0) throw new Error(\"SOURCE_BYTES_INVALID\");\n if(!Number.isInteger(x.source_version)||x.source_version<1) throw new Error(\"SOURCE_VERSION_INVALID\");\n if(!Number.isInteger(x.authority_epoch)||x.authority_epoch<1) throw new Error(\"AUTHORITY_EPOCH_INVALID\");\n if(!Number.isInteger(x.constitution_version)||x.constitution_version<1) throw new Error(\"CONSTITUTION_VERSION_INVALID\");\n if(!Number.isInteger(x.registry_version)||x.registry_version<1) throw new Error(\"REGISTRY_VERSION_INVALID\");\n if(!Number.isInteger(x.ttl_ms)||x.ttl_ms<5_000||x.ttl_ms>900_000) throw new Error(\"TTL_INVALID\");\n if(!Number.isInteger(x.max_lifetime_ms)||x.max_lifetime_ms7_200_000) throw new Error(\"MAX_LIFETIME_INVALID\");\n const caps=JSON.parse(x.capabilities_json); if(!Array.isArray(caps)||caps.length===0) throw new Error(\"CAPABILITIES_INVALID\");\n}\n\nexport async function ensureAttemptSchema(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE}(\n experiment_id TEXT PRIMARY KEY,\n execution_incarnation_id TEXT NOT NULL UNIQUE,\n run_id TEXT NOT NULL UNIQUE,\n candidate_id TEXT NOT NULL,\n source_sha256 TEXT NOT NULL,\n source_bytes INTEGER NOT NULL,\n source_version INTEGER NOT NULL,\n equivalence_contract_sha256 TEXT NOT NULL,\n public_contract_sha256 TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n constitution_version INTEGER NOT NULL,\n constitution_sha256 TEXT NOT NULL,\n registry_version INTEGER NOT NULL,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n state TEXT NOT NULL CHECK(state IN ('BOOTING','RUNNING','COMPLETE','FAILED','UNKNOWN_OUTCOME')),\n created_at TEXT NOT NULL,\n heartbeat_at TEXT,\n expires_at TEXT NOT NULL,\n hard_deadline_at TEXT NOT NULL,\n completed_at TEXT,\n result_sha256 TEXT,\n terminal_reason TEXT\n )`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS ${TABLE}_state_guard\n BEFORE UPDATE OF state ON ${TABLE}\n WHEN NEW.state <> OLD.state\n BEGIN\n SELECT CASE\n WHEN OLD.state IN ('COMPLETE','FAILED','UNKNOWN_OUTCOME') THEN RAISE(ABORT,'TERMINAL_STATE_IMMUTABLE')\n WHEN OLD.state='BOOTING' AND NEW.state NOT IN ('RUNNING','FAILED','UNKNOWN_OUTCOME') THEN RAISE(ABORT,'INVALID_BOOTING_TRANSITION')\n WHEN OLD.state='RUNNING' AND NEW.state NOT IN ('COMPLETE','FAILED','UNKNOWN_OUTCOME') THEN RAISE(ABORT,'INVALID_RUNNING_TRANSITION')\n END;\n END`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS ${TABLE}_terminal_row_guard\n BEFORE UPDATE ON ${TABLE}\n WHEN OLD.state IN ('COMPLETE','FAILED','UNKNOWN_OUTCOME')\n BEGIN SELECT RAISE(ABORT,'TERMINAL_ROW_IMMUTABLE'); END`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS ${TABLE}_binding_guard\n BEFORE UPDATE OF experiment_id,execution_incarnation_id,run_id,candidate_id,source_sha256,source_bytes,source_version,equivalence_contract_sha256,public_contract_sha256,authority_epoch,constitution_version,constitution_sha256,registry_version,workstream,capabilities_json,created_at,hard_deadline_at ON ${TABLE}\n BEGIN SELECT RAISE(ABORT,'ATTEMPT_BINDING_IMMUTABLE'); END`);\n}\n\nexport async function reconcileExpired(nowIso=new Date().toISOString()){\n await ensureAttemptSchema();\n return await sqlite.execute({\n sql:`UPDATE ${TABLE} SET state='UNKNOWN_OUTCOME', terminal_reason='LIVE_ATTEMPT_EXPIRED_OUTCOME_UNKNOWN' WHERE state IN ('BOOTING','RUNNING') AND expires_at<=?`,\n args:[nowIso]\n });\n}\n\nexport async function acquireFrozenAttempt(f:FrozenAttempt){\n assertFrozen(f); await ensureAttemptSchema(); await reconcileExpired();\n const execution_incarnation_id=crypto.randomUUID();\n const run_id=execution_incarnation_id;\n const now=new Date(); const hardDeadline=new Date(now.getTime()+f.max_lifetime_ms); const expires=new Date(Math.min(now.getTime()+f.ttl_ms,hardDeadline.getTime()));\n const ins=await sqlite.execute({\n sql:`INSERT INTO ${TABLE}(experiment_id,execution_incarnation_id,run_id,candidate_id,source_sha256,source_bytes,source_version,equivalence_contract_sha256,public_contract_sha256,authority_epoch,constitution_version,constitution_sha256,registry_version,workstream,capabilities_json,state,created_at,expires_at,hard_deadline_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'BOOTING',?,?,?) ON CONFLICT(experiment_id) DO NOTHING`,\n args:[f.experiment_id,execution_incarnation_id,run_id,f.candidate_id,f.source_sha256,f.source_bytes,f.source_version,f.equivalence_contract_sha256,f.public_contract_sha256,f.authority_epoch,f.constitution_version,f.constitution_sha256,f.registry_version,f.workstream,f.capabilities_json,now.toISOString(),expires.toISOString(),hardDeadline.toISOString()]\n });\n const q=await sqlite.execute({sql:`SELECT * FROM ${TABLE} WHERE experiment_id=?`,args:[f.experiment_id]});\n if(q.rows.length!==1) throw new Error(\"ATTEMPT_READBACK_MISSING\");\n const row:any=q.rows[0];\n if(ins.rowsAffected!==1) return {ok:false,error:\"EXPERIMENT_ALREADY_CONSUMED_OR_IN_PROGRESS\",zero_model_calls_required:true,row};\n if(String(row.execution_incarnation_id)!==execution_incarnation_id||String(row.state)!==\"BOOTING\") throw new Error(\"WINNER_READBACK_MISMATCH\");\n return {ok:true,execution_incarnation_id,run_id,row};\n}\n\nexport async function markRunning(experiment_id:string,execution_incarnation_id:string,ttl_ms:number){\n const q=await sqlite.execute({sql:`SELECT hard_deadline_at FROM ${TABLE} WHERE experiment_id=? AND execution_incarnation_id=?`,args:[experiment_id,execution_incarnation_id]});\n if(q.rows.length!==1) throw new Error('ATTEMPT_NOT_FOUND');\n const now=new Date(),hard=new Date(String((q.rows[0] as any).hard_deadline_at)); if(now>=hard) throw new Error('HARD_DEADLINE_EXPIRED');\n const expires=new Date(Math.min(now.getTime()+ttl_ms,hard.getTime()));\n const u=await sqlite.execute({sql:`UPDATE ${TABLE} SET state='RUNNING',heartbeat_at=?,expires_at=? WHERE experiment_id=? AND execution_incarnation_id=? AND state='BOOTING'`,args:[now.toISOString(),expires.toISOString(),experiment_id,execution_incarnation_id]});\n if(u.rowsAffected!==1) throw new Error(\"BOOTING_TO_RUNNING_CAS_FAILED\");\n}\n\nexport async function heartbeat(experiment_id:string,execution_incarnation_id:string,ttl_ms:number){\n const q=await sqlite.execute({sql:`SELECT hard_deadline_at FROM ${TABLE} WHERE experiment_id=? AND execution_incarnation_id=? AND state='RUNNING'`,args:[experiment_id,execution_incarnation_id]});\n if(q.rows.length!==1) throw new Error('RUNNING_ATTEMPT_NOT_FOUND');\n const now=new Date(),hard=new Date(String((q.rows[0] as any).hard_deadline_at)); if(now>=hard) throw new Error('HARD_DEADLINE_EXPIRED');\n const expires=new Date(Math.min(now.getTime()+ttl_ms,hard.getTime()));\n const u=await sqlite.execute({sql:`UPDATE ${TABLE} SET heartbeat_at=?,expires_at=? WHERE experiment_id=? AND execution_incarnation_id=? AND state='RUNNING'`,args:[now.toISOString(),expires.toISOString(),experiment_id,execution_incarnation_id]});\n if(u.rowsAffected!==1) throw new Error(\"RUNNING_HEARTBEAT_CAS_FAILED\");\n}\n\nexport async function complete(experiment_id:string,execution_incarnation_id:string,result_sha256:string){\n assertHex64(result_sha256,\"RESULT_SHA256\");\n const now=new Date().toISOString();\n const u=await sqlite.execute({sql:`UPDATE ${TABLE} SET state='COMPLETE',completed_at=?,result_sha256=? WHERE experiment_id=? AND execution_incarnation_id=? AND state='RUNNING'`,args:[now,result_sha256,experiment_id,execution_incarnation_id]});\n if(u.rowsAffected!==1) throw new Error(\"RUNNING_TO_COMPLETE_CAS_FAILED\");\n}\n\nexport async function fail(experiment_id:string,execution_incarnation_id:string,reason:string){\n const u=await sqlite.execute({sql:`UPDATE ${TABLE} SET state='FAILED',terminal_reason=? WHERE experiment_id=? AND execution_incarnation_id=? AND state IN ('BOOTING','RUNNING')`,args:[String(reason).slice(0,1000),experiment_id,execution_incarnation_id]});\n if(u.rowsAffected!==1) throw new Error(\"FAIL_TERMINALIZE_CAS_FAILED\");\n}\n\nexport async function readAttempt(experiment_id:string){\n await ensureAttemptSchema(); await reconcileExpired();\n const q=await sqlite.execute({sql:`SELECT * FROM ${TABLE} WHERE experiment_id=?`,args:[experiment_id]});\n return q.rows.length===1?q.rows[0]:null;\n}\n",[243],"169498b2-779f-4fe6-9d2b-1548f487d65b","same_run_attempt_live_canary_v1.ts","22b5cbdc-abc2-11f1-86b0-1607ee4eb77e",86,["D",1788898571945],"import { acquireFrozenAttempt, markRunning, complete, readAttempt } from \"./same_run_attempt_v1.ts\";\nconst f={\n experiment_id:\"SAME_RUN_LIVE_ADMISSION_SHADOW_CANARY_A1\",\n candidate_id:\"SHADOW_SUPERHERO_CANARY\",\n source_sha256:\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n source_bytes:12345,\n source_version:1,\n equivalence_contract_sha256:\"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\",\n public_contract_sha256:\"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n authority_epoch:2,\n constitution_version:4,\n constitution_sha256:\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\",\n registry_version:5,\n workstream:\"global-shadow\",\n capabilities_json:JSON.stringify([\"deterministic_execution\"]),\n ttl_ms:30000,\n max_lifetime_ms:120000\n};\nconst a=await acquireFrozenAttempt(f);\nif(a.ok){\n await markRunning(f.experiment_id,a.execution_incarnation_id,f.ttl_ms);\n await new Promise(r=>setTimeout(r,250));\n await complete(f.experiment_id,a.execution_incarnation_id,\"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\");\n}\nconst row=await readAttempt(f.experiment_id);\nconsole.log(JSON.stringify({schema:\"SAME_RUN_LIVE_ADMISSION_SHADOW_CANARY_RESULT_V1\",acquired:a.ok,zero_model_calls:true,execution_incarnation_id:a.ok?a.execution_incarnation_id:null,observed_execution_incarnation_id:(row as any)?.execution_incarnation_id??null,state:(row as any)?.state??null,result_sha256:(row as any)?.result_sha256??null,p_real_increment:0,canonical_brain_mutation:false}));\n",[250],"458d6cc0-96cc-45f4-bb1b-7c5a17541607","return_only_telemetry_canary.ts","c6cc2386-abbf-11f1-a218-1607ee4eb77e",55,["D",1788897558745],"const SENTINEL=\"SINGLETON_RETURN_ONLY_CANARY_20260908_1959_A7C4\";\nexport default function(){\n return {classification:\"NONSECRET_RETURN_ONLY_TELEMETRY_CANARY\",sentinel:SENTINEL,logged:false,persisted_by_code:false};\n}",[257],"50270838-73ba-4e6e-934f-7e52a82411e9","public_self_issue_cex_v1.ts","50220d64-abbe-11f1-a83a-1607ee4eb77e",24,["D",1788896930148],"const ISSUER=\"https://mosadek--02308a54abbe11f1bb881607ee4eb77e.web.val.run\";\nconst WORKER=\"https://mosadek--032fbd1cabbe11f1a3d61607ee4eb77e.web.val.run\";\nasync function call(url:string,method:string,body?:unknown){\n const r=await fetch(url,{method,headers:body?{\"content-type\":\"application/json\"}:undefined,body:body?JSON.stringify(body):undefined});\n let j:any=null;try{j=await r.json()}catch{}\n return {status:r.status,body:j};\n}\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s))))}\nconst input=\"UNAUTHENTICATED_PUBLIC_SELF_ISSUE_CANARY_V1\";\nconst issue=await call(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input},ttl_seconds:60});\nif(issue.status!==201) throw new Error(\"ISSUE_FAILED_\"+issue.status);\nconst exec=await call(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:issue.body.execution_incarnation_id});\nconst expected=await sha(input);\nconst pass=exec.status===200&&exec.body?.result?.sha256===expected;\nconst out={\n schema:\"PROJECT_BRAIN_ATOMIC_EXTERNAL_ADMISSION_V3_A71_PUBLIC_SELF_ISSUE_COUNTEREXAMPLE_V1\",\n observed_at:new Date().toISOString(),\n pass_counterexample:pass,\n issuer_request_had_authentication_header:false,\n worker_request_had_authentication_header:false,\n arbitrary_caller_selected_task_input:true,\n issue_status:issue.status,\n execute_status:exec.status,\n result_matches_expected:exec.body?.result?.sha256===expected,\n issued_identity:issue.body?.logical_agent_id??null,\n issued_workstream:issue.body?.workstream??null,\n issued_capabilities:issue.body?.capabilities??null,\n verdict:pass?\"REJECT_A71_AS_PROJECT_CONTROLLED_ADMISSION_PRIMITIVE\":\"COUNTEREXAMPLE_NOT_REPRODUCED\",\n reason:\"Public issuer accepts arbitrary fixed-profile task input without project-authenticated precommit authority; returned public identifiers are sufficient to execute.\",\n canonical_brain_mutation:false,\n brain_queue_traffic_submitted:false,\n p_real_increment:0,\n superhero_count_increment:0,\n human_authority_approval:false,\n direct_sprites_calls:0,\n additional_out_of_pocket_spend_usd:0\n};\nconsole.log(JSON.stringify(out,null,2));\nexport default out;",[264],"d0e27730-f730-44a8-bc7d-a206fc4051b0","precommit_v3_candidate.ts","0d6c386e-abbe-11f1-9945-1607ee4eb77e",16,["D",1788896818243],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_EXECUTION_PRECOMMIT_V3_CANDIDATE\";\nconst ISSUER=\"mosadek/project-brain-exec-issuer-v1/precommit_v3_candidate.ts\";\nconst PURPOSE=\"FIRST_REAL_SUPERHERO_EXECUTION_INCARCATION_CANARY_V3\";\nconst WORKSTREAM=\"global\";\nconst AUTHORITY_EPOCH=2;\nconst CREDENTIAL_GENERATION=1;\nconst ATTEMPT_GENERATION=1;\nconst TTL_MS=90_000;\nconst FIXED_CAPABILITIES=[\"deterministic_execution\",\"sha256\"] as const;\nconst FIXED_TASK={op:\"sha256_utf8\",input:\"FIRST_REAL_SUPERHERO_EXECUTION_INCARCATION_CANARY_V3\"};\n\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function sha256Utf8(s:string){return hex(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))}\nfunction randomHex(n=32){const b=new Uint8Array(n);crypto.getRandomValues(b);return hex(b)}\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_precommits_v3(\n incarnation_id TEXT PRIMARY KEY,\n bearer_digest TEXT NOT NULL UNIQUE,\n challenge TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n task_json TEXT NOT NULL,\n task_sha256 TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n credential_generation INTEGER NOT NULL,\n attempt_generation INTEGER NOT NULL,\n state TEXT NOT NULL,\n issued_at_ms INTEGER NOT NULL,\n expires_at_ms INTEGER NOT NULL,\n reserved_at_ms INTEGER,\n completed_at_ms INTEGER,\n execution_id TEXT,\n result_json TEXT,\n receipt_json TEXT\n )`);\n}\nexport default async function(req:Request){\n await init();\n const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,issuer:ISSUER,state:\"CANDIDATE_NONAUTHORITY\",production_admission_eligible:false});\n if(req.method===\"GET\"&&u.pathname===\"/precommit\"){\n const id=u.searchParams.get(\"incarnation_id\")||\"\";\n const q=await sqlite.execute({sql:`SELECT incarnation_id,challenge,logical_agent_id,workstream,capabilities_json,task_sha256,authority_epoch,credential_generation,attempt_generation,state,issued_at_ms,expires_at_ms,reserved_at_ms,completed_at_ms,execution_id,result_json,receipt_json FROM execution_precommits_v3 WHERE incarnation_id=?`,args:[id]});\n if(!q.rows.length)return json({error:\"NOT_FOUND\"},404);\n const r:any=q.rows[0];\n return json({...r,capabilities:JSON.parse(String(r.capabilities_json)),result:r.result_json?JSON.parse(String(r.result_json)):null,receipt:r.receipt_json?JSON.parse(String(r.receipt_json)):null,capabilities_json:undefined,result_json:undefined,receipt_json:undefined});\n }\n if(req.method===\"POST\"&&u.pathname===\"/reconcile\"){\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!body||Object.keys(body).length!==1||typeof body.incarnation_id!==\"string\")return json({error:\"BODY_INVALID\"},400);\n const now=Date.now();\n await sqlite.execute({sql:`UPDATE execution_precommits_v3 SET state='EXPIRED_UNCONSUMED' WHERE incarnation_id=? AND state='ISSUED' AND expires_at_ms<=?`,args:[body.incarnation_id,now]});\n await sqlite.execute({sql:`UPDATE execution_precommits_v3 SET state='UNKNOWN_OUTCOME' WHERE incarnation_id=? AND state='RESERVED' AND expires_at_ms<=?`,args:[body.incarnation_id,now]});\n const q=await sqlite.execute({sql:\"SELECT state FROM execution_precommits_v3 WHERE incarnation_id=?\",args:[body.incarnation_id]});\n if(!q.rows.length)return json({error:\"NOT_FOUND\"},404);\n return json({incarnation_id:body.incarnation_id,state:String((q.rows[0] as any).state),replay_allowed:false});\n }\n if(req.method!==\"POST\"||u.pathname!==\"/issue\")return json({error:\"NOT_FOUND\"},404);\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!body||typeof body!==\"object\"||Array.isArray(body)||JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"purpose\"]))return json({error:\"BODY_KEYS_INVALID\"},400);\n if(body.purpose!==PURPOSE)return json({error:\"PURPOSE_INVALID\"},400);\n const now=Date.now();\n const incarnationId=crypto.randomUUID();\n const logicalAgentId=\"extchat-\"+crypto.randomUUID();\n const challenge=randomHex(32);\n const bearer=randomHex(32);\n const bearerDigest=await sha256Utf8(\"PB_EXECUTION_BEARER_V3\\0\"+bearer);\n const taskJson=JSON.stringify(FIXED_TASK);\n const taskSha256=await sha256Utf8(taskJson);\n const expiresAt=now+TTL_MS;\n await sqlite.execute({sql:`INSERT INTO execution_precommits_v3(incarnation_id,bearer_digest,challenge,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,authority_epoch,credential_generation,attempt_generation,state,issued_at_ms,expires_at_ms)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,'ISSUED',?,?)`,args:[incarnationId,bearerDigest,challenge,logicalAgentId,WORKSTREAM,JSON.stringify(FIXED_CAPABILITIES),taskJson,taskSha256,AUTHORITY_EPOCH,CREDENTIAL_GENERATION,ATTEMPT_GENERATION,now,expiresAt]});\n return json({schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_ONE_TIME_EXECUTION_PRECOMMIT\",issuer:ISSUER,purpose:PURPOSE,incarnation_id:incarnationId,logical_agent_id:logicalAgentId,workstream:WORKSTREAM,capabilities:[...FIXED_CAPABILITIES],challenge,task_sha256:taskSha256,authority_epoch:AUTHORITY_EPOCH,credential_generation:CREDENTIAL_GENERATION,attempt_generation:ATTEMPT_GENERATION,issued_at_ms:now,expires_at_ms:expiresAt,bearer,raw_bearer_storage:\"RETURNED_ONCE_NOT_PERSISTED_BY_ISSUER\",production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0},201);\n}",[271],"da1f72d8-7c1b-4f0d-a554-0c9409750d7d","main.ts",4,["D",1788893872452],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ISSUER = \"mosadek/project-brain-exec-issuer-v1\";\nconst SCHEMA = \"PROJECT_BRAIN_EXTERNAL_EXECUTION_RECEIPT_CANARY_V1\";\n\nfunction hex(b: Uint8Array) {\n return [...b].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction randomHex(n = 32) {\n const b = new Uint8Array(n);\n crypto.getRandomValues(b);\n return hex(b);\n}\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_receipts(\n execution_id TEXT PRIMARY KEY,\n challenge TEXT NOT NULL,\n logical_agent_id TEXT NOT NULL,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n runtime_nonce TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n receipt_json TEXT NOT NULL\n )`);\n}\nfunction validate(x: any) {\n if (!x || typeof x !== \"object\" || Array.isArray(x)) return \"BODY_NOT_OBJECT\";\n const keys = Object.keys(x).sort();\n const allowed = [\"capabilities\",\"challenge\",\"logical_agent_id\",\"ttl_seconds\",\"workstream\"].sort();\n if (JSON.stringify(keys) !== JSON.stringify(allowed)) return \"BODY_KEYS_INVALID\";\n if (typeof x.challenge !== \"string\" || !/^[0-9a-f]{64}$/.test(x.challenge)) return \"CHALLENGE_INVALID\";\n if (typeof x.logical_agent_id !== \"string\" || x.logical_agent_id.length < 3 || x.logical_agent_id.length > 128) return \"AGENT_ID_INVALID\";\n if (typeof x.workstream !== \"string\" || x.workstream.length < 1 || x.workstream.length > 96) return \"WORKSTREAM_INVALID\";\n if (!Array.isArray(x.capabilities) || x.capabilities.length > 64 || !x.capabilities.every((v: unknown) => typeof v === \"string\" && v.length >= 1 && v.length <= 96)) return \"CAPABILITIES_INVALID\";\n if (!Number.isInteger(x.ttl_seconds) || x.ttl_seconds < 30 || x.ttl_seconds > 300) return \"TTL_INVALID\";\n return null;\n}\n\nexport default async function(req: Request) {\n await init();\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return json({ schema: SCHEMA, issuer: ISSUER, state: \"CANARY_NONAUTHORITY\", now: new Date().toISOString() });\n }\n if (req.method === \"GET\" && url.pathname === \"/receipt\") {\n const id = url.searchParams.get(\"id\") || \"\";\n const r = await sqlite.execute({ sql: \"SELECT receipt_json FROM execution_receipts WHERE execution_id=?\", args: [id] });\n if (!r.rows.length) return json({ error: \"NOT_FOUND\" }, 404);\n return json(JSON.parse(String((r.rows[0] as any).receipt_json)));\n }\n if (req.method !== \"POST\" || url.pathname !== \"/issue\") return json({ error: \"NOT_FOUND\" }, 404);\n\n let body: any;\n try { body = await req.json(); } catch { return json({ error: \"INVALID_JSON\" }, 400); }\n const err = validate(body);\n if (err) return json({ error: err }, 400);\n\n const issued = new Date();\n const expires = new Date(issued.getTime() + body.ttl_seconds * 1000);\n const receipt = {\n schema: SCHEMA,\n classification: \"CANDIDATE_NONAUTHORITY_EXECUTION_RECEIPT\",\n issuer: ISSUER,\n execution_id: crypto.randomUUID(),\n challenge: body.challenge,\n logical_agent_id: body.logical_agent_id,\n workstream: body.workstream,\n capabilities: [...new Set(body.capabilities)].sort(),\n runtime_nonce: randomHex(32),\n issued_at: issued.toISOString(),\n observed_at: issued.toISOString(),\n replay_valid_until: expires.toISOString(),\n execution_observation: \"HTTP_HANDLER_EXECUTED\",\n human_authority_approval: false,\n additional_out_of_pocket_spend_usd: 0\n };\n await sqlite.execute({\n sql: `INSERT INTO execution_receipts(execution_id,challenge,logical_agent_id,workstream,capabilities_json,runtime_nonce,issued_at,expires_at,receipt_json)\n VALUES(?,?,?,?,?,?,?,?,?)`,\n args: [receipt.execution_id, receipt.challenge, receipt.logical_agent_id, receipt.workstream, JSON.stringify(receipt.capabilities), receipt.runtime_nonce, receipt.issued_at, receipt.replay_valid_until, JSON.stringify(receipt)]\n });\n return json(receipt, 201);\n}",[278],"3e9294d6-123c-4c55-9ff0-9b93ac5a3d10","issuer_v6e_encrypted_delivery.ts","b431a592-abc0-11f1-8412-1607ee4eb77e",71,["D",1788897957011],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const V6E={\n schema:\"PROJECT_BRAIN_SINGLETON_ENCRYPTED_DELIVERY_V6E_CANDIDATE\",\n slot_id:\"chatgpt-unattested-singleton-encrypted-v6e\",\n workstream:\"global\",\n fixed_agent_id:\"chatgpt-unattested-singleton-v6e\",\n authority_epoch:2,\n constitution_version:4,\n constitution_sha256:\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\",\n registry_version:5,\n ttl_ms:120000,\n task:{op:\"sha256_utf8\",input:\"SINGLETON_ENCRYPTED_DELIVERY_CANARY_V6E\"} as const\n} as const;\n\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction b64(a:Uint8Array){let s=\"\";for(const x of a)s+=String.fromCharCode(x);return btoa(s)}\nfunction unb64(s:string){const x=atob(s),a=new Uint8Array(x.length);for(let i=0;i4096)throw new Error(\"SPKI_INVALID_LENGTH\");\n let keySha:string;\n try{keySha=await pubkeyHash(spkiB64)}catch{throw new Error(\"SPKI_INVALID_ENCODING\")}\n // Import separately so malformed-but-decodable DER fails before slot acquisition.\n try{await crypto.subtle.importKey(\"spki\",unb64(spkiB64),{name:\"RSA-OAEP\",hash:\"SHA-256\"},false,[\"encrypt\"])}catch{throw new Error(\"SPKI_IMPORT_FAILED\")}\n const old=await readV6E();\n if(old && ![\"EXPIRED_UNCONSUMED\",\"CONSUMED\",\"FAILED\"].includes(String(old.state))){\n return {ok:false,error:\"SLOT_BUSY\",state:String(old.state),generation:Number(old.generation),public_key_sha256:String(old.public_key_sha256)};\n }\n const generation=old?Number(old.generation)+1:1;\n const bearer=randomHex(32),digest=await bearerDigest(bearer),now=new Date(),expires=new Date(now.getTime()+V6E.ttl_ms);\n const taskJson=JSON.stringify(V6E.task),taskSha=await sha256Utf8(taskJson);\n const ciphertext=await encryptBearer(spkiB64,bearer);\n let changed;\n if(!old){\n changed=await sqlite.execute({sql:`INSERT INTO singleton_encrypted_v6e(slot_id,generation,bearer_digest,public_key_sha256,workstream,fixed_agent_id,authority_epoch,constitution_version,constitution_sha256,registry_version,task_json,task_sha256,state,issued_at,expires_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?, 'ISSUED',?,?) ON CONFLICT(slot_id) DO NOTHING`,\n args:[V6E.slot_id,generation,digest,keySha,V6E.workstream,V6E.fixed_agent_id,V6E.authority_epoch,V6E.constitution_version,V6E.constitution_sha256,V6E.registry_version,taskJson,taskSha,now.toISOString(),expires.toISOString()]});\n } else {\n changed=await sqlite.execute({sql:`UPDATE singleton_encrypted_v6e SET generation=?,bearer_digest=?,public_key_sha256=?,workstream=?,fixed_agent_id=?,authority_epoch=?,constitution_version=?,constitution_sha256=?,registry_version=?,task_json=?,task_sha256=?,state='ISSUED',issued_at=?,expires_at=?,consumed_at=NULL,result_sha256=NULL,terminal_reason=NULL\n WHERE slot_id=? AND generation=? AND state IN ('EXPIRED_UNCONSUMED','CONSUMED','FAILED')`,\n args:[generation,digest,keySha,V6E.workstream,V6E.fixed_agent_id,V6E.authority_epoch,V6E.constitution_version,V6E.constitution_sha256,V6E.registry_version,taskJson,taskSha,now.toISOString(),expires.toISOString(),V6E.slot_id,Number(old.generation)]});\n }\n if(changed.rowsAffected!==1)return {ok:false,error:\"ATOMIC_SLOT_ACQUIRE_LOST_RACE\"};\n // Raw bearer deliberately never leaves this function except as RSA-OAEP ciphertext.\n return {\n ok:true,\n schema:V6E.schema,\n classification:\"CANDIDATE_NONAUTHORITY_ENCRYPTED_SINGLETON_ISSUANCE\",\n slot_id:V6E.slot_id,generation,\n encrypted_bearer_rsa_oaep_sha256_b64:ciphertext,\n public_key_sha256:keySha,\n fixed_agent_id:V6E.fixed_agent_id,\n workstream:V6E.workstream,\n task_sha256:taskSha,\n authority_epoch:V6E.authority_epoch,\n constitution_version:V6E.constitution_version,\n constitution_sha256:V6E.constitution_sha256,\n registry_version:V6E.registry_version,\n issued_at:now.toISOString(),expires_at:expires.toISOString(),\n raw_bearer_returned:false,raw_bearer_logged_by_library:false,\n persisted_secret_material:\"DOMAIN_SEPARATED_BEARER_SHA256_ONLY\",\n production_admission_eligible:false,independent_review_eligible:false,\n physical_chat_session_distinctness_proven:false,p_real_delta:0,human_authority_approval:false\n };\n}\n",[284],"11303ded-a927-4d62-8c00-bd93e6e7458b","issuer_v5r1_rotating_bearer_preboot.ts","01a082a8-411c-7039-996f-bef24d5f3410",87,["D",1788898573641],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const V5R1 = {\n schema:\"PROJECT_BRAIN_EXTERNAL_EXECUTION_PRECOMMIT_V5R1_CANDIDATE\",\n slot_id:\"first-real-superhero-exec-canary-v5r1\",\n workstream:\"global\",\n capabilities:[\"code_execution\",\"val_town_read\",\"val_town_blob\"] as const,\n task:{op:\"sha256_utf8\",input:\"FIRST_REAL_SUPERHERO_EXECUTION_CANARY_V5R1\"} as const,\n authority_epoch:2,\n constitution_version:4,\n constitution_sha256:\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\",\n registry_version:5,\n preboot_ttl_ms:90000,\n liveness_ttl_ms:60000\n} as const;\n\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nexport function randomHex(n=32){const b=new Uint8Array(n);crypto.getRandomValues(b);return hex(b)}\nexport async function sha256Utf8(s:string){return hex(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))}\nexport async function bearerDigest(raw:string){return sha256Utf8(\"PROJECT_BRAIN_EXTERNAL_EXECUTION_V5R1_BEARER\\0\"+raw)}\n\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS external_admission_v5r1(\n slot_id TEXT PRIMARY KEY,\n generation INTEGER NOT NULL,\n incarnation_id TEXT NOT NULL UNIQUE,\n bearer_digest TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n task_json TEXT NOT NULL,\n task_sha256 TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n constitution_version INTEGER NOT NULL,\n constitution_sha256 TEXT NOT NULL,\n registry_version INTEGER NOT NULL,\n state TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n preboot_expires_at TEXT NOT NULL,\n activated_at TEXT,\n liveness_expires_at TEXT,\n last_heartbeat_at TEXT,\n heartbeat_seq INTEGER NOT NULL DEFAULT 0,\n canary_result_sha256 TEXT,\n activation_receipt_json TEXT,\n terminal_reason TEXT\n )`);\n}\nexport async function reconcileV5R1(){\n await init(); const now=new Date().toISOString();\n await sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET state='EXPIRED_UNACTIVATED',terminal_reason='PREBOOT_LIVENESS_EXPIRED' WHERE state='BOOTING' AND preboot_expires_at<=?\",args:[now]});\n await sqlite.execute({sql:\"UPDATE external_admission_v5r1 SET state='EXPIRED_LIVENESS',terminal_reason='RUNNING_LIVENESS_EXPIRED' WHERE state='RUNNING' AND liveness_expires_at IS NOT NULL AND liveness_expires_at<=?\",args:[now]});\n}\nexport async function readV5R1(){\n await reconcileV5R1();\n const q=await sqlite.execute({sql:\"SELECT * FROM external_admission_v5r1 WHERE slot_id=?\",args:[V5R1.slot_id]});\n return q.rows.length?(q.rows[0] as any):null;\n}\nexport async function issueFixedV5R1(){\n await reconcileV5R1();\n const old=await readV5R1();\n if(old && ![\"EXPIRED_UNACTIVATED\",\"EXPIRED_LIVENESS\",\"FAILED\"].includes(String(old.state))){\n return {ok:false,error:\"SLOT_BUSY\",state:String(old.state),generation:Number(old.generation),incarnation_id:String(old.incarnation_id)};\n }\n const generation=old?Number(old.generation)+1:1;\n const incarnation_id=crypto.randomUUID();\n const logical_agent_id=`ext-v5r1-${incarnation_id}`;\n const bearer=randomHex(32),digest=await bearerDigest(bearer);\n const now=new Date(),expires=new Date(now.getTime()+V5R1.preboot_ttl_ms);\n const task_json=JSON.stringify(V5R1.task),task_sha256=await sha256Utf8(task_json),caps=JSON.stringify(V5R1.capabilities);\n let changed;\n if(!old){\n changed=await sqlite.execute({sql:`INSERT INTO external_admission_v5r1(slot_id,generation,incarnation_id,bearer_digest,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,authority_epoch,constitution_version,constitution_sha256,registry_version,state,issued_at,preboot_expires_at,heartbeat_seq)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,'BOOTING',?,?,0) ON CONFLICT(slot_id) DO NOTHING`,args:[V5R1.slot_id,generation,incarnation_id,digest,logical_agent_id,V5R1.workstream,caps,task_json,task_sha256,V5R1.authority_epoch,V5R1.constitution_version,V5R1.constitution_sha256,V5R1.registry_version,now.toISOString(),expires.toISOString()]});\n }else{\n changed=await sqlite.execute({sql:`UPDATE external_admission_v5r1 SET generation=?,incarnation_id=?,bearer_digest=?,logical_agent_id=?,workstream=?,capabilities_json=?,task_json=?,task_sha256=?,authority_epoch=?,constitution_version=?,constitution_sha256=?,registry_version=?,state='BOOTING',issued_at=?,preboot_expires_at=?,activated_at=NULL,liveness_expires_at=NULL,last_heartbeat_at=NULL,heartbeat_seq=0,canary_result_sha256=NULL,activation_receipt_json=NULL,terminal_reason=NULL\n WHERE slot_id=? AND generation=? AND state IN ('EXPIRED_UNACTIVATED','EXPIRED_LIVENESS','FAILED')`,args:[generation,incarnation_id,digest,logical_agent_id,V5R1.workstream,caps,task_json,task_sha256,V5R1.authority_epoch,V5R1.constitution_version,V5R1.constitution_sha256,V5R1.registry_version,now.toISOString(),expires.toISOString(),V5R1.slot_id,Number(old.generation)]});\n }\n if(changed.rowsAffected!==1)return {ok:false,error:\"ATOMIC_SLOT_ACQUIRE_LOST_RACE\"};\n return {\n ok:true,schema:V5R1.schema,classification:\"CANDIDATE_NONAUTHORITY_PROJECT_TOOL_ISSUED_BOOTING_INCARCINATION\",\n slot_id:V5R1.slot_id,generation,incarnation_id,bearer,logical_agent_id,workstream:V5R1.workstream,capabilities:[...V5R1.capabilities],\n task_sha256,authority_epoch:V5R1.authority_epoch,constitution_version:V5R1.constitution_version,constitution_sha256:V5R1.constitution_sha256,\n registry_version:V5R1.registry_version,state:\"BOOTING\",issued_at:now.toISOString(),preboot_expires_at:expires.toISOString(),current_liveness_signal:true,\n bearer_persistence:\"ROTATING_DOMAIN_SEPARATED_SHA256_ONLY\",public_http_issuer:false,production_admission_eligible:false,\n physical_chat_session_distinctness_proven:false,human_authority_approval:false,p_real_delta:0\n };\n}\n",[291],"17114d93-cf73-406d-806f-e9565143f5bc","issuer_v5_liveness_preboot.ts","37464880-abc0-11f1-a8c3-1607ee4eb77e",65,["D",1788897873444],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const V5 = {\n schema:\"PROJECT_BRAIN_EXTERNAL_EXECUTION_PRECOMMIT_V5_CANDIDATE\",\n slot_id:\"first-real-superhero-exec-canary-v5\",\n workstream:\"global\",\n capabilities:[\"code_execution\",\"val_town_read\",\"val_town_blob\"] as const,\n task:{op:\"sha256_utf8\",input:\"FIRST_REAL_SUPERHERO_EXECUTION_CANARY_V5\"} as const,\n authority_epoch:2,\n constitution_version:4,\n constitution_sha256:\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\",\n registry_version:5,\n preboot_ttl_ms:90000,\n liveness_ttl_ms:60000\n} as const;\n\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction randomHex(n=32){const b=new Uint8Array(n);crypto.getRandomValues(b);return hex(b)}\nexport async function sha256Utf8(s:string){return hex(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))}\nexport async function bearerDigest(raw:string){return sha256Utf8(\"PROJECT_BRAIN_EXTERNAL_EXECUTION_V5_BEARER\\0\"+raw)}\n\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS external_admission_v5(\n slot_id TEXT PRIMARY KEY,\n generation INTEGER NOT NULL,\n incarnation_id TEXT NOT NULL UNIQUE,\n bearer_digest TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n task_json TEXT NOT NULL,\n task_sha256 TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n constitution_version INTEGER NOT NULL,\n constitution_sha256 TEXT NOT NULL,\n registry_version INTEGER NOT NULL,\n state TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n preboot_expires_at TEXT NOT NULL,\n activated_at TEXT,\n liveness_expires_at TEXT,\n last_heartbeat_at TEXT,\n heartbeat_seq INTEGER NOT NULL DEFAULT 0,\n canary_result_sha256 TEXT,\n activation_receipt_json TEXT,\n terminal_reason TEXT\n )`);\n}\nexport async function reconcileV5(){\n await init(); const now=new Date().toISOString();\n await sqlite.execute({sql:\"UPDATE external_admission_v5 SET state='EXPIRED_UNACTIVATED',terminal_reason='PREBOOT_LIVENESS_EXPIRED' WHERE state='BOOTING' AND preboot_expires_at<=?\",args:[now]});\n await sqlite.execute({sql:\"UPDATE external_admission_v5 SET state='EXPIRED_LIVENESS',terminal_reason='RUNNING_LIVENESS_EXPIRED' WHERE state='RUNNING' AND liveness_expires_at IS NOT NULL AND liveness_expires_at<=?\",args:[now]});\n}\nexport async function readV5(){\n await reconcileV5();\n const q=await sqlite.execute({sql:\"SELECT * FROM external_admission_v5 WHERE slot_id=?\",args:[V5.slot_id]});\n return q.rows.length?(q.rows[0] as any):null;\n}\nexport async function issueFixedV5(){\n await reconcileV5();\n const old=await readV5();\n if(old && ![\"EXPIRED_UNACTIVATED\",\"EXPIRED_LIVENESS\",\"FAILED\"].includes(String(old.state))){\n return {ok:false,error:\"SLOT_BUSY\",state:String(old.state),generation:Number(old.generation),incarnation_id:String(old.incarnation_id)};\n }\n const generation=old?Number(old.generation)+1:1;\n const incarnation_id=crypto.randomUUID();\n const logical_agent_id=`ext-v5-${incarnation_id}`;\n const bearer=randomHex(32),digest=await bearerDigest(bearer);\n const now=new Date(),expires=new Date(now.getTime()+V5.preboot_ttl_ms);\n const task_json=JSON.stringify(V5.task),task_sha256=await sha256Utf8(task_json),caps=JSON.stringify(V5.capabilities);\n let changed;\n if(!old){\n changed=await sqlite.execute({sql:`INSERT INTO external_admission_v5(slot_id,generation,incarnation_id,bearer_digest,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,authority_epoch,constitution_version,constitution_sha256,registry_version,state,issued_at,preboot_expires_at,heartbeat_seq)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,'BOOTING',?,?,0) ON CONFLICT(slot_id) DO NOTHING`,args:[V5.slot_id,generation,incarnation_id,digest,logical_agent_id,V5.workstream,caps,task_json,task_sha256,V5.authority_epoch,V5.constitution_version,V5.constitution_sha256,V5.registry_version,now.toISOString(),expires.toISOString()]});\n }else{\n changed=await sqlite.execute({sql:`UPDATE external_admission_v5 SET generation=?,incarnation_id=?,bearer_digest=?,logical_agent_id=?,workstream=?,capabilities_json=?,task_json=?,task_sha256=?,authority_epoch=?,constitution_version=?,constitution_sha256=?,registry_version=?,state='BOOTING',issued_at=?,preboot_expires_at=?,activated_at=NULL,liveness_expires_at=NULL,last_heartbeat_at=NULL,heartbeat_seq=0,canary_result_sha256=NULL,activation_receipt_json=NULL,terminal_reason=NULL\n WHERE slot_id=? AND generation=? AND state IN ('EXPIRED_UNACTIVATED','EXPIRED_LIVENESS','FAILED')`,args:[generation,incarnation_id,digest,logical_agent_id,V5.workstream,caps,task_json,task_sha256,V5.authority_epoch,V5.constitution_version,V5.constitution_sha256,V5.registry_version,now.toISOString(),expires.toISOString(),V5.slot_id,Number(old.generation)]});\n }\n if(changed.rowsAffected!==1)return {ok:false,error:\"ATOMIC_SLOT_ACQUIRE_LOST_RACE\"};\n return {\n ok:true,schema:V5.schema,classification:\"CANDIDATE_NONAUTHORITY_PROJECT_TOOL_ISSUED_BOOTING_INCARCINATION\",\n slot_id:V5.slot_id,generation,incarnation_id,bearer,logical_agent_id,workstream:V5.workstream,capabilities:[...V5.capabilities],\n task_sha256,authority_epoch:V5.authority_epoch,constitution_version:V5.constitution_version,constitution_sha256:V5.constitution_sha256,\n registry_version:V5.registry_version,state:\"BOOTING\",issued_at:now.toISOString(),preboot_expires_at:expires.toISOString(),current_liveness_signal:true,\n bearer_persistence:\"DOMAIN_SEPARATED_SHA256_ONLY\",public_http_issuer:false,production_admission_eligible:false,\n physical_chat_session_distinctness_proven:false,human_authority_approval:false,p_real_delta:0\n };\n}\n",[298],"1f1401ef-fabb-4ddc-b138-af0f60cb2d9f","issuer_v4_lib.ts","a8589958-abbe-11f1-a92b-1607ee4eb77e",28,["D",1788897078150],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const V4 = {\n schema:\"PROJECT_BRAIN_EXTERNAL_EXECUTION_PRECOMMIT_V4_CANDIDATE\",\n slot_id:\"first-real-superhero-exec-canary-v4\",\n workstream:\"global\",\n logical_agent_id:\"val-external-superhero-canary-v4\",\n capabilities:[\"deterministic_execution\",\"sha256\"] as const,\n task:{op:\"sha256_utf8\",input:\"FIRST_REAL_SUPERHERO_EXECUTION_CANARY_V4\"} as const,\n authority_epoch:2,\n constitution_version:4,\n constitution_sha256:\"36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62\",\n registry_version:5,\n ttl_ms:90000,\n reservation_ttl_ms:30000\n} as const;\n\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction randomHex(n=32){const b=new Uint8Array(n);crypto.getRandomValues(b);return hex(b)}\nexport async function sha256Utf8(s:string){return hex(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))}\nexport async function bearerDigest(raw:string){return sha256Utf8(\"PROJECT_BRAIN_EXTERNAL_EXECUTION_V4_BEARER\\0\"+raw)}\nasync function init(){await sqlite.execute(`CREATE TABLE IF NOT EXISTS external_admission_v4(\n slot_id TEXT PRIMARY KEY,generation INTEGER NOT NULL,incarnation_id TEXT NOT NULL UNIQUE,challenge TEXT NOT NULL UNIQUE,bearer_digest TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL,workstream TEXT NOT NULL,capabilities_json TEXT NOT NULL,task_json TEXT NOT NULL,task_sha256 TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,constitution_version INTEGER NOT NULL,constitution_sha256 TEXT NOT NULL,registry_version INTEGER NOT NULL,\n state TEXT NOT NULL,issued_at TEXT NOT NULL,expires_at TEXT NOT NULL,reserved_at TEXT,reservation_expires_at TEXT,completed_at TEXT,\n execution_id TEXT,result_json TEXT,receipt_json TEXT,terminal_reason TEXT\n)`)}\n\nexport async function reconcileV4(){\n await init(); const now=new Date().toISOString();\n await sqlite.execute({sql:\"UPDATE external_admission_v4 SET state='EXPIRED_UNCONSUMED',terminal_reason='PRECOMMIT_EXPIRED' WHERE state='ISSUED' AND expires_at<=?\",args:[now]});\n await sqlite.execute({sql:\"UPDATE external_admission_v4 SET state='UNKNOWN_OUTCOME',terminal_reason='RESERVATION_EXPIRED_OUTCOME_UNKNOWN' WHERE state='RESERVED' AND reservation_expires_at IS NOT NULL AND reservation_expires_at<=?\",args:[now]});\n}\nexport async function readV4(){\n await reconcileV4();\n const q=await sqlite.execute({sql:\"SELECT * FROM external_admission_v4 WHERE slot_id=?\",args:[V4.slot_id]});\n return q.rows.length?(q.rows[0] as any):null;\n}\nexport async function issueFixedV4(){\n await reconcileV4();\n const old=await readV4();\n if(old && ![\"COMPLETE\",\"EXPIRED_UNCONSUMED\",\"UNKNOWN_OUTCOME\",\"FAILED\"].includes(String(old.state))){\n return {ok:false,error:\"SLOT_BUSY\",state:String(old.state),generation:Number(old.generation),incarnation_id:String(old.incarnation_id)};\n }\n const generation=old?Number(old.generation)+1:1;\n const incarnation_id=crypto.randomUUID(),challenge=randomHex(32),bearer=randomHex(32);\n const digest=await bearerDigest(bearer),now=new Date(),expires=new Date(now.getTime()+V4.ttl_ms);\n const task_json=JSON.stringify(V4.task),task_sha256=await sha256Utf8(task_json),caps=JSON.stringify(V4.capabilities);\n let changed;\n if(!old){\n changed=await sqlite.execute({sql:`INSERT INTO external_admission_v4(slot_id,generation,incarnation_id,challenge,bearer_digest,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,authority_epoch,constitution_version,constitution_sha256,registry_version,state,issued_at,expires_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,'ISSUED',?,?) ON CONFLICT(slot_id) DO NOTHING`,args:[V4.slot_id,generation,incarnation_id,challenge,digest,V4.logical_agent_id,V4.workstream,caps,task_json,task_sha256,V4.authority_epoch,V4.constitution_version,V4.constitution_sha256,V4.registry_version,now.toISOString(),expires.toISOString()]});\n }else{\n changed=await sqlite.execute({sql:`UPDATE external_admission_v4 SET generation=?,incarnation_id=?,challenge=?,bearer_digest=?,logical_agent_id=?,workstream=?,capabilities_json=?,task_json=?,task_sha256=?,authority_epoch=?,constitution_version=?,constitution_sha256=?,registry_version=?,state='ISSUED',issued_at=?,expires_at=?,reserved_at=NULL,reservation_expires_at=NULL,completed_at=NULL,execution_id=NULL,result_json=NULL,receipt_json=NULL,terminal_reason=NULL\n WHERE slot_id=? AND generation=? AND state IN ('COMPLETE','EXPIRED_UNCONSUMED','UNKNOWN_OUTCOME','FAILED')`,args:[generation,incarnation_id,challenge,digest,V4.logical_agent_id,V4.workstream,caps,task_json,task_sha256,V4.authority_epoch,V4.constitution_version,V4.constitution_sha256,V4.registry_version,now.toISOString(),expires.toISOString(),V4.slot_id,Number(old.generation)]});\n }\n if(changed.rowsAffected!==1)return {ok:false,error:\"ATOMIC_SLOT_ACQUIRE_LOST_RACE\"};\n return {ok:true,schema:V4.schema,classification:\"CANDIDATE_NONAUTHORITY_PROJECT_TOOL_ISSUED_PRECOMMIT\",slot_id:V4.slot_id,generation,incarnation_id,challenge,bearer,logical_agent_id:V4.logical_agent_id,workstream:V4.workstream,capabilities:[...V4.capabilities],task_sha256,authority_epoch:V4.authority_epoch,constitution_version:V4.constitution_version,constitution_sha256:V4.constitution_sha256,registry_version:V4.registry_version,issued_at:now.toISOString(),expires_at:expires.toISOString(),bearer_persistence:\"DOMAIN_SEPARATED_SHA256_ONLY\",public_http_issuer:false,production_admission_eligible:false,human_authority_approval:false,p_real_delta:0};\n}\n",[305],"0d049dde-008a-4004-8bf4-cd2e185dc39b","issue_to_current_chat_v5.ts","b2182e8e-abc0-11f1-987c-1607ee4eb77e",70,["D",1788897953509],"import { issueFixedV5, readV5, V5 } from \"./issuer_v5_liveness_preboot.ts\";\nconst before:any=await readV5();\nconst issued:any=await issueFixedV5();\nif(!issued?.ok) throw new Error(\"V5_ISSUE_FAILED:\"+JSON.stringify({before,issued}));\nconst out={...issued,delivery_surface:\"CHATGPT_CONNECTED_VAL_RUN_FILE\",intended_holder_class:\"CURRENT_CHATGPT_EXECUTION\",production_admission_eligible:false,physical_chat_session_distinctness_proven:false,human_authority_approval:false,p_real_delta:0};\nconsole.log(JSON.stringify(out));\nexport default out;",[312],"794cd59f-c6ce-49af-9976-7f7c2e260d66","issue_to_chat_v4_rsa_oaep_canary.ts","b1663080-abc0-11f1-93e1-1607ee4eb77e",69,["D",1788897952340],"import { issueFixedV4 } from \"./issuer_v4_lib.ts\";\nconst publicJwk={\"kty\":\"RSA\",\"n\":\"k9qXUkbf8eFV8oinfkljp6Y4rTO98QH-L9475QuMQRbAO8DjaswtUZYX4YOHUqASFkNgt2qnWUha7JqhjAVa7RG1rtjiEPvXNaiwzGEqULvX0alY9xlQ091Gkzno_oIfy_PM35Y3b04-IDJDhG6MDPuq2nmhlfoyFmkBRZWob_1aucScvFpH9BFRq-Yo-9IjUj2c1YMu0wleTjPPXXY7jupmJT7RwMmZhGqtWR_1uoD4YfSVI0vsaRR6cBsTJlHgGg-baW0INjlermQqokx7ruAcIjbAZ5SvSMKlz_kH32FMbfmBBMTP1XoGsFpx_LdPWpNdEABFIvm84oOD6te-Ow\",\"e\":\"AQAB\",\"alg\":\"RSA-OAEP-256\",\"ext\":true};\nfunction b64u(b:Uint8Array){let s=\"\";for(const x of b)s+=String.fromCharCode(x);return btoa(s).replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=+$/,\"\")}\nconst issued:any=await issueFixedV4();\nif(!issued?.ok) throw new Error(\"V4_ISSUE_FAILED\");\nif(typeof issued.bearer!==\"string\"||!/^[0-9a-f]{64}$/.test(issued.bearer)) throw new Error(\"BEARER_SHAPE\");\nconst key=await crypto.subtle.importKey(\"jwk\",publicJwk,{name:\"RSA-OAEP\",hash:\"SHA-256\"},false,[\"encrypt\"]);\nconst ct=new Uint8Array(await crypto.subtle.encrypt({name:\"RSA-OAEP\"},key,new TextEncoder().encode(issued.bearer)));\nconst {bearer,...meta}=issued;\nconst out={schema:\"PROJECT_BRAIN_CHATGPT_ENCRYPTED_V4_DELIVERY_CANARY_V1\",classification:\"CANDIDATE_NONAUTHORITY_ENCRYPTED_EXECUTION_POSSESSION_EVIDENCE\",delivery:\"RSA_OAEP_256_TO_EPHEMERAL_CHATGPT_KEY\",ciphertext_b64u:b64u(ct),...meta,raw_bearer_logged:false,private_key_external_to_val:true,production_admission_eligible:false,p_real_delta:0};\nconsole.log(JSON.stringify(out));\nexport default out;",[319],"b569fc40-465f-4d36-acf4-4d4e09b755b3","issue_to_chat_v4.ts","20a473e6-abbf-11f1-9dad-1607ee4eb77e",40,["D",1788897279968],"import {issueFixedV4} from \"./issuer_v4_lib.ts\";\nconst issued:any=await issueFixedV4();\nif(!issued?.ok) throw new Error(\"V4_ISSUE_FAILED:\"+JSON.stringify(issued));\nconsole.log(JSON.stringify(issued));\nexport default issued;",[326],"eb4b815c-7a9d-4f4e-bdb0-3cd0f5c774fe","issue_encrypted_v6e_current.ts","b580b91a-abc0-11f1-b990-1607ee4eb77e",72,["D",1788897959154],"import {issueEncryptedV6E} from \"./issuer_v6e_encrypted_delivery.ts\";\nconst PUBLIC_SPKI_B64=\"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlavMnzzQiRX50lcBoSP6ClES3MqWCrxeUceU6mOROms5Wm1QCNdVfUegDvwmcZQMV9k5uHkh7Q+V+JlsQgWhrUdAi4Avoq3N5fcrURLYmLN4IlyY6hk8W3WpgR6yC1JuUOARF35UgjZynW1pXctnBtiCg7OZStIqr3HOl0K43rewuS6Pv9AZUv7HSAze8jvJ/qek/ubsP5y9FVH9P0f3ZgMaqJNzI3e7HV+dd6/Qw0PzhdvbYCRubX8bWYQgBGal9f9vMgw3L/Jq7NSR6iKqCnufCSH6bVxOJaVuIdDSEnL0f+9tkqg2MaWfoMigoYmAaoOhDLIsgm2WkHT6vusx5QIDAQAB\";\nconst out=await issueEncryptedV6E(PUBLIC_SPKI_B64);\nconsole.log(JSON.stringify(out));\nexport default {ok:out.ok,classification:out.classification,public_key_sha256:out.public_key_sha256};\n",[333],"001d9422-6683-429b-9f49-227a273407d2","issue_encrypted_v6e_chat_2156_a1.ts","c763ed36-abc1-11f1-828c-1607ee4eb77e",76,["D",1788898418736],"import {issueEncryptedV6E} from \"./issuer_v6e_encrypted_delivery.ts\";\nconst PUBLIC_SPKI_B64=\"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg7BJoJg4GXMPTe9f1PUy5D+1kWr77fPbtfgNa6IGGhxRZ0isIctRVrkR1wE6zkLEcZXI9PxHM9EQL6cOshUIrqktnRDtl0GpgVrcsfiK4ITV74zhT4uQ7oWZV00NqGbACXVyb3W2geR+5LfVtEMQZ8itGhZVhY5KpsPC1lQaUI42leaaBf6FTS6R1ZoM4lytarAfl0Vxae0GRMW5XUixitwBFjiLpKg13T1RMyxR0wKCqAwfK4QSUO8n2vJERuaLf7Nv9pzcVExLpQSP9wQ/PNfe9Rh0KfrjD+FyanMeix3Ic7OF7iIWkLRAkH8PelytJTqlXYAjig6YD5Xw2Jy+wIDAQAB\";\nconst out=await issueEncryptedV6E(PUBLIC_SPKI_B64);\nif(!out?.ok) throw new Error(\"V6E_ISSUE_FAILED:\"+JSON.stringify(out));\nconsole.log(JSON.stringify(out));\nexport default out;",[340],"12028c77-c565-4180-bca6-1d9fb43b200d","incarnation_issuer_v3_candidate_test.ts","3d9ec92a-abbe-11f1-bfb4-1607ee4eb77e",22,["D",1788896899103],"import handler from \"./incarnation_issuer_v3_candidate.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\ntype T = {name:string, pass:boolean, detail?:unknown};\nconst tests:T[]=[];\nfunction ok(name:string, pass:boolean, detail?:unknown){tests.push({name,pass,detail});}\nasync function call(path:string, method=\"GET\", body?:unknown){\n const req=new Request(\"https://candidate.test\"+path,{\n method,\n headers: body===undefined?undefined:{\"content-type\":\"application/json\"},\n body: body===undefined?undefined:JSON.stringify(body)\n });\n const res=await handler(req);\n let json:any=null; try{json=await res.json();}catch{}\n return {status:res.status,json};\n}\nconst slot=\"chatgpt_val_town_connector_v1\";\n\nconst h=await call(\"/health\");\nok(\"health candidate-only\",h.status===200&&h.json.production_admission_eligible===false&&h.json.raw_bearer_persisted===false,h);\n\nconst spoof=await call(\"/issue\",\"POST\",{slot_class:slot,logical_agent_id:\"evil\"});\nok(\"caller cannot choose identity/workstream/caps/task\",spoof.status===400&&spoof.json.error===\"SLOT_REQUEST_INVALID\",spoof);\n\nconst issued=await call(\"/issue\",\"POST\",{slot_class:slot});\nconst i=issued.json;\nok(\"issue returns project-fixed tuple and one-time bearer\",\n issued.status===201&&i.state===\"BOOTING\"&&/^[0-9a-f]{64}$/.test(i.bearer)&&\n i.workstream===\"global\"&&i.authority_epoch===2&&i.attempt_generation===1&&\n i.production_admission_eligible===false&&i.human_authority_approval===false&&\n !i.capabilities.includes(\"human_authority_approval\"),issued);\n\nconst pub0=await call(\"/receipt?id=\"+encodeURIComponent(i.incarnation_id));\nok(\"public state never exposes bearer or digest\",\n pub0.status===200&&pub0.json.bearer_present===false&&pub0.json.bearer_digest_exposed===false&&\n pub0.json.receipt===null,pub0);\n\nconst wrong=\"00\".repeat(32);\nconst bad=await call(\"/activate\",\"POST\",{incarnation_id:i.incarnation_id,bearer:wrong});\nok(\"wrong bearer fails closed\",bad.status===403&&bad.json.error===\"BEARER_MISMATCH\",bad);\n\nconst pub1=await call(\"/receipt?id=\"+encodeURIComponent(i.incarnation_id));\nok(\"wrong bearer leaves incarnation ISSUED\",pub1.status===200&&pub1.json.state===\"ISSUED\",pub1);\n\nconst [a1,a2]=await Promise.all([\n call(\"/activate\",\"POST\",{incarnation_id:i.incarnation_id,bearer:i.bearer}),\n call(\"/activate\",\"POST\",{incarnation_id:i.incarnation_id,bearer:i.bearer})\n]);\nconst transitions=[a1.json?.activation_transition,a2.json?.activation_transition].sort();\nok(\"concurrent same-bearer activation is one state transition plus idempotent readback\",\n a1.status===200&&a2.status===200&&\n transitions.includes(\"ISSUED_TO_ACTIVE\")&&transitions.includes(\"IDEMPOTENT_ACTIVE_READBACK\"),{a1,a2});\nok(\"activation receipt stays candidate-only and does not fake physical distinctness\",\n a1.json.production_admission_eligible===false&&a1.json.physical_chat_session_distinctness_proven===false&&\n a1.json.independent_review_eligible===false&&a1.json.p_real_delta===0,a1);\n\nconst pub2=await call(\"/receipt?id=\"+encodeURIComponent(i.incarnation_id));\nok(\"public readback is ACTIVE but not a bearer-possession proof\",\n pub2.status===200&&pub2.json.state===\"ACTIVE\"&&pub2.json.bearer_present===false&&\n pub2.json.production_admission_eligible===false,pub2);\n\nconst issued2=await call(\"/issue\",\"POST\",{slot_class:slot});\nconst j=issued2.json;\nawait sqlite.execute({sql:\"UPDATE execution_incarnations_v3_candidate SET expires_at='2000-01-01T00:00:00.000Z' WHERE incarnation_id=?\",args:[j.incarnation_id]});\nconst expired=await call(\"/activate\",\"POST\",{incarnation_id:j.incarnation_id,bearer:j.bearer});\nok(\"expired bearer cannot activate\",expired.status===410&&expired.json.error===\"INCARNATION_EXPIRED\",expired);\nconst pub3=await call(\"/receipt?id=\"+encodeURIComponent(j.incarnation_id));\nok(\"expired unactivated state terminalized\",pub3.status===200&&pub3.json.state===\"EXPIRED_UNACTIVATED\",pub3);\n\nconst issued3=await call(\"/issue\",\"POST\",{slot_class:slot});\nok(\"issuer creates distinct project-generated identities/challenges\",\n issued3.status===201&&issued3.json.incarnation_id!==i.incarnation_id&&\n issued3.json.logical_agent_id!==i.logical_agent_id&&issued3.json.challenge!==i.challenge,{first:i,second:issued3.json});\n\nconst failed=tests.filter(t=>!t.pass);\nconsole.log(JSON.stringify({\n schema:\"PROJECT_BRAIN_EXECUTION_INCARCINATION_ISSUER_V3_CANDIDATE_TEST_REPORT\",\n classification:\"CANDIDATE_NONAUTHORITY_SELF_TEST\",\n tests_total:tests.length,\n tests_passed:tests.length-failed.length,\n pass:failed.length===0,\n tests,\n known_unresolved:[\n \"No project/product primitive proves one physical ChatGPT execution can receive at most one incarnation.\",\n \"A connected caller with issuer access can mint multiple logical incarnations; therefore physical-session duplicate ambiguity remains.\",\n \"The raw bearer is returned only in the issue response and not persisted in project SQL, but provider/tool telemetry confidentiality is not independently attested.\",\n \"Authority epoch is pinned to candidate constant 2 rather than atomically read from canonical control-plane authority.\",\n \"This candidate does not establish production admission, independent-review eligibility, or P_real.\"\n ],\n human_authority_approval:false,\n p_real_delta:0\n},null,2));\nif(failed.length) throw new Error(\"TEST_FAILURE\");\n",[347],"ddd7fb1a-1237-435a-a94f-a6d16bf9c233","incarnation_issuer_v3_candidate.ts","24da0e9a-abbe-11f1-9eb2-1607ee4eb77e",20,["D",1788896857531],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA = \"PROJECT_BRAIN_EXECUTION_INCARCINATION_ISSUER_V3_CANDIDATE\";\nconst ISSUER = \"mosadek/project-brain-exec-issuer-v1/incarnation_issuer_v3_candidate.ts\";\nconst AUTHORITY_EPOCH = 2;\nconst TTL_MS = 120_000;\nconst FIXED_SLOT = {\n slot_class: \"chatgpt_val_town_connector_v1\",\n workstream: \"global\",\n capabilities: [\n \"code_execution\",\n \"reasoning\",\n \"val_town_blob\",\n \"val_town_read\",\n \"val_town_sql\",\n \"val_town_write\",\n ],\n task_descriptor: \"PROJECT_BRAIN_CHATGPT_VAL_TOWN_BOOT_CANARY_V1\",\n} as const;\n\nfunction hex(b: ArrayBuffer | Uint8Array) {\n const a = b instanceof Uint8Array ? b : new Uint8Array(b);\n return [...a].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction randomHex(n = 32) {\n const b = new Uint8Array(n);\n crypto.getRandomValues(b);\n return hex(b);\n}\nasync function sha256Utf8(s: string) {\n return hex(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s)));\n}\nasync function bearerDigest(bearer: string) {\n return sha256Utf8(\"PROJECT_BRAIN_EXECUTION_BEARER_V1\\0\" + bearer);\n}\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store, private\",\n \"pragma\": \"no-cache\",\n },\n });\n}\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_incarnations_v3_candidate(\n incarnation_id TEXT PRIMARY KEY,\n challenge TEXT NOT NULL UNIQUE,\n bearer_digest TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL UNIQUE,\n slot_class TEXT NOT NULL,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n task_sha256 TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n attempt_generation INTEGER NOT NULL,\n state TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n activated_at TEXT,\n receipt_json TEXT\n )`);\n}\nfunction makeAgentId(now: Date) {\n const compact = now.toISOString().replace(/[-:.TZ]/g, \"\").slice(0, 14);\n return `chat-exec-${compact}-${randomHex(6)}`;\n}\nfunction publicTuple(row: any) {\n return {\n incarnation_id: String(row.incarnation_id),\n challenge: String(row.challenge),\n logical_agent_id: String(row.logical_agent_id),\n slot_class: String(row.slot_class),\n workstream: String(row.workstream),\n capabilities: JSON.parse(String(row.capabilities_json)),\n task_sha256: String(row.task_sha256),\n authority_epoch: Number(row.authority_epoch),\n attempt_generation: Number(row.attempt_generation),\n state: String(row.state),\n issued_at: String(row.issued_at),\n expires_at: String(row.expires_at),\n activated_at: row.activated_at ? String(row.activated_at) : null,\n };\n}\nasync function getRow(id: string) {\n const q = await sqlite.execute({\n sql: `SELECT * FROM execution_incarnations_v3_candidate WHERE incarnation_id=?`,\n args: [id],\n });\n return q.rows.length ? (q.rows[0] as any) : null;\n}\nasync function issue() {\n const now = new Date();\n const expires = new Date(now.getTime() + TTL_MS);\n const incarnationId = crypto.randomUUID();\n const challenge = randomHex(32);\n const bearer = randomHex(32);\n const digest = await bearerDigest(bearer);\n const logicalAgentId = makeAgentId(now);\n const taskSha = await sha256Utf8(FIXED_SLOT.task_descriptor);\n const capsJson = JSON.stringify([...FIXED_SLOT.capabilities].sort());\n\n await sqlite.execute({\n sql: `INSERT INTO execution_incarnations_v3_candidate(\n incarnation_id,challenge,bearer_digest,logical_agent_id,slot_class,workstream,\n capabilities_json,task_sha256,authority_epoch,attempt_generation,state,\n issued_at,expires_at\n ) VALUES(?,?,?,?,?,?,?,?,?,1,'ISSUED',?,?)`,\n args: [\n incarnationId, challenge, digest, logicalAgentId, FIXED_SLOT.slot_class,\n FIXED_SLOT.workstream, capsJson, taskSha, AUTHORITY_EPOCH,\n now.toISOString(), expires.toISOString(),\n ],\n });\n\n return json({\n schema: SCHEMA,\n classification: \"CANDIDATE_NONAUTHORITY_ONE_TIME_BEARER_ISSUE\",\n production_admission_eligible: false,\n state: \"BOOTING\",\n incarnation_id: incarnationId,\n challenge,\n bearer,\n logical_agent_id: logicalAgentId,\n workstream: FIXED_SLOT.workstream,\n capabilities: JSON.parse(capsJson),\n task_sha256: taskSha,\n authority_epoch: AUTHORITY_EPOCH,\n attempt_generation: 1,\n issued_at: now.toISOString(),\n liveness_expires_at: expires.toISOString(),\n bearer_storage: \"RETURNED_ONCE_RAW_PERSISTED_ONLY_AS_DOMAIN_SEPARATED_SHA256\",\n human_authority_approval: false,\n p_real_delta: 0,\n }, 201);\n}\nasync function activate(body: any) {\n if (!body || typeof body !== \"object\" || Array.isArray(body) ||\n JSON.stringify(Object.keys(body).sort()) !== JSON.stringify([\"bearer\",\"incarnation_id\"])) {\n return json({error:\"BODY_KEYS_INVALID\"}, 400);\n }\n if (typeof body.incarnation_id !== \"string\" || body.incarnation_id.length < 16 ||\n typeof body.bearer !== \"string\" || !/^[0-9a-f]{64}$/.test(body.bearer)) {\n return json({error:\"ACTIVATION_FIELDS_INVALID\"}, 400);\n }\n\n const digest = await bearerDigest(body.bearer);\n const now = new Date();\n const nowIso = now.toISOString();\n\n const changed = await sqlite.execute({\n sql: `UPDATE execution_incarnations_v3_candidate\n SET state='ACTIVE', activated_at=?\n WHERE incarnation_id=? AND bearer_digest=? AND state='ISSUED'\n AND expires_at>?`,\n args: [nowIso, body.incarnation_id, digest, nowIso],\n });\n\n const row = await getRow(body.incarnation_id);\n if (!row) return json({error:\"INCARNATION_NOT_FOUND\"}, 404);\n\n const expectedDigest = String(row.bearer_digest);\n if (expectedDigest !== digest) return json({error:\"BEARER_MISMATCH\"}, 403);\n if (new Date(String(row.expires_at)).getTime() <= now.getTime()) {\n if (String(row.state) === \"ISSUED\") {\n await sqlite.execute({\n sql: `UPDATE execution_incarnations_v3_candidate SET state='EXPIRED_UNACTIVATED'\n WHERE incarnation_id=? AND state='ISSUED'`,\n args: [body.incarnation_id],\n });\n }\n return json({error:\"INCARNATION_EXPIRED\"}, 410);\n }\n\n const current = await getRow(body.incarnation_id);\n if (!current) return json({error:\"INCARNATION_NOT_FOUND\"}, 404);\n if (String(current.state) !== \"ACTIVE\") {\n return json({error:\"INCARNATION_NOT_ACTIVE\", state:String(current.state)}, 409);\n }\n\n const tuple = publicTuple(current);\n const receipt = {\n schema: SCHEMA,\n classification: \"CANDIDATE_NONAUTHORITY_EXECUTION_INCARCINATION_RECEIPT\",\n production_admission_eligible: false,\n ...tuple,\n state: \"RUNNING\",\n liveness_signal: \"UNEXPIRED_ONE_TIME_BEARER_POSSESSION_PROVEN\",\n activation_transition: changed.rowsAffected === 1 ? \"ISSUED_TO_ACTIVE\" : \"IDEMPOTENT_ACTIVE_READBACK\",\n identity_binding: \"ISSUER_GENERATED_NOT_CALLER_SELECTED\",\n workstream_binding: \"ISSUER_FIXED_SLOT_NOT_CALLER_SELECTED\",\n capability_binding: \"ISSUER_FIXED_SLOT_NOT_CALLER_SELECTED\",\n challenge_binding: \"ISSUER_GENERATED_NOT_CALLER_SELECTED\",\n task_binding: \"ISSUER_FIXED_TASK_DESCRIPTOR_SHA256\",\n bearer_binding: \"DOMAIN_SEPARATED_SHA256_ONLY_PERSISTED\",\n physical_chat_session_distinctness_proven: false,\n independent_review_eligible: false,\n human_authority_approval: false,\n p_real_delta: 0,\n };\n await sqlite.execute({\n sql: `UPDATE execution_incarnations_v3_candidate\n SET receipt_json=? WHERE incarnation_id=? AND state='ACTIVE'`,\n args: [JSON.stringify(receipt), body.incarnation_id],\n });\n return json(receipt, 200);\n}\n\nexport default async function(req: Request) {\n await init();\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return json({\n schema: SCHEMA,\n state: \"CANDIDATE_NONAUTHORITY\",\n production_admission_eligible: false,\n authority_epoch: AUTHORITY_EPOCH,\n slot_class: FIXED_SLOT.slot_class,\n fixed_workstream: FIXED_SLOT.workstream,\n fixed_capabilities: FIXED_SLOT.capabilities,\n raw_bearer_persisted: false,\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/issue\") {\n let body: any = null;\n try { body = await req.json(); } catch { return json({error:\"INVALID_JSON\"}, 400); }\n if (!body || typeof body !== \"object\" || Array.isArray(body) ||\n JSON.stringify(Object.keys(body)) !== JSON.stringify([\"slot_class\"]) ||\n body.slot_class !== FIXED_SLOT.slot_class) {\n return json({error:\"SLOT_REQUEST_INVALID\"}, 400);\n }\n return issue();\n }\n\n if (req.method === \"POST\" && url.pathname === \"/activate\") {\n let body: any;\n try { body = await req.json(); } catch { return json({error:\"INVALID_JSON\"}, 400); }\n return activate(body);\n }\n\n if (req.method === \"GET\" && url.pathname === \"/receipt\") {\n const id = url.searchParams.get(\"id\") || \"\";\n const row = await getRow(id);\n if (!row) return json({error:\"NOT_FOUND\"}, 404);\n const tuple = publicTuple(row);\n return json({\n schema: SCHEMA,\n classification: \"CANDIDATE_NONAUTHORITY_PUBLIC_INCARCINATION_STATE\",\n production_admission_eligible: false,\n ...tuple,\n bearer_present: false,\n bearer_digest_exposed: false,\n receipt: row.receipt_json ? JSON.parse(String(row.receipt_json)) : null,\n });\n }\n\n return json({error:\"NOT_FOUND\"}, 404);\n}\n",[354],"d648cfa8-2056-4234-b1c6-422bf4a5f8e0","consume_v6e_chat_2156_a1.ts","036478a0-abc2-11f1-a80a-1607ee4eb77e",81,["D",1788898519394],"const bearer=Deno.env.get(\"V6E_CHAT_2156_A1_CONSUME_BEARER\");\nif(!bearer||!/^[0-9a-f]{64}$/.test(bearer)) throw new Error(\"BEARER_ENV_MISSING\");\nconst r=await fetch(\"https://mosadek--da4701aaabc011f1a5201607ee4eb77e.web.val.run/consume\",{\n method:\"POST\",headers:{\"content-type\":\"application/json\"},\n body:JSON.stringify({slot_id:\"chatgpt-unattested-singleton-encrypted-v6e\",generation:2,public_key_sha256:\"308abde41f67792069867c4435ca0f509de72f49af8c92a63eace6d7e485f7bc\",bearer})\n});\nconst j=await r.json();\nif(r.status!==200) throw new Error(\"V6E_CONSUME_FAILED:\"+r.status+\":\"+JSON.stringify(j));\nconsole.log(JSON.stringify({status:r.status,receipt:j,env_bearer_present:true,source_bearer_literal:false}));\nexport default {status:r.status,receipt:j};",[361],"5320fbff-56ee-4673-874d-8b5a923fc2c0","challenge_issuer_v3_a71.ts","02308a54-abbe-11f1-bb88-1607ee4eb77e",14,["D",1788896799385],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA = \"PROJECT_BRAIN_EXTERNAL_EXECUTION_PRECOMMIT_V3_CANDIDATE\";\nconst ISSUER_ID = \"mosadek/project-brain-exec-issuer-v1/challenge_issuer_v3_a71.ts\";\nconst WORKSTREAM = \"global\";\nconst FIXED_CAPABILITIES = [\"deterministic_execution\",\"sha256\"] as const;\n\nfunction hex(b: Uint8Array) { return [...b].map(x => x.toString(16).padStart(2,\"0\")).join(\"\"); }\nfunction randomHex(n=32){ const b=new Uint8Array(n); crypto.getRandomValues(b); return hex(b); }\nasync function sha256Utf8(s:string){ return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))); }\nfunction json(body:unknown,status=200){ return new Response(JSON.stringify(body),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}}); }\n\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_precommits_v3_a71(\n challenge TEXT PRIMARY KEY,\n execution_incarnation_id TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL,\n capabilities_json TEXT NOT NULL,\n task_json TEXT NOT NULL,\n task_sha256 TEXT NOT NULL,\n state TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n reserved_at TEXT,\n reservation_expires_at TEXT,\n completed_at TEXT,\n result_json TEXT,\n receipt_json TEXT,\n terminal_reason TEXT\n )`);\n}\nfunction validateIssue(body:any):string|null{\n if(!body||typeof body!==\"object\"||Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n if(JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"task\",\"ttl_seconds\"])) return \"BODY_KEYS_INVALID\";\n if(!Number.isInteger(body.ttl_seconds)||body.ttl_seconds<30||body.ttl_seconds>300) return \"TTL_INVALID\";\n if(!body.task||typeof body.task!==\"object\"||Array.isArray(body.task)) return \"TASK_INVALID\";\n if(JSON.stringify(Object.keys(body.task).sort())!==JSON.stringify([\"input\",\"op\"])) return \"TASK_KEYS_INVALID\";\n if(body.task.op!==\"sha256_utf8\") return \"OP_NOT_ALLOWED\";\n if(typeof body.task.input!==\"string\"||body.task.input.length>65536) return \"TASK_INPUT_INVALID\";\n return null;\n}\n\nexport default async function(req:Request){\n await init();\n const url=new URL(req.url);\n if(req.method===\"GET\"&&url.pathname===\"/health\"){\n return json({schema:SCHEMA,issuer_id:ISSUER_ID,state:\"CANDIDATE_NONAUTHORITY\",workstream:WORKSTREAM,fixed_capabilities:FIXED_CAPABILITIES,production_admission_eligible:false});\n }\n if(req.method===\"GET\"&&url.pathname===\"/precommit\"){\n const challenge=url.searchParams.get(\"challenge\")||\"\";\n const q=await sqlite.execute({sql:`SELECT execution_incarnation_id,logical_agent_id,workstream,capabilities_json,task_sha256,state,issued_at,expires_at,reserved_at,reservation_expires_at,completed_at,terminal_reason FROM atomic_precommits_v3_a71 WHERE challenge=?`,args:[challenge]});\n if(!q.rows.length) return json({error:\"NOT_FOUND\"},404);\n const r:any=q.rows[0];\n return json({challenge,...r,capabilities:JSON.parse(String(r.capabilities_json)),capabilities_json:undefined});\n }\n if(req.method!==\"POST\"||url.pathname!==\"/issue\") return json({error:\"NOT_FOUND\"},404);\n let body:any; try{body=await req.json();}catch{return json({error:\"INVALID_JSON\"},400);}\n const invalid=validateIssue(body); if(invalid) return json({error:invalid},400);\n\n const issuedAt=new Date();\n const expiresAt=new Date(issuedAt.getTime()+body.ttl_seconds*1000);\n const executionIncarnationId=crypto.randomUUID();\n const logicalAgentId=\"ext-v3-\"+executionIncarnationId;\n const taskJson=JSON.stringify(body.task);\n const taskSha256=await sha256Utf8(taskJson);\n const capabilitiesJson=JSON.stringify([...FIXED_CAPABILITIES]);\n let challenge=\"\";\n let inserted=false;\n for(let i=0;i<3&&!inserted;i++){\n challenge=randomHex(32);\n const r=await sqlite.execute({sql:`INSERT INTO atomic_precommits_v3_a71\n (challenge,execution_incarnation_id,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,state,issued_at,expires_at)\n VALUES(?,?,?,?,?,?,?,'ISSUED',?,?) ON CONFLICT(challenge) DO NOTHING`,\n args:[challenge,executionIncarnationId,logicalAgentId,WORKSTREAM,capabilitiesJson,taskJson,taskSha256,issuedAt.toISOString(),expiresAt.toISOString()]});\n inserted=r.rowsAffected===1;\n }\n if(!inserted) return json({error:\"CHALLENGE_COLLISION\"},500);\n return json({\n schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_PRECOMMIT\",\n issuer_id:ISSUER_ID,challenge,execution_incarnation_id:executionIncarnationId,\n logical_agent_id:logicalAgentId,workstream:WORKSTREAM,capabilities:[...FIXED_CAPABILITIES],\n task_sha256:taskSha256,issued_at:issuedAt.toISOString(),expires_at:expiresAt.toISOString(),\n binding:\"PROJECT_ISSUER_DERIVED_ID_WORKSTREAM_CAPABILITIES_AND_TASK_HASH\",\n production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0\n },201);\n}\n",[368],"8fdefd7f-f193-4f48-9ecb-468fe6939804","canary_call.ts","c713c500-abb6-11f1-bbc5-1607ee4eb77e",["D",1788893693732],"const endpoint = \"https://mosadek--aa7fce52abb611f1b1431607ee4eb77e.web.val.run/issue\";\nconst body = {\n capabilities: [\"reasoning\",\"val_town\",\"web_research\",\"file_analysis\"],\n challenge: \"cb9e0782bfd239ba4f2b4be86cc9a4c4c5e143f7541dcc83d79875845491533e\",\n logical_agent_id: \"external-val-canary-20260908-2054\",\n ttl_seconds: 180,\n workstream: \"global\"\n};\nconst res = await fetch(endpoint, {\n method: \"POST\",\n headers: {\"content-type\":\"application/json\"},\n body: JSON.stringify(body)\n});\nconst text = await res.text();\nif (res.status !== 201) throw new Error(\"ISSUER_HTTP_FAILED:\"+res.status+\":\"+text);\nconst receipt = JSON.parse(text);\nif (receipt.challenge !== body.challenge) throw new Error(\"CHALLENGE_MISMATCH\");\nif (receipt.logical_agent_id !== body.logical_agent_id) throw new Error(\"AGENT_MISMATCH\");\nif (receipt.workstream !== body.workstream) throw new Error(\"WORKSTREAM_MISMATCH\");\nif (receipt.execution_state !== \"RUNNING\") throw new Error(\"STATE_MISMATCH\");\nconsole.log(JSON.stringify({status:res.status,receipt}));\nexport default {status:res.status,receipt};",[375],"64e3d8d0-6bd7-42b6-93c3-636e7016eacf","atomic_worker_v3_candidate.ts","0e726b02-abbe-11f1-bc32-1607ee4eb77e",17,["D",1788896819917],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst SCHEMA=\"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V3_PRECOMMIT_CANDIDATE\";\nconst WORKER_ID=\"mosadek/project-brain-exec-issuer-v1/atomic_worker_v3_candidate.ts\";\nconst AUTHORITY_EPOCH=2;\nconst FIXED_CAPABILITIES=[\"deterministic_execution\",\"sha256\"] as const;\nfunction hex(b:ArrayBuffer|Uint8Array){const a=b instanceof Uint8Array?b:new Uint8Array(b);return [...a].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function sha256Utf8(s:string){return hex(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))}\nfunction json(x:unknown,status=200){return new Response(JSON.stringify(x),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}})}\nasync function init(){await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_precommits_v3(\n incarnation_id TEXT PRIMARY KEY,bearer_digest TEXT NOT NULL UNIQUE,challenge TEXT NOT NULL UNIQUE,logical_agent_id TEXT NOT NULL UNIQUE,workstream TEXT NOT NULL,capabilities_json TEXT NOT NULL,task_json TEXT NOT NULL,task_sha256 TEXT NOT NULL,authority_epoch INTEGER NOT NULL,credential_generation INTEGER NOT NULL,attempt_generation INTEGER NOT NULL,state TEXT NOT NULL,issued_at_ms INTEGER NOT NULL,expires_at_ms INTEGER NOT NULL,reserved_at_ms INTEGER,completed_at_ms INTEGER,execution_id TEXT,result_json TEXT,receipt_json TEXT)`)}\nexport default async function(req:Request){\n await init(); const u=new URL(req.url);\n if(req.method===\"GET\"&&u.pathname===\"/health\")return json({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",fixed_capabilities:FIXED_CAPABILITIES,production_admission_eligible:false});\n if(req.method!==\"POST\"||u.pathname!==\"/execute\")return json({error:\"NOT_FOUND\"},404);\n let body:any;try{body=await req.json()}catch{return json({error:\"INVALID_JSON\"},400)}\n if(!body||typeof body!==\"object\"||Array.isArray(body)||JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"bearer\",\"incarnation_id\"]))return json({error:\"BODY_KEYS_INVALID\"},400);\n if(typeof body.incarnation_id!==\"string\"||body.incarnation_id.length<10||body.incarnation_id.length>128)return json({error:\"INCARCATION_ID_INVALID\"},400);\n if(typeof body.bearer!==\"string\"||!/^[0-9a-f]{64}$/.test(body.bearer))return json({error:\"BEARER_INVALID\"},400);\n const now=Date.now(); const executionId=crypto.randomUUID(); const digest=await sha256Utf8(\"PB_EXECUTION_BEARER_V3\\0\"+body.bearer);\n const reserve=await sqlite.execute({sql:`UPDATE execution_precommits_v3 SET state='RESERVED',reserved_at_ms=?,execution_id=? WHERE incarnation_id=? AND bearer_digest=? AND state='ISSUED' AND authority_epoch=? AND expires_at_ms>? AND attempt_generation=1`,args:[now,executionId,body.incarnation_id,digest,AUTHORITY_EPOCH,now]});\n if(reserve.rowsAffected!==1){\n const q=await sqlite.execute({sql:\"SELECT state,expires_at_ms,authority_epoch,attempt_generation FROM execution_precommits_v3 WHERE incarnation_id=?\",args:[body.incarnation_id]});\n if(!q.rows.length)return json({error:\"PRECOMMIT_NOT_FOUND\"},404);\n const r:any=q.rows[0]; if(Number(r.expires_at_ms)<=now)return json({error:\"PRECOMMIT_EXPIRED\",state:r.state},410);\n return json({error:\"PRECOMMIT_NOT_CONSUMABLE\",state:r.state,authority_epoch:r.authority_epoch,attempt_generation:r.attempt_generation},409);\n }\n const q=await sqlite.execute({sql:\"SELECT challenge,logical_agent_id,workstream,capabilities_json,task_json,task_sha256,authority_epoch,credential_generation,attempt_generation,issued_at_ms,expires_at_ms FROM execution_precommits_v3 WHERE incarnation_id=? AND execution_id=? AND state='RESERVED'\",args:[body.incarnation_id,executionId]});\n if(q.rows.length!==1)return json({error:\"RESERVATION_READBACK_FAILED\"},500);\n const r:any=q.rows[0];\n const caps=JSON.parse(String(r.capabilities_json)); const task=JSON.parse(String(r.task_json));\n if(String(r.workstream)!==\"global\"||JSON.stringify(caps)!==JSON.stringify(FIXED_CAPABILITIES)||Number(r.authority_epoch)!==AUTHORITY_EPOCH||Number(r.attempt_generation)!==1)return json({error:\"PROJECT_PRECOMMIT_TUPLE_INVALID\"},500);\n if(await sha256Utf8(String(r.task_json))!==String(r.task_sha256))return json({error:\"TASK_HASH_MISMATCH\"},500);\n if(task?.op!==\"sha256_utf8\"||typeof task?.input!==\"string\")return json({error:\"TASK_NOT_EXECUTABLE_FIXED_PROFILE\"},500);\n const result={op:\"sha256_utf8\",sha256:await sha256Utf8(task.input)}; const resultJson=JSON.stringify(result); const completed=Date.now();\n if(completed>Number(r.expires_at_ms)){\n await sqlite.execute({sql:\"UPDATE execution_precommits_v3 SET state='UNKNOWN_OUTCOME',completed_at_ms=?,result_json=? WHERE incarnation_id=? AND execution_id=? AND state='RESERVED'\",args:[completed,resultJson,body.incarnation_id,executionId]});\n return json({error:\"COMPLETED_AFTER_EXPIRY_UNKNOWN_OUTCOME\"},409);\n }\n const receipt={schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",worker_id:WORKER_ID,execution_id:executionId,incarnation_id:body.incarnation_id,challenge:String(r.challenge),logical_agent_id:String(r.logical_agent_id),workstream:String(r.workstream),capabilities:[...FIXED_CAPABILITIES],capability_source:\"PROJECT_PRECOMMITTED_EXECUTABLE_FIXED_SET\",identity_binding:\"PROJECT_ISSUER_PRECOMMITTED\",challenge_binding:\"PROJECT_ISSUER_PRECOMMITTED\",task_binding:\"PROJECT_ISSUER_PRECOMMITTED_HASH_MATCH\",bearer_binding:\"ONE_TIME_DOMAIN_SEPARATED_DIGEST_POSSESSION\",authority_epoch:Number(r.authority_epoch),credential_generation:Number(r.credential_generation),attempt_generation:Number(r.attempt_generation),task_sha256:String(r.task_sha256),result_sha256:await sha256Utf8(resultJson),issued_at_ms:Number(r.issued_at_ms),reserved_at_ms:now,completed_at_ms:completed,expires_at_ms:Number(r.expires_at_ms),execution_observation:\"PRECOMMITTED_ONE_TIME_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0};\n const done=await sqlite.execute({sql:\"UPDATE execution_precommits_v3 SET state='COMPLETE',completed_at_ms=?,result_json=?,receipt_json=? WHERE incarnation_id=? AND execution_id=? AND state='RESERVED'\",args:[completed,resultJson,JSON.stringify(receipt),body.incarnation_id,executionId]});\n if(done.rowsAffected!==1)return json({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return json({result,receipt},200);\n}",[381],"3ee75cb6-9f13-41c2-a8e8-603da58a234e","atomic_worker_v3_a71.ts","032fbd1c-abbe-11f1-a3d6-1607ee4eb77e",25,["D",1788896977958],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA=\"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V3_CANDIDATE\";\nconst WORKER_ID=\"mosadek/project-brain-exec-issuer-v1/atomic_worker_v3_a71.ts\";\nconst FIXED_CAPABILITIES=[\"deterministic_execution\",\"sha256\"] as const;\nconst RESERVATION_TTL_MS=30000;\n\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");}\nasync function sha256Utf8(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s))));}\nfunction json(body:unknown,status=200){return new Response(JSON.stringify(body),{status,headers:{\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}});}\nasync function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_precommits_v3_a71(\n challenge TEXT PRIMARY KEY, execution_incarnation_id TEXT NOT NULL UNIQUE, logical_agent_id TEXT NOT NULL UNIQUE,\n workstream TEXT NOT NULL, capabilities_json TEXT NOT NULL, task_json TEXT NOT NULL, task_sha256 TEXT NOT NULL,\n state TEXT NOT NULL, issued_at TEXT NOT NULL, expires_at TEXT NOT NULL, reserved_at TEXT, reservation_expires_at TEXT,\n completed_at TEXT, result_json TEXT, receipt_json TEXT, terminal_reason TEXT\n )`);\n}\nfunction validateExecute(body:any):string|null{\n if(!body||typeof body!==\"object\"||Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n if(JSON.stringify(Object.keys(body).sort())!==JSON.stringify([\"challenge\",\"execution_incarnation_id\"])) return \"BODY_KEYS_INVALID\";\n if(typeof body.challenge!==\"string\"||!/^[0-9a-f]{64}$/.test(body.challenge)) return \"CHALLENGE_INVALID\";\n if(typeof body.execution_incarnation_id!==\"string\"||body.execution_incarnation_id.length<10||body.execution_incarnation_id.length>128) return \"EXECUTION_INCARNATION_INVALID\";\n return null;\n}\n\nexport default async function(req:Request){\n await init();\n const url=new URL(req.url);\n if(req.method===\"GET\"&&url.pathname===\"/health\") return json({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",fixed_capabilities:FIXED_CAPABILITIES,production_admission_eligible:false});\n if(req.method===\"GET\"&&url.pathname===\"/attempt\"){\n const challenge=url.searchParams.get(\"challenge\")||\"\";\n const q=await sqlite.execute({sql:\"SELECT state,reserved_at,reservation_expires_at,completed_at,result_json,receipt_json,terminal_reason FROM atomic_precommits_v3_a71 WHERE challenge=?\",args:[challenge]});\n if(!q.rows.length) return json({error:\"NOT_FOUND\"},404);\n const r:any=q.rows[0];\n return json({state:r.state,reserved_at:r.reserved_at,reservation_expires_at:r.reservation_expires_at,completed_at:r.completed_at,\n result:r.result_json?JSON.parse(String(r.result_json)):null,receipt:r.receipt_json?JSON.parse(String(r.receipt_json)):null,terminal_reason:r.terminal_reason});\n }\n if(req.method!==\"POST\"||url.pathname!==\"/execute\") return json({error:\"NOT_FOUND\"},404);\n let body:any; try{body=await req.json();}catch{return json({error:\"INVALID_JSON\"},400);}\n const invalid=validateExecute(body); if(invalid) return json({error:invalid},400);\n\n const q=await sqlite.execute({sql:\"SELECT * FROM atomic_precommits_v3_a71 WHERE challenge=?\",args:[body.challenge]});\n if(!q.rows.length) return json({error:\"PRECOMMIT_NOT_FOUND\"},404);\n const row:any=q.rows[0];\n if(String(row.execution_incarnation_id)!==body.execution_incarnation_id) return json({error:\"EXECUTION_INCARNATION_MISMATCH\"},409);\n const now=new Date();\n if(String(row.state)===\"RESERVED\"){\n const reservationExpiry=Date.parse(String(row.reservation_expires_at||\"\"));\n if(Number.isFinite(reservationExpiry)&&reservationExpiry<=now.getTime()){\n const reconciled=await sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='UNKNOWN_OUTCOME',terminal_reason='RESERVATION_EXPIRED_OUTCOME_UNKNOWN' WHERE challenge=? AND execution_incarnation_id=? AND state='RESERVED' AND reservation_expires_at<=?\",\n args:[body.challenge,body.execution_incarnation_id,now.toISOString()]});\n if(reconciled.rowsAffected===1) return json({error:\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\"},409);\n const changed=await sqlite.execute({sql:\"SELECT state,terminal_reason FROM atomic_precommits_v3_a71 WHERE challenge=? AND execution_incarnation_id=?\",args:[body.challenge,body.execution_incarnation_id]});\n const current:any=changed.rows[0]||{};\n return json({error:\"STATE_CHANGED_DURING_RECONCILIATION\",state:String(current.state||\"UNKNOWN\"),terminal_reason:current.terminal_reason??null},409);\n }\n return json({error:\"ATTEMPT_ALREADY_RESERVED\"},409);\n }\n if(String(row.state)!==\"ISSUED\") return json({error:\"PRECOMMIT_STATE_NOT_ISSUED\",state:String(row.state)},409);\n if(Date.parse(String(row.expires_at))<=now.getTime()){\n await sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='EXPIRED',terminal_reason='PRECOMMIT_EXPIRED' WHERE challenge=? AND execution_incarnation_id=? AND state='ISSUED'\",\n args:[body.challenge,body.execution_incarnation_id]});\n return json({error:\"PRECOMMIT_EXPIRED\"},410);\n }\n const expectedCaps=JSON.stringify([...FIXED_CAPABILITIES]);\n if(String(row.capabilities_json)!==expectedCaps) return json({error:\"PRECOMMIT_CAPABILITY_BINDING_INVALID\"},409);\n const taskJson=String(row.task_json);\n if(await sha256Utf8(taskJson)!==String(row.task_sha256)) return json({error:\"PRECOMMIT_TASK_HASH_MISMATCH\"},409);\n\n const reservedAt=now.toISOString();\n const reservationExpiresAt=new Date(now.getTime()+RESERVATION_TTL_MS).toISOString();\n const reserved=await sqlite.execute({sql:`UPDATE atomic_precommits_v3_a71 SET state='RESERVED',reserved_at=?,reservation_expires_at=?\n WHERE challenge=? AND execution_incarnation_id=? AND state='ISSUED' AND expires_at>?`,\n args:[reservedAt,reservationExpiresAt,body.challenge,body.execution_incarnation_id,reservedAt]});\n if(reserved.rowsAffected!==1) return json({error:\"ATOMIC_RESERVATION_CAS_FAILED\"},409);\n\n let task:any; try{task=JSON.parse(taskJson);}catch{return json({error:\"STORED_TASK_JSON_INVALID\"},500);}\n if(!task||task.op!==\"sha256_utf8\"||typeof task.input!==\"string\") return json({error:\"STORED_TASK_INVALID\"},500);\n const result={op:\"sha256_utf8\",sha256:await sha256Utf8(task.input)};\n const resultJson=JSON.stringify(result);\n const completedAt=new Date().toISOString();\n const receipt={\n schema:SCHEMA,classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",\n worker_id:WORKER_ID,execution_incarnation_id:String(row.execution_incarnation_id),challenge:body.challenge,\n logical_agent_id:String(row.logical_agent_id),workstream:String(row.workstream),capabilities:[...FIXED_CAPABILITIES],\n capability_source:\"EXECUTABLE_FIXED_SET_AND_ISSUER_PRECOMMIT\",identity_source:\"PROJECT_ISSUER_GENERATED\",\n task_sha256:String(row.task_sha256),result_sha256:await sha256Utf8(resultJson),\n issued_at:String(row.issued_at),reserved_at:reservedAt,reservation_expires_at:reservationExpiresAt,completed_at:completedAt,\n execution_observation:\"ATOMIC_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",unknown_outcome_policy:\"EXPIRED_RESERVATION_TERMINATES_UNKNOWN_NO_RETRY_SAME_CHALLENGE\",\n production_admission_eligible:false,human_authority_approval:false,additional_out_of_pocket_spend_usd:0\n };\n const done=await sqlite.execute({sql:`UPDATE atomic_precommits_v3_a71 SET state='COMPLETE',completed_at=?,result_json=?,receipt_json=?\n WHERE challenge=? AND execution_incarnation_id=? AND state='RESERVED' AND reserved_at=?`,\n args:[completedAt,resultJson,JSON.stringify(receipt),body.challenge,body.execution_incarnation_id,reservedAt]});\n if(done.rowsAffected!==1) return json({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return json({result,receipt},200);\n}\n",[388],"0e2e039c-cc81-4cf2-9ded-d3184d17bf85","atomic_worker_v2_candidate.ts","097e09c2-abbd-11f1-b428-1607ee4eb77e",12,["D",1788896382138],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA = \"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V2_CANDIDATE\";\nconst WORKER_ID = \"mosadek/project-brain-exec-issuer-v1/atomic_worker_v2_candidate.ts\";\nconst FIXED_CAPABILITIES = [\"deterministic_execution\",\"sha256\"] as const;\nconst FORBIDDEN_CAPABILITY = \"human_authority_approval\";\n\nfunction hex(b: ArrayBuffer | Uint8Array) {\n const a = b instanceof Uint8Array ? b : new Uint8Array(b);\n return [...a].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function sha256Utf8(s: string) {\n return hex(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s)));\n}\nfunction response(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}\n });\n}\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_attempts_v2(\n challenge TEXT PRIMARY KEY,\n execution_id TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL,\n workstream TEXT NOT NULL,\n task_json TEXT NOT NULL,\n state TEXT NOT NULL,\n reserved_at TEXT NOT NULL,\n completed_at TEXT,\n result_json TEXT,\n receipt_json TEXT\n )`);\n}\nfunction canonicalCapabilities(xs: unknown[]): string[] {\n return [...new Set(xs as string[])].sort();\n}\nexport function validateV2(body: any): string | null {\n if (!body || typeof body !== \"object\" || Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n const keys = Object.keys(body).sort();\n const allowed = [\"capabilities\",\"challenge\",\"logical_agent_id\",\"task\",\"workstream\"].sort();\n if (JSON.stringify(keys) !== JSON.stringify(allowed)) return \"BODY_KEYS_INVALID\";\n if (typeof body.challenge !== \"string\" || !/^[0-9a-f]{64}$/.test(body.challenge)) return \"CHALLENGE_INVALID\";\n if (typeof body.logical_agent_id !== \"string\" || body.logical_agent_id.length < 3 || body.logical_agent_id.length > 128) return \"AGENT_ID_INVALID\";\n if (typeof body.workstream !== \"string\" || body.workstream.length < 1 || body.workstream.length > 96) return \"WORKSTREAM_INVALID\";\n if (!Array.isArray(body.capabilities) || body.capabilities.length > 64 ||\n !body.capabilities.every((x: unknown) => typeof x === \"string\" && x.length >= 1 && x.length <= 96)) return \"CAPABILITIES_INVALID\";\n if (body.capabilities.includes(FORBIDDEN_CAPABILITY)) return \"HUMAN_AUTHORITY_CAPABILITY_FORBIDDEN\";\n if (body.capabilities.length !== new Set(body.capabilities).size) return \"DUPLICATE_CAPABILITY\";\n if (JSON.stringify(canonicalCapabilities(body.capabilities)) !== JSON.stringify([...FIXED_CAPABILITIES].sort())) return \"CAPABILITY_SET_NOT_EXECUTABLE_FIXED_SET\";\n if (!body.task || typeof body.task !== \"object\" || Array.isArray(body.task)) return \"TASK_INVALID\";\n if (JSON.stringify(Object.keys(body.task).sort()) !== JSON.stringify([\"input\",\"op\"])) return \"TASK_KEYS_INVALID\";\n if (body.task.op !== \"sha256_utf8\") return \"OP_NOT_ALLOWED\";\n if (typeof body.task.input !== \"string\" || body.task.input.length > 65536) return \"TASK_INPUT_INVALID\";\n return null;\n}\n\nexport default async function(req: Request) {\n await init();\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return response({\n schema:SCHEMA,worker_id:WORKER_ID,state:\"CANDIDATE_NONAUTHORITY\",\n supported_ops:[\"sha256_utf8\"],fixed_capabilities:FIXED_CAPABILITIES,\n production_admission_eligible:false\n });\n }\n if (req.method === \"GET\" && url.pathname === \"/attempt\") {\n const challenge = url.searchParams.get(\"challenge\") || \"\";\n const q = await sqlite.execute({sql:\"SELECT state,reserved_at,completed_at,result_json,receipt_json FROM atomic_attempts_v2 WHERE challenge=?\",args:[challenge]});\n if (!q.rows.length) return response({error:\"NOT_FOUND\"},404);\n const row:any=q.rows[0];\n return response({\n state:row.state,reserved_at:row.reserved_at,completed_at:row.completed_at,\n result:row.result_json?JSON.parse(String(row.result_json)):null,\n receipt:row.receipt_json?JSON.parse(String(row.receipt_json)):null\n });\n }\n if (req.method !== \"POST\" || url.pathname !== \"/execute\") return response({error:\"NOT_FOUND\"},404);\n\n let body:any;\n try { body = await req.json(); } catch { return response({error:\"INVALID_JSON\"},400); }\n const invalid=validateV2(body);\n if (invalid) return response({error:invalid},400);\n\n const executionId=crypto.randomUUID();\n const reservedAt=new Date().toISOString();\n const taskJson=JSON.stringify(body.task);\n const reservation=await sqlite.execute({\n sql:`INSERT INTO atomic_attempts_v2(challenge,execution_id,logical_agent_id,workstream,task_json,state,reserved_at)\n VALUES(?,?,?,?,?,'RESERVED',?) ON CONFLICT(challenge) DO NOTHING`,\n args:[body.challenge,executionId,body.logical_agent_id,body.workstream,taskJson,reservedAt]\n });\n if (reservation.rowsAffected !== 1) return response({error:\"CHALLENGE_REPLAY_OR_CONCURRENT_ATTEMPT\"},409);\n\n const result={op:\"sha256_utf8\",sha256:await sha256Utf8(body.task.input)};\n const resultJson=JSON.stringify(result);\n const completedAt=new Date().toISOString();\n const receipt={\n schema:SCHEMA,\n classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",\n worker_id:WORKER_ID,\n execution_id:executionId,\n challenge:body.challenge,\n logical_agent_id:body.logical_agent_id,\n workstream:body.workstream,\n capabilities:[...FIXED_CAPABILITIES],\n capability_source:\"EXECUTABLE_FIXED_SET_NOT_CALLER_AUTHORITY\",\n identity_binding:\"CALLER_REQUESTED_NOT_PROJECT_ATTESTED\",\n challenge_binding:\"CALLER_SUPPLIED_NOT_PROJECT_PRECOMMITTED\",\n production_admission_eligible:false,\n task_sha256:await sha256Utf8(taskJson),\n result_sha256:await sha256Utf8(resultJson),\n reserved_at:reservedAt,\n completed_at:completedAt,\n execution_observation:\"ATOMIC_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",\n human_authority_approval:false,\n additional_out_of_pocket_spend_usd:0\n };\n const done=await sqlite.execute({\n sql:`UPDATE atomic_attempts_v2\n SET state='COMPLETE',completed_at=?,result_json=?,receipt_json=?\n WHERE challenge=? AND execution_id=? AND state='RESERVED'`,\n args:[completedAt,resultJson,JSON.stringify(receipt),body.challenge,executionId]\n });\n if (done.rowsAffected !== 1) return response({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return response({result,receipt},200);\n}",[395],"2be2880c-b46c-4a90-bdd4-bc11023cb35d","atomic_worker.ts","464efc54-abb7-11f1-87fe-1607ee4eb77e",["D",1788893907200],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SCHEMA = \"PROJECT_BRAIN_ATOMIC_EXTERNAL_WORKER_V1\";\nconst WORKER_ID = \"mosadek/project-brain-exec-issuer-v1/atomic_worker.ts\";\n\nfunction hex(b: ArrayBuffer | Uint8Array) {\n const a = b instanceof Uint8Array ? b : new Uint8Array(b);\n return [...a].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function sha256Utf8(s: string) {\n return hex(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s)));\n}\nfunction response(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\"content-type\":\"application/json; charset=utf-8\",\"cache-control\":\"no-store\"}\n });\n}\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS atomic_attempts(\n challenge TEXT PRIMARY KEY,\n execution_id TEXT NOT NULL UNIQUE,\n logical_agent_id TEXT NOT NULL,\n workstream TEXT NOT NULL,\n task_json TEXT NOT NULL,\n state TEXT NOT NULL,\n reserved_at TEXT NOT NULL,\n completed_at TEXT,\n result_json TEXT,\n receipt_json TEXT\n )`);\n}\nfunction validate(body: any): string | null {\n if (!body || typeof body !== \"object\" || Array.isArray(body)) return \"BODY_NOT_OBJECT\";\n const keys = Object.keys(body).sort();\n const allowed = [\"capabilities\",\"challenge\",\"logical_agent_id\",\"task\",\"workstream\"].sort();\n if (JSON.stringify(keys) !== JSON.stringify(allowed)) return \"BODY_KEYS_INVALID\";\n if (typeof body.challenge !== \"string\" || !/^[0-9a-f]{64}$/.test(body.challenge)) return \"CHALLENGE_INVALID\";\n if (typeof body.logical_agent_id !== \"string\" || body.logical_agent_id.length < 3 || body.logical_agent_id.length > 128) return \"AGENT_ID_INVALID\";\n if (typeof body.workstream !== \"string\" || body.workstream.length < 1 || body.workstream.length > 96) return \"WORKSTREAM_INVALID\";\n if (!Array.isArray(body.capabilities) || body.capabilities.length > 64 ||\n !body.capabilities.every((x: unknown) => typeof x === \"string\" && x.length >= 1 && x.length <= 96)) return \"CAPABILITIES_INVALID\";\n if (!body.task || typeof body.task !== \"object\" || Array.isArray(body.task)) return \"TASK_INVALID\";\n if (JSON.stringify(Object.keys(body.task).sort()) !== JSON.stringify([\"input\",\"op\"])) return \"TASK_KEYS_INVALID\";\n if (body.task.op !== \"sha256_utf8\") return \"OP_NOT_ALLOWED\";\n if (typeof body.task.input !== \"string\" || body.task.input.length > 65536) return \"TASK_INPUT_INVALID\";\n return null;\n}\n\nexport default async function(req: Request) {\n await init();\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return response({schema:SCHEMA,worker_id:WORKER_ID,state:\"CANARY_NONAUTHORITY\",supported_ops:[\"sha256_utf8\"]});\n }\n if (req.method === \"GET\" && url.pathname === \"/attempt\") {\n const challenge = url.searchParams.get(\"challenge\") || \"\";\n const q = await sqlite.execute({sql:\"SELECT state,reserved_at,completed_at,result_json,receipt_json FROM atomic_attempts WHERE challenge=?\",args:[challenge]});\n if (!q.rows.length) return response({error:\"NOT_FOUND\"},404);\n const row:any=q.rows[0];\n return response({\n state:row.state,reserved_at:row.reserved_at,completed_at:row.completed_at,\n result:row.result_json?JSON.parse(String(row.result_json)):null,\n receipt:row.receipt_json?JSON.parse(String(row.receipt_json)):null\n });\n }\n if (req.method !== \"POST\" || url.pathname !== \"/execute\") return response({error:\"NOT_FOUND\"},404);\n\n let body:any;\n try { body = await req.json(); } catch { return response({error:\"INVALID_JSON\"},400); }\n const invalid=validate(body);\n if (invalid) return response({error:invalid},400);\n\n const executionId=crypto.randomUUID();\n const reservedAt=new Date().toISOString();\n const taskJson=JSON.stringify(body.task);\n const reservation=await sqlite.execute({\n sql:`INSERT INTO atomic_attempts(challenge,execution_id,logical_agent_id,workstream,task_json,state,reserved_at)\n VALUES(?,?,?,?,?,'RESERVED',?) ON CONFLICT(challenge) DO NOTHING`,\n args:[body.challenge,executionId,body.logical_agent_id,body.workstream,taskJson,reservedAt]\n });\n if (reservation.rowsAffected !== 1) return response({error:\"CHALLENGE_REPLAY_OR_CONCURRENT_ATTEMPT\"},409);\n\n const inputSha256=await sha256Utf8(body.task.input);\n const result={op:\"sha256_utf8\",sha256:inputSha256};\n const resultJson=JSON.stringify(result);\n const resultSha256=await sha256Utf8(resultJson);\n const completedAt=new Date().toISOString();\n const receipt={\n schema:SCHEMA,\n classification:\"CANDIDATE_NONAUTHORITY_ATOMIC_EXECUTION_RECEIPT\",\n worker_id:WORKER_ID,\n execution_id:executionId,\n challenge:body.challenge,\n logical_agent_id:body.logical_agent_id,\n workstream:body.workstream,\n capabilities:[...new Set(body.capabilities)].sort(),\n task_sha256:await sha256Utf8(taskJson),\n result_sha256:resultSha256,\n reserved_at:reservedAt,\n completed_at:completedAt,\n execution_observation:\"ATOMIC_HANDLER_EXECUTED_AND_RESULT_PERSISTED\",\n human_authority_approval:false,\n additional_out_of_pocket_spend_usd:0\n };\n const done=await sqlite.execute({\n sql:`UPDATE atomic_attempts\n SET state='COMPLETE',completed_at=?,result_json=?,receipt_json=?\n WHERE challenge=? AND execution_id=? AND state='RESERVED'`,\n args:[completedAt,resultJson,JSON.stringify(receipt),body.challenge,executionId]\n });\n if (done.rowsAffected !== 1) return response({error:\"ATOMIC_COMPLETION_CAS_FAILED\"},500);\n return response({result,receipt},200);\n}",[402],"d300676c-f89e-4a3e-a51d-c784b3812427","atomic_v3_a71_patch_regression_fixture.ts","751785b8-abbe-11f1-baa1-1607ee4eb77e",26,["D",1788896992133],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst r=await sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='RESERVED',reserved_at=?,reservation_expires_at=? WHERE challenge=? AND state='ISSUED'\",args:[\"2026-09-08T19:49:49.770Z\",\"2026-09-08T19:49:49.770Z\",\"bd99e30521cfefb371887ed7138b35e70b9abd2b79805931771d6c7ce457b6c8\"]});\nconsole.log(JSON.stringify({rows:r.rowsAffected,challenge:\"bd99e30521cfefb371887ed7138b35e70b9abd2b79805931771d6c7ce457b6c8\",incarnation:\"00be719d-9541-469f-9627-27ed3601bb43\"}));\n",[408],"efd3fd7f-2d08-4c18-8dae-2ba4791d4cc6","atomic_v3_a71_boundary_fixture.ts","4d572c72-abbe-11f1-829e-1607ee4eb77e",23,["D",1788896925477],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst past=new Date(Date.now()-1000).toISOString();\nconst exp=\"6d4e6034f2afa4827f8808feb3175b9650f497bebab8e96fe9b09fc08335a008\";\nconst unk=\"d2c1cb4021de683393d47a4fda80af31d023080219cf7d3e4bd5c4d9faefe6ac\";\nconst a=await sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET expires_at=? WHERE challenge=? AND state='ISSUED'\",args:[past,exp]});\nconst b=await sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='RESERVED',reserved_at=?,reservation_expires_at=? WHERE challenge=? AND state='ISSUED'\",args:[past,past,unk]});\nconsole.log(JSON.stringify({schema:\"ATOMIC_V3_A71_BOUNDARY_FIXTURE_V1\",past,expired_rows:a.rowsAffected,reserved_rows:b.rowsAffected,canonical_brain_mutation:false,human_authority_approval:false,direct_sprites_calls:0},null,2));\n",[415],"9d5d2044-e587-40a8-b2c2-e244a5e5cb40","atomic_admission_v3_a71_live_canary.ts","1c387b6e-abbe-11f1-a728-1607ee4eb77e",19,["D",1788896843049],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ISSUER=\"https://mosadek--02308a54abbe11f1bb881607ee4eb77e.web.val.run\";\nconst WORKER=\"https://mosadek--032fbd1cabbe11f1a3d61607ee4eb77e.web.val.run\";\n\nasync function req(url:string,method=\"GET\",body?:unknown){\n const r=await fetch(url,{method,headers:body?{\"content-type\":\"application/json\"}:undefined,body:body?JSON.stringify(body):undefined});\n let j:any=null; try{j=await r.json();}catch{}\n return {status:r.status,body:j};\n}\nfunction must(cond:boolean,msg:string){ if(!cond) throw new Error(msg); }\nfunction hex(b:Uint8Array){return [...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");}\nasync function sha(s:string){return hex(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s))));}\n\nconst report:any={schema:\"ATOMIC_EXTERNAL_ADMISSION_V3_A71_LIVE_FALSIFICATION_V1\",started_at:new Date().toISOString(),checks:[]};\nfunction check(name:string,cond:boolean,detail:any){report.checks.push({name,pass:cond,detail});must(cond,name);}\n\nconst injection=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"x\"},ttl_seconds:60,capabilities:[\"human_authority_approval\"]});\ncheck(\"issuer_rejects_caller_capability_injection\",injection.status===400,injection);\n\nconst issue=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"ATOMIC_V3_A71_CANARY\"},ttl_seconds:60});\ncheck(\"issue_created\",issue.status===201,issue);\ncheck(\"issuer_generated_identity\",typeof issue.body.logical_agent_id===\"string\"&&issue.body.logical_agent_id.startsWith(\"ext-v3-\"),issue.body);\ncheck(\"issuer_fixed_workstream\",issue.body.workstream===\"global\",issue.body);\ncheck(\"issuer_fixed_capabilities\",JSON.stringify(issue.body.capabilities)===JSON.stringify([\"deterministic_execution\",\"sha256\"]),issue.body);\ncheck(\"issuer_no_human_authority\",issue.body.human_authority_approval===false,issue.body);\n\nconst extra=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:issue.body.execution_incarnation_id,capabilities:[\"human_authority_approval\"]});\ncheck(\"worker_rejects_extra_fields\",extra.status===400,extra);\n\nconst wrong=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:crypto.randomUUID()});\ncheck(\"worker_rejects_wrong_incarnation\",wrong.status===409&&wrong.body.error===\"EXECUTION_INCARNATION_MISMATCH\",wrong);\n\nconst expected=await sha(\"ATOMIC_V3_A71_CANARY\");\nconst good=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:issue.body.execution_incarnation_id});\ncheck(\"valid_execute\",good.status===200&&good.body.result?.sha256===expected,good);\ncheck(\"receipt_bound_identity\",good.body.receipt?.logical_agent_id===issue.body.logical_agent_id&&good.body.receipt?.execution_incarnation_id===issue.body.execution_incarnation_id,good.body.receipt);\ncheck(\"receipt_fixed_caps\",JSON.stringify(good.body.receipt?.capabilities)===JSON.stringify([\"deterministic_execution\",\"sha256\"]),good.body.receipt);\ncheck(\"receipt_no_human_authority\",good.body.receipt?.human_authority_approval===false,good.body.receipt);\n\nconst replay=await req(WORKER+\"/execute\",\"POST\",{challenge:issue.body.challenge,execution_incarnation_id:issue.body.execution_incarnation_id});\ncheck(\"replay_rejected\",replay.status===409,replay);\nconst attempt=await req(WORKER+\"/attempt?challenge=\"+issue.body.challenge);\ncheck(\"readback_complete\",attempt.status===200&&attempt.body.state===\"COMPLETE\",attempt);\n\nconst exp=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"EXPIRE\"},ttl_seconds:60});\ncheck(\"expiry_issue\",exp.status===201,exp);\nawait sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET expires_at=? WHERE challenge=?\",args:[new Date(Date.now()-1000).toISOString(),exp.body.challenge]});\nconst expRun=await req(WORKER+\"/execute\",\"POST\",{challenge:exp.body.challenge,execution_incarnation_id:exp.body.execution_incarnation_id});\ncheck(\"expired_precommit_fails_closed\",expRun.status===410&&expRun.body.error===\"PRECOMMIT_EXPIRED\",expRun);\n\nconst unk=await req(ISSUER+\"/issue\",\"POST\",{task:{op:\"sha256_utf8\",input:\"UNKNOWN\"},ttl_seconds:60});\ncheck(\"unknown_issue\",unk.status===201,unk);\nconst past=new Date(Date.now()-1000).toISOString();\nawait sqlite.execute({sql:\"UPDATE atomic_precommits_v3_a71 SET state='RESERVED',reserved_at=?,reservation_expires_at=? WHERE challenge=?\",args:[past,past,unk.body.challenge]});\nconst unkRun=await req(WORKER+\"/execute\",\"POST\",{challenge:unk.body.challenge,execution_incarnation_id:unk.body.execution_incarnation_id});\ncheck(\"expired_reservation_terminalizes_unknown\",unkRun.status===409&&unkRun.body.error===\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\",unkRun);\nconst unkRead=await req(WORKER+\"/attempt?challenge=\"+unk.body.challenge);\ncheck(\"unknown_readback_terminal\",unkRead.status===200&&unkRead.body.state===\"UNKNOWN_OUTCOME\"&&unkRead.body.terminal_reason===\"RESERVATION_EXPIRED_OUTCOME_UNKNOWN\",unkRead);\n\nreport.completed_at=new Date().toISOString();\nreport.pass=report.checks.every((x:any)=>x.pass);\nreport.brain_queue_traffic_submitted=false;\nreport.canonical_brain_mutation=false;\nreport.human_authority_approval=false;\nreport.direct_sprites_calls=0;\nreport.additional_out_of_pocket_spend_usd=0;\nconsole.log(JSON.stringify(report,null,2));\n",[422],"pulls","branches","forks","envVars",{"_435":207,"_437":63},"connections",{"_435":63,"_436":63},"count","unfilledCount","emptyCount",{"_43":421,"_32":422,"_30":423,"_171":-5,"_41":42,"_40":424,"_173":59,"_38":584,"_13":63,"_33":34,"_35":426,"_24":25,"_178":-5,"_476":585,"_27":586},{"_43":414,"_32":415,"_30":416,"_171":-5,"_41":42,"_40":417,"_173":59,"_38":581,"_13":63,"_33":34,"_35":419,"_24":25,"_178":-5,"_476":582,"_27":583},{"_43":407,"_32":408,"_30":409,"_171":-5,"_41":42,"_40":410,"_173":59,"_38":578,"_13":63,"_33":34,"_35":412,"_24":25,"_178":-5,"_476":579,"_27":580},{"_43":401,"_32":402,"_30":403,"_171":-5,"_41":42,"_40":175,"_173":59,"_38":575,"_13":63,"_33":176,"_35":405,"_24":25,"_178":-5,"_476":576,"_27":577},{"_43":394,"_32":395,"_30":396,"_171":-5,"_41":42,"_40":397,"_173":59,"_38":572,"_13":63,"_33":176,"_35":399,"_24":25,"_178":-5,"_476":573,"_27":574},{"_43":387,"_32":388,"_30":389,"_171":-5,"_41":42,"_40":390,"_173":59,"_38":569,"_13":207,"_33":176,"_35":392,"_24":25,"_178":-5,"_476":570,"_27":571},{"_43":380,"_32":381,"_30":382,"_171":-5,"_41":42,"_40":383,"_173":59,"_38":566,"_13":63,"_33":176,"_35":385,"_24":25,"_178":-5,"_476":567,"_27":568},{"_43":374,"_32":375,"_30":376,"_171":-5,"_41":42,"_40":185,"_173":59,"_38":563,"_13":63,"_33":34,"_35":378,"_24":25,"_178":-5,"_476":564,"_27":565},{"_43":367,"_32":368,"_30":369,"_171":-5,"_41":42,"_40":370,"_173":59,"_38":560,"_13":63,"_33":176,"_35":372,"_24":25,"_178":-5,"_476":561,"_27":562},{"_43":360,"_32":361,"_30":362,"_171":-5,"_41":42,"_40":363,"_173":59,"_38":557,"_13":63,"_33":34,"_35":365,"_24":25,"_178":-5,"_476":558,"_27":559},{"_43":353,"_32":354,"_30":355,"_171":-5,"_41":42,"_40":356,"_173":59,"_38":554,"_13":63,"_33":176,"_35":358,"_24":25,"_178":-5,"_476":555,"_27":556},{"_43":346,"_32":347,"_30":348,"_171":-5,"_41":42,"_40":349,"_173":59,"_38":551,"_13":63,"_33":34,"_35":351,"_24":25,"_178":-5,"_476":552,"_27":553},{"_43":339,"_32":340,"_30":341,"_171":-5,"_41":42,"_40":342,"_173":59,"_38":548,"_13":63,"_33":34,"_35":344,"_24":25,"_178":-5,"_476":549,"_27":550},{"_43":332,"_32":333,"_30":334,"_171":-5,"_41":42,"_40":335,"_173":59,"_38":545,"_13":63,"_33":34,"_35":337,"_24":25,"_178":-5,"_476":546,"_27":547},{"_43":325,"_32":326,"_30":327,"_171":-5,"_41":42,"_40":328,"_173":59,"_38":542,"_13":63,"_33":34,"_35":330,"_24":25,"_178":-5,"_476":543,"_27":544},{"_43":318,"_32":319,"_30":320,"_171":-5,"_41":42,"_40":321,"_173":59,"_38":539,"_13":63,"_33":34,"_35":323,"_24":25,"_178":-5,"_476":540,"_27":541},{"_43":311,"_32":312,"_30":313,"_171":-5,"_41":42,"_40":314,"_173":59,"_38":536,"_13":63,"_33":34,"_35":316,"_24":25,"_178":-5,"_476":537,"_27":538},{"_43":304,"_32":305,"_30":306,"_171":-5,"_41":42,"_40":307,"_173":59,"_38":533,"_13":63,"_33":34,"_35":309,"_24":25,"_178":-5,"_476":534,"_27":535},{"_43":297,"_32":298,"_30":299,"_171":-5,"_41":42,"_40":300,"_173":59,"_38":530,"_13":207,"_33":34,"_35":302,"_24":25,"_178":-5,"_476":531,"_27":532},{"_43":290,"_32":291,"_30":292,"_171":-5,"_41":42,"_40":293,"_173":59,"_38":527,"_13":212,"_33":34,"_35":295,"_24":25,"_178":-5,"_476":528,"_27":529},{"_43":283,"_32":284,"_30":285,"_171":-5,"_41":42,"_40":286,"_173":59,"_38":524,"_13":63,"_33":34,"_35":288,"_24":25,"_178":-5,"_476":525,"_27":526},{"_43":277,"_32":278,"_30":57,"_171":-5,"_41":42,"_40":279,"_173":59,"_38":521,"_13":185,"_33":176,"_35":281,"_24":25,"_178":-5,"_476":522,"_27":523},{"_43":270,"_32":271,"_30":272,"_171":-5,"_41":42,"_40":273,"_173":59,"_38":518,"_13":63,"_33":176,"_35":275,"_24":25,"_178":-5,"_476":519,"_27":520},{"_43":263,"_32":264,"_30":265,"_171":-5,"_41":42,"_40":266,"_173":59,"_38":515,"_13":63,"_33":34,"_35":268,"_24":25,"_178":-5,"_476":516,"_27":517},{"_43":256,"_32":257,"_30":258,"_171":-5,"_41":42,"_40":259,"_173":59,"_38":512,"_13":63,"_33":34,"_35":261,"_24":25,"_178":-5,"_476":513,"_27":514},{"_43":249,"_32":250,"_30":251,"_171":-5,"_41":42,"_40":252,"_173":59,"_38":509,"_13":63,"_33":34,"_35":254,"_24":25,"_178":-5,"_476":510,"_27":511},{"_43":242,"_32":243,"_30":244,"_171":-5,"_41":42,"_40":245,"_173":59,"_38":506,"_13":63,"_33":34,"_35":247,"_24":25,"_178":-5,"_476":507,"_27":508},{"_43":235,"_32":236,"_30":237,"_171":-5,"_41":42,"_40":238,"_173":59,"_38":503,"_13":63,"_33":34,"_35":240,"_24":25,"_178":-5,"_476":504,"_27":505},{"_43":228,"_32":229,"_30":230,"_171":-5,"_41":42,"_40":231,"_173":59,"_38":500,"_13":63,"_33":34,"_35":233,"_24":25,"_178":-5,"_476":501,"_27":502},{"_43":221,"_32":222,"_30":223,"_171":-5,"_41":42,"_40":224,"_173":59,"_38":497,"_13":207,"_33":34,"_35":226,"_24":25,"_178":-5,"_476":498,"_27":499},{"_43":214,"_32":215,"_30":216,"_171":-5,"_41":42,"_40":217,"_173":59,"_38":494,"_13":212,"_33":34,"_35":219,"_24":25,"_178":-5,"_476":495,"_27":496},{"_43":210,"_32":28,"_30":31,"_171":-5,"_41":42,"_40":14,"_173":25,"_38":491,"_13":212,"_33":34,"_35":37,"_24":25,"_178":-5,"_476":492,"_27":493},{"_43":202,"_32":203,"_30":204,"_171":-5,"_41":42,"_40":205,"_173":59,"_38":488,"_13":207,"_33":34,"_35":208,"_24":25,"_178":-5,"_476":489,"_27":490},{"_43":195,"_32":196,"_30":197,"_171":-5,"_41":42,"_40":198,"_173":59,"_38":485,"_13":185,"_33":176,"_35":200,"_24":25,"_178":-5,"_476":486,"_27":487},{"_43":188,"_32":189,"_30":190,"_171":-5,"_41":42,"_40":191,"_173":59,"_38":482,"_13":63,"_33":176,"_35":193,"_24":25,"_178":-5,"_476":483,"_27":484},{"_43":180,"_32":181,"_30":182,"_171":-5,"_41":42,"_40":183,"_173":59,"_38":479,"_13":185,"_33":176,"_35":186,"_24":25,"_178":-5,"_476":480,"_27":481},{"_43":168,"_32":169,"_30":170,"_171":-5,"_41":42,"_40":172,"_173":59,"_38":475,"_13":175,"_33":176,"_35":177,"_24":25,"_178":-5,"_476":477,"_27":478},["D",1788898625856],"children",[],[169],["D",1788898570183],[],[181],["D",1788897749200],[],[189],["D",1788897880857],[],[196],["D",1788898027327],[],[203],["D",1788898680480],[],[28],["D",1788897877010],[],[215],["D",1788897862941],[],[222],["D",1788897322633],[],[229],["D",1788897137545],[],[236],["D",1788898570099],[],[243],["D",1788898571945],[],[250],["D",1788897558745],[],[257],["D",1788896930148],[],[264],["D",1788896818243],[],[271],["D",1788893872452],[],[278],["D",1788897957011],[],[284],["D",1788898573641],[],[291],["D",1788897873444],[],[298],["D",1788897078150],[],[305],["D",1788897953509],[],[312],["D",1788897952340],[],[319],["D",1788897279968],[],[326],["D",1788897959154],[],[333],["D",1788898418736],[],[340],["D",1788896899103],[],[347],["D",1788896857531],[],[354],["D",1788898519394],[],[361],["D",1788896799385],[],[368],["D",1788893693732],[],[375],["D",1788896819917],[],[381],["D",1788896977958],[],[388],["D",1788896382138],[],[395],["D",1788893907200],[],[402],["D",1788896992133],[],[408],["D",1788896925477],[],[415],["D",1788896843049],[],[422],["D",1788893645758],["D",1789502486629],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_128":625,"_626":627,"_628":629,"_630":25,"_631":25,"_632":25,"_633":59,"_634":-5,"_635":-7,"_636":-7,"_637":63,"_638":25,"_639":25,"_640":-5,"_641":25,"_642":25,"_643":25,"_644":-5},"ENV",{"_596":597,"_598":599,"_600":90,"_601":602,"_603":604,"_605":606,"_607":608,"_609":610,"_611":612,"_613":614,"_615":616,"_617":618,"_619":620,"_621":622,"_623":624},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v95