[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_285":286,"_287":288},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":25,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",28,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","lineage_currentness_v2_test.ts","latestPath","fileId","01a0a29f-7f50-7747-8bbb-a794db4ba187","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { __testReset,createTaskMember,addRelation,prepareCurrentnessGuard,consumeCurrentnessGuard,readEventToken,RELATION_TYPES } from \"./lineage_currentness_v2.ts\";\n\ntype R={name:string,pass:boolean,detail?:any};const results:R[]=[];\nasync function check(name:string,fn:()=>Promise,detail?:()=>Promise){try{const pass=await fn();results.push({name,pass,detail:detail?await detail():undefined})}catch(e){results.push({name,pass:false,detail:String((e as any)?.message??e)})}}\nasync function setup(){await __testReset();const a=await createTaskMember({task_id:\"A\",dedupe_key:\"d:A\",payload:{x:1}});const b=await createTaskMember({task_id:\"B\",dedupe_key:\"d:B\",payload:{x:2}});return {a,b}}\n\nawait check(\"empty_state_valid\",async()=>{await __testReset();return (await prepareCurrentnessGuard()).ok===true});\nawait check(\"baseline_two_members_valid\",async()=>{await setup();const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.members===2});\nawait check(\"multiple_relations_per_member_preserved\",async()=>{const {a,b}=await setup();await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"});await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"GUARDS\"});const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.edges===2});\nawait check(\"dangling_target_rejected\",async()=>{const {a}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:\"m:\"+\"f\".repeat(64),relation_type:\"DEPENDS_ON\"});return false}catch(e){return String((e as any).message).includes(\"DANGLING_RELATION_TARGET\")}});\nawait check(\"unknown_relation_rejected\",async()=>{const {a,b}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"MADE_UP\" as any});return false}catch(e){return String((e as any).message).includes(\"BAD_RELATION_TYPE\")}});\nawait check(\"retained_hash_previous_head_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET previous_head_sha256='${\"1\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_CHAIN_LINK_MISMATCH\")});\nawait check(\"retained_hash_snapshot_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET snapshot_sha256='${\"2\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_SELF_HASH_MISMATCH\")});\nawait check(\"snapshot_content_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET state='COMPLETE' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")});\nawait check(\"event_body_tamper_rejected\",async()=>{await setup();const r:any=(await sqlite.execute(`SELECT body_json FROM succ_events WHERE local_seq=1`)).rows[0];const b=JSON.parse(String(r.body_json));b.injected=\"same_semantics_extra_byte\";await sqlite.execute({sql:`UPDATE succ_events SET body_json=? WHERE local_seq=1`,args:[JSON.stringify(b)]});const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_HASH_MISMATCH\")});\nawait check(\"event_prev_hash_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_events SET prev_hash='${\"3\".repeat(64)}' WHERE local_seq=2`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_CHAIN_LINK_MISMATCH\")});\nawait check(\"creation_identity_source_splice_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET created_event_hash='${\"4\".repeat(64)}' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false});\nawait check(\"mutable_dedupe_cannot_silently_change_identity\",async()=>{const {a}=await setup();await sqlite.execute(`UPDATE lineage_members SET creation_dedupe_key='changed' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")||String(v.reason).includes(\"TASK_CREATED_MAPPING_MISMATCH\")});\nawait check(\"event_token_shape_internal\",async()=>{await setup();const t:any=await readEventToken();return typeof t.generation===\"number\"&&Number.isInteger(t.generation)&&/^[0-9a-f]{64}$/.test(t.event_head_hash)&&Object.keys(t).sort().join(\",\")===\"event_head_hash,generation\"});\nawait check(\"relation_enum_closed\",async()=>RELATION_TYPES.join(\",\")===\"DEPENDS_ON,FALSIFIED_BY,SUPERSEDES,GUARDS,DERIVED_FROM\");\nawait check(\"real_db_task_create_rollback_atomic\",async()=>{await __testReset();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`);await sqlite.execute(`CREATE TRIGGER test_abort_member BEFORE INSERT ON lineage_members BEGIN SELECT RAISE(ABORT,'INJECTED_MEMBER_FAILURE'); END`);let threw=false;try{await createTaskMember({task_id:\"ROLL\",dedupe_key:\"d:roll\",payload:{x:9}})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`)}const ev:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM succ_events`)).rows[0];const mem:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_members`)).rows[0];const tok=await readEventToken();return threw&&Number(ev.n)===0&&Number(mem.n)===0&&tok.generation===0&&tok.event_head_hash===\"0\".repeat(64)});\nawait check(\"real_db_relation_rollback_atomic\",async()=>{const {a,b}=await setup();const before=await readEventToken();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`);await sqlite.execute(`CREATE TRIGGER test_abort_edge BEFORE INSERT ON lineage_edges BEGIN SELECT RAISE(ABORT,'INJECTED_EDGE_FAILURE'); END`);let threw=false;try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`)}const after=await readEventToken();const e:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_edges`)).rows[0];return threw&&Number(e.n)===0&&after.generation===before.generation&&after.event_head_hash===before.event_head_hash});\nawait check(\"current_head_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_current_head SET head_sha256='${\"5\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"CURRENT_HEAD_POINTER_MISMATCH\")});\nawait check(\"event_meta_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_event_meta SET event_head_hash='${\"6\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false});\n\n\nconst pass=results.filter(x=>x.pass).length;console.log(JSON.stringify({schema:\"SUCCESSOR_LINEAGE_CURRENTNESS_V1_TEST_REPORT\",passed:pass,total:results.length,all_pass:pass===results.length,results},null,2));if(pass!==results.length)throw new Error(`TEST_FAILURE ${pass}/${results.length}`);\nexport default results;","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { __testReset,createTaskMember,addRelation,prepareCurrentnessGuard,consumeCurrentnessGuard,readEventToken,RELATION_TYPES } from \"./lineage_currentness_v2.ts\";\n\ntype R={name:string,pass:boolean,detail?:any};const results:R[]=[];\nasync function check(name:string,fn:()=>Promise,detail?:()=>Promise){try{const pass=await fn();results.push({name,pass,detail:detail?await detail():undefined})}catch(e){results.push({name,pass:false,detail:String((e as any)?.message??e)})}}\nasync function setup(){await __testReset();const a=await createTaskMember({task_id:\"A\",dedupe_key:\"d:A\",payload:{x:1}});const b=await createTaskMember({task_id:\"B\",dedupe_key:\"d:B\",payload:{x:2}});return {a,b}}\n\nawait check(\"empty_state_valid\",async()=>{await __testReset();return (await prepareCurrentnessGuard()).ok===true});\nawait check(\"baseline_two_members_valid\",async()=>{await setup();const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.members===2});\nawait check(\"multiple_relations_per_member_preserved\",async()=>{const {a,b}=await setup();await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"});await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"GUARDS\"});const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.edges===2});\nawait check(\"dangling_target_rejected\",async()=>{const {a}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:\"m:\"+\"f\".repeat(64),relation_type:\"DEPENDS_ON\"});return false}catch(e){return String((e as any).message).includes(\"DANGLING_RELATION_TARGET\")}});\nawait check(\"unknown_relation_rejected\",async()=>{const {a,b}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"MADE_UP\" as any});return false}catch(e){return String((e as any).message).includes(\"BAD_RELATION_TYPE\")}});\nawait check(\"retained_hash_previous_head_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET previous_head_sha256='${\"1\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_CHAIN_LINK_MISMATCH\")});\nawait check(\"retained_hash_snapshot_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET snapshot_sha256='${\"2\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_SELF_HASH_MISMATCH\")});\nawait check(\"snapshot_content_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET state='COMPLETE' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")});\nawait check(\"event_body_tamper_rejected\",async()=>{await setup();const r:any=(await sqlite.execute(`SELECT body_json FROM succ_events WHERE local_seq=1`)).rows[0];const b=JSON.parse(String(r.body_json));b.injected=\"same_semantics_extra_byte\";await sqlite.execute({sql:`UPDATE succ_events SET body_json=? WHERE local_seq=1`,args:[JSON.stringify(b)]});const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_HASH_MISMATCH\")});\nawait check(\"event_prev_hash_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_events SET prev_hash='${\"3\".repeat(64)}' WHERE local_seq=2`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_CHAIN_LINK_MISMATCH\")});\nawait check(\"creation_identity_source_splice_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET created_event_hash='${\"4\".repeat(64)}' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false});\nawait check(\"mutable_dedupe_cannot_silently_change_identity\",async()=>{const {a}=await setup();await sqlite.execute(`UPDATE lineage_members SET creation_dedupe_key='changed' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")||String(v.reason).includes(\"TASK_CREATED_MAPPING_MISMATCH\")});\nawait check(\"event_token_shape_internal\",async()=>{await setup();const t:any=await readEventToken();return typeof t.generation===\"number\"&&Number.isInteger(t.generation)&&/^[0-9a-f]{64}$/.test(t.event_head_hash)&&Object.keys(t).sort().join(\",\")===\"event_head_hash,generation\"});\nawait check(\"relation_enum_closed\",async()=>RELATION_TYPES.join(\",\")===\"DEPENDS_ON,FALSIFIED_BY,SUPERSEDES,GUARDS,DERIVED_FROM\");\nawait check(\"real_db_task_create_rollback_atomic\",async()=>{await __testReset();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`);await sqlite.execute(`CREATE TRIGGER test_abort_member BEFORE INSERT ON lineage_members BEGIN SELECT RAISE(ABORT,'INJECTED_MEMBER_FAILURE'); END`);let threw=false;try{await createTaskMember({task_id:\"ROLL\",dedupe_key:\"d:roll\",payload:{x:9}})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`)}const ev:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM succ_events`)).rows[0];const mem:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_members`)).rows[0];const tok=await readEventToken();return threw&&Number(ev.n)===0&&Number(mem.n)===0&&tok.generation===0&&tok.event_head_hash===\"0\".repeat(64)});\nawait check(\"real_db_relation_rollback_atomic\",async()=>{const {a,b}=await setup();const before=await readEventToken();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`);await sqlite.execute(`CREATE TRIGGER test_abort_edge BEFORE INSERT ON lineage_edges BEGIN SELECT RAISE(ABORT,'INJECTED_EDGE_FAILURE'); END`);let threw=false;try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`)}const after=await readEventToken();const e:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_edges`)).rows[0];return threw&&Number(e.n)===0&&after.generation===before.generation&&after.event_head_hash===before.event_head_hash});\nawait check(\"current_head_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_current_head SET head_sha256='${\"5\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"CURRENT_HEAD_POINTER_MISMATCH\")});\nawait check(\"event_meta_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_event_meta SET event_head_hash='${\"6\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false});\nawait check(\"fresh_guard_consumption_atomic\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();if(!p.ok)return false;const c:any=await consumeCurrentnessGuard(p.guard,\"fresh-consume\");const n:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_consumptions`)).rows[0];return c.ok===true&&Number(n.n)===1});\nawait check(\"stale_guard_after_lineage_change_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();if(!p.ok)return false;await createTaskMember({task_id:\"C\",dedupe_key:\"d:C\",payload:{x:3}});const c:any=await consumeCurrentnessGuard(p.guard,\"must-reject\");const n:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_consumptions`)).rows[0];return c.ok===false&&c.reason===\"STALE_CURRENTNESS_GUARD\"&&Number(n.n)===0});\nawait check(\"guard_extra_key_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();const c:any=await consumeCurrentnessGuard({...p.guard,extra:true},\"bad-shape\");return c.ok===false&&c.reason===\"BAD_GUARD_SHAPE\"});\nawait check(\"guard_string_generation_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();const c:any=await consumeCurrentnessGuard({...p.guard,event_generation:String(p.guard.event_generation)},\"bad-type\");return c.ok===false&&c.reason===\"BAD_GUARD_EVENT_GENERATION\"});\nawait check(\"guard_consumption_real_db_rollback_atomic\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();const beforeTok=await readEventToken();const beforeHead:any=(await sqlite.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_consumption`);await sqlite.execute(`CREATE TRIGGER test_abort_consumption BEFORE INSERT ON lineage_consumptions BEGIN SELECT RAISE(ABORT,'INJECTED_CONSUMPTION_FAILURE'); END`);const c:any=await consumeCurrentnessGuard(p.guard,\"rollback-consume\");await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_consumption`);const afterTok=await readEventToken();const afterHead:any=(await sqlite.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];return c.ok===false&&beforeTok.generation===afterTok.generation&&beforeTok.event_head_hash===afterTok.event_head_hash&&Number(beforeHead.version)===Number(afterHead.version)&&String(beforeHead.head_sha256)===String(afterHead.head_sha256)});\n\n\n\nconst pass=results.filter(x=>x.pass).length;console.log(JSON.stringify({schema:\"SUCCESSOR_LINEAGE_CURRENTNESS_V1_TEST_REPORT\",passed:pass,total:results.length,all_pass:pass===results.length,results},null,2));if(pass!==results.length)throw new Error(`TEST_FAILURE ${pass}/${results.length}`);\nexport default results;","createdAt",["D",1789434792706],"branchVersion","branchId","0b2522ef-5041-4256-a795-786066279094","id","f6e8c32f-bea0-4b8f-ad10-b41ce857754f","project-brain-successor-20260915-v1",["D",1789434280321],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Clean successor focused on first real superhero","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","01a0a2ab-510a-711e-aa9d-429474e675c1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","f6e8c32fbea04b8fad10b41ce857754f","tursoHostname","f6e8c32fbea04b8fad10b41ce857754f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789522252250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",1241,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":280,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":281,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":282,"_84":283,"_86":284,"_88":25},"tree",[223,226,227,228,229,230,231,232,233,234],"files",[223,224,225,226,227,228,229,230,231,232,233,234],"counts",{"_212":63,"_213":214,"_215":208,"_216":217,"_218":219},"contents",[131,132,133,134,135,136,137,138,139,140],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":205,"_32":206,"_30":207,"_144":-5,"_41":42,"_40":208,"_146":59,"_38":209,"_13":63,"_33":210,"_35":-5,"_24":25,"_150":-5,"_27":211},{"_43":198,"_32":199,"_30":200,"_144":-5,"_41":42,"_40":201,"_146":59,"_38":202,"_13":63,"_33":20,"_35":203,"_24":25,"_150":-5,"_27":204},{"_43":192,"_32":193,"_30":194,"_144":-5,"_41":42,"_40":148,"_146":25,"_38":195,"_13":63,"_33":20,"_35":196,"_24":25,"_150":-5,"_27":197},{"_43":185,"_32":186,"_30":187,"_144":-5,"_41":42,"_40":188,"_146":25,"_38":189,"_13":148,"_33":34,"_35":190,"_24":25,"_150":-5,"_27":191},{"_43":178,"_32":179,"_30":180,"_144":-5,"_41":42,"_40":181,"_146":59,"_38":182,"_13":161,"_33":34,"_35":183,"_24":25,"_150":-5,"_27":184},{"_43":171,"_32":172,"_30":173,"_144":-5,"_41":42,"_40":174,"_146":25,"_38":175,"_13":155,"_33":34,"_35":176,"_24":25,"_150":-5,"_27":177},{"_43":163,"_32":164,"_30":165,"_144":-5,"_41":42,"_40":166,"_146":25,"_38":167,"_13":168,"_33":34,"_35":169,"_24":25,"_150":-5,"_27":170},{"_43":159,"_32":28,"_30":31,"_144":-5,"_41":42,"_40":14,"_146":25,"_38":160,"_13":161,"_33":34,"_35":37,"_24":25,"_150":-5,"_27":162},{"_43":152,"_32":153,"_30":154,"_144":-5,"_41":42,"_40":155,"_146":59,"_38":156,"_13":63,"_33":34,"_35":157,"_24":25,"_150":-5,"_27":158},{"_43":141,"_32":142,"_30":143,"_144":-5,"_41":42,"_40":145,"_146":59,"_38":147,"_13":148,"_33":34,"_35":149,"_24":25,"_150":-5,"_27":151},"28c1b486-de3e-4600-beb0-4e45a344b9ce","run_e001.ts","01a0a298-56dc-7677-9792-b5bf45b196cf","parentId",6,"latest",["D",1789434348372],1,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { init, addTask, claimBatch, submit, verify } from \"./program.ts\";\nawait init();\nconst id=\"falsify_semantics_\"+crypto.randomUUID().replaceAll(\"-\",\"_\");\nawait sqlite.execute({sql:\"DELETE FROM micro_tasks WHERE id=?\",args:[id]});\ntry {\n await addTask({id,priority:1e15,payload:{claim:\"2+2=5\"},executor_requirements:[\"cap:solve\"]});\n const c=await claimBatch([{id:\"solver_A\",tokens:[\"cap:solve\"]}],30);\n const a=c.assignments.find((x:any)=>x.task_id===id);\n if(!a) throw new Error(\"NO_CLAIM\");\n const s=await submit(\"solver_A\",id,a.lease_token,{answer:\"2+2=5\",truth:false});\n const v=await verify(\"verifier_B\",[\"cap:verify\"],id,s.result_sha256,{passed:true,evidence:{checked:false,verified:false,note:\"deliberately contradictory attestation\"}});\n const row:any=(await sqlite.execute({sql:\"SELECT state,result_json,submitted_by,verified_by,verification_json FROM micro_tasks WHERE id=?\",args:[id]})).rows[0];\n console.log(JSON.stringify({schema:\"MICRO_KERNEL_SEMANTIC_FALSIFICATION_V2\",verify_return:v,row,exploit_reproduced:row?.state===\"COMPLETE\"}));\n} finally { await sqlite.execute({sql:\"DELETE FROM micro_tasks WHERE id=?\",args:[id]}); }\n","label",[142],"fbcd8724-4762-4592-a4a3-15912e0941fb","program.ts","01a0a298-56db-7688-b7b9-4a7560e0c586",2,["D",1789434287842],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst T=\"micro_tasks\";\nconst now=()=>new Date().toISOString();\nconst j=(x:any)=>JSON.stringify(x);\nconst p=(s:any,f:any=[])=>{try{return JSON.parse(String(s??\"\"))}catch{return f}};\nconst sha=async(s:string)=>[...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n\nexport async function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${T}(\n id TEXT PRIMARY KEY,\n priority REAL NOT NULL,\n state TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n prerequisites_json TEXT NOT NULL,\n executor_requirements_json TEXT NOT NULL,\n resources_json TEXT NOT NULL,\n lease_owner TEXT,\n lease_expires_at TEXT,\n lease_token TEXT,\n result_json TEXT,\n result_sha256 TEXT,\n submitted_by TEXT,\n verified_by TEXT,\n verification_json TEXT,\n updated_at TEXT NOT NULL\n )`);\n const cols:any=await sqlite.execute(`PRAGMA table_info(${T})`);\n const names=new Set((cols.rows as any[]).map(x=>String(x.name)));\n if(!names.has(\"lease_token\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN lease_token TEXT`);\n if(!names.has(\"submitted_by\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN submitted_by TEXT`);\n if(!names.has(\"verified_by\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN verified_by TEXT`);\n if(!names.has(\"verification_json\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN verification_json TEXT`);\n}\n\nexport async function addTask(x:{id:string,priority:number,payload:any,prerequisites?:string[],executor_requirements?:string[],resources?:string[]}){\n await init();\n const pre=[...new Set(x.prerequisites??[])],req=[...new Set(x.executor_requirements??[])],res=[...new Set(x.resources??[])];\n const payload=j(x.payload),prej=j(pre),reqj=j(req),resj=j(res);\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${T}(id,priority,state,payload_json,prerequisites_json,executor_requirements_json,resources_json,updated_at)\n VALUES(?,?,'READY',?,?,?,?,?)`,args:[x.id,x.priority,payload,prej,reqj,resj,now()]});\n const row:any=(await sqlite.execute({sql:`SELECT * FROM ${T} WHERE id=?`,args:[x.id]})).rows[0];\n if(!row||Number(row.priority)!==Number(x.priority)||row.payload_json!==payload||row.prerequisites_json!==prej||row.executor_requirements_json!==reqj||row.resources_json!==resj){\n throw new Error(\"TASK_ID_CONFLICT\");\n }\n return row;\n}\n\nexport async function claimBatch(executors:{id:string,tokens:string[]}[],leaseSeconds=900){\n if(!Number.isInteger(leaseSeconds)||leaseSeconds<30||leaseSeconds>900)throw new Error(\"INVALID_LEASE_SECONDS\");\n await init();\n if(!executors.length)return {ok:true,assignments:[]};\n const tx:any=await sqlite.transaction(\"write\");\n try{\n const tnow=now(),expires=new Date(Date.now()+leaseSeconds*1000).toISOString();\n await tx.execute({sql:`UPDATE ${T} SET state='READY',lease_owner=NULL,lease_expires_at=NULL,lease_token=NULL,updated_at=? WHERE state='LEASED' AND lease_expires_at[String(r.id),r]));\n const locked=new Set(),held=new Set();\n for(const r of leasedR.rows as any[]){\n if(r.lease_owner)held.add(String(r.lease_owner));\n for(const q of p(r.resources_json,[]))locked.add(String(q));\n }\n const candidates=(candR.rows as any[]).map(r=>({...r,pre:p(r.prerequisites_json,[]),req:p(r.executor_requirements_json,[]),res:p(r.resources_json,[])}));\n const used=new Set(),assignments:any[]=[];\n for(const e of executors){\n if(held.has(e.id))continue;\n const have=new Set(e.tokens);\n let pick:any=null;\n for(const r of candidates){\n if(used.has(String(r.id))||r.pre.some((x:string)=>!done.has(x))||r.req.some((x:string)=>!have.has(x))||r.res.some((x:string)=>locked.has(x)))continue;\n pick=r;break;\n }\n if(!pick)continue;\n used.add(String(pick.id));held.add(e.id);\n for(const q of pick.res)locked.add(String(q));\n assignments.push({\n executor_id:e.id,\n task_id:String(pick.id),\n lease_token:crypto.randomUUID(),\n priority:pick.priority,\n payload:p(pick.payload_json,{}),\n prerequisite_evidence:Object.fromEntries(pick.pre.map((x:string)=>[x,done.get(x)]))\n });\n }\n for(let off=0;off`WHEN ? THEN ?`).join(\" \"),tokenCases=c.map(()=>`WHEN ? THEN ?`).join(\" \"),ids=c.map(()=>\"?\").join(\",\");\n const args:any[]=[];\n for(const a of c)args.push(a.task_id,a.executor_id);\n for(const a of c)args.push(a.task_id,a.lease_token);\n args.push(expires,tnow,...c.map(a=>a.task_id));\n const u:any=await tx.execute({sql:`UPDATE ${T} SET state='LEASED',lease_owner=CASE id ${ownerCases} END,lease_token=CASE id ${tokenCases} END,lease_expires_at=?,updated_at=? WHERE state='READY' AND id IN (${ids}) RETURNING id`,args});\n if((u.rows||[]).length!==c.length)throw new Error(\"BATCH_CLAIM_RACE\");\n }\n await tx.commit();\n return {ok:true,assignments,lease_expires_at:expires};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function submit(executorId:string,taskId:string,leaseToken:string,result:any){\n await init();\n const tx:any=await sqlite.transaction(\"write\");\n try{\n const r:any=(await tx.execute({sql:`SELECT * FROM ${T} WHERE id=?`,args:[taskId]})).rows[0];\n if(!r||r.state!==\"LEASED\"||r.lease_owner!==executorId||r.lease_token!==leaseToken||String(r.lease_expires_at)<=now()){await tx.commit();return {ok:false,reason:\"NOT_CURRENT_LEASE_ATTEMPT\"}}\n const raw=j(result),h=await sha(raw);\n await tx.execute({sql:`UPDATE ${T} SET state='SUBMITTED',lease_owner=NULL,lease_expires_at=NULL,lease_token=NULL,result_json=?,result_sha256=?,submitted_by=?,verified_by=NULL,verification_json=NULL,updated_at=? WHERE id=?`,args:[raw,h,executorId,now(),taskId]});\n await tx.commit();return {ok:true,task_id:taskId,result_sha256:h};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function verify(verifierId:string,verifierTokens:string[],taskId:string,resultSha256:string,verification:any){\n await init();\n const tx:any=await sqlite.transaction(\"write\");\n try{\n const r:any=(await tx.execute({sql:`SELECT state,submitted_by,result_sha256 FROM ${T} WHERE id=?`,args:[taskId]})).rows[0];\n if(!r||r.state!==\"SUBMITTED\"){await tx.commit();return {ok:false,reason:\"TASK_NOT_SUBMITTED\"}}\n if(String(r.submitted_by)===verifierId){await tx.commit();return {ok:false,reason:\"SELF_VERIFICATION_FORBIDDEN\"}}\n if(String(r.result_sha256)!==resultSha256){await tx.commit();return {ok:false,reason:\"STALE_VERIFICATION_RESULT\"}}\n if(!new Set(verifierTokens).has(\"cap:verify\")){await tx.commit();return {ok:false,reason:\"VERIFIER_CAPABILITY_REQUIRED\"}}\n if(typeof verification?.passed!==\"boolean\"){await tx.commit();return {ok:false,reason:\"VERIFICATION_VERDICT_REQUIRED\"}}\n const t=now();\n if(verification.passed){\n // A caller-supplied boolean is an attestation, not independently established truth.\n // Fail closed: this generic coordination kernel may reject candidates, but it may\n // not promote them to COMPLETE without a task-specific verifier it can execute.\n await tx.commit();return {ok:false,reason:\"POSITIVE_VERIFICATION_NOT_ENFORCEABLE\"};\n }\n await tx.execute({sql:`UPDATE ${T} SET state='READY',lease_owner=NULL,lease_expires_at=NULL,lease_token=NULL,submitted_by=NULL,verified_by=?,verification_json=?,updated_at=? WHERE id=?`,args:[verifierId,j(verification),t,taskId]});\n await tx.commit();return {ok:true,task_id:taskId,state:\"READY\"};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\n",[153],"d1c4e40b-510c-4164-8eb1-aa00f820b3d3",["D",1789434792706],5,[28],"73efd566-5286-43cb-9c82-a6c1e5757533","lineage_currentness_v2.ts","01a0a29e-5091-74be-92a5-4d75c3ff1f2f",22,["D",1789434750898],4,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst enc=new TextEncoder();\nexport const RELATION_TYPES=[\"DEPENDS_ON\",\"FALSIFIED_BY\",\"SUPERSEDES\",\"GUARDS\",\"DERIVED_FROM\"] as const;\ntype RelationType=typeof RELATION_TYPES[number];\nconst relSet=new Set(RELATION_TYPES);\nconst H64=/^[0-9a-f]{64}$/;\nconst UUID=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;\n\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\") return JSON.stringify(x);\n if(Array.isArray(x)) return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nexport async function sha256Text(s:string){return [...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",enc.encode(s)))].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction exactKeys(o:any,keys:string[]){return !!o&&typeof o===\"object\"&&!Array.isArray(o)&&Object.keys(o).sort().join(\"\\0\")===keys.slice().sort().join(\"\\0\")}\nfunction assertToken(t:any){if(!exactKeys(t,[\"generation\",\"event_head_hash\"]))throw new Error(\"BAD_EVENT_TOKEN_SHAPE\");if(typeof t.generation!==\"number\"||!Number.isInteger(t.generation)||t.generation<0)throw new Error(\"BAD_EVENT_TOKEN_GENERATION\");if(typeof t.event_head_hash!==\"string\"||!H64.test(t.event_head_hash))throw new Error(\"BAD_EVENT_TOKEN_HEAD\");return t as {generation:number,event_head_hash:string}}\nfunction assertGuard(g:any){if(!exactKeys(g,[\"version\",\"lineage_head_sha256\",\"event_generation\",\"event_head_sha256\"]))throw new Error(\"BAD_GUARD_SHAPE\");if(typeof g.version!==\"number\"||!Number.isInteger(g.version)||g.version<0)throw new Error(\"BAD_GUARD_VERSION\");if(typeof g.event_generation!==\"number\"||!Number.isInteger(g.event_generation)||g.event_generation<0)throw new Error(\"BAD_GUARD_EVENT_GENERATION\");if(typeof g.lineage_head_sha256!==\"string\"||!H64.test(g.lineage_head_sha256)||typeof g.event_head_sha256!==\"string\"||!H64.test(g.event_head_sha256))throw new Error(\"BAD_GUARD_HASH\");return g as {version:number,lineage_head_sha256:string,event_generation:number,event_head_sha256:string}}\n\n\nexport async function initLineage(){\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS succ_event_meta(id INTEGER PRIMARY KEY CHECK(id=1),generation INTEGER NOT NULL,event_head_hash TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS succ_events(local_seq INTEGER PRIMARY KEY,event_uuid TEXT NOT NULL UNIQUE,type TEXT NOT NULL,generation INTEGER NOT NULL,prev_hash TEXT NOT NULL,event_hash TEXT NOT NULL UNIQUE,body_json TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_members(member_instance_id TEXT PRIMARY KEY,logical_task_id TEXT NOT NULL,creation_dedupe_key TEXT NOT NULL,created_event_uuid TEXT NOT NULL,created_event_local_seq INTEGER NOT NULL,created_event_generation INTEGER NOT NULL,created_event_hash TEXT NOT NULL,payload_sha256 TEXT NOT NULL,state TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_edges(edge_id TEXT PRIMARY KEY,source_member_id TEXT NOT NULL,target_member_id TEXT NOT NULL,relation_type TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_snapshots(version INTEGER PRIMARY KEY,members_sha256 TEXT NOT NULL,edges_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_heads(version INTEGER PRIMARY KEY,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,head_sha256 TEXT NOT NULL UNIQUE,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_current_head(id INTEGER PRIMARY KEY CHECK(id=1),version INTEGER NOT NULL,head_sha256 TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_consumptions(id TEXT PRIMARY KEY,label TEXT NOT NULL,guard_version INTEGER NOT NULL,guard_lineage_head_sha256 TEXT NOT NULL,guard_event_generation INTEGER NOT NULL,guard_event_head_sha256 TEXT NOT NULL,result_version INTEGER NOT NULL,result_lineage_head_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`\n ]);\n await sqlite.execute(`INSERT OR IGNORE INTO succ_event_meta(id,generation,event_head_hash) VALUES(1,0,'${\"0\".repeat(64)}')`);\n await sqlite.execute(`INSERT OR IGNORE INTO lineage_current_head(id,version,head_sha256) VALUES(1,0,'${\"0\".repeat(64)}')`);\n}\n\nasync function appendEventTx(tx:any,type:string,body:any){\n const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n const seqR:any=(await tx.execute(`SELECT COALESCE(MAX(local_seq),0)+1 AS n FROM succ_events`)).rows[0];\n const local_seq=Number(seqR.n),generation=token.generation+1,event_uuid=crypto.randomUUID(),prev_hash=token.event_head_hash,created_at=new Date().toISOString(),body_json=canon(body);\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq,event_uuid,type,generation,prev_hash,body_json};\n const event_hash=await sha256Text(canon(projection));\n await tx.execute({sql:`INSERT INTO succ_events(local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at]});\n await tx.execute({sql:`UPDATE succ_event_meta SET generation=?,event_head_hash=? WHERE id=1`,args:[generation,event_hash]});\n return {...projection,event_hash,created_at};\n}\n\nexport async function readEventToken(){await initLineage();const r:any=(await sqlite.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];return assertToken({generation:r.generation,event_head_hash:r.event_head_hash})}\n\nasync function memberIdFromCreatedEvent(e:any){\n if(e.type!==\"TASK_CREATED\")throw new Error(\"NOT_TASK_CREATED\");\n if(!UUID.test(String(e.event_uuid))||!Number.isInteger(Number(e.local_seq))||Number(e.local_seq)<=0||!Number.isInteger(Number(e.generation))||Number(e.generation)<=0||!H64.test(String(e.event_hash)))throw new Error(\"BAD_CREATED_EVENT_IDENTITY\");\n return \"m:\"+await sha256Text(canon({event_uuid:e.event_uuid,local_seq:Number(e.local_seq),generation:Number(e.generation),event_hash:e.event_hash}));\n}\n\nasync function edgeId(source:string,target:string,relation:RelationType){return \"e:\"+await sha256Text(canon({source,target,relation}))}\n\nasync function publishTx(tx:any){\n const tokenR:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:tokenR.generation,event_head_hash:tokenR.event_head_hash});\n const members=(await tx.execute(`SELECT * FROM lineage_members ORDER BY member_instance_id`)).rows as any[];\n const edges=(await tx.execute(`SELECT * FROM lineage_edges ORDER BY edge_id`)).rows as any[];\n const members_sha256=await sha256Text(canon(members));\n const edges_sha256=await sha256Text(canon(edges));\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n const version=Number(cur.version)+1,previous_head_sha256=String(cur.head_sha256),created_at=new Date().toISOString();\n const snapshotProjection={schema:\"LINEAGE_SNAPSHOT_V1\",version,members_sha256,edges_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash,previous_head_sha256};\n const snapshot_sha256=await sha256Text(canon(snapshotProjection));\n const headProjection={schema:\"LINEAGE_HEAD_V1\",version,previous_head_sha256,snapshot_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash};\n const head_sha256=await sha256Text(canon(headProjection));\n await tx.execute({sql:`INSERT INTO lineage_snapshots(version,members_sha256,edges_sha256,event_history_generation,event_history_head_sha256,previous_head_sha256,snapshot_sha256,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[version,members_sha256,edges_sha256,token.generation,token.event_head_hash,previous_head_sha256,snapshot_sha256,created_at]});\n await tx.execute({sql:`INSERT INTO lineage_heads(version,previous_head_sha256,snapshot_sha256,event_history_generation,event_history_head_sha256,head_sha256,created_at) VALUES(?,?,?,?,?,?,?)`,args:[version,previous_head_sha256,snapshot_sha256,token.generation,token.event_head_hash,head_sha256,created_at]});\n await tx.execute({sql:`UPDATE lineage_current_head SET version=?,head_sha256=? WHERE id=1`,args:[version,head_sha256]});\n return {version,head_sha256,snapshot_sha256,event_token:token};\n}\n\nexport async function createTaskMember(x:{task_id:string,dedupe_key:string,payload:any,state?:string}){\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const payload_sha256=await sha256Text(canon(x.payload));\n const ev=await appendEventTx(tx,\"TASK_CREATED\",{task_id:x.task_id,dedupe_key:x.dedupe_key,payload_sha256});\n const member_instance_id=await memberIdFromCreatedEvent(ev),t=new Date().toISOString();\n await tx.execute({sql:`INSERT INTO lineage_members(member_instance_id,logical_task_id,creation_dedupe_key,created_event_uuid,created_event_local_seq,created_event_generation,created_event_hash,payload_sha256,state,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[member_instance_id,x.task_id,x.dedupe_key,ev.event_uuid,ev.local_seq,ev.generation,ev.event_hash,payload_sha256,x.state??\"READY\",t]});\n const published=await publishTx(tx);await tx.commit();return {member_instance_id,event:ev,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function addRelation(x:{source_member_id:string,target_member_id:string,relation_type:RelationType}){\n if(!relSet.has(x.relation_type))throw new Error(\"BAD_RELATION_TYPE\");\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const rs:any=(await tx.execute({sql:`SELECT member_instance_id FROM lineage_members WHERE member_instance_id IN (?,?)`,args:[x.source_member_id,x.target_member_id]})).rows;\n if(rs.length!==new Set([x.source_member_id,x.target_member_id]).size)throw new Error(\"DANGLING_RELATION_TARGET\");\n const edge_id=await edgeId(x.source_member_id,x.target_member_id,x.relation_type),t=new Date().toISOString();\n await appendEventTx(tx,\"RELATION_ADDED\",{edge_id,source_member_id:x.source_member_id,target_member_id:x.target_member_id,relation_type:x.relation_type});\n await tx.execute({sql:`INSERT OR IGNORE INTO lineage_edges(edge_id,source_member_id,target_member_id,relation_type,updated_at) VALUES(?,?,?,?,?)`,args:[edge_id,x.source_member_id,x.target_member_id,x.relation_type,t]});\n const published=await publishTx(tx);await tx.commit();return {edge_id,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nasync function verifyEventChainRows(rows:any[],meta:any){\n let prev=\"0\".repeat(64),generation=0;\n for(const r of rows){\n if(Number(r.local_seq)!==generation+1||Number(r.generation)!==generation+1||String(r.prev_hash)!==prev)throw new Error(\"EVENT_CHAIN_LINK_MISMATCH\");\n if(!UUID.test(String(r.event_uuid))||!H64.test(String(r.event_hash)))throw new Error(\"EVENT_CHAIN_IDENTITY_MALFORMED\");\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq:Number(r.local_seq),event_uuid:String(r.event_uuid),type:String(r.type),generation:Number(r.generation),prev_hash:String(r.prev_hash),body_json:String(r.body_json)};\n const expected=await sha256Text(canon(projection));if(expected!==String(r.event_hash))throw new Error(\"EVENT_HASH_MISMATCH\");\n prev=expected;generation++;\n }\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n if(token.generation!==generation||token.event_head_hash!==prev)throw new Error(\"EVENT_META_MISMATCH\");\n return token;\n}\n\nasync function revalidateTaskMembers(tx:any,members:any[]){\n for(const m of members){\n const rows:any[]=(await tx.execute({sql:`SELECT * FROM succ_events WHERE event_uuid=? AND local_seq=? AND generation=? AND event_hash=? AND type='TASK_CREATED'`,args:[m.created_event_uuid,m.created_event_local_seq,m.created_event_generation,m.created_event_hash]})).rows as any[];\n if(rows.length!==1)throw new Error(\"TASK_CREATED_IDENTITY_NOT_UNIQUE\");\n const body=JSON.parse(String(rows[0].body_json));\n if(body.task_id!==m.logical_task_id||body.dedupe_key!==m.creation_dedupe_key||body.payload_sha256!==m.payload_sha256)throw new Error(\"TASK_CREATED_MAPPING_MISMATCH\");\n const recomputed=await memberIdFromCreatedEvent({...rows[0],event_hash:String(rows[0].event_hash)});if(recomputed!==m.member_instance_id)throw new Error(\"MEMBER_ID_MISMATCH\");\n }\n}\n\nexport async function prepareCurrentnessGuard(){\n await initLineage();\n const tx:any=await sqlite.transaction(\"read\");\n try{\n const token0R:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token0=assertToken({generation:token0R.generation,event_head_hash:token0R.event_head_hash});\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n if(Number(cur.version)===0){const guard=assertGuard({version:0,lineage_head_sha256:\"0\".repeat(64),event_generation:token0.generation,event_head_sha256:token0.event_head_hash});await tx.commit();return {ok:true,guard,diagnostic:{members:0,edges:0}}}\n const heads:any[]=(await tx.execute(`SELECT * FROM lineage_heads ORDER BY version`)).rows as any[];\n let prev=\"0\".repeat(64);\n for(let i=0;iString(m.member_instance_id)));for(const e of edges){if(!relSet.has(String(e.relation_type)))throw new Error(\"UNKNOWN_RELATION_TYPE\");if(!ids.has(String(e.source_member_id))||!ids.has(String(e.target_member_id)))throw new Error(\"DANGLING_RELATION_TARGET\")}\n await revalidateTaskMembers(tx,members);\n const events:any[]=(await tx.execute(`SELECT * FROM succ_events ORDER BY local_seq`)).rows as any[];const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token1=await verifyEventChainRows(events,meta);\n if(token1.generation!==token0.generation||token1.event_head_hash!==token0.event_head_hash)throw new Error(\"EVENT_HISTORY_CHANGED_DURING_VERIFY\");\n if(Number(head.event_history_generation)!==token1.generation||String(head.event_history_head_sha256)!==token1.event_head_hash)throw new Error(\"HEAD_EVENT_HISTORY_STALE\");\n const guard=assertGuard({version:Number(cur.version),lineage_head_sha256:String(cur.head_sha256),event_generation:token1.generation,event_head_sha256:token1.event_head_hash});\n await tx.commit();return {ok:true,guard,diagnostic:{members:members.length,edges:edges.length}};\n }catch(e){try{await tx.rollback()}catch{};return {ok:false,reason:String((e as any)?.message??e)}}\n}\n\nexport async function consumeCurrentnessGuard(guardInput:any,label:string){\n let guard:any;try{guard=assertGuard(guardInput)}catch(e){return {ok:false,reason:String((e as any)?.message??e)}}\n if(typeof label!==\"string\"||label.length<1||label.length>200)return {ok:false,reason:\"BAD_CONSUMPTION_LABEL\"};\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const metaR:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token=assertToken({generation:metaR.generation,event_head_hash:metaR.event_head_hash});\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n if(Number(cur.version)!==guard.version||String(cur.head_sha256)!==guard.lineage_head_sha256||token.generation!==guard.event_generation||token.event_head_hash!==guard.event_head_sha256){await tx.commit();return {ok:false,reason:\"STALE_CURRENTNESS_GUARD\"}}\n const consumption_id=crypto.randomUUID();\n await appendEventTx(tx,\"CURRENTNESS_GUARD_CONSUMED\",{consumption_id,label,guard});\n const published=await publishTx(tx);const created_at=new Date().toISOString();\n await tx.execute({sql:`INSERT INTO lineage_consumptions(id,label,guard_version,guard_lineage_head_sha256,guard_event_generation,guard_event_head_sha256,result_version,result_lineage_head_sha256,created_at) VALUES(?,?,?,?,?,?,?,?,?)`,args:[consumption_id,label,guard.version,guard.lineage_head_sha256,guard.event_generation,guard.event_head_sha256,published.version,published.head_sha256,created_at]});\n await tx.commit();return {ok:true,consumption_id,result_version:published.version,result_lineage_head_sha256:published.head_sha256};\n }catch(e){try{await tx.rollback()}catch{};return {ok:false,reason:String((e as any)?.message??e)}}\n}\n\nexport async function __testReset(){await initLineage();await sqlite.batch([`DELETE FROM lineage_consumptions`,`DELETE FROM lineage_edges`,`DELETE FROM lineage_members`,`DELETE FROM lineage_snapshots`,`DELETE FROM lineage_heads`,`UPDATE lineage_current_head SET version=0,head_sha256='${\"0\".repeat(64)}' WHERE id=1`,`DELETE FROM succ_events`,`UPDATE succ_event_meta SET generation=0,event_head_hash='${\"0\".repeat(64)}' WHERE id=1`]);}\n",[164],"e4e3b39d-799c-4cc4-b7f8-1c696f40a5f6","lineage_currentness_v1_test.ts","e6e11424-b0a1-11f1-95ed-1607ee4eb77e",15,["D",1789434542493],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { __testReset,createTaskMember,addRelation,verifyCurrentness,readEventToken,RELATION_TYPES } from \"./lineage_currentness_v1.ts\";\n\ntype R={name:string,pass:boolean,detail?:any};const results:R[]=[];\nasync function check(name:string,fn:()=>Promise,detail?:()=>Promise){try{const pass=await fn();results.push({name,pass,detail:detail?await detail():undefined})}catch(e){results.push({name,pass:false,detail:String((e as any)?.message??e)})}}\nasync function setup(){await __testReset();const a=await createTaskMember({task_id:\"A\",dedupe_key:\"d:A\",payload:{x:1}});const b=await createTaskMember({task_id:\"B\",dedupe_key:\"d:B\",payload:{x:2}});return {a,b}}\n\nawait check(\"empty_state_valid\",async()=>{await __testReset();return (await verifyCurrentness()).ok===true});\nawait check(\"baseline_two_members_valid\",async()=>{await setup();const v=await verifyCurrentness();return v.ok===true&&v.members===2});\nawait check(\"multiple_relations_per_member_preserved\",async()=>{const {a,b}=await setup();await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"});await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"GUARDS\"});const v=await verifyCurrentness();return v.ok===true&&v.edges===2});\nawait check(\"dangling_target_rejected\",async()=>{const {a}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:\"m:\"+\"f\".repeat(64),relation_type:\"DEPENDS_ON\"});return false}catch(e){return String((e as any).message).includes(\"DANGLING_RELATION_TARGET\")}});\nawait check(\"unknown_relation_rejected\",async()=>{const {a,b}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"MADE_UP\" as any});return false}catch(e){return String((e as any).message).includes(\"BAD_RELATION_TYPE\")}});\nawait check(\"retained_hash_previous_head_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET previous_head_sha256='${\"1\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"HEAD_CHAIN_LINK_MISMATCH\")});\nawait check(\"retained_hash_snapshot_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET snapshot_sha256='${\"2\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"HEAD_SELF_HASH_MISMATCH\")});\nawait check(\"snapshot_content_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET state='COMPLETE' WHERE logical_task_id='A'`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")});\nawait check(\"event_body_tamper_rejected\",async()=>{await setup();const r:any=(await sqlite.execute(`SELECT body_json FROM succ_events WHERE local_seq=1`)).rows[0];const b=JSON.parse(String(r.body_json));b.injected=\"same_semantics_extra_byte\";await sqlite.execute({sql:`UPDATE succ_events SET body_json=? WHERE local_seq=1`,args:[JSON.stringify(b)]});const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"EVENT_HASH_MISMATCH\")});\nawait check(\"event_prev_hash_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_events SET prev_hash='${\"3\".repeat(64)}' WHERE local_seq=2`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"EVENT_CHAIN_LINK_MISMATCH\")});\nawait check(\"creation_identity_source_splice_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET created_event_hash='${\"4\".repeat(64)}' WHERE logical_task_id='A'`);const v=await verifyCurrentness();return v.ok===false});\nawait check(\"mutable_dedupe_cannot_silently_change_identity\",async()=>{const {a}=await setup();await sqlite.execute(`UPDATE lineage_members SET creation_dedupe_key='changed' WHERE logical_task_id='A'`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")||String(v.reason).includes(\"TASK_CREATED_MAPPING_MISMATCH\")});\nawait check(\"event_token_shape_internal\",async()=>{await setup();const t:any=await readEventToken();return typeof t.generation===\"number\"&&Number.isInteger(t.generation)&&/^[0-9a-f]{64}$/.test(t.event_head_hash)&&Object.keys(t).sort().join(\",\")===\"event_head_hash,generation\"});\nawait check(\"relation_enum_closed\",async()=>RELATION_TYPES.join(\",\")===\"DEPENDS_ON,FALSIFIED_BY,SUPERSEDES,GUARDS,DERIVED_FROM\");\nawait check(\"real_db_task_create_rollback_atomic\",async()=>{await __testReset();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`);await sqlite.execute(`CREATE TRIGGER test_abort_member BEFORE INSERT ON lineage_members BEGIN SELECT RAISE(ABORT,'INJECTED_MEMBER_FAILURE'); END`);let threw=false;try{await createTaskMember({task_id:\"ROLL\",dedupe_key:\"d:roll\",payload:{x:9}})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`)}const ev:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM succ_events`)).rows[0];const mem:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_members`)).rows[0];const tok=await readEventToken();return threw&&Number(ev.n)===0&&Number(mem.n)===0&&tok.generation===0&&tok.event_head_hash===\"0\".repeat(64)});\nawait check(\"real_db_relation_rollback_atomic\",async()=>{const {a,b}=await setup();const before=await readEventToken();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`);await sqlite.execute(`CREATE TRIGGER test_abort_edge BEFORE INSERT ON lineage_edges BEGIN SELECT RAISE(ABORT,'INJECTED_EDGE_FAILURE'); END`);let threw=false;try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`)}const after=await readEventToken();const e:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_edges`)).rows[0];return threw&&Number(e.n)===0&&after.generation===before.generation&&after.event_head_hash===before.event_head_hash});\nawait check(\"current_head_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_current_head SET head_sha256='${\"5\".repeat(64)}' WHERE id=1`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"CURRENT_HEAD_POINTER_MISMATCH\")});\nawait check(\"event_meta_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_event_meta SET event_head_hash='${\"6\".repeat(64)}' WHERE id=1`);const v=await verifyCurrentness();return v.ok===false});\n\n\nconst pass=results.filter(x=>x.pass).length;console.log(JSON.stringify({schema:\"SUCCESSOR_LINEAGE_CURRENTNESS_V1_TEST_REPORT\",passed:pass,total:results.length,all_pass:pass===results.length,results},null,2));if(pass!==results.length)throw new Error(`TEST_FAILURE ${pass}/${results.length}`);\nexport default results;",[172],"9096c04a-1886-49dd-9993-54d60474620b","lineage_currentness_v1.ts","bce57dcc-b0a1-11f1-ba5c-1607ee4eb77e",12,["D",1789434456549],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst enc=new TextEncoder();\nexport const RELATION_TYPES=[\"DEPENDS_ON\",\"FALSIFIED_BY\",\"SUPERSEDES\",\"GUARDS\",\"DERIVED_FROM\"] as const;\ntype RelationType=typeof RELATION_TYPES[number];\nconst relSet=new Set(RELATION_TYPES);\nconst H64=/^[0-9a-f]{64}$/;\nconst UUID=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;\n\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\") return JSON.stringify(x);\n if(Array.isArray(x)) return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nexport async function sha256Text(s:string){return [...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",enc.encode(s)))].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction exactKeys(o:any,keys:string[]){return !!o&&typeof o===\"object\"&&!Array.isArray(o)&&Object.keys(o).sort().join(\"\\0\")===keys.slice().sort().join(\"\\0\")}\nfunction assertToken(t:any){if(!exactKeys(t,[\"generation\",\"event_head_hash\"]))throw new Error(\"BAD_EVENT_TOKEN_SHAPE\");if(typeof t.generation!==\"number\"||!Number.isInteger(t.generation)||t.generation<0)throw new Error(\"BAD_EVENT_TOKEN_GENERATION\");if(typeof t.event_head_hash!==\"string\"||!H64.test(t.event_head_hash))throw new Error(\"BAD_EVENT_TOKEN_HEAD\");return t as {generation:number,event_head_hash:string}}\n\nexport async function initLineage(){\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS succ_event_meta(id INTEGER PRIMARY KEY CHECK(id=1),generation INTEGER NOT NULL,event_head_hash TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS succ_events(local_seq INTEGER PRIMARY KEY,event_uuid TEXT NOT NULL UNIQUE,type TEXT NOT NULL,generation INTEGER NOT NULL,prev_hash TEXT NOT NULL,event_hash TEXT NOT NULL UNIQUE,body_json TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_members(member_instance_id TEXT PRIMARY KEY,logical_task_id TEXT NOT NULL,creation_dedupe_key TEXT NOT NULL,created_event_uuid TEXT NOT NULL,created_event_local_seq INTEGER NOT NULL,created_event_generation INTEGER NOT NULL,created_event_hash TEXT NOT NULL,payload_sha256 TEXT NOT NULL,state TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_edges(edge_id TEXT PRIMARY KEY,source_member_id TEXT NOT NULL,target_member_id TEXT NOT NULL,relation_type TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_snapshots(version INTEGER PRIMARY KEY,members_sha256 TEXT NOT NULL,edges_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_heads(version INTEGER PRIMARY KEY,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,head_sha256 TEXT NOT NULL UNIQUE,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_current_head(id INTEGER PRIMARY KEY CHECK(id=1),version INTEGER NOT NULL,head_sha256 TEXT NOT NULL)`\n ]);\n await sqlite.execute(`INSERT OR IGNORE INTO succ_event_meta(id,generation,event_head_hash) VALUES(1,0,'${\"0\".repeat(64)}')`);\n await sqlite.execute(`INSERT OR IGNORE INTO lineage_current_head(id,version,head_sha256) VALUES(1,0,'${\"0\".repeat(64)}')`);\n}\n\nasync function appendEventTx(tx:any,type:string,body:any){\n const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n const seqR:any=(await tx.execute(`SELECT COALESCE(MAX(local_seq),0)+1 AS n FROM succ_events`)).rows[0];\n const local_seq=Number(seqR.n),generation=token.generation+1,event_uuid=crypto.randomUUID(),prev_hash=token.event_head_hash,created_at=new Date().toISOString(),body_json=canon(body);\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq,event_uuid,type,generation,prev_hash,body_json};\n const event_hash=await sha256Text(canon(projection));\n await tx.execute({sql:`INSERT INTO succ_events(local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at]});\n await tx.execute({sql:`UPDATE succ_event_meta SET generation=?,event_head_hash=? WHERE id=1`,args:[generation,event_hash]});\n return {...projection,event_hash,created_at};\n}\n\nexport async function readEventToken(){await initLineage();const r:any=(await sqlite.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];return assertToken({generation:r.generation,event_head_hash:r.event_head_hash})}\n\nasync function memberIdFromCreatedEvent(e:any){\n if(e.type!==\"TASK_CREATED\")throw new Error(\"NOT_TASK_CREATED\");\n if(!UUID.test(String(e.event_uuid))||!Number.isInteger(Number(e.local_seq))||Number(e.local_seq)<=0||!Number.isInteger(Number(e.generation))||Number(e.generation)<=0||!H64.test(String(e.event_hash)))throw new Error(\"BAD_CREATED_EVENT_IDENTITY\");\n return \"m:\"+await sha256Text(canon({event_uuid:e.event_uuid,local_seq:Number(e.local_seq),generation:Number(e.generation),event_hash:e.event_hash}));\n}\n\nasync function edgeId(source:string,target:string,relation:RelationType){return \"e:\"+await sha256Text(canon({source,target,relation}))}\n\nasync function publishTx(tx:any){\n const tokenR:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:tokenR.generation,event_head_hash:tokenR.event_head_hash});\n const members=(await tx.execute(`SELECT * FROM lineage_members ORDER BY member_instance_id`)).rows as any[];\n const edges=(await tx.execute(`SELECT * FROM lineage_edges ORDER BY edge_id`)).rows as any[];\n const members_sha256=await sha256Text(canon(members));\n const edges_sha256=await sha256Text(canon(edges));\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n const version=Number(cur.version)+1,previous_head_sha256=String(cur.head_sha256),created_at=new Date().toISOString();\n const snapshotProjection={schema:\"LINEAGE_SNAPSHOT_V1\",version,members_sha256,edges_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash,previous_head_sha256};\n const snapshot_sha256=await sha256Text(canon(snapshotProjection));\n const headProjection={schema:\"LINEAGE_HEAD_V1\",version,previous_head_sha256,snapshot_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash};\n const head_sha256=await sha256Text(canon(headProjection));\n await tx.execute({sql:`INSERT INTO lineage_snapshots(version,members_sha256,edges_sha256,event_history_generation,event_history_head_sha256,previous_head_sha256,snapshot_sha256,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[version,members_sha256,edges_sha256,token.generation,token.event_head_hash,previous_head_sha256,snapshot_sha256,created_at]});\n await tx.execute({sql:`INSERT INTO lineage_heads(version,previous_head_sha256,snapshot_sha256,event_history_generation,event_history_head_sha256,head_sha256,created_at) VALUES(?,?,?,?,?,?,?)`,args:[version,previous_head_sha256,snapshot_sha256,token.generation,token.event_head_hash,head_sha256,created_at]});\n await tx.execute({sql:`UPDATE lineage_current_head SET version=?,head_sha256=? WHERE id=1`,args:[version,head_sha256]});\n return {version,head_sha256,snapshot_sha256,event_token:token};\n}\n\nexport async function createTaskMember(x:{task_id:string,dedupe_key:string,payload:any,state?:string}){\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const payload_sha256=await sha256Text(canon(x.payload));\n const ev=await appendEventTx(tx,\"TASK_CREATED\",{task_id:x.task_id,dedupe_key:x.dedupe_key,payload_sha256});\n const member_instance_id=await memberIdFromCreatedEvent(ev),t=new Date().toISOString();\n await tx.execute({sql:`INSERT INTO lineage_members(member_instance_id,logical_task_id,creation_dedupe_key,created_event_uuid,created_event_local_seq,created_event_generation,created_event_hash,payload_sha256,state,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[member_instance_id,x.task_id,x.dedupe_key,ev.event_uuid,ev.local_seq,ev.generation,ev.event_hash,payload_sha256,x.state??\"READY\",t]});\n const published=await publishTx(tx);await tx.commit();return {member_instance_id,event:ev,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function addRelation(x:{source_member_id:string,target_member_id:string,relation_type:RelationType}){\n if(!relSet.has(x.relation_type))throw new Error(\"BAD_RELATION_TYPE\");\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const rs:any=(await tx.execute({sql:`SELECT member_instance_id FROM lineage_members WHERE member_instance_id IN (?,?)`,args:[x.source_member_id,x.target_member_id]})).rows;\n if(rs.length!==new Set([x.source_member_id,x.target_member_id]).size)throw new Error(\"DANGLING_RELATION_TARGET\");\n const edge_id=await edgeId(x.source_member_id,x.target_member_id,x.relation_type),t=new Date().toISOString();\n await appendEventTx(tx,\"RELATION_ADDED\",{edge_id,source_member_id:x.source_member_id,target_member_id:x.target_member_id,relation_type:x.relation_type});\n await tx.execute({sql:`INSERT OR IGNORE INTO lineage_edges(edge_id,source_member_id,target_member_id,relation_type,updated_at) VALUES(?,?,?,?,?)`,args:[edge_id,x.source_member_id,x.target_member_id,x.relation_type,t]});\n const published=await publishTx(tx);await tx.commit();return {edge_id,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nasync function verifyEventChainRows(rows:any[],meta:any){\n let prev=\"0\".repeat(64),generation=0;\n for(const r of rows){\n if(Number(r.local_seq)!==generation+1||Number(r.generation)!==generation+1||String(r.prev_hash)!==prev)throw new Error(\"EVENT_CHAIN_LINK_MISMATCH\");\n if(!UUID.test(String(r.event_uuid))||!H64.test(String(r.event_hash)))throw new Error(\"EVENT_CHAIN_IDENTITY_MALFORMED\");\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq:Number(r.local_seq),event_uuid:String(r.event_uuid),type:String(r.type),generation:Number(r.generation),prev_hash:String(r.prev_hash),body_json:String(r.body_json)};\n const expected=await sha256Text(canon(projection));if(expected!==String(r.event_hash))throw new Error(\"EVENT_HASH_MISMATCH\");\n prev=expected;generation++;\n }\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n if(token.generation!==generation||token.event_head_hash!==prev)throw new Error(\"EVENT_META_MISMATCH\");\n return token;\n}\n\nasync function revalidateTaskMembers(tx:any,members:any[]){\n for(const m of members){\n const rows:any[]=(await tx.execute({sql:`SELECT * FROM succ_events WHERE event_uuid=? AND local_seq=? AND generation=? AND event_hash=? AND type='TASK_CREATED'`,args:[m.created_event_uuid,m.created_event_local_seq,m.created_event_generation,m.created_event_hash]})).rows as any[];\n if(rows.length!==1)throw new Error(\"TASK_CREATED_IDENTITY_NOT_UNIQUE\");\n const body=JSON.parse(String(rows[0].body_json));\n if(body.task_id!==m.logical_task_id||body.dedupe_key!==m.creation_dedupe_key||body.payload_sha256!==m.payload_sha256)throw new Error(\"TASK_CREATED_MAPPING_MISMATCH\");\n const recomputed=await memberIdFromCreatedEvent({...rows[0],event_hash:String(rows[0].event_hash)});if(recomputed!==m.member_instance_id)throw new Error(\"MEMBER_ID_MISMATCH\");\n }\n}\n\nexport async function verifyCurrentness(){\n await initLineage();\n const tx:any=await sqlite.transaction(\"read\");\n try{\n const token0R:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token0=assertToken({generation:token0R.generation,event_head_hash:token0R.event_head_hash});\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n if(Number(cur.version)===0){await tx.commit();return {ok:true,version:0,head_sha256:\"0\".repeat(64),event_token:token0}}\n const heads:any[]=(await tx.execute(`SELECT * FROM lineage_heads ORDER BY version`)).rows as any[];\n let prev=\"0\".repeat(64);\n for(let i=0;iString(m.member_instance_id)));for(const e of edges){if(!relSet.has(String(e.relation_type)))throw new Error(\"UNKNOWN_RELATION_TYPE\");if(!ids.has(String(e.source_member_id))||!ids.has(String(e.target_member_id)))throw new Error(\"DANGLING_RELATION_TARGET\")}\n await revalidateTaskMembers(tx,members);\n const events:any[]=(await tx.execute(`SELECT * FROM succ_events ORDER BY local_seq`)).rows as any[];const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token1=await verifyEventChainRows(events,meta);\n if(token1.generation!==token0.generation||token1.event_head_hash!==token0.event_head_hash)throw new Error(\"EVENT_HISTORY_CHANGED_DURING_VERIFY\");\n if(Number(head.event_history_generation)!==token1.generation||String(head.event_history_head_sha256)!==token1.event_head_hash)throw new Error(\"HEAD_EVENT_HISTORY_STALE\");\n const finalCur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];if(Number(finalCur.version)!==Number(cur.version)||String(finalCur.head_sha256)!==String(cur.head_sha256))throw new Error(\"LINEAGE_HEAD_CHANGED_DURING_VERIFY\");\n const finalMeta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token2=assertToken({generation:finalMeta.generation,event_head_hash:finalMeta.event_head_hash});if(token2.generation!==token1.generation||token2.event_head_hash!==token1.event_head_hash)throw new Error(\"EVENT_HISTORY_CHANGED_BEFORE_ACCEPT\");\n await tx.commit();return {ok:true,version:Number(cur.version),head_sha256:String(cur.head_sha256),event_token:token2,members:members.length,edges:edges.length};\n }catch(e){try{await tx.rollback()}catch{};return {ok:false,reason:String((e as any)?.message??e)}}\n}\n\nexport async function __testReset(){await initLineage();await sqlite.batch([`DELETE FROM lineage_edges`,`DELETE FROM lineage_members`,`DELETE FROM lineage_snapshots`,`DELETE FROM lineage_heads`,`UPDATE lineage_current_head SET version=0,head_sha256='${\"0\".repeat(64)}' WHERE id=1`,`DELETE FROM succ_events`,`UPDATE succ_event_meta SET generation=0,event_head_hash='${\"0\".repeat(64)}' WHERE id=1`]);}\n",[179],"5601edbd-d905-4a3f-b9ea-23a5d50fe688","hash_references.ts","8220df60-b0a1-11f1-b56b-1607ee4eb77e",16,["D",1789434574233],"const enc=new TextEncoder();\nasync function sha256(s:string){return [...new Uint8Array(await crypto.subtle.digest('SHA-256',enc.encode(s)))].map(b=>b.toString(16).padStart(2,'0')).join('')}\nconst base='https://esm.town/v/mosadek/project-brain-successor-20260915-v1/';\nconst files=['program.ts','run_e001.ts','lineage_currentness_v1.ts','lineage_currentness_v1_test.ts','reference/val_native_kernel_v1.ts','reference/val_native_executor_prod.ts'];\nconst out:any[]=[];\nfor(const f of files){const r=await fetch(base+f);const t=await r.text();out.push({file:f,status:r.status,bytes:enc.encode(t).length,sha256:await sha256(t)})}\nconsole.log(JSON.stringify(out,null,2));\nexport default out;",[186],"b608c714-89cb-4d65-9b45-d117c84ac1e8","GENESIS.md","6dd79ad0-b0a1-11f1-9c45-1607ee4eb77e",["D",1789434280412],"# PROJECT BRAIN SUCCESSOR GENESIS V1\n\nStatus: NEW AUTHORITY CANDIDATE, NOT CONTINUATION OF DELETED CANONICAL HISTORY.\n\nPredecessor: `mosadek/project-brain-live-v1-durable`\nPredecessor project id: `df64bad7-8359-4eef-a1e2-4da70bc08aae`\nPredecessor state: soft-deleted 2026-09-15; exact database/history continuity is not claimed here.\n\n## Mission\n\nReach the first real verified superhero (`P_real: 0 -> 1`) in minimum wall-clock time while preserving correctness, evidence, $0 incremental spend, and recoverability.\n\n## Imported laws\n\n1. Correctness before speed; then minimize time-to-verified-goal.\n2. Discover/reuse before inventing.\n3. A SUPERHERO counts only after real independent execution, auditable identity, causal task assignment, consequential evidence, separate enforceable verification, durable incorporation, and recovery/replacement semantics.\n4. IDs, registrations, model calls, scripts, tabs, schedules, or self-reports never increment `P_real`.\n5. No self-certification or human-authority claim by CHAT agents.\n6. No routine Sprites. Zero incremental spend.\n7. Every action must directly increase verified superhero capacity, remove the current blocker, or provide information necessary to choose between those moves.\n8. Historical administrative state is not reconstructed unless required by a current proof obligation.\n\n## Recovery boundary\n\nImported knowledge must be either exact-copy/hash-bound, independently reproduced, or explicitly marked re-derived. The successor does not impersonate uninterrupted predecessor history.\n\n## Immediate frontier\n\nRebuild and adversarially verify the minimal lineage/currentness primitive from the accumulated counterexamples, then resume the cross-domain/frozen-controller/real-worker admission path to `P_real = 1`.\n",[193],"d92a4212-3057-4989-8f84-d011334e7d4c","CURRENTNESS_CANDIDATE_V1.json","2547caaa-b0a2-11f1-83f8-1607ee4eb77e",17,["D",1789434588171],"{\n \"schema\": \"PROJECT_BRAIN_SUCCESSOR_CURRENTNESS_CANDIDATE_V1\",\n \"authority_status\": \"CANDIDATE_ONLY\",\n \"predecessor_project_id\": \"df64bad7-8359-4eef-a1e2-4da70bc08aae\",\n \"p_real_increment\": 0,\n \"human_authority_approval\": false,\n \"independent_review_claimed\": false,\n \"additional_spend_usd\": 0,\n \"direct_sprites_calls\": 0,\n \"source\": {\n \"file\": \"lineage_currentness_v1.ts\",\n \"bytes\": 16551,\n \"sha256\": \"c11b5cf824485eb64b9ac700eef05f1983238fe05d7bcc98705f166f02f9a62c\"\n },\n \"builder_test\": {\n \"file\": \"lineage_currentness_v1_test.ts\",\n \"bytes\": 7123,\n \"sha256\": \"6a4ec60516becbf332488f15c74057f2fcbef2cb2cee92036b4caf87d56bbd7a\",\n \"result\": \"18/18 PASS\"\n },\n \"minimal_coordinator\": {\n \"file\": \"program.ts\",\n \"sha256\": \"9110e188a4362dd3ab9016baeb464ee2e62f695670415202b7b89e8bfd4a9612\",\n \"semantic_falsification\": \"PASS: caller-supplied positive verification cannot promote false result\"\n },\n \"known_defects_closed_by_design\": [\n \"implicit SQLite rowid identity\",\n \"mutable dedupe-derived member identity\",\n \"one-relation-per-member collapse\",\n \"dangling relation target acceptance\",\n \"retained-digest head-field forgery\",\n \"snapshot/head mix-and-match\",\n \"unbound exact creation-event identity\",\n \"caller-controlled event-history token provider\",\n \"event token type coercion\",\n \"partial DB commit across member/edge and event/head writes\"\n ],\n \"remaining_before_promotion\": [\n \"isolated clean-database replay on separate Val\",\n \"stronger TOCTOU/consumption-boundary falsification\",\n \"integration of coordinator task mutations and lineage publication into one transaction\",\n \"separate production integration falsification\"\n ]\n}\n",[199],"166104dd-854d-44d9-aa6c-084d3e715e0d","reference","76bc0190-b0a1-11f1-808e-1607ee4eb77e",3,["D",1789434295332],"directory",[206],"pulls","branches",38,"forks","envVars",{"_220":155,"_222":63},"connections",{"_220":63,"_221":63},"count","unfilledCount","emptyCount",{"_43":205,"_32":206,"_30":207,"_144":-5,"_41":42,"_40":208,"_146":59,"_38":277,"_13":63,"_33":210,"_35":-5,"_24":25,"_150":-5,"_236":278,"_27":279},{"_43":270,"_32":271,"_30":272,"_144":207,"_41":42,"_40":168,"_146":59,"_38":273,"_13":63,"_33":34,"_35":274,"_24":25,"_150":-5,"_236":275,"_27":276},{"_43":263,"_32":264,"_30":265,"_144":207,"_41":42,"_40":168,"_146":59,"_38":266,"_13":63,"_33":34,"_35":267,"_24":25,"_150":-5,"_236":268,"_27":269},{"_43":198,"_32":199,"_30":200,"_144":-5,"_41":42,"_40":201,"_146":59,"_38":260,"_13":63,"_33":20,"_35":203,"_24":25,"_150":-5,"_236":261,"_27":262},{"_43":192,"_32":193,"_30":194,"_144":-5,"_41":42,"_40":148,"_146":25,"_38":257,"_13":63,"_33":20,"_35":196,"_24":25,"_150":-5,"_236":258,"_27":259},{"_43":185,"_32":186,"_30":187,"_144":-5,"_41":42,"_40":188,"_146":25,"_38":254,"_13":148,"_33":34,"_35":190,"_24":25,"_150":-5,"_236":255,"_27":256},{"_43":178,"_32":179,"_30":180,"_144":-5,"_41":42,"_40":181,"_146":59,"_38":251,"_13":161,"_33":34,"_35":183,"_24":25,"_150":-5,"_236":252,"_27":253},{"_43":171,"_32":172,"_30":173,"_144":-5,"_41":42,"_40":174,"_146":25,"_38":248,"_13":155,"_33":34,"_35":176,"_24":25,"_150":-5,"_236":249,"_27":250},{"_43":163,"_32":164,"_30":165,"_144":-5,"_41":42,"_40":166,"_146":25,"_38":245,"_13":168,"_33":34,"_35":169,"_24":25,"_150":-5,"_236":246,"_27":247},{"_43":159,"_32":28,"_30":31,"_144":-5,"_41":42,"_40":14,"_146":25,"_38":242,"_13":161,"_33":34,"_35":37,"_24":25,"_150":-5,"_236":243,"_27":244},{"_43":152,"_32":153,"_30":154,"_144":-5,"_41":42,"_40":155,"_146":59,"_38":239,"_13":63,"_33":34,"_35":157,"_24":25,"_150":-5,"_236":240,"_27":241},{"_43":141,"_32":142,"_30":143,"_144":-5,"_41":42,"_40":145,"_146":59,"_38":235,"_13":148,"_33":34,"_35":149,"_24":25,"_150":-5,"_236":237,"_27":238},["D",1789434348372],"children",[],[142],["D",1789434287842],[],[153],["D",1789434792706],[],[28],["D",1789434750898],[],[164],["D",1789434542493],[],[172],["D",1789434456549],[],[179],["D",1789434574233],[],[186],["D",1789434280412],[],[193],["D",1789434588171],[],[199],"7b388c8c-436d-4800-8ca7-db9df1977116","val_native_kernel_v1.ts","01a0a298-8f52-7454-830e-554c40a2a890",["D",1789434302294],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst rootSqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nconst CHAT_UNPROVEN_ACTIVATION_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908\";\nasync function chatUnprovenActivation(){\n const t:any=await one(`SELECT state,result_event_id FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_ACTIVATION_TASK]);\n if(!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return{active:false,reason:\"ACTIVATION_TASK_NOT_AUTHORIZED_COMPLETE\"};\n const localSeq=Number(t.result_event_id)-PREDECESSOR_EVENTS;\n if(!Number.isInteger(localSeq)||localSeq<1)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_INVALID\"};\n const ev:any=await one(`SELECT agent_id,type,task_id FROM ${P}epoch_events WHERE local_seq=?`,[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==CHAT_UNPROVEN_ACTIVATION_TASK||!ev.agent_id)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_MISSING_OR_MISBOUND\"};\n const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[String(ev.agent_id)]);\n if(!a||String(a.type)===\"CHAT_UNPROVEN\")return{active:false,reason:\"CIRCULAR_CHAT_UNPROVEN_ACTIVATION_FORBIDDEN\",activator_agent_id:String(ev.agent_id)};\n return{active:true,reason:null,activator_agent_id:String(ev.agent_id),activator_type:String(a.type)};\n}\nasync function requireChatUnprovenActivation(){\n const a:any=await chatUnprovenActivation();\n return a.active===true?null:{ok:false,reason:\"CHAT_UNPROVEN_PROTOCOL_V5_NOT_ACTIVE\",activation:a,activation_task_id:CHAT_UNPROVEN_ACTIVATION_TASK,generation:await generation()};\n}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nconst RUNTIME_FOCUS_POLICY_CARRIER_TASK=\"BRAIN-RUNTIME-TEMPORARY-FOCUS-POLICY-CARRIER-P0-V1-20260910\";\nconst RUNTIME_FOCUS_POLICY_SCHEMA=\"BRAIN_RUNTIME_FOCUS_POLICY_V1\";\ntype RuntimeFocusPolicy={valid:boolean;active:boolean;allowed:Set;revision:number;source_sha256:string;reason:string|null};\nasync function runtimeFocusPolicy():Promise{\n const row:any=await one(`SELECT state,context_manifest FROM ${P}tasks WHERE id=?`,[RUNTIME_FOCUS_POLICY_CARRIER_TASK]);\n if(!row)return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_MISSING\"};\n let c:any;try{c=parseJson(row.context_manifest||\"{}\",\"FOCUS_POLICY\")}catch{return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CONTEXT_INVALID\"}}\n const allowed=Array.isArray(c.allowed_classes)&&c.allowed_classes.length>0&&c.allowed_classes.every((x:any)=>typeof x===\"string\"&&!!x)&&new Set(c.allowed_classes).size===c.allowed_classes.length?new Set(c.allowed_classes):null;\n const sourceSha=String(c.source_sha256||\"\").toLowerCase();\n const valid=String(row.state)===\"READY\"&&c.schema===RUNTIME_FOCUS_POLICY_SCHEMA&&c.execution_allowed===false&&typeof c.active===\"boolean\"&&Number.isInteger(c.revision)&&c.revision>=1&&typeof c.source_uri===\"string\"&&c.source_uri.startsWith(\"valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/\")&&HEX64.test(sourceSha)&&!!allowed;\n return valid?{valid:true,active:c.active,allowed:allowed!,revision:c.revision,source_sha256:sourceSha,reason:null}:{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_INVALID\"};\n}\nconst FOCUS_DIRECT_CLASSES=new Set([\"HARNESS\",\"RELEVANT_OPENAI_MECHANISM\"]);\nconst FOCUS_STRICT_CLASS=\"STRICT_NECESSARY_DEPENDENCY\";\nconst FOCUS_LIVE_TARGET_STATES=new Set([\"READY\",\"LEASED\",\"BLOCKED\"]);\nconst FOCUS_CAUSAL_STATES=new Set([\"READY\",\"LEASED\"]);\ntype FocusNormalizedTask={id:string;state:string;depends:string[];supported:boolean;executionAllowed:boolean;policyExact:boolean;cls:string;direct:boolean;strict:boolean};\ntype FocusSnapshot={ok:boolean;reason:string|null;byId:Map;cyclicStrict:Set;strictParents:Map};\nfunction focusObjectJson(raw:any){try{const v=JSON.parse(String(raw));return v&&typeof v===\"object\"&&!Array.isArray(v)?v:null}catch{return null}}\nfunction focusDepsJson(raw:any){try{const v=JSON.parse(String(raw));if(!Array.isArray(v)||v.some((x:any)=>typeof x!==\"string\"||!x)||new Set(v).size!==v.length)return null;return v as string[]}catch{return null}}\nfunction focusPolicyExact(ctx:any,policy:RuntimeFocusPolicy){const rev=Number(ctx?.temporary_focus_policy_revision),src=String(ctx?.temporary_focus_source_sha256||\"\").toLowerCase();return Number.isInteger(rev)&&rev===policy.revision&&src===policy.source_sha256}\nfunction buildFocusSnapshot(rows:any[],policy:RuntimeFocusPolicy):FocusSnapshot{\n const empty={ok:false,reason:\"FOCUS_SNAPSHOT_INVALID\",byId:new Map(),cyclicStrict:new Set(),strictParents:new Map()};\n if(!policy.valid||!Array.isArray(rows))return empty;\n const counts=new Map();for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(id)counts.set(id,(counts.get(id)||0)+1)}\n const byId=new Map();\n for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(!id||counts.get(id)!==1)continue;const ctx=focusObjectJson(r.context_manifest),deps=focusDepsJson(r.depends_json),state=typeof r.state===\"string\"?r.state:\"\",cls=ctx&&typeof ctx.temporary_focus_classification===\"string\"?ctx.temporary_focus_classification:\"\";const supported=!!ctx&&deps!==null&&typeof ctx.execution_allowed===\"boolean\"&&typeof ctx.temporary_focus_classification===\"string\"&&Number.isInteger(ctx.temporary_focus_policy_revision)&&typeof ctx.temporary_focus_source_sha256===\"string\";byId.set(id,{id,state,depends:deps||[],supported,executionAllowed:ctx?.execution_allowed===true,policyExact:!!ctx&&focusPolicyExact(ctx,policy),cls,direct:FOCUS_DIRECT_CLASSES.has(cls),strict:cls===FOCUS_STRICT_CLASS})}\n const graph=new Map();\n for(const t of byId.values())if(FOCUS_CAUSAL_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&(t.direct||t.strict))graph.set(t.id,t.depends.filter(d=>byId.has(d)));\n const cyclicStrict=new Set(),nodeCount=graph.size;\n for(const t of byId.values())if(t.strict&&graph.has(t.id)){const seen=new Set([t.id]),stack=[...(graph.get(t.id)||[])];let steps=0;while(stack.length&&steps++<=nodeCount+1){const x=stack.pop()!;if(x===t.id){cyclicStrict.add(t.id);break}if(seen.has(x)||!graph.has(x))continue;seen.add(x);for(const d of graph.get(x)||[])stack.push(d)}}\n const strictParents=new Map();\n for(const p of byId.values())if(graph.has(p.id)){for(const d of graph.get(p.id)||[]){const child=byId.get(d);if(!child?.strict||cyclicStrict.has(d))continue;const a=strictParents.get(d)||[];a.push(p.id);strictParents.set(d,a)}}\n for(const a of strictParents.values())a.sort();return{ok:true,reason:null,byId,cyclicStrict,strictParents}\n}\nfunction focusTaskDecision(taskId:string,policy:RuntimeFocusPolicy,snap:FocusSnapshot){\n if(!policy.valid||!snap.ok)return{allowed:false,reason:policy.valid?snap.reason:\"FOCUS_POLICY_INVALID\",roots:[] as string[]};const t=snap.byId.get(taskId);if(!t)return{allowed:false,reason:\"TARGET_ID_NOT_UNIQUE_OR_MISSING\",roots:[] as string[]};\n if(!policy.active)return FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed?{allowed:true,reason:\"FOCUS_INACTIVE\",roots:[] as string[]}:{allowed:false,reason:\"TARGET_CANONICAL_SHAPE_OR_EXECUTION_INVALID\",roots:[] as string[]};\n if(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.direct)return{allowed:true,reason:\"DIRECT_FOCUS_CLASS\",roots:[t.id]};\n if(!(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.strict))return{allowed:false,reason:\"FOCUS_CLASS_OR_BINDING_REJECTED\",roots:[] as string[]};\n if(!FOCUS_CAUSAL_STATES.has(t.state))return{allowed:false,reason:\"STRICT_TARGET_NOT_CAUSALLY_LIVE\",roots:[] as string[]};if(snap.cyclicStrict.has(t.id))return{allowed:false,reason:\"STRICT_TARGET_CYCLIC\",roots:[] as string[]};\n const roots=new Set(),seen=new Set([t.id]),q=[t.id];let steps=0,max=Math.max(1,snap.byId.size+1);\n while(q.length&&steps++<=max){const x=q.shift()!;for(const p of snap.strictParents.get(x)||[]){const pt=snap.byId.get(p);if(!pt||!FOCUS_CAUSAL_STATES.has(pt.state)||!pt.supported||!pt.executionAllowed||!pt.policyExact)continue;if(pt.direct){roots.add(pt.id);continue}if(pt.strict&&!snap.cyclicStrict.has(pt.id)&&!seen.has(pt.id)){seen.add(pt.id);q.push(pt.id)}}}\n const rs=[...roots].sort();return rs.length?{allowed:true,reason:\"STRICT_CAUSAL_PATH_QUALIFIED\",roots:rs}:{allowed:false,reason:\"STRICT_CAUSAL_PATH_NOT_QUALIFIED\",roots:rs};\n}\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\ntype NoReadyReason=\"MISSING_DEDUPE\"|\"ASSIGNED_OTHER\"|\"FOCUS_POLICY_INVALID\"|\"TEMPORARY_FOCUS_INELIGIBLE\"|\"EXECUTION_DISABLED\"|\"CHAT_UNPROVEN_INDEPENDENCE\"|\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\"|\"NON_AGENT_REQUIREMENT\"|\"MISSING_CAPABILITY\"|\"DEPENDENCY_UNSATISFIED\"|\"GUARD_UNSATISFIED\"|\"WRITE_CONFLICT\";\nconst NO_READY_REASONS:NoReadyReason[]=[\"MISSING_DEDUPE\",\"ASSIGNED_OTHER\",\"FOCUS_POLICY_INVALID\",\"TEMPORARY_FOCUS_INELIGIBLE\",\"EXECUTION_DISABLED\",\"CHAT_UNPROVEN_INDEPENDENCE\",\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\",\"NON_AGENT_REQUIREMENT\",\"MISSING_CAPABILITY\",\"DEPENDENCY_UNSATISFIED\",\"GUARD_UNSATISFIED\",\"WRITE_CONFLICT\"];\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n const focusPolicy=await runtimeFocusPolicy(),focusRows:any[]=(await sqlite.execute(`SELECT id,state,depends_json,context_manifest FROM ${P}tasks ORDER BY rowid`)).rows as any[],focusSnap=buildFocusSnapshot(focusRows,focusPolicy);\n const reasonCounts:Record=Object.fromEntries(NO_READY_REASONS.map(x=>[x,0])) as Record;let highest:any=null,readyRowsSeen=0;\n const reject=(r:any,reason:NoReadyReason)=>{reasonCounts[reason]++;if(highest===null){const p=Number(r.priority);highest={task_id:String(r.id).slice(0,200),priority:Number.isFinite(p)?p:null,reason}}};\n for(const r of q.rows||[]){\n readyRowsSeen++;\n if(!r.dedupe_key){reject(r,\"MISSING_DEDUPE\");continue}if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId){reject(r,\"ASSIGNED_OTHER\");continue}\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n const focusDecision=focusTaskDecision(String(r.id),focusPolicy,focusSnap);if(!focusDecision.allowed){reject(r,focusPolicy.valid?\"TEMPORARY_FOCUS_INELIGIBLE\":\"FOCUS_POLICY_INVALID\");continue}\n if(ctx.execution_allowed===false){reject(r,\"EXECUTION_DISABLED\");continue}const independenceSensitive=unprovenIndependenceSensitive(req,ctx);if(independenceSensitive&&unproven){reject(r,\"CHAT_UNPROVEN_INDEPENDENCE\");continue}if(independenceSensitive&&EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true){reject(r,\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\");continue}if([...req].some(x=>NON_AGENT.has(x))){reject(r,\"NON_AGENT_REQUIREMENT\");continue}if([...req].some(x=>!C.has(x))){reject(r,\"MISSING_CAPABILITY\");continue}\n if(!await depsSatisfied(r)){reject(r,\"DEPENDENCY_UNSATISFIED\");continue}if(!await guardsSatisfied(r,agentId)){reject(r,\"GUARD_UNSATISFIED\");continue}if(await writeConflict(r)){reject(r,\"WRITE_CONFLICT\");continue}return{task:r,no_ready_diagnostics:null}\n }\n return{task:null,no_ready_diagnostics:{schema:\"NO_READY_TASK_EXPLANATION_V7\",frontier_class:readyRowsSeen===0?\"TRUE_EMPTY_FRONTIER\":\"ALL_READY_ROWS_REJECTED\",ready_rows_seen:readyRowsSeen,reason_counts:reasonCounts,highest_priority_rejected:highest,focus_policy:{valid:focusPolicy.valid,active:focusPolicy.active,revision:focusPolicy.revision,reason:focusPolicy.reason}}}\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nasync function register(args:string[]){\n if(args.length<2)throw new Error(\"REGISTER_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),role=String(f.role||\"\"),type=String(f.type||\"\"),parent=f.parent??null,caps=cleanCaps(parseJson(f.capabilities||\"[]\",\"CAPS\"));\n if(!ws||!role||!type)throw new Error(\"REGISTER_FIELDS_REQUIRED\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(type===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}\n if(parent){if(String(parent)===id)throw new Error(\"AGENT_CANNOT_PARENT_SELF\");const pr:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[parent]);if(!pr)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(String(pr.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_PARENT\")}\n const ex:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(ex){const same=String(ex.workstream)===ws&&String(ex.role)===role&&String(ex.type)===type&&(ex.parent_id??null)===(parent??null)&&String(ex.capabilities_json)===canon(caps);if(!same)throw new Error(\"AGENT_REJOIN_IDENTITY_MISMATCH\");await sqlite.execute({sql:`UPDATE ${P}agents SET last_seen=? WHERE id=?`,args:[now(),id]});return{ok:true,created:false,agent_id:id,generation:await generation()}}\n const g0=await generation();await sqlite.execute({sql:`INSERT INTO ${P}agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES(?,?,?,?,?,'READY',?,?,?,?)`,args:[id,parent,type,ws,role,g0,g0,now(),canon(caps)]});await appendEvent(ws,id,null,\"AGENT_REGISTERED\",{type,role,parent,boot_generation:g0,capabilities:caps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=? WHERE id=?`,args:[ng,id]});return{ok:true,created:true,agent_id:id,generation:ng}\n}\nasync function ensureTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");if(!ws||!dedupe)throw new Error(\"ENSURE_FIELDS_REQUIRED\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));\n if(!Array.isArray(deps)||!ctx||Array.isArray(ctx)||!Array.isArray(req))throw new Error(\"BAD_JSON_SHAPE\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing)return{ok:true,created:false,task_id:existing.id,state:existing.state,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe};\n if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority);if(!Number.isFinite(priority))throw new Error(\"BAD_PRIORITY\");\n await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,NULL,NULL,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,canon(writes),canon(guards)]});\n await appendEvent(ws,f.agent??null,id,\"TASK_CREATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe}\n}\nasync function claim(args:string[]){\n const f=flags(args,1),id=String(f.agent||\"\"),mode=String(f.mode||\"INTERACTIVE\"),secs=f[\"lease-seconds\"]===undefined?(mode===\"INTERACTIVE\"?1800:900):Number(f[\"lease-seconds\"]);if(!id)throw new Error(\"AGENT_REQUIRED\");if(![\"INTERACTIVE\",\"PROCESS\"].includes(mode)||secs<60||secs>7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.type)===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task===CHAT_UNPROVEN_ACTIVATION_TASK){const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agent]);if(String(a?.type||\"\")===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\"}}}if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,claim_id:id,statement_sha256:h,generation:ng}\n}\nasync function invalidateClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),reason=String(f.reason||\"\"),agent=f.agent??null;const root:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[id]);if(!root)throw new Error(\"UNKNOWN_CLAIM\");const todo=[id],seen=new Set(),changed:any[]=[];\n while(todo.length){const q=String(todo.pop());if(seen.has(q))continue;seen.add(q);const row:any=await one(`SELECT status FROM ${P}claims WHERE id=?`,[q]);if(row&&![\"FALSIFIED\",\"STALE\"].includes(String(row.status))){const ns=q===id?\"FALSIFIED\":\"STALE\";await sqlite.execute({sql:`UPDATE ${P}claims SET status=?,invalidated_by=?,updated_at=? WHERE id=?`,args:[ns,id,now(),q]});changed.push([q,ns])}const kids:any[]=(await sqlite.execute({sql:`SELECT child_claim FROM ${P}claim_deps WHERE parent_claim=?`,args:[q]})).rows as any[];for(const k of kids)todo.push(String(k.child_claim))}\n await appendEvent(String(root.workstream),agent,null,\"CLAIM_INVALIDATED\",{root_claim:id,reason,affected:changed});const propagated=await propagateImpossible(String(root.workstream),agent,{type:\"claim_invalidated\",claim_id:id,reason});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),root.workstream]});return{ok:true,root_claim:id,affected:changed,generation:ng,propagated_blocked:propagated}\n}\nasync function recordExternalArtifact(args:string[]){\n const spec=parseExternalArtifactSpec(args);\n const ws:any=await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[spec.workstream]);if(!ws)throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(spec.agent!==null){const a:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[spec.agent]);if(!a)throw new Error(\"UNKNOWN_ARTIFACT_AGENT\");if(String(a.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_AGENT\")}\n if(spec.task!==null){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[spec.task]);if(!t)throw new Error(\"UNKNOWN_ARTIFACT_TASK\");if(String(t.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_TASK\")}\n const integrity=await verifyExternalArtifactBlobBytes(spec);\n const found:any=await sqlite.execute({sql:`SELECT sha256,size,logical_name,producer_agent,task_id,storage_json FROM ${P}artifacts WHERE lower(sha256)=?`,args:[spec.sha256]});\n const rows:any[]=found.rows||[];if(rows.length>1)throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_CANONICAL_ROWS\");\n const decision=externalArtifactExistingDecision(rows[0]??null,spec);\n if(decision.kind===\"CONFLICT\")throw new Error(decision.reason);\n if(decision.kind===\"ALREADY_RECORDED\")return{ok:true,created:false,already_recorded:true,sha256:spec.sha256,generation:await generation(),semantic_generation_unchanged:true,integrity};\n const t=now();\n await sqlite.execute({sql:`INSERT INTO ${P}artifacts(sha256,size,logical_name,producer_agent,task_id,storage_json,created_at) VALUES(?,?,?,?,?,?,?)`,\n args:[spec.sha256,spec.size,spec.name,spec.agent,spec.task,canon([spec.uri]),t]});\n const payload={sha256:spec.sha256,size:spec.size,logical_name:spec.name,storage_uri:spec.uri,producer_agent:spec.agent,task_id:spec.task};\n const ev=await appendEvent(spec.workstream,spec.agent,spec.task,\"EXTERNAL_ARTIFACT_RECORDED\",payload);\n const ng=await bump();\n await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),spec.workstream]});\n return{ok:true,created:true,already_recorded:false,sha256:spec.sha256,generation:ng,event_id:PREDECESSOR_EVENTS+Number(ev.seq),event_hash:ev.event_hash,integrity};\n}\n\nasync function commitFull(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId||![\"COMPLETE\",\"INVALID\",\"BLOCKED\"].includes(state))throw new Error(\"BAD_COMMIT\");const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT_FORBIDDEN\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)g?.type===EXECUTION_DISTINCT_GUARD))throw new Error(\"CHAT_UNPROVEN_INDEPENDENCE_COMMIT_FORBIDDEN\");\n payload={...payload,contributor_trust_class:\"CHAT_UNPROVEN\",contributor_agent_type:\"CHAT_UNPROVEN\",independence_eligible:false,p_real_eligible:false};\n }else if(payload&&typeof payload===\"object\"&&!Array.isArray(payload)&&reserved.some(k=>Object.prototype.hasOwnProperty.call(payload,k))){\n throw new Error(\"CALLER_CONTROLLED_TRUST_METADATA_FORBIDDEN\");\n }\n const ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_RESULT_COMMITTED\",payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);await sqlite.execute({sql:`UPDATE ${P}tasks SET state=?,result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=?`,args:[state,eid,now(),taskId]});let propagated:any[]=[];if([\"INVALID\",\"BLOCKED\"].includes(state))propagated=await propagateImpossible(String(task.workstream),agent,{type:\"task_terminal\",task_id:taskId,state});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET status='READY',last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,generation:ng,event_id:eid,propagated_blocked:propagated}\n}\nconst CHECKPOINT_STATE_TABLES=[\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"task_context_history\",\"task_invariant_history\"];\nfunction checkpointSortedRows(rows:any[]){return [...(rows||[])].sort((a:any,b:any)=>canon(a).localeCompare(canon(b)))}\nasync function checkpointStateView(){\n const m:any=await meta(),tables:any={};\n for(const t of CHECKPOINT_STATE_TABLES)tables[t]=checkpointSortedRows((await sqlite.execute(`SELECT * FROM ${P}${t}`)).rows||[]);\n const events=(await sqlite.execute(`SELECT * FROM ${P}epoch_events ORDER BY local_seq`)).rows||[];\n const stateSha256=await sha(canon({epoch_meta:m,events,state:tables}));\n return{m,tables,events,state_sha256:stateSha256};\n}\nasync function captureCheckpointSnapshot(){\n return await withTransaction(\"read\",async()=>{\n const v:any=await checkpointStateView();\n const payload={schema:\"BRAIN_VAL_NATIVE_SNAPSHOT_V2\",lineage:{predecessor_generation:v.m.predecessor_generation,predecessor_event_count:v.m.predecessor_event_count,predecessor_head:v.m.predecessor_head},epoch_meta:v.m,events:v.events,state:v.tables,state_sha256:v.state_sha256,exported_at:now()};\n const raw=JSON.stringify(payload,null,2)+\"\\n\",h=await sha(raw),key=`snapshots/val_native/brain_snapshot_epoch${v.m.epoch}_g${v.m.generation}_${h.slice(0,16)}.json`;\n return{...v,raw,snapshot_sha256:h,key};\n });\n}\nasync function checkpointNativeBound(payloadJson:string,c:BoundTransportContext){\n const cmd=\"checkpoint\";\n const captured:any=await withTransaction(\"read\",async()=>{\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return{early:pre};\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return{early:prior};\n return await captureCheckpointSnapshot();\n });\n if(captured.early!==undefined)return captured.early;\n await blob.set(captured.key,captured.raw);\n const rb:any=await blob.get(captured.key),rbRaw=await rb.text(),rbSha=await sha(rbRaw);\n if(rbRaw!==captured.raw||rbSha!==captured.snapshot_sha256)throw new Error(\"CHECKPOINT_BLOB_READBACK_MISMATCH\");\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return prior;\n const current:any=await checkpointStateView();\n if(String(current.state_sha256)!==String(captured.state_sha256))return{ok:false,reason:\"CHECKPOINT_CAPTURE_STALE\",captured_generation:Number(captured.m.generation),current_generation:Number(current.m.generation),captured_event_head_hash:String(captured.m.event_head_hash),current_event_head_hash:String(current.m.event_head_hash),captured_state_sha256:String(captured.state_sha256),current_state_sha256:String(current.state_sha256),orphan_blob_noncanonical:true,orphan_blob_uri:`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`};\n const id=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}replicas`)).n),uri=`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`;\n await sqlite.execute({sql:`INSERT INTO ${P}replicas(id,generation,provider,uri,snapshot_sha256,event_head_hash,verified,created_at) VALUES(?,?,?,?,?,?,1,?)`,args:[id,Number(captured.m.generation),\"val-town-native\",uri,String(captured.snapshot_sha256),String(captured.m.event_head_hash),now()]});\n const post:any=await boundTransportGuard(c,payloadJson,cmd);if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_CHECKPOINT_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n const result={ok:true,generation:Number(captured.m.generation),durability_lag_generations:Number(current.m.generation)-Number(captured.m.generation),snapshot_sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),event_head_hash:String(captured.m.event_head_hash),uri,attempts:[{attempt:1,generation:Number(captured.m.generation),sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),size:enc.encode(captured.raw).length,ok:true,uri,lag_after_ack:Number(current.m.generation)-Number(captured.m.generation)}],orphan_blob_policy:\"CONTENT_ADDRESSED_BLOB_HAS_NO_CANONICAL_CHECKPOINT_MEANING_UNTIL_REPLICA_ROW_AND_BOUND_MUTATION_RECEIPT_COMMIT\"};\n const m:any=await meta(),payloadSha=await sha(payloadJson);\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[c.job_id,c.lease_attempt_id,c.lease_instance_id,c.lease_owner,c.transport_lease_generation,c.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\nfunction transportContextShapeOk(c:any):c is BoundTransportContext{\n return !!c&&typeof c===\"object\"&&!Array.isArray(c)&&\n typeof c.job_id===\"string\"&&!!c.job_id&&\n Number.isInteger(c.transport_lease_generation)&&c.transport_lease_generation>=1&&\n typeof c.lease_owner===\"string\"&&!!c.lease_owner&&\n typeof c.lease_instance_id===\"string\"&&!!c.lease_instance_id&&\n typeof c.lease_attempt_id===\"string\"&&!!c.lease_attempt_id&&\n Number.isInteger(c.authority_epoch)&&c.authority_epoch>=1&&\n typeof c.payload_json===\"string\"&&!!c.payload_json;\n}\nasync function boundTransportGuard(c:BoundTransportContext,payloadJson:string,cmd:string){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n if(!authority||Number(authority.epoch)!==c.authority_epoch||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_AUTHORITY_FENCED\",command:cmd,authority:authority??null};\n }\n const job:any=await one(`SELECT id,op,payload_json,state,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM brain_bridge_jobs\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND lease_expires_at>datetime('now')`,\n [c.job_id,c.lease_owner,c.lease_instance_id,c.lease_attempt_id,c.transport_lease_generation]);\n if(!job)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_ATTEMPT_FENCED\",command:cmd,job_id:c.job_id};\n if(String(job.op)!==\"brain\")return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_OP_MISMATCH\",command:cmd,job_id:c.job_id};\n if(String(job.payload_json)!==c.payload_json||payloadJson!==c.payload_json)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_PAYLOAD_MISMATCH\",command:cmd,job_id:c.job_id};\n return{ok:true,authority,job};\n}\nasync function existingBoundReceipt(c:BoundTransportContext,payloadJson:string,cmd:string){\n const r:any=await one(`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,result_json\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[c.job_id,c.lease_attempt_id]);\n if(!r)return null;\n const psha=await sha(payloadJson);\n if(String(r.lease_instance_id)!==c.lease_instance_id||String(r.lease_owner)!==c.lease_owner||\n Number(r.transport_lease_generation)!==c.transport_lease_generation||Number(r.authority_epoch)!==c.authority_epoch||\n String(r.command)!==cmd||String(r.payload_sha256)!==psha)throw new Error(\"MUTATION_RECEIPT_BINDING_MISMATCH\");\n return parseJson(r.result_json,\"MUTATION_RECEIPT_RESULT\");\n}\nasync function dispatchFull(payloadJson:string,transportContext?:BoundTransportContext){\n const q=parseJson(payloadJson,\"PAYLOAD\");if(!exactTop(q))throw new Error(\"PAYLOAD_SCHEMA_NOT_CLOSED\");const cmd=String(q.args[0]);\n const full=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"delegate-task\",\"claim\",\"renew-lease\",\"commit\",\"checkpoint\",\"add-claim\",\"invalidate-claim\",\"supersede-task-context\",\"migrate-task-invariants\",\"reconcile-causal-blocks\",\"recover-stale\",\"record-external-artifact\"]);if(!full.has(cmd))throw new Error(\"BRAIN_SUBCOMMAND_NOT_ALLOWED\");\n const invoke=async(argsOverride?:any[])=>{\n const a=argsOverride??q.args;\n if(cmd===\"status\")return await status();if(cmd===\"verify-chain\")return await verifyChain();if(cmd===\"verify-claim-graph\")return await verifyClaimGraph();if(cmd===\"register-agent\")return await register(a);if(cmd===\"ensure-task\")return await ensureTask(a);if(cmd===\"delegate-task\")return await delegateTask(a);if(cmd===\"claim\")return await claim(a);if(cmd===\"renew-lease\")return await renew(a);if(cmd===\"commit\")return await commitFull(a);if(cmd===\"checkpoint\")return await checkpointNative();if(cmd===\"add-claim\")return await addClaimFull(a);if(cmd===\"invalidate-claim\")return await invalidateClaimFull(a);if(cmd===\"supersede-task-context\")return await supersedeContext(a);if(cmd===\"migrate-task-invariants\")return await migrateInvariants(a);if(cmd===\"reconcile-causal-blocks\")return await reconcileCausal(a);if(cmd===\"record-external-artifact\")return await recordExternalArtifact(a);if(cmd===\"recover-stale\"){if(a.length!==1)throw new Error(\"RECOVER_STALE_ARGS_INVALID\");return await recover()}throw new Error(\"UNREACHABLE\");\n };\n if(READ_ONLY_COMMANDS.has(cmd))return await withTransaction(\"read\",()=>invoke());\n const emergencyCanary=transportContextShapeOk(transportContext)&&transportContext.job_id===EMERGENCY_MUTATION_CANARY_JOB_ID;\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_EMERGENCY_FROZEN\",command:cmd,authority:authority??null};\n }\n if(!REACTIVATION_MUTATION_ALLOWLIST.has(cmd))return{ok:false,reason:\"VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED\",command:cmd};\n if(!transportContextShapeOk(transportContext))return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_CONTEXT_REQUIRED\",command:cmd};\n if(cmd===\"checkpoint\")return await checkpointNativeBound(payloadJson,transportContext);\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n await ensureMutationRetryAuthTable();\n const pre:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(transportContext,payloadJson,cmd);\n if(prior!==null)return prior;\n const payloadSha=await sha(payloadJson);\n let result:any=null,retriableStale=false;\n const req:any=transportContext.stable_retry_request;\n if(cmd!==\"commit\"&&(transportContext.stable_retry_probe!==undefined||req!==undefined)){\n result={ok:false,reason:\"STABLE_RETRY_METADATA_NONCOMMIT_FORBIDDEN\",command:cmd};\n }else if(cmd===\"commit\"&&req!==undefined){\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n if(!stableRetryRequestOk(req)||originalExpected===null){\n result={ok:false,reason:\"STABLE_RETRY_REQUEST_INVALID\"};\n }else{\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n const bindingOk=!!ar&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&String(ar.lease_owner)===transportContext.lease_owner&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation&&Number(ar.authority_epoch)===transportContext.authority_epoch&&\n String(ar.command)===\"commit\"&&String(ar.payload_sha256)===payloadSha&&Number(ar.stale_expected_workstream_generation)===originalExpected&&\n String(ar.stable_snapshot_sha256)===String(req.stable_snapshot_sha256)&&Number(req.from_expected_workstream_generation)===originalExpected&&\n Number(req.retry_index)===Number(ar.retry_count)+1;\n if(!bindingOk){\n result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_FENCED\"};\n }else{\n const u:any=await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE}\n SET retry_count=retry_count+1,updated_at=? WHERE job_id=? AND lease_attempt_id=? AND retry_count=? RETURNING retry_count`,\n args:[now(),transportContext.job_id,transportContext.lease_attempt_id,Number(ar.retry_count)]});\n if(!(u.rows||[]).length)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_RACE\"};\n else{\n result=await invoke(withCommitExpectedWorkstreamGeneration(q.args,Number(req.to_expected_workstream_generation)));\n if(result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n retriableStale=true;\n if(Number.isInteger(Number(result.actual)))await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE} SET observed_workstream_generation=?,updated_at=? WHERE job_id=? AND lease_attempt_id=?`,\n args:[Number(result.actual),now(),transportContext.job_id,transportContext.lease_attempt_id]});\n }else{\n // Keep the exact-attempt authorization row as immutable-ish audit evidence.\n // The successful mutation receipt is the idempotent completion authority;\n // deleting this row is unnecessary and conflicts with canonical no-delete hardening.\n }\n }\n }\n }\n }else{\n result=await invoke();\n if(cmd===\"commit\"&&result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n const probe:any=transportContext.stable_retry_probe;\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n const eligible=stableRetryProbeOk(probe)&&probe.retry_guard_snapshot_complete===true&&originalExpected!==null&&\n Number(result.expected)===originalExpected&&Number.isInteger(Number(result.actual));\n if(eligible){\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${MUTATION_RETRY_AUTH_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,\n stale_expected_workstream_generation,observed_workstream_generation,stable_snapshot_sha256,retry_count,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,\"commit\",payloadSha,originalExpected,Number(result.actual),\n probe.stable_snapshot_sha256,0,now(),now()]});\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n retriableStale=!!ar&&String(ar.payload_sha256)===payloadSha&&String(ar.stable_snapshot_sha256)===probe.stable_snapshot_sha256&&\n Number(ar.stale_expected_workstream_generation)===originalExpected&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation;\n if(!retriableStale)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_CONFLICT\"};\n }\n }\n }\n const post:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n if(retriableStale)return{...result,stable_retry_authorized:true};\n const m:any=await meta();\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\n\n\nasync function brainStatusSafe(){return await withTransaction(\"read\",()=>status())}\nasync function verifyBrainChainSafe(){return await withTransaction(\"read\",()=>verifyChain())}\nasync function verifyBrainClaimGraphSafe(){return await withTransaction(\"read\",()=>verifyClaimGraph())}\nasync function checkpointBrainNativeSafe(){return await dispatchFull(JSON.stringify({args:[\"checkpoint\"],timeout:120}))}\nasync function recoverBrainStaleSafe(){return await dispatchFull(JSON.stringify({args:[\"recover-stale\"],timeout:120}))}\nasync function registerBrainAgentSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function claimBrainTaskSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function brainGenerationSafe(){return await withTransaction(\"read\",()=>generation())}\n\nexport {\n dispatchFull as dispatchBrain,\n brainStatusSafe as brainStatus,\n verifyBrainChainSafe as verifyBrainChain,\n verifyBrainClaimGraphSafe as verifyBrainClaimGraph,\n checkpointBrainNativeSafe as checkpointBrainNative,\n recoverBrainStaleSafe as recoverBrainStale,\n registerBrainAgentSafe as registerBrainAgent,\n claimBrainTaskSafe as claimBrainTask,\n brainGenerationSafe as brainGeneration\n};\n",[],[206,264],"4e3083bf-038a-427d-ad14-7074c11fee28","val_native_executor_prod.ts","01a0a298-8f52-7454-830e-59a82280eb04",["D",1789434302294],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst sqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { leaseOneSql } from \"./brain_bridge_worker.ts\";\nimport { classifyValidCoalesceResult } from \"./brain_bridge_readonly_coalesce_v4.ts\";\nimport { dispatchBrain, verifyBrainChain, verifyBrainClaimGraph } from \"./val_native_kernel_v1.ts\";\n\nconst JOB_TABLE=\"brain_bridge_jobs\";\nconst AUTH_TABLE=\"brain_control_plane_authority_v1\";\n// A unique module query-string creates an independent worker incarnation inside the\n// same Val runtime. The default preserves the canonical executor identity.\nconst moduleUrl=new URL(import.meta.url);\nconst WORKER=moduleUrl.searchParams.get(\"worker\")||\"project-brain-val-native-v1\";\nconst INSTANCE=moduleUrl.searchParams.get(\"instance\")||\"val-native-epoch2\";\nconst LEASE_SECONDS=180;\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst RUNTIME_TICK_TABLE=\"val_native_executor_runtime_v1\";\nconst RUNTIME_TICK_TTL_SECONDS=300;\nconst PRELEASE_RANK_RECEIPT_TABLE=\"brain_bridge_prelease_rank_receipts_v1\";\n// R8K2 installs in two phases: helpers first, then only enable after the exact\n// rebased source passes remote Deno/libSQL qualification and production readback.\nconst PRELEASE_READ_COALESCE_V1_ENABLED=false;\nasync function ensureMutationReceiptTable(db:any=sqlite){\n await db.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction safeSqlTableV1(t:string){\n if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(t))throw new Error(\"BAD_TABLE\");\n return t;\n}\nfunction canonicalJsonV1(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canonicalJsonV1).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canonicalJsonV1(x[k])).join(\",\")+\"}\";\n}\nexport async function ensurePreleaseRankReceiptTableV1(db:any=sqlite,table=PRELEASE_RANK_RECEIPT_TABLE){\n table=safeSqlTableV1(table);\n await db.execute(`CREATE TABLE IF NOT EXISTS ${table}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n rank0_id TEXT NOT NULL,\n rank1_id TEXT,\n rank_snapshot_sha256 TEXT NOT NULL,\n created_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nexport function orderedReadyTop2SqlV1(table=JOB_TABLE){\n table=safeSqlTableV1(table);\n const raw=leaseOneSql(table);\n const marker=`SELECT j.id FROM ${table} j`;\n const start=raw.indexOf(marker);\n const end=raw.indexOf(\"\\n LIMIT 1\",start);\n if(start<0||end<0)throw new Error(\"PRELEASE_SELECTOR_SHAPE_DRIFT\");\n const selector=raw.slice(start,end).replace(marker,`SELECT j.rowid AS queue_rowid,j.* FROM ${table} j`);\n if((selector.match(/\\?/g)||[]).length!==1)throw new Error(\"PRELEASE_SELECTOR_PLACEHOLDER_DRIFT\");\n return selector+\"\\n LIMIT 2\";\n}\nexport async function acquireWithPreleaseRankReceiptV1(db:any,opts:{qTable?:string;rTable?:string;worker:string;instance:string;attempt:string;injectReceiptFailure?:boolean}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const active:any=await tx.execute(`SELECT id FROM ${q} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id LIMIT 2`);\n const activeRows:any[]=active.rows||[];\n if(activeRows.length>1){await tx.rollback();done=true;return {kind:\"conflict\",active:activeRows}}\n if(activeRows.length===1){await tx.rollback();done=true;return {kind:\"busy\",active:activeRows[0]}}\n const ranked:any=await tx.execute({sql:orderedReadyTop2SqlV1(q),args:[opts.worker]});\n const rows:any[]=ranked.rows||[];\n if(!rows.length){await tx.rollback();done=true;return {kind:\"empty\"}}\n const leader=rows[0],follower=rows[1]??null;\n const u:any=await tx.execute({sql:`UPDATE ${q}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(SELECT 1 FROM ${q} x WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now'))\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[opts.worker,opts.instance,opts.attempt,String(leader.id)]});\n const leased:any=u.rows?.[0]??null;if(!leased)throw new Error(\"PRELEASE_LEASE_CAS_FAILED\");\n const snap={\n rank0:{id:String(leader.id),op:String(leader.op),payload_json:String(leader.payload_json),priority:Number(leader.priority),created_at:String(leader.created_at)},\n rank1:follower?{id:String(follower.id),op:String(follower.op),payload_json:String(follower.payload_json),priority:Number(follower.priority),created_at:String(follower.created_at)}:null,\n };\n const rankSnapshotSha256=await sha256Text(canonicalJsonV1(snap));\n await tx.execute({sql:`INSERT INTO ${r}(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,rank0_id,rank1_id,rank_snapshot_sha256,created_at)\n VALUES(?,?,?,?,?,?,?,?,datetime('now'))`,args:[String(leased.id),opts.attempt,opts.instance,opts.worker,Number(leased.transport_lease_generation),String(leader.id),follower?String(follower.id):null,opts.injectReceiptFailure?\"INVALID\":rankSnapshotSha256]});\n if(opts.injectReceiptFailure)throw new Error(\"INJECTED_PRELEASE_RECEIPT_FAILURE\");\n await tx.commit();done=true;\n return {kind:\"leased\",job:leased,rank0:String(leader.id),rank1:follower?String(follower.id):null,rank_snapshot_sha256:rankSnapshotSha256};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nfunction exactObjectKeysV1(v:any,keys:string[]){\n if(!v||typeof v!==\"object\"||Array.isArray(v))return false;\n const a=Object.keys(v).sort(),b=[...keys].sort();\n return a.length===b.length&&a.every((x,i)=>x===b[i]);\n}\nexport function classifyValNativeCoalesceResultV1(resultJson:string){\n let r:any;try{r=JSON.parse(resultJson)}catch{return null}\n if(!exactObjectKeysV1(r,[\"returncode\",\"stderr\",\"stdout\"]))return null;\n return classifyValidCoalesceResult(JSON.stringify({returncode:r.returncode,stdout:r.stdout,stderr:r.stderr,stdout_truncated:false,stderr_truncated:false}));\n}\nexport function preleaseReceiptBindingReasonV1(job:any,x:any){\n if(!x)return \"PRELEASE_RECEIPT_MISSING\";\n if(String(x.job_id)!==String(job.id)||String(x.rank0_id)!==String(job.id))return \"PRELEASE_RECEIPT_CORRUPT\";\n if(String(x.lease_owner)!==String(job.lease_owner)||String(x.lease_instance_id)!==String(job.lease_instance_id)||String(x.lease_attempt_id)!==String(job.lease_attempt_id)||Number(x.transport_lease_generation)!==Number(job.transport_lease_generation))return \"PRELEASE_RECEIPT_STALE_OR_MISBOUND\";\n if(!/^[0-9a-f]{64}$/.test(String(x.rank_snapshot_sha256)))return \"PRELEASE_RECEIPT_HASH_INVALID\";\n if(x.rank1_id==null)return \"PRELEASE_RECEIPT_NO_FOLLOWER\";\n return \"OK\";\n}\nexport async function finalizeLeaderOptionalPreleaseFollowerV1(db:any,opts:{qTable?:string;rTable?:string;job:any;expected:any}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const command=opts.expected?.state===\"COMPLETE\"&&opts.expected?.error_json==null&&typeof opts.expected?.result_json===\"string\"\n ? classifyValNativeCoalesceResultV1(opts.expected.result_json):null;\n const job=opts.job;\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const lr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')`,\n args:[String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n const leader:any=lr.rows?.[0]??null;\n if(!leader){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerId:string|null=null,receiptReason=\"NOT_COALESCIBLE\";\n if(command){\n const rr:any=await tx.execute({sql:`SELECT * FROM ${r} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const recs:any[]=rr.rows||[];\n if(recs.length!==1)receiptReason=recs.length>1?\"AMBIGUOUS_PRELEASE_RECEIPTS\":\"PRELEASE_RECEIPT_MISSING\";\n else{\n const x:any=recs[0];\n receiptReason=preleaseReceiptBindingReasonV1(job,x);\n if(receiptReason===\"OK\"){\n const fr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=?`,args:[String(x.rank1_id)]});\n const f:any=fr.rows?.[0]??null;\n if(f&&String(f.state)===\"READY\"&&String(f.op)===String(leader.op)&&String(f.payload_json)===String(leader.payload_json)&&Number(f.priority)===Number(leader.priority))followerId=String(f.id);\n else receiptReason=\"PRELEASE_FOLLOWER_NO_LONGER_EXACT_READY_MATCH\";\n }\n }\n }\n const lu:any=await tx.execute({sql:`UPDATE ${q}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(opts.expected.state),opts.expected.result_json??null,opts.expected.error_json??null,String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(lu.rows||[]).length){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerCompleted=false;\n if(followerId){\n const fu:any=await tx.execute({sql:`UPDATE ${q} SET state='COMPLETE',result_json=?,error_json=NULL,updated_at=datetime('now') WHERE id=? AND state='READY' AND op=? AND payload_json=? AND priority=? RETURNING id`,\n args:[opts.expected.result_json,followerId,String(leader.op),String(leader.payload_json),Number(leader.priority)]});\n followerCompleted=(fu.rows||[]).length===1;\n }\n await tx.commit();done=true;\n return {ok:true,id:String(job.id),state:String(opts.expected.state),command,receipt_reason:receiptReason,follower_completed:followerCompleted,follower_id:followerCompleted?followerId:null};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\n\nfunction legacyEnvelope(v:any){return JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify(v)+\"\\n\"})}\nasync function sha256Text(s:string){\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nasync function authority(){\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTH_TABLE} WHERE id=1`);\n return r.rows?.[0]??null;\n}\nconst RESULT_FINALIZATION_HELPER_V1_SHA256=\"b82e4f00c3f7b3eb721871e780d0f7c43180e32516b9a5c87112a956e550677f\";\nconst RESULT_FINALIZATION_HELPER_V1_SOURCE=String.raw`// RESULT_FINALIZATION_EXACT_ATTEMPT_RECONCILIATION_V1\n// Candidate-only pure helper. It never dispatches/re-dispatches a Brain command.\n// Production integration supplies narrowly-scoped queue/authority/receipt operations.\n\nexport const READ_ONLY_COMMANDS_V1 = new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\n\nexport function canonV1(x) {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canonV1).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k => JSON.stringify(k) + \":\" + canonV1(x[k])).join(\",\") + \"}\";\n}\n\nexport function legacyEnvelopeV1(v) {\n return JSON.stringify({returncode:0, stderr:\"\", stdout:JSON.stringify(v) + \"\\n\"});\n}\n\nexport async function sha256TextV1(s) {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x => x.toString(16).padStart(2,\"0\")).join(\"\");\n}\n\nfunction errText(e) {\n return e instanceof Error ? e.message : String(e);\n}\n\nfunction authorityMatches(a, epoch, mode) {\n return !!a &&\n Number(a.epoch) === Number(epoch) &&\n String(a.writer) === \"val_native\" &&\n String(a.mode) === String(mode);\n}\n\nfunction expectedTerminal(dispatchOk, dispatchValue) {\n return dispatchOk\n ? {state:\"COMPLETE\", result_json:legacyEnvelopeV1(dispatchValue), error_json:null}\n : {state:\"FAILED\", result_json:null, error_json:JSON.stringify(dispatchValue)};\n}\n\nfunction sameNullable(a,b) {\n return (a ?? null) === (b ?? null);\n}\n\nfunction exactStaticJobBinding(row, job) {\n return !!row &&\n String(row.id) === String(job.id) &&\n String(row.op) === String(job.op) &&\n String(row.payload_json) === String(job.payload_json) &&\n Number(row.transport_lease_generation) === Number(job.transport_lease_generation);\n}\n\nfunction exactLiveAttempt(row, job) {\n return exactStaticJobBinding(row, job) &&\n String(row.lease_instance_id) === String(job.lease_instance_id) &&\n String(row.lease_attempt_id) === String(job.lease_attempt_id);\n}\n\nfunction exactTerminal(row, job, expected) {\n return exactLiveAttempt(row, job) &&\n String(row.state) === expected.state &&\n sameNullable(row.result_json, expected.result_json) &&\n sameNullable(row.error_json, expected.error_json) &&\n row.lease_owner == null &&\n row.lease_expires_at == null;\n}\n\nfunction leaseUnexpired(row, nowIso) {\n return !!row?.lease_expires_at && String(row.lease_expires_at) > String(nowIso);\n}\n\nfunction isExpiryUnknown(row) {\n if (!row || String(row.state) !== \"FAILED\" || row.result_json != null) return false;\n try {\n const e = JSON.parse(String(row.error_json || \"{}\"));\n return e?.classification === \"TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION\";\n } catch {\n return false;\n }\n}\n\nasync function exactReceipt(receipts, job, expectedEpoch, command, dispatchValue) {\n if (!Array.isArray(receipts) || receipts.length !== 1) return {ok:false, reason:receipts?.length > 1 ? \"AMBIGUOUS_MUTATION_RECEIPTS\" : \"MUTATION_RECEIPT_MISSING\"};\n const r = receipts[0];\n const payloadSha = await sha256TextV1(String(job.payload_json));\n if (String(r.job_id) !== String(job.id)) return {ok:false,reason:\"RECEIPT_JOB_MISMATCH\"};\n if (String(r.lease_attempt_id) !== String(job.lease_attempt_id)) return {ok:false,reason:\"RECEIPT_ATTEMPT_MISMATCH\"};\n if (String(r.lease_instance_id) !== String(job.lease_instance_id)) return {ok:false,reason:\"RECEIPT_INSTANCE_MISMATCH\"};\n if (String(r.lease_owner) !== String(job.lease_owner)) return {ok:false,reason:\"RECEIPT_OWNER_MISMATCH\"};\n if (Number(r.transport_lease_generation) !== Number(job.transport_lease_generation)) return {ok:false,reason:\"RECEIPT_GENERATION_MISMATCH\"};\n if (Number(r.authority_epoch) !== Number(expectedEpoch)) return {ok:false,reason:\"RECEIPT_AUTHORITY_EPOCH_MISMATCH\"};\n if (String(r.command) !== String(command)) return {ok:false,reason:\"RECEIPT_COMMAND_MISMATCH\"};\n if (String(r.payload_sha256) !== payloadSha) return {ok:false,reason:\"RECEIPT_PAYLOAD_MISMATCH\"};\n if (String(r.result_json) !== canonV1(dispatchValue)) return {ok:false,reason:\"RECEIPT_RESULT_MISMATCH\"};\n return {ok:true, receipt:r, payload_sha256:payloadSha};\n}\n\nasync function readOnlyStillFresh(command, preDispatchGeneration, deps) {\n if (!READ_ONLY_COMMANDS_V1.has(command)) return {ok:true};\n if (!Number.isInteger(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_PRE_DISPATCH_GENERATION_REQUIRED\"};\n const g = await deps.readCanonicalGeneration();\n if (Number(g) !== Number(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_CANONICAL_GENERATION_DRIFT\",expected:preDispatchGeneration,actual:Number(g)};\n return {ok:true};\n}\n\n/**\n * deps contract:\n * - readAuthority()\n * - readJob(id)\n * - readCanonicalGeneration()\n * - finishOncePreservingAttempt(job, expected) // exact attempt UPDATE; at most called twice total: initial + one retry\n * - readMutationReceipts(jobId, attemptId)\n * - finalizeExpiredMutationFromReceipt(job, expected, receipt)\n * - nowIso()\n *\n * No dispatch/re-dispatch function is accepted by this helper.\n */\nexport async function finalizeExactAttemptV1({\n job,\n expectedAuthorityEpoch,\n expectedAuthorityMode,\n command,\n dispatchOk,\n dispatchValue,\n preDispatchGeneration,\n deps,\n}) {\n const expected = expectedTerminal(dispatchOk, dispatchValue);\n const readOnly = READ_ONLY_COMMANDS_V1.has(command);\n const trace = [];\n let finishCalls = 0;\n\n const a0 = await deps.readAuthority();\n if (!authorityMatches(a0, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_PRE\",trace,finish_calls:finishCalls};\n }\n const fresh0 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh0.ok) return {...fresh0,trace,finish_calls:finishCalls};\n\n // Normal path. Candidate production finishOnce must preserve lease_instance_id and\n // lease_attempt_id on terminal rows so a client-unknown finish can be read back\n // as the exact attempt rather than merely the same job id.\n try {\n finishCalls++;\n const f = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_initial\",returned:f});\n if (f?.ok === true) {\n const rb = await deps.readJob(job.id);\n if (!exactTerminal(rb,job,expected)) return {ok:false,reason:\"FINISH_SUCCESS_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n return {ok:true,reconciled:false,path:\"INITIAL_FINISH\",trace,finish_calls:finishCalls};\n }\n trace.push({phase:\"finish_initial_nonok\",value:f});\n } catch (e) {\n trace.push({phase:\"finish_initial_throw\",error:errText(e)});\n }\n\n // Outcome-aware reconciliation begins. Re-read authority after the uncertain client outcome.\n const a1 = await deps.readAuthority();\n if (!authorityMatches(a1, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_RECONCILE\",trace,finish_calls:finishCalls};\n }\n const fresh1 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh1.ok) return {...fresh1,trace,finish_calls:finishCalls};\n\n let row = await deps.readJob(job.id);\n if (!row || !exactStaticJobBinding(row,job)) {\n return {ok:false,reason:\"QUEUE_JOB_BINDING_MISMATCH\",trace,finish_calls:finishCalls};\n }\n\n // Case A: UPDATE committed but client threw. Terminal readback itself proves completion,\n // but only because candidate finish preserves exact attempt identity.\n if (exactTerminal(row,job,expected)) {\n return {ok:true,reconciled:true,path:\"TERMINAL_EXACT_READBACK\",trace,finish_calls:finishCalls};\n }\n\n // Case B: UPDATE did not commit. Retry the exact finish at most once, only while this\n // exact attempt is still leased and unexpired.\n if (String(row.state) === \"LEASED\" && exactLiveAttempt(row,job) && String(row.lease_owner) === String(job.lease_owner) && leaseUnexpired(row,deps.nowIso())) {\n try {\n finishCalls++;\n const f2 = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_retry_once\",returned:f2});\n } catch (e) {\n trace.push({phase:\"finish_retry_once_throw\",error:errText(e)});\n }\n const fresh2 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh2.ok) return {...fresh2,trace,finish_calls:finishCalls};\n const rb2 = await deps.readJob(job.id);\n if (exactTerminal(rb2,job,expected)) {\n return {ok:true,reconciled:true,path:\"ONE_EXACT_FINISH_RETRY\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"ONE_FINISH_RETRY_EXHAUSTED\",trace,finish_calls:finishCalls};\n }\n\n // Read-only results may never be resurrected after lease expiry/reassignment, and they\n // may never cross canonical generation drift.\n if (readOnly) {\n return {ok:false,reason:\"READ_ONLY_RESULT_NOT_SAFE_TO_RECONCILE\",trace,finish_calls:finishCalls};\n }\n\n // A mutation receipt is not a license to reinterpret a still-LEASED row from another\n // attempt/instance. Receipt-bound recovery below is only for the exact known\n // expiry-terminalization state, never for a live/reassigned lease.\n if (String(row.state) === \"LEASED\") {\n if (!exactLiveAttempt(row,job)) {\n return {ok:false,reason:\"LIVE_ATTEMPT_IDENTITY_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"LEASED_ATTEMPT_EXPIRED_OR_UNSAFE_AFTER_ONE_RETRY\",trace,finish_calls:finishCalls};\n }\n\n // Case C: mutation dispatch is canonically known from the exact bound receipt.\n // This may repair the historical FAILED/OUTCOME_UNKNOWN transport row without\n // re-dispatching the canonical mutation.\n if (dispatchOk !== true) {\n return {ok:false,reason:\"MUTATION_DISPATCH_EXCEPTION_HAS_NO_SAFE_RECEIPT_ASSUMPTION\",trace,finish_calls:finishCalls};\n }\n const receipts = await deps.readMutationReceipts(job.id,job.lease_attempt_id);\n const rr = await exactReceipt(receipts,job,expectedAuthorityEpoch,command,dispatchValue);\n if (!rr.ok) return {...rr,trace,finish_calls:finishCalls};\n\n // Only the exact known expiry terminalization is repairable after expiry. Transport\n // generation equality proves no later lease generation was issued for this job.\n if (!isExpiryUnknown(row) || Number(row.transport_lease_generation) !== Number(job.transport_lease_generation)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_NOT_ELIGIBLE\",trace,finish_calls:finishCalls};\n }\n if (row.lease_owner != null || row.lease_expires_at != null) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_STILL_OWNED\",trace,finish_calls:finishCalls};\n }\n // Historical recovery cleared attempt/instance. If present, they must still match.\n if (row.lease_attempt_id != null && String(row.lease_attempt_id) !== String(job.lease_attempt_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_ATTEMPT_CONFLICT\",trace,finish_calls:finishCalls};\n }\n if (row.lease_instance_id != null && String(row.lease_instance_id) !== String(job.lease_instance_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_INSTANCE_CONFLICT\",trace,finish_calls:finishCalls};\n }\n\n const rec = await deps.finalizeExpiredMutationFromReceipt(job,expected,rr.receipt);\n trace.push({phase:\"receipt_bound_expiry_recovery\",returned:rec});\n const a2 = await deps.readAuthority();\n if (!authorityMatches(a2, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_POST_RECEIPT\",trace,finish_calls:finishCalls};\n }\n const rb3 = await deps.readJob(job.id);\n if (!exactTerminal(rb3,job,expected)) {\n return {ok:false,reason:\"RECEIPT_RECOVERY_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:true,reconciled:true,path:\"EXACT_MUTATION_RECEIPT_EXPIRY_RECOVERY\",trace,finish_calls:finishCalls};\n}\n`;\nlet resultFinalizationHelperV1Promise:Promise|null=null;\nasync function resultFinalizationHelperV1(){\n const h=await sha256Text(RESULT_FINALIZATION_HELPER_V1_SOURCE);\n if(h!==RESULT_FINALIZATION_HELPER_V1_SHA256)throw new Error(\"RESULT_FINALIZATION_HELPER_INTEGRITY_MISMATCH\");\n if(!resultFinalizationHelperV1Promise){\n resultFinalizationHelperV1Promise=import(\"data:text/javascript;charset=utf-8,\"+encodeURIComponent(RESULT_FINALIZATION_HELPER_V1_SOURCE));\n }\n return await resultFinalizationHelperV1Promise;\n}\n\nasync function canonicalAnchor(){\n const r:any=await sqlite.execute(\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const row:any=r.rows?.[0]??null;\n const g=Number(row?.generation),head=String(row?.event_head_hash??\"\");\n if(!Number.isInteger(g)||g<0||!/^[0-9a-f]{64}$/.test(head))throw new Error(\"CANONICAL_ANCHOR_UNAVAILABLE\");\n return {generation:g,event_head_hash:head};\n}\nasync function canonicalGeneration(){return (await canonicalAnchor()).generation;}\nasync function normalizedFinalizationAuthority(){\n const g:any=await admit();\n if(g?.ok===true)return {epoch:Number(g.epoch),writer:\"val_native\",mode:String(g.mode)};\n const a:any=g?.authority??await authority();\n return {epoch:Number(a?.epoch),writer:String(a?.writer??\"\"),mode:String(a?.mode)===\"PREPARED\"?\"PREPARED_READ_ONLY\":String(a?.mode??\"\")};\n}\n\nasync function emitRuntimeTick(){\n const a:any=await authority();\n if(!a||String(a.writer)!==\"val_native\"||![\"ACTIVE\",\"PREPARED\"].includes(String(a.mode))){\n return {ok:false,emitted:false,reason:\"VAL_NATIVE_NOT_SELECTED\",authority:a??null};\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNTIME_TICK_TABLE}(\n id TEXT PRIMARY KEY,\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n state TEXT NOT NULL,\n tick_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n metadata_json TEXT NOT NULL\n )`);\n const metadata=JSON.stringify({\n classification:\"NONAUTHORITY_EXECUTOR_RUNTIME_TICK\",\n grants_brain_authority:false,\n extends_canonical_lease:false,\n source:\"val_native_executor_prod.drain\"\n });\n await sqlite.execute({\n sql:`INSERT INTO ${RUNTIME_TICK_TABLE}(id,worker_id,instance_id,authority_epoch,state,tick_at,expires_at,metadata_json)\n VALUES('val-native-executor',?,?,?,'RUNNING',datetime('now'),datetime('now','+${RUNTIME_TICK_TTL_SECONDS} seconds'),?)\n ON CONFLICT(id) DO UPDATE SET\n worker_id=excluded.worker_id,\n instance_id=excluded.instance_id,\n authority_epoch=excluded.authority_epoch,\n state='RUNNING',\n tick_at=excluded.tick_at,\n expires_at=excluded.expires_at,\n metadata_json=excluded.metadata_json`,\n args:[WORKER,INSTANCE,Number(a.epoch),metadata]\n });\n return {ok:true,emitted:true,authority_epoch:Number(a.epoch),ttl_seconds:RUNTIME_TICK_TTL_SECONDS};\n}\nasync function admit(){\n const a:any=await authority();\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\",authority:null};\n if(String(a.writer)!==\"val_native\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n const mode=String(a.mode);\n if(mode===\"ACTIVE\")return {ok:true,epoch:Number(a.epoch),mode:\"ACTIVE\",authority:a};\n if(mode===\"PREPARED\")return {ok:true,epoch:Number(a.epoch),mode:\"PREPARED_READ_ONLY\",authority:a};\n return {ok:false,reason:\"AUTHORITY_MODE_NOT_ADMITTED\",authority:a};\n}\nconst ACQUIRE_RECONCILE_ATTEMPTS_R2=3;\ntype LeaseReconcileResultR2=\n | {kind:\"leased\";job:any;epoch:number;mode:string;acquisition_reconciled:true;acquisition_error:string}\n | {kind:\"none\";attempt_id:string}\n | {kind:\"outcome_unknown\";attempt_id:string;errors:string[]};\nexport async function reconcileExactLeaseAttemptR2(\n attempt:string,\n expectedEpoch:number,\n expectedMode:string,\n acquisitionError:unknown,\n):Promise{\n const errors:string[]=[];\n for(let i=0;i=1\n AND lease_expires_at>datetime('now')\n ORDER BY id`,args:[WORKER,INSTANCE,attempt]});\n const rows:any[]=r.rows||[];\n if(rows.length===0)return {kind:\"none\",attempt_id:attempt};\n if(rows.length!==1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,`ATTEMPT_CARDINALITY_CONFLICT_${rows.length}`]};\n }\n const job=rows[0];\n if(String(job.lease_instance_id)!==INSTANCE||String(job.lease_attempt_id)!==attempt||Number(job.transport_lease_generation)<1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,\"ATTEMPT_IDENTITY_POSTCONDITION_FAILED\"]};\n }\n return {\n kind:\"leased\",\n job,\n epoch:expectedEpoch,\n mode:expectedMode,\n acquisition_reconciled:true,\n acquisition_error:acquisitionError instanceof Error?acquisitionError.message:String(acquisitionError),\n };\n }catch(e){\n errors.push(e instanceof Error?e.message:String(e));\n }\n }\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors};\n}\nasync function recoverExpiredTransport(){\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const r:any=await tx.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at<=datetime('now') ORDER BY id`);\n const outcomes:any[]=[];\n for(const j of (r.rows||[])){\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION',\n 'receipt_policy','SIDE_RECEIPTS_DIAGNOSTIC_ONLY_NOT_COMPLETION_AUTHORITY',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner IS ? AND lease_instance_id IS ? AND lease_attempt_id IS ? AND transport_lease_generation=? AND lease_expires_at<=datetime('now')\n RETURNING id`,\n args:[j.id,j.lease_owner,j.lease_instance_id,j.lease_attempt_id,j.transport_lease_generation]});\n if((u.rows||[]).length)outcomes.push({id:j.id,state:\"FAILED\",reconciled_from_receipt:false,outcome_unknown:true});\n }\n await tx.commit();done=true;return{ok:true,outcomes};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function activeLeases(){\n const r:any=await sqlite.execute(`SELECT id,lease_owner,lease_instance_id,lease_attempt_id,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id`);\n return r.rows||[];\n}\nfunction atomicizeLeaseSql(sql:string){\n const setNeedle=`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')`;\n const retNeedle=\"RETURNING id,op,payload_json,priority,lease_expires_at\";\n if(sql.split(setNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_SET_SHAPE_DRIFT\");\n if(sql.split(retNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_RETURNING_SHAPE_DRIFT\");\n return sql.replace(setNeedle,`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')`)\n .replace(retNeedle,\"RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\");\n}\nasync function leaseOne(){\n const gate=await admit();if(!gate.ok)return {kind:\"fenced\",gate} as const;\n await recoverExpiredTransport();\n const active=await activeLeases();\n if(active.length>1)return {kind:\"conflict\",active} as const;\n if(active.length===1)return {kind:\"busy\",active:active[0]} as const;\n const preparedReadOnly=gate.mode===\"PREPARED_READ_ONLY\";\n const attempt=crypto.randomUUID();\n const expectedMode=String(gate.mode);\n let core:any;\n try{\n if(!preparedReadOnly&&!EMERGENCY_MUTATIONS_FROZEN&&PRELEASE_READ_COALESCE_V1_ENABLED){\n const acq:any=await acquireWithPreleaseRankReceiptV1(sqlite,{worker:WORKER,instance:INSTANCE,attempt});\n if(acq.kind===\"leased\"){\n const j:any=acq.job;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode,prelease_receipt:{rank0:acq.rank0,rank1:acq.rank1,rank_snapshot_sha256:acq.rank_snapshot_sha256}} as const;\n }\n return acq;\n }\n core=preparedReadOnly\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${JOB_TABLE} j\n WHERE j.state='READY' AND j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND 120\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE} x\n WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now')\n )\n ORDER BY\n CASE json_extract(j.payload_json,'$.args[0]')\n WHEN 'status' THEN 0\n WHEN 'verify-chain' THEN 1\n WHEN 'verify-claim-graph' THEN 2\n ELSE 3\n END,\n CASE WHEN j.priority>1000000000 THEN 1000000000 ELSE j.priority END DESC,\n j.created_at,j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt]})\n : EMERGENCY_MUTATIONS_FROZEN\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at>datetime('now')\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt,EMERGENCY_MUTATION_CANARY_JOB_ID,WORKER]})\n : await sqlite.execute({sql:atomicizeLeaseSql(leaseOneSql(JOB_TABLE)),args:[WORKER,INSTANCE,attempt,WORKER]});\n }catch(e){\n const rr=await reconcileExactLeaseAttemptR2(attempt,gate.epoch,expectedMode,e);\n if(rr.kind===\"leased\")return rr;\n if(rr.kind===\"none\")return {\n kind:\"acquisition_failed_no_bound_lease\",\n attempt_id:attempt,\n reason:e instanceof Error?e.message:String(e),\n } as const;\n return {kind:\"acquisition_outcome_unknown\",attempt_id:attempt,errors:rr.errors} as const;\n }\n const j:any=core.rows?.[0]??null;if(!j)return {kind:\"empty\"} as const;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode} as const;\n}\nasync function readQueueJob(id:string){\n const r:any=await sqlite.execute({sql:`SELECT * FROM ${JOB_TABLE} WHERE id=?`,args:[id]});\n return r.rows?.[0]??null;\n}\nasync function finishOncePreservingAttempt(job:any,expected:any){\n if(PRELEASE_READ_COALESCE_V1_ENABLED&&expected?.state===\"COMPLETE\"&&expected?.error_json==null&&typeof expected?.result_json===\"string\"&&classifyValNativeCoalesceResultV1(expected.result_json)){\n return await finalizeLeaderOptionalPreleaseFollowerV1(sqlite,{job:{...job,lease_owner:String(job.lease_owner||WORKER)},expected});\n }\n const r:any=await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,job.id,String(job.lease_owner||WORKER),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(r.rows||[]).length)return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"};\n return {ok:true,id:job.id,state:String(expected.state)};\n}\nasync function readMutationReceiptsExact(jobId:string,attemptId:string){\n await ensureMutationReceiptTable();\n const r:any=await sqlite.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE}\n WHERE job_id=? AND lease_attempt_id=?\n ORDER BY committed_at,job_id,lease_attempt_id`,args:[jobId,attemptId]});\n return r.rows||[];\n}\nfunction sameReceiptRow(a:any,b:any){\n const keys=[\"job_id\",\"lease_attempt_id\",\"lease_instance_id\",\"lease_owner\",\"transport_lease_generation\",\"authority_epoch\",\"command\",\"payload_sha256\",\"committed_generation\",\"event_head_hash\",\"result_json\",\"committed_at\"];\n return keys.every(k=>String(a?.[k]??\"\")===String(b?.[k]??\"\"));\n}\nasync function finalizeExpiredMutationFromReceiptExact(job:any,expected:any,receipt:any){\n await ensureMutationReceiptTable();\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const rr:any=await tx.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const rows:any[]=rr.rows||[];\n if(rows.length!==1||!sameReceiptRow(rows[0],receipt)){\n await tx.rollback();done=true;\n return {ok:false,reason:rows.length>1?\"AMBIGUOUS_MUTATION_RECEIPTS\":\"MUTATION_RECEIPT_CHANGED_OR_MISSING\"};\n }\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,\n lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='FAILED' AND op=? AND payload_json=? AND transport_lease_generation=?\n AND result_json IS NULL AND lease_owner IS NULL AND lease_expires_at IS NULL\n AND (lease_instance_id IS NULL OR lease_instance_id=?)\n AND (lease_attempt_id IS NULL OR lease_attempt_id=?)\n AND json_valid(error_json)=1\n AND json_extract(error_json,'$.classification')='TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION'\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,String(job.lease_instance_id),String(job.lease_attempt_id),\n String(job.id),String(job.op),String(job.payload_json),Number(job.transport_lease_generation),String(job.lease_instance_id),String(job.lease_attempt_id)]});\n if((u.rows||[]).length!==1){\n await tx.rollback();done=true;\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_UPDATE_REJECTED\"};\n }\n await tx.commit();done=true;\n return {ok:true,receipt_job_id:String(receipt.job_id)};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function finalizeJobExactAttempt(job:any,epoch:number,mode:string,command:string,dispatchOk:boolean,dispatchValue:any,preDispatchGeneration:number|undefined){\n const helper:any=await resultFinalizationHelperV1();\n const boundJob={...job,lease_owner:WORKER,lease_instance_id:String(job.lease_instance_id),lease_attempt_id:String(job.lease_attempt_id)};\n return await helper.finalizeExactAttemptV1({\n job:boundJob,\n expectedAuthorityEpoch:Number(epoch),\n expectedAuthorityMode:String(mode),\n command:String(command),\n dispatchOk:dispatchOk===true,\n dispatchValue,\n preDispatchGeneration,\n deps:{\n readAuthority:normalizedFinalizationAuthority,\n readJob:readQueueJob,\n readCanonicalGeneration:canonicalGeneration,\n finishOncePreservingAttempt,\n readMutationReceipts:readMutationReceiptsExact,\n finalizeExpiredMutationFromReceipt:finalizeExpiredMutationFromReceiptExact,\n nowIso:()=>new Date().toISOString().replace(\"Z\",\"+00:00\")\n }\n });\n}\nconst CHAIN_FAILURE_READ_ONLY=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; kernel allowlist still fences every unqualified mutator.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nfunction brainCommand(raw:string){\n try{const p=JSON.parse(raw);return Array.isArray(p?.args)?String(p.args[0]||\"\"):\"\"}catch{return \"\"}\n}\nasync function chainCircuitBreaker(raw:string,jobId:string){\n const command=brainCommand(raw);\n if(CHAIN_FAILURE_READ_ONLY.has(command))return {allow:true,command,integrity:null};\n const emergencyCanary=EMERGENCY_MUTATIONS_FROZEN&&jobId===EMERGENCY_MUTATION_CANARY_JOB_ID&&command===\"register-agent\";\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary)return {allow:false,command,integrity:{ok:false,reason:\"EPOCH2_MUTATIONS_EMERGENCY_FROZEN_PENDING_ATOMICITY_REPAIR\"}};\n let chain:any,graph:any;\n try{chain=await verifyBrainChain()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CHAIN_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n if(chain?.ok!==true)return {allow:false,command,integrity:{chain,graph:null}};\n try{graph=await verifyBrainClaimGraph()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CLAIM_GRAPH_EXCEPTION\",detail:e instanceof Error?e.message:String(e),chain}}}\n if(graph?.ok!==true)return {allow:false,command,integrity:{chain,graph}};\n return {allow:true,command,integrity:{chain,graph}};\n}\nfunction parseArr(v:any){try{const x=JSON.parse(String(v??\"[]\"));return Array.isArray(x)?x:[]}catch{return []}}\nasync function localCommitSnapshot(taskId:string,agent:string){\n const t:any=(await sqlite.execute({sql:`SELECT id,workstream,state,lease_owner,lease_generation,lease_expires_at,context_manifest,success_condition,decision_value,depends_json,requires_json,writes_json,guards_json\n FROM brainvn_tasks WHERE id=?`,args:[taskId]})).rows?.[0]??null;\n if(!t)return{ok:false,reason:\"TASK_MISSING\"};\n if(String(t.state)!==\"LEASED\"||String(t.lease_owner)!==agent)return{ok:false,reason:\"LEASE_CHANGED\",task:t};\n if(t.lease_expires_at&&String(t.lease_expires_at)<=new Date().toISOString().replace(\"Z\",\"+00:00\"))return{ok:false,reason:\"LEASE_EXPIRED\",task:t};\n const deps=parseArr(t.depends_json),guards=parseArr(t.guards_json);\n const depRows:any[]=[];\n for(const id of deps){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(id)]})).rows?.[0]??null;\n depRows.push(r??{id:String(id),state:\"MISSING\"});\n }\n const guardRows:any[]=[];\n let retryGuardSnapshotComplete=true;\n for(const g of guards){\n if(g?.type===\"task_complete\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),state:\"MISSING\"}});\n }else if(g?.type===\"claim_verified\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,status,updated_at FROM brainvn_claims WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),status:\"MISSING\"}});\n }else{\n retryGuardSnapshotComplete=false;\n guardRows.push({guard:g,resolved:null});\n }\n }\n const ws:any=(await sqlite.execute({sql:\"SELECT id,mission,verified_state FROM brainvn_workstreams WHERE id=?\",args:[String(t.workstream)]})).rows?.[0]??null;\n const stable={\n task:{id:t.id,workstream:t.workstream,state:t.state,lease_owner:t.lease_owner,lease_generation:t.lease_generation,\n context_manifest:t.context_manifest,success_condition:t.success_condition,decision_value:t.decision_value,\n depends_json:t.depends_json,requires_json:t.requires_json,writes_json:t.writes_json,guards_json:t.guards_json},\n dependencies:depRows,guards:guardRows,workstream_semantics:ws\n };\n return{ok:true,stable,lease_expires_at:t.lease_expires_at,workstream:String(t.workstream),retry_guard_snapshot_complete:retryGuardSnapshotComplete};\n}\nfunction sameSnapshot(a:any,b:any){return JSON.stringify(a?.stable)===JSON.stringify(b?.stable)}\nfunction mutationFields(args:any[]){\n let agent=\"\",task=\"\";\n for(let i=1;i{\n let found:number|null=null;\n for(let i=1;iJSON.stringify(k)+\":\"+cohortCanon(x[k])).join(\",\")+\"}\";\n}\nfunction cohortStrictJson(s:any,kind:string){\n try{return JSON.parse(String(s))}\n catch{throw new Error(\"COHORT_BAD_JSON_\"+kind)}\n}\nfunction cohortStrictObjectJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!v||typeof v!==\"object\"||Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_OBJECT\");\n return v;\n}\nfunction cohortStrictListJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_LIST\");\n return v;\n}\nfunction cohortStrictStringListJson(s:any,kind:string){\n const v=cohortStrictListJson(s,kind);\n if(v.some((x:any)=>typeof x!==\"string\"||!x))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_STRING_LIST\");\n return v;\n}\nfunction cohortCleanCaps(x:any){\n if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v))throw new Error(\"COHORT_BAD_CAPS\");\n return [...new Set(x)].sort();\n}\nfunction cohortFlagMap(args:any[],start:number,allowed:Set){\n if(!Array.isArray(args)||args.some(x=>typeof x!==\"string\"))return null;\n if((args.length-start)%2!==0)return null;\n const out:any={};\n for(let i=start;i=args.length)return null;\n const name=k.slice(2);\n if(!allowed.has(name)||Object.prototype.hasOwnProperty.call(out,name))return null;\n out[name]=String(args[i+1]);\n }\n return out;\n}\nfunction cohortExactEnvelope(row:any){\n if(String(row?.op)!==\"brain\")return null;\n let q:any;\n try{q=JSON.parse(String(row.payload_json))}\n catch{return null}\n if(!q||typeof q!==\"object\"||Array.isArray(q))return null;\n const keys=Object.keys(q).sort();\n if(keys.length!==2||keys[0]!==\"args\"||keys[1]!==\"timeout\")return null;\n if(!Array.isArray(q.args)||!Number.isInteger(q.timeout)||q.timeout<1||q.timeout>120)return null;\n return q;\n}\nfunction cohortParseRegister(row:any){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"register-agent\"||typeof q.args[1]!==\"string\"||!q.args[1])return null;\n const f=cohortFlagMap(q.args,2,new Set([\"workstream\",\"role\",\"type\",\"capabilities\"]));if(!f)return null;\n if(f.workstream!==\"global\"||!f.role||f.type!==\"CHAT_UNPROVEN\"||typeof f.capabilities!==\"string\")return null;\n let caps:any;try{caps=cohortCleanCaps(JSON.parse(f.capabilities))}catch{return null}\n return {row,q,member:{id:String(q.args[1]),workstream:\"global\",role:String(f.role),type:\"CHAT_UNPROVEN\",parent:null,capabilities:caps}};\n}\nfunction cohortParseClaim(row:any,agentId:string){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"claim\")return null;\n const f=cohortFlagMap(q.args,1,new Set([\"agent\",\"mode\",\"lease-seconds\",\"constitution-version\",\"constitution-sha256\",\"registry-version\"]));if(!f)return null;\n if(f.agent!==agentId)return null;\n if(f.mode!==undefined&&f.mode!==\"INTERACTIVE\")return null;\n if(f[\"lease-seconds\"]!==undefined&&f[\"lease-seconds\"]!==\"1800\")return null;\n return {row,q};\n}\nfunction cohortIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\"prevent_self_review\",\"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n return ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\";\n}\nasync function cohortTxRows(tx:any,sql:string,args:any[]=[]){\n const r:any=await tx.execute({sql,args});return r.rows||[];\n}\nasync function cohortTxOne(tx:any,sql:string,args:any[]=[]){\n return (await cohortTxRows(tx,sql,args))[0]??null;\n}\nasync function cohortSnapshot(tx:any){\n return {\n workstreams:await cohortTxRows(tx,\"SELECT * FROM brainvn_workstreams ORDER BY id\"),\n agents:await cohortTxRows(tx,\"SELECT * FROM brainvn_agents ORDER BY id\"),\n tasks:await cohortTxRows(tx,\"SELECT * FROM brainvn_tasks ORDER BY id\"),\n claims:await cohortTxRows(tx,\"SELECT * FROM brainvn_claims ORDER BY id\"),\n deps:await cohortTxRows(tx,\"SELECT * FROM brainvn_claim_deps ORDER BY parent_claim,child_claim\"),\n artifacts:await cohortTxRows(tx,\"SELECT * FROM brainvn_artifacts ORDER BY sha256\")\n };\n}\nfunction cohortParseTask(t:any){\n return {\n row:t,\n ctx:cohortStrictObjectJson(t.context_manifest,\"CTX\"),\n req:cohortStrictStringListJson(t.requires_json,\"REQ\"),\n deps:cohortStrictListJson(t.depends_json,\"DEPS\"),\n guards:cohortStrictListJson(t.guards_json,\"GUARDS\"),\n writes:cohortStrictStringListJson(t.writes_json,\"WRITES\")\n };\n}\nfunction cohortOverlap(a:string[],b:string[]){const B=new Set(b);return a.some(x=>B.has(x))}\nasync function cohortActivationOk(tx:any){\n const meta:any=await cohortTxOne(tx,\"SELECT predecessor_event_count FROM brainvn_epoch_meta WHERE id=1\");\n const t:any=await cohortTxOne(tx,\"SELECT state,result_event_id FROM brainvn_tasks WHERE id=?\",[COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK]);\n if(!meta||!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return false;\n const localSeq=Number(t.result_event_id)-Number(meta.predecessor_event_count);\n if(!Number.isInteger(localSeq)||localSeq<1)return false;\n const ev:any=await cohortTxOne(tx,\"SELECT agent_id,type,task_id FROM brainvn_epoch_events WHERE local_seq=?\",[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK||!ev.agent_id)return false;\n const a:any=await cohortTxOne(tx,\"SELECT type FROM brainvn_agents WHERE id=?\",[String(ev.agent_id)]);\n return !!a&&String(a.type)!==\"CHAT_UNPROVEN\";\n}\nfunction cohortOrderedReadySql(){\n const raw=leaseOneSql(JOB_TABLE);\n const start=raw.indexOf(\"SELECT j.id FROM \");\n const limit=raw.indexOf(\"LIMIT 1\",start);\n if(start<0||limit<0)throw new Error(\"COHORT_LEASE_ORDER_SHAPE_DRIFT\");\n let inner=raw.slice(start,limit)+\"LIMIT \"+COHORT_ADMISSION_FASTPATH_V3R2R1_SCAN_JOBS;\n inner=inner.replace(\"SELECT j.id FROM \",\"SELECT j.rowid AS queue_rowid,j.* FROM \");\n const qCount=(inner.match(/\\?/g)||[]).length;\n if(qCount!==1)throw new Error(\"COHORT_LEASE_ORDER_PLACEHOLDER_DRIFT_\"+qCount);\n return inner;\n}\nasync function cohortBaseReceipt(){\n const chain:any=await verifyBrainChain();\n if(chain?.ok!==true)return {ok:false,reason:\"CHAIN_NOT_VERIFIED\",chain};\n const graph:any=await verifyBrainClaimGraph();\n if(graph?.ok!==true)return {ok:false,reason:\"CLAIM_GRAPH_NOT_VERIFIED\",graph};\n const tx:any=await (sqlite as any).transaction(\"read\");let done=false;\n try{\n const meta:any=await cohortTxOne(tx,\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const authority:any=await cohortTxOne(tx,\"SELECT epoch,writer,mode,source_generation,source_head FROM \"+AUTH_TABLE+\" WHERE id=1\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||Number(meta.generation)!==Number(chain.generation)||String(meta.event_head_hash)!==String(chain.stored_head)){\n await tx.rollback();done=true;return {ok:false,reason:\"CHAIN_RECEIPT_STALE\"};\n }\n if(!authority||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n await tx.rollback();done=true;return {ok:false,reason:\"AUTHORITY_NOT_ACTIVE\"};\n }\n await tx.commit();done=true;\n return {ok:true,generation:Number(meta.generation),head:String(meta.event_head_hash),admission_digest:digest,\n authority:{epoch:Number(authority.epoch),writer:String(authority.writer),mode:String(authority.mode),\n source_generation:Number(authority.source_generation),source_head:String(authority.source_head)}};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}return {ok:false,reason:e instanceof Error?e.message:String(e)}}\n}\nfunction cohortEventBody(e:any){\n return cohortCanon({event_uuid:e.event_uuid,ts:e.ts,workstream:e.workstream,agent_id:e.agent_id,task_id:e.task_id,type:e.type,payload:e.payload,prev_hash:e.prev_hash});\n}\nasync function cohortEventHash(e:any){return await sha256Text(cohortEventBody(e))}\nfunction cohortNow(ms=Date.now()){return new Date(ms).toISOString().replace(\"Z\",\"+00:00\")}\nasync function tryCohortAdmissionFastpathV3R2R1(maxPairs:number){\n if(!COHORT_ADMISSION_FASTPATH_V3R2R1_ENABLED||maxPairsdatetime('now') ORDER BY id LIMIT 2\");\n if(activeInside.length){await tx.rollback();done=true;return {kind:\"not_applicable\"} as const}\n const meta:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_epoch_meta WHERE id=1\");\n const ws:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_workstreams WHERE id='global'\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||!ws||Number(meta.generation)!==Number(base.generation)||String(meta.event_head_hash)!==String(base.head)||digest!==String(base.admission_digest)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_BASE_DRIFT\"} as const;\n }\n if(!(await cohortActivationOk(tx))){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_ACTIVATION_NOT_VERIFIED\"} as const;\n }\n const ordered:any[]=await cohortTxRows(tx,cohortOrderedReadySql(),[WORKER]);\n const pairs:any[]=[];const seen=new Set();\n const pairCap=Math.min(COHORT_ADMISSION_FASTPATH_V3R2R1_MAX_PAIRS,maxPairs);\n for(let i=0;i+1[String(a.id),a]));\n for(const p of pairs)if(existing.has(p.reg.member.id)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_EXISTING_AGENT\"} as const;\n }\n let ready:any[],leased:any[];\n try{\n ready=state.tasks.filter((t:any)=>String(t.workstream)===\"global\"&&String(t.state)===\"READY\")\n .sort((a:any,b:any)=>Number(b.priority)-Number(a.priority)||String(a.id).localeCompare(String(b.id)))\n .map((t:any)=>cohortParseTask(t));\n leased=state.tasks.filter((t:any)=>String(t.state)===\"LEASED\").map((t:any)=>cohortParseTask(t));\n }catch{\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_SCHEDULER_SHAPE_FALLBACK\"} as const;\n }\n const used=new Set(),activeWrites:string[][]=leased.map((p:any)=>p.writes),assignments:any[]=[];\n for(const p of pairs){\n const m=p.reg.member,C=new Set(m.capabilities);let chosen:any=null;\n for(const t0 of ready){\n const t=t0.row;\n if(used.has(String(t.id)))continue;\n if(!t.dedupe_key)continue;\n if(t.assigned_agent!==null&&String(t.assigned_agent)!==m.id)continue;\n if(t0.ctx.execution_allowed===false)continue;\n const sensitive=cohortIndependenceSensitive(new Set(t0.req),t0.ctx);\n if(sensitive&&(m.type===\"CHAT_UNPROVEN\"||COHORT_EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true))continue;\n if(t0.req.some((x:string)=>COHORT_NON_AGENT_CAPS.has(x)))continue;\n if(t0.req.some((x:string)=>!C.has(x)))continue;\n if(t0.deps.length||t0.guards.length){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_DYNAMIC_CAUSAL_FALLBACK\"} as const;\n }\n if(activeWrites.some((x:string[])=>cohortOverlap(t0.writes,x)))continue;\n chosen=t0;used.add(String(t.id));activeWrites.push(t0.writes);break;\n }\n if(!chosen){await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_NO_READY_FALLBACK\"} as const}\n assignments.push({pair:p,member:m,task:chosen});\n }\n\n const queueAttempts:any[]=[];\n for(const a of assignments){\n for(const kind of [\"reg\",\"claim\"]){\n const qr=a.pair[kind].row,attempt=crypto.randomUUID();\n const u:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+\"+LEASE_SECONDS+\" seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now') WHERE rowid=? AND id=? AND state='READY' AND op=? AND payload_json=? RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\",\n args:[WORKER,INSTANCE,attempt,Number(qr.queue_rowid),String(qr.id),String(qr.op),String(qr.payload_json)]});\n const row:any=u.rows?.[0]??null;if(!row)throw new Error(\"COHORT_QUEUE_CAS_FAILED_\"+String(qr.id));\n queueAttempts.push({...row,kind,agent_id:a.member.id});\n }\n }\n\n const startGen=Number(meta.generation),startHead=String(meta.event_head_hash);\n let g=startGen,head=startHead;\n const maxSeq:any=await cohortTxOne(tx,\"SELECT COALESCE(MAX(local_seq),0) n FROM brainvn_epoch_events\");\n let seq=Number(maxSeq?.n??0);\n const events:any[]=[],agents:any[]=[],taskUpdates:any[]=[],results:any[]=[];\n const baseMs=Date.now();\n for(let i=0;iArray.from({length:count},()=>(\"(\" + Array.from({length:n},()=>\"?\").join(\",\") + \")\")).join(\",\");\n const aArgs:any[]=[];for(const a of agents)aArgs.push(a.id,a.parent_id,a.type,a.workstream,a.role,a.status,a.boot_generation,a.last_generation,a.last_seen,a.capabilities_json);\n await tx.execute({sql:\"INSERT INTO brainvn_agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES \"+valueRows(10,agents.length),args:aArgs});\n const taskIds=taskUpdates.map(x=>x.id);\n const ownerCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),genCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),expCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),updCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \");\n const tArgs:any[]=[];for(const t of taskUpdates)tArgs.push(t.id,t.owner);for(const t of taskUpdates)tArgs.push(t.id,t.lease_generation);for(const t of taskUpdates)tArgs.push(t.id,t.lease_expires_at);for(const t of taskUpdates)tArgs.push(t.id,t.updated_at);tArgs.push(...taskIds);\n const tu:any=await tx.execute({sql:\"UPDATE brainvn_tasks SET state='LEASED',lease_owner=CASE id \"+ownerCase+\" END,lease_mode='INTERACTIVE',lease_generation=CASE id \"+genCase+\" END,lease_expires_at=CASE id \"+expCase+\" END,updated_at=CASE id \"+updCase+\" END WHERE id IN (\"+taskIds.map(()=>\"?\").join(\",\")+\") AND state='READY' RETURNING id\",args:tArgs});\n if((tu.rows||[]).length!==taskUpdates.length)throw new Error(\"COHORT_TASK_BULK_CAS_MISMATCH\");\n const eArgs:any[]=[];for(const e of events)eArgs.push(e.local_seq,e.event_uuid,e.ts,e.workstream,e.agent_id,e.task_id,e.type,e.payload_json,e.prev_hash,e.event_hash,e.transaction_generation);\n await tx.execute({sql:\"INSERT INTO brainvn_epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation) VALUES \"+valueRows(11,events.length),args:eArgs});\n const mu:any=await tx.execute({sql:\"UPDATE brainvn_epoch_meta SET generation=?,event_head_hash=?,new_event_count=new_event_count+? WHERE id=1 AND generation=? AND event_head_hash=? RETURNING generation\",args:[g,head,events.length,startGen,startHead]});\n if(!(mu.rows||[]).length)throw new Error(\"COHORT_META_CAS_MISMATCH\");\n await tx.execute({sql:\"UPDATE brainvn_workstreams SET head_generation=?,updated_at=? WHERE id='global'\",args:[g,cohortNow()]});\n\n const byAgent=new Map(results.map(x=>[x.agent_id,x]));\n const outputItems:any[]=[];\n for(const q of queueAttempts){\n const rr:any=byAgent.get(q.agent_id),result=q.kind===\"reg\"?rr.regResult:rr.claimResult;\n const committedGeneration=q.kind===\"reg\"?rr.regGeneration:rr.claimGeneration;\n const committedHead=q.kind===\"reg\"?rr.regHead:rr.claimHead;\n const committedAt=q.kind===\"reg\"?rr.regTs:rr.claimTs;\n const payloadSha=await sha256Text(String(q.payload_json));\n await tx.execute({sql:\"INSERT INTO \"+MUTATION_RECEIPT_TABLE+\"(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\",\n args:[String(q.id),String(q.lease_attempt_id),String(q.lease_instance_id),WORKER,Number(q.transport_lease_generation),Number(authority.epoch),\n q.kind===\"reg\"?\"register-agent\":\"claim\",payloadSha,committedGeneration,committedHead,cohortCanon(result),committedAt]});\n const fq:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? RETURNING id,state\",\n args:[legacyEnvelope(result),String(q.id),WORKER,String(q.lease_instance_id),String(q.lease_attempt_id),Number(q.transport_lease_generation),String(q.op),String(q.payload_json)]});\n if((fq.rows||[]).length!==1)throw new Error(\"COHORT_QUEUE_FINALIZE_CAS_FAILED_\"+String(q.id));\n outputItems.push({id:String(q.id),transport_lease_generation:Number(q.transport_lease_generation),attempt_id:String(q.lease_attempt_id),\n dispatch_ok:true,result,finish:{ok:true,id:String(q.id),state:\"COMPLETE\",path:\"COHORT_ATOMIC_SAME_DB\"},\n cohort_fastpath:{schema:\"COHORT_ADMISSION_FASTPATH_V3R2R1_PRODUCTION_V1\",candidate_sha256:COHORT_ADMISSION_FASTPATH_V3R2R1_CANDIDATE_SHA256,\n pair_count:assignments.length,atomic_same_db:true,serial_pairwise_prefix:true}});\n }\n\n await tx.commit();done=true;\n const postChain:any=await verifyBrainChain(),postGraph:any=await verifyBrainClaimGraph();\n return {kind:\"completed\",items:outputItems,pairs:assignments.length,post_integrity:{chain_ok:postChain?.ok===true,claim_graph_ok:postGraph?.ok===true,\n generation:postChain?.generation,head:postChain?.stored_head},base_generation:startGen,post_generation:g} as const;\n }catch(e){\n if(!done){try{await tx.rollback()}catch{}}\n return {kind:\"not_applicable\",reason:e instanceof Error?e.message:String(e)} as const;\n }\n}\n\nasync function executeJob(job:any,epoch:number){\n const raw=String(job.payload_json);\n const fallbackCommand=brainCommand(raw);\n let command=fallbackCommand;\n let preDispatchGeneration:number|undefined=undefined;\n if(String(job.op)!==\"brain\")return {ok:false,value:{classification:\"VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP\",op:String(job.op)},command,preDispatchGeneration};\n try{\n const gate=await chainCircuitBreaker(raw,String(job.id));\n command=String(gate.command||fallbackCommand||\"\");\n if(!gate.allow)return {ok:false,value:{\n classification:\"VAL_NATIVE_CHAIN_INTEGRITY_CIRCUIT_BREAKER\",\n command:command||\"UNKNOWN\",\n integrity:gate.integrity,\n retry_policy:\"RESTORE_VERIFIED_CHAIN_THEN_SUBMIT_NEW_JOB_ID\",\n canonical_dispatch_performed:false\n },command,preDispatchGeneration};\n if(CHAIN_FAILURE_READ_ONLY.has(command))preDispatchGeneration=await canonicalGeneration();\n const value=await dispatchWithStableMutationRetry(raw,boundTransportContext(job,epoch));\n return {ok:true,value,command,preDispatchGeneration};\n }catch(e){\n return {ok:false,value:{type:e instanceof Error?e.name:\"Error\",detail:e instanceof Error?e.message:String(e)},command,preDispatchGeneration};\n }\n}\nexport async function drain(maxJobs=32){\n const started=new Date().toISOString(),items:any[]=[];\n let runtime_tick:any=null;\n try{runtime_tick=await emitRuntimeTick();}\n catch(e){runtime_tick={ok:false,emitted:false,reason:\"RUNTIME_TICK_WRITE_FAILED\",detail:e instanceof Error?e.message:String(e)};}\n while(items.length=COHORT_ADMISSION_FASTPATH_V3R2R1_MIN_PAIRS*2){\n const cohort:any=await tryCohortAdmissionFastpathV3R2R1(Math.floor(remaining/2));\n if(cohort.kind===\"completed\"){\n items.push(...cohort.items);\n if(cohort.post_integrity?.chain_ok!==true||cohort.post_integrity?.claim_graph_ok!==true){\n return {ok:false,started,finished:new Date().toISOString(),runtime_tick,\n stop:{kind:\"cohort_post_integrity_failed\",post_integrity:cohort.post_integrity},processed:items.length,items};\n }\n continue;\n }\n }\n const l:any=await leaseOne();\n if(l.kind!==\"leased\"){\n const acquisitionFault=l.kind===\"acquisition_failed_no_bound_lease\"||l.kind===\"acquisition_outcome_unknown\";\n return {ok:!acquisitionFault&&l.kind!==\"conflict\"&&l.kind!==\"fenced\",started,finished:new Date().toISOString(),runtime_tick,stop:l,processed:items.length,items};\n }\n const ex=await executeJob(l.job,l.epoch);\n const fin=await finalizeJobExactAttempt(l.job,l.epoch,String(l.mode),String(ex.command||brainCommand(String(l.job.payload_json))),ex.ok,ex.value,ex.preDispatchGeneration);\n items.push({id:l.job.id,transport_lease_generation:l.job.transport_lease_generation,attempt_id:l.job.lease_attempt_id,dispatch_ok:ex.ok,result:ex.value,finish:fin});\n if(!fin.ok)return {ok:false,started,finished:new Date().toISOString(),runtime_tick,stop:fin,processed:items.length,items};\n }\n return {ok:true,started,finished:new Date().toISOString(),runtime_tick,stop:{kind:\"max_jobs\"},processed:items.length,items};\n}\nexport default drain;\n",[],[206,271],["D",1789434295332],[224,225],[206],["D",1789434280321],["D",1789522252250],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_128":318,"_319":320,"_321":322,"_323":25,"_324":25,"_325":25,"_326":59,"_327":-5,"_328":-7,"_329":-7,"_330":63,"_331":25,"_332":25,"_333":-5,"_334":25,"_335":25,"_336":25,"_337":-5},"ENV",{"_289":290,"_291":292,"_293":90,"_294":295,"_296":297,"_298":299,"_300":301,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v28